last executing test programs:

1.057355858s ago: executing program 0 (id=5000):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0)

1.057166083s ago: executing program 0 (id=5001):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

1.039259842s ago: executing program 0 (id=5002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

993.172562ms ago: executing program 0 (id=5004):
socket$netlink(0x10, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

777.004066ms ago: executing program 0 (id=5011):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {0x0}, {&(0x7f0000001300)="da02e0929db59d75", 0x8}, {&(0x7f00000002c0)="40288f34", 0x4}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x6, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0)
unshare(0x6a040000)
r3 = socket(0x1e, 0x80000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={<r4=>r0, 0x9, 0xe22e, 0xe37})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x2, [<r5=>0x0, 0x0]}, &(0x7f0000000240)=0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0x7}, &(0x7f0000000400)=0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x4004)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

673.392956ms ago: executing program 0 (id=5018):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x77, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}}, 0x18, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xee)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket(0x22, 0x2, 0x3)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x80000000, 0x4)
unshare(0x8040480)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490}, 0x48)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
unshare(0x2e040400)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000440)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000944}, 0x4814)

208.420441ms ago: executing program 2 (id=5042):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r1, 0x7}, 0x8)

208.117272ms ago: executing program 1 (id=5043):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xfffffffffffffff9)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

207.819524ms ago: executing program 2 (id=5044):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2})

159.019449ms ago: executing program 1 (id=5045):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private1, 0x800, 0x1, 0x0, 0x0, 0x0, 0xfffe}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x800, 0x0, 0x2, 0x1, 0x8, 0xfffc}, 0x20)

158.621689ms ago: executing program 2 (id=5046):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0)

158.474199ms ago: executing program 1 (id=5047):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macsec0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0)

108.832364ms ago: executing program 2 (id=5048):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

108.239279ms ago: executing program 2 (id=5049):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0)

108.080466ms ago: executing program 2 (id=5050):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000))

48.9418ms ago: executing program 1 (id=5051):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

48.563827ms ago: executing program 1 (id=5052):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 1 (id=5053):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000000f707000600000014"], 0xca)

kernel console output (not intermixed with test programs):

