last executing test programs:

1.215835343s ago: executing program 2 (id=1832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x1c881}, 0x0)

1.188368803s ago: executing program 2 (id=1834):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

1.068648179s ago: executing program 2 (id=1836):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

519.995021ms ago: executing program 1 (id=1842):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0)

216.373261ms ago: executing program 0 (id=1843):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

215.928743ms ago: executing program 1 (id=1844):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x2, 0x7f, 0x7}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x4, 0xfff}}], 0x38, 0x48060}], 0x1, 0x200000d0)

215.621304ms ago: executing program 0 (id=1845):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380"], 0xfc}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

183.321149ms ago: executing program 0 (id=1846):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001280)=ANY=[@ANYBLOB="0a0000001600e808000000007f"], 0x48)

182.83935ms ago: executing program 1 (id=1847):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000080)}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r1, 0x4000, r1}, 0x18)

115.4711ms ago: executing program 0 (id=1848):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001b00)="3fe6587946a998a3da3c60607ba0c7d8620b6f6e854d706849fd1f29b185130ef4d512a6cb54f137edb9ddf78554f1a6e7bc25d2cde0acbcd145568bbd977a0c4ecf845498079cc523700919730e50c2c29d1a69ae94bbc8faf7fed5d59bd9343c87b3cfd79254045f00cdeec023a186220d4d3d2e943f38b02903f2729edb02", 0x80)

114.869176ms ago: executing program 1 (id=1849):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x32}, 0x8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

105.016188ms ago: executing program 2 (id=1850):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x3)

57.231122ms ago: executing program 0 (id=1851):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

56.870876ms ago: executing program 2 (id=1852):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, 0x0}, 0x4000001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

56.766455ms ago: executing program 0 (id=1853):
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/194, 0xc2}, {&(0x7f0000000780)=""/195, 0xc3}], 0x5}, 0x40002102)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)

486.893µs ago: executing program 1 (id=1854):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x14, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)

180.955µs ago: executing program 2 (id=1855):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x283})

