last executing test programs:

1.310222407s ago: executing program 1 (id=3512):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3, 0x80}, {0x6}]}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000800)=[{0x3, 0x0, {0x1, 0x0, 0x3}, {0x0, 0xf0, 0x3}, 0xfd, 0xfe}, {0x9, 0x0, {0x1, 0x1, 0x2}, {0x0, 0x1, 0x4}, 0x0, 0x1}, {0x1, 0x0, {0x2}, {0x0, 0x1, 0x1}}, {0x3, 0x0, {0x0, 0xf0, 0x2}, {0x0, 0x0, 0x4}, 0xfd, 0x1}], 0x80)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000410000008500000007"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
splice(r2, 0x0, r8, 0x0, 0x80, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = accept4$phonet_pipe(r9, 0x0, 0x0, 0x80800)
read(r2, &(0x7f0000000240)=""/233, 0xe9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendto$rxrpc(r7, &(0x7f0000000440)="10fa07061815e196d5df16a9f0ba3da74ac3bd320b0f7fc5b7df13a2fd6cce47acfcb2d652a2bb7befdcb3c703eb6861c14566004a1ec53c04a25899c98b9cc79898f0d0da967808383cdfb4febcfce810c4100f1bca8d55a130bade8481a0d5bf273b17f716360c7da321281de2e8158defac3d3ffd9fe36ce05dd65a609bb4d226726cb854773a6c4992137af3a0cb22041873865335cb241ce771ab45db8ccb39b9c501ea296790a2134e288081e2a413f111b53aeffd27b6a62ed94161566b1885b5e79c46f6e54fd254c8e62d576ca9456e4aca7d02d28f64ad452d5c8ae5", 0xe1, 0x94, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000700)=<r12=>0x0, &(0x7f0000000740)=0x4)
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, r12}, 0x14)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}})
write(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r13, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)

485.301981ms ago: executing program 1 (id=3516):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r2, 0x4)

434.488264ms ago: executing program 1 (id=3517):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

431.664298ms ago: executing program 1 (id=3518):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffe)

429.941303ms ago: executing program 1 (id=3519):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="92ea5497add1c9fed49d1dcd35fbb5fa10", 0x11)

340.093657ms ago: executing program 1 (id=3520):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000180)={0xa, 0x2, 0x3, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

193.757696ms ago: executing program 0 (id=3531):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000180)="7685", 0x0}, 0x20)

127.560784ms ago: executing program 0 (id=3535):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x90)

123.704674ms ago: executing program 0 (id=3537):
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x9}, &(0x7f0000000380)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x1000000, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7, 0xd, 0x81, 0xa1, 0x3, 0x7, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0xfffffffffffffd50})

68.189766ms ago: executing program 0 (id=3538):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000)
recvmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0)

67.908385ms ago: executing program 2 (id=3539):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002240)=""/115, 0x73}, {&(0x7f00000005c0)=""/172, 0xac}], 0x4}, 0x0)

67.729991ms ago: executing program 2 (id=3540):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x4, 0x0, 0x0)

66.125503ms ago: executing program 0 (id=3541):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
close(r0)

64.083275ms ago: executing program 0 (id=3542):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000003c0)=""/255, 0xff}], 0x2}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500002, 0x4, 0x4, 0x2}, {0xc90a, 0x2127268a, 0x8}, 0x70bd2b, 0x8003507, 0xa, 0x0, 0x6, 0x10}, 0xff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

63.889087ms ago: executing program 2 (id=3543):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)

494.392µs ago: executing program 2 (id=3544):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x74, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x29, 0x39}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0)

334.044µs ago: executing program 2 (id=3545):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x182000, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180))

