last executing test programs:

1.140675954s ago: executing program 2 (id=3588):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e31, 0x3c9c0150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0)

1.093144636s ago: executing program 2 (id=3591):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000)

892.886538ms ago: executing program 2 (id=3597):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000), 0x4)

832.024784ms ago: executing program 2 (id=3598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x0)

831.648283ms ago: executing program 2 (id=3599):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socket(0xa, 0x40000000002, 0x0)
socket(0x400000000010, 0x3, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x0)
r3 = socket(0x40000000015, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

502.212925ms ago: executing program 1 (id=3601):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}, &(0x7f0000000040)=0x20)

502.012131ms ago: executing program 1 (id=3602):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)

432.974888ms ago: executing program 1 (id=3603):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

312.259691ms ago: executing program 1 (id=3604):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000071000100000000000000000007000000", @ANYRES32, @ANYBLOB="10000180"], 0x28}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000100000000000000000008000000ac1e1f0105000d"], 0x20}], 0x1}, 0x0)

312.08859ms ago: executing program 1 (id=3605):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008020}, 0x40014)

311.758819ms ago: executing program 1 (id=3606):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

103.182291ms ago: executing program 0 (id=3610):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f00000000c0))

100.390752ms ago: executing program 0 (id=3611):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

32.33755ms ago: executing program 0 (id=3612):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)

31.856218ms ago: executing program 0 (id=3613):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}], 0x1c)

2.453968ms ago: executing program 0 (id=3614):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20)

2.114515ms ago: executing program 0 (id=3615):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)