0s ago: executing program 1 (id=1856):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13881' (ED25519) to the list of known hosts.
syzkaller login: [   57.873651][ T5833] cgroup: Unknown subsys name 'net'
[   57.983660][ T5833] cgroup: Unknown subsys name 'cpuset'
[   57.987966][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.828970][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.474249][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.479275][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.483654][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.488039][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.496107][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.527011][ T5886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.531115][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.536308][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.540092][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.544810][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.583724][ T5886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.588344][ T5886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.597253][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.602120][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.611650][ T5886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.003351][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   71.032029][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   71.083024][ T5887] chnl_net:caif_netlink_parms(): no params data found
[   71.202713][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.206104][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.208458][ T5881] bridge_slave_0: entered allmulticast mode
[   71.211779][ T5881] bridge_slave_0: entered promiscuous mode
[   71.215489][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.217698][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.219887][ T5880] bridge_slave_0: entered allmulticast mode
[   71.224013][ T5880] bridge_slave_0: entered promiscuous mode
[   71.227748][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.229946][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.232767][ T5880] bridge_slave_1: entered allmulticast mode
[   71.235407][ T5880] bridge_slave_1: entered promiscuous mode
[   71.242672][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.245061][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.247557][ T5881] bridge_slave_1: entered allmulticast mode
[   71.251462][ T5881] bridge_slave_1: entered promiscuous mode
[   71.276571][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.278504][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.307320][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.329771][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.356293][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.368764][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.371671][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.373929][ T5887] bridge_slave_0: entered allmulticast mode
[   71.377043][ T5887] bridge_slave_0: entered promiscuous mode
[   71.383106][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.407258][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.410050][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.414210][ T5887] bridge_slave_1: entered allmulticast mode
[   71.417945][ T5887] bridge_slave_1: entered promiscuous mode
[   71.432709][ T5880] team0: Port device team_slave_0 added
[   71.447045][ T5881] team0: Port device team_slave_0 added
[   71.452354][ T5881] team0: Port device team_slave_1 added
[   71.471453][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.475876][ T5880] team0: Port device team_slave_1 added
[   71.493710][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.530241][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.533549][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.542491][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.570086][ T5887] team0: Port device team_slave_0 added
[   71.573246][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.575815][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.585686][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.589758][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.592691][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.601741][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.607182][ T5887] team0: Port device team_slave_1 added
[   71.615632][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.618130][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.627293][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.659142][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.661925][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.671003][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.703180][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.705660][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.714970][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.757031][ T5880] hsr_slave_0: entered promiscuous mode
[   71.759928][ T5880] hsr_slave_1: entered promiscuous mode
[   71.768544][ T5881] hsr_slave_0: entered promiscuous mode
[   71.771787][ T5881] hsr_slave_1: entered promiscuous mode
[   71.774594][ T5881] debugfs: 'hsr0' already exists in 'hsr'
[   71.776840][ T5881] Cannot create hsr debugfs directory
[   71.825638][ T5887] hsr_slave_0: entered promiscuous mode
[   71.827958][ T5887] hsr_slave_1: entered promiscuous mode
[   71.830376][ T5887] debugfs: 'hsr0' already exists in 'hsr'
[   71.833558][ T5887] Cannot create hsr debugfs directory
[   72.127836][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.135621][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.148045][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.161113][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.202253][ T5887] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.208734][ T5887] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.215406][ T5887] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.221838][ T5887] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.292637][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.298386][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.305208][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.319465][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.438446][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.464202][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.485600][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.496162][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   72.506588][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   72.519987][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.523033][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.533870][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   72.539053][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.541735][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.551090][   T54] Bluetooth: hci0: command tx timeout
[   72.557149][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.559207][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.564173][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.566628][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.580497][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.583069][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.589765][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.592135][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.640705][   T54] Bluetooth: hci2: command tx timeout
[   72.643231][   T54] Bluetooth: hci1: command tx timeout
[   72.658694][ T5887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.662951][ T5887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.833108][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.919654][ T5887] veth0_vlan: entered promiscuous mode
[   72.937718][ T5887] veth1_vlan: entered promiscuous mode
[   72.948655][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.963665][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.002842][ T5887] veth0_macvtap: entered promiscuous mode
[   73.018832][ T5887] veth1_macvtap: entered promiscuous mode
[   73.055303][ T5880] veth0_vlan: entered promiscuous mode
[   73.071966][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.081362][ T5881] veth0_vlan: entered promiscuous mode
[   73.085037][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.095648][ T5880] veth1_vlan: entered promiscuous mode
[   73.103396][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.110348][ T5881] veth1_vlan: entered promiscuous mode
[   73.119180][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.123520][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.131907][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.219729][ T5880] veth0_macvtap: entered promiscuous mode
[   73.227507][ T5881] veth0_macvtap: entered promiscuous mode
[   73.238091][ T5880] veth1_macvtap: entered promiscuous mode
[   73.255107][ T5881] veth1_macvtap: entered promiscuous mode
[   73.272386][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.287029][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.294604][  T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.295919][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.297255][  T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.309969][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.332633][ T5717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.345768][ T5717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.359328][ T5717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.363789][ T5717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.367039][ T5717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.370312][ T5717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.383909][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.383954][ T5717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.386305][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.389549][ T5717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.474440][ T5887] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.482738][  T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.485661][  T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.539897][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.543298][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.576787][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.584104][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.629127][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.632115][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.705282][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'.
[   74.052363][ T5964] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.458136][ T5974] Bluetooth: MGMT ver 1.23
[   74.522273][ T5976] ip6gretap0: entered promiscuous mode
[   74.524893][ T5976] macsec1: entered promiscuous mode
[   74.527242][ T5976] macsec1: entered allmulticast mode
[   74.529454][ T5976] ip6gretap0: entered allmulticast mode