0s ago: executing program 2 (id=3546):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socket(0xa, 0x40000000002, 0x0)
socket(0x400000000010, 0x3, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x0)
r3 = socket(0x40000000015, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40237' (ED25519) to the list of known hosts.
syzkaller login: [   47.600369][ T5811] cgroup: Unknown subsys name 'net'
[   47.709105][ T5811] cgroup: Unknown subsys name 'cpuset'
[   47.712418][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.171925][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.407951][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.411943][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.415394][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.421044][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.424210][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.479833][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.482951][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.486015][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.489839][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.493122][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.554310][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.558242][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.560910][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.563616][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.567875][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.684293][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   60.696807][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   60.783347][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.786099][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.789294][ T5867] bridge_slave_0: entered allmulticast mode
[   60.792487][ T5867] bridge_slave_0: entered promiscuous mode
[   60.796091][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.800005][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.802833][ T5863] bridge_slave_0: entered allmulticast mode
[   60.805608][ T5863] bridge_slave_0: entered promiscuous mode
[   60.811186][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.814128][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.816669][ T5867] bridge_slave_1: entered allmulticast mode
[   60.820586][ T5867] bridge_slave_1: entered promiscuous mode
[   60.843355][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.846098][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.848850][ T5863] bridge_slave_1: entered allmulticast mode
[   60.851467][ T5863] bridge_slave_1: entered promiscuous mode
[   60.891904][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.896459][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.901500][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.911846][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.940518][ T5867] team0: Port device team_slave_0 added
[   60.943957][ T5863] team0: Port device team_slave_0 added
[   60.947557][ T5867] team0: Port device team_slave_1 added
[   60.950115][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   60.956246][ T5863] team0: Port device team_slave_1 added
[   60.986235][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.989213][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.999291][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.012083][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.014670][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.024909][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.034933][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.038188][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.047692][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.055641][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.058848][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.068843][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.123881][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.126674][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.129870][ T5869] bridge_slave_0: entered allmulticast mode
[   61.132387][ T5869] bridge_slave_0: entered promiscuous mode
[   61.138817][ T5867] hsr_slave_0: entered promiscuous mode
[   61.141737][ T5867] hsr_slave_1: entered promiscuous mode
[   61.144619][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.148054][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.150730][ T5869] bridge_slave_1: entered allmulticast mode
[   61.153914][ T5869] bridge_slave_1: entered promiscuous mode
[   61.177537][ T5863] hsr_slave_0: entered promiscuous mode
[   61.180404][ T5863] hsr_slave_1: entered promiscuous mode
[   61.182977][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   61.185228][ T5863] Cannot create hsr debugfs directory
[   61.212907][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.230924][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.273955][ T5869] team0: Port device team_slave_0 added
[   61.283129][ T5869] team0: Port device team_slave_1 added
[   61.317191][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.320045][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.329010][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.343261][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.345848][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.355761][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.406416][ T5869] hsr_slave_0: entered promiscuous mode
[   61.409930][ T5869] hsr_slave_1: entered promiscuous mode
[   61.412155][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   61.414406][ T5869] Cannot create hsr debugfs directory
[   61.455900][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.463506][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.479467][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.489430][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.521772][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.530658][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.539381][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.548921][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.565055][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.567641][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.570437][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.573301][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.610384][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.613219][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.615978][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.618839][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.623594][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.629325][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.632050][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.634699][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.638234][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.650621][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.655340][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.661075][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.719604][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.742607][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   61.749502][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.763620][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.766362][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.771398][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.774314][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.785781][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   61.805601][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.808195][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.816653][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.824671][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.827392][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.860878][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   61.874606][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.877397][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.903966][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.906829][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.023747][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.061413][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.085687][ T5867] veth0_vlan: entered promiscuous mode
[   62.094320][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.098290][ T5867] veth1_vlan: entered promiscuous mode
[   62.131539][ T5863] veth0_vlan: entered promiscuous mode
[   62.139424][ T5867] veth0_macvtap: entered promiscuous mode
[   62.149048][ T5867] veth1_macvtap: entered promiscuous mode
[   62.162330][ T5863] veth1_vlan: entered promiscuous mode
[   62.169732][ T5869] veth0_vlan: entered promiscuous mode
[   62.174982][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.183272][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.194013][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.197989][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.201911][ T5869] veth1_vlan: entered promiscuous mode
[   62.209014][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.213059][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.245312][ T5863] veth0_macvtap: entered promiscuous mode
[   62.253477][ T5863] veth1_macvtap: entered promiscuous mode
[   62.274411][ T5869] veth0_macvtap: entered promiscuous mode
[   62.276522][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.279176][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.287952][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.296892][ T5869] veth1_macvtap: entered promiscuous mode
[   62.303330][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.314628][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.320373][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.324001][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.331993][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.336342][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.343135][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.351075][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.358790][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.366648][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.388687][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.401970][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.404744][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.414773][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.430521][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.434609][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.474662][ T4007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.482637][ T4007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.507845][ T5872] Bluetooth: hci1: command tx timeout
[   62.508965][ T5236] Bluetooth: hci0: command tx timeout
[   62.512338][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.514724][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.544371][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.550821][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.572092][ T5935] tipc: Started in network mode
[   62.574040][ T5935] tipc: Node identity , cluster identity 4711
[   62.579162][ T5935] tipc: Failed to obtain node identity
[   62.586417][ T5935] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   62.597713][ T5236] Bluetooth: hci2: command tx timeout
[   63.040235][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'.
[   63.043605][ T5976] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   63.154234][ T5984] netlink: 104 bytes leftover after parsing attributes in process `syz.0.35'.
[   63.319968][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.326059][ T5998] netlink: 'syz.0.42': attribute type 12 has an invalid length.
[   63.340044][ T5998] netlink: 'syz.0.42': attribute type 29 has an invalid length.
[   63.343298][ T5998] netlink: 148 bytes leftover after parsing attributes in process `syz.0.42'.
[   63.346916][ T5998] netlink: 59 bytes leftover after parsing attributes in process `syz.0.42'.
[   63.352167][ T5998] netlink: 'syz.0.42': attribute type 12 has an invalid length.
[   63.355243][ T5998] netlink: 'syz.0.42': attribute type 29 has an invalid length.
[   63.359417][ T5998] netlink: 148 bytes leftover after parsing attributes in process `syz.0.42'.
[   63.362834][ T5998] netlink: 59 bytes leftover after parsing attributes in process `syz.0.42'.
[   63.366512][ T5998] Zero length message leads to an empty skb
[   63.439975][ T6006] netlink: 'syz.0.46': attribute type 58 has an invalid length.
[   63.443039][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'.
[   63.782913][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   63.789136][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   64.106287][ T6071] tipc: MTU too low for tipc bearer
[   64.178224][ T6075] syz.2.74 uses obsolete (PF_INET,SOCK_PACKET)
[   64.587472][ T5236] Bluetooth: hci1: command tx timeout
[   64.597598][ T5236] Bluetooth: hci0: command tx timeout
[   64.677438][ T5236] Bluetooth: hci2: command tx timeout
[   65.607379][ T6145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   65.610033][ T6145] IPv6: NLM_F_CREATE should be set when creating new route
[   65.612500][ T6145] IPv6: NLM_F_CREATE should be set when creating new route
[   65.657161][ T6149] netlink: 'syz.2.108': attribute type 26 has an invalid length.
[   65.679034][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   65.683589][ T6143] infiniband syz!: set active
[   65.689177][ T6143] infiniband syz!: added team_slave_0
[   65.732599][ T6143] RDS/IB: syz!: added
[   65.734268][ T6143] smc: adding ib device syz! with port count 1
[   65.736430][ T6143] smc:    ib device syz! port 1 has pnetid 
[   66.157446][ T6176] tipc: Started in network mode
[   66.159630][ T6176] tipc: Node identity 1246a939c67b, cluster identity 4711
[   66.162800][ T6176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.166700][ T6176] syzkaller0: entered promiscuous mode
[   66.171195][ T6176] syzkaller0: entered allmulticast mode
[   66.186701][ T6176] tipc: Resetting bearer <eth:syzkaller0>
[   66.195855][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[   66.206090][ T6175] tipc: Disabling bearer <eth:syzkaller0>
[   66.668392][ T5236] Bluetooth: hci0: command tx timeout
[   66.669050][ T5872] Bluetooth: hci1: command tx timeout
[   66.689022][ T6199] syzkaller0: entered allmulticast mode
[   66.711642][ T6199] syzkaller0 (unregistering): left allmulticast mode
[   66.744930][ T6213] netlink: 'syz.2.131': attribute type 27 has an invalid length.
[   66.757423][ T5872] Bluetooth: hci2: command tx timeout
[   66.762417][ T6213] 8021q: adding VLAN 0 to HW filter on device team0
[   66.766766][ T6213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.774861][ T6214] tipc: Started in network mode
[   66.776866][ T6214] tipc: Node identity a28a1d24e80e, cluster identity 4711
[   66.780978][ T6214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.785657][ T6214] syzkaller0: entered promiscuous mode
[   66.790523][ T6214] syzkaller0: entered allmulticast mode
[   66.818749][ T6214] tipc: Resetting bearer <eth:syzkaller0>
[   66.830758][ T6211] tipc: Resetting bearer <eth:syzkaller0>
[   66.863106][ T6211] tipc: Disabling bearer <eth:syzkaller0>
[   66.871482][ T6218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.880004][ T6218] team_slave_0: entered promiscuous mode
[   66.881769][ T6218] team_slave_1: entered promiscuous mode
[   66.884171][ T6218] macvtap1: entered promiscuous mode
[   66.886037][ T6218] team0: entered promiscuous mode
[   66.888904][ T6218] macvtap1: entered allmulticast mode
[   66.890864][ T6218] team0: entered allmulticast mode
[   66.893812][ T6218] team_slave_0: entered allmulticast mode
[   66.912859][ T6218] team_slave_1: entered allmulticast mode
[   66.915546][ T6218] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   66.923591][ T6218] team0: left allmulticast mode
[   66.925675][ T6218] team_slave_0: left allmulticast mode
[   66.938721][ T6218] team_slave_1: left allmulticast mode
[   66.942828][ T6218] team0: left promiscuous mode
[   66.944957][ T6218] team_slave_0: left promiscuous mode
[   66.947156][ T6218] team_slave_1: left promiscuous mode
[   67.003616][ T6226] syzkaller1: entered promiscuous mode
[   67.005831][ T6226] syzkaller1: entered allmulticast mode
[   67.010956][ T6228] netlink: 'syz.2.140': attribute type 21 has an invalid length.
[   67.084446][ T6236] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   67.088428][ T6236] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   67.182529][ T5925] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.192200][ T5925] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.197692][ T5925] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   67.207062][ T5925] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   67.333808][ T6261] Driver unsupported XDP return value 0 on prog  (id 35) dev N/A, expect packet loss!