[1, 0] type 2 family 0 port 6081 - 0
[   61.209965][ T5881] veth0_vlan: entered promiscuous mode
[   61.235222][ T5881] veth1_vlan: entered promiscuous mode
[   61.246893][ T5882] veth0_vlan: entered promiscuous mode
[   61.256659][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.265146][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.269548][ T5882] veth1_vlan: entered promiscuous mode
[   61.290380][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.293287][ T5881] veth0_macvtap: entered promiscuous mode
[   61.297293][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.308281][ T5881] veth1_macvtap: entered promiscuous mode
[   61.324952][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.329255][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.339874][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.350662][ T5882] veth0_macvtap: entered promiscuous mode
[   61.356596][ T5740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.371953][ T5740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.377301][ T5882] veth1_macvtap: entered promiscuous mode
[   61.387828][ T5740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.394967][ T5740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.439978][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.456355][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.457276][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.463787][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.480997][ T5740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.485109][ T5740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.488160][ T5740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.506456][ T5740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.525265][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.528885][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.580113][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.583224][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.593941][ T5886] Bluetooth: hci1: command tx timeout
[   61.596179][ T5886] Bluetooth: hci0: command tx timeout
[   61.631647][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.635836][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.673846][ T5233] Bluetooth: hci2: command tx timeout
[   61.724238][   T33] audit: type=1800 audit(1756094246.733:2): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0
[   61.910913][ T5974] warning: `syz.1.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.920156][ T5973] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET)
[   61.986089][ T5980] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   62.101192][ T5990] netlink: 'syz.0.42': attribute type 12 has an invalid length.
[   62.109246][ T5990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42'.
[   62.329771][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   62.424385][ T6022] Zero length message leads to an empty skb
[   62.426935][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.482294][ T6022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.695395][ T6047] netlink: 268 bytes leftover after parsing attributes in process `syz.1.69'.
[   62.698997][ T6047] unsupported nla_type 65024
[   62.862728][ T6063] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[   63.298150][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'.
[   63.366781][ T6088] tipc: Started in network mode
[   63.369017][ T6088] tipc: Node identity 3efb80cc9033, cluster identity 4711
[   63.372261][ T6088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.384546][ T6088] syzkaller0: entered promiscuous mode
[   63.386806][ T6088] syzkaller0: entered allmulticast mode
[   63.402973][ T6088] tipc: Resetting bearer <eth:syzkaller0>
[   63.408459][ T6087] tipc: Resetting bearer <eth:syzkaller0>
[   63.413065][ T6087] tipc: Disabling bearer <eth:syzkaller0>
[   63.507457][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'.
[   63.535717][ T6096] netlink: 'syz.1.94': attribute type 3 has an invalid length.
[   63.597929][ T6100] netlink: 104 bytes leftover after parsing attributes in process `syz.1.96'.
[   63.673643][ T5233] Bluetooth: hci0: command tx timeout
[   63.675822][ T5233] Bluetooth: hci1: command 0x041b tx timeout
[   63.753614][ T5233] Bluetooth: hci2: command tx timeout
[   63.868328][ T6022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.102045][ T6129] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.109'.
[   64.499650][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   64.812607][ T6186] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   64.819213][ T6186] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   64.824091][ T6186] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   64.922647][ T6191] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   64.985830][ T6197] sctp: [Deprecated]: syz.2.138 (pid 6197) Use of int in maxseg socket option.
[   64.985830][ T6197] Use struct sctp_assoc_value instead
[   65.086372][ T6203] syz.2.141 (6203) used greatest stack depth: 18224 bytes left
[   65.176870][ T6213] syz_tun: entered allmulticast mode
[   65.189994][ T6212] syz_tun: left allmulticast mode
[   65.328632][ T6223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.368889][ T6022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.488171][ T6228] geneve2: entered promiscuous mode
[   65.503732][ T6022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.641868][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.648794][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.156'.
[   65.657829][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.661160][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.672781][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.754372][ T5233] Bluetooth: hci1: command 0x041b tx timeout
[   65.754420][ T5886] Bluetooth: hci0: command tx timeout
[   65.801975][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'.
[   65.836199][ T5886] Bluetooth: hci2: command tx timeout
[   65.870420][ T6245] tun0: tun_chr_ioctl cmd 2148045848
[   65.877092][ T6245] tun0: tun_chr_ioctl cmd 21731
[   66.014420][ T6240] IPv6: Can't replace route, no match found
[   66.059387][ T6267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.065306][ T6267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.070476][ T6267] bond0 (unregistering): Released all slaves
[   66.087241][ T6240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.092087][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.143989][ T6273] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   66.170777][ T6275] netlink: 'syz.1.173': attribute type 1 has an invalid length.
[   66.174863][ T6275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.129530][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.153289][    T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   67.217513][ T6309] __nla_validate_parse: 3 callbacks suppressed
[   67.217529][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   67.340490][ T6315] dummy0: entered promiscuous mode
[   67.345428][ T6315] bond0: entered promiscuous mode
[   67.347580][ T6315] bond_slave_0: entered promiscuous mode
[   67.350010][ T6315] bond_slave_1: entered promiscuous mode
[   67.355497][ T6315] hsr1: entered allmulticast mode
[   67.357805][ T6315] dummy0: entered allmulticast mode
[   67.359988][ T6315] bond0: entered allmulticast mode
[   67.362237][ T6315] bond_slave_0: entered allmulticast mode
[   67.364768][ T6315] bond_slave_1: entered allmulticast mode
[   67.834522][ T5886] Bluetooth: hci1: command 0x041b tx timeout
[   67.834553][ T5233] Bluetooth: hci0: command tx timeout
[   67.841651][ T6331] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[   67.913515][ T5233] Bluetooth: hci2: command tx timeout
[   68.087785][ T6345] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   68.185117][ T6355] veth1_macvtap: left promiscuous mode
[   68.187094][ T6355] macsec0: entered allmulticast mode
[   68.286022][ T6367] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[   68.479905][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'.
[   68.746747][ T6405] bridge2: the hash_elasticity option has been deprecated and is always 16
[   68.889650][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.910155][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.947721][ T6426] netlink: 'syz.1.234': attribute type 12 has an invalid length.
[   69.006278][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'.
[   69.540937][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   69.654671][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[   69.798337][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.817650][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[   69.829656][ T6495] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.836442][ T6495] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.913619][ T5233] Bluetooth: hci1: command 0x041b tx timeout
[   70.146457][ T6502] netlink: 'syz.2.268': attribute type 4 has an invalid length.
[   70.379875][ T6506] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   70.382270][ T6506] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   70.414777][ T6506] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   70.428829][ T6506] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   70.458014][ T6506] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   70.492208][ T6506] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   71.060478][ T6533] netlink: 'syz.0.275': attribute type 6 has an invalid length.
[   71.266714][ T6547] bridge0: entered promiscuous mode
[   71.268888][ T6547] vlan2: entered promiscuous mode
[   71.275461][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.279835][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.286310][ T6547] bridge0: port 3(vlan2) entered blocking state
[   71.291256][ T6547] bridge0: port 3(vlan2) entered disabled state
[   71.306431][ T6547] vlan2: entered allmulticast mode
[   71.308589][ T6547] bridge0: entered allmulticast mode
[   71.317163][ T6547] vlan2: left allmulticast mode
[   71.319202][ T6547] bridge0: left allmulticast mode
[   71.560132][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[   71.624667][ T6588] netlink: 'syz.2.294': attribute type 4 has an invalid length.
[   71.647488][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.650280][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.652686][ T6592] netlink: 'syz.1.296': attribute type 2 has an invalid length.
[   71.655846][ T6592] netlink: 119 bytes leftover after parsing attributes in process `syz.1.296'.
[   71.687788][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.693068][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.745231][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.753675][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.756991][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.760227][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.785122][ T6594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.297'.
[   71.836175][ T6596] Driver unsupported XDP return value 0 on prog  (id 57) dev N/A, expect packet loss!
[   71.855425][ T6598] atomic_op ffff888119214198 conn xmit_atomic 0000000000000000
[   72.151274][ T6611] netlink: 'syz.2.303': attribute type 5 has an invalid length.
[   72.449803][ T6627] pimreg: entered allmulticast mode
[   73.028967][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'.
[   73.032644][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'.
[   73.104334][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[   73.383517][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'.
[   73.460732][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   73.652480][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   73.668196][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'.
[   73.672487][ T6696] netlink: 'syz.0.342': attribute type 1 has an invalid length.
[   73.676153][ T6696] netlink: 10 bytes leftover after parsing attributes in process `syz.0.342'.
[   73.714720][ T6696] nbd: socks must be embedded in a SOCK_ITEM attr
[   73.717092][ T6696] block nbd0: shutting down sockets
[   73.836181][ T6711] netlink: 'syz.2.347': attribute type 12 has an invalid length.