0s ago: executing program 2 (id=3616):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000000640))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2598' (ED25519) to the list of known hosts.
syzkaller login: [   47.828043][ T5821] cgroup: Unknown subsys name 'net'
[   47.913962][ T5821] cgroup: Unknown subsys name 'cpuset'
[   47.917095][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.362911][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.453713][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.456795][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.460552][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.464559][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.467890][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.484662][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.487598][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.490827][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.494420][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.497545][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.552249][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.555597][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.561360][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.564740][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.567582][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.683007][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   60.763670][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.766031][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.768470][ T5875] bridge_slave_0: entered allmulticast mode
[   60.771303][ T5875] bridge_slave_0: entered promiscuous mode
[   60.775408][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.777987][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.780685][ T5875] bridge_slave_1: entered allmulticast mode
[   60.783685][ T5875] bridge_slave_1: entered promiscuous mode
[   60.805793][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   60.829079][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.833800][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.856808][ T5875] team0: Port device team_slave_0 added
[   60.881317][ T5875] team0: Port device team_slave_1 added
[   60.915616][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.918110][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.927775][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.938717][ T5883] chnl_net:caif_netlink_parms(): no params data found
[   60.944135][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.946849][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.956672][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.991742][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.995046][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.997718][ T5878] bridge_slave_0: entered allmulticast mode
[   61.000322][ T5878] bridge_slave_0: entered promiscuous mode
[   61.003867][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.006415][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.008926][ T5878] bridge_slave_1: entered allmulticast mode
[   61.011934][ T5878] bridge_slave_1: entered promiscuous mode
[   61.070601][ T5875] hsr_slave_0: entered promiscuous mode
[   61.073623][ T5875] hsr_slave_1: entered promiscuous mode
[   61.084492][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.090951][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.094675][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.097460][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.100517][ T5883] bridge_slave_0: entered allmulticast mode
[   61.104126][ T5883] bridge_slave_0: entered promiscuous mode
[   61.119756][ T5878] team0: Port device team_slave_0 added
[   61.130112][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.133193][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.135580][ T5883] bridge_slave_1: entered allmulticast mode
[   61.138952][ T5883] bridge_slave_1: entered promiscuous mode
[   61.142969][ T5878] team0: Port device team_slave_1 added
[   61.183004][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.186737][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.189461][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.198637][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.208047][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.214819][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.217432][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.227285][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.253383][ T5883] team0: Port device team_slave_0 added
[   61.263427][ T5883] team0: Port device team_slave_1 added
[   61.294755][ T5878] hsr_slave_0: entered promiscuous mode
[   61.297283][ T5878] hsr_slave_1: entered promiscuous mode
[   61.299800][ T5878] debugfs: 'hsr0' already exists in 'hsr'
[   61.301974][ T5878] Cannot create hsr debugfs directory
[   61.304907][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.307147][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.316522][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.330607][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.333603][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.342909][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.419518][ T5883] hsr_slave_0: entered promiscuous mode
[   61.422532][ T5883] hsr_slave_1: entered promiscuous mode
[   61.425167][ T5883] debugfs: 'hsr0' already exists in 'hsr'
[   61.427320][ T5883] Cannot create hsr debugfs directory
[   61.477730][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.495827][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.513272][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.521105][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.557774][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.567608][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.575939][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.586826][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.605715][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.608497][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.611462][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.614199][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.651865][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.656602][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.671403][ T5883] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.678720][ T5883] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.692740][ T5883] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.704312][ T5883] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.745592][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.764419][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.785421][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   61.799700][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   61.811011][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.813644][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.824264][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.826858][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.834979][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.837044][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.840436][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.842652][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.886140][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.898514][ T5878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.917904][ T5883] 8021q: adding VLAN 0 to HW filter on device team0
[   61.938802][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.941629][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.953480][  T133] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.956324][  T133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.991555][ T5883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.000320][ T5883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.038175][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.086121][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.097585][ T5875] veth0_vlan: entered promiscuous mode
[   62.117033][ T5875] veth1_vlan: entered promiscuous mode
[   62.131321][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.162808][ T5878] veth0_vlan: entered promiscuous mode
[   62.167298][ T5875] veth0_macvtap: entered promiscuous mode
[   62.179064][ T5875] veth1_macvtap: entered promiscuous mode
[   62.182896][ T5878] veth1_vlan: entered promiscuous mode
[   62.189832][ T5883] veth0_vlan: entered promiscuous mode
[   62.205510][ T5883] veth1_vlan: entered promiscuous mode
[   62.218619][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.229267][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.235960][ T5878] veth0_macvtap: entered promiscuous mode
[   62.241947][ T5900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.251685][ T5878] veth1_macvtap: entered promiscuous mode
[   62.259215][ T5900] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.261957][ T5900] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.270643][ T5883] veth0_macvtap: entered promiscuous mode
[   62.276069][ T5900] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.284716][ T5883] veth1_macvtap: entered promiscuous mode
[   62.314947][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.324817][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.332671][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.337770][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.345919][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.348758][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.356478][ T5900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.359431][ T5900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.370651][ T5900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.374666][ T5900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.377308][ T5900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.380531][ T5900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.391613][ T5900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.396523][ T5900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.400980][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.407583][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.446336][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.454238][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.464348][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.470074][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.474668][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.497295][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.500878][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.516817][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.521958][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.525566][   T55] Bluetooth: hci1: command tx timeout
[   62.533685][   T55] Bluetooth: hci0: command tx timeout
[   62.572062][ T5945] netlink: 120 bytes leftover after parsing attributes in process `syz.0.19'.
[   62.602289][   T55] Bluetooth: hci2: command tx timeout
[   62.608987][   T24] IPVS: starting estimator thread 0...
[   62.614505][ T5941] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   62.701556][ T5952] : renamed from wg2 (while UP)
[   62.724156][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.733484][ T5948] IPVS: using max 59 ests per chain, 141600 per kthread
[   63.344911][ T5990] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET)
[   63.674130][ T6022] netlink: 'syz.2.53': attribute type 58 has an invalid length.
[   63.677230][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.53'.
[   63.788468][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.795952][ T6028] netlink: 'syz.1.56': attribute type 12 has an invalid length.
[   63.799077][ T6030] netlink: 'syz.2.57': attribute type 12 has an invalid length.
[   63.802810][ T6030] netlink: 'syz.2.57': attribute type 29 has an invalid length.
[   63.807292][ T6030] netlink: 148 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.811498][ T6030] netlink: 59 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.817879][ T6030] netlink: 'syz.2.57': attribute type 12 has an invalid length.
[   63.820930][ T6030] netlink: 'syz.2.57': attribute type 29 has an invalid length.
[   63.825730][ T6030] netlink: 148 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.829858][ T6030] netlink: 59 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.834053][ T6030] Zero length message leads to an empty skb
[   63.877368][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   63.952030][ T6039] syz_tun: entered promiscuous mode
[   63.956374][ T6039] batadv_slave_0: entered promiscuous mode
[   63.959533][ T6039] hsr1: entered allmulticast mode
[   63.961575][ T6039] syz_tun: entered allmulticast mode
[   63.964769][ T6039] batadv_slave_0: entered allmulticast mode
[   64.016347][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'.
[   64.019865][ T6043] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   64.377235][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   64.591877][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'.
[   64.603472][   T55] Bluetooth: hci0: command tx timeout
[   64.603596][ T5880] Bluetooth: hci1: command tx timeout
[   64.682947][ T5880] Bluetooth: hci2: command tx timeout
[   64.811913][ T6099] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   65.007473][ T6114] netlink: 'syz.1.94': attribute type 303 has an invalid length.
[   65.027326][ T6115] 8021q: adding VLAN 0 to HW filter on device team0
[   65.041658][ T6115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.314052][ T6146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.493856][    C0] Illegal XDP return value 16128 on prog  (id 20) dev lo, expect packet loss!
[   65.651190][ T6185] Bluetooth: MGMT ver 1.23
[   65.769976][ T6201] 8021q: VLANs not supported on vxcan1
[   66.153896][ T6220] syzkaller0: entered allmulticast mode
[   66.158451][ T6220] syzkaller0 (unregistering): left allmulticast mode
[   66.339291][ T6252] pim6reg1: entered promiscuous mode
[   66.341621][ T6252] pim6reg1: entered allmulticast mode
[   66.398227][ T6254] team_slave_0: entered promiscuous mode
[   66.400658][ T6254] team_slave_1: entered promiscuous mode
[   66.405302][ T6254] macvtap1: entered promiscuous mode
[   66.407405][ T6254] team0: entered promiscuous mode
[   66.410697][ T6254] macvtap1: entered allmulticast mode
[   66.416058][ T6254] team0: entered allmulticast mode
[   66.418171][ T6254] team_slave_0: entered allmulticast mode
[   66.421594][ T6254] team_slave_1: entered allmulticast mode
[   66.425225][ T6254] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   66.435604][ T6254] team0: left allmulticast mode