[   67.478633][ T6273] warning: `syz.2.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.704255][ T6295] pimreg3: entered allmulticast mode
[   67.970834][ T6314] netlink: 'syz.0.181': attribute type 1 has an invalid length.
[   67.983382][ T6314] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.997714][ T6314] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   68.004628][ T6314] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   68.020033][ T6314] vlan2: entered allmulticast mode
[   68.022205][ T6314] veth1: entered allmulticast mode
[   68.024866][ T6314] veth1: entered promiscuous mode
[   68.027546][ T6314] veth1: left promiscuous mode
[   68.030749][ T6314] bond1: (slave vlan2): making interface the new active one
[   68.033852][ T6314] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   68.041625][ T6314] veth1: entered promiscuous mode
[   68.044225][ T6314] vlan2: entered promiscuous mode
[   68.046533][ T6314] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   68.323516][ T6333] __nla_validate_parse: 4 callbacks suppressed
[   68.323535][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'.
[   68.338875][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'.
[   68.426584][ T6343] geneve2: entered promiscuous mode
[   68.509202][ T6349] bridge_slave_0: left allmulticast mode
[   68.511525][ T6349] bridge_slave_0: left promiscuous mode
[   68.513964][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.519433][ T6349] bridge_slave_1: left allmulticast mode
[   68.521693][ T6349] bridge_slave_1: left promiscuous mode
[   68.524261][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.535803][ T6349] bond0: (slave bond_slave_0): Releasing backup interface
[   68.544686][ T6349] bond0: (slave bond_slave_1): Releasing backup interface
[   68.555945][ T6349] team0: Port device team_slave_0 removed
[   68.566185][ T6349] team0: Port device team_slave_1 removed
[   68.571871][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.581298][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.584745][ T6354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'.
[   68.589697][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.594445][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.618688][ T6349] bond1: (slave wlan0): Releasing active interface
[   68.621334][ T6349] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   68.651932][ T6349] bond1: (slave vlan2): Releasing active interface
[   68.655778][ T6349] vlan2: left promiscuous mode
[   68.661404][ T6349] veth1: left promiscuous mode
[   68.678939][    T9] syz!: Port: 1 Link DOWN
[   68.683368][ T6351] team0: Mode changed to "loadbalance"
[   68.747437][ T5872] Bluetooth: hci1: command tx timeout
[   68.747776][ T5236] Bluetooth: hci0: command tx timeout
[   68.827575][ T5236] Bluetooth: hci2: command tx timeout
[   68.910067][ T6387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.018408][ T6400] netlink: 'syz.1.222': attribute type 1 has an invalid length.
[   69.209222][ T6425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.235'.
[   69.361318][ T6437] ieee802154 phy0 wpan0: encryption failed: -22
[   69.607038][ T6464] xfrm0: entered promiscuous mode
[   69.609099][ T6464] xfrm0: entered allmulticast mode
[   69.947546][ T6495] syzkaller0: entered promiscuous mode
[   69.950057][ T6495] syzkaller0: entered allmulticast mode
[   70.364071][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.277'.
[   70.445120][ T6532] netlink: 'syz.2.280': attribute type 10 has an invalid length.
[   70.455644][ T6532] bridge0: port 3(macsec0) entered blocking state
[   70.458850][ T6532] bridge0: port 3(macsec0) entered disabled state
[   70.461550][ T6532] macsec0: entered allmulticast mode
[   70.463870][ T6532] veth1_macvtap: entered allmulticast mode
[   70.467197][ T6532] macsec0: entered promiscuous mode
[   70.472921][ T6532] bridge0: port 3(macsec0) entered blocking state
[   70.475749][ T6532] bridge0: port 3(macsec0) entered forwarding state
[   70.601167][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'.
[   70.604626][ T6548] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   70.607762][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.645384][ T6550] syzkaller0: entered promiscuous mode
[   70.649308][ T6550] syzkaller0: entered allmulticast mode
[   70.762562][ T6561] tap0: tun_chr_ioctl cmd 1074025677
[   70.764860][ T6561] tap0: linktype set to 805
[   70.905431][ T6581] netlink: 'syz.2.303': attribute type 8 has an invalid length.
[   71.243318][ T6620] syzkaller1: entered promiscuous mode
[   71.245540][ T6620] syzkaller1: entered allmulticast mode
[   71.265843][ T6584] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   71.274314][ T6584] netlink: 224 bytes leftover after parsing attributes in process `syz.1.306'.
[   71.308988][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.311408][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.536893][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[   71.542836][ T6647] dummy0: entered promiscuous mode
[   71.544806][ T6647] macvtap2: entered promiscuous mode
[   71.546676][ T6647] macvtap2: entered allmulticast mode
[   71.549793][ T6647] dummy0: entered allmulticast mode
[   71.615390][ T6652] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.333'.
[   71.757194][ T6665] netlink: 'syz.0.338': attribute type 8 has an invalid length.
[   71.760510][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[   71.766747][ T6665] bond0: entered promiscuous mode
[   71.774717][ T6665] bond0: left promiscuous mode
[   71.904747][ T6678] batadv_slave_1: entered promiscuous mode
[   71.931122][ T6676] batadv_slave_1: left promiscuous mode
[   72.033828][ T6686] netlink: 'syz.0.348': attribute type 4 has an invalid length.
[   72.336004][ T6712] wg1 speed is unknown, defaulting to 1000
[   72.339699][ T6712] wg1 speed is unknown, defaulting to 1000
[   72.343510][ T6712] wg1 speed is unknown, defaulting to 1000
[   72.348590][ T6712] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.356828][ T6712] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   72.372124][ T6712] wg1 speed is unknown, defaulting to 1000
[   72.374655][ T6712] wg1 speed is unknown, defaulting to 1000
[   72.377646][ T6712] wg1 speed is unknown, defaulting to 1000
[   72.742093][ T6754] bridge2: entered promiscuous mode
[   73.281170][ T6796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.285226][ T6796] syzkaller0: entered promiscuous mode
[   73.288379][ T6796] syzkaller0: entered allmulticast mode
[   73.299199][ T6796] tipc: Resetting bearer <eth:syzkaller0>
[   73.304143][ T6795] tipc: Resetting bearer <eth:syzkaller0>
[   73.310792][ T6795] tipc: Disabling bearer <eth:syzkaller0>
[   73.876841][ T6831] __nla_validate_parse: 9 callbacks suppressed
[   73.876852][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[   74.379632][ T6883] netlink: 'syz.2.435': attribute type 10 has an invalid length.
[   74.383234][ T6883] team0: Device dummy0 is up. Set it down before adding it as a team port
[   74.405042][ T6884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.434'.
[   74.465325][ T6892] tipc: Started in network mode
[   74.468258][ T6892] tipc: Node identity 46df9ef4db76, cluster identity 4711
[   74.471353][ T6892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.474999][ T6892] syzkaller0: entered promiscuous mode
[   74.477736][ T6892] syzkaller0: entered allmulticast mode
[   74.487939][ T6892] tipc: Resetting bearer <eth:syzkaller0>
[   74.491665][ T6889] tipc: Resetting bearer <eth:syzkaller0>
[   74.497829][ T6889] tipc: Disabling bearer <eth:syzkaller0>
[   74.523390][ T6896] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   74.532749][ T6896] netlink: 14 bytes leftover after parsing attributes in process `syz.1.441'.
[   74.562577][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.568048][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.572770][ T6896] bond0 (unregistering): Released all slaves
[   74.602953][ T6900] netlink: 'syz.2.443': attribute type 21 has an invalid length.
[   74.606149][ T6900] netlink: 128 bytes leftover after parsing attributes in process `syz.2.443'.
[   74.612819][ T6900] netlink: 'syz.2.443': attribute type 5 has an invalid length.
[   74.615745][ T6900] netlink: 'syz.2.443': attribute type 6 has an invalid length.
[   74.619119][ T6900] netlink: 3 bytes leftover after parsing attributes in process `syz.2.443'.
[   74.680932][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[   75.026955][ T6931] syzkaller1: entered promiscuous mode
[   75.030202][ T6931] syzkaller1: entered allmulticast mode
[   75.037934][ T6934] netlink: 56 bytes leftover after parsing attributes in process `syz.2.458'.
[   75.046083][ T6934] netlink: 56 bytes leftover after parsing attributes in process `syz.2.458'.
[   76.333777][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[   76.341936][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'.
[   76.576834][ T6982] bridge0: port 3(macsec0) entered disabled state
[   76.579435][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.582354][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.663334][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.676508][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.760236][ T6982] veth1_macvtap: left allmulticast mode
[   76.803095][ T6982] macvtap1: left promiscuous mode
[   76.815922][ T6982] macvtap1: left allmulticast mode
[   76.819063][ T6982] dummy0: left allmulticast mode
[   76.821791][ T6982] macvtap2: left promiscuous mode
[   76.826067][ T6982] macvtap2: left allmulticast mode
[   76.841502][    T9] wg1 speed is unknown, defaulting to 1000
[   76.843857][    T9] syz0: Port: 1 Link DOWN
[   76.845642][ T5874] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.854200][ T5874] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.864621][ T5874] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.868693][ T5874] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.921931][ T7004] batadv_slave_0: entered promiscuous mode
[   76.925821][ T7004] batadv_slave_0: left promiscuous mode
[   76.955923][ T5874] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   77.030197][ T7008] Bluetooth: MGMT ver 1.23
[   78.038933][ T7058] wg1 speed is unknown, defaulting to 1000
[   78.127173][ T7063] team0: No ports can be present during mode change
[   78.472135][ T7078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.475870][ T7078] syzkaller0: entered promiscuous mode
[   78.478768][ T7078] syzkaller0: entered allmulticast mode
[   78.485277][ T7078] tipc: Resetting bearer <eth:syzkaller0>
[   78.488672][ T7077] tipc: Resetting bearer <eth:syzkaller0>
[   78.493820][ T7077] tipc: Disabling bearer <eth:syzkaller0>
[   78.938440][ T7107] __nla_validate_parse: 5 callbacks suppressed
[   78.938456][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'.
[   79.367102][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'.
[   79.395290][ T7132] tap0: tun_chr_ioctl cmd 35108
[   79.609480][ T7150] ieee802154 phy0 wpan0: encryption failed: -22
[   79.623553][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'.
[   80.298637][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'.
[   80.394249][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'.
[   80.726463][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'.
[   80.838920][ T7278] wg1 speed is unknown, defaulting to 1000
[   81.048860][ T7282] syzkaller1: entered promiscuous mode
[   81.051204][ T7282] syzkaller1: entered allmulticast mode
[   81.537474][ T7318] veth0_to_bond: entered allmulticast mode
[   81.547788][   T10] cfg80211: failed to load regulatory.db
[   81.595896][ T7323] netlink: 'syz.1.633': attribute type 12 has an invalid length.
[   81.703390][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[   82.001070][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'.
[   82.004248][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.653'.
[   82.008036][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'.
[   82.144325][ T7377] syzkaller1: entered promiscuous mode
[   82.146240][ T7377] syzkaller1: entered allmulticast mode
[   82.526103][ T7401] wg1 speed is unknown, defaulting to 1000
[   82.863526][ T7434] wg1 speed is unknown, defaulting to 1000
[   82.918241][ T7447] syzkaller0: entered promiscuous mode
[   82.920176][ T7447] syzkaller0: entered allmulticast mode
[   83.442382][ T7464] pim6reg1: entered promiscuous mode
[   83.444565][ T7464] pim6reg1: entered allmulticast mode
[   83.640385][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.644354][ T7466] team0: Port device bond0 added
[   84.192150][ T7479] netlink: 'syz.2.701': attribute type 1 has an invalid length.
[   84.263083][ T7487] __nla_validate_parse: 7 callbacks suppressed
[   84.263100][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'.
[   84.274184][ T7489] netlink: 'syz.2.706': attribute type 21 has an invalid length.
[   84.283234][ T7489] netlink: 128 bytes leftover after parsing attributes in process `syz.2.706'.
[   84.286585][ T7489] netlink: 'syz.2.706': attribute type 4 has an invalid length.
[   84.291075][ T7489] netlink: 'syz.2.706': attribute type 3 has an invalid length.
[   84.294273][ T7489] netlink: 3 bytes leftover after parsing attributes in process `syz.2.706'.
[   84.344900][ T7497] unknown channel width for channel at 909000KHz?
[   84.353461][ T7497] unknown channel width for channel at 909000KHz?
[   84.357977][ T7497] unknown channel width for channel at 909000KHz?
[   84.385102][ T7504] tipc: Cannot configure node identity twice
[   84.630322][ T7515] wg1 speed is unknown, defaulting to 1000
[   84.941988][ T7533] netlink: 'syz.0.724': attribute type 3 has an invalid length.
[   86.036814][ T7579] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   86.040420][ T7579] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   86.427417][ T5236] Bluetooth: hci2: command tx timeout
[   86.450614][ T7614] syzkaller1: entered promiscuous mode
[   86.452867][ T7614] syzkaller1: entered allmulticast mode
[   86.554570][ T7626] netlink: 'syz.2.766': attribute type 1 has an invalid length.
[   86.558519][ T7626] netlink: 244 bytes leftover after parsing attributes in process `syz.2.766'.
[   86.562819][ T7624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.566245][ T7624] syzkaller0: entered promiscuous mode
[   86.569105][ T7624] syzkaller0: entered allmulticast mode
[   86.578726][ T7624] tipc: Resetting bearer <eth:syzkaller0>
[   86.582841][ T7623] tipc: Resetting bearer <eth:syzkaller0>
[   86.586607][ T7623] tipc: Disabling bearer <eth:syzkaller0>
[   86.685540][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[   86.875625][ T7654] syzkaller0: entered promiscuous mode
[   86.878398][ T7654] syzkaller0: entered allmulticast mode
[   87.170364][ T7669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.174014][ T7669] syzkaller0: entered promiscuous mode
[   87.176696][ T7669] syzkaller0: entered allmulticast mode
[   87.186903][ T7669] tipc: Resetting bearer <eth:syzkaller0>
[   87.191872][ T7668] tipc: Resetting bearer <eth:syzkaller0>
[   87.203381][ T7668] tipc: Disabling bearer <eth:syzkaller0>
[   87.260786][ T7679] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[   87.263769][ T7679] netlink: 232 bytes leftover after parsing attributes in process `syz.2.788'.
[   87.266828][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'.
[   87.350043][ T7690] netlink: 'syz.1.793': attribute type 10 has an invalid length.
[   88.334943][ T7728] vlan2: entered promiscuous mode
[   88.337119][ T7728] macvtap0: entered promiscuous mode
[   88.384474][ T7729] netlink: 104 bytes leftover after parsing attributes in process `syz.2.809'.
[   88.552171][ T7744] sctp: [Deprecated]: syz.1.815 (pid 7744) Use of int in maxseg socket option.
[   88.552171][ T7744] Use struct sctp_assoc_value instead
[   88.725208][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'.
[   89.641318][ T7844] netlink: 'syz.0.850': attribute type 1 has an invalid length.
[   89.664589][ T7842] netlink: 'syz.2.845': attribute type 1 has an invalid length.
[   89.665836][ T7844] bond2: (slave geneve2): making interface the new active one
[   89.671894][ T7844] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   89.675431][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   89.678662][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   89.682169][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   89.685453][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   89.690411][ T7842] netlink: 224 bytes leftover after parsing attributes in process `syz.2.845'.