[   73.839280][ T6711] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.347'.
[   73.965992][ T6721] Bluetooth: MGMT ver 1.23
[   74.071090][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'.
[   74.166283][ T6745] pimreg: entered allmulticast mode
[   74.336238][ T6765] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[   74.366794][ T6766] netlink: zone id is out of range
[   74.368996][ T6766] netlink: zone id is out of range
[   74.379987][ T6766] netlink: zone id is out of range
[   74.382483][ T6766] netlink: zone id is out of range
[   74.393526][ T6766] netlink: zone id is out of range
[   74.395649][ T6766] netlink: zone id is out of range
[   74.399982][ T6766] netlink: zone id is out of range
[   74.410162][ T6766] netlink: zone id is out of range
[   74.413735][ T6766] netlink: zone id is out of range
[   74.415487][ T6766] netlink: zone id is out of range
[   74.435307][ T6774] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.438543][ T6774] syzkaller0: entered promiscuous mode
[   74.440862][ T6774] syzkaller0: entered allmulticast mode
[   75.274373][ T6776] tipc: Resetting bearer <eth:syzkaller0>
[   75.276878][ T6772] tipc: Resetting bearer <eth:syzkaller0>
[   75.281352][ T6772] tipc: Disabling bearer <eth:syzkaller0>
[   75.441378][ T6794] netlink: 'syz.2.382': attribute type 13 has an invalid length.
[   75.452159][ T6794] netlink: 'syz.2.382': attribute type 17 has an invalid length.
[   75.580599][ T6789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.646407][ T6789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.670842][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.692756][ T6794] 8021q: adding VLAN 0 to HW filter on device team0
[   76.340890][ T6808] netlink: 'syz.0.386': attribute type 11 has an invalid length.
[   76.345152][ T6808] netlink: 'syz.0.386': attribute type 4 has an invalid length.
[   76.926893][ T6864] xfrm1: entered promiscuous mode
[   76.933547][ T6864] xfrm1: entered allmulticast mode
[   77.879777][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.117840][ T6971] batadv0: entered promiscuous mode
[   78.120113][ T6971] vlan2: entered promiscuous mode
[   78.269266][ T6978] __nla_validate_parse: 7 callbacks suppressed
[   78.269286][ T6978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'.
[   78.380489][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[   78.387357][ T6990] bridge0: port 3(macvlan2) entered blocking state
[   78.389654][ T6990] bridge0: port 3(macvlan2) entered disabled state
[   78.391667][ T6990] macvlan2: entered allmulticast mode
[   78.400300][ T6990] bridge0: entered allmulticast mode
[   78.403897][ T6990] macvlan2: left allmulticast mode
[   78.406070][ T6990] bridge0: left allmulticast mode
[   78.528563][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   78.532225][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   78.543500][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   78.553889][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   78.947528][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.958184][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'.
[   80.158803][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[   80.233773][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.320981][   T47] IPVS: starting estimator thread 0...
[   80.405090][ T7094] IPVS: using max 92 ests per chain, 220800 per kthread
[   80.528371][   T12] IPVS: stop unused estimator thread 0...
[   80.630540][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'.
[   80.700097][ T7124] net_ratelimit: 17 callbacks suppressed
[   80.700118][ T7124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.796157][ T7132] bridge_slave_0: left allmulticast mode
[   80.798435][ T7132] bridge_slave_0: left promiscuous mode
[   80.800722][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.815702][ T7132] bridge_slave_1: left allmulticast mode
[   80.817506][ T7132] bridge_slave_1: left promiscuous mode
[   80.823434][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.851142][ T7132] team0: Port device team_slave_0 removed
[   80.861246][ T7132] team0: Port device team_slave_1 removed
[   80.868653][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.871745][ T7132] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.884542][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.890370][ T7132] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.042915][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'.
[   81.107657][ T7165] netlink: 'syz.1.548': attribute type 21 has an invalid length.
[   81.113938][ T7165] netlink: 128 bytes leftover after parsing attributes in process `syz.1.548'.
[   81.118702][ T7165] netlink: 'syz.1.548': attribute type 4 has an invalid length.
[   81.121735][ T7165] netlink: 'syz.1.548': attribute type 3 has an invalid length.
[   81.130685][ T7165] netlink: 3 bytes leftover after parsing attributes in process `syz.1.548'.
[   81.303823][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'.
[   81.415293][ T7200] geneve2: entered promiscuous mode
[   81.418163][ T5740] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   81.422114][ T5740] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   81.433925][ T5740] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   81.436736][ T5740] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   81.479105][ T7208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.563'.
[   81.516020][   T95] cfg80211: failed to load regulatory.db
[   81.658551][ T7223] netlink: 'syz.0.569': attribute type 10 has an invalid length.
[   81.662470][ T7223] bridge0: port 1(macsec0) entered blocking state
[   81.665218][ T7223] bridge0: port 1(macsec0) entered disabled state
[   81.667680][ T7223] macsec0: entered allmulticast mode
[   81.669422][ T7223] veth1_macvtap: entered allmulticast mode
[   81.672364][ T7223] macsec0: entered promiscuous mode
[   81.676147][ T7223] bridge0: port 1(macsec0) entered blocking state
[   81.678521][ T7223] bridge0: port 1(macsec0) entered forwarding state
[   81.770983][ T7229] netlink: 'syz.2.567': attribute type 16 has an invalid length.
[   81.775032][ T7229] netlink: 'syz.2.567': attribute type 17 has an invalid length.
[   81.795686][ T7229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.845561][ T7267] netlink: 'syz.0.588': attribute type 14 has an invalid length.
[   83.091959][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.114815][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.130076][ T7281] netlink: 'syz.0.594': attribute type 30 has an invalid length.
[   83.316488][ T7291] __nla_validate_parse: 2 callbacks suppressed
[   83.316513][ T7291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.600'.
[   83.342759][ T7289] macsec0: left allmulticast mode
[   83.345726][ T7289] veth1_macvtap: left allmulticast mode
[   83.347590][ T7289] macsec0: left promiscuous mode
[   83.349529][ T7289] bridge0: port 1(macsec0) entered disabled state
[   83.370521][ T7295] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   83.400329][ T7289] team0: Mode changed to "broadcast"
[   83.406165][ T7289] vlan0: entered promiscuous mode
[   83.414216][ T7289] team0: Port device vlan0 added
[   83.421994][ T7289] tipc: Started in network mode
[   83.425114][ T7289] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   83.428237][ T7289] tipc: Enabled bearer <eth:team0>, priority 0
[   83.506191][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.509124][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.556788][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.637720][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.642926][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.654925][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.660162][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.747013][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'.
[   83.755007][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'.
[   83.758691][ T7332] netlink: 31 bytes leftover after parsing attributes in process `syz.0.618'.
[   83.761706][ T7332] netlink: 'syz.0.618': attribute type 3 has an invalid length.
[   83.765680][ T7332] netlink: 'syz.0.618': attribute type 2 has an invalid length.
[   83.768198][ T7332] netlink: 31 bytes leftover after parsing attributes in process `syz.0.618'.
[   83.820756][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[   84.158501][ T7364] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[   84.327904][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[   84.338390][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[   84.773513][   T10] tipc: Node number set to 11578026
[   84.903253][ T7411] rdma_rxe: rxe_newlink: failed to add ipvlan0
[   85.290882][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'.
[   85.470893][ T7470] veth1_to_team: entered allmulticast mode
[   85.519644][ T7476] team0: Device sit1 is of different type
[   86.231466][ T7541] ip6tnl1: entered promiscuous mode
[   86.316200][ T7549] netlink: 596 bytes leftover after parsing attributes in process `syz.2.722'.
[   87.056252][ T7616] validate_nla: 3 callbacks suppressed
[   87.056288][ T7616] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[   87.248839][ T7625] syzkaller1: entered promiscuous mode
[   87.252423][ T7625] syzkaller1: entered allmulticast mode
[   87.404373][ T7629] tipc: Resetting bearer <eth:team0>
[   87.450923][ T7629] veth1_to_team: left allmulticast mode
[   87.471907][ T7629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   87.646206][ T7642] netlink: 'syz.2.766': attribute type 3 has an invalid length.
[   88.542217][ T7709] __nla_validate_parse: 4 callbacks suppressed
[   88.542232][ T7709] netlink: 308 bytes leftover after parsing attributes in process `syz.0.796'.
[   88.547365][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'.
[   88.550871][ T7709] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   88.789395][ T7728] netlink: 204 bytes leftover after parsing attributes in process `syz.1.797'.
[   88.908081][ T7746] netlink: 148 bytes leftover after parsing attributes in process `syz.1.806'.
[   88.909066][ T7744] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.918367][ T7744] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   88.966590][ T7744] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.972974][ T7744] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   89.087507][ T7744] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.091552][ T7744] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   89.138392][ T7744] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.141758][ T7744] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   89.187329][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   89.190796][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   89.196508][ T7767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.814'.
[   89.200199][ T7767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.814'.
[   89.209098][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   89.212509][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   89.228363][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   89.231466][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   89.240140][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   89.244036][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   89.456373][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'.
[   90.365802][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.1.833'.
[   91.162979][ T7862] bond1: (slave ip6gretap1): making interface the new active one
[   91.167004][ T7862] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   91.562514][ T7901] netlink: 224 bytes leftover after parsing attributes in process `syz.0.872'.
[   91.587528][ T5908] IPVS: starting estimator thread 0...
[   91.608030][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'.
[   91.610866][ T7900] bridge_slave_1: left allmulticast mode
[   91.613140][ T7900] bridge_slave_1: left promiscuous mode
[   91.615635][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.619018][ T7900] bridge_slave_0: left allmulticast mode
[   91.621132][ T7900] bridge_slave_0: left promiscuous mode