[   74.631868][ T5886] Bluetooth: hci0: command tx timeout
[   74.710917][ T5886] Bluetooth: hci1: command tx timeout
[   74.712685][ T5886] Bluetooth: hci2: command tx timeout
[   74.752938][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.39'.
[   75.139441][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   75.139798][ T6010] netlink: 'syz.0.51': attribute type 10 has an invalid length.
[   75.143252][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'.
[   75.143302][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   75.143314][ T6012] netlink: 'syz.2.52': attribute type 5 has an invalid length.
[   75.147771][ T6014] bond0: option mode: unable to set because the bond device has slaves
[   75.408301][ T6029] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.58'.
[   75.413224][ T6024] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.58'.
[   75.708019][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[   76.446515][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'.
[   76.451299][ T6084] Zero length message leads to an empty skb
[   76.560936][ T6088] syz.0.88 uses obsolete (PF_INET,SOCK_PACKET)
[   76.710958][   T54] Bluetooth: hci0: command tx timeout
[   76.791966][   T54] Bluetooth: hci2: command tx timeout
[   76.794550][ T5886] Bluetooth: hci1: command tx timeout
[   77.039490][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'.
[   77.953857][ T6178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.956883][ T6178] IPv6: NLM_F_CREATE should be set when creating new route
[   77.973467][ T6178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.976454][ T6178] IPv6: NLM_F_CREATE should be set when creating new route
[   78.045642][ T6186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.065669][ T6188] netlink: 'syz.2.136': attribute type 4 has an invalid length.
[   78.794077][   T54] Bluetooth: hci0: command tx timeout
[   78.872811][ T5886] Bluetooth: hci1: command tx timeout
[   78.875037][   T54] Bluetooth: hci2: command tx timeout
[   78.987384][ T6227] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   79.710235][ T6261] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   79.892270][ T6271] ieee802154 phy0 wpan0: encryption failed: -90
[   80.550227][ T6289] __nla_validate_parse: 9 callbacks suppressed
[   80.550245][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[   80.632068][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'.
[   80.686802][ T6298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.845986][ T6309] netlink: 'syz.2.183': attribute type 4 has an invalid length.
[   80.966386][ T6319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'.
[   81.096315][ T6327] netlink: 'syz.2.192': attribute type 5 has an invalid length.
[   81.108901][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[   81.313269][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'.
[   81.317350][ T6346] bridge_slave_0: left allmulticast mode
[   81.319436][ T6346] bridge_slave_0: left promiscuous mode
[   81.348479][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.363547][ T6346] bridge_slave_1: left allmulticast mode
[   81.365577][ T6346] bridge_slave_1: left promiscuous mode
[   81.367974][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.389042][ T6346] bond0: (slave bond_slave_0): Releasing backup interface
[   81.406361][ T6346] bond0: (slave bond_slave_1): Releasing backup interface
[   81.423303][ T6346] team0: Failed to send options change via netlink (err -105)
[   81.426210][ T6346] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   81.429441][ T6346] team0: Port device team_slave_0 removed
[   81.436645][ T6346] team0: Failed to send options change via netlink (err -105)
[   81.439528][ T6346] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   81.444068][ T6346] team0: Port device team_slave_1 removed
[   81.446601][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.448990][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.455534][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.458609][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.464257][ T6346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   81.487131][ T6348] team0: Failed to send options change via netlink (err -105)
[   81.491246][ T6348] team0: Mode changed to "activebackup"
[   81.648894][ T6360] netlink: 'syz.0.207': attribute type 7 has an invalid length.
[   81.654140][ T6360] netlink: 'syz.0.207': attribute type 8 has an invalid length.
[   81.835146][ T6376] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   82.150614][ T5886] Bluetooth: hci2: command 0x0405 tx timeout
[   83.069837][ T6426] tipc: Started in network mode
[   83.072031][ T6426] tipc: Node identity ea80975685e1, cluster identity 4711
[   83.075103][ T6426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.083886][ T6426] syzkaller0: entered promiscuous mode
[   83.086211][ T6426] syzkaller0: entered allmulticast mode
[   83.096054][ T6428] netlink: 'syz.0.238': attribute type 6 has an invalid length.
[   83.126148][ T6426] tipc: Resetting bearer <eth:syzkaller0>
[   83.132840][ T6428] netlink: 'syz.0.238': attribute type 12 has an invalid length.
[   83.135973][ T6428] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.238'.
[   83.142536][ T6425] tipc: Resetting bearer <eth:syzkaller0>
[   83.165201][ T6425] tipc: Disabling bearer <eth:syzkaller0>
[   83.174820][ T6431] lo: entered promiscuous mode
[   83.179591][ T6431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.587306][ T6461] netlink: 'syz.1.253': attribute type 1 has an invalid length.
[   83.767220][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'.
[   83.779461][ T6473] vlan3: entered promiscuous mode
[   83.782763][ T6473] bridge0: entered promiscuous mode
[   83.964635][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   83.984066][ T6483] delete_channel: no stack
[   84.258938][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'.
[   84.401728][ T6510] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   84.564712][ T6504] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   84.895696][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'.
[   85.380071][ T6537] netlink: 'syz.1.284': attribute type 4 has an invalid length.
[   85.662065][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'.
[   85.713868][ T6554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.293'.
[   85.816838][ T6566] netlink: 'syz.2.298': attribute type 32 has an invalid length.
[   86.058780][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[   86.069471][ T6585] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.179338][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'.
[   86.405290][ T6611] xt_l2tp: missing protocol rule (udp|l2tpip)
[   86.641311][ T6624] block nbd0: server does not support multiple connections per device.
[   86.646673][   T51] cfg80211: failed to load regulatory.db
[   86.651257][ T6624] block nbd0: shutting down sockets
[   86.677628][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'.
[   86.684946][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'.
[   86.738969][ T6632] netlink: 'syz.0.327': attribute type 11 has an invalid length.
[   86.825250][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[   86.917043][ T6647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.332'.
[   86.924690][ T6647] netlink: 3 bytes leftover after parsing attributes in process `syz.2.332'.
[   87.091868][ T6659] netlink: 108 bytes leftover after parsing attributes in process `syz.2.338'.
[   87.524703][ T6677] bond1: entered promiscuous mode
[   87.543437][ T6677] bond1: entered allmulticast mode
[   87.545968][ T6677] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.719992][ T6752] tipc: Started in network mode
[   88.723620][ T6752] tipc: Node identity f2222e2a2fdf, cluster identity 4711
[   88.727744][ T6752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.819210][ T6752] syzkaller0: entered promiscuous mode
[   88.821605][ T6752] syzkaller0: entered allmulticast mode
[   88.825651][ T6752] tipc: Resetting bearer <eth:syzkaller0>
[   88.875930][   T64] tipc: Resetting bearer <eth:syzkaller0>
[   88.891563][ T6751] tipc: Resetting bearer <eth:syzkaller0>
[   89.140842][ T6760] netlink: 'syz.1.378': attribute type 3 has an invalid length.
[   89.733059][ T5941] tipc: Node number set to 3724357162
[   90.049435][ T6751] tipc: Disabling bearer <eth:syzkaller0>
[   90.186965][ T6771] netlink: 'syz.1.383': attribute type 13 has an invalid length.
[   90.190016][ T6771] netlink: 'syz.1.383': attribute type 12 has an invalid length.
[   90.285834][ T6780] netlink: 'syz.0.387': attribute type 2 has an invalid length.
[   90.288753][ T6780] netlink: 'syz.0.387': attribute type 2 has an invalid length.
[   90.498746][ T6796] netlink: 'syz.0.396': attribute type 64 has an invalid length.
[   90.703318][ T6815] __nla_validate_parse: 14 callbacks suppressed
[   90.703340][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[   91.265153][ T6842] netlink: 'syz.2.417': attribute type 1 has an invalid length.
[   91.271899][ T6842] nbd: error processing sock list
[   91.274727][ T6842] block nbd0: shutting down sockets
[   91.565767][ T6873] macsec2: entered promiscuous mode
[   91.567914][ T6873] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   91.572226][ T6873] macsec2: entered allmulticast mode
[   91.574503][ T6873] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   92.030328][ T6898] bond0: (slave erspan0): Opening slave failed
[   92.072681][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'.
[   92.077438][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'.
[   92.316777][ T6923] netlink: 23432 bytes leftover after parsing attributes in process `syz.2.437'.
[   92.525042][ T6938] netlink: 'syz.0.444': attribute type 1 has an invalid length.
[   92.566210][ T6938] bond2: (slave bridge1): making interface the new active one
[   92.570095][ T6938] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   92.845451][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'.
[   92.892589][ T6963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.897107][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'.
[   92.912894][ T6963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.018099][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'.
[   93.493147][ T7000] netlink: 92 bytes leftover after parsing attributes in process `syz.0.472'.
[   93.759110][ T7010] netlink: 'syz.1.477': attribute type 23 has an invalid length.
[   94.519749][ T7039] netlink: 'syz.0.491': attribute type 21 has an invalid length.
[   94.599048][ T7043] netlink: 'syz.2.493': attribute type 14 has an invalid length.
[   94.836696][ T7064] netlink: 'syz.1.501': attribute type 21 has an invalid length.
[   94.891686][ T7068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.499'.
[   95.160485][ T7083] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   95.295061][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034ff3c00: rx timeout, send abort
[   95.662512][ T7123] tipc: Started in network mode
[   95.664482][ T7123] tipc: Node identity 3646a1e3bc19, cluster identity 4711