[   89.695082][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.850'.
[   89.714257][ T7844] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.974246][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'.
[   90.591640][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'.
[   90.595033][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'.
[   90.601900][ T7932] ip6gretap0: entered promiscuous mode
[   90.604783][ T7932] syz_tun: entered promiscuous mode
[   91.238253][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.241271][ T8002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   91.809734][ T8033] netlink: 'syz.1.935': attribute type 10 has an invalid length.
[   91.812714][ T8033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.935'.
[   91.816114][ T8033] dummy0: entered promiscuous mode
[   91.818916][ T8033] bridge0: port 3(dummy0) entered blocking state
[   91.821270][ T8033] bridge0: port 3(dummy0) entered disabled state
[   91.823594][ T8033] dummy0: entered allmulticast mode
[   91.827672][ T8033] bridge0: port 3(dummy0) entered blocking state
[   91.829984][ T8033] bridge0: port 3(dummy0) entered forwarding state
[   92.018604][ T8039] wg1 speed is unknown, defaulting to 1000
[   92.494376][ T8060] wg1 speed is unknown, defaulting to 1000
[   92.764735][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.952'.
[   92.850319][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'.
[   92.976544][ T8091] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.984505][ T8091] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.041351][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'.
[   93.047676][ T8097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.191992][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'.
[   93.198824][ T8113] batman_adv: batadv0: Adding interface: ipvlan2
[   93.201053][ T8113] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.209929][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.213199][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.216195][ T8113] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   93.458424][ T8133] ip6gre1: entered promiscuous mode
[   93.520627][ T8134] dvmrp8: entered allmulticast mode
[   93.542713][ T8132] dvmrp8: left allmulticast mode
[   93.768173][ T8148] netlink: 'syz.1.986': attribute type 12 has an invalid length.
[   94.822808][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.835875][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   94.840029][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.852451][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   94.855963][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.861942][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   94.865410][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.869529][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   94.985353][ T8195] __nla_validate_parse: 2 callbacks suppressed
[   94.985370][ T8195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'.
[   95.085509][ T8205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.091373][ T8205] syzkaller0: entered promiscuous mode
[   95.093569][ T8205] syzkaller0: entered allmulticast mode
[   95.108228][ T8205] tipc: Resetting bearer <eth:syzkaller0>
[   95.112360][ T8204] tipc: Resetting bearer <eth:syzkaller0>
[   95.120889][ T8204] tipc: Disabling bearer <eth:syzkaller0>
[   95.334728][ T8227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1023'.
[   95.352685][ T8227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1023'.
[   95.593069][ T8249] wg1 speed is unknown, defaulting to 1000
[   95.700979][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'.
[   95.737947][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'.
[   95.741113][ T8249] netlink: 'syz.2.1034': attribute type 13 has an invalid length.
[   95.743661][ T8249] netlink: 'syz.2.1034': attribute type 17 has an invalid length.
[   95.749227][ T8249] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   95.850925][ T8288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.854249][ T8288] syzkaller0: entered promiscuous mode
[   95.856819][ T8288] syzkaller0: entered allmulticast mode
[   95.868190][ T8288] tipc: Resetting bearer <eth:syzkaller0>
[   95.873522][ T8287] tipc: Resetting bearer <eth:syzkaller0>
[   95.879371][ T8287] tipc: Disabling bearer <eth:syzkaller0>
[   96.105972][ T8318] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[   96.109864][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'.
[   96.155905][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'.
[   96.630673][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'.
[   96.632237][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'.
[   96.634263][ T8361] netlink: 'syz.2.1082': attribute type 2 has an invalid length.
[   96.664633][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1079'.
[   96.809996][ T8378] netlink: 'syz.1.1089': attribute type 10 has an invalid length.
[   96.814989][ T8378] bridge0: port 3(dummy0) entered disabled state
[   96.818037][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.821207][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.539827][ T8368] syz.2.1085 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   97.543772][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.2.1085 Not tainted syzkaller #0 PREEMPT(full) 
[   97.543784][ T8368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.543790][ T8368] Call Trace:
[   97.543804][ T8368]  <TASK>
[   97.543808][ T8368]  dump_stack_lvl+0x189/0x250
[   97.543824][ T8368]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.543832][ T8368]  ? __pfx__printk+0x10/0x10
[   97.543844][ T8368]  ? rcu_is_watching+0x15/0xb0
[   97.543852][ T8368]  dump_header+0xd3/0x480
[   97.543863][ T8368]  oom_kill_process+0x387/0x920
[   97.543872][ T8368]  out_of_memory+0xf09/0x12a0
[   97.543880][ T8368]  ? mem_cgroup_iter+0x3b/0x460
[   97.543888][ T8368]  ? __pfx_out_of_memory+0x10/0x10
[   97.543896][ T8368]  mem_cgroup_out_of_memory+0x145/0x240
[   97.543904][ T8368]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   97.543919][ T8368]  ? _raw_spin_unlock+0x28/0x50
[   97.543929][ T8368]  ? memcg1_oom_prepare+0x37f/0x450
[   97.543939][ T8368]  try_charge_memcg+0xdff/0x1290
[   97.543948][ T8368]  ? rcu_is_watching+0x15/0xb0
[   97.543957][ T8368]  ? __pfx_try_charge_memcg+0x10/0x10
[   97.543966][ T8368]  ? rcu_needs_cpu+0xa1/0xb0
[   97.543973][ T8368]  ? xa_load+0x60/0x210
[   97.543980][ T8368]  ? rcu_is_watching+0x15/0xb0
[   97.543987][ T8368]  ? rcu_is_watching+0x15/0xb0
[   97.543993][ T8368]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   97.544003][ T8368]  charge_memcg+0x9f/0x180
[   97.544012][ T8368]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   97.544021][ T8368]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   97.544032][ T8368]  __read_swap_cache_async+0x28c/0x510
[   97.544042][ T8368]  swap_cluster_readahead+0x305/0x5f0
[   97.544051][ T8368]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   97.544059][ T8368]  ? rcu_is_watching+0x15/0xb0
[   97.544065][ T8368]  ? filemap_get_entry+0xad/0x2f0
[   97.544073][ T8368]  ? get_vma_policy+0x27c/0x3c0
[   97.544083][ T8368]  swapin_readahead+0x17d/0xb50
[   97.544090][ T8368]  ? __pfx_filemap_get_entry+0x10/0x10
[   97.544098][ T8368]  ? get_swap_device_info+0x1c/0x2b0
[   97.544105][ T8368]  ? rcu_is_watching+0x15/0xb0
[   97.544112][ T8368]  ? __pfx_swapin_readahead+0x10/0x10
[   97.544119][ T8368]  ? __filemap_get_folio+0x9a6/0xaf0
[   97.544128][ T8368]  ? swap_cache_get_folio+0xae/0x3b0
[   97.544136][ T8368]  do_swap_page+0x525/0x5ac0
[   97.544144][ T8368]  ? free_swap_cache+0x109/0x300
[   97.544151][ T8368]  ? do_wp_page+0x22eb/0x5800
[   97.544162][ T8368]  ? ___pte_offset_map+0x29/0x250
[   97.544173][ T8368]  ? lock_acquire+0x5f/0x360
[   97.544184][ T8368]  ? do_swap_page+0x184/0x5ac0
[   97.544191][ T8368]  ? __pfx_do_swap_page+0x10/0x10
[   97.544199][ T8368]  ? __pfx_do_wp_page+0x10/0x10
[   97.544207][ T8368]  ? do_raw_spin_lock+0x121/0x290
[   97.544215][ T8368]  ? __pfx_default_wake_function+0x10/0x10
[   97.544226][ T8368]  ? ___pte_offset_map+0x45/0x250
[   97.544234][ T8368]  ? ___pte_offset_map+0x1cf/0x250
[   97.544243][ T8368]  ? pte_offset_map_rw_nolock+0xea/0x160
[   97.544252][ T8368]  __handle_mm_fault+0xe55/0x5440
[   97.544263][ T8368]  ? __pfx___handle_mm_fault+0x10/0x10
[   97.544272][ T8368]  ? lock_release+0x4b/0x3e0
[   97.544284][ T8368]  ? __pfx___might_resched+0x10/0x10
[   97.544290][ T8368]  ? lock_vma_under_rcu+0xdf/0x3d0
[   97.544300][ T8368]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[   97.544311][ T8368]  handle_mm_fault+0x40a/0x8e0
[   97.544322][ T8368]  do_user_addr_fault+0xa81/0x1390
[   97.544335][ T8368]  ? rcu_is_watching+0x15/0xb0
[   97.544341][ T8368]  ? trace_page_fault_user+0x84/0x1e0
[   97.544352][ T8368]  exc_page_fault+0x76/0xf0
[   97.544362][ T8368]  asm_exc_page_fault+0x26/0x30
[   97.544370][ T8368] RIP: 0033:0x7fcb03060f35
[   97.544379][ T8368] Code: 24 10 48 89 74 24 28 0f 85 c8 09 00 00 80 3d c6 47 e8 00 00 48 89 f5 41 89 d4 41 89 cd c6 05 d1 10 35 00 01 0f 85 23 04 00 00 <80> 3d 94 47 e8 00 00 0f 85 ee 03 00 00 80 3d 8a 47 e8 00 00 75 3d
[   97.544386][ T8368] RSP: 002b:00007ffc3e6bfa20 EFLAGS: 00010246
[   97.544394][ T8368] RAX: 00007fcb033b5fa0 RBX: 00007fcb033b5fa0 RCX: 0000000000000026
[   97.544400][ T8368] RDX: 0000000000000001 RSI: 00007fcb033b6038 RDI: 0000000000000000
[   97.544404][ T8368] RBP: 00007fcb033b6038 R08: 0000000000000001 R09: 0000000000000026
[   97.544409][ T8368] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000000001
[   97.544413][ T8368] R13: 0000000000000026 R14: ffffffffffffffff R15: 00007ffc3e6bfba0
[   97.544421][ T8368]  </TASK>
[   97.544425][ T8368] memory: usage 307200kB, limit 307200kB, failcnt 195
[   97.713351][ T8368] memory+swap: usage 303900kB, limit 9007199254740988kB, failcnt 0
[   97.716206][ T8368] kmem: usage 303612kB, limit 9007199254740988kB, failcnt 0
[   97.737302][ T8368] Memory cgroup stats for /syz2:
[   97.737390][ T8368] cache 0
[   97.740118][ T8368] rss 0
[   97.753441][ T8368] rss_huge 0
[   97.754696][ T8368] shmem 0
[   97.755706][ T8368] mapped_file 0
[   97.756828][ T8368] dirty 0
[   97.772659][ T8368] writeback 0
[   97.773762][ T8368] workingset_refault_anon 3
[   97.775417][ T8368] workingset_refault_file 0
[   97.777100][ T8368] swap 81920
[   97.827365][ T8368] swapcached 28672
[   97.828954][ T8368] pgpgin 31477
[   97.830352][ T8368] pgpgout 31470
[   97.831766][ T8368] pgfault 64519
[   97.833116][ T8368] pgmajfault 4
[   97.834443][ T8368] inactive_anon 4096
[   97.835966][ T8368] active_anon 24576
[   97.848243][ T8368] inactive_file 0
[   97.857392][ T8368] active_file 0
[   97.858814][ T8368] unevictable 0
[   97.860221][ T8368] hierarchical_memory_limit 314572800
[   97.862346][ T8368] hierarchical_memsw_limit 9223372036854771712
[   97.864751][ T8368] total_cache 0
[   97.866139][ T8368] total_rss 0
[   97.882785][ T8368] total_rss_huge 0
[   97.885570][ T8368] total_shmem 0
[   97.886980][ T8368] total_mapped_file 0
[   97.888886][ T8368] total_dirty 0
[   97.890297][ T8368] total_writeback 0
[   97.891790][ T8368] total_workingset_refault_anon 3
[   97.896415][ T8368] total_workingset_refault_file 0
[   97.899920][ T8368] total_swap 81920
[   97.901741][ T8368] total_swapcached 28672
[   97.903363][ T8368] total_pgpgin 31477
[   97.904906][ T8368] total_pgpgout 31470
[   97.906383][ T8368] total_pgfault 64519
[   97.910376][ T8368] total_pgmajfault 4
[   97.912272][ T8368] total_inactive_anon 4096
[   97.914349][ T8368] total_active_anon 24576
[   97.925576][ T8368] total_inactive_file 0
[   97.927110][ T8368] total_active_file 0
[   97.945389][ T8368] total_unevictable 0
[   97.947031][ T8368] anon_cost 0
[   97.958599][ T8368] file_cost 0
[   97.960047][ T8368] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1085,pid=8368,uid=0
[   97.965945][ T8368] Memory cgroup out of memory: Killed process 8368 (syz.2.1085) total-vm:103804kB, anon-rss:948kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[   98.100962][ T8463] netlink: 'syz.1.1129': attribute type 3 has an invalid length.
[   99.979107][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[   99.982733][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[   99.985710][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[   99.990336][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[   99.993521][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[   99.996806][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[  100.000200][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[  100.003181][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[  100.006271][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[  100.027533][ T8566] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[  100.073435][ T8572] __nla_validate_parse: 9 callbacks suppressed
[  100.073480][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'.
[  100.284517][ T8598] tipc: New replicast peer: 0.0.0.0
[  100.286688][ T8598] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.289646][ T8598] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  100.879892][ T8651] pimreg: entered allmulticast mode
[  100.884303][ T8651] pimreg: left allmulticast mode
[  101.154121][ T8663] dummy0: left allmulticast mode
[  101.155926][ T8663] bridge0: port 3(dummy0) entered disabled state
[  101.161067][ T8663] bridge_slave_0: left allmulticast mode
[  101.162906][ T8663] bridge_slave_0: left promiscuous mode
[  101.164740][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.168632][ T8663] bridge_slave_1: left allmulticast mode
[  101.170612][ T8663] bridge_slave_1: left promiscuous mode
[  101.172523][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.178751][ T8663] team0: Port device team_slave_0 removed
[  101.182749][ T8663] team0: Port device team_slave_1 removed
[  101.185127][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.188480][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.191680][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.193998][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.204251][ T8663] team0: Port device bond0 removed
[  101.206485][ T8663] batman_adv: batadv0: Removing interface: ipvlan2
[  101.240916][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1223'.
[  101.397407][  T792] tipc: Node number set to 3560810809
[  101.540121][ T8677] vxcan1 speed is unknown, defaulting to 1000
[  101.543108][ T8677] vxcan1 speed is unknown, defaulting to 1000
[  101.546089][ T8677] vxcan1 speed is unknown, defaulting to 1000
[  101.629655][ T8677] infiniband syz2: set down
[  101.631715][  T792] vxcan1 speed is unknown, defaulting to 1000
[  101.634418][ T8677] infiniband syz2: added vxcan1
[  101.656956][ T8677] RDS/IB: syz2: added
[  101.659118][ T8677] smc: adding ib device syz2 with port count 1
[  101.661729][ T8677] smc:    ib device syz2 port 1 has pnetid 
[  101.664225][  T792] vxcan1 speed is unknown, defaulting to 1000
[  101.667682][ T8677] vxcan1 speed is unknown, defaulting to 1000
[  101.746213][ T8677] vxcan1 speed is unknown, defaulting to 1000
[  101.822988][ T8677] vxcan1 speed is unknown, defaulting to 1000
[  102.464154][ T8719] wg1 speed is unknown, defaulting to 1000
[  102.466781][ T8719] vxcan1 speed is unknown, defaulting to 1000
[  103.210880][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  103.256749][ T8764] syz.2.1264: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  103.262720][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.2.1264 Not tainted syzkaller #0 PREEMPT(full) 
[  103.262739][ T8764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.262749][ T8764] Call Trace:
[  103.262755][ T8764]  <TASK>
[  103.262762][ T8764]  dump_stack_lvl+0x189/0x250
[  103.262786][ T8764]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.262803][ T8764]  ? __pfx__printk+0x10/0x10
[  103.262830][ T8764]  ? lock_release+0x4b/0x3e0
[  103.262846][ T8764]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.262856][ T8764]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  103.262866][ T8764]  warn_alloc+0x214/0x310
[  103.262878][ T8764]  ? stack_depot_save_flags+0x40/0x860
[  103.262890][ T8764]  ? __pfx_warn_alloc+0x10/0x10
[  103.262901][ T8764]  ? kasan_save_track+0x4f/0x80
[  103.262911][ T8764]  ? xskq_create+0x56/0x170
[  103.262921][ T8764]  ? xsk_init_queue+0xb0/0x110
[  103.262930][ T8764]  ? xsk_setsockopt+0x4dc/0x8d0
[  103.262939][ T8764]  ? do_sock_setsockopt+0x17c/0x1b0
[  103.262946][ T8764]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  103.262954][ T8764]  ? do_syscall_64+0xfa/0x3b0
[  103.262961][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.262970][ T8764]  __vmalloc_node_range_noprof+0x125/0x12f0