[   91.623455][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.673474][ T7904] IPVS: using max 92 ests per chain, 220800 per kthread
[   91.724024][ T7915] netlink: 'syz.0.878': attribute type 21 has an invalid length.
[   92.299502][ T7976] netlink: 'syz.0.904': attribute type 1 has an invalid length.
[   93.049496][   T33] audit: type=1800 audit(1756094278.053:3): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.953" name="memory.events" dev="tmpfs" ino=1650 res=0 errno=0
[   93.074128][   T33] audit: type=1804 audit(1756094278.053:4): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.953" name="/newroot/323/memory.events" dev="tmpfs" ino=1650 res=1 errno=0
[   93.327468][ T8118] tun0: tun_chr_ioctl cmd 2147767520
[   93.483327][ T8146] netlink: 'syz.0.986': attribute type 5 has an invalid length.
[   93.639802][ T8169] netlink: 'syz.1.993': attribute type 29 has an invalid length.
[   93.658929][ T8174] veth1_macvtap: left promiscuous mode
[   93.660957][ T8174] macsec0: entered allmulticast mode
[   93.744994][ T8187] netlink: 'syz.2.1005': attribute type 11 has an invalid length.
[   93.849134][ T8198] __nla_validate_parse: 7 callbacks suppressed
[   93.849153][ T8198] netlink: 41 bytes leftover after parsing attributes in process `syz.2.1010'.
[   94.104600][ T8228] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.108461][ T8228] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.158346][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'.
[   94.161973][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'.
[   94.167441][ T8234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1027'.
[   94.416984][ T8250] netlink: 'syz.1.1034': attribute type 4 has an invalid length.
[   94.420166][ T8250] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1034'.
[   94.464295][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[   94.577285][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'.
[   94.580504][ T8270] 8021q: VLANs not supported on ipvlan1
[   94.590003][ T8270] macsec1: entered promiscuous mode
[   94.591902][ T8270] macsec1: entered allmulticast mode
[   94.774630][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'.
[   95.009258][ T8304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1054'.
[   95.018807][ T8304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.133050][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'.
[   95.175955][ T8322] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   95.534118][ T8373] ieee802154 phy1 wpan1: encryption failed: -22
[   95.561424][ T8377] syzkaller1: entered promiscuous mode
[   95.563251][ T8377] syzkaller1: entered allmulticast mode
[   95.579492][ T8379] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   96.363632][ T8449] vlan2: entered promiscuous mode
[   96.365271][ T8449] vlan2: entered allmulticast mode
[   96.620382][ T8470] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   98.024194][ T8569] sctp: [Deprecated]: syz.2.1171 (pid 8569) Use of int in max_burst socket option deprecated.
[   98.024194][ T8569] Use struct sctp_assoc_value instead
[   98.329044][ T8599] netlink: 'syz.0.1182': attribute type 13 has an invalid length.
[   98.332501][ T8599] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   98.437881][ T8607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   98.455251][   T13] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[   98.498730][ T8607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   98.567595][ T8620] netlink: 'syz.0.1193': attribute type 18 has an invalid length.
[   98.577072][ T8620] netlink: 'syz.0.1193': attribute type 18 has an invalid length.
[   98.577185][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.583718][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.586872][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.592663][ T8607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   98.612818][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.644764][ T8607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   98.703180][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   98.710882][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   98.720556][ T5740] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   98.733619][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   98.830526][ T8648] macsec1: entered promiscuous mode
[   98.833074][ T8648] bond0: entered promiscuous mode
[   98.844979][ T8648] bond_slave_0: entered promiscuous mode
[   98.853097][ T8648] bond_slave_1: entered promiscuous mode
[   98.864432][ T8648] bond0: left promiscuous mode
[   98.867786][ T8648] bond_slave_0: left promiscuous mode
[   98.870393][ T8648] bond_slave_1: left promiscuous mode
[   99.146388][ T8684] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  100.025929][ T8706] netlink: 'syz.0.1235': attribute type 21 has an invalid length.
[  100.028860][ T8706] netlink: 'syz.0.1235': attribute type 6 has an invalid length.
[  100.031800][ T8706] __nla_validate_parse: 26 callbacks suppressed
[  100.031813][ T8706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1235'.
[  100.398089][ T8734] netlink: del zone limit has 4 unknown bytes
[  100.795595][ T8757] block nbd0: server does not support multiple connections per device.
[  100.800134][ T8757] block nbd0: shutting down sockets
[  100.851178][ T8765] syzkaller1: entered promiscuous mode
[  100.854696][ T8745] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1255'.
[  100.858374][ T8765] syzkaller1: entered allmulticast mode
[  101.288367][   T47] IPVS: starting estimator thread 0...
[  101.374689][ T8795] IPVS: using max 92 ests per chain, 220800 per kthread
[  101.732782][ T8817] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  102.178766][ T8862] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1303'.
[  102.224491][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'.
[  102.396880][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  102.410730][ T8892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.414147][ T8892] syzkaller0: entered promiscuous mode
[  102.417926][ T8892] syzkaller0: entered allmulticast mode
[  102.423942][ T8892] tipc: Resetting bearer <eth:syzkaller0>
[  102.427779][ T8891] tipc: Resetting bearer <eth:syzkaller0>
[  102.431420][ T8891] tipc: Disabling bearer <eth:syzkaller0>
[  102.503623][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e7fe400: rx timeout, send abort
[  102.553145][ T8907] netlink: 'syz.0.1324': attribute type 1 has an invalid length.
[  102.562367][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  102.575681][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'.
[  102.806059][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'.
[  103.002593][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e7fe800: rx timeout, send abort
[  103.007015][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e7fe400: abort rx timeout. Force session deactivation
[  103.326361][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'.
[  103.330125][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'.
[  103.334641][ T8945] netlink: 'syz.0.1341': attribute type 3 has an invalid length.
[  103.352695][ T8943] tipc: Started in network mode
[  103.354985][ T8943] tipc: Node identity 729f822fe645, cluster identity 4711
[  103.357440][ T8943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.363163][ T8943] syzkaller0: entered promiscuous mode
[  103.367313][ T8943] syzkaller0: entered allmulticast mode
[  103.388060][ T8943] tipc: Resetting bearer <eth:syzkaller0>
[  103.391610][ T8942] tipc: Resetting bearer <eth:syzkaller0>
[  103.397664][ T8942] tipc: Disabling bearer <eth:syzkaller0>
[  103.487536][ T8956] trusted_key: syz.0.1345 sent an empty control message without MSG_MORE.
[  103.506004][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e7fe800: abort rx timeout. Force session deactivation
[  103.574398][ T8971] openvswitch: netlink: Flow key attr not present in new flow.
[  103.582574][   T47] IPVS: starting estimator thread 0...
[  103.675049][ T8972] IPVS: using max 92 ests per chain, 220800 per kthread
[  103.850693][ T8987] syz.0.1356 (8987) used obsolete PPPIOCDETACH ioctl
[  105.162924][ T9050] __nla_validate_parse: 5 callbacks suppressed
[  105.163030][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1383'.
[  105.174214][ T9050] pim6reg: entered allmulticast mode
[  105.179314][ T9050] pim6reg: left allmulticast mode
[  105.316093][ T9066] netlink: 'syz.2.1389': attribute type 1 has an invalid length.
[  105.331323][ T9066] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.350129][ T9066] bond2: (slave geneve3): making interface the new active one
[  105.355999][ T9066] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  105.360395][ T5740] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  105.366115][ T9066] syz.2.1389 (9066) used greatest stack depth: 17584 bytes left
[  105.369485][ T5740] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  105.369516][ T5740] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  105.369537][ T5740] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  105.602834][ T9097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.270101][ T9193] netlink: 'syz.2.1414': attribute type 1 has an invalid length.
[  106.297034][ T9193] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  106.307047][ T5895] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.311522][ T9193] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.322118][ T9193] veth3: entered promiscuous mode
[  106.328538][ T9193] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  106.339981][ T9193] bridge_slave_0: left allmulticast mode
[  106.342159][ T9193] bridge_slave_0: left promiscuous mode
[  106.344738][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.348466][ T9193] bridge_slave_1: left allmulticast mode
[  106.350497][ T9193] bridge_slave_1: left promiscuous mode
[  106.352715][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.357487][ T9193] bond0: (slave bond_slave_0): Releasing backup interface
[  106.361461][ T9193] bond0: (slave bond_slave_1): Releasing backup interface
[  106.366672][ T9193] team0: Port device team_slave_0 removed
[  106.369789][ T9193] team0: Port device team_slave_1 removed
[  106.372944][ T9193] bond1: (slave ip6gretap1): Releasing active interface
[  106.378181][ T9193] bond2: (slave geneve3): Releasing active interface
[  106.383240][ T9193] bond3: (slave ip6gretap2): Removing an active aggregator
[  106.387601][ T9193] bond3: (slave ip6gretap2): Releasing backup interface
[  106.389948][ T9193] bond3: (slave ip6gretap2): the permanent HWaddr of slave - ea:4b:80:3c:c7:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  106.399606][ T9193] bond3: (slave veth3): Releasing backup interface
[  106.405085][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  106.411859][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  106.418463][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  106.421641][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  106.452107][ T9201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1417'.
[  106.695781][ T9219] macvlan2: entered allmulticast mode
[  106.698219][ T9219] veth1_vlan: entered allmulticast mode
[  106.701557][ T9219] veth1_vlan: left allmulticast mode
[  106.756030][ T9230] syzkaller1: entered promiscuous mode
[  106.758214][ T9230] syzkaller1: entered allmulticast mode
[  107.152435][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1446'.
[  107.412540][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1458'.
[  107.728426][ T9317] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1472'.
[  107.797913][ T9323] netlink: 'syz.0.1475': attribute type 12 has an invalid length.
[  107.932297][ T9338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.937144][ T9338] syzkaller0: entered promiscuous mode
[  107.939036][ T9338] syzkaller0: entered allmulticast mode
[  107.947675][ T9338] tipc: Resetting bearer <eth:syzkaller0>
[  107.951225][ T9337] tipc: Resetting bearer <eth:syzkaller0>
[  107.956290][ T9337] tipc: Disabling bearer <eth:syzkaller0>
[  108.114269][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1486'.
[  108.149636][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'.