[   95.669907][ T7125] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   95.675663][ T7123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.691044][ T7123] syzkaller0: entered promiscuous mode
[   95.693359][ T7123] syzkaller0: entered allmulticast mode
[   95.720272][ T7123] tipc: Resetting bearer <eth:syzkaller0>
[   95.730532][ T7122] tipc: Resetting bearer <eth:syzkaller0>
[   95.743690][ T7122] tipc: Disabling bearer <eth:syzkaller0>
[   95.795712][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034ff1c00: rx timeout, send abort
[   95.799477][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034ff3c00: abort rx timeout. Force session deactivation
[   95.946953][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[   95.965857][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'.
[   95.988342][ T7143] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[   96.005629][ T7143] netlink: 144 bytes leftover after parsing attributes in process `syz.1.534'.
[   96.009232][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'.
[   96.179545][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'.
[   96.299133][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034ff1c00: abort rx timeout. Force session deactivation
[   96.607792][ T7183] netlink: 'syz.1.553': attribute type 4 has an invalid length.
[   96.864531][ T7203] syzkaller1: entered promiscuous mode
[   96.866747][ T7203] syzkaller1: entered allmulticast mode
[   97.061940][ T7215] netlink: 'syz.1.569': attribute type 1 has an invalid length.
[   97.213885][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'.
[   98.544160][ T7346] ieee802154 phy0 wpan0: encryption failed: -90
[   99.401833][ T7386] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[   99.404787][ T7386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.620'.
[   99.408208][ T7386] dummy0: entered promiscuous mode
[   99.433369][ T7386] bridge0: port 3(dummy0) entered blocking state
[   99.436042][ T7386] bridge0: port 3(dummy0) entered disabled state
[   99.438671][ T7386] dummy0: entered allmulticast mode
[   99.467139][ T7386] bridge0: port 3(dummy0) entered blocking state
[   99.469858][ T7386] bridge0: port 3(dummy0) entered forwarding state
[   99.604331][ T7393] netlink: 788 bytes leftover after parsing attributes in process `syz.2.623'.
[   99.825442][ T7409] netlink: 'syz.1.630': attribute type 4 has an invalid length.
[  100.136470][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'.
[  100.637741][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'.
[  100.705196][ T7445] delete_channel: no stack
[  100.859540][ T7454] syzkaller0: entered promiscuous mode
[  100.868836][ T7454] syzkaller0: entered allmulticast mode
[  101.051187][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'.
[  101.086549][ T7462] vlan3: entered allmulticast mode
[  101.088571][ T7462] bridge0: entered allmulticast mode
[  101.095870][ T7462] bridge2: port 1(vlan3) entered blocking state
[  101.098570][ T7462] bridge2: port 1(vlan3) entered disabled state
[  101.103252][ T7462] vlan3: entered promiscuous mode
[  101.116121][ T7462] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  101.223238][ T7470] sctp: [Deprecated]: syz.1.657 (pid 7470) Use of int in maxseg socket option.
[  101.223238][ T7470] Use struct sctp_assoc_value instead
[  101.318017][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.661'.
[  101.409986][ T7486] netlink: 'syz.2.665': attribute type 1 has an invalid length.
[  101.439972][ T7486] bond1: entered promiscuous mode
[  101.443282][ T7486] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.533598][ T7486] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.538686][ T7486] bond1: (slave bond2): making interface the new active one
[  101.541714][ T7486] bond2: entered promiscuous mode
[  101.545223][ T7486] bond1: (slave bond2): Enslaving as an active interface with an up link
[  101.624888][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'.
[  101.954862][ T7513] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  101.958013][ T7513] netlink: 172 bytes leftover after parsing attributes in process `syz.1.674'.
[  101.965775][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  102.606957][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.690'.
[  102.655399][ T7551] lo speed is unknown, defaulting to 1000
[  102.657730][ T7551] lo speed is unknown, defaulting to 1000
[  102.663063][ T7551] lo speed is unknown, defaulting to 1000
[  102.686991][ T7551] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.698705][ T7555] Illegal XDP return value 4294967289 on prog  (id 122) dev N/A, expect packet loss!
[  102.709902][ T7551] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.773632][ T7551] lo speed is unknown, defaulting to 1000
[  102.777714][ T7551] lo speed is unknown, defaulting to 1000
[  102.782525][ T7551] lo speed is unknown, defaulting to 1000
[  103.928861][ T7654] ip6tnl2: entered promiscuous mode
[  104.000033][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.709'.
[  104.122798][ T7663] vxcan0: tx drop: invalid sa for name 0x0000000000000002
[  104.738635][ T7692] netlink: 64 bytes leftover after parsing attributes in process `syz.1.723'.
[  104.751945][ T7692] block nbd0: not configured, cannot reconfigure
[  105.119576][ T7703] netlink: 'syz.2.728': attribute type 13 has an invalid length.
[  105.142520][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'.
[  105.465051][ T7722] netlink: 9 bytes leftover after parsing attributes in process `syz.0.734'.
[  105.546792][ T5717] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.550328][ T5717] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.571322][ T5852] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.748565][ T5852] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.755676][ T5852] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.806715][ T7743] netlink: 'syz.1.744': attribute type 3 has an invalid length.
[  105.809752][ T7743] netlink: 'syz.1.744': attribute type 3 has an invalid length.
[  106.062452][ T7757] Bluetooth: MGMT ver 1.23
[  106.488879][ T7784] lo speed is unknown, defaulting to 1000
[  107.547859][ T7838] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  107.551349][ T7838] netlink: 'syz.0.783': attribute type 2 has an invalid length.
[  107.555792][ T7838] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  107.558951][ T7838] netlink: 'syz.0.783': attribute type 2 has an invalid length.
[  107.989081][ T7855] __nla_validate_parse: 1 callbacks suppressed
[  107.989099][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  108.054263][ T7856] ip6tnl2: entered promiscuous mode
[  108.056503][ T7856] ip6tnl2: entered allmulticast mode
[  108.064331][ T7856] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  108.296782][ T7871] netlink: 3 bytes leftover after parsing attributes in process `syz.2.797'.
[  108.300150][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'.
[  108.319617][ T7871] netlink: 3 bytes leftover after parsing attributes in process `syz.2.797'.
[  108.323220][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'.
[  108.326833][ T7871] netlink: 3 bytes leftover after parsing attributes in process `syz.2.797'.
[  109.177209][ T5914] lo speed is unknown, defaulting to 1000
[  109.300716][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'.
[  109.367918][ T7907] syzkaller1: entered promiscuous mode
[  109.370221][ T7907] syzkaller1: entered allmulticast mode
[  109.384982][ T5852] IPVS: starting estimator thread 0...
[  109.482535][ T7915] IPVS: using max 34 ests per chain, 81600 per kthread
[  109.566138][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'.
[  109.590713][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.594360][ T7924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.821'.
[  109.714177][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.824'.
[  109.993795][ T7930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.003318][ T7930] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[  110.023378][ T7930] tipc: Resetting bearer <eth:syzkaller0>
[  110.567304][ T7925] tipc: Disabling bearer <eth:syzkaller0>
[  110.676476][ T7963] netlink: 'syz.0.839': attribute type 6 has an invalid length.
[  110.932395][ T7980] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  110.936059][ T7980] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  110.939384][ T7980] unsupported nla_type 58
[  110.988541][ T7985] netlink: 'syz.1.849': attribute type 10 has an invalid length.
[  111.011881][ T7985] bridge0: port 3(dummy0) entered disabled state
[  111.017398][ T7985] dummy0: left allmulticast mode
[  111.019524][ T7985] dummy0: left promiscuous mode
[  111.023901][ T7985] bridge0: port 3(dummy0) entered disabled state
[  111.031235][ T7985] team0: Port device dummy0 added
[  111.051586][ T7985] netlink: 'syz.1.849': attribute type 10 has an invalid length.
[  111.061273][ T7985] team0: Port device dummy0 removed
[  111.067422][ T7985] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  111.286200][ T8007] netlink: 'syz.2.860': attribute type 13 has an invalid length.
[  111.826846][ T8045] netlink: 'syz.0.876': attribute type 27 has an invalid length.
[  113.278073][ T8099] ieee802154 phy0 wpan0: encryption failed: -22
[  113.523622][ T8108] netlink: 'syz.2.902': attribute type 29 has an invalid length.
[  113.802044][ T8135] __nla_validate_parse: 8 callbacks suppressed
[  113.802061][ T8135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.915'.
[  113.837064][ T8135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.915'.
[  113.995529][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'.
[  114.000796][ T8147] netlink: 'syz.1.920': attribute type 5 has an invalid length.
[  114.003330][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'.
[  114.013507][ T8147] geneve2: entered promiscuous mode
[  114.015560][ T8147] geneve2: entered allmulticast mode
[  114.018732][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  114.023467][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  114.030097][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  114.042903][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  114.237157][ T8164] batadv1: entered promiscuous mode
[  114.239573][ T8164] batadv1: entered allmulticast mode
[  114.842849][ T8195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.846721][ T8195] syzkaller0: entered promiscuous mode
[  114.848672][ T8195] syzkaller0: entered allmulticast mode
[  114.867847][ T8195] tipc: Resetting bearer <eth:syzkaller0>
[  114.874931][ T8194] tipc: Resetting bearer <eth:syzkaller0>
[  114.901737][ T8194] tipc: Disabling bearer <eth:syzkaller0>
[  115.196276][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'.
[  115.644067][ T8229] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  116.247005][ T8241] netlink: 56 bytes leftover after parsing attributes in process `syz.0.958'.
[  116.250195][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'.
[  116.275328][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'.
[  116.307246][ T8246] lo: Caught tx_queue_len zero misconfig