[  103.262986][ T8764]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  103.262997][ T8764]  ? xsk_setsockopt+0x462/0x8d0
[  103.263007][ T8764]  ? __kasan_kmalloc+0x93/0xb0
[  103.263017][ T8764]  vmalloc_user_noprof+0xad/0xf0
[  103.263028][ T8764]  ? xskq_create+0xbf/0x170
[  103.263039][ T8764]  xskq_create+0xbf/0x170
[  103.263051][ T8764]  xsk_init_queue+0xb0/0x110
[  103.263061][ T8764]  xsk_setsockopt+0x4dc/0x8d0
[  103.263071][ T8764]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.263080][ T8764]  ? __pfx_aa_sk_perm+0x10/0x10
[  103.263091][ T8764]  ? lock_release+0x4b/0x3e0
[  103.263102][ T8764]  ? aa_sock_opt_perm+0xff/0x1b0
[  103.263109][ T8764]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  103.263118][ T8764]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.263127][ T8764]  do_sock_setsockopt+0x17c/0x1b0
[  103.263136][ T8764]  __x64_sys_setsockopt+0x13f/0x1b0
[  103.263144][ T8764]  do_syscall_64+0xfa/0x3b0
[  103.263150][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.263157][ T8764]  ? exc_page_fault+0x9f/0xf0
[  103.263168][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.263176][ T8764] RIP: 0033:0x7fcb0318ebe9
[  103.263184][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.263190][ T8764] RSP: 002b:00007fcb03f30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.263199][ T8764] RAX: ffffffffffffffda RBX: 00007fcb033b5fa0 RCX: 00007fcb0318ebe9
[  103.263206][ T8764] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  103.263211][ T8764] RBP: 00007fcb03211e19 R08: 0000000000000004 R09: 0000000000000000
[  103.263245][ T8764] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.263250][ T8764] R13: 00007fcb033b6038 R14: 00007fcb033b5fa0 R15: 00007ffc3e6bf928
[  103.263259][ T8764]  </TASK>
[  103.263264][ T8764] Mem-Info:
[  103.371963][ T8764] active_anon:6024 inactive_anon:0 isolated_anon:0
[  103.371963][ T8764]  active_file:1433 inactive_file:38181 isolated_file:0
[  103.371963][ T8764]  unevictable:1768 dirty:322 writeback:0
[  103.371963][ T8764]  slab_reclaimable:9931 slab_unreclaimable:56040
[  103.371963][ T8764]  mapped:20231 shmem:2459 pagetables:959
[  103.371963][ T8764]  sec_pagetables:0 bounce:0
[  103.371963][ T8764]  kernel_misc_reclaimable:0
[  103.371963][ T8764]  free:293070 free_pcp:20350 free_cma:0
[  103.389922][ T8764] Node 0 active_anon:13228kB inactive_anon:0kB active_file:3276kB inactive_file:20440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43704kB dirty:636kB writeback:0kB shmem:5084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7056kB pagetables:1988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.401701][ T8764] Node 1 active_anon:11004kB inactive_anon:0kB active_file:2456kB inactive_file:132284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37220kB dirty:652kB writeback:0kB shmem:4752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4728kB pagetables:1848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.413994][ T8764] Node 0 DMA free:14980kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:0kB free_cma:0kB
[  103.424834][ T8764] lowmem_reserve[]: 0 811 811 811 811
[  103.426523][ T8764] Node 0 DMA32 free:374308kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13500kB inactive_anon:0kB active_file:3276kB inactive_file:20440kB unevictable:3536kB writepending:636kB present:1556484kB managed:830916kB mlocked:0kB bounce:0kB free_pcp:39336kB local_pcp:20396kB free_cma:0kB
[  103.437392][ T8764] lowmem_reserve[]: 0 0 0 0 0
[  103.439200][ T8764] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.450529][ T8764] lowmem_reserve[]: 0 0 854 854 854
[  103.452232][ T8764] Node 1 Normal free:323628kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11004kB inactive_anon:0kB active_file:2456kB inactive_file:132284kB unevictable:3536kB writepending:652kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41976kB local_pcp:27232kB free_cma:0kB
[  103.464015][ T8764] lowmem_reserve[]: 0 0 0 0 0
[  103.465859][ T8764] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (U) = 14980kB
[  103.471308][ T8764] Node 0 DMA32: 1101*4kB (U) 626*8kB (UME) 1*16kB (E) 300*32kB (UM) 125*64kB (UME) 95*128kB (UM) 47*256kB (UM) 43*512kB (UME) 40*1024kB (UME) 19*2048kB (UME) 54*4096kB (UM) = 374292kB
[  103.479286][ T8764] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  103.484529][ T8764] Node 1 Normal: 707*4kB (UM) 340*8kB (UME) 251*16kB (UME) 356*32kB (UME) 52*64kB (UM) 43*128kB (UM) 18*256kB (UME) 7*512kB (UME) 7*1024kB (UME) 4*2048kB (UME) 66*4096kB (M) = 323676kB
[  103.490735][ T8764] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.493598][ T8764] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.496510][ T8764] 42081 total pagecache pages
[  103.498373][ T8764] 5 pages in swap cache
[  103.499683][ T8764] Free swap  = 124976kB
[  103.500966][ T8764] Total swap = 124996kB
[  103.502232][ T8764] 786301 pages RAM
[  103.503415][ T8764] 0 pages HighMem/MovableOnly
[  103.504888][ T8764] 241340 pages reserved
[  103.506235][ T8764] 0 pages cma reserved
[  103.524813][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'.
[  104.087068][ T5891] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  104.909411][ T8813] syz.2.1283 uses old SIOCAX25GETINFO
[  104.992131][ T8822] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  105.339925][ T8861] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1304'.
[  105.958120][ T8915] validate_nla: 20 callbacks suppressed
[  105.958144][ T8915] netlink: 'syz.2.1329': attribute type 11 has an invalid length.
[  106.219828][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'.
[  106.417068][ T8944] netlink: 'syz.0.1342': attribute type 10 has an invalid length.
[  106.423262][ T8944] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  106.428141][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'.
[  106.435589][ T8944] bond0: (slave bridge0): Releasing backup interface
[  106.702555][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'.
[  106.706296][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'.
[  106.745483][ T8967] syzkaller1: entered promiscuous mode
[  106.748131][ T8967] syzkaller1: entered allmulticast mode
[  106.873516][ T8975] netlink: 'syz.1.1355': attribute type 2 has an invalid length.
[  107.316663][ T9014] netlink: 'syz.0.1374': attribute type 8 has an invalid length.
[  107.431303][ T9027] netlink: 'syz.2.1381': attribute type 3 has an invalid length.
[  107.459116][ T9029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1382'.
[  107.889336][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'.
[  107.900497][  T146] smc: removing ib device syz2
[  108.018497][ T9078] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1405'.
[  108.249094][ T9100] lo speed is unknown, defaulting to 1000
[  108.251472][ T9100] lo speed is unknown, defaulting to 1000
[  108.254077][ T9100] lo speed is unknown, defaulting to 1000
[  108.272331][ T9100] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  108.298826][ T9100] lo speed is unknown, defaulting to 1000
[  108.301768][ T9100] lo speed is unknown, defaulting to 1000
[  108.314954][ T9100] lo speed is unknown, defaulting to 1000
[  108.419009][ T9114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1422'.
[  108.960637][ T9164] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1446'.
[  110.232465][ T9306] wg1 speed is unknown, defaulting to 1000
[  110.235328][ T9306] lo speed is unknown, defaulting to 1000
[  110.263619][ T9317] netlink: 'syz.1.1469': attribute type 2 has an invalid length.
[  110.442913][ T9327] __nla_validate_parse: 5 callbacks suppressed
[  110.442931][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'.
[  110.511251][ T9329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1478'.
[  110.541992][ T9331] : renamed from wg2
[  110.552780][ T9330] delete_channel: no stack
[  111.454880][ T9382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.485551][ T9382] syzkaller0: entered promiscuous mode
[  111.488344][ T9382] syzkaller0: entered allmulticast mode
[  111.491197][ T9382] tipc: Resetting bearer <eth:syzkaller0>
[  111.505482][ T9381] tipc: Resetting bearer <eth:syzkaller0>
[  111.545225][ T9381] tipc: Disabling bearer <eth:syzkaller0>
[  111.765812][ T9402] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  111.769204][ T9402] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  111.941993][ T9407] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1513'.
[  112.164108][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1515'.
[  112.192808][ T9414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.195708][ T9414] syzkaller0: entered promiscuous mode
[  112.200392][ T9414] syzkaller0: entered allmulticast mode
[  112.208020][ T9414] tipc: Resetting bearer <eth:syzkaller0>
[  112.211006][ T9413] tipc: Resetting bearer <eth:syzkaller0>
[  112.215169][ T9413] tipc: Disabling bearer <eth:syzkaller0>
[  112.942831][ T9447] block nbd1: NBD_DISCONNECT
[  113.116046][ T9466] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  113.305266][ T9491] netlink: 'syz.2.1554': attribute type 5 has an invalid length.
[  113.309713][ T5810] IPVS: starting estimator thread 0...
[  113.390280][ T9504] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  113.397516][ T9492] IPVS: using max 56 ests per chain, 134400 per kthread
[  113.652816][ T9520] wg1 speed is unknown, defaulting to 1000
[  113.658625][ T9520] lo speed is unknown, defaulting to 1000
[  113.814221][ T9533] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  113.827114][ T9520] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1568'.
[  113.982900][ T9551] netlink: 'syz.1.1578': attribute type 10 has an invalid length.
[  113.986157][ T9550] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  113.993498][ T9551] team0: Device veth0_macvtap failed to register rx_handler
[  114.110097][ T9557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.112797][ T9557] syzkaller0: entered promiscuous mode
[  114.117656][ T9557] syzkaller0: entered allmulticast mode
[  114.124462][ T9557] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  114.130499][ T9557] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  114.139763][ T9560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.141031][ T9557] tipc: Resetting bearer <eth:syzkaller0>
[  114.161331][ T9556] tipc: Resetting bearer <eth:syzkaller0>
[  114.173855][ T9556] tipc: Disabling bearer <eth:syzkaller0>
[  114.359065][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'.
[  115.649464][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'.
[  115.812756][ T9702] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  116.176465][ T9735] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1655'.
[  116.183141][ T9735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1655'.
[  116.274745][ T9744] netlink: 'syz.1.1660': attribute type 3 has an invalid length.
[  116.344307][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'.
[  116.547836][ T9755] nbd0: detected capacity change from 0 to 127
[  116.555613][ T9760] block nbd0: Receive control failed (result -104)
[  116.557891][   T56] block nbd0: Receive control failed (result -32)
[  116.585181][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'.
[  116.890159][ T9782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.990809][ T9792] syz_tun: entered allmulticast mode
[  116.993801][ T9791] syz_tun: left allmulticast mode
[  117.081752][ T9805] netlink: 'syz.1.1687': attribute type 3 has an invalid length.
[  117.084479][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'.
[  117.197168][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  117.261932][ T9825] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  117.269957][ T9825] syzkaller0: entered promiscuous mode
[  117.272075][ T9825] syzkaller0: entered allmulticast mode
[  117.958517][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1695'.
[  117.979841][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'.
[  118.018642][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  118.274902][ T9863] sctp: [Deprecated]: syz.1.1712 (pid 9863) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.274902][ T9863] Use struct sctp_sack_info instead
[  118.311163][ T9868] syzkaller1: entered promiscuous mode
[  118.313144][ T9868] syzkaller1: entered allmulticast mode
[  118.366211][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'.
[  118.500340][ T9891] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  118.503296][ T9891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.751196][ T9903] wg1 speed is unknown, defaulting to 1000
[  118.753509][ T9903] lo speed is unknown, defaulting to 1000
[  118.778034][ T9919] netlink: 'syz.2.1736': attribute type 11 has an invalid length.
[  118.973930][ T9936] netlink: 'syz.1.1741': attribute type 23 has an invalid length.
[  119.458784][ T9945] wg1 speed is unknown, defaulting to 1000
[  119.461353][ T9945] lo speed is unknown, defaulting to 1000
[  119.479171][ T9974] sock: sock_set_timeout: `syz.1.1750' (pid 9974) tries to set negative timeout
[  119.561687][ T9973] syzkaller1: entered promiscuous mode
[  119.563458][ T9973] syzkaller1: entered allmulticast mode
[  119.832686][ T9996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.838517][ T5912] IPVS: starting estimator thread 0...
[  119.841353][ T9996] tipc: Failed to remove unknown binding: 66,1,1/3560810809:1601833973/1601833975
[  119.846865][ T9996] tipc: Failed to remove unknown binding: 66,1,1/3560810809:1601833973/1601833975
[  119.851063][ T9996] tipc: Failed to remove unknown binding: 66,1,1/3560810809:1601833973/1601833975
[  119.937788][ T9999] IPVS: using max 57 ests per chain, 136800 per kthread
[  120.226908][T10033] netlink: del zone limit has 8 unknown bytes
[  120.288549][T10037] batadv_slave_1: entered promiscuous mode
[  120.291575][T10037] batadv_slave_1: left promiscuous mode
[  120.911570][T10097] lo speed is unknown, defaulting to 1000
[  120.913896][T10097] lo speed is unknown, defaulting to 1000
[  120.916454][T10097] lo speed is unknown, defaulting to 1000
[  120.941820][T10097] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.956664][T10097] lo speed is unknown, defaulting to 1000
[  120.964643][T10097] lo speed is unknown, defaulting to 1000
[  120.981871][T10097] lo speed is unknown, defaulting to 1000
[  120.993745][T10106] netlink: 'syz.2.1802': attribute type 4 has an invalid length.
[  121.004902][T10097] smc: removing ib device syz!
[  121.520815][T10137] __nla_validate_parse: 6 callbacks suppressed
[  121.520832][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'.
[  121.688024][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'.
[  121.691666][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'.
[  121.695186][T10159] netlink: 'syz.1.1830': attribute type 18 has an invalid length.
[  122.041080][ T5872] Bluetooth: hci2: command 0x0405 tx timeout
[  122.406815][T10222] netlink: 'syz.2.1858': attribute type 2 has an invalid length.
[  122.466015][T10228] netlink: 'syz.1.1859': attribute type 10 has an invalid length.
[  122.496423][T10228] team0: Device veth0_vlan failed to register rx_handler
[  122.606672][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'.
[  122.704984][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1872'.
[  122.709400][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1872'.
[  122.716025][T10252] erspan0: entered promiscuous mode
[  122.719733][T10252] gretap0: entered promiscuous mode
[  122.722592][T10252] debugfs: 'hsr1' already exists in 'hsr'
[  122.724972][T10252] Cannot create hsr debugfs directory
[  122.766557][T10255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.796609][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'.
[  122.846632][T10265] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1878'.
[  122.850171][T10265] .70: renamed from hsr0
[  122.856045][T10265] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.866611][T10265] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.871754][T10265] .70: entered allmulticast mode
[  122.873512][T10265] hsr_slave_0: entered allmulticast mode
[  122.875623][T10265] hsr_slave_1: entered allmulticast mode
[  122.885441][T10265] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  123.293453][T10318] ip6erspan0: entered allmulticast mode
[  123.409086][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1909'.
[  123.412057][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1909'.
[  123.541323][T10334] wg1 speed is unknown, defaulting to 1000
[  123.543854][T10337] veth1: mtu greater than device maximum
[  123.554425][T10334] lo speed is unknown, defaulting to 1000
[  123.557978][T10334] lo speed is unknown, defaulting to 1000
[  123.916046][T10363] wg1 speed is unknown, defaulting to 1000
[  123.919489][T10363] lo speed is unknown, defaulting to 1000
[  123.922497][T10363] lo speed is unknown, defaulting to 1000