[   66.437694][ T6254] team_slave_0: left allmulticast mode
[   66.439929][ T6254] team_slave_1: left allmulticast mode
[   66.443660][ T6254] team0: left promiscuous mode
[   66.448592][ T6254] team_slave_0: left promiscuous mode
[   66.450943][ T6254] team_slave_1: left promiscuous mode
[   66.566403][ T6270] tipc: Started in network mode
[   66.568429][ T6270] tipc: Node identity c2147c9b9281, cluster identity 4711
[   66.576836][ T6270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.580215][ T6270] syzkaller0: entered promiscuous mode
[   66.584399][ T6270] syzkaller0: entered allmulticast mode
[   66.599728][ T6270] tipc: Resetting bearer <eth:syzkaller0>
[   66.610359][ T6269] tipc: Resetting bearer <eth:syzkaller0>
[   66.615390][ T6269] tipc: Disabling bearer <eth:syzkaller0>
[   66.682570][ T5876] Bluetooth: hci0: command tx timeout
[   66.685247][   T55] Bluetooth: hci1: command tx timeout
[   66.762433][   T55] Bluetooth: hci2: command tx timeout
[   67.365770][ T6309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.369757][ T6309] syzkaller0: entered promiscuous mode
[   67.371885][ T6309] syzkaller0: entered allmulticast mode
[   67.390292][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[   67.396402][ T6308] tipc: Resetting bearer <eth:syzkaller0>
[   67.400924][ T6308] tipc: Disabling bearer <eth:syzkaller0>
[   67.618700][ T6317] __nla_validate_parse: 9 callbacks suppressed
[   67.618718][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[   67.633260][ T6317] IPv6: Can't replace route, no match found
[   67.722565][ T5880] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   68.423212][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[   68.448037][ T6339] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[   68.454182][ T6339] netlink: 'syz.1.193': attribute type 2 has an invalid length.
[   68.619679][ T6362] netlink: 'syz.2.202': attribute type 3 has an invalid length.
[   68.762855][ T5880] Bluetooth: hci1: command tx timeout
[   68.763865][   T55] Bluetooth: hci0: command tx timeout
[   68.781971][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.211'.
[   68.852999][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   68.880956][ T6392] netlink: 'syz.2.216': attribute type 1 has an invalid length.
[   69.417362][ T6441] xfrm0: entered promiscuous mode
[   69.419281][ T6441] xfrm0: entered allmulticast mode
[   69.636622][ T6462] syzkaller0: entered promiscuous mode
[   69.639392][ T6462] syzkaller0: entered allmulticast mode
[   69.686365][ T6466] smc: net device bond0 applied user defined pnetid SYZ2
[   69.765480][ T6473] syzkaller0: entered promiscuous mode
[   69.767326][ T6473] syzkaller0: entered allmulticast mode
[   69.772848][ T6475] warning: `syz.0.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.819805][ T6476] netlink: 152 bytes leftover after parsing attributes in process `syz.1.250'.
[   69.872044][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'.
[   70.153830][ T6513] netlink: 'syz.2.258': attribute type 1 has an invalid length.
[   70.156475][ T6513] netlink: 224 bytes leftover after parsing attributes in process `syz.2.258'.
[   70.922393][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   71.243512][ T6560] netlink: 'syz.2.282': attribute type 8 has an invalid length.
[   71.316040][ T6564] batadv_slave_1: entered promiscuous mode
[   71.336485][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[   71.343185][ T6563] batadv_slave_1: left promiscuous mode
[   71.507767][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'.
[   71.591617][ T6582] syzkaller1: entered promiscuous mode
[   71.594287][ T6582] syzkaller1: entered allmulticast mode
[   71.703805][ T6586] wg1 speed is unknown, defaulting to 1000
[   71.706240][ T6586] wg1 speed is unknown, defaulting to 1000
[   71.709222][ T6586] wg1 speed is unknown, defaulting to 1000
[   71.712804][ T6586] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.717762][ T6586] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   71.749321][ T6586] wg1 speed is unknown, defaulting to 1000
[   71.752573][ T6586] wg1 speed is unknown, defaulting to 1000
[   71.755570][ T6586] wg1 speed is unknown, defaulting to 1000
[   71.764474][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[   71.791747][ T6590] netlink: 'syz.0.296': attribute type 4 has an invalid length.
[   71.814614][ T6596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.300'.
[   72.023625][ T6623] syzkaller1: entered promiscuous mode
[   72.025898][ T6623] syzkaller1: entered allmulticast mode
[   72.048989][ T6628] openvswitch: netlink: Message has 20 unknown bytes.
[   72.051214][ T6628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.207027][ T6646] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   72.209969][ T6646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.250081][ T6648] wg1 speed is unknown, defaulting to 1000
[   72.331763][ T6651] wg1 speed is unknown, defaulting to 1000
[   73.325565][ T6754] __nla_validate_parse: 8 callbacks suppressed
[   73.325582][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'.
[   73.698876][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   73.765377][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'.
[   74.153001][   T34] audit: type=1800 audit(1756433788.413:2): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.393" name="memory.events" dev="tmpfs" ino=628 res=0 errno=0
[   74.338482][ T6832] netlink: 'syz.1.405': attribute type 21 has an invalid length.
[   74.341694][ T6832] netlink: 128 bytes leftover after parsing attributes in process `syz.1.405'.
[   74.348759][ T6832] netlink: 'syz.1.405': attribute type 5 has an invalid length.
[   74.353213][ T6832] netlink: 'syz.1.405': attribute type 6 has an invalid length.
[   74.356409][ T6832] netlink: 3 bytes leftover after parsing attributes in process `syz.1.405'.
[   74.600105][ T6859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.417'.
[   74.625012][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[   74.769511][ T6879] syzkaller1: entered promiscuous mode
[   74.771412][ T6879] syzkaller1: entered allmulticast mode
[   74.877252][ T6892] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   74.881680][ T6892] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   76.062474][ T6952] bridge1: entered promiscuous mode
[   76.065043][ T6952] bridge1: entered allmulticast mode
[   76.069228][ T6952] team0: Port device bridge1 added
[   76.460737][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   76.464237][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   76.598691][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[   76.608939][ T6981] netlink: 'syz.0.472': attribute type 2 has an invalid length.
[   76.765920][ T6988] netlink: 596 bytes leftover after parsing attributes in process `syz.0.475'.
[   76.946850][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'.
[   76.952018][ T6994] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   76.956822][ T6994] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   77.601127][ T7051] netlink: 34 bytes leftover after parsing attributes in process `syz.0.506'.
[   78.108136][ T7104] trusted_key: syz.1.530 sent an empty control message without MSG_MORE.
[   78.199387][ T7114] Bluetooth: MGMT ver 1.23
[   78.331029][ T7132] tap0: tun_chr_ioctl cmd 35108
[   78.421182][ T7140] netlink: 'syz.0.546': attribute type 39 has an invalid length.
[   78.460901][ T7146] __nla_validate_parse: 2 callbacks suppressed
[   78.460913][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'.
[   78.636672][ T7156] wg1 speed is unknown, defaulting to 1000
[   78.682291][ T5880] Bluetooth: hci2: command 0x0419 tx timeout
[   78.824642][ T7183] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   78.831979][ T7184] ieee802154 phy0 wpan0: encryption failed: -22
[   79.009834][ T7208] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.574'.
[   79.014517][ T7202] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.574'.
[   79.044624][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'.
[   79.074998][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[   79.087765][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[   79.304172][ T7239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.590'.
[   79.955208][ T7268] tipc: Started in network mode
[   79.957156][ T7268] tipc: Node identity 5e6262b45e16, cluster identity 4711
[   79.960160][ T7268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.968124][ T7268] syzkaller0: entered promiscuous mode
[   79.970409][ T7268] syzkaller0: entered allmulticast mode
[   79.978702][ T7268] tipc: Resetting bearer <eth:syzkaller0>
[   79.984054][ T7267] tipc: Resetting bearer <eth:syzkaller0>
[   79.989011][ T7267] tipc: Disabling bearer <eth:syzkaller0>
[   80.380706][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.383250][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.468199][ T7298] netlink: 'syz.0.612': attribute type 2 has an invalid length.
[   80.471010][ T7298] netlink: 'syz.0.612': attribute type 1 has an invalid length.
[   80.530551][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.538887][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.603560][ T7288] hsr1: left allmulticast mode
[   80.605856][ T7288] syz_tun: left allmulticast mode
[   80.608167][ T7288] batadv_slave_0: left allmulticast mode
[   80.614117][ T7288] bridge1: left promiscuous mode
[   80.616319][ T7288] bridge1: left allmulticast mode
[   80.619673][ T7296] netlink: 232 bytes leftover after parsing attributes in process `syz.1.611'.
[   80.627236][ T7296] netlink: 232 bytes leftover after parsing attributes in process `syz.1.611'.
[   80.636560][ T7296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.611'.
[   80.640432][  T793] wg1 speed is unknown, defaulting to 1000
[   80.643119][  T793] syz0: Port: 1 Link DOWN
[   80.647431][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.650896][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.667062][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.670610][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.762614][ T5876] Bluetooth: hci2: command 0x0419 tx timeout
[   81.468196][ T7372] netlink: 'syz.2.645': attribute type 7 has an invalid length.
[   81.609812][   T47] cfg80211: failed to load regulatory.db
[   81.691580][ T7387] wg1 speed is unknown, defaulting to 1000
[   81.842984][ T7391] gretap0: entered promiscuous mode
[   81.845343][ T7391] macvtap2: entered promiscuous mode
[   81.847639][ T7391] macvtap2: entered allmulticast mode
[   81.849425][ T7391] gretap0: entered allmulticast mode
[   81.942640][ T7397] netlink: 'syz.1.655': attribute type 10 has an invalid length.
[   81.945851][ T7397] dummy0: entered promiscuous mode
[   81.947974][ T7397] dummy0: entered allmulticast mode
[   81.950844][ T7397] bridge0: port 3(dummy0) entered blocking state
[   81.953913][ T7397] bridge0: port 3(dummy0) entered disabled state
[   81.957846][ T7397] bridge0: port 3(dummy0) entered blocking state
[   81.960494][ T7397] bridge0: port 3(dummy0) entered forwarding state
[   82.866964][ T7434] syzkaller1: entered promiscuous mode
[   82.869338][ T7434] syzkaller1: entered allmulticast mode
[   83.149815][ T7446] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   83.210484][ T7452] syzkaller0: entered promiscuous mode
[   83.213555][ T7452] syzkaller0: entered allmulticast mode
[   83.483076][ T7485] netlink: 'syz.0.695': attribute type 3 has an invalid length.
[   83.486137][ T7485] netlink: 'syz.0.695': attribute type 1 has an invalid length.
[   83.489272][ T7485] __nla_validate_parse: 7 callbacks suppressed
[   83.489287][ T7485] netlink: 220 bytes leftover after parsing attributes in process `syz.0.695'.
[   83.568770][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[   83.648808][ T7492] syzkaller1: entered promiscuous mode
[   83.651022][ T7492] syzkaller1: entered allmulticast mode
[   84.205074][ T7502] unknown channel width for channel at 909000KHz?
[   84.211214][ T7502] unknown channel width for channel at 909000KHz?
[   84.214563][ T7502] unknown channel width for channel at 909000KHz?
[   84.278243][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[   84.340468][ T7513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.344609][ T7513] syzkaller0: entered promiscuous mode
[   84.346734][ T7513] syzkaller0: entered allmulticast mode
[   84.356985][ T7513] tipc: Resetting bearer <eth:syzkaller0>
[   84.361037][ T7511] tipc: Resetting bearer <eth:syzkaller0>
[   84.365252][ T7511] tipc: Disabling bearer <eth:syzkaller0>
[   84.479995][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[   84.513824][ T7530] sch_fq: defrate 0 ignored.
[   84.567045][ T7534] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   85.139847][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.729'.
[   85.167488][ T7560] delete_channel: no stack
[   85.236190][ T7567] netlink: 'syz.1.732': attribute type 21 has an invalid length.
[   85.238618][ T7567] netlink: 128 bytes leftover after parsing attributes in process `syz.1.732'.
[   85.241491][ T7567] netlink: 'syz.1.732': attribute type 4 has an invalid length.
[   85.245372][ T7567] netlink: 'syz.1.732': attribute type 3 has an invalid length.
[   85.247993][ T7567] netlink: 3 bytes leftover after parsing attributes in process `syz.1.732'.
[   85.397424][ T7578] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.400593][ T7580] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   85.508170][ T7591] netlink: 'syz.2.742': attribute type 3 has an invalid length.
[   85.606538][ T7605] netlink: 240 bytes leftover after parsing attributes in process `syz.1.738'.
[   85.915526][ T7619] wg1 speed is unknown, defaulting to 1000
[   86.094129][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[   86.147356][ T7635] tipc: Started in network mode
[   86.149781][ T7635] tipc: Node identity ceace46e812, cluster identity 4711
[   86.154482][ T7635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.158754][ T7635] syzkaller0: entered promiscuous mode
[   86.160777][ T7635] syzkaller0: entered allmulticast mode
[   86.168195][ T7635] tipc: Resetting bearer <eth:syzkaller0>
[   86.171353][ T7634] tipc: Resetting bearer <eth:syzkaller0>
[   86.175286][ T7634] tipc: Disabling bearer <eth:syzkaller0>
[   86.587382][ T7677] nft_compat: unsupported protocol 0
[   86.599453][ T7679] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[   86.603408][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   86.606043][ T7679] netlink: 232 bytes leftover after parsing attributes in process `syz.0.778'.
[   86.637791][ T7681] syzkaller1: entered promiscuous mode
[   86.640485][ T7681] syzkaller1: entered allmulticast mode