[  116.727127][ T8283] ipvlan0: Caught tx_queue_len zero misconfig
[  117.691667][ T8351] netlink: 52 bytes leftover after parsing attributes in process `syz.0.984'.
[  117.990751][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  118.211316][ T8360] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.987'.
[  118.260171][ T8362] wg1 speed is unknown, defaulting to 1000
[  118.262137][ T8362] wg1 speed is unknown, defaulting to 1000
[  118.265018][ T8362] wg1 speed is unknown, defaulting to 1000
[  118.275265][ T8362] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  118.309028][ T8362] wg1 speed is unknown, defaulting to 1000
[  118.319587][ T8362] wg1 speed is unknown, defaulting to 1000
[  118.342017][ T8362] wg1 speed is unknown, defaulting to 1000
[  118.407456][ T8366] syzkaller1: entered promiscuous mode
[  118.409290][ T8366] syzkaller1: entered allmulticast mode
[  118.877308][ T8391] ip6tnl0: Caught tx_queue_len zero misconfig
[  118.974838][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'.
[  118.978540][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'.
[  119.224313][ T8417] vlan0: entered promiscuous mode
[  119.279542][ T8419] vlan4: entered promiscuous mode
[  119.281864][ T8419] geneve1: entered promiscuous mode
[  119.284217][ T8419] vlan4: entered allmulticast mode
[  119.286261][ T8419] geneve1: entered allmulticast mode
[  119.381949][ T8393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.572012][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1017'.
[  119.582299][ T8437] batadv0: entered promiscuous mode
[  119.586047][ T8437] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  119.590059][ T8437] batadv0: left promiscuous mode
[  119.845705][ T8451] netlink: 'syz.1.1023': attribute type 2 has an invalid length.
[  120.616067][ T8470] netlink: 'syz.2.1029': attribute type 1 has an invalid length.
[  120.669759][ T8470] 8021q: adding VLAN 0 to HW filter on device bond3
[  120.690069][ T8472] bond3: (slave geneve2): making interface the new active one
[  120.695181][ T8472] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  120.726098][ T8470] bond3: entered promiscuous mode
[  120.728139][ T8470] geneve2: entered promiscuous mode
[  120.916300][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'.
[  121.675310][ T8484] netlink: 'syz.2.1033': attribute type 3 has an invalid length.
[  121.678821][ T8484] netlink: 'syz.2.1033': attribute type 1 has an invalid length.
[  121.682358][ T8484] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1033'.
[  121.977480][ T8498] syzkaller0: entered promiscuous mode
[  121.979576][ T8498] syzkaller0: entered allmulticast mode
[  122.123576][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'.
[  123.563829][ T8525] bridge_slave_0: invalid flags given to default FDB implementation
[  123.963885][ T8561] team0: Device gtp0 is of different type
[  124.089606][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'.
[  124.253636][ T8576] bridge_slave_1: left allmulticast mode
[  124.260705][ T8576] bridge_slave_1: left promiscuous mode
[  124.263554][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.271902][ T8576] bridge_slave_0: left allmulticast mode
[  124.274162][ T8576] bridge_slave_0: left promiscuous mode
[  124.276615][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.516386][ T8606] netlink: 'syz.0.1089': attribute type 10 has an invalid length.
[  124.544875][ T8606] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  124.578065][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'.
[  124.643093][ T8613] netlink: 'syz.2.1092': attribute type 16 has an invalid length.
[  124.646698][ T8606] bond0: (slave bridge0): Releasing backup interface
[  124.651046][ T8613] netlink: 'syz.2.1092': attribute type 17 has an invalid length.
[  124.653858][ T8613] netlink: 'syz.2.1092': attribute type 27 has an invalid length.
[  124.894855][   T54] Bluetooth: hci2: link tx timeout
[  124.898997][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.995612][ T5886] Bluetooth: hci2: link tx timeout
[  125.002168][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.025426][ T5886] Bluetooth: hci2: link tx timeout
[  125.027721][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.206016][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.209347][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.380915][ T5886] Bluetooth: hci2: link tx timeout
[  125.383246][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.392849][ T8645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.408254][ T8645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.540088][ T5914] wg1 speed is unknown, defaulting to 1000
[  125.543017][ T5914] syz0: Port: 1 Link DOWN
[  125.572899][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.576451][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.579875][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.593661][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.617830][ T5886] Bluetooth: hci2: link tx timeout
[  125.619907][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.909205][ T5886] Bluetooth: hci2: link tx timeout
[  125.911321][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.154567][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1115'.
[  126.157658][ T8684] netlink: 'syz.0.1115': attribute type 32 has an invalid length.
[  126.160586][ T8684] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  126.954202][ T5886] Bluetooth: hci2: command 0x0405 tx timeout
[  126.956702][ T5886] Bluetooth: hci2: link tx timeout
[  126.958735][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.995607][ T8704] lo speed is unknown, defaulting to 1000
[  126.999289][ T8704] wg1 speed is unknown, defaulting to 1000
[  127.020081][ T8709] sctp: [Deprecated]: syz.1.1126 (pid 8709) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.020081][ T8709] Use struct sctp_sack_info instead
[  127.128527][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'.
[  127.132531][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'.
[  128.036159][ T8759] ip6erspan0: entered promiscuous mode
[  128.135287][ T8767] netlink: 'syz.0.1152': attribute type 21 has an invalid length.
[  128.138423][ T8767] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1152'.
[  128.177944][ T8769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.181338][ T8769] syzkaller0: entered promiscuous mode
[  128.183448][ T8769] syzkaller0: entered allmulticast mode
[  128.189049][ T8769] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  128.209341][ T8769] tipc: Resetting bearer <eth:syzkaller0>
[  128.213180][ T8768] tipc: Resetting bearer <eth:syzkaller0>
[  128.225069][ T8768] tipc: Disabling bearer <eth:syzkaller0>
[  128.495960][ T8790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.674717][ T8809] netlink: 'syz.0.1173': attribute type 1 has an invalid length.
[  128.681495][ T8809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1173'.
[  128.710212][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  128.769011][ T8817] hsr0: entered promiscuous mode
[  128.773218][ T8816] hsr0: left promiscuous mode
[  129.095342][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'.
[  129.436313][ T8878] netlink: 'syz.2.1207': attribute type 4 has an invalid length.
[  129.459789][ T8880] netlink: 'syz.0.1208': attribute type 1 has an invalid length.
[  129.474564][ T8880] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1208'.
[  129.486467][ T8880] netlink: 'syz.0.1208': attribute type 1 has an invalid length.
[  129.777534][ T8906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1219'.
[  129.944910][ T8914] lo speed is unknown, defaulting to 1000
[  129.948519][ T8914] wg1 speed is unknown, defaulting to 1000
[  130.103999][ T8928] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  130.107347][ T8928] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1228'.
[  130.313108][ T8940] delete_channel: no stack
[  130.367732][  T975] IPVS: starting estimator thread 0...
[  130.489217][ T8944] IPVS: using max 49 ests per chain, 117600 per kthread
[  130.493316][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1231'.
[  130.802819][ T8974] syzkaller1: entered promiscuous mode
[  130.805059][ T8974] syzkaller1: entered allmulticast mode
[  131.050648][ T8990] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  131.118410][ T8990] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  131.126965][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  131.137193][ T8990] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.164382][ T8990] veth7: entered promiscuous mode
[  131.196637][ T8990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.242741][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  131.395747][ T9014] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  131.820128][ T9047] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  131.978359][ T9052] syzkaller1: entered allmulticast mode
[  132.224228][   T33] audit: type=1107 audit(1758809675.480:2): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  132.714849][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.755198][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.876572][ T9103] netlink: 'syz.2.1307': attribute type 1 has an invalid length.
[  132.879227][ T9103] netlink: 'syz.2.1307': attribute type 1 has an invalid length.
[  133.009526][ T9116] netlink: 'syz.1.1309': attribute type 10 has an invalid length.
[  133.019717][ T9116] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  133.276037][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'.
[  133.284558][ T9143] macvtap1: entered promiscuous mode
[  133.286376][ T9143] erspan0: entered promiscuous mode
[  133.288399][ T9143] macvtap1: entered allmulticast mode
[  133.290347][ T9143] erspan0: entered allmulticast mode
[  133.294797][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'.
[  133.350586][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  133.884089][ T9155] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1331'.
[  133.956538][ T9159] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1333'.
[  134.173854][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  134.245615][ T9171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1339'.
[  134.365399][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1344'.
[  134.611436][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'.
[  134.738720][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'.
[  134.748105][ T9209] ip6gretap2: entered promiscuous mode
[  135.063306][ T9240] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  135.104060][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'.
[  135.452955][ T9264] lo speed is unknown, defaulting to 1000
[  135.457168][ T9264] wg1 speed is unknown, defaulting to 1000
[  135.497537][ T9265] veth0: entered promiscuous mode
[  135.575888][ T9264] netlink: 'syz.1.1380': attribute type 16 has an invalid length.
[  135.578965][ T9264] netlink: 'syz.1.1380': attribute type 17 has an invalid length.
[  135.597023][ T9264] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  135.609377][ T9265] veth0: left promiscuous mode