[  124.354817][T10374] netlink: 'syz.2.1926': attribute type 1 has an invalid length.
[  124.830020][T10407] netlink: 'syz.2.1941': attribute type 21 has an invalid length.
[  124.984050][T10416] netlink: 'syz.2.1943': attribute type 6 has an invalid length.
[  125.094585][T10426] batman_adv: batadv0: Adding interface: dummy0
[  125.099355][T10426] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.117382][T10426] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  125.285442][T10446] netlink: 'syz.1.1957': attribute type 1 has an invalid length.
[  125.305329][T10447] vlan2: entered promiscuous mode
[  125.307000][T10447] bond0: entered promiscuous mode
[  125.311018][T10447] bond_slave_0: entered promiscuous mode
[  125.313343][T10447] bond_slave_1: entered promiscuous mode
[  125.353534][T10446] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.370101][T10453] bond1: (slave veth7): Enslaving as an active interface with a down link
[  125.409495][T10446] gretap1: entered promiscuous mode
[  125.414012][T10446] bond1: (slave gretap1): making interface the new active one
[  125.420019][T10446] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  125.435074][T10446] macvlan0: entered promiscuous mode
[  125.436935][T10446] macvlan0: entered allmulticast mode
[  125.440147][T10446] bond1: entered promiscuous mode
[  125.441966][T10446] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  125.445028][T10446] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  125.451880][T10446] bond1: left promiscuous mode
[  125.580683][T10479] netlink: 'syz.2.1973': attribute type 10 has an invalid length.
[  125.585814][T10479] syz_tun: entered promiscuous mode
[  125.599822][T10479] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  126.621417][T10601] __nla_validate_parse: 9 callbacks suppressed
[  126.621433][T10601] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2030'.
[  126.721562][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2039'.
[  126.824454][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'.
[  126.828348][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2045'.
[  126.886314][T10640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2049'.
[  126.956065][T10651] bond0: entered promiscuous mode
[  126.959834][T10651] batadv0: entered promiscuous mode
[  126.962469][T10651] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  126.966267][T10651] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  126.981333][T10651] hsr2: entered allmulticast mode
[  126.987587][T10651] bond0: entered allmulticast mode
[  126.989445][T10651] batadv0: entered allmulticast mode
[  126.995001][T10651] 8021q: adding VLAN 0 to HW filter on device hsr2
[  126.998215][T10651] bond0: left promiscuous mode
[  127.000168][T10651] batadv0: left promiscuous mode
[  127.054345][ T5912] IPVS: starting estimator thread 0...
[  127.139865][T10662] IPVS: using max 62 ests per chain, 148800 per kthread
[  127.269791][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'.
[  127.296671][T10671] wg1 speed is unknown, defaulting to 1000
[  127.403783][T10671] lo speed is unknown, defaulting to 1000
[  127.408770][T10673] syzkaller0: entered promiscuous mode
[  127.412146][T10673] syzkaller0: entered allmulticast mode
[  127.416248][T10671] lo speed is unknown, defaulting to 1000
[  127.446071][T10673] macsec1: entered promiscuous mode
[  127.942201][T10698] netlink: 'syz.2.2072': attribute type 3 has an invalid length.
[  128.026582][T10708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2076'.
[  128.105226][T10727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2085'.
[  128.177450][T10735] wg1 speed is unknown, defaulting to 1000
[  128.180526][T10735] lo speed is unknown, defaulting to 1000
[  128.186164][T10735] lo speed is unknown, defaulting to 1000
[  128.216594][T10741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.309542][T10755] veth0: entered promiscuous mode
[  128.312312][T10754] veth0: left promiscuous mode
[  128.543055][T10775] wg1 speed is unknown, defaulting to 1000
[  128.545424][T10775] lo speed is unknown, defaulting to 1000
[  128.548848][T10775] lo speed is unknown, defaulting to 1000
[  128.663073][T10775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.698042][T10782] IPv6: Can't replace route, no match found
[  129.015384][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'.
[  129.067949][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'.
[  130.144596][T10823] trusted_key: syz.0.2124 sent an empty control message without MSG_MORE.
[  130.182353][T10827] tipc: Cannot configure node identity twice
[  131.845339][T10932] 8021q: adding VLAN 0 to HW filter on device team0
[  131.849640][T10932] dummy0: left promiscuous mode
[  131.853330][T10932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.885661][T10940] netlink: 'syz.2.2175': attribute type 13 has an invalid length.
[  131.888201][T10940] netlink: 'syz.2.2175': attribute type 17 has an invalid length.
[  131.941958][T10940] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.945161][T10940] 8021q: adding VLAN 0 to HW filter on device team0
[  131.949343][T10940] dummy0: left promiscuous mode
[  131.952563][T10940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.958921][ T5912] lo speed is unknown, defaulting to 1000
[  131.960764][ T5912] syz2: Port: 1 Link ACTIVE
[  131.979953][T10949] wg1 speed is unknown, defaulting to 1000
[  131.982258][T10949] lo speed is unknown, defaulting to 1000
[  131.984682][T10949] lo speed is unknown, defaulting to 1000
[  132.073845][T10960] __nla_validate_parse: 2 callbacks suppressed
[  132.073858][T10960] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2185'.
[  132.095310][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'.
[  132.103404][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'.
[  132.311685][T10985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2197'.
[  132.448053][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  132.580732][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'.
[  132.694554][T10996] netlink: 'syz.0.2200': attribute type 49 has an invalid length.
[  132.749495][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.774456][   T33] audit: type=1107 audit(1756433847.061:2): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  132.843032][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2204'.
[  132.992750][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2206'.
[  133.086096][T11019] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2210'.
[  133.282504][T11041] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2217'.
[  133.309961][T11045] netlink: 'syz.0.2219': attribute type 1 has an invalid length.
[  133.310944][T11047] netlink: 'syz.2.2220': attribute type 10 has an invalid length.
[  133.312747][T11045] netlink: 'syz.0.2219': attribute type 1 has an invalid length.
[  133.322194][T11047] team0: Device dummy0 failed to register rx_handler
[  133.350630][T11047] netlink: 'syz.2.2220': attribute type 10 has an invalid length.
[  133.455810][T11066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.481167][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'.
[  133.691541][T11094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.700260][T11094] syzkaller0: entered promiscuous mode
[  133.702944][T11094] syzkaller0: entered allmulticast mode
[  133.722684][T11094] tipc: Resetting bearer <eth:syzkaller0>
[  133.726397][T11093] tipc: Resetting bearer <eth:syzkaller0>
[  133.736056][T11093] tipc: Disabling bearer <eth:syzkaller0>
[  133.764745][T11102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.846938][T11112] wg1 speed is unknown, defaulting to 1000
[  133.850206][T11112] lo speed is unknown, defaulting to 1000
[  133.852614][T11112] lo speed is unknown, defaulting to 1000
[  133.944896][T11125] netlink: 'syz.0.2255': attribute type 1 has an invalid length.
[  133.975573][T11125] netlink: 'syz.0.2255': attribute type 3 has an invalid length.
[  134.073201][T11139] wg1 speed is unknown, defaulting to 1000
[  134.076255][T11139] lo speed is unknown, defaulting to 1000
[  134.080370][T11139] lo speed is unknown, defaulting to 1000
[  134.956535][T11173] netlink: 'syz.0.2274': attribute type 2 has an invalid length.
[  135.647430][T11205] nbd: socks must be embedded in a SOCK_ITEM attr
[  135.649994][T11205] block nbd2: shutting down sockets
[  135.698516][T11211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.701495][T11211] syzkaller0: entered promiscuous mode
[  135.703586][T11211] syzkaller0: entered allmulticast mode
[  135.710739][T11211] tipc: Resetting bearer <eth:syzkaller0>
[  135.714182][T11210] tipc: Resetting bearer <eth:syzkaller0>
[  135.722450][T11210] tipc: Disabling bearer <eth:syzkaller0>
[  136.029035][T11238] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.032114][T11238] 8021q: adding VLAN 0 to HW filter on device team0
[  136.035481][T11238] batman_adv: batadv0: Interface activated: dummy0
[  136.038409][T11238] batadv0: mtu less than device minimum
[  136.040553][T11238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.044037][T11238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.047946][T11238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.051441][T11238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.054789][T11238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.064676][ T5925] lo speed is unknown, defaulting to 1000
[  136.067000][ T5925] syz1: Port: 1 Link ACTIVE
[  136.427462][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.467136][T11289] tipc: Trying to set illegal importance in message
[  136.505838][T11293] 8021q: adding VLAN 0 to HW filter on device bond2
[  136.526619][T11293] bond2: (slave ip6gretap1): making interface the new active one
[  136.532207][T11293] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  136.641972][T11310] sctp: [Deprecated]: syz.2.2336 (pid 11310) Use of int in maxseg socket option.
[  136.641972][T11310] Use struct sctp_assoc_value instead
[  136.716563][T11317] bridge0: entered promiscuous mode
[  136.720908][T11317] bridge0: port 4(macvlan2) entered blocking state
[  136.728971][T11317] bridge0: port 4(macvlan2) entered disabled state
[  136.731442][T11317] macvlan2: entered allmulticast mode
[  136.733382][T11317] bridge0: entered allmulticast mode
[  136.735744][T11317] macvlan2: left allmulticast mode
[  136.738554][T11317] bridge0: left allmulticast mode
[  136.740873][T11317] bridge0: left promiscuous mode
[  137.704111][T11416] __nla_validate_parse: 16 callbacks suppressed
[  137.704130][T11416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2367'.
[  137.925888][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'.
[  137.938106][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'.
[  137.948673][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'.
[  137.952330][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'.
[  137.962989][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'.
[  137.966886][T11451] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2384'.
[  138.198917][T11475] wg1 speed is unknown, defaulting to 1000
[  138.201913][T11475] lo speed is unknown, defaulting to 1000
[  138.206910][T11475] lo speed is unknown, defaulting to 1000
[  138.435800][T11507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.441511][T11507] syzkaller0: entered promiscuous mode
[  138.443647][T11507] syzkaller0: entered allmulticast mode
[  138.455309][T11507] tipc: Resetting bearer <eth:syzkaller0>
[  138.466365][T11506] tipc: Resetting bearer <eth:syzkaller0>
[  138.472364][T11506] tipc: Disabling bearer <eth:syzkaller0>
[  138.480177][T11508] wg1 speed is unknown, defaulting to 1000
[  138.483211][T11508] lo speed is unknown, defaulting to 1000
[  138.486125][T11508] lo speed is unknown, defaulting to 1000
[  138.528043][T11511] sctp: [Deprecated]: syz.1.2411 (pid 11511) Use of int in maxseg socket option.
[  138.528043][T11511] Use struct sctp_assoc_value instead
[  138.800581][T11532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  139.305748][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'.
[  139.311001][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'.
[  139.432636][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2443'.
[  139.451514][T11579] vlan2: entered allmulticast mode
[  139.453278][T11579] bond3: entered allmulticast mode
[  139.518145][T11582] block nbd2: server does not support multiple connections per device.
[  139.521995][T11582] block nbd2: shutting down sockets
[  139.664627][T11605] delete_channel: no stack
[  140.333474][T11695] validate_nla: 7 callbacks suppressed
[  140.333489][T11695] netlink: 'syz.2.2498': attribute type 1 has an invalid length.
[  140.508017][T11707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  140.613913][T11712] netlink: 'syz.2.2503': attribute type 2 has an invalid length.
[  141.098651][ T5874] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.101900][ T5874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.137362][ T5874] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.140742][ T5874] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.251000][T11782] batman_adv: batadv0: Interface deactivated: dummy0
[  141.254859][T11782] batman_adv: batadv0: Removing interface: dummy0
[  141.883166][T11822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  142.088123][T11835] sctp: [Deprecated]: syz.0.2551 (pid 11835) Use of int in max_burst socket option deprecated.
[  142.088123][T11835] Use struct sctp_assoc_value instead
[  142.284911][T11856] syzkaller1: entered promiscuous mode
[  142.287179][T11856] syzkaller1: entered allmulticast mode
[  142.506746][T11873] wg1 speed is unknown, defaulting to 1000
[  142.510148][T11873] lo speed is unknown, defaulting to 1000
[  142.513185][T11873] lo speed is unknown, defaulting to 1000
[  143.003250][T11903] __nla_validate_parse: 14 callbacks suppressed
[  143.003269][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'.
[  143.016432][T11906] netlink: 'syz.1.2582': attribute type 10 has an invalid length.
[  143.027577][T11906] macvlan1: entered allmulticast mode
[  143.034005][T11906] veth1_vlan: entered allmulticast mode
[  143.036630][T11906] team0: Device macvlan1 is up. Set it down before adding it as a team port
[  143.112666][T11915] sctp: [Deprecated]: syz.1.2586 (pid 11915) Use of int in max_burst socket option.
[  143.112666][T11915] Use struct sctp_assoc_value instead
[  143.220783][T11925] netlink: 'syz.0.2592': attribute type 1 has an invalid length.
[  143.223906][T11925] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2592'.
[  143.309989][   T33] audit: type=1107 audit(1756433857.601:3): pid=11936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  143.341182][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2599'.
[  143.351726][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2599'.
[  143.445569][T11955] bond0: (slave syz_tun): Releasing backup interface
[  143.452486][T11955] syz_tun: left promiscuous mode
[  143.460450][T11955] bridge_slave_0: left allmulticast mode
[  143.462890][T11955] bridge_slave_0: left promiscuous mode
[  143.465393][T11955] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.473838][T11955] bridge_slave_1: left allmulticast mode
[  143.476341][T11955] bridge_slave_1: left promiscuous mode
[  143.480044][T11955] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.486668][T11955] bond0: (slave bond_slave_0): Releasing backup interface
[  143.491141][T11955] bond_slave_0: left promiscuous mode
[  143.494817][T11955] bond0: (slave bond_slave_1): Releasing backup interface
[  143.499056][T11955] bond_slave_1: left promiscuous mode
[  143.512958][T11955] team0: Port device team_slave_0 removed
[  143.519273][T11955] team0: Port device team_slave_1 removed
[  143.521573][T11955] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.524270][T11955] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.527183][T11955] macsec0: left allmulticast mode
[  143.531385][T11955] macsec0: left promiscuous mode
[  143.533475][T11955] bridge0: port 3(macsec0) entered disabled state
[  143.539728][T11955] bond2: (slave ip6gretap1): Releasing active interface
[  143.575862][T11961] net_ratelimit: 16 callbacks suppressed
[  143.575881][T11961] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  143.631676][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2614'.
[  143.769161][T11989] wg1 speed is unknown, defaulting to 1000
[  143.772345][T11989] lo speed is unknown, defaulting to 1000
[  143.775494][T11989] lo speed is unknown, defaulting to 1000
[  143.835801][T11996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2622'.
[  143.841763][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'.
[  143.858777][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2623'.
[  143.882703][T12001] netlink: 'syz.1.2624': attribute type 3 has an invalid length.