[   86.749871][ T7690] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[   87.102897][ T7712] syzkaller0: entered promiscuous mode
[   87.105118][ T7712] syzkaller0: entered allmulticast mode
[   87.550572][ T7745] netlink: 'syz.0.809': attribute type 10 has an invalid length.
[   87.564489][ T7745] 8021q: adding VLAN 0 to HW filter on device team0
[   87.573735][ T7745] bond0: (slave team0): Enslaving as an active interface with an up link
[   87.771604][   T34] audit: type=1800 audit(1756433802.023:3): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.817" name="memory.events" dev="tmpfs" ino=1267 res=0 errno=0
[   87.782691][ T7768] wg1 speed is unknown, defaulting to 1000
[   87.846740][ T7774] wg1 speed is unknown, defaulting to 1000
[   88.040446][ T7797] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   88.269158][ T7809] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.318438][ T7809] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.333815][ T7810] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   88.370406][ T7809] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.428074][ T7809] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.478168][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.486663][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.494699][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.501568][ T7306] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.537665][ T7812] __nla_validate_parse: 3 callbacks suppressed
[   88.537682][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'.
[   88.544508][ T7812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.796081][ T7832] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.800002][ T7832] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.944553][ T7851] netlink: 'syz.1.852': attribute type 1 has an invalid length.
[   88.969879][ T7851] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.985877][ T7851] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.988964][ T7851] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   89.004261][ T7851] bond1: (slave vcan1): Error -95 calling set_mac_address
[   89.035067][ T7862] gretap1: entered promiscuous mode
[   89.037955][ T7862] bond1: (slave gretap1): making interface the new active one
[   89.041734][ T7862] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   89.045741][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[   89.050233][ T7862] macvlan2: entered promiscuous mode
[   89.051882][ T7862] macvlan2: entered allmulticast mode
[   89.055438][ T7862] bond1: entered promiscuous mode
[   89.057528][ T7862] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   89.062445][ T7862] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   89.066586][ T7862] bond1: left promiscuous mode
[   89.120729][ T7862] syz.1.852 (7862) used greatest stack depth: 19952 bytes left
[   89.188594][ T7875] netlink: 'syz.1.857': attribute type 2 has an invalid length.
[   89.191730][ T7875] netlink: 116 bytes leftover after parsing attributes in process `syz.1.857'.
[   89.231729][ T7880] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   89.729988][   T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[   89.809249][ T7926] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   90.550492][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.903'.
[   90.557842][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'.
[   90.905490][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'.
[   91.102796][ T8037] bridge2: entered allmulticast mode
[   91.483891][ T8062] policy can only be matched on NF_INET_PRE_ROUTING
[   91.483909][ T8062] unable to load match
[   91.562048][ T8066] netlink: 'syz.0.940': attribute type 1 has an invalid length.
[   91.571925][ T8066] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.586545][ T8066] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.589240][ T8066] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.594211][ T8066] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   91.674164][ T8078] netlink: 'syz.2.944': attribute type 3 has an invalid length.
[   92.682410][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   92.737153][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'.
[   92.740719][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.749061][ T8105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.753635][ T8105] syzkaller0: entered promiscuous mode
[   92.755817][ T8105] syzkaller0: entered allmulticast mode
[   92.764547][ T8105] tipc: Resetting bearer <eth:syzkaller0>
[   92.768763][ T8103] tipc: Resetting bearer <eth:syzkaller0>
[   92.771734][ T8103] tipc: Disabling bearer <eth:syzkaller0>
[   93.111234][ T8128] wg1 speed is unknown, defaulting to 1000
[   93.181780][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'.
[   93.296898][ T8141] netlink: 96 bytes leftover after parsing attributes in process `syz.0.971'.
[   93.446604][ T8153] netlink: 332 bytes leftover after parsing attributes in process `syz.0.977'.
[   93.601096][ T8171] netlink: 'syz.0.986': attribute type 99 has an invalid length.
[   93.615749][ T8173] netlink: 'syz.2.987': attribute type 1 has an invalid length.
[   93.618797][ T8173] netlink: 'syz.2.987': attribute type 2 has an invalid length.
[   93.622084][ T8173] __nla_validate_parse: 2 callbacks suppressed
[   93.631367][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[   93.711240][   T34] audit: type=1800 audit(1756433807.963:4): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.992" name="memory.events" dev="tmpfs" ino=1670 res=0 errno=0
[   93.720724][   T34] audit: type=1804 audit(1756433807.973:5): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.992" name="memory.events" dev="tmpfs" ino=1670 res=1 errno=0
[   93.859324][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'.
[   94.009011][ T8218] pim6reg9: entered allmulticast mode
[   94.013946][ T8220] netlink: 'syz.1.1008': attribute type 3 has an invalid length.
[   94.017367][ T8220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1008'.
[   94.056994][ T8224] netlink: 'syz.1.1010': attribute type 1 has an invalid length.
[   94.088794][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[   94.268179][ T8250] netem: change failed
[   94.280223][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.531461][ T8276] wg1 speed is unknown, defaulting to 1000
[   94.679822][ T8284] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1037'.
[   94.708634][ T8276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1035'.
[   94.718810][ T8276] netlink: 'syz.2.1035': attribute type 13 has an invalid length.
[   94.727908][ T8276] netlink: 'syz.2.1035': attribute type 17 has an invalid length.
[   94.751048][ T8276] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   94.931492][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'.
[   95.089223][ T8306] bridge_slave_0: left allmulticast mode
[   95.091134][ T8306] bridge_slave_0: left promiscuous mode
[   95.094819][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.099113][ T8306] bridge_slave_1: left allmulticast mode
[   95.101484][ T8306] bridge_slave_1: left promiscuous mode
[   95.104009][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.108835][ T8306] bond0: (slave bond_slave_0): Releasing backup interface
[   95.115409][ T8306] bond0: (slave bond_slave_1): Releasing backup interface
[   95.119537][ T8306] team0: Port device team_slave_0 removed
[   95.124302][ T8306] team0: Port device team_slave_1 removed
[   95.126937][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.130352][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.134847][ T8306] team0: Port device bridge1 removed
[   95.186582][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1042'.
[   95.291046][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'.
[   95.348791][ T8317] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   96.375110][ T8376] netlink: 'syz.0.1076': attribute type 10 has an invalid length.
[   96.377570][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.380493][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.391434][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.393824][ T8376] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.396466][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.398674][ T8376] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.406077][ T8376] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   96.524131][ T8386] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1081'.
[   96.867310][   T24] IPVS: starting estimator thread 0...
[   96.962460][ T8424] IPVS: using max 61 ests per chain, 146400 per kthread
[   97.905991][ T8487] netlink: 'syz.0.1129': attribute type 32 has an invalid length.
[   98.242427][ T8521] wg1 speed is unknown, defaulting to 1000
[   98.321359][ T8524] netlink: 'syz.0.1141': attribute type 1 has an invalid length.
[   99.110448][ T8567] netlink: 'syz.0.1162': attribute type 4 has an invalid length.
[   99.115734][ T8567] netlink: 'syz.0.1162': attribute type 4 has an invalid length.
[  100.015179][ T8610] tipc: New replicast peer: 0.0.0.0
[  100.017442][ T8610] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.020135][ T8610] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  100.097589][ T8614] __nla_validate_parse: 7 callbacks suppressed
[  100.097603][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'.
[  100.104485][ T8618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.108580][ T8614] openvswitch: netlink: Flow actions attr not present in new flow.
[  100.269764][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'.
[  100.718816][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  101.142321][  T794] tipc: Node number set to 1351974043
[  101.489285][ T8709] netlink: 'syz.1.1227': attribute type 9 has an invalid length.
[  101.528704][ T8714] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1229'.
[  101.569620][ T8722] netlink: 'syz.0.1233': attribute type 2 has an invalid length.
[  101.630526][ T8730] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1237'.
[  101.864383][ T8758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.917862][ T8765] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1252'.
[  101.920857][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'.
[  101.926639][ T8762] wg1 speed is unknown, defaulting to 1000
[  102.920628][ T8805] netlink: 'syz.2.1270': attribute type 1 has an invalid length.
[  102.923420][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout
[  102.925845][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  102.928661][ T8805] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1270'.
[  103.121705][ T8832] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1283'.
[  103.125429][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'.
[  103.171566][ T8833] bond0: (slave bridge0): Releasing backup interface
[  103.175178][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.177967][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.192503][ T8833] bond0: (slave team0): Releasing backup interface
[  103.200367][ T8833] bridge_slave_0: left allmulticast mode
[  103.208031][ T8833] bridge_slave_0: left promiscuous mode
[  103.210197][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.225549][ T8833] bridge_slave_1: left allmulticast mode
[  103.227778][ T8833] bridge_slave_1: left promiscuous mode
[  103.233585][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.250031][ T8833] bond0: (slave bond_slave_0): Releasing backup interface
[  103.258126][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'.
[  103.259898][ T8833] bond0: (slave bond_slave_1): Releasing backup interface
[  103.276724][ T8833] team0: Port device team_slave_0 removed
[  103.285072][ T8833] team0: Port device team_slave_1 removed
[  103.287371][ T8833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.289878][ T8833] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.293213][ T8833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.295516][ T8833] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.426987][ T8861] atomic_op ffff88803044c198 conn xmit_atomic 0000000000000000
[  104.573104][ T8914] pimreg: tun_chr_ioctl cmd 1074812118
[  105.331409][ T9004] __nla_validate_parse: 1 callbacks suppressed
[  105.331420][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'.
[  105.439471][ T9020] netlink: 'syz.1.1369': attribute type 10 has an invalid length.
[  105.444735][ T9020] bridge0: port 3(dummy0) entered disabled state
[  105.446899][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.463886][ T9020] bridge0: port 3(dummy0) entered blocking state
[  105.466409][ T9020] bridge0: port 3(dummy0) entered forwarding state
[  105.469176][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.471996][ T9020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.475121][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.477944][ T9020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.485515][ T9020] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  105.490890][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'.
[  105.494864][ T9024] bridge0: port 3(dummy0) entered disabled state
[  105.579275][ T9024] bridge_slave_1: left allmulticast mode
[  105.581680][ T9024] bridge_slave_1: left promiscuous mode
[  105.585782][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.601565][ T9024] bridge_slave_0: left allmulticast mode
[  105.604143][ T9024] bridge_slave_0: left promiscuous mode
[  105.606660][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.617216][ T9024] bond0: (slave bridge0): Releasing backup interface
[  105.810625][ T9054] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1379'.
[  106.168610][ T9064] netlink: 'syz.0.1387': attribute type 1 has an invalid length.
[  106.213500][ T9070] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  106.365175][ T9081] lo speed is unknown, defaulting to 1000
[  106.367412][ T9081] lo speed is unknown, defaulting to 1000
[  106.370036][ T9081] lo speed is unknown, defaulting to 1000
[  106.376089][ T9081] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  106.402462][ T9081] lo speed is unknown, defaulting to 1000
[  106.405580][ T9081] lo speed is unknown, defaulting to 1000
[  106.407989][ T9081] lo speed is unknown, defaulting to 1000
[  106.448299][ T9083] syzkaller1: entered promiscuous mode
[  106.456280][ T9083] syzkaller1: entered allmulticast mode
[  106.818812][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'.
[  107.024496][ T9143] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1426'.
[  107.154292][ T9159] netlink: 'syz.2.1426': attribute type 1 has an invalid length.
[  107.157296][ T9159] netlink: 'syz.2.1426': attribute type 1 has an invalid length.
[  107.165715][ T9159] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1426'.