[  135.762728][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1387'.
[  135.990988][ T9294] lo speed is unknown, defaulting to 1000
[  136.011680][ T9294] wg1 speed is unknown, defaulting to 1000
[  136.062788][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'.
[  136.821124][ T9329] ksmbd: Unknown IPC event: 3, ignore.
[  136.927070][ T9336] netlink: 'syz.2.1408': attribute type 10 has an invalid length.
[  136.941085][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'.
[  136.958049][ T9336] team0: Port device geneve0 added
[  136.961062][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.967148][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.978385][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.987495][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.038720][ T9344] team0: Caught tx_queue_len zero misconfig
[  137.043588][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'.
[  137.074832][ T9346] bridge0: entered promiscuous mode
[  137.076982][ T9346] bridge0: entered allmulticast mode
[  137.258138][ T9354] netlink: 'syz.1.1417': attribute type 10 has an invalid length.
[  137.294599][ T9354] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  137.657763][ T9382] ieee802154 phy1 wpan1: encryption failed: -22
[  137.663982][ T9382] team0: No ports can be present during mode change
[  137.760202][ T9394] lo speed is unknown, defaulting to 1000
[  137.764338][ T9394] wg1 speed is unknown, defaulting to 1000
[  138.552576][ T9439] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.568254][ T9439] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.746071][ T9439] ip6tnl2: left promiscuous mode
[  138.770301][ T9439] geneve2: left promiscuous mode
[  138.772450][ T9439] geneve2: left allmulticast mode
[  138.777746][ T9439] bridge0: left promiscuous mode
[  138.782270][ T9439] bridge0: left allmulticast mode
[  138.788348][ T5717] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.792593][ T5717] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  138.796029][ T5717] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.799484][ T5717] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  138.803858][ T5717] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.807324][ T5717] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  138.811392][ T5717] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.814893][ T5717] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  139.787557][ T9473] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  139.790801][ T9473] __nla_validate_parse: 4 callbacks suppressed
[  139.790818][ T9473] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1469'.
[  139.942318][ T9481] netlink: 'syz.1.1473': attribute type 1 has an invalid length.
[  139.945531][ T9481] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1473'.
[  139.977551][ T9483] xt_l2tp: missing protocol rule (udp|l2tpip)
[  140.048950][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'.
[  140.317052][ T9518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1490'.
[  140.319766][ T9518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1490'.
[  140.493558][ T9533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1496'.
[  140.506569][ T9534] lo speed is unknown, defaulting to 1000
[  140.517674][ T9534] wg1 speed is unknown, defaulting to 1000
[  140.869397][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'.
[  140.873782][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'.
[  140.877373][ T9545] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1501'.
[  140.898634][ T9547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.906490][ T9547] syzkaller0: entered promiscuous mode
[  140.913206][ T9547] syzkaller0: entered allmulticast mode
[  140.985432][ T9547] tipc: Resetting bearer <eth:syzkaller0>
[  140.993194][ T9546] tipc: Resetting bearer <eth:syzkaller0>
[  141.004328][ T9546] tipc: Disabling bearer <eth:syzkaller0>
[  141.494379][ T9589] IPv6: sit1: Disabled Multicast RS
[  141.497474][ T9589] sit1: entered allmulticast mode
[  141.554563][ T9591] can: request_module (can-proto-0) failed.
[  141.619398][ T9598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.627334][ T9598] syzkaller0: entered promiscuous mode
[  141.629690][ T9598] syzkaller0: entered allmulticast mode
[  141.650236][ T9598] tipc: Resetting bearer <eth:syzkaller0>
[  141.654858][ T9597] tipc: Resetting bearer <eth:syzkaller0>
[  141.665744][ T9597] tipc: Disabling bearer <eth:syzkaller0>
[  142.083086][ T9612] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1531'.
[  142.283117][ T9618] syzkaller1: entered promiscuous mode
[  142.285304][ T9618] syzkaller1: entered allmulticast mode
[  143.028402][ T9634] sit0: Caught tx_queue_len zero misconfig
[  143.109902][ T9636] netlink: 'syz.2.1542': attribute type 14 has an invalid length.
[  143.123826][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.126801][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.129722][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.132734][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.136294][ T9636] netlink: 'syz.2.1542': attribute type 14 has an invalid length.
[  144.794819][ T9693] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  144.893814][ T9697] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  145.030210][ T9712] __nla_validate_parse: 5 callbacks suppressed
[  145.030222][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'.
[  145.334285][ T9737] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1586'.
[  145.470458][ T9743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.473332][ T9746] syzkaller1: tun_chr_ioctl cmd 2147767520
[  145.482623][ T9741] tipc: Resetting bearer <eth:syzkaller0>
[  146.490804][ T5914] tipc: Node number set to 2321523171
[  147.585673][ T9741] tipc: Disabling bearer <eth:syzkaller0>
[  147.590013][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'.
[  147.619868][ T9767] netlink: 'syz.0.1603': attribute type 1 has an invalid length.
[  147.671440][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1604'.
[  147.686520][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'.
[  147.851173][ T5717] bond3: (slave ip6gretap1): link status up again after 0 ms
[  147.857797][ T5717] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  147.882638][ T9780] netlink: 'syz.1.1608': attribute type 11 has an invalid length.
[  147.971465][ T5717] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  147.988137][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'.
[  148.032194][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'.
[  148.080992][ T5717] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  148.190647][ T5717] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  148.300603][ T5717] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  148.350305][ T9807] dvmrp8: entered allmulticast mode
[  148.391013][ T9807] lo speed is unknown, defaulting to 1000
[  148.395039][ T9807] wg1 speed is unknown, defaulting to 1000
[  148.419772][ T9812] netlink: 'syz.1.1622': attribute type 7 has an invalid length.
[  148.422331][ T9812] netlink: 'syz.1.1622': attribute type 8 has an invalid length.
[  148.424694][ T9812] netlink: 'syz.1.1622': attribute type 13 has an invalid length.
[  148.621280][ T5717] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  148.625178][ T9806] dvmrp8: left allmulticast mode
[  148.793184][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  148.938137][ T9835] macsec3: entered allmulticast mode
[  148.940656][ T9835] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  149.055484][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  149.072558][ T9844] dummy0: entered promiscuous mode
[  149.083013][ T9844] dummy0: left promiscuous mode
[  149.315436][ T9862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  149.508336][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'.
[  149.513381][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1654'.
[  149.841643][ T9450] net_ratelimit: 17 callbacks suppressed
[  149.841701][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  149.963398][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  150.081069][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  150.218984][ T9948] syzkaller1: entered promiscuous mode
[  150.221752][ T9948] syzkaller1: entered allmulticast mode
[  150.250783][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  150.360695][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  150.470711][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  150.600915][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  150.644745][ T9974] __nla_validate_parse: 2 callbacks suppressed
[  150.644759][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  150.711667][ T9450] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  150.787234][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  151.046260][ T9980] ip6gretap0: left allmulticast mode
[  151.049137][ T9980] macsec1: left promiscuous mode
[  151.053497][ T9980] macsec1: left allmulticast mode
[  151.057113][ T9980] bond1: left promiscuous mode
[  151.058795][ T9980] bond1: left allmulticast mode
[  151.062467][ T9980] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  151.064869][ T9980] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  151.067256][ T9980] macsec2: left promiscuous mode
[  151.068959][ T9980] macsec2: left allmulticast mode
[  151.081606][ T9980] veth7: left promiscuous mode
[  151.083588][ T9980] ip6gretap2: left promiscuous mode
[  151.088611][ T9980] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  151.091428][ T9980] macsec3: left allmulticast mode
[  151.094608][ T5852] lo speed is unknown, defaulting to 1000
[  151.096661][ T5852] syz1: Port: 1 Link DOWN
[  151.102850][ T9985] geneve2: entered promiscuous mode
[  151.104765][ T9985] geneve2: entered allmulticast mode
[  151.112231][ T9987] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1705'.
[  151.121804][ T9989] pim6reg: entered allmulticast mode
[  151.161599][ T9995] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1708'.
[  151.198608][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'.
[  151.202274][ T9998] netlink: 'syz.1.1710': attribute type 7 has an invalid length.
[  151.205115][ T9998] netlink: 'syz.1.1710': attribute type 8 has an invalid length.
[  151.213703][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'.
[  151.276209][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'.
[  151.309732][T10011] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1716'.
[  151.460800][T10026] netlink: 'syz.2.1723': attribute type 1 has an invalid length.
[  152.290328][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1732'.
[  153.419813][T10068] lo speed is unknown, defaulting to 1000
[  153.427394][T10068] wg1 speed is unknown, defaulting to 1000
[  153.598901][T10078] netlink: 'syz.0.1745': attribute type 13 has an invalid length.
[  154.022866][T10106] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1756'.