[  143.885798][T12001] netlink: 'syz.1.2624': attribute type 3 has an invalid length.
[  144.029743][T11989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2619'.
[  144.267471][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  144.312579][T12037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.325732][T12037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2640'.
[  144.743386][T12080] smc: net device bond0 applied user defined pnetid SYZ
[  145.085124][T12125] unknown channel width for channel at 909000KHz?
[  145.620222][T12169] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  145.829885][T12177] macvtap0: entered promiscuous mode
[  145.832173][T12177] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  145.946593][T12191] nbd: couldn't find device at index 536870912
[  146.420513][T12246] netlink: 'syz.0.2734': attribute type 4 has an invalid length.
[  146.424815][    T9] lo speed is unknown, defaulting to 1000
[  146.426954][    T9] syz1: Port: 1 Link DOWN
[  146.429725][T12246] netlink: 'syz.0.2734': attribute type 4 has an invalid length.
[  146.434352][    T9] lo speed is unknown, defaulting to 1000
[  146.436102][    T9] syz1: Port: 1 Link ACTIVE
[  146.444297][T12246] IPVS: length: 24 != 55320
[  146.832431][ T5313] block nbd0: Connection timed out, retrying (0/2 alive)
[  146.835204][ T5313] block nbd0: Connection timed out, retrying (0/2 alive)
[  146.838113][ T5313] block nbd0: Connection timed out, retrying (0/2 alive)
[  146.840877][ T5313] block nbd0: Connection timed out, retrying (0/2 alive)
[  146.843482][ T5313] block nbd0: Dead connection, failed to find a fallback
[  146.846481][ T5313] block nbd0: shutting down sockets
[  146.848785][ T5313] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.852285][ T5313] Buffer I/O error on dev nbd0, logical block 3, async page read
[  146.855034][ T5313] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.858728][ T5313] Buffer I/O error on dev nbd0, logical block 2, async page read
[  146.861388][ T5313] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.864567][ T5313] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.867664][ T5313] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.871132][ T5313] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.874195][ T8897] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.877665][ T8897] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.880704][ T8897] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.883967][ T8897] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.886946][ T8897] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.890315][ T8897] Buffer I/O error on dev nbd0, logical block 2, async page read
[  146.893326][ T8897] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.896541][ T8897] Buffer I/O error on dev nbd0, logical block 3, async page read
[  146.899664][ T8897] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.902835][ T8897] Buffer I/O error on dev nbd0, logical block 0, async page read
[  146.905942][ T8897] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  146.909737][ T8897] Buffer I/O error on dev nbd0, logical block 1, async page read
[  146.913132][    T9] lo speed is unknown, defaulting to 1000
[  146.913200][T12279] netem: invalid attributes len -16
[  146.915330][    T9] syz2: Port: 1 Link DOWN
[  146.917125][T12279] netem: change failed
[  146.921506][ T8897] ldm_validate_partition_table(): Disk read failed.
[  146.925089][ T8897] Dev nbd0: unable to read RDB block 0
[  146.928456][ T8897]  nbd0: unable to read partition table
[  146.932723][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.934755][ T8897] ldm_validate_partition_table(): Disk read failed.
[  146.939541][ T8897] Dev nbd0: unable to read RDB block 0
[  146.941737][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.942749][ T8897]  nbd0: unable to read partition table
[  146.946079][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.957402][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.158282][T12295] unsupported nlmsg_type 40
[  147.348258][T12301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.351408][T12301] syzkaller0: entered promiscuous mode
[  147.353522][T12301] syzkaller0: entered allmulticast mode
[  147.372055][T12301] tipc: Resetting bearer <eth:syzkaller0>
[  147.381141][T12300] tipc: Resetting bearer <eth:syzkaller0>
[  147.391209][T12300] tipc: Disabling bearer <eth:syzkaller0>
[  147.586943][T12321] syzkaller1: entered promiscuous mode
[  147.590740][T12321] syzkaller1: entered allmulticast mode
[  148.111972][T12347] tipc: Enabled bearer <eth:team0>, priority 10
[  148.190470][T12351] __nla_validate_parse: 16 callbacks suppressed
[  148.190487][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'.
[  148.665198][T12333] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  148.687304][T12368] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2789'.
[  148.764284][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'.
[  148.991251][T12400] netlink: 'syz.0.2802': attribute type 1 has an invalid length.
[  148.993728][T12400] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2802'.
[  149.259694][T12424] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  149.609040][T12440] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.2820'.
[  149.747062][T12454] macsec1: entered promiscuous mode
[  149.753762][T12454] macsec1: entered allmulticast mode
[  149.755980][T12454] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  149.902937][T12472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.403241][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'.
[  150.406839][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'.
[  151.005815][T12546] batadv_slave_0: entered promiscuous mode
[  151.010832][T12545] batadv_slave_0: left promiscuous mode
[  151.021371][T12540] IPVS: rr: FWM 3 0x00000003 - no destination available
[  151.036787][T12540] wg1 speed is unknown, defaulting to 1000
[  151.039808][T12540] lo speed is unknown, defaulting to 1000
[  151.042406][T12540] lo speed is unknown, defaulting to 1000
[  151.046002][T12548] openvswitch: netlink: Actions may not be safe on all matching packets
[  151.376350][T12566] netlink: 'syz.1.2879': attribute type 1 has an invalid length.
[  151.380960][T12566] netlink: 'syz.1.2879': attribute type 2 has an invalid length.
[  151.443463][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'.
[  151.631433][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2890'.
[  151.695136][T12594] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  152.024982][T12623] netlink: 'syz.0.2904': attribute type 12 has an invalid length.
[  152.256047][T12642] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2914'.
[  152.265408][T12642] batadv1: entered promiscuous mode
[  152.267625][T12642] batadv1: entered allmulticast mode
[  152.540003][T12665] netlink: 'syz.2.2923': attribute type 7 has an invalid length.
[  152.546317][T12665] netlink: 'syz.2.2923': attribute type 8 has an invalid length.
[  152.553967][T12665] dummy0: entered promiscuous mode
[  152.557410][T12665] dummy0: left promiscuous mode
[  152.922112][T12694] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.926155][T12694] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  153.534057][T12750] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  153.882025][T12764] __nla_validate_parse: 6 callbacks suppressed
[  153.882041][T12764] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2959'.
[  153.927357][ T5912] tipc: Node number set to 2645139188
[  153.980510][T12770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2962'.
[  153.985549][T12770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2962'.
[  154.117399][ T5872] Bluetooth: hci2: command 0x0405 tx timeout
[  154.590197][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'.
[  154.671122][T12821] bridge0: port 1(erspan0) entered blocking state
[  154.676815][T12821] bridge0: port 1(erspan0) entered disabled state
[  154.682627][T12821] erspan0: entered allmulticast mode
[  154.685046][T12821] erspan0: left allmulticast mode
[  154.995324][T12871] netlink: 'syz.2.3009': attribute type 10 has an invalid length.
[  155.851067][T12910] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  156.028875][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'.
[  156.100884][T12926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.103446][T12926] syzkaller0: entered promiscuous mode
[  156.105140][T12926] syzkaller0: entered allmulticast mode
[  156.112211][T12926] tipc: Resetting bearer <eth:syzkaller0>
[  156.115238][T12925] tipc: Resetting bearer <eth:syzkaller0>
[  156.120098][T12925] tipc: Disabling bearer <eth:syzkaller0>
[  156.234267][T12946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3045'.
[  156.242979][T12948] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3046'.
[  156.285322][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3050'.
[  156.290080][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3050'.
[  156.325988][T12966] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3041'.
[  156.338126][T12968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  156.396983][T12978] IPVS: Error joining to the multicast group
[  156.413579][T12980] vlan2: entered allmulticast mode
[  156.415484][T12980] gretap0: entered allmulticast mode
[  156.435310][T12984] ieee802154 phy1 wpan1: encryption failed: -22
[  156.626319][T13009] netlink: 'syz.2.3073': attribute type 13 has an invalid length.
[  156.632669][T13009] netlink: 'syz.2.3073': attribute type 17 has an invalid length.
[  156.651741][T13009] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.656958][T13009] 8021q: adding VLAN 0 to HW filter on device team0
[  156.661841][T13009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.666459][ T5810] lo speed is unknown, defaulting to 1000
[  156.669855][ T5810] syz2: Port: 1 Link ACTIVE
[  156.710368][T13009] wg1 speed is unknown, defaulting to 1000
[  156.712710][T13009] lo speed is unknown, defaulting to 1000
[  156.715249][T13009] lo speed is unknown, defaulting to 1000
[  156.806206][T13009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.128511][T13043] wg1 speed is unknown, defaulting to 1000
[  157.130702][T13043] lo speed is unknown, defaulting to 1000
[  157.133376][T13043] lo speed is unknown, defaulting to 1000
[  157.175141][T13043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  157.586706][T13096] wg1 speed is unknown, defaulting to 1000
[  157.589471][T13096] lo speed is unknown, defaulting to 1000
[  157.591728][T13096] lo speed is unknown, defaulting to 1000
[  157.614876][T13106] netlink: 'syz.1.3119': attribute type 2 has an invalid length.
[  157.620144][T13106] netlink: 'syz.1.3119': attribute type 1 has an invalid length.
[  157.628382][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.970756][T13154] netlink: 'syz.0.3139': attribute type 29 has an invalid length.
[  158.220049][T13184] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  159.010118][T13238] __nla_validate_parse: 13 callbacks suppressed
[  159.010131][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3163'.
[  159.245291][T13253] netlink: del zone limit has 4 unknown bytes
[  159.287127][T13260] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3173'.
[  159.326699][T13266] Bluetooth: MGMT ver 1.23
[  159.362856][T13270] openvswitch: netlink: Flow actions attr not present in new flow.
[  159.399826][T13274] pim6reg1: entered promiscuous mode
[  159.401597][T13274] pim6reg1: entered allmulticast mode
[  159.511385][T13294] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3188'.
[  159.572734][T13305] netlink: 'syz.0.3194': attribute type 5 has an invalid length.
[  159.686539][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'.
[  159.706133][T13320] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  159.741466][T13324] atomic_op ffff88810fa32198 conn xmit_atomic 0000000000000000
[  159.764374][T13329] netlink: 'syz.1.3206': attribute type 3 has an invalid length.
[  159.767033][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'.
[  159.770510][T13329] netlink: 'syz.1.3206': attribute type 3 has an invalid length.
[  159.773049][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'.
[  159.858935][T13339] sctp: [Deprecated]: syz.1.3210 (pid 13339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.858935][T13339] Use struct sctp_sack_info instead
[  160.095143][T13373] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3227'.
[  160.127146][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3229'.
[  160.697117][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'.
[  160.895725][T13436] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3255'.
[  160.900277][T13436] 0X: renamed from caif0
[  160.904584][T13436] 0X: entered allmulticast mode
[  160.906304][T13436] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  160.976121][T13448] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  161.218269][T13484] netlink: 'syz.1.3279': attribute type 1 has an invalid length.
[  161.314297][T13488] wg1 speed is unknown, defaulting to 1000
[  161.317114][T13488] lo speed is unknown, defaulting to 1000
[  161.345656][T13488] lo speed is unknown, defaulting to 1000
[  161.429088][T13496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.867380][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.197976][T13519] netlink: 'syz.2.3292': attribute type 3 has an invalid length.
[  162.414765][T13527] xt_time: unknown flags 0xf4
[  163.292448][T13588] C: renamed from lo (while UP)
[  163.295816][T13588] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  163.384393][T13596] bridge8: entered promiscuous mode
[  163.386314][T13596] bridge8: entered allmulticast mode
[  163.507182][ T5236] Bluetooth: hci2: link tx timeout
[  163.508946][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.573401][T13613] netlink: zone id is out of range
[  163.581762][T13613] netlink: zone id is out of range
[  163.587064][T13613] netlink: zone id is out of range
[  163.589370][T13613] netlink: zone id is out of range
[  163.591361][T13613] netlink: zone id is out of range
[  163.593605][T13613] netlink: zone id is out of range
[  163.595733][T13613] netlink: zone id is out of range
[  163.599291][T13613] netlink: zone id is out of range
[  163.602032][T13613] netlink: del zone limit has 4 unknown bytes
[  163.903991][T13641] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  163.943302][T13650] netlink: 'syz.2.3347': attribute type 4 has an invalid length.
[  163.950110][    T9] lo speed is unknown, defaulting to 1000
[  163.952054][    T9] syz2: Port: 1 Link DOWN
[  163.960535][T13650] netlink: 'syz.2.3347': attribute type 4 has an invalid length.
[  163.973967][ T5810] lo speed is unknown, defaulting to 1000
[  163.976199][ T5810] syz2: Port: 1 Link ACTIVE
[  163.994994][T13654] tc_dump_action: action bad kind
[  164.945228][T13744] __nla_validate_parse: 8 callbacks suppressed
[  164.945240][T13744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3393'.
[  165.052662][T13752] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3397'.
[  165.213839][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3409'.
[  165.263044][T13780] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3411'.
[  165.525275][T13813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3427'.
[  165.547355][ T5872] Bluetooth: hci2: command 0x0405 tx timeout
[  165.632576][T13829] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  165.776445][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3439'.
[  165.920983][T13849] netlink: 'syz.0.3444': attribute type 13 has an invalid length.
[  165.948468][T13851] netlink: 'syz.0.3445': attribute type 13 has an invalid length.
[  165.950917][T13851] netlink: 'syz.0.3445': attribute type 17 has an invalid length.
[  165.978859][T13851] tipc: Resetting bearer <eth:team0>
[  165.981255][T13851] tipc: Resetting bearer <eth:team0>
[  166.014263][T13851] wg1 speed is unknown, defaulting to 1000
[  166.016986][T13851] C speed is unknown, defaulting to 1000
[  166.019926][T13851] lo speed is unknown, defaulting to 1000
[  166.141186][T13851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.821438][T13883] netlink: 'syz.0.3458': attribute type 3 has an invalid length.
[  166.824544][T13883] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3458'.
[  166.937046][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'.
[  167.092330][T13911] netlink: 'syz.2.3468': attribute type 10 has an invalid length.
[  167.096797][T13911] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.099959][T13911] bond0: (slave wlan1): Opening slave failed
[  167.132977][T13911] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.136555][T13911] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.241044][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'.
[  167.279412][T13923] Bluetooth: MGMT ver 1.23