[  107.718574][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'.
[  107.800807][ T9200] netlink: 'syz.1.1450': attribute type 3 has an invalid length.
[  108.151505][ T9233] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1466'.
[  108.389647][ T9270] netlink: 'syz.2.1480': attribute type 32 has an invalid length.
[  108.395498][ T9270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1480'.
[  109.365567][ T9370] wg1 speed is unknown, defaulting to 1000
[  109.367973][ T9370] lo speed is unknown, defaulting to 1000
[  109.676422][ T9394] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1533'.
[  109.776753][ T9406] netlink: 'syz.0.1538': attribute type 6 has an invalid length.
[  110.028364][ T9430] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  110.169403][ T9442] netlink: 'syz.1.1556': attribute type 1 has an invalid length.
[  110.183095][ T9442] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.931636][ T9469] vlan2: entered promiscuous mode
[  110.934627][ T9469] bridge0: entered promiscuous mode
[  111.562673][ T9504] __nla_validate_parse: 2 callbacks suppressed
[  111.562689][ T9504] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1584'.
[  111.638272][ T9508] nbd: device at index 1 is going down
[  112.087969][ T9565] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1613'.
[  112.341339][ T9601] netlink: 'syz.1.1630': attribute type 39 has an invalid length.
[  112.347361][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1629'.
[  112.757512][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'.
[  112.805395][ T9667] netlink: 'syz.1.1663': attribute type 10 has an invalid length.
[  112.806665][ T9671] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  112.822052][ T9667] team0: Device veth0_macvtap failed to register rx_handler
[  112.848070][ T9667] syz.1.1663 (9667) used greatest stack depth: 18864 bytes left
[  112.969521][ T9698] gretap2: entered promiscuous mode
[  112.971670][ T9698] gretap2: entered allmulticast mode
[  113.153549][ T9721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.156673][ T9721] syzkaller0: entered promiscuous mode
[  113.158869][ T9721] syzkaller0: entered allmulticast mode
[  113.165606][ T9725] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1691'.
[  113.171227][ T9721] tipc: Resetting bearer <eth:syzkaller0>
[  113.179816][ T9720] tipc: Resetting bearer <eth:syzkaller0>
[  113.184974][ T9720] tipc: Disabling bearer <eth:syzkaller0>
[  114.087419][ T9781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.090695][ T9781] syzkaller0: entered promiscuous mode
[  114.094880][ T9781] syzkaller0: entered allmulticast mode
[  114.104765][ T9781] tipc: Resetting bearer <eth:syzkaller0>
[  114.107284][ T9781] syzkaller0: tun_net_xmit 90
[  114.110785][ T9780] tipc: Resetting bearer <eth:syzkaller0>
[  114.114427][ T9780] tipc: Disabling bearer <eth:syzkaller0>
[  114.266632][ T9787] netlink: 'syz.2.1720': attribute type 1 has an invalid length.
[  114.702362][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'.
[  114.743411][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'.
[  114.852670][ T9847] syzkaller0: entered promiscuous mode
[  114.854356][ T9847] syzkaller0: entered allmulticast mode
[  114.855759][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'.
[  115.316458][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'.
[  115.320243][ T9884] openvswitch: netlink: Missing key (keys=40, expected=100)
[  116.015812][ T9907] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1775'.
[  116.629234][ T9948] wg1 speed is unknown, defaulting to 1000
[  116.633448][ T9948] lo speed is unknown, defaulting to 1000
[  116.687681][ T9957] __nla_validate_parse: 3 callbacks suppressed
[  116.687698][ T9957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1799'.
[  116.725832][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'.
[  116.800729][ T9963] netlink: 'syz.1.1802': attribute type 3 has an invalid length.
[  117.072916][ T9995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.399008][T10027] GUP no longer grows the stack in syz.2.1829 (10027): 200000006000-20000000a000 (200000005000)
[  117.403099][T10027] CPU: 0 UID: 0 PID: 10027 Comm: syz.2.1829 Not tainted syzkaller #0 PREEMPT(full) 
[  117.403113][T10027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.403137][T10027] Call Trace:
[  117.403151][T10027]  <TASK>
[  117.403156][T10027]  dump_stack_lvl+0x189/0x250
[  117.403174][T10027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.403188][T10027]  ? __pfx__printk+0x10/0x10
[  117.403204][T10027]  ? find_vma+0xe7/0x160
[  117.403224][T10027]  __get_user_pages+0x24d0/0x2ce0
[  117.403239][T10027]  ? __asan_memcpy+0x40/0x70
[  117.403257][T10027]  ? __gup_longterm_locked+0xc68/0x1660
[  117.403276][T10027]  ? __gup_longterm_locked+0xc68/0x1660
[  117.403292][T10027]  __gup_longterm_locked+0xde9/0x1660
[  117.403309][T10027]  ? try_grab_folio_fast+0x1be/0x4f0
[  117.403327][T10027]  ? rcu_is_watching+0x15/0xb0
[  117.403342][T10027]  ? rcu_is_watching+0x15/0xb0
[  117.403356][T10027]  gup_fast_fallback+0x1e6a/0x2010
[  117.403383][T10027]  ? __pfx_gup_fast_fallback+0x10/0x10
[  117.403399][T10027]  ? __mutex_lock+0x335/0x1350
[  117.403412][T10027]  ? lock_release+0x4b/0x3e0
[  117.403435][T10027]  ? futex_unqueue+0x22/0x240
[  117.403448][T10027]  ? futex_unqueue+0x22/0x240
[  117.403458][T10027]  ? is_valid_gup_args+0x11f/0x200
[  117.403468][T10027]  ? get_user_pages_fast+0x4d/0xb0
[  117.403477][T10027]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  117.403487][T10027]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  117.403498][T10027]  ? futex_private_hash_get+0x43/0x290
[  117.403506][T10027]  ? wait_for_space+0x24d/0x2d0
[  117.403517][T10027]  iov_iter_get_pages2+0x5e/0xa0
[  117.403527][T10027]  __se_sys_vmsplice+0x548/0x10d0
[  117.403541][T10027]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  117.403552][T10027]  ? __pfx_futex_wait+0x10/0x10
[  117.403571][T10027]  ? do_pipe2+0xf7/0x170
[  117.403582][T10027]  ? rcu_is_watching+0x15/0xb0
[  117.403590][T10027]  ? rcu_is_watching+0x15/0xb0
[  117.403598][T10027]  do_syscall_64+0xfa/0x3b0
[  117.403605][T10027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.403613][T10027]  ? exc_page_fault+0x9f/0xf0
[  117.403623][T10027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.403630][T10027] RIP: 0033:0x7faed298ebe9
[  117.403638][T10027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.403645][T10027] RSP: 002b:00007faed37f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  117.403655][T10027] RAX: ffffffffffffffda RBX: 00007faed2bb5fa0 RCX: 00007faed298ebe9
[  117.403661][T10027] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000011
[  117.403666][T10027] RBP: 00007faed2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  117.403671][T10027] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  117.403676][T10027] R13: 00007faed2bb6038 R14: 00007faed2bb5fa0 R15: 00007fff98584f38
[  117.403685][T10027]  </TASK>
[  117.638413][T10044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.645953][T10044] syzkaller0: entered promiscuous mode
[  117.648269][T10044] syzkaller0: entered allmulticast mode
[  117.657162][T10044] tipc: Resetting bearer <eth:syzkaller0>
[  117.661046][T10043] tipc: Resetting bearer <eth:syzkaller0>
[  117.667133][T10043] tipc: Disabling bearer <eth:syzkaller0>
[  117.726380][T10052] sctp: [Deprecated]: syz.1.1841 (pid 10052) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.726380][T10052] Use struct sctp_sack_info instead
[  117.797679][T10061] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1845'.
[  117.854710][T10063] wg1 speed is unknown, defaulting to 1000
[  117.857674][T10063] lo speed is unknown, defaulting to 1000
[  117.901239][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  117.945596][T10075] netlink: 'syz.0.1850': attribute type 1 has an invalid length.
[  117.964992][T10065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1847'.
[  117.969488][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'.
[  118.129552][T10092] syzkaller1: entered promiscuous mode
[  118.131502][T10092] syzkaller1: entered allmulticast mode
[  118.234167][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'.
[  118.379023][T10119] wg1 speed is unknown, defaulting to 1000
[  118.382039][T10119] lo speed is unknown, defaulting to 1000
[  118.443863][ T5876] Bluetooth: hci2: link tx timeout
[  118.445974][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.717925][T10163] syzkaller1: entered promiscuous mode
[  118.719722][T10163] syzkaller1: entered allmulticast mode
[  118.807399][T10170] wg1 speed is unknown, defaulting to 1000
[  118.809727][T10170] lo speed is unknown, defaulting to 1000
[  118.870431][T10181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.877213][T10170] geneve0: entered promiscuous mode
[  118.879206][T10170] geneve0: entered allmulticast mode
[  118.885438][T10181] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  118.893320][T10181] syzkaller0: entered promiscuous mode
[  118.895445][T10181] syzkaller0: entered allmulticast mode
[  118.916944][T10181] tipc: Resetting bearer <eth:syzkaller0>
[  118.922460][ T5876] Bluetooth: hci2: command 0x0419 tx timeout
[  118.925470][T10180] tipc: Resetting bearer <eth:syzkaller0>
[  118.939988][T10180] tipc: Disabling bearer <eth:syzkaller0>
[  119.567844][T10235] netlink: del zone limit has 8 unknown bytes
[  119.603063][T10237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.610720][T10237] tipc: Failed to remove unknown binding: 66,1,1/1351974043:2041895600/2041895602
[  119.621134][T10237] tipc: Failed to remove unknown binding: 66,1,1/1351974043:2041895600/2041895602
[  119.625807][T10237] tipc: Failed to remove unknown binding: 66,1,1/1351974043:2041895600/2041895602
[  119.635114][T10237] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1913'.
[  119.718389][T10239] batadv_slave_1: entered promiscuous mode
[  119.731938][T10239] batadv_slave_1: left promiscuous mode
[  119.831417][T10252] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1918'.
[  119.918195][T10262] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1924'.
[  120.478902][T10287] sock: sock_set_timeout: `syz.2.1936' (pid 10287) tries to set negative timeout
[  120.567802][  T794] IPVS: starting estimator thread 0...
[  120.672693][T10294] IPVS: using max 48 ests per chain, 115200 per kthread
[  120.846709][T10316] batadv1: entered promiscuous mode
[  121.003229][ T5876] Bluetooth: hci2: command 0x0419 tx timeout
[  121.343508][T10379] tipc: New replicast peer: 255.255.255.255
[  121.346273][T10379] tipc: Enabled bearer <udp:syz2>, priority 10
[  121.424184][T10385] netlink: 'syz.0.1982': attribute type 2 has an invalid length.
[  121.428991][T10385] : entered promiscuous mode
[  121.994328][T10404] netlink: 'syz.2.1989': attribute type 4 has an invalid length.
[  122.196447][T10412] __nla_validate_parse: 9 callbacks suppressed
[  122.196459][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1992'.
[  122.201796][T10412] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1992'.
[  122.462603][   T10] tipc: Node number set to 1334633582
[  122.671772][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'.
[  122.739946][T10466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2018'.
[  123.099669][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2029'.
[  123.340439][T10506] vlan2: entered promiscuous mode
[  123.488804][T10512] vlan2: entered promiscuous mode
[  123.490945][T10512] vlan2: entered allmulticast mode
[  123.502399][T10512] hsr_slave_1: entered allmulticast mode
[  123.790825][T10532] netlink: 'syz.1.2048': attribute type 10 has an invalid length.
[  123.804152][T10532] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.807693][T10532] team0: Port device bond0 added
[  123.880665][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'.
[  123.943272][T10549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.968645][T10549] syzkaller0: entered promiscuous mode
[  123.970789][T10549] syzkaller0: entered allmulticast mode
[  123.999631][T10549] tipc: Resetting bearer <eth:syzkaller0>
[  124.003681][T10548] tipc: Resetting bearer <eth:syzkaller0>
[  124.075748][T10548] tipc: Disabling bearer <eth:syzkaller0>
[  124.262772][T10574] netlink: 'syz.2.2067': attribute type 21 has an invalid length.
[  124.530876][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'.
[  124.545991][T10603] veth2: entered allmulticast mode
[  124.728326][T10619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2089'.
[  124.775286][T10623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.828127][T10623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.874742][T10632] batman_adv: batadv0: Adding interface: dummy0
[  124.877086][T10632] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  124.888580][T10623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.929651][T10636] netlink: 'syz.2.2097': attribute type 1 has an invalid length.
[  124.945376][T10636] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.959917][T10623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.981284][T10636] bond2: (slave veth3): Enslaving as an active interface with a down link
[  124.998487][T10636] gretap2: entered promiscuous mode
[  125.007174][T10636] bond2: (slave gretap2): making interface the new active one
[  125.011908][T10636] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  125.049661][T10636] macvlan0: entered promiscuous mode
[  125.051659][T10636] macvlan0: entered allmulticast mode
[  125.056954][T10636] bond2: entered promiscuous mode
[  125.059229][T10636] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  125.063073][T10636] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  125.069839][T10636] bond2: left promiscuous mode
[  125.093523][ T7306] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.103562][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.125045][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.135573][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.231864][T10649] netlink: 'syz.0.2103': attribute type 10 has an invalid length.
[  125.240882][T10649] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  125.418161][T10672] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2110'.
[  125.455080][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'.
[  125.597337][T10700] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  125.765646][T10720] netlink: 'syz.1.2132': attribute type 6 has an invalid length.
[  126.077172][T10756] netlink: 'syz.2.2151': attribute type 1 has an invalid length.
[  126.476315][T10797] netlink: 'syz.1.2171': attribute type 8 has an invalid length.
[  126.556716][T10810] 8021q: VLANs not supported on ipvlan1