[  154.151361][T10114] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  154.165143][T10114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  154.186016][T10114] netlink: 'syz.0.1760': attribute type 10 has an invalid length.
[  154.189153][T10114] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  154.202462][T10114] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.210112][T10114] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.767429][T10136] lo speed is unknown, defaulting to 1000
[  154.776105][T10136] wg1 speed is unknown, defaulting to 1000
[  155.276959][T10159] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  156.006575][T10209] __nla_validate_parse: 4 callbacks suppressed
[  156.006596][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'.
[  156.147195][T10215] lo speed is unknown, defaulting to 1000
[  156.152523][T10215] wg1 speed is unknown, defaulting to 1000
[  156.333992][T10227] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  156.431695][T10237] batadv_slave_0: entered promiscuous mode
[  156.435553][T10237] batadv_slave_0: left promiscuous mode
[  156.523546][T10243] netlink: 'syz.0.1818': attribute type 9 has an invalid length.
[  156.526467][T10243] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1818'.
[  156.720362][T10256] pimreg: entered allmulticast mode
[  156.789648][T10260] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1826'.
[  156.793400][T10260] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1826'.
[  156.796905][T10260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1826'.
[  156.884606][T10266] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1829'.
[  156.889304][T10266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1829'.
[  156.925225][T10268] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1830'.
[  156.929075][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'.
[  156.934618][T10268] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  157.366857][T10288] lo speed is unknown, defaulting to 1000
[  157.371076][T10288] wg1 speed is unknown, defaulting to 1000
[  158.020243][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'.
[  158.025500][T10311] netlink: 'syz.0.1845': attribute type 1 has an invalid length.
[  158.029990][T10311] netlink: 'syz.0.1845': attribute type 2 has an invalid length.
[  158.193913][T10325] netlink: 'syz.2.1852': attribute type 1 has an invalid length.
[  158.196703][T10325] netlink: 'syz.2.1852': attribute type 1 has an invalid length.
[  158.301275][T10340] ==================================================================
[  158.303926][T10340] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  158.306753][T10340] Read of size 2 at addr ffff888028decec2 by task syz.1.1857/10340
[  158.310004][T10340] 
[  158.311230][T10340] CPU: 1 UID: 0 PID: 10340 Comm: syz.1.1857 Not tainted syzkaller #0 PREEMPT(full) 
[  158.311250][T10340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.311257][T10340] Call Trace:
[  158.311271][T10340]  <TASK>
[  158.311277][T10340]  dump_stack_lvl+0x189/0x250
[  158.311292][T10340]  ? __kasan_check_byte+0x12/0x40
[  158.311308][T10340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.311318][T10340]  ? lock_release+0x4b/0x3e0
[  158.311332][T10340]  ? __virt_addr_valid+0x4a5/0x5c0
[  158.311345][T10340]  print_report+0xca/0x240
[  158.311359][T10340]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  158.311370][T10340]  kasan_report+0x118/0x150
[  158.311381][T10340]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  158.311393][T10340]  __xfrm_state_lookup+0x6ad/0x8d0
[  158.311405][T10340]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  158.311416][T10340]  xfrm_input_state_lookup+0x6e9/0xa60
[  158.311428][T10340]  ? xfrm_input_state_lookup+0xcf/0xa60
[  158.311438][T10340]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  158.311448][T10340]  ? xfrm_parse_spi+0x300/0x680
[  158.311456][T10340]  xfrm_input+0x425c/0x72c0
[  158.311468][T10340]  xfrm6_rcv_encap+0x63f/0x9d0
[  158.311482][T10340]  ? __pfx_xfrm6_rcv_encap+0x10/0x10
[  158.311492][T10340]  ? __lock_acquire+0xab9/0xd20
[  158.311503][T10340]  ? xfrm6_udp_encap_rcv+0x548/0x8c0
[  158.311515][T10340]  udpv6_queue_rcv_one_skb+0x182f/0x1a60
[  158.311523][T10340]  ? inet6_mc_check+0xc0/0x9f0
[  158.311534][T10340]  ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10
[  158.311545][T10340]  ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10
[  158.311555][T10340]  __udp6_lib_mcast_deliver+0xe74/0xf60
[  158.311566][T10340]  __udp6_lib_rcv+0x608/0x1770
[  158.311580][T10340]  ? __pfx_udpv6_rcv+0x10/0x10
[  158.311586][T10340]  ip6_protocol_deliver_rcu+0xd07/0x15c0
[  158.311601][T10340]  ip6_input_finish+0x191/0x370
[  158.311610][T10340]  NF_HOOK+0x30c/0x3a0
[  158.311618][T10340]  ? __pfx_ip6_input_finish+0x10/0x10
[  158.311626][T10340]  ? NF_HOOK+0x9a/0x3a0
[  158.311633][T10340]  ? __pfx_NF_HOOK+0x10/0x10
[  158.311641][T10340]  ? ip6_input+0x23/0x270
[  158.311651][T10340]  ip6_input+0x16a/0x270
[  158.311658][T10340]  ? ip6_input+0x23/0x270
[  158.311666][T10340]  ip6_mc_input+0x655/0xb70
[  158.311676][T10340]  ? __pfx_ip6_mc_input+0x10/0x10
[  158.311685][T10340]  ip6_sublist_rcv_finish+0x272/0x2a0
[  158.311695][T10340]  ip6_sublist_rcv+0xb11/0xdd0
[  158.311705][T10340]  ? __pfx_ip6_sublist_rcv+0x10/0x10
[  158.311712][T10340]  ? skb_orphan+0xaf/0xd0
[  158.311721][T10340]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  158.311729][T10340]  ? ip6_rcv_core+0x9e/0x1590
[  158.311738][T10340]  ipv6_list_rcv+0x3e5/0x430
[  158.311748][T10340]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  158.311756][T10340]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  158.311764][T10340]  __netif_receive_skb_list_core+0x5f4/0x800
[  158.311780][T10340]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  158.311792][T10340]  ? __pfx_udp6_gro_receive+0x10/0x10
[  158.311803][T10340]  netif_receive_skb_list_internal+0x96f/0xcb0
[  158.311816][T10340]  ? netif_receive_skb_list_internal+0x4fd/0xcb0
[  158.311827][T10340]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  158.311883][T10340]  ? dev_gro_receive+0x10f4/0x23b0
[  158.311893][T10340]  ? dev_gro_receive+0x10d0/0x23b0
[  158.311901][T10340]  ? eth_type_trans+0x3a8/0x760
[  158.311913][T10340]  napi_complete_done+0x2f2/0x7c0
[  158.311926][T10340]  ? __pfx_napi_complete_done+0x10/0x10
[  158.311938][T10340]  ? rcu_is_watching+0x15/0xb0
[  158.311945][T10340]  ? napi_gro_frags+0x975/0x1030
[  158.311955][T10340]  ? tun_get_user+0x266c/0x3e20
[  158.311965][T10340]  tun_get_user+0x28d5/0x3e20
[  158.311977][T10340]  ? tun_get_user+0x266c/0x3e20
[  158.311987][T10340]  ? aa_file_perm+0x44d/0x1550
[  158.311996][T10340]  ? __pfx_tun_get_user+0x10/0x10
[  158.312004][T10340]  ? __futex_wait+0x34f/0x3e0
[  158.312018][T10340]  ? __pfx___futex_wait+0x10/0x10
[  158.312031][T10340]  ? ref_tracker_alloc+0x318/0x460
[  158.312043][T10340]  ? __lock_acquire+0xab9/0xd20
[  158.312054][T10340]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  158.312065][T10340]  ? tun_get+0x1c/0x2f0
[  158.312073][T10340]  ? tun_get+0x1c/0x2f0
[  158.312080][T10340]  ? tun_get+0x1c/0x2f0
[  158.312088][T10340]  tun_chr_write_iter+0x113/0x200
[  158.312097][T10340]  vfs_write+0x5c9/0xb30
[  158.312107][T10340]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  158.312115][T10340]  ? __pfx_vfs_write+0x10/0x10
[  158.312126][T10340]  ? __fget_files+0x2a/0x420
[  158.312146][T10340]  ksys_write+0x145/0x250
[  158.312156][T10340]  ? __pfx_ksys_write+0x10/0x10
[  158.312164][T10340]  ? rcu_is_watching+0x15/0xb0
[  158.312172][T10340]  ? do_syscall_64+0xbe/0x3b0
[  158.312181][T10340]  do_syscall_64+0xfa/0x3b0
[  158.312188][T10340]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.312201][T10340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.312209][T10340]  ? exc_page_fault+0x9f/0xf0
[  158.312226][T10340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.312241][T10340] RIP: 0033:0x7fab9458ec29
[  158.312255][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.312268][T10340] RSP: 002b:00007fab95375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  158.312285][T10340] RAX: ffffffffffffffda RBX: 00007fab947d5fa0 RCX: 00007fab9458ec29
[  158.312295][T10340] RDX: 000000000000006d RSI: 0000200000000200 RDI: 0000000000000004
[  158.312305][T10340] RBP: 00007fab94611e41 R08: 0000000000000000 R09: 0000000000000000
[  158.312316][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.312325][T10340] R13: 00007fab947d6038 R14: 00007fab947d5fa0 R15: 00007ffce57b4158
[  158.312342][T10340]  </TASK>
[  158.312350][T10340] 
[  158.499631][T10340] Allocated by task 9970:
[  158.501026][T10340]  kasan_save_track+0x3e/0x80
[  158.502773][T10340]  __kasan_slab_alloc+0x6c/0x80
[  158.504737][T10340]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  158.506923][T10340]  xfrm_state_alloc+0x24/0x2f0
[  158.508833][T10340]  __find_acq_core+0x8a7/0x1c00
[  158.510784][T10340]  xfrm_find_acq+0x78/0xa0
[  158.512499][T10340]  xfrm_alloc_userspi+0x6b3/0xc90
[  158.514374][T10340]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.516303][T10340]  netlink_rcv_skb+0x208/0x470
[  158.518115][T10340]  xfrm_netlink_rcv+0x79/0x90
[  158.519738][T10340]  netlink_unicast+0x82f/0x9e0
[  158.521437][T10340]  netlink_sendmsg+0x805/0xb30
[  158.523226][T10340]  __sock_sendmsg+0x21c/0x270
[  158.525076][T10340]  ____sys_sendmsg+0x505/0x830
[  158.526617][T10340]  ___sys_sendmsg+0x21f/0x2a0
[  158.528266][T10340]  __x64_sys_sendmsg+0x19b/0x260
[  158.529896][T10340]  do_syscall_64+0xfa/0x3b0
[  158.531371][T10340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.533579][T10340] 
[  158.534440][T10340] Freed by task 975:
[  158.535666][T10340]  kasan_save_track+0x3e/0x80
[  158.537247][T10340]  kasan_save_free_info+0x46/0x50
[  158.538787][T10340]  __kasan_slab_free+0x5b/0x80
[  158.540676][T10340]  kmem_cache_free+0x18f/0x400
[  158.542513][T10340]  xfrm_state_gc_task+0x52d/0x6b0
[  158.544494][T10340]  process_scheduled_works+0xae1/0x17b0
[  158.546642][T10340]  worker_thread+0x8a0/0xda0
[  158.548310][T10340]  kthread+0x711/0x8a0
[  158.549913][T10340]  ret_from_fork+0x439/0x7d0
[  158.551488][T10340]  ret_from_fork_asm+0x1a/0x30
[  158.553397][T10340] 
[  158.554377][T10340] The buggy address belongs to the object at ffff888028decd80
[  158.554377][T10340]  which belongs to the cache xfrm_state of size 928
[  158.559670][T10340] The buggy address is located 322 bytes inside of
[  158.559670][T10340]  freed 928-byte region [ffff888028decd80, ffff888028ded120)
[  158.564457][T10340] 
[  158.565232][T10340] The buggy address belongs to the physical page:
[  158.567590][T10340] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028ded680 pfn:0x28dec
[  158.571476][T10340] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  158.574234][T10340] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  158.576536][T10340] page_type: f5(slab)
[  158.577774][T10340] raw: 00fff00000000040 ffff88801b749c80 dead000000000122 0000000000000000
[  158.581231][T10340] raw: ffff888028ded680 00000000800e000d 00000000f5000000 0000000000000000
[  158.583951][T10340] head: 00fff00000000040 ffff88801b749c80 dead000000000122 0000000000000000