[  108.150579][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1489'.
[  108.160068][ T9353] IPv6: NLM_F_REPLACE set, but no existing node found!
[  108.362007][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1501'.
[  108.572269][ T9397] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1510'.
[  108.588086][ T9397] gretap0: entered promiscuous mode
[  109.002990][ T9450] bond0: (slave bond_slave_0): Releasing backup interface
[  109.012692][ T9450] bond_slave_0: left promiscuous mode
[  109.015132][ T9450] bond_slave_0: left allmulticast mode
[  109.018435][ T9450] bond0: (slave bond_slave_1): Releasing backup interface
[  109.022636][ T9450] bond_slave_1: left promiscuous mode
[  109.027401][ T9450] bond_slave_1: left allmulticast mode
[  109.030954][ T9450] team0: Port device team_slave_0 removed
[  109.035012][ T9450] team0: Port device team_slave_1 removed
[  109.037503][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.041190][ T5908] syz1: Port: 1 Link DOWN
[  109.168947][ T9457] netlink: 'syz.0.1538': attribute type 19 has an invalid length.
[  109.172719][ T9457] netlink: 'syz.0.1538': attribute type 19 has an invalid length.
[  109.202726][ T9459] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  109.312361][ T9468] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  109.536894][ T9478] netlink: 'syz.0.1548': attribute type 1 has an invalid length.
[  109.553945][ T9478] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.571546][ T9478] bond2: (slave gretap1): making interface the new active one
[  109.575662][ T9478] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  109.679269][ T9483] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.122793][ T9519] netlink: 'syz.2.1563': attribute type 1 has an invalid length.
[  110.368489][ T9533] sock: sock_set_timeout: `syz.0.1570' (pid 9533) tries to set negative timeout
[  110.429751][ T9539] __nla_validate_parse: 3 callbacks suppressed
[  110.429771][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'.
[  110.442709][ T9539] vlan2: entered promiscuous mode
[  110.445468][ T9539] team0: entered promiscuous mode
[  110.547575][ T9546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1576'.
[  110.552051][ T9546] netlink: 'syz.2.1576': attribute type 29 has an invalid length.
[  110.644032][ T9558] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1581'.
[  110.680123][ T9561] GUP no longer grows the stack in syz.0.1583 (9561): 200000003000-20000000a000 (200000001000)
[  110.685392][ T9561] CPU: 0 UID: 0 PID: 9561 Comm: syz.0.1583 Not tainted syzkaller #0 PREEMPT(full) 
[  110.685412][ T9561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.685422][ T9561] Call Trace:
[  110.685444][ T9561]  <TASK>
[  110.685459][ T9561]  dump_stack_lvl+0x189/0x250
[  110.685491][ T9561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.685506][ T9561]  ? __pfx__printk+0x10/0x10
[  110.685523][ T9561]  ? find_vma+0xe7/0x160
[  110.685540][ T9561]  ? unwind_next_frame+0xa5/0x2390
[  110.685560][ T9561]  __get_user_pages+0x24d0/0x2ce0
[  110.685577][ T9561]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  110.685599][ T9561]  ? __gup_longterm_locked+0xc68/0x1660
[  110.685618][ T9561]  ? rcu_is_watching+0x15/0xb0
[  110.685634][ T9561]  __gup_longterm_locked+0xde9/0x1660
[  110.685653][ T9561]  ? sanity_check_pinned_pages+0x123a/0x1300
[  110.685670][ T9561]  gup_fast_fallback+0x1e6a/0x2010
[  110.685695][ T9561]  ? __pfx_gup_fast_fallback+0x10/0x10
[  110.685709][ T9561]  ? stack_trace_save+0x9c/0xe0
[  110.685724][ T9561]  ? __pfx_stack_trace_save+0x10/0x10
[  110.685741][ T9561]  ? pin_user_pages_fast+0x4d/0xb0
[  110.685756][ T9561]  iov_iter_extract_pages+0x35a/0x5e0
[  110.685776][ T9561]  extract_iter_to_sg+0xe46/0x24e0
[  110.685805][ T9561]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  110.685831][ T9561]  ? __asan_memset+0x22/0x50
[  110.685846][ T9561]  af_alg_get_rsgl+0x436/0x810
[  110.685867][ T9561]  aead_recvmsg+0x4cc/0x13f0
[  110.685891][ T9561]  ? __pfx_aead_recvmsg+0x10/0x10
[  110.685908][ T9561]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  110.685922][ T9561]  ? security_socket_recvmsg+0x7e/0x2e0
[  110.685937][ T9561]  ? __pfx_aead_recvmsg+0x10/0x10
[  110.685955][ T9561]  sock_recvmsg_nosec+0x186/0x1c0
[  110.685977][ T9561]  ____sys_recvmsg+0x3aa/0x460
[  110.685995][ T9561]  ? __pfx_____sys_recvmsg+0x10/0x10
[  110.686014][ T9561]  ? import_iovec+0x74/0xa0
[  110.686031][ T9561]  ___sys_recvmsg+0x1b5/0x510
[  110.686047][ T9561]  ? __pfx____sys_recvmsg+0x10/0x10
[  110.686060][ T9561]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.686083][ T9561]  ? __fget_files+0x2a/0x420
[  110.686101][ T9561]  ? rcu_is_watching+0x15/0xb0
[  110.686115][ T9561]  ? lock_release+0x4b/0x3e0
[  110.686135][ T9561]  ? __might_fault+0xcc/0x130
[  110.686153][ T9561]  do_recvmmsg+0x307/0x770
[  110.686171][ T9561]  ? __pfx_do_recvmmsg+0x10/0x10
[  110.686185][ T9561]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  110.686211][ T9561]  ? __pfx_do_futex+0x10/0x10
[  110.686232][ T9561]  __x64_sys_recvmmsg+0x190/0x240
[  110.686247][ T9561]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  110.686261][ T9561]  ? rcu_is_watching+0x15/0xb0
[  110.686275][ T9561]  ? rcu_is_watching+0x15/0xb0
[  110.686289][ T9561]  do_syscall_64+0xfa/0x3b0
[  110.686302][ T9561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.686349][ T9561]  ? exc_page_fault+0x9f/0xf0
[  110.686373][ T9561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.686385][ T9561] RIP: 0033:0x7efcbf38ebe9
[  110.686398][ T9561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.686412][ T9561] RSP: 002b:00007efcc0295038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  110.686430][ T9561] RAX: ffffffffffffffda RBX: 00007efcbf5b5fa0 RCX: 00007efcbf38ebe9
[  110.686441][ T9561] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  110.686450][ T9561] RBP: 00007efcbf411e19 R08: 0000000000000000 R09: 0000000000000000
[  110.686457][ T9561] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  110.686465][ T9561] R13: 00007efcbf5b6038 R14: 00007efcbf5b5fa0 R15: 00007ffc4addbd58
[  110.686488][ T9561]  </TASK>
[  110.904548][ T9573] ip6gre2: entered allmulticast mode
[  111.251340][ T9602] netlink: 'syz.1.1601': attribute type 11 has an invalid length.
[  111.254110][ T9602] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1601'.
[  111.332768][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1602'.
[  111.375866][ T9612] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0
[  111.442792][ T9618] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  111.446629][ T9618] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  111.472607][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'.
[  111.703165][ T9640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1616'.
[  111.713321][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'.
[  111.721666][ T9642] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1617'.
[  111.898590][ T9654] IPVS: Scheduler module ip_vs_sip not found
[  112.561496][ T9689] netlink: 'syz.2.1635': attribute type 6 has an invalid length.
[  113.173950][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'.
[  113.203997][ T9727] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  113.361954][ T9749] syzkaller0: entered promiscuous mode
[  113.363991][ T9749] syzkaller0: entered allmulticast mode
[  114.529176][ T9854] netlink: 'syz.1.1691': attribute type 5 has an invalid length.
[  114.696132][ T9867] netlink: 'syz.1.1697': attribute type 12 has an invalid length.
[  114.698730][ T9867] netlink: 'syz.1.1697': attribute type 18 has an invalid length.
[  114.701222][ T9867] netlink: 'syz.1.1697': attribute type 21 has an invalid length.
[  114.705407][ T9867] netlink: 'syz.1.1697': attribute type 26 has an invalid length.
[  114.820244][ T9883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.111549][ T9919] netlink: 'syz.1.1723': attribute type 4 has an invalid length.
[  115.644400][ T9995] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  115.648965][ T9995] __nla_validate_parse: 11 callbacks suppressed
[  115.648980][ T9995] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1757'.
[  116.504237][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  116.587095][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'.
[  116.590647][T10038] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  116.593748][T10038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.771836][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1783'.
[  116.778428][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1783'.
[  117.069167][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'.
[  117.179675][T10096] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  117.235546][T10101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.295058][T10110] sctp: [Deprecated]: syz.0.1810 (pid 10110) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.295058][T10110] Use struct sctp_sack_info instead
[  117.333185][T10116] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  117.715617][T10165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1837'.
[  117.718783][T10165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1837'.
[  117.721711][T10165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1837'.
[  118.176854][T10212] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  118.209670][T10201] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  118.341006][T10231] syzkaller1: entered allmulticast mode
[  118.368654][T10232] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1867'.
[  118.406481][T10233] delete_channel: no stack
[  118.488752][T10239] netlink: 'syz.0.1870': attribute type 1 has an invalid length.
[  118.491958][T10239] netlink: 'syz.0.1870': attribute type 1 has an invalid length.
[  118.575965][T10247] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  118.676990][T10255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.680251][T10255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.288823][T10290] netlink: 'syz.1.1895': attribute type 4 has an invalid length.
[  119.584507][T10318] pim6reg: entered allmulticast mode
[  119.588687][T10317] pim6reg: left allmulticast mode
[  119.897679][T10356] netlink: 'syz.1.1927': attribute type 14 has an invalid length.
[  119.901034][T10356] netlink: 'syz.1.1927': attribute type 11 has an invalid length.
[  120.001992][T10366] syzkaller1: entered promiscuous mode
[  120.005910][T10366] syzkaller1: entered allmulticast mode
[  120.113856][T10379] lo speed is unknown, defaulting to 1000
[  120.116238][T10379] lo speed is unknown, defaulting to 1000
[  120.118843][T10379] lo speed is unknown, defaulting to 1000
[  120.127059][T10379] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.171635][T10383] syzkaller0: entered promiscuous mode
[  120.173580][T10383] syzkaller0: entered allmulticast mode
[  120.176143][T10379] lo speed is unknown, defaulting to 1000
[  120.179234][T10379] lo speed is unknown, defaulting to 1000
[  120.182369][T10379] lo speed is unknown, defaulting to 1000
[  120.275029][T10393] lo speed is unknown, defaulting to 1000
[  120.687686][T10419] bridge3: entered promiscuous mode
[  120.720244][T10421] __nla_validate_parse: 11 callbacks suppressed
[  120.720258][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1954'.
[  121.060097][T10439] netlink: 'syz.2.1962': attribute type 9 has an invalid length.
[  121.085236][T10439] netlink: 'syz.2.1962': attribute type 7 has an invalid length.
[  121.088385][T10439] netlink: 'syz.2.1962': attribute type 8 has an invalid length.
[  121.223255][T10459] xt_limit: Overflow, try lower: 604147548/4200216962
[  121.282685][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1975'.
[  121.285809][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'.
[  121.301232][T10466] bond1: entered promiscuous mode
[  121.302857][T10466] bond1: entered allmulticast mode
[  121.304908][T10466] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.355096][T10466] lo speed is unknown, defaulting to 1000
[  121.486205][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1982'.