[  167.329780][T13929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3480'.
[  167.968094][T13939] 8021q: adding VLAN 0 to HW filter on device bond4
[  167.976340][T13939] bond4 (unregistering): Released all slaves
[  168.408991][T13984] syzkaller0: entered promiscuous mode
[  168.410816][T13984] syzkaller0: entered allmulticast mode
[  168.414429][T13986] pim6reg1: entered promiscuous mode
[  168.416206][T13986] pim6reg1: entered allmulticast mode
[  168.435899][T13990] netlink: 'syz.1.3508': attribute type 1 has an invalid length.
[  168.586326][T14000] wg1 speed is unknown, defaulting to 1000
[  168.590395][T14000] C speed is unknown, defaulting to 1000
[  168.593289][T14000] lo speed is unknown, defaulting to 1000
[  169.855861][T14083] ==================================================================
[  169.858920][T14083] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  169.861702][T14083] Read of size 4 at addr ffff8881064c92c4 by task syz.0.3542/14083
[  169.864818][T14083] 
[  169.865980][T14083] CPU: 0 UID: 0 PID: 14083 Comm: syz.0.3542 Not tainted syzkaller #0 PREEMPT(full) 
[  169.865993][T14083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.865999][T14083] Call Trace:
[  169.866003][T14083]  <TASK>
[  169.866009][T14083]  dump_stack_lvl+0x189/0x250
[  169.866023][T14083]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.866032][T14083]  ? lock_release+0x4b/0x3e0
[  169.866046][T14083]  ? __virt_addr_valid+0x4a5/0x5c0
[  169.866056][T14083]  print_report+0xca/0x240
[  169.866064][T14083]  ? xfrm_alloc_spi+0x570/0xf30
[  169.866073][T14083]  kasan_report+0x118/0x150
[  169.866085][T14083]  ? lock_acquire+0x5f/0x360
[  169.866096][T14083]  ? xfrm_alloc_spi+0x570/0xf30
[  169.866107][T14083]  xfrm_alloc_spi+0x570/0xf30
[  169.866117][T14083]  ? xfrm_alloc_spi+0x2a0/0xf30
[  169.866128][T14083]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  169.866136][T14083]  ? xfrm_find_acq+0x87/0xa0
[  169.866151][T14083]  xfrm_alloc_userspi+0x70b/0xc90
[  169.866171][T14083]  ? apparmor_capable+0x137/0x1b0
[  169.866187][T14083]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  169.866207][T14083]  ? __nla_parse+0x40/0x60
[  169.866230][T14083]  xfrm_user_rcv_msg+0x7a3/0xab0
[  169.866250][T14083]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  169.866276][T14083]  ? __pfx___mutex_trylock_common+0x10/0x10
[  169.866293][T14083]  ? rcu_is_watching+0x15/0xb0
[  169.866307][T14083]  ? trace_contention_end+0x39/0x120
[  169.866317][T14083]  ? __mutex_lock+0x335/0x1350
[  169.866326][T14083]  netlink_rcv_skb+0x208/0x470
[  169.866340][T14083]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  169.866349][T14083]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  169.866363][T14083]  ? lock_release+0x4b/0x3e0
[  169.866400][T14083]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.866413][T14083]  xfrm_netlink_rcv+0x79/0x90
[  169.866422][T14083]  netlink_unicast+0x82f/0x9e0
[  169.866435][T14083]  ? __pfx_netlink_unicast+0x10/0x10
[  169.866445][T14083]  ? netlink_sendmsg+0x642/0xb30
[  169.866452][T14083]  ? skb_put+0x11b/0x210
[  169.866461][T14083]  netlink_sendmsg+0x805/0xb30
[  169.866469][T14083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.866477][T14083]  ? aa_sock_msg_perm+0xf1/0x1d0
[  169.866484][T14083]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.866494][T14083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.866500][T14083]  __sock_sendmsg+0x21c/0x270
[  169.866511][T14083]  ____sys_sendmsg+0x505/0x830
[  169.866519][T14083]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.866529][T14083]  ? import_iovec+0x74/0xa0
[  169.866538][T14083]  ___sys_sendmsg+0x21f/0x2a0
[  169.866546][T14083]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.866560][T14083]  ? __fget_files+0x2a/0x420
[  169.866567][T14083]  ? __fget_files+0x3a0/0x420
[  169.866575][T14083]  __x64_sys_sendmsg+0x19b/0x260
[  169.866584][T14083]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.866591][T14083]  ? rcu_is_watching+0x15/0xb0
[  169.866600][T14083]  ? do_user_addr_fault+0xc8a/0x1390
[  169.866613][T14083]  ? rcu_is_watching+0x15/0xb0
[  169.866621][T14083]  do_syscall_64+0xfa/0x3b0
[  169.866629][T14083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.866636][T14083]  ? exc_page_fault+0x9f/0xf0
[  169.866649][T14083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.866658][T14083] RIP: 0033:0x7ff6ce38ebe9
[  169.866667][T14083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.866675][T14083] RSP: 002b:00007ff6cc5cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.866684][T14083] RAX: ffffffffffffffda RBX: 00007ff6ce5b6090 RCX: 00007ff6ce38ebe9
[  169.866690][T14083] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  169.866696][T14083] RBP: 00007ff6ce411e19 R08: 0000000000000000 R09: 0000000000000000
[  169.866702][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.866707][T14083] R13: 00007ff6ce5b6128 R14: 00007ff6ce5b6090 R15: 00007ffe49320398
[  169.866716][T14083]  </TASK>
[  169.866720][T14083] 
[  169.867397][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  169.869537][T14083] Allocated by task 8199:
[  169.869545][T14083]  kasan_save_track+0x3e/0x80
[  169.869557][T14083]  __kasan_slab_alloc+0x6c/0x80
[  169.869567][T14083]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  169.869577][T14083]  xfrm_state_alloc+0x24/0x2f0
[  170.006093][T14083]  __find_acq_core+0x8a7/0x1c00
[  170.008012][T14083]  xfrm_find_acq+0x78/0xa0
[  170.009855][T14083]  xfrm_alloc_userspi+0x6b3/0xc90
[  170.011878][T14083]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.013866][T14083]  netlink_rcv_skb+0x208/0x470
[  170.015799][T14083]  xfrm_netlink_rcv+0x79/0x90
[  170.017611][T14083]  netlink_unicast+0x82f/0x9e0
[  170.019134][T14083]  netlink_sendmsg+0x805/0xb30
[  170.020692][T14083]  __sock_sendmsg+0x21c/0x270
[  170.022582][T14083]  ____sys_sendmsg+0x505/0x830
[  170.024239][T14083]  ___sys_sendmsg+0x21f/0x2a0
[  170.026060][T14083]  __x64_sys_sendmsg+0x19b/0x260
[  170.028003][T14083]  do_syscall_64+0xfa/0x3b0
[  170.029786][T14083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.031813][T14083] 
[  170.032769][T14083] Freed by task 47:
[  170.034279][T14083]  kasan_save_track+0x3e/0x80
[  170.036137][T14083]  kasan_save_free_info+0x46/0x50
[  170.038029][T14083]  __kasan_slab_free+0x5b/0x80
[  170.039848][T14083]  kmem_cache_free+0x18f/0x400
[  170.041713][T14083]  xfrm_state_gc_task+0x52d/0x6b0
[  170.043610][T14083]  process_scheduled_works+0xae1/0x17b0
[  170.045680][T14083]  worker_thread+0x8a0/0xda0
[  170.047135][T14083]  kthread+0x711/0x8a0
[  170.048422][T14083]  ret_from_fork+0x3fc/0x770
[  170.049857][T14083]  ret_from_fork_asm+0x1a/0x30
[  170.051386][T14083] 
[  170.052137][T14083] The buggy address belongs to the object at ffff8881064c9200
[  170.052137][T14083]  which belongs to the cache xfrm_state of size 928
[  170.057107][T14083] The buggy address is located 196 bytes inside of
[  170.057107][T14083]  freed 928-byte region [ffff8881064c9200, ffff8881064c95a0)
[  170.062283][T14083] 
[  170.063281][T14083] The buggy address belongs to the physical page:
[  170.065751][T14083] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881064c8d80 pfn:0x1064c8
[  170.069152][T14083] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  170.072010][T14083] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  170.075040][T14083] page_type: f5(slab)
[  170.076588][T14083] raw: 057ff00000000040 ffff88801dbf0280 0000000000000000 0000000000000001
[  170.079861][T14083] raw: ffff8881064c8d80 00000000000e0003 00000000f5000000 0000000000000000
[  170.083149][T14083] head: 057ff00000000040 ffff88801dbf0280 0000000000000000 0000000000000001
[  170.086428][T14083] head: ffff8881064c8d80 00000000000e0003 00000000f5000000 0000000000000000
[  170.089686][T14083] head: 057ff00000000002 ffffea0004193201 00000000ffffffff 00000000ffffffff
[  170.092794][T14083] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  170.095844][T14083] page dumped because: kasan: bad access detected
[  170.097964][T14083] page_owner tracks the page as allocated
[  170.099876][T14083] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6852, tgid 6851 (syz.2.422), ts 74092752986, free_ts 74080228577
[  170.106045][T14083]  post_alloc_hook+0x240/0x2a0
[  170.107528][T14083]  get_page_from_freelist+0x21e4/0x22c0
[  170.109394][T14083]  __alloc_frozen_pages_noprof+0x181/0x370
[  170.111212][T14083]  alloc_pages_mpol+0x232/0x4a0
[  170.113003][T14083]  allocate_slab+0x8a/0x370
[  170.114539][T14083]  ___slab_alloc+0xbeb/0x1410
[  170.116129][T14083]  kmem_cache_alloc_noprof+0x283/0x3c0
[  170.117873][T14083]  xfrm_state_alloc+0x24/0x2f0
[  170.119319][T14083]  xfrm_add_sa+0x17d1/0x4070
[  170.120827][T14083]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.122652][T14083]  netlink_rcv_skb+0x208/0x470
[  170.124521][T14083]  xfrm_netlink_rcv+0x79/0x90
[  170.126437][T14083]  netlink_unicast+0x82f/0x9e0
[  170.128291][T14083]  netlink_sendmsg+0x805/0xb30
[  170.130131][T14083]  __sock_sendmsg+0x21c/0x270
[  170.132044][T14083]  ____sys_sendmsg+0x505/0x830
[  170.133856][T14083] page last free pid 5859 tgid 5859 stack trace:
[  170.136035][T14083]  __free_frozen_pages+0xbc4/0xd30
[  170.137989][T14083]  __put_partials+0x156/0x1a0
[  170.139797][T14083]  put_cpu_partial+0x17c/0x250
[  170.141662][T14083]  __slab_free+0x2d5/0x3c0
[  170.143379][T14083]  qlist_free_all+0x97/0x140
[  170.144899][T14083]  kasan_quarantine_reduce+0x148/0x160
[  170.146895][T14083]  __kasan_slab_alloc+0x22/0x80
[  170.148785][T14083]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  170.150998][T14083]  shmem_alloc_inode+0x28/0x40
[  170.152679][T14083]  alloc_inode+0x6a/0x1b0
[  170.154240][T14083]  new_inode+0x22/0x170
[  170.155847][T14083]  shmem_get_inode+0x346/0xe90
[  170.157619][T14083]  shmem_mknod+0x18c/0x3e0
[  170.159105][T14083]  path_openat+0x14f4/0x3830
[  170.160603][T14083]  do_filp_open+0x1fa/0x410
[  170.161989][T14083]  do_sys_openat2+0x121/0x1c0
[  170.163395][T14083] 
[  170.164123][T14083] Memory state around the buggy address:
[  170.165917][T14083]  ffff8881064c9180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  170.168701][T14083]  ffff8881064c9200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.171132][T14083] >ffff8881064c9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.173896][T14083]                                            ^
[  170.176183][T14083]  ffff8881064c9300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.178803][T14083]  ffff8881064c9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.181523][T14083] ==================================================================
[  170.184628][T14083] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  170.186981][T14083] CPU: 0 UID: 0 PID: 14083 Comm: syz.0.3542 Not tainted syzkaller #0 PREEMPT(full) 
[  170.190225][T14083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.193425][T14083] Call Trace:
[  170.194505][T14083]  <TASK>
[  170.195434][T14083]  dump_stack_lvl+0x99/0x250
[  170.196869][T14083]  ? __asan_memcpy+0x40/0x70
[  170.198302][T14083]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.199913][T14083]  ? __pfx__printk+0x10/0x10
[  170.201671][T14083]  vpanic+0x281/0x750
[  170.203206][T14083]  ? __pfx_vpanic+0x10/0x10
[  170.204570][T14083]  ? rcu_is_watching+0x15/0xb0
[  170.205998][T14083]  panic+0xb9/0xc0
[  170.207132][T14083]  ? __pfx_panic+0x10/0x10
[  170.208860][T14083]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  170.210745][T14083]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.212730][T14083]  ? xfrm_alloc_spi+0x570/0xf30
[  170.214513][T14083]  check_panic_on_warn+0x89/0xb0
[  170.216291][T14083]  ? xfrm_alloc_spi+0x570/0xf30
[  170.218041][T14083]  end_report+0x78/0x160
[  170.219306][T14083]  kasan_report+0x129/0x150
[  170.220693][T14083]  ? lock_acquire+0x5f/0x360
[  170.222112][T14083]  ? xfrm_alloc_spi+0x570/0xf30
[  170.223578][T14083]  xfrm_alloc_spi+0x570/0xf30
[  170.224966][T14083]  ? xfrm_alloc_spi+0x2a0/0xf30
[  170.226450][T14083]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  170.228004][T14083]  ? xfrm_find_acq+0x87/0xa0
[  170.229405][T14083]  xfrm_alloc_userspi+0x70b/0xc90
[  170.230949][T14083]  ? apparmor_capable+0x137/0x1b0
[  170.232442][T14083]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  170.234084][T14083]  ? __nla_parse+0x40/0x60
[  170.235422][T14083]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.236861][T14083]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.238493][T14083]  ? __pfx___mutex_trylock_common+0x10/0x10
[  170.240225][T14083]  ? rcu_is_watching+0x15/0xb0
[  170.241699][T14083]  ? trace_contention_end+0x39/0x120
[  170.243412][T14083]  ? __mutex_lock+0x335/0x1350
[  170.244964][T14083]  netlink_rcv_skb+0x208/0x470
[  170.246486][T14083]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.248146][T14083]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  170.249723][T14083]  ? lock_release+0x4b/0x3e0
[  170.251154][T14083]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.252722][T14083]  xfrm_netlink_rcv+0x79/0x90
[  170.254160][T14083]  netlink_unicast+0x82f/0x9e0
[  170.255622][T14083]  ? __pfx_netlink_unicast+0x10/0x10
[  170.257217][T14083]  ? netlink_sendmsg+0x642/0xb30
[  170.258733][T14083]  ? skb_put+0x11b/0x210
[  170.260020][T14083]  netlink_sendmsg+0x805/0xb30
[  170.261495][T14083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.263053][T14083]  ? aa_sock_msg_perm+0xf1/0x1d0
[  170.264536][T14083]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  170.266085][T14083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.267609][T14083]  __sock_sendmsg+0x21c/0x270
[  170.268995][T14083]  ____sys_sendmsg+0x505/0x830
[  170.270408][T14083]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.272111][T14083]  ? import_iovec+0x74/0xa0
[  170.273583][T14083]  ___sys_sendmsg+0x21f/0x2a0
[  170.275074][T14083]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.276711][T14083]  ? __fget_files+0x2a/0x420
[  170.278146][T14083]  ? __fget_files+0x3a0/0x420
[  170.279612][T14083]  __x64_sys_sendmsg+0x19b/0x260
[  170.281175][T14083]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  170.282885][T14083]  ? rcu_is_watching+0x15/0xb0
[  170.284362][T14083]  ? do_user_addr_fault+0xc8a/0x1390
[  170.286008][T14083]  ? rcu_is_watching+0x15/0xb0
[  170.287517][T14083]  do_syscall_64+0xfa/0x3b0
[  170.288921][T14083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.290823][T14083]  ? exc_page_fault+0x9f/0xf0
[  170.292291][T14083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.294093][T14083] RIP: 0033:0x7ff6ce38ebe9
[  170.295554][T14083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.302496][T14083] RSP: 002b:00007ff6cc5cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.305888][T14083] RAX: ffffffffffffffda RBX: 00007ff6ce5b6090 RCX: 00007ff6ce38ebe9
[  170.309077][T14083] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  170.312209][T14083] RBP: 00007ff6ce411e19 R08: 0000000000000000 R09: 0000000000000000
[  170.315365][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.318451][T14083] R13: 00007ff6ce5b6128 R14: 00007ff6ce5b6090 R15: 00007ffe49320398
[  170.321623][T14083]  </TASK>
[  170.323634][T14083] Kernel Offset: disabled
[  170.325284][T14083] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:18:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000119a RDI=000000000000119b RBP=00000000000003f8 RSP=ffffc900042ae9f0
R8 =ffff888106ea0237 R9 =1ffff11020dd4046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb902 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff6cc5cd6c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff6cc5ccfc8 CR3=00000001066a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff6ce587498 00007ff6ce587470 XMM03=00007ff6ce5874a8 00007ff6ce5874a0
XMM04=00007ff6cf0ed100 00007ff6ce587460 XMM05=00007ff6ce587478 00007ff6ce5874c0
XMM06=00007ff6ce5874b8 00007ff6ce5874b0 XMM07=00007ff6ce5874a8 00007ff6ce5874a0
XMM08=0000000000000000 00007ff6ce412ee7 XMM09=0000000000000000 00007ff6ce412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ebb547f6fa76b00 RBX=ffffffff819683b8 RCX=1ebb547f6fa76b00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555a46e808 CR3=000000010da7e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=0102de0190100021 8004001000060102 XMM03=ba03800404a4e608 0001000000080606
XMM04=0000000000000000 0000000000000000 XMM05=000055558c38b8cc 000055558c38b7c0
XMM06=0000000000000000 0000000000000000 XMM07=ba03800404a4e608 0001000000080606
XMM08=0101901000188004 141000060102a400 XMM09=66660a352e79656b 5f5f2e74696e695f
XMM10=6220306138643030 6139666666666666 XMM11=74696e695f616c62 5f76646174616220
XMM12=6b5f5f2e65636976 65645f7265747369 XMM13=6139666666666666 66660a32312e7965
XMM14=6765725f69636e20 6220303664653030 XMM15=6b5f5f2e65636976 65645f7265747369