[  126.713501][T10826] lo speed is unknown, defaulting to 1000
[  126.827504][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.261321][T10873] netlink: 'syz.2.2197': attribute type 12 has an invalid length.
[  127.414846][T10876] bond0: entered promiscuous mode
[  127.416697][T10876] bond_slave_0: entered promiscuous mode
[  127.418937][T10876] bond_slave_1: entered promiscuous mode
[  127.421696][T10876] bond0: left promiscuous mode
[  127.424046][T10876] bond_slave_0: left promiscuous mode
[  127.425969][T10876] bond_slave_1: left promiscuous mode
[  127.513834][T10880] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  127.517491][T10880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.420852][T10916] __nla_validate_parse: 7 callbacks suppressed
[  128.420867][T10916] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2217'.
[  128.618690][T10936] netlink: 'syz.2.2226': attribute type 4 has an invalid length.
[  128.660792][T10940] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  128.687178][T10944] lo speed is unknown, defaulting to 1000
[  129.683058][T10969] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  129.701127][T10973] netlink: 'syz.1.2240': attribute type 1 has an invalid length.
[  129.712405][T10973] netlink: 'syz.1.2240': attribute type 11 has an invalid length.
[  129.714844][T10973] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2240'.
[  129.796742][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'.
[  129.810808][T10979] lo speed is unknown, defaulting to 1000
[  129.900424][T10988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2246'.
[  130.000725][T10999] tipc: Cannot configure node identity twice
[  130.090503][T11007] 8021q: adding VLAN 0 to HW filter on device bond3
[  130.095814][T11007] team0: Port device bond3 added
[  130.263893][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'.
[  130.442539][T11046] lo speed is unknown, defaulting to 1000
[  130.444705][T11046] lo speed is unknown, defaulting to 1000
[  130.447045][T11046] lo speed is unknown, defaulting to 1000
[  130.500483][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'.
[  130.514485][T11051] batadv0: entered promiscuous mode
[  130.518504][T11051] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  130.524940][T11051] batadv0: left promiscuous mode
[  130.538580][T11046] infiniband syz0: set active
[  130.540543][  T794] lo speed is unknown, defaulting to 1000
[  130.540949][T11046] infiniband syz0: added lo
[  130.558397][T11046] RDS/IB: syz0: added
[  130.560133][T11046] smc: adding ib device syz0 with port count 1
[  130.564984][T11046] smc:    ib device syz0 port 1 has pnetid 
[  130.567079][   T24] lo speed is unknown, defaulting to 1000
[  130.569393][T11046] lo speed is unknown, defaulting to 1000
[  130.664539][T11046] lo speed is unknown, defaulting to 1000
[  130.737633][T11046] lo speed is unknown, defaulting to 1000
[  130.941550][T11059] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  130.948256][T11058] IPVS: stopping backup sync thread 11059 ...
[  131.213109][T11069] block nbd2: server does not support multiple connections per device.
[  131.230408][T11069] block nbd2: shutting down sockets
[  131.554507][T11087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2286'.
[  131.691168][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'.
[  132.702958][T11138] team0: Mode changed to "loadbalance"
[  132.738838][T11142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2307'.
[  132.873045][T11150] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2311'.
[  133.155881][T11166] netlink: 'syz.1.2318': attribute type 49 has an invalid length.
[  133.454008][T11176] netlink: 'syz.0.2322': attribute type 10 has an invalid length.
[  133.463060][T11176] team0: Device ipvlan1 failed to register rx_handler
[  133.862473][T11190] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.865186][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2328'.
[  133.936780][T11190] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.012199][T11190] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.059852][T11190] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.092005][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'.
[  134.170568][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.179553][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.187103][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.208438][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.340657][T11204] netlink: 'syz.2.2333': attribute type 10 has an invalid length.
[  134.345360][T11204] batman_adv: batadv0: Removing interface: dummy0
[  134.349979][T11204] team0: Port device dummy0 added
[  134.354334][T11204] netlink: 'syz.2.2333': attribute type 10 has an invalid length.
[  134.360128][T11204] team0: Port device dummy0 removed
[  134.426668][T11215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'.
[  134.737325][T11257] syz_tun: entered promiscuous mode
[  134.739473][T11257] vlan0: entered promiscuous mode
[  134.756446][T11261] netlink: 'syz.0.2361': attribute type 15 has an invalid length.
[  134.785253][T11264] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  134.840956][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'.
[  134.985766][T11284] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2371'.
[  134.996885][T11286] lo speed is unknown, defaulting to 1000
[  134.999801][T11286] lo speed is unknown, defaulting to 1000
[  135.080833][T11291] netlink: 'syz.1.2373': attribute type 2 has an invalid length.
[  135.098156][T11291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.115241][   T24] lo speed is unknown, defaulting to 1000
[  135.154565][T11291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'.
[  135.157459][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'.
[  135.241767][T11303] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2377'.
[  135.329255][T11286] netlink: 'syz.0.2370': attribute type 13 has an invalid length.
[  135.334305][T11286] netlink: 'syz.0.2370': attribute type 17 has an invalid length.
[  135.344802][T11286] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  135.409994][T11315] netlink: 'syz.1.2383': attribute type 2 has an invalid length.
[  135.413545][T11315] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2383'.
[  135.461144][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'.
[  135.669684][T11335] syzkaller1: entered promiscuous mode
[  135.672731][T11335] syzkaller1: entered allmulticast mode
[  135.768486][T11348] netlink: 'syz.1.2398': attribute type 21 has an invalid length.
[  135.829942][T11355] : entered promiscuous mode
[  136.403652][T11404] tipc: Trying to set illegal importance in message
[  136.558928][T11422] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  136.967393][T11477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.974856][  T794] lo speed is unknown, defaulting to 1000
[  136.979097][  T794] syz1: Port: 1 Link ACTIVE
[  137.097473][T11495] sctp: [Deprecated]: syz.1.2431 (pid 11495) Use of int in maxseg socket option.
[  137.097473][T11495] Use struct sctp_assoc_value instead
[  137.248642][T11509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.282731][T11516] lo speed is unknown, defaulting to 1000
[  137.286946][T11516] lo speed is unknown, defaulting to 1000
[  137.519190][T11532] lo speed is unknown, defaulting to 1000
[  137.523651][T11532] lo speed is unknown, defaulting to 1000
[  137.697721][T11543] syzkaller1: entered promiscuous mode
[  137.699903][T11543] syzkaller1: entered allmulticast mode
[  137.895830][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  137.898714][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  137.971659][T11558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.974629][T11558] syzkaller0: entered promiscuous mode
[  137.976727][T11558] syzkaller0: entered allmulticast mode
[  138.006143][T11558] tipc: Resetting bearer <eth:syzkaller0>
[  138.013230][T11557] tipc: Resetting bearer <eth:syzkaller0>
[  138.016728][T11557] tipc: Disabling bearer <eth:syzkaller0>
[  138.429573][T11601] validate_nla: 4 callbacks suppressed
[  138.429606][T11601] netlink: 'syz.2.2474': attribute type 3 has an invalid length.
[  138.586572][T11622] netlink: 'syz.1.2485': attribute type 2 has an invalid length.
[  138.804142][T11648] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  138.872370][T11661] sctp: [Deprecated]: syz.1.2501 (pid 11661) Use of int in maxseg socket option.
[  138.872370][T11661] Use struct sctp_assoc_value instead
[  138.943337][T11669] __nla_validate_parse: 8 callbacks suppressed
[  138.943353][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'.
[  138.948747][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'.
[  138.958273][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'.
[  138.961366][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'.
[  139.048866][T11681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  139.353454][T11715] lo speed is unknown, defaulting to 1000
[  139.357021][T11715] lo speed is unknown, defaulting to 1000
[  139.372454][T11714] block nbd2: server does not support multiple connections per device.
[  139.376034][T11714] block nbd2: shutting down sockets
[  139.673883][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'.
[  140.188703][T11741] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2537'.
[  140.410994][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'.
[  140.422048][T11759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2546'.
[  140.510325][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'.
[  140.855722][T11815] netlink: 'syz.0.2567': attribute type 3 has an invalid length.
[  141.441803][ T5900] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.448618][ T5900] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.451990][ T5900] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.461541][ T5900] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.548440][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'.
[  141.885586][T11889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  141.931263][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.935056][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.947713][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.959000][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.964957][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.968012][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.977906][T11893] syzkaller1: entered promiscuous mode
[  141.979717][T11893] syzkaller1: entered allmulticast mode
[  141.990930][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.002862][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.354172][T11921] sctp: [Deprecated]: syz.1.2604 (pid 11921) Use of int in max_burst socket option deprecated.
[  142.354172][T11921] Use struct sctp_assoc_value instead
[  143.161863][T11973] team0: Port device bond0 removed
[  143.169166][T11973] bond0: (slave bond_slave_0): Releasing backup interface
[  143.180165][T11973] bond0: (slave bond_slave_1): Releasing backup interface
[  143.191787][T11973] team0: Port device team_slave_0 removed
[  143.198215][T11973] team0: Port device team_slave_1 removed
[  143.200732][T11973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.206449][T11973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.213940][T11973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.216281][T11973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.227543][T11973] bond1: (slave gretap1): Releasing active interface
[  143.241309][T11973] team0: Port device bond3 removed
[  143.261946][T11979] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  143.554713][T12010] netlink: 'syz.1.2638': attribute type 3 has an invalid length.
[  143.563353][T12010] netlink: 'syz.1.2638': attribute type 3 has an invalid length.
[  143.910249][T12048] syzkaller1: entered promiscuous mode
[  143.914122][T12048] syzkaller1: entered allmulticast mode
[  144.019546][T12058] netlink: 'syz.1.2661': attribute type 1 has an invalid length.
[  144.171141][T12078] __nla_validate_parse: 5 callbacks suppressed
[  144.171152][T12078] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2671'.
[  144.218897][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'.
[  144.251340][T12085] lo speed is unknown, defaulting to 1000
[  144.255190][T12085] lo speed is unknown, defaulting to 1000
[  144.403373][T12100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2680'.
[  144.468114][T12085] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2674'.
[  144.591729][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2690'.
[  144.598031][T12120] smc: net device bond0 applied user defined pnetid SYZ
[  144.696976][T12132] tipc: Enabled bearer <eth:gre0>, priority 10
[  144.768232][T12143] unknown channel width for channel at 909000KHz?
[  144.875506][T12163] netlink: 'syz.1.2712': attribute type 21 has an invalid length.
[  144.898983][T12169] netlink: 'syz.2.2714': attribute type 1 has an invalid length.
[  144.903038][T12169] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2714'.
[  144.910116][T12169] netlink: 'syz.2.2714': attribute type 1 has an invalid length.
[  144.969549][T12177] syz.0.2718 (12177) used obsolete PPPIOCDETACH ioctl
[  145.174510][T12208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.185627][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2730'.
[  145.463270][T12223] syzkaller1: entered promiscuous mode
[  145.465209][T12223] syzkaller1: entered allmulticast mode
[  145.787908][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'.
[  145.812606][   T47] tipc: Node number set to 7627444
[  145.838257][T12252] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  145.898786][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'.
[  145.902891][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2754'.
[  146.220934][T12288] netlink: 'syz.0.2766': attribute type 4 has an invalid length.
[  146.228203][T12288] netlink: 'syz.0.2766': attribute type 4 has an invalid length.
[  146.238970][T12288] IPVS: length: 24 != 55320
[  146.427854][T12315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.433749][T12315] syzkaller0: entered promiscuous mode
[  146.436068][T12315] syzkaller0: entered allmulticast mode
[  146.444790][T12315] tipc: Resetting bearer <eth:syzkaller0>
[  146.448521][T12314] tipc: Resetting bearer <eth:syzkaller0>
[  146.452001][T12314] tipc: Disabling bearer <eth:syzkaller0>
[  146.575095][T12321] pim6reg: entered allmulticast mode
[  146.579179][T12321] pim6reg: left allmulticast mode
[  146.851162][T12337] bridge0: port 1(netdevsim2) entered blocking state
[  146.854043][T12337] bridge0: port 1(netdevsim2) entered disabled state