[  158.586688][T10340] head: ffff888028ded680 00000000800e000d 00000000f5000000 0000000000000000
[  158.589333][T10340] head: 00fff00000000002 ffffea0000a37b01 00000000ffffffff 00000000ffffffff
[  158.592056][T10340] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  158.594761][T10340] page dumped because: kasan: bad access detected
[  158.596733][T10340] page_owner tracks the page as allocated
[  158.598618][T10340] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7383, tgid 7382 (syz.1.620), ts 99329477738, free_ts 98549611423
[  158.604350][T10340]  post_alloc_hook+0x240/0x2a0
[  158.605869][T10340]  get_page_from_freelist+0x21e4/0x22c0
[  158.607611][T10340]  __alloc_frozen_pages_noprof+0x181/0x370
[  158.609629][T10340]  alloc_pages_mpol+0x232/0x4a0
[  158.611507][T10340]  allocate_slab+0x8a/0x370
[  158.613267][T10340]  ___slab_alloc+0xbeb/0x1420
[  158.614698][T10340]  kmem_cache_alloc_noprof+0x283/0x3c0
[  158.616418][T10340]  xfrm_state_alloc+0x24/0x2f0
[  158.618228][T10340]  xfrm_state_find+0x37d4/0x5400
[  158.619959][T10340]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  158.621877][T10340]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  158.623527][T10340]  xfrm_lookup_route+0x3c/0x1c0
[  158.625036][T10340]  rawv6_sendmsg+0xdbf/0x1830
[  158.626468][T10340]  __sock_sendmsg+0x19c/0x270
[  158.627936][T10340]  ____sys_sendmsg+0x52d/0x830
[  158.629409][T10340]  ___sys_sendmsg+0x21f/0x2a0
[  158.630866][T10340] page last free pid 5297 tgid 5297 stack trace:
[  158.632896][T10340]  __free_frozen_pages+0xbc4/0xd30
[  158.634545][T10340]  __slab_free+0x303/0x3c0
[  158.635927][T10340]  qlist_free_all+0x97/0x140
[  158.637372][T10340]  kasan_quarantine_reduce+0x148/0x160
[  158.639052][T10340]  __kasan_slab_alloc+0x22/0x80
[  158.640545][T10340]  __kmalloc_cache_noprof+0x1be/0x3d0
[  158.642184][T10340]  kernfs_fop_open+0x397/0xca0
[  158.643711][T10340]  do_dentry_open+0x953/0x13f0
[  158.645549][T10340]  vfs_open+0x3b/0x340
[  158.647156][T10340]  path_openat+0x2ee5/0x3830
[  158.648986][T10340]  do_filp_open+0x1fa/0x410
[  158.650729][T10340]  do_sys_openat2+0x121/0x1c0
[  158.652242][T10340]  __x64_sys_openat+0x138/0x170
[  158.653739][T10340]  do_syscall_64+0xfa/0x3b0
[  158.655161][T10340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.657476][T10340] 
[  158.658423][T10340] Memory state around the buggy address:
[  158.660586][T10340]  ffff888028decd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.663571][T10340]  ffff888028dece00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.666309][T10340] >ffff888028dece80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.669254][T10340]                                            ^
[  158.671157][T10340]  ffff888028decf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.673722][T10340]  ffff888028decf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.676375][T10340] ==================================================================
[  158.679198][T10340] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  158.681579][T10340] CPU: 1 UID: 0 PID: 10340 Comm: syz.1.1857 Not tainted syzkaller #0 PREEMPT(full) 
[  158.684404][T10340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.687520][T10340] Call Trace:
[  158.688562][T10340]  <TASK>
[  158.689506][T10340]  dump_stack_lvl+0x99/0x250
[  158.690967][T10340]  ? __asan_memcpy+0x40/0x70
[  158.692388][T10340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.693991][T10340]  ? __pfx__printk+0x10/0x10
[  158.695422][T10340]  vpanic+0x281/0x750
[  158.696653][T10340]  ? __pfx_vpanic+0x10/0x10
[  158.698067][T10340]  ? irqentry_exit+0x74/0x90
[  158.699561][T10340]  panic+0xb9/0xc0
[  158.700900][T10340]  ? __pfx_panic+0x10/0x10
[  158.702163][T10340]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  158.703984][T10340]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.705819][T10340]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  158.707486][T10340]  check_panic_on_warn+0x89/0xb0
[  158.709051][T10340]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  158.710683][T10340]  end_report+0x78/0x160
[  158.712067][T10340]  kasan_report+0x129/0x150
[  158.713535][T10340]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  158.715233][T10340]  __xfrm_state_lookup+0x6ad/0x8d0
[  158.716899][T10340]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  158.718675][T10340]  xfrm_input_state_lookup+0x6e9/0xa60
[  158.720510][T10340]  ? xfrm_input_state_lookup+0xcf/0xa60
[  158.722352][T10340]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  158.724591][T10340]  ? xfrm_parse_spi+0x300/0x680
[  158.726060][T10340]  xfrm_input+0x425c/0x72c0
[  158.727358][T10340]  xfrm6_rcv_encap+0x63f/0x9d0
[  158.728866][T10340]  ? __pfx_xfrm6_rcv_encap+0x10/0x10
[  158.730451][T10340]  ? __lock_acquire+0xab9/0xd20
[  158.731912][T10340]  ? xfrm6_udp_encap_rcv+0x548/0x8c0
[  158.733817][T10340]  udpv6_queue_rcv_one_skb+0x182f/0x1a60
[  158.735821][T10340]  ? inet6_mc_check+0xc0/0x9f0
[  158.737577][T10340]  ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10
[  158.739735][T10340]  ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10
[  158.742069][T10340]  __udp6_lib_mcast_deliver+0xe74/0xf60
[  158.744301][T10340]  __udp6_lib_rcv+0x608/0x1770
[  158.746219][T10340]  ? __pfx_udpv6_rcv+0x10/0x10
[  158.748018][T10340]  ip6_protocol_deliver_rcu+0xd07/0x15c0
[  158.749963][T10340]  ip6_input_finish+0x191/0x370
[  158.752052][T10340]  NF_HOOK+0x30c/0x3a0
[  158.753782][T10340]  ? __pfx_ip6_input_finish+0x10/0x10
[  158.756003][T10340]  ? NF_HOOK+0x9a/0x3a0
[  158.757634][T10340]  ? __pfx_NF_HOOK+0x10/0x10
[  158.759575][T10340]  ? ip6_input+0x23/0x270
[  158.761085][T10340]  ip6_input+0x16a/0x270
[  158.762729][T10340]  ? ip6_input+0x23/0x270
[  158.764572][T10340]  ip6_mc_input+0x655/0xb70
[  158.766638][T10340]  ? __pfx_ip6_mc_input+0x10/0x10
[  158.768349][T10340]  ip6_sublist_rcv_finish+0x272/0x2a0
[  158.770031][T10340]  ip6_sublist_rcv+0xb11/0xdd0
[  158.771556][T10340]  ? __pfx_ip6_sublist_rcv+0x10/0x10
[  158.773575][T10340]  ? skb_orphan+0xaf/0xd0
[  158.775141][T10340]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  158.776825][T10340]  ? ip6_rcv_core+0x9e/0x1590
[  158.778572][T10340]  ipv6_list_rcv+0x3e5/0x430
[  158.780136][T10340]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  158.781717][T10340]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  158.783688][T10340]  __netif_receive_skb_list_core+0x5f4/0x800
[  158.786078][T10340]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  158.788229][T10340]  ? __pfx_udp6_gro_receive+0x10/0x10
[  158.790331][T10340]  netif_receive_skb_list_internal+0x96f/0xcb0
[  158.792437][T10340]  ? netif_receive_skb_list_internal+0x4fd/0xcb0
[  158.795013][T10340]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  158.797746][T10340]  ? dev_gro_receive+0x10f4/0x23b0
[  158.799826][T10340]  ? dev_gro_receive+0x10d0/0x23b0
[  158.801889][T10340]  ? eth_type_trans+0x3a8/0x760
[  158.803757][T10340]  napi_complete_done+0x2f2/0x7c0
[  158.805813][T10340]  ? __pfx_napi_complete_done+0x10/0x10
[  158.807964][T10340]  ? rcu_is_watching+0x15/0xb0
[  158.809923][T10340]  ? napi_gro_frags+0x975/0x1030
[  158.811652][T10340]  ? tun_get_user+0x266c/0x3e20
[  158.813197][T10340]  tun_get_user+0x28d5/0x3e20
[  158.814757][T10340]  ? tun_get_user+0x266c/0x3e20
[  158.816642][T10340]  ? aa_file_perm+0x44d/0x1550
[  158.818234][T10340]  ? __pfx_tun_get_user+0x10/0x10
[  158.820030][T10340]  ? __futex_wait+0x34f/0x3e0
[  158.821948][T10340]  ? __pfx___futex_wait+0x10/0x10
[  158.824030][T10340]  ? ref_tracker_alloc+0x318/0x460
[  158.825905][T10340]  ? __lock_acquire+0xab9/0xd20
[  158.827610][T10340]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  158.829570][T10340]  ? tun_get+0x1c/0x2f0
[  158.831258][T10340]  ? tun_get+0x1c/0x2f0
[  158.832856][T10340]  ? tun_get+0x1c/0x2f0
[  158.834362][T10340]  tun_chr_write_iter+0x113/0x200
[  158.836285][T10340]  vfs_write+0x5c9/0xb30
[  158.837943][T10340]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  158.840076][T10340]  ? __pfx_vfs_write+0x10/0x10
[  158.842011][T10340]  ? __fget_files+0x2a/0x420
[  158.843895][T10340]  ksys_write+0x145/0x250
[  158.845651][T10340]  ? __pfx_ksys_write+0x10/0x10
[  158.847579][T10340]  ? rcu_is_watching+0x15/0xb0
[  158.849480][T10340]  ? do_syscall_64+0xbe/0x3b0
[  158.851370][T10340]  do_syscall_64+0xfa/0x3b0
[  158.853200][T10340]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.855279][T10340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.857662][T10340]  ? exc_page_fault+0x9f/0xf0
[  158.859507][T10340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.861817][T10340] RIP: 0033:0x7fab9458ec29
[  158.863571][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.871229][T10340] RSP: 002b:00007fab95375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  158.874574][T10340] RAX: ffffffffffffffda RBX: 00007fab947d5fa0 RCX: 00007fab9458ec29
[  158.877799][T10340] RDX: 000000000000006d RSI: 0000200000000200 RDI: 0000000000000004
[  158.881002][T10340] RBP: 00007fab94611e41 R08: 0000000000000000 R09: 0000000000000000
[  158.883994][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.886421][T10340] R13: 00007fab947d6038 R14: 00007fab947d5fa0 R15: 00007ffce57b4158
[  158.889180][T10340]  </TASK>
[  158.891049][T10340] Kernel Offset: disabled
[  158.892770][T10340] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:15:01  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820bca01 RBX=0000000000000000 RCX=ffffffff820bca20 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffea0000bd2700 RBP=ffffc900031b7630 RSP=ffffc900031b7368
R8 =ffffea0000bd2708 R9 =ffff800000000000 R10=dffffc0000000000 R11=fffff9400017a4e7
R12=00007f6f7e851000 R13=ffff88802774c790 R14=dffffc0000000000 R15=ffffea0000bd2700
RIP=ffffffff82231537 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558d7ab500 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6f805056c0 CR3=0000000026f76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=c13014c1274621ec d931f584cfcc9cb1
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f7cdd70d100 00007f7cdcba7460 XMM05=00007f7cdcba7478 00007f7cdcba74c0
XMM06=00007f7cdcba74b8 00007f7cdcba74b0 XMM07=00007f7cdcba74a8 00007f7cdcba74a0
XMM08=0000000000000000 00007f7cdca12f0f XMM09=0000000000000000 00007f7cdca12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015e9 RDI=00000000000015ea RBP=00000000000003f8 RSP=ffffc90003e1e110
R8 =ffff888107660237 R9 =1ffff11020ecc046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78c8 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fab953756c0 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34819ff8 CR3=000000011064a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fab947a7498 00007fab947a7470 XMM03=00007fab947a74a8 00007fab947a74a0
XMM04=00007fab9530d100 00007fab947a7460 XMM05=00007fab947a7478 00007fab947a74c0
XMM06=00007fab947a74b8 00007fab947a74b0 XMM07=00007fab947a74a8 00007fab947a74a0
XMM08=0000000000000000 00007fab94612f0f XMM09=0000000000000000 00007fab94612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