[  122.212190][T10527] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  122.605502][T10548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.608680][T10548] syzkaller0: entered promiscuous mode
[  122.610439][T10548] syzkaller0: entered allmulticast mode
[  122.624441][T10548] tipc: Resetting bearer <eth:syzkaller0>
[  122.627519][T10547] tipc: Resetting bearer <eth:syzkaller0>
[  122.630396][T10547] tipc: Disabling bearer <eth:syzkaller0>
[  122.679688][T10558] blkio.reset_stats is deprecated
[  122.715659][T10566] netlink: 'syz.2.2021': attribute type 3 has an invalid length.
[  122.890827][T10588] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  122.902230][T10588] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  123.078404][T10612] IPv6: Can't replace route, no match found
[  123.129549][T10616] netlink: 'syz.2.2044': attribute type 2 has an invalid length.
[  123.138250][T10616] k*]: entered promiscuous mode
[  123.234928][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2047'.
[  123.392774][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'.
[  123.404964][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'.
[  123.646393][T10647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2057'.
[  124.032603][T10651] sctp: [Deprecated]: syz.1.2058 (pid 10651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.032603][T10651] Use struct sctp_sack_info instead
[  124.287165][T10663] lo speed is unknown, defaulting to 1000
[  124.347444][T10667] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2064'.
[  124.553268][T10673] block nbd0: NBD_DISCONNECT
[  124.616986][T10677] netlink: 'syz.1.2069': attribute type 74 has an invalid length.
[  124.703095][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2072'.
[  124.901635][ T5740] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.905531][ T5740] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.911491][ T5740] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.920835][ T5740] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.798996][T10711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.897329][T10727] __nla_validate_parse: 3 callbacks suppressed
[  125.897349][T10727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2092'.
[  126.038403][T10745] syzkaller1: entered allmulticast mode
[  126.217633][T10755] netlink: 'syz.2.2103': attribute type 1 has an invalid length.
[  126.244993][T10755] bond4: (slave gretap1): making interface the new active one
[  126.247997][T10755] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  126.259654][T10755] vlan2: entered allmulticast mode
[  126.261901][T10755] bond4: entered allmulticast mode
[  126.266858][T10755] gretap1: entered allmulticast mode
[  126.270445][T10755] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  126.361729][T10771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.366720][T10771] syzkaller0: entered promiscuous mode
[  126.370897][T10771] syzkaller0: entered allmulticast mode
[  126.380784][T10771] tipc: Resetting bearer <eth:syzkaller0>
[  126.386805][T10769] tipc: Resetting bearer <eth:syzkaller0>
[  126.390180][T10769] tipc: Disabling bearer <eth:syzkaller0>
[  126.432497][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'.
[  126.502141][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'.
[  126.588742][T10794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.590977][T10794] IPv6: NLM_F_CREATE should be set when creating new route
[  126.593346][T10794] IPv6: NLM_F_CREATE should be set when creating new route
[  126.596527][T10794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.694159][T10807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2124'.
[  126.698039][T10802] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2124'.
[  126.820469][T10823] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  126.830916][T10825] netlink: 'syz.0.2136': attribute type 1 has an invalid length.
[  127.035404][T10846] netlink: 'syz.2.2146': attribute type 1 has an invalid length.
[  127.077769][T10846] 8021q: adding VLAN 0 to HW filter on device bond6
[  127.082494][T10846] bond5: (slave bond6): making interface the new active one
[  127.086657][T10846] bond5: (slave bond6): Enslaving as an active interface with an up link
[  127.121273][T10846] bond5: (slave gretap2): Enslaving as a backup interface with an up link
[  127.129934][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2146'.
[  127.136171][T10846] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.423817][T10863] nbd2: detected capacity change from 0 to 63
[  127.428697][T10865] block nbd2: NBD_DISCONNECT
[  127.430687][T10865] block nbd2: Disconnected due to user request.
[  127.432264][T10863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2151'.
[  127.433276][T10865] block nbd2: shutting down sockets
[  127.442847][T10863] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  127.453650][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.457165][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  127.460197][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.463892][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  127.466442][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.469613][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  127.472272][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.475173][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  127.484519][ T5867] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.488083][ T5867] Buffer I/O error on dev nbd2, logical block 0, async page read
[  127.495939][ T5867] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.503016][ T5867] Buffer I/O error on dev nbd2, logical block 1, async page read
[  127.509042][ T5867] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.519468][ T5867] Buffer I/O error on dev nbd2, logical block 2, async page read
[  127.522140][ T5867] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.527011][ T5867] Buffer I/O error on dev nbd2, logical block 3, async page read
[  127.530141][ T5867] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.533151][ T5867] Buffer I/O error on dev nbd2, logical block 0, async page read
[  127.536943][ T5867] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.540132][ T5867] Buffer I/O error on dev nbd2, logical block 1, async page read
[  127.546903][ T5867] ldm_validate_partition_table(): Disk read failed.
[  127.549778][ T5867] Dev nbd2: unable to read RDB block 0
[  127.554170][ T5867]  nbd2: unable to read partition table
[  127.563722][ T5867] ldm_validate_partition_table(): Disk read failed.
[  127.567184][ T5867] Dev nbd2: unable to read RDB block 0
[  127.572179][ T5867]  nbd2: unable to read partition table
[  127.668058][T10887] netlink: 'syz.2.2161': attribute type 1 has an invalid length.
[  127.680087][T10887] 8021q: adding VLAN 0 to HW filter on device bond7
[  127.685028][T10887] bond7: (slave wlan0): Opening slave failed
[  127.694418][T10887] vlan2: entered allmulticast mode
[  127.696475][T10887] veth1: entered allmulticast mode
[  127.842464][T10901] netlink: 'syz.1.2167': attribute type 1 has an invalid length.
[  127.862369][T10901] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.150622][T10929] netlink: 'syz.1.2179': attribute type 13 has an invalid length.
[  128.153642][T10929] netlink: 'syz.1.2179': attribute type 17 has an invalid length.
[  128.160981][T10929] gretap0: refused to change device tx_queue_len
[  128.170368][T10929] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  128.177956][   T10] lo speed is unknown, defaulting to 1000
[  128.180235][   T10] syz2: Port: 1 Link ACTIVE
[  128.415340][T10962] delete_channel: no stack
[  128.422329][   T33] audit: type=1800 audit(1756094313.423:5): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2194" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3535 res=0 errno=0
[  128.430062][T10880] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  128.434455][   T33] audit: type=1804 audit(1756094313.423:6): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2194" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3535 res=1 errno=0
[  128.489125][T10972] netlink: 'syz.0.2200': attribute type 83 has an invalid length.
[  128.772000][T11007] netlink: 'syz.1.2217': attribute type 1 has an invalid length.
[  128.777302][T11007] netlink: 'syz.1.2217': attribute type 2 has an invalid length.
[  128.780597][T11007] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2217'.
[  128.886398][T11015] syzkaller0: entered promiscuous mode
[  128.888389][T11015] syzkaller0: entered allmulticast mode
[  128.974786][T11024] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  129.099126][T11033] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  129.783162][T11064] delete_channel: no stack
[  130.109300][T11090] IPVS: Error connecting to the multicast addr
[  130.126903][T11092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2248'.
[  130.364483][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'.
[  130.554639][T11157] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  130.715425][T11178] syzkaller1: entered promiscuous mode
[  130.717230][T11178] syzkaller1: entered allmulticast mode
[  130.942254][T11197] lo speed is unknown, defaulting to 1000
[  131.018707][T11205] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  131.046666][T11209] __nla_validate_parse: 1 callbacks suppressed
[  131.046680][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2293'.
[  131.086444][T11213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2295'.
[  131.182076][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'.
[  131.186810][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'.
[  131.221877][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'.
[  131.227890][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'.
[  131.230907][T11232] validate_nla: 4 callbacks suppressed
[  131.230917][T11232] netlink: 'syz.1.2304': attribute type 7 has an invalid length.
[  131.337093][T11248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2313'.
[  131.393005][T11258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'.
[  131.400241][T11250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'.
[  131.424167][T11261] tc_dump_action: action bad kind
[  131.473795][T11270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2322'.
[  131.510323][T11278] netlink: 'syz.1.2326': attribute type 2 has an invalid length.
[  131.931322][T11314] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  131.935047][T11314] openvswitch: netlink: Message has 1 unknown bytes.
[  132.036026][T11322] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  132.123229][T11326] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  132.196883][T11334] openvswitch: netlink: Multiple metadata blocks provided
[  132.269781][T11340] netlink: 'syz.2.2355': attribute type 12 has an invalid length.
[  132.375485][T11352] netlink: 'syz.0.2361': attribute type 21 has an invalid length.
[  132.715748][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  135.715806][T11395] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  135.895044][T11421] : entered promiscuous mode
[  136.163044][T11460] netlink: 'syz.2.2413': attribute type 28 has an invalid length.
[  136.278903][T11474] __nla_validate_parse: 8 callbacks suppressed
[  136.278916][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'.
[  137.089627][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'.
[  137.171813][T11493] netlink: 'syz.0.2425': attribute type 4 has an invalid length.
[  137.176965][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2425'.
[  137.288615][T11504] netlink: 'syz.0.2430': attribute type 11 has an invalid length.
[  137.428937][T11522] netlink: 'syz.2.2439': attribute type 1 has an invalid length.
[  137.491795][T11526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.501660][T11526] tipc: Failed to remove unknown binding: 66,1,1/0:3479746899/3479746901
[  137.509860][T11526] tipc: Failed to remove unknown binding: 66,1,1/0:3479746899/3479746901
[  137.513425][T11526] tipc: Failed to remove unknown binding: 66,1,1/0:3479746899/3479746901
[  137.519236][T11526] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2441'.
[  137.546738][T11533] netlink: 'syz.0.2444': attribute type 1 has an invalid length.