[  146.856847][T12337] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  146.860815][T12337] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  147.135211][T12367] netem: invalid attributes len -16
[  147.136886][T12367] netem: change failed
[  147.249993][T12377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.254056][T12377] syzkaller0: entered promiscuous mode
[  147.256175][T12377] syzkaller0: entered allmulticast mode
[  147.269710][T12377] tipc: Resetting bearer <eth:syzkaller0>
[  147.280540][T12376] tipc: Resetting bearer <eth:syzkaller0>
[  147.287042][T12376] tipc: Disabling bearer <eth:syzkaller0>
[  147.318673][T12389] netlink: 'syz.1.2813': attribute type 15 has an invalid length.
[  147.724854][T12418] netlink: 'syz.0.2825': attribute type 1 has an invalid length.
[  149.214225][T12533] __nla_validate_parse: 11 callbacks suppressed
[  149.214236][T12533] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2881'.
[  149.219541][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'.
[  149.268926][T12540] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2886'.
[  149.652654][T12578] lo speed is unknown, defaulting to 1000
[  149.654918][T12578] lo speed is unknown, defaulting to 1000
[  149.898371][T12604] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2914'.
[  149.953946][T12606] netlink: 'syz.1.2915': attribute type 21 has an invalid length.
[  149.957240][T12606] gretap0: Device is already in use.
[  150.006291][T12609] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  150.009211][T12609] macsec1: entered promiscuous mode
[  150.011410][T12609] macsec1: entered allmulticast mode
[  150.013615][T12609] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  150.497456][T12644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  150.631529][T12653] lo speed is unknown, defaulting to 1000
[  150.635994][T12653] lo speed is unknown, defaulting to 1000
[  150.940536][T12670] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  151.073563][T12685] bond0: entered promiscuous mode
[  151.075955][T12685] bond0: entered allmulticast mode
[  151.079631][T12685] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.175168][T12698] openvswitch: netlink: Actions may not be safe on all matching packets
[  151.205802][T12704] netlink: 'syz.0.2954': attribute type 1 has an invalid length.
[  151.209116][T12704] netlink: 'syz.0.2954': attribute type 2 has an invalid length.
[  151.359352][T12723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2963'.
[  151.421178][T12730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  152.590724][T12734] gretap0: left allmulticast mode
[  152.611762][T12734] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  152.623799][  T794] lo speed is unknown, defaulting to 1000
[  152.625600][  T794] syz0: Port: 1 Link DOWN
[  152.626296][ T5900] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.629881][ T5900] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.632896][  T794] lo speed is unknown, defaulting to 1000
[  152.648668][ T5900] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.651890][ T5900] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.797224][T12786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2992'.
[  152.838825][T12794] team0: entered promiscuous mode
[  152.840762][T12794] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  152.993726][T12800] lo speed is unknown, defaulting to 1000
[  152.996432][T12800] lo speed is unknown, defaulting to 1000
[  153.137853][T12811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.212327][T12817] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3004'.
[  153.368289][T12828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3007'.
[  153.473954][T12839] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  153.480515][T12839] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  153.485920][T12839] tipc: Enabled bearer <udp:syz0>, priority 10
[  153.523373][T12844] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3011'.
[  153.864282][T12881] netlink: 'syz.2.3020': attribute type 83 has an invalid length.
[  155.342762][T12952] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3049'.
[  155.364158][T12954] netlink: 'syz.2.3050': attribute type 11 has an invalid length.
[  155.528811][T12964] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  155.674594][T12983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3062'.
[  155.753297][T12985] netlink: 'syz.1.3063': attribute type 13 has an invalid length.
[  155.755824][T12985] netlink: 'syz.1.3063': attribute type 17 has an invalid length.
[  155.763820][T12985] gretap0: left promiscuous mode
[  155.809443][T12985] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.814049][T12985] 8021q: adding VLAN 0 to HW filter on device team0
[  155.816789][T12985] dummy0: left promiscuous mode
[  155.818677][T12985] dummy0: left allmulticast mode
[  155.822420][T12985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.827847][ T5939] lo speed is unknown, defaulting to 1000
[  155.829835][ T5939] syz0: Port: 1 Link ACTIVE
[  155.831411][ T5939] lo speed is unknown, defaulting to 1000
[  155.860138][T12985] lo speed is unknown, defaulting to 1000
[  155.862632][T12985] lo speed is unknown, defaulting to 1000
[  155.973243][T12985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.394566][T13000] bridge0: port 2(erspan0) entered blocking state
[  156.396685][T13000] bridge0: port 2(erspan0) entered disabled state
[  156.398830][T13000] erspan0: entered allmulticast mode
[  156.401090][T13000] erspan0: entered promiscuous mode
[  156.526398][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3075'.
[  156.561221][T13015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3076'.
[  156.588629][T13017] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3077'.
[  156.594562][T13017] vlan0: entered allmulticast mode
[  156.596394][T13017] gretap0: entered allmulticast mode
[  156.866879][T13052] lo speed is unknown, defaulting to 1000
[  156.869955][T13052] lo speed is unknown, defaulting to 1000
[  156.894071][T13056] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  157.052241][T13063] veth0_vlan: left promiscuous mode
[  157.054919][T13063] veth0_vlan: entered promiscuous mode
[  157.213535][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'.
[  157.331769][T13090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3111'.
[  158.251366][T13115] netlink: 'syz.2.3123': attribute type 2 has an invalid length.
[  158.255095][T13115] netlink: 'syz.2.3123': attribute type 1 has an invalid length.
[  158.282019][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'.
[  158.291852][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'.
[  158.299272][T13119] netlink: 'syz.0.3125': attribute type 29 has an invalid length.
[  158.304422][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'.
[  158.914531][T13202] 8021q: adding VLAN 0 to HW filter on device bond4
[  159.059620][T13229] netlink: 'syz.0.3170': attribute type 5 has an invalid length.
[  159.181692][T13251] tipc: Can't bind to reserved service type 2
[  159.287942][T13262] pim6reg1: entered promiscuous mode
[  159.289874][T13262] pim6reg1: entered allmulticast mode
[  160.054375][T13324] openvswitch: netlink: Flow actions attr not present in new flow.
[  160.202260][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  160.276230][T13338] atomic_op ffff88801d2ef198 conn xmit_atomic 0000000000000000
[  160.387446][T13347] __nla_validate_parse: 11 callbacks suppressed
[  160.387458][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3218'.
[  160.535581][T13371] netlink: 'syz.2.3230': attribute type 1 has an invalid length.
[  160.538596][T13371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3230'.
[  160.734145][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3244'.
[  160.737746][T13399] erspan0: left allmulticast mode
[  160.739800][T13399] erspan0: left promiscuous mode
[  160.741994][T13399] bridge0: port 2(erspan0) entered disabled state
[  160.747759][T13401] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3245'.
[  160.751682][T13399] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[  160.756280][T13399] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[  160.759168][T13399] bridge0: port 1(netdevsim2) entered disabled state
[  160.805164][T13401] 0X: renamed from caif0
[  160.809545][T13401] 0X: entered allmulticast mode
[  160.811244][T13401] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  160.904402][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'.
[  160.978677][T13435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  160.986383][T13435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  160.991223][T13435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  161.174976][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'.
[  161.216139][T13472] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  161.273594][T13483] netdevsim0: mtu less than device minimum
[  161.325215][T13491] netlink: 'syz.2.3286': attribute type 1 has an invalid length.
[  161.328048][T13491] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3286'.
[  161.378439][T13503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3287'.
[  161.386519][T13493] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3287'.
[  161.640487][T13518] lo speed is unknown, defaulting to 1000
[  161.645763][T13518] lo speed is unknown, defaulting to 1000
[  161.681442][T13533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.685405][T13533] syzkaller0: entered promiscuous mode
[  161.687644][T13533] syzkaller0: entered allmulticast mode
[  161.695506][T13533] tipc: Resetting bearer <eth:syzkaller0>
[  161.700372][T13532] tipc: Resetting bearer <eth:syzkaller0>
[  161.705141][T13532] tipc: Disabling bearer <eth:syzkaller0>
[  161.775575][T13539] xt_time: unknown flags 0xf4
[  161.856871][T13550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.955861][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3317'.
[  162.576424][T13608] netlink: 'syz.1.3340': attribute type 1 has an invalid length.
[  162.584985][T13608] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  162.589156][T13608] gretap2: entered promiscuous mode
[  163.039110][ T5900] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  163.679187][T13677] bridge6: entered promiscuous mode
[  163.681352][T13677] bridge6: entered allmulticast mode
[  163.780436][T13686] netlink: 'syz.1.3374': attribute type 4 has an invalid length.
[  163.791839][T13686] netlink: 'syz.1.3374': attribute type 4 has an invalid length.
[  163.795155][   T47] lo speed is unknown, defaulting to 1000
[  163.799680][   T47] syz0: Port: 1 Link DOWN
[  163.815578][   T47] lo speed is unknown, defaulting to 1000
[  163.819409][   T10] lo speed is unknown, defaulting to 1000
[  163.821339][   T10] syz0: Port: 1 Link ACTIVE
[  164.243060][T13734] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  165.755162][T13864] netlink: 'syz.1.3457': attribute type 13 has an invalid length.
[  165.798001][T13872] __nla_validate_parse: 13 callbacks suppressed
[  165.798012][T13872] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3461'.
[  165.926074][T13887] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.3468'.
[  165.976828][T13896] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3473'.
[  166.007262][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'.
[  166.011032][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'.
[  166.056028][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3477'.
[  166.099419][T13909] lo speed is unknown, defaulting to 1000
[  166.102810][T13909] lo speed is unknown, defaulting to 1000
[  166.213776][T13922] lo speed is unknown, defaulting to 1000
[  166.347566][T13922] lo speed is unknown, defaulting to 1000
[  167.014582][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'.
[  167.210524][   T34] audit: type=1800 audit(1756433881.463:6): pid=14020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3511" name="memory.events" dev="tmpfs" ino=5604 res=0 errno=0
[  167.458528][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3525'.
[  167.463633][T14047] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  167.525517][T14051] syzkaller0: entered promiscuous mode
[  167.527515][T14051] syzkaller0: entered allmulticast mode
[  167.595571][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3529'.
[  167.735059][T14062] netlink: 'syz.0.3533': attribute type 14 has an invalid length.
[  167.795273][T14072] netlink: 'syz.2.3538': attribute type 6 has an invalid length.
[  167.806404][T14072] bond5: entered promiscuous mode
[  167.890895][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3542'.
[  167.893928][T14081] netlink: 'syz.1.3542': attribute type 4 has an invalid length.
[  167.901903][T14086] lo speed is unknown, defaulting to 1000
[  167.920501][T14086] lo speed is unknown, defaulting to 1000
[  167.962273][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  168.353539][T14151] netlink: 'syz.1.3572': attribute type 1 has an invalid length.
[  168.648957][T14184] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  169.227107][T14157] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  169.229673][T14157] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  169.235593][T14157] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  169.237890][T14157] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  169.242987][T14157] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  169.245363][T14157] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  169.505481][T14224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  169.854373][T14252] ==================================================================
[  169.857255][T14252] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  169.859862][T14252] Read of size 2 at addr ffff88810dfa0a42 by task syz.0.3620/14252
[  169.863163][T14252] 
[  169.864218][T14252] CPU: 1 UID: 0 PID: 14252 Comm: syz.0.3620 Not tainted syzkaller #0 PREEMPT(full) 
[  169.864230][T14252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.864236][T14252] Call Trace:
[  169.864241][T14252]  <TASK>
[  169.864245][T14252]  dump_stack_lvl+0x189/0x250
[  169.864261][T14252]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.864271][T14252]  ? lock_release+0x4b/0x3e0
[  169.864285][T14252]  ? __virt_addr_valid+0x4a5/0x5c0
[  169.864296][T14252]  print_report+0xca/0x240
[  169.864305][T14252]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  169.864312][T14252]  kasan_report+0x118/0x150
[  169.864325][T14252]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  169.864335][T14252]  __xfrm_state_lookup+0x6ad/0x8d0
[  169.864344][T14252]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  169.864354][T14252]  xfrm_state_add+0x27d/0xc40
[  169.864365][T14252]  xfrm_add_sa+0x35a1/0x4070
[  169.864377][T14252]  ? __pfx_xfrm_add_sa+0x10/0x10