[  137.560208][T11533] netlink: 'syz.0.2444': attribute type 2 has an invalid length.
[  137.574406][T11533] netlink: 'syz.0.2444': attribute type 1 has an invalid length.
[  137.581271][T11533] netlink: 'syz.0.2444': attribute type 2 has an invalid length.
[  137.730350][T11557] openvswitch: netlink: Key type 251 is out of range max 32
[  137.747956][T11557] lo speed is unknown, defaulting to 1000
[  137.754427][ T5233] Bluetooth: hci0: command tx timeout
[  137.864522][T11564] lo speed is unknown, defaulting to 1000
[  138.019695][T11577] netlink: 'syz.0.2463': attribute type 10 has an invalid length.
[  138.022310][T11577] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  138.145405][T11592] netlink: 'syz.0.2470': attribute type 21 has an invalid length.
[  138.148011][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2470'.
[  138.296124][T11598] sctp: [Deprecated]: syz.0.2473 (pid 11598) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.296124][T11598] Use struct sctp_sack_info instead
[  138.368002][T11604] nbd: must specify an index to disconnect
[  138.515321][T11609] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2478'.
[  138.989843][T11637] netlink: 'syz.0.2489': attribute type 21 has an invalid length.
[  138.992769][T11637] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2489'.
[  138.999926][T11637] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2489'.
[  139.216170][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2500'.
[  139.364450][T11679] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2509'.
[  139.890459][T11722] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  139.937274][T11722] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  139.996745][T11722] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  140.048042][T11722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  140.100777][T11624] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  140.109247][T11624] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  140.118417][ T5895] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  140.128650][ T5895] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  140.309568][T11735] dummy0: entered promiscuous mode
[  140.316258][T11735] bridge0: port 1(macvlan4) entered blocking state
[  140.319128][T11735] bridge0: port 1(macvlan4) entered disabled state
[  140.326466][T11735] macvlan4: entered allmulticast mode
[  140.329984][T11735] dummy0: entered allmulticast mode
[  140.333074][T11735] macvlan4: entered promiscuous mode
[  140.336726][T11735] bridge0: port 1(macvlan4) entered blocking state
[  140.339406][T11735] bridge0: port 1(macvlan4) entered forwarding state
[  140.948199][T11813] pim6reg: entered allmulticast mode
[  140.959269][T11813] pim6reg: left allmulticast mode
[  141.127012][T11828] netlink: 'syz.1.2579': attribute type 11 has an invalid length.
[  141.489051][T11861] __nla_validate_parse: 5 callbacks suppressed
[  141.489066][T11861] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2595'.
[  141.502664][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2595'.
[  141.605607][T11869] "syz.0.2599" (11869) uses obsolete ecb(arc4) skcipher
[  141.653169][T11884] pim6reg1: entered promiscuous mode
[  141.656922][T11884] pim6reg1: entered allmulticast mode
[  141.690102][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'.
[  141.701651][T11890] bond0: entered promiscuous mode
[  141.706503][T11890] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  141.710283][T11890] bond0: left promiscuous mode
[  141.712214][T11890] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  141.878672][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'.
[  141.884279][T11916] gtp1: entered promiscuous mode
[  141.886300][T11916] gtp1: entered allmulticast mode
[  141.895993][T11920] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2622'.
[  142.162626][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'.
[  142.287946][T11978] validate_nla: 4 callbacks suppressed
[  142.287957][T11978] netlink: 'syz.1.2649': attribute type 1 has an invalid length.
[  142.316924][T11980] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  142.471786][ T5908] lo speed is unknown, defaulting to 1000
[  142.476257][ T5908] syz2: Port: 1 Link DOWN
[  142.478226][ T5895] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.482159][ T5895] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.491938][ T5895] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.496323][ T5895] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.600734][T12016] xt_l2tp: unknown flags: 51
[  142.650614][T12022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2669'.
[  142.891559][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'.
[  142.991975][T12060] netlink: 'syz.2.2682': attribute type 4 has an invalid length.
[  143.102582][T12063] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.2683'.
[  143.106476][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'.
[  143.632713][T12140] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  143.699341][T12151] netlink: 'syz.1.2726': attribute type 6 has an invalid length.
[  143.700418][T12152] raw_sendmsg: syz.2.2725 forgot to set AF_INET. Fix it!
[  143.702554][T12151] netlink: 'syz.1.2726': attribute type 6 has an invalid length.
[  144.450961][T12172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.501468][T12176] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  144.606849][T12187] bridge0: port 1(erspan0) entered blocking state
[  144.609468][T12187] bridge0: port 1(erspan0) entered disabled state
[  144.611732][T12187] erspan0: entered allmulticast mode
[  144.616442][T12187] erspan0: entered promiscuous mode
[  144.674540][T12198] erspan0: left allmulticast mode
[  144.681006][T12198] erspan0: left promiscuous mode
[  144.688722][T12198] bridge0: port 1(erspan0) entered disabled state
[  144.784575][T12213] netlink: 'syz.0.2752': attribute type 1 has an invalid length.
[  145.052911][T12244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.055394][T12244] IPv6: NLM_F_CREATE should be set when creating new route
[  145.057962][T12244] IPv6: NLM_F_CREATE should be set when creating new route
[  145.060748][T12244] IPv6: NLM_F_CREATE should be set when creating new route
[  145.065383][T12244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.627332][T12281] netlink: 'syz.1.2785': attribute type 13 has an invalid length.
[  146.337485][T12343] ksmbd: Unknown IPC event: 3, ignore.
[  146.526181][T12358] __nla_validate_parse: 19 callbacks suppressed
[  146.526196][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'.
[  146.608144][T12369] netlink: 'syz.1.2826': attribute type 1 has an invalid length.
[  146.667243][T12377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.901680][T12410] netlink: 'syz.2.2846': attribute type 11 has an invalid length.
[  147.009507][T12422] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2852'.
[  147.710296][T12479] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2877'.
[  148.038238][T12504] netlink: 'syz.2.2887': attribute type 4 has an invalid length.
[  148.081736][T12514] netlink: 'syz.1.2893': attribute type 1 has an invalid length.
[  148.087324][T12514] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2893'.
[  148.137839][T12521] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  148.376064][T12549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2908'.
[  148.444051][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'.
[  148.491083][T12559] bridge0: port 1(wlan0) entered blocking state
[  148.494025][T12559] bridge0: port 1(wlan0) entered disabled state
[  148.496999][T12559] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  148.500817][T12559] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  148.530740][T12562] netlink: 'syz.0.2914': attribute type 1 has an invalid length.
[  148.564852][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'.
[  148.567814][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2916'.
[  148.570993][T12566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2916'.
[  148.584698][T12566] netlink: 540 bytes leftover after parsing attributes in process `syz.0.2916'.
[  149.171866][T12579] unknown channel width for channel at 909000KHz?
[  149.634541][T12594] netlink: 'syz.2.2929': attribute type 1 has an invalid length.
[  149.655343][T12595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.662537][T12595] syzkaller0: entered promiscuous mode
[  149.667199][T12595] syzkaller0: entered allmulticast mode
[  149.676657][T12594] bond8: (slave vti0): The slave device specified does not support setting the MAC address
[  149.680221][T12594] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  149.685628][T12594] bond8: (slave vti0): making interface the new active one
[  149.688601][T12594] bond8: (slave vti0): Enslaving as an active interface with an up link
[  149.748560][T12595] tipc: Resetting bearer <eth:syzkaller0>
[  149.762689][T12593] tipc: Resetting bearer <eth:syzkaller0>
[  149.769107][T12593] tipc: Disabling bearer <eth:syzkaller0>
[  150.248987][T12631] netlink: 'syz.1.2943': attribute type 1 has an invalid length.
[  150.251933][T12631] netlink: 'syz.1.2943': attribute type 2 has an invalid length.
[  150.593122][T12684] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  150.610802][T12684] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  150.679297][T12698] netlink: 'syz.0.2976': attribute type 4 has an invalid length.
[  150.714000][T12700] netlink: 'syz.0.2977': attribute type 1 has an invalid length.
[  151.245653][T12778] veth0_to_bond: entered allmulticast mode
[  151.625637][T12829] __nla_validate_parse: 5 callbacks suppressed
[  151.625655][T12829] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3037'.
[  151.778942][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'.
[  152.072988][T12877] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3060'.
[  152.327199][T12902] lo speed is unknown, defaulting to 1000
[  152.377199][T12902] ieee802154 phy1 wpan1: encryption failed: -22
[  152.420622][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'.
[  152.441206][T12909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.482656][T12909] syzkaller0: entered promiscuous mode
[  152.485018][T12909] syzkaller0: entered allmulticast mode
[  152.487998][T12909] tipc: Resetting bearer <eth:syzkaller0>
[  152.524981][T12907] tipc: Resetting bearer <eth:syzkaller0>
[  152.575936][T12907] tipc: Disabling bearer <eth:syzkaller0>
[  152.708935][T12925] openvswitch: netlink: Actions may not be safe on all matching packets
[  152.730370][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  152.734558][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  152.738905][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  152.742441][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  152.749557][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  152.753045][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  153.099220][T12952] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.300726][T12980] delete_channel: no stack
[  153.371452][T12989] netlink: 'syz.0.3106': attribute type 3 has an invalid length.
[  153.703292][T13012] netlink: 'syz.2.3116': attribute type 1 has an invalid length.
[  153.947353][T13031] netlink: 'syz.0.3126': attribute type 10 has an invalid length.
[  154.078185][T13040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.082151][T13040] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  154.085725][T13040] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  154.097624][T13040] tipc: Resetting bearer <eth:syzkaller0>
[  154.217420][T13051] netlink: 'syz.2.3136': attribute type 5 has an invalid length.
[  154.607221][T13102] netlink: 'syz.0.3159': attribute type 1 has an invalid length.
[  154.626537][T13102] bond3: entered promiscuous mode
[  154.630987][T13102] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.661012][T13102] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.666560][T13102] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  154.670757][T13102] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  154.684781][T13102] bond3: (slave wireguard0): making interface the new active one