[  169.864385][T14252]  ? apparmor_capable+0x137/0x1b0
[  169.864396][T14252]  ? __nla_parse+0x40/0x60
[  169.864407][T14252]  xfrm_user_rcv_msg+0x7a3/0xab0
[  169.864418][T14252]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  169.864433][T14252]  ? __pfx___mutex_trylock_common+0x10/0x10
[  169.864441][T14252]  ? kasan_save_track+0x4f/0x80
[  169.864459][T14252]  ? rcu_is_watching+0x15/0xb0
[  169.864468][T14252]  ? trace_contention_end+0x39/0x120
[  169.864477][T14252]  ? __mutex_lock+0x335/0x1350
[  169.864486][T14252]  netlink_rcv_skb+0x208/0x470
[  169.864498][T14252]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  169.864508][T14252]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  169.864522][T14252]  ? lock_release+0x4b/0x3e0
[  169.864532][T14252]  ? net_generic+0x1e/0x240
[  169.864541][T14252]  ? net_generic+0x1e/0x240
[  169.864551][T14252]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.864563][T14252]  xfrm_netlink_rcv+0x79/0x90
[  169.864572][T14252]  netlink_unicast+0x82f/0x9e0
[  169.864583][T14252]  ? __pfx_netlink_unicast+0x10/0x10
[  169.864593][T14252]  ? netlink_sendmsg+0x642/0xb30
[  169.864599][T14252]  ? skb_put+0x11b/0x210
[  169.864608][T14252]  netlink_sendmsg+0x805/0xb30
[  169.864616][T14252]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.864624][T14252]  ? aa_sock_msg_perm+0xf1/0x1d0
[  169.864631][T14252]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.864639][T14252]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.864646][T14252]  __sock_sendmsg+0x21c/0x270
[  169.864656][T14252]  ____sys_sendmsg+0x505/0x830
[  169.864666][T14252]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.864675][T14252]  ? import_iovec+0x74/0xa0
[  169.864684][T14252]  ___sys_sendmsg+0x21f/0x2a0
[  169.864693][T14252]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.864701][T14252]  ? futex_wake+0x4b2/0x560
[  169.864716][T14252]  ? __fget_files+0x2a/0x420
[  169.864723][T14252]  ? __fget_files+0x3a0/0x420
[  169.864731][T14252]  __x64_sys_sendmsg+0x19b/0x260
[  169.864740][T14252]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.864749][T14252]  ? rcu_is_watching+0x15/0xb0
[  169.864757][T14252]  ? rcu_is_watching+0x15/0xb0
[  169.864765][T14252]  do_syscall_64+0xfa/0x3b0
[  169.864772][T14252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.864780][T14252]  ? exc_page_fault+0x9f/0xf0
[  169.864790][T14252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.864798][T14252] RIP: 0033:0x7ff9c438ebe9
[  169.864807][T14252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.864814][T14252] RSP: 002b:00007ff9c525f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.864823][T14252] RAX: ffffffffffffffda RBX: 00007ff9c45b5fa0 RCX: 00007ff9c438ebe9
[  169.864829][T14252] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  169.864834][T14252] RBP: 00007ff9c4411e19 R08: 0000000000000000 R09: 0000000000000000
[  169.864839][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.864844][T14252] R13: 00007ff9c45b6038 R14: 00007ff9c45b5fa0 R15: 00007ffc0479dee8
[  169.864854][T14252]  </TASK>
[  169.864857][T14252] 
[  170.001907][T14252] Allocated by task 11633:
[  170.003464][T14252]  kasan_save_track+0x3e/0x80
[  170.004924][T14252]  __kasan_slab_alloc+0x6c/0x80
[  170.006514][T14252]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  170.008083][T14252]  xfrm_state_alloc+0x24/0x2f0
[  170.009623][T14252]  pfkey_add+0x6e4/0x2e00
[  170.011063][T14252]  pfkey_sendmsg+0xbfe/0x1090
[  170.012607][T14252]  __sock_sendmsg+0x21c/0x270
[  170.014057][T14252]  ____sys_sendmsg+0x52d/0x830
[  170.015580][T14252]  ___sys_sendmsg+0x21f/0x2a0
[  170.017143][T14252]  __sys_sendmmsg+0x227/0x430
[  170.018712][T14252]  __x64_sys_sendmmsg+0xa0/0xc0
[  170.020403][T14252]  do_syscall_64+0xfa/0x3b0
[  170.021897][T14252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.024059][T14252] 
[  170.024927][T14252] Freed by task 794:
[  170.026260][T14252]  kasan_save_track+0x3e/0x80
[  170.027737][T14252]  kasan_save_free_info+0x46/0x50
[  170.029519][T14252]  __kasan_slab_free+0x5b/0x80
[  170.031295][T14252]  kmem_cache_free+0x18f/0x400
[  170.032754][T14252]  xfrm_state_gc_task+0x52d/0x6b0
[  170.034262][T14252]  process_scheduled_works+0xae1/0x17b0
[  170.036029][T14252]  worker_thread+0x8a0/0xda0
[  170.037522][T14252]  kthread+0x711/0x8a0
[  170.038809][T14252]  ret_from_fork+0x3fc/0x770
[  170.040428][T14252]  ret_from_fork_asm+0x1a/0x30
[  170.041954][T14252] 
[  170.042668][T14252] The buggy address belongs to the object at ffff88810dfa0900
[  170.042668][T14252]  which belongs to the cache xfrm_state of size 928
[  170.046646][T14252] The buggy address is located 322 bytes inside of
[  170.046646][T14252]  freed 928-byte region [ffff88810dfa0900, ffff88810dfa0ca0)
[  170.051437][T14252] 
[  170.052169][T14252] The buggy address belongs to the physical page:
[  170.054085][T14252] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810dfa1b00 pfn:0x10dfa0
[  170.057224][T14252] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  170.060294][T14252] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  170.062655][T14252] page_type: f5(slab)
[  170.063974][T14252] raw: 057ff00000000040 ffff888104ead3c0 dead000000000122 0000000000000000
[  170.066686][T14252] raw: ffff88810dfa1b00 00000000800e0005 00000000f5000000 0000000000000000
[  170.069436][T14252] head: 057ff00000000040 ffff888104ead3c0 dead000000000122 0000000000000000
[  170.072061][T14252] head: ffff88810dfa1b00 00000000800e0005 00000000f5000000 0000000000000000
[  170.074737][T14252] head: 057ff00000000002 ffffea000437e801 00000000ffffffff 00000000ffffffff
[  170.077297][T14252] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  170.079860][T14252] page dumped because: kasan: bad access detected
[  170.081869][T14252] page_owner tracks the page as allocated
[  170.083565][T14252] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6745, tgid 6744 (syz.2.369), ts 73266905171, free_ts 73156081631
[  170.089616][T14252]  post_alloc_hook+0x240/0x2a0
[  170.091403][T14252]  get_page_from_freelist+0x21e4/0x22c0
[  170.093124][T14252]  __alloc_frozen_pages_noprof+0x181/0x370
[  170.094864][T14252]  alloc_pages_mpol+0x232/0x4a0
[  170.096351][T14252]  allocate_slab+0x8a/0x370
[  170.097704][T14252]  ___slab_alloc+0xbeb/0x1410
[  170.099118][T14252]  kmem_cache_alloc_noprof+0x283/0x3c0
[  170.100731][T14252]  xfrm_state_alloc+0x24/0x2f0
[  170.102139][T14252]  xfrm_add_sa+0x17d1/0x4070
[  170.103499][T14252]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.104952][T14252]  netlink_rcv_skb+0x208/0x470
[  170.106337][T14252]  xfrm_netlink_rcv+0x79/0x90
[  170.107751][T14252]  netlink_unicast+0x82f/0x9e0
[  170.109245][T14252]  netlink_sendmsg+0x805/0xb30
[  170.110632][T14252]  __sock_sendmsg+0x21c/0x270
[  170.112047][T14252]  ____sys_sendmsg+0x505/0x830
[  170.113594][T14252] page last free pid 6732 tgid 6731 stack trace:
[  170.115571][T14252]  __free_frozen_pages+0xbc4/0xd30
[  170.117273][T14252]  stack_depot_save_flags+0x436/0x860
[  170.118864][T14252]  kasan_save_track+0x4f/0x80
[  170.120327][T14252]  __kasan_slab_alloc+0x6c/0x80
[  170.121817][T14252]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  170.123658][T14252]  add+0x2c7/0x16e0
[  170.124815][T14252]  wg_allowedips_insert_v6+0x134/0x200
[  170.126434][T14252]  wg_set_device+0x1845/0x1fe0
[  170.127843][T14252]  genl_family_rcv_msg_doit+0x215/0x300
[  170.129481][T14252]  genl_rcv_msg+0x60e/0x790
[  170.130814][T14252]  netlink_rcv_skb+0x208/0x470
[  170.132273][T14252]  genl_rcv+0x28/0x40
[  170.133488][T14252]  netlink_unicast+0x82f/0x9e0
[  170.134903][T14252]  netlink_sendmsg+0x805/0xb30
[  170.136302][T14252]  __sock_sendmsg+0x21c/0x270
[  170.137719][T14252]  ____sys_sendmsg+0x505/0x830
[  170.139150][T14252] 
[  170.139859][T14252] Memory state around the buggy address:
[  170.141643][T14252]  ffff88810dfa0900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.144504][T14252]  ffff88810dfa0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.147493][T14252] >ffff88810dfa0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.149812][T14252]                                            ^
[  170.151987][T14252]  ffff88810dfa0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.155039][T14252]  ffff88810dfa0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.158068][T14252] ==================================================================
[  170.161441][T14252] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  170.164244][T14252] CPU: 1 UID: 0 PID: 14252 Comm: syz.0.3620 Not tainted syzkaller #0 PREEMPT(full) 
[  170.167740][T14252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.171550][T14252] Call Trace:
[  170.172843][T14252]  <TASK>
[  170.174005][T14252]  dump_stack_lvl+0x99/0x250
[  170.175802][T14252]  ? __asan_memcpy+0x40/0x70
[  170.177595][T14252]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.179561][T14252]  ? __pfx__printk+0x10/0x10
[  170.181358][T14252]  vpanic+0x281/0x750
[  170.182912][T14252]  ? __pfx_vpanic+0x10/0x10
[  170.184690][T14252]  ? rcu_is_watching+0x15/0xb0
[  170.186523][T14252]  panic+0xb9/0xc0
[  170.187999][T14252]  ? __pfx_panic+0x10/0x10
[  170.189682][T14252]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  170.191914][T14252]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.194313][T14252]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  170.196422][T14252]  check_panic_on_warn+0x89/0xb0
[  170.198376][T14252]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  170.200358][T14252]  end_report+0x78/0x160
[  170.201997][T14252]  kasan_report+0x129/0x150
[  170.203776][T14252]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  170.205820][T14252]  __xfrm_state_lookup+0x6ad/0x8d0
[  170.207778][T14252]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  170.209914][T14252]  xfrm_state_add+0x27d/0xc40
[  170.211724][T14252]  xfrm_add_sa+0x35a1/0x4070
[  170.213509][T14252]  ? __pfx_xfrm_add_sa+0x10/0x10
[  170.215446][T14252]  ? apparmor_capable+0x137/0x1b0
[  170.217379][T14252]  ? __nla_parse+0x40/0x60
[  170.219085][T14252]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.221026][T14252]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.223072][T14252]  ? __pfx___mutex_trylock_common+0x10/0x10
[  170.225328][T14252]  ? kasan_save_track+0x4f/0x80
[  170.227178][T14252]  ? rcu_is_watching+0x15/0xb0
[  170.228997][T14252]  ? trace_contention_end+0x39/0x120
[  170.231031][T14252]  ? __mutex_lock+0x335/0x1350
[  170.232882][T14252]  netlink_rcv_skb+0x208/0x470
[  170.234774][T14252]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.236848][T14252]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  170.238893][T14252]  ? lock_release+0x4b/0x3e0
[  170.240699][T14252]  ? net_generic+0x1e/0x240
[  170.242456][T14252]  ? net_generic+0x1e/0x240
[  170.244213][T14252]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.246241][T14252]  xfrm_netlink_rcv+0x79/0x90
[  170.248052][T14252]  netlink_unicast+0x82f/0x9e0
[  170.249888][T14252]  ? __pfx_netlink_unicast+0x10/0x10
[  170.251949][T14252]  ? netlink_sendmsg+0x642/0xb30
[  170.253831][T14252]  ? skb_put+0x11b/0x210
[  170.255456][T14252]  netlink_sendmsg+0x805/0xb30
[  170.257313][T14252]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.259308][T14252]  ? aa_sock_msg_perm+0xf1/0x1d0
[  170.261198][T14252]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  170.263000][T14252]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.264643][T14252]  __sock_sendmsg+0x21c/0x270
[  170.266242][T14252]  ____sys_sendmsg+0x505/0x830
[  170.268061][T14252]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.270120][T14252]  ? import_iovec+0x74/0xa0
[  170.271880][T14252]  ___sys_sendmsg+0x21f/0x2a0
[  170.273727][T14252]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.275753][T14252]  ? futex_wake+0x4b2/0x560
[  170.277516][T14252]  ? __fget_files+0x2a/0x420
[  170.279299][T14252]  ? __fget_files+0x3a0/0x420
[  170.281092][T14252]  __x64_sys_sendmsg+0x19b/0x260
[  170.283084][T14252]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  170.285292][T14252]  ? rcu_is_watching+0x15/0xb0
[  170.287172][T14252]  ? rcu_is_watching+0x15/0xb0
[  170.288996][T14252]  do_syscall_64+0xfa/0x3b0
[  170.290742][T14252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.293083][T14252]  ? exc_page_fault+0x9f/0xf0
[  170.294980][T14252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.297257][T14252] RIP: 0033:0x7ff9c438ebe9
[  170.298975][T14252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.305667][T14252] RSP: 002b:00007ff9c525f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.308817][T14252] RAX: ffffffffffffffda RBX: 00007ff9c45b5fa0 RCX: 00007ff9c438ebe9
[  170.311838][T14252] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  170.314834][T14252] RBP: 00007ff9c4411e19 R08: 0000000000000000 R09: 0000000000000000
[  170.317794][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.320787][T14252] R13: 00007ff9c45b6038 R14: 00007ff9c45b5fa0 R15: 00007ffc0479dee8
[  170.323773][T14252]  </TASK>
[  170.325678][T14252] Kernel Offset: disabled
[  170.327288][T14252] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:18:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff8880b861a000 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88804b039f80 RBP=ffff888023391cc0 RSP=ffffc90000007ca0
R8 =ffff8880233920f7 R9 =1ffff1100467241e R10=dffffc0000000000 R11=ffffed100467241f
R12=ffff88804b039f80 R13=0000000000000000 R14=dffffc0000000000 R15=ffff888023391cd4
RIP=ffffffff818ffa60 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555573622808 CR3=0000000011b0a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81684851 ffffffff8167991b
XMM02=36254523d346bfd0 ffffffff81684851 XMM03=a359233542b9bde9 fedb1c464ad95a00
XMM04=800000d82c79c8ff 0cecd151a3592335 XMM05=42b9bde9fedb1c46 4ad95a0036254523
XMM06=d346bfd068b0c5a6 27acc555c08cc838 XMM07=0003000000000000 024078a5000ac09a
XMM08=0000000000000000 00007f5263612ee7 XMM09=0000000000000000 00007f5263612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000019cb RDI=00000000000019cc RBP=00000000000003f8 RSP=ffffc900034069d0
R8 =ffff8881068f8237 R9 =1ffff11020d1f046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8c2 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff9c525f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001300 CR3=0000000108c38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff9c4587498 00007ff9c4587470 XMM03=00007ff9c45874a8 00007ff9c45874a0
XMM04=00007ff9c50ed100 00007ff9c4587460 XMM05=00007ff9c4587478 00007ff9c45874c0
XMM06=00007ff9c45874b8 00007ff9c45874b0 XMM07=00007ff9c45874a8 00007ff9c45874a0
XMM08=0000000000000000 00007ff9c4412ee7 XMM09=0000000000000000 00007ff9c4412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