[  154.687724][T13102] wireguard0: entered promiscuous mode
[  154.690821][T13102] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  154.697017][T13110] netlink: 'syz.1.3162': attribute type 7 has an invalid length.
[  154.700163][T13110] netlink: 'syz.1.3162': attribute type 8 has an invalid length.
[  154.703127][T13110] netlink: 'syz.1.3162': attribute type 4 has an invalid length.
[  154.704169][T13102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.708425][T13102] IPv6: NLM_F_CREATE should be set when creating new route
[  154.711363][T13102] IPv6: NLM_F_CREATE should be set when creating new route
[  154.714376][T13102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.730411][T13102] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[  154.736990][T13102] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[  154.810045][T13117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.934150][T13129] veth0: entered promiscuous mode
[  154.937007][T13128] veth0: left promiscuous mode
[  154.965664][T13131] netlink: 'syz.0.3172': attribute type 8 has an invalid length.
[  155.073759][   T95] tipc: Node number set to 2932375756
[  155.227669][T13153] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  155.770533][T13227] netlink: 'syz.2.3219': attribute type 1 has an invalid length.
[  155.803075][T13231] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  155.808995][T13231] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  156.671170][T13282] Bluetooth: MGMT ver 1.23
[  156.875043][T13300] __nla_validate_parse: 18 callbacks suppressed
[  156.875065][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3254'.
[  157.436510][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'.
[  158.312971][T13415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3302'.
[  158.796055][T13432] batadv_slave_1: entered promiscuous mode
[  158.805446][T13431] batadv_slave_1: left promiscuous mode
[  158.830060][T13435] openvswitch: netlink: Missing valid actions attribute.
[  158.832413][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.847021][T13438] nft_compat: unsupported protocol 0
[  158.852380][T13440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3314'.
[  158.895660][T13446] netlink: 488 bytes leftover after parsing attributes in process `syz.0.3317'.
[  159.256449][T13463] syzkaller1: entered promiscuous mode
[  159.258762][T13463] syzkaller1: entered allmulticast mode
[  159.490330][T13480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3330'.
[  159.525652][T13483] validate_nla: 4 callbacks suppressed
[  159.525671][T13483] netlink: 'syz.0.3332': attribute type 1 has an invalid length.
[  159.530529][T13483] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3332'.
[  159.534955][T13483] netlink: 97 bytes leftover after parsing attributes in process `syz.0.3332'.
[  159.658159][T13497] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3339'.
[  159.735210][T13505] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3343'.
[  159.752850][T13507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.774303][T13509] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  160.209881][T13555] netlink: 'syz.2.3365': attribute type 10 has an invalid length.
[  160.214251][T13555] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  160.362780][T13573] lo speed is unknown, defaulting to 1000
[  161.073311][T13592] tipc: New replicast peer: 0.0.0.0
[  161.076942][T13592] tipc: Enabled bearer <udp:syz2>, priority 6
[  161.080621][T13592] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  161.262817][T13599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.266225][T13599] syzkaller0: entered promiscuous mode
[  161.268212][T13599] syzkaller0: entered allmulticast mode
[  161.280329][T13599] tipc: Resetting bearer <eth:syzkaller0>
[  161.284720][T13598] tipc: Resetting bearer <eth:syzkaller0>
[  161.289411][T13598] tipc: Disabling bearer <eth:syzkaller0>
[  161.752553][T13650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.950547][T13659] C: renamed from lo
[  161.954154][T13659] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  162.009585][T13663] __nla_validate_parse: 7 callbacks suppressed
[  162.009605][T13663] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3415'.
[  162.021635][T13663] vlan3: entered allmulticast mode
[  162.024336][T13663] gretap0: entered allmulticast mode
[  162.089775][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3416'.
[  162.151947][T13674] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  162.178768][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'.
[  162.238889][T13680] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  162.360045][T13693] syzkaller1: entered promiscuous mode
[  162.362408][T13693] syzkaller1: entered allmulticast mode
[  163.031381][T13732] netlink: 'syz.2.3442': attribute type 1 has an invalid length.
[  163.044619][T13732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3442'.
[  163.116131][T13730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3443'.
[  163.178593][T13743] netlink: 728 bytes leftover after parsing attributes in process `syz.2.3447'.
[  163.381790][T13753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.539244][T13770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3457'.
[  163.642437][T13776] syzkaller1: entered promiscuous mode
[  163.644815][T13776] syzkaller1: entered allmulticast mode
[  163.714822][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3457'.
[  163.899081][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  163.906205][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'.
[  163.964264][T13801] netlink: 'syz.1.3472': attribute type 9 has an invalid length.
[  164.091783][T13817] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3479'.
[  164.130456][T13823] sit0: entered promiscuous mode
[  164.132386][T13823] netlink: 'syz.1.3482': attribute type 1 has an invalid length.
[  164.249221][T13841] C speed is unknown, defaulting to 1000
[  164.259527][T13843] syzkaller1: entered promiscuous mode
[  164.261789][T13843] syzkaller1: entered allmulticast mode
[  164.366134][T13841] netlink: 'syz.0.3492': attribute type 13 has an invalid length.
[  164.369923][T13841] netlink: 'syz.0.3492': attribute type 17 has an invalid length.
[  164.379227][T13841] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  165.150669][T13894] tipc: Can't bind to reserved service type 2
[  166.207324][T13950] 8021q: adding VLAN 0 to HW filter on device team0
[  166.210867][T13950] tipc: Resetting bearer <eth:team0>
[  166.215008][T13950] tipc: Resetting bearer <eth:team0>
[  166.226780][T13950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.613092][T14009] gretap0: entered promiscuous mode
[  167.109880][T14070] bridge: RTM_NEWNEIGH with invalid ether address
[  167.133050][T14072] __nla_validate_parse: 12 callbacks suppressed
[  167.133072][T14072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3596'.
[  167.212548][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'.
[  167.216256][T14077] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  167.218790][T14077] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  167.221698][T14077] bridge0: port 1(wlan0) entered disabled state
[  167.561334][T14125] syzkaller1: entered promiscuous mode
[  167.564909][T14125] syzkaller1: entered allmulticast mode
[  167.608272][T14130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3623'.
[  167.890995][T14149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3632'.
[  167.897991][T14149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3632'.
[  167.901669][T14149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3632'.
[  167.906184][T14149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3632'.
[  168.139850][T14164] bond0: (slave wlan1): Releasing backup interface
[  168.555458][ T5878] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  168.559705][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  168.559731][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.559740][ T5878] Call Trace:
[  168.559746][ T5878]  <TASK>
[  168.559753][ T5878]  dump_stack_lvl+0x189/0x250
[  168.559777][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.559792][ T5878]  ? __pfx__printk+0x10/0x10
[  168.559813][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.559830][ T5878]  dump_header+0xd3/0x480
[  168.559850][ T5878]  oom_kill_process+0x387/0x920
[  168.559866][ T5878]  out_of_memory+0xf09/0x12a0
[  168.559880][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.559893][ T5878]  ? __pfx_out_of_memory+0x10/0x10
[  168.559904][ T5878]  ? percpu_ref_put+0x19/0x180
[  168.559923][ T5878]  ? lock_release+0x4b/0x3e0
[  168.559944][ T5878]  mem_cgroup_out_of_memory+0x145/0x240
[  168.559959][ T5878]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  168.559974][ T5878]  ? _raw_spin_unlock+0x28/0x50
[  168.559990][ T5878]  ? memcg1_oom_prepare+0x37f/0x450
[  168.560005][ T5878]  try_charge_memcg+0xdff/0x1290
[  168.560020][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560036][ T5878]  ? __pfx_try_charge_memcg+0x10/0x10
[  168.560052][ T5878]  ? rcu_needs_cpu+0xa1/0xb0
[  168.560062][ T5878]  ? xa_load+0x60/0x210
[  168.560073][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560086][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560096][ T5878]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  168.560108][ T5878]  charge_memcg+0x9f/0x180
[  168.560118][ T5878]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  168.560127][ T5878]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  168.560137][ T5878]  __read_swap_cache_async+0x28c/0x510
[  168.560149][ T5878]  swap_cluster_readahead+0x4cf/0x5f0
[  168.560158][ T5878]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  168.560167][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560173][ T5878]  ? filemap_get_entry+0xad/0x2f0
[  168.560181][ T5878]  ? get_vma_policy+0x27c/0x3c0
[  168.560193][ T5878]  swapin_readahead+0x17d/0xb50
[  168.560200][ T5878]  ? __pfx_filemap_get_entry+0x10/0x10
[  168.560208][ T5878]  ? get_swap_device_info+0x1c/0x2b0
[  168.560215][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560222][ T5878]  ? __pfx_swapin_readahead+0x10/0x10
[  168.560233][ T5878]  ? __filemap_get_folio+0x9a6/0xaf0
[  168.560247][ T5878]  ? swap_cache_get_folio+0xae/0x3b0
[  168.560260][ T5878]  do_swap_page+0x525/0x5ac0
[  168.560278][ T5878]  ? ___pte_offset_map+0x29/0x250
[  168.560294][ T5878]  ? lock_acquire+0x5f/0x360
[  168.560310][ T5878]  ? do_swap_page+0x184/0x5ac0
[  168.560325][ T5878]  ? __pfx_do_swap_page+0x10/0x10
[  168.560338][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560345][ T5878]  ? __pfx_default_wake_function+0x10/0x10
[  168.560357][ T5878]  ? ___pte_offset_map+0x45/0x250
[  168.560365][ T5878]  ? ___pte_offset_map+0x1cf/0x250
[  168.560374][ T5878]  ? pte_offset_map_rw_nolock+0xea/0x160
[  168.560384][ T5878]  __handle_mm_fault+0xe55/0x5440
[  168.560400][ T5878]  ? __pfx___handle_mm_fault+0x10/0x10
[  168.560415][ T5878]  ? lock_release+0x4b/0x3e0
[  168.560435][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560446][ T5878]  ? lock_vma_under_rcu+0xdf/0x3d0
[  168.560464][ T5878]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  168.560514][ T5878]  handle_mm_fault+0x40a/0x8e0
[  168.560535][ T5878]  do_user_addr_fault+0xa81/0x1390
[  168.560557][ T5878]  ? rcu_is_watching+0x15/0xb0
[  168.560569][ T5878]  ? trace_page_fault_user+0x84/0x1e0
[  168.560588][ T5878]  exc_page_fault+0x76/0xf0
[  168.560607][ T5878]  asm_exc_page_fault+0x26/0x30
[  168.560622][ T5878] RIP: 0033:0x7fa7f07b6980
[  168.560636][ T5878] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00
[  168.560649][ T5878] RSP: 002b:00007ffdeeb2bac8 EFLAGS: 00010202
[  168.560663][ T5878] RAX: 0000000000000000 RBX: 0000000000000a1f RCX: 0000000000000000
[  168.560671][ T5878] RDX: 0000000040000001 RSI: 00007ffdeeb2bb3c RDI: 00000000ffffffff
[  168.560679][ T5878] RBP: 00007ffdeeb2bb3c R08: 0000000000000000 R09: 0000000000000000
[  168.560687][ T5878] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  168.560695][ T5878] R13: 00000000000927c0 R14: 0000000000028ea4 R15: 00007ffdeeb2bb90
[  168.560716][ T5878]  </TASK>
[  168.560848][ T5878] memory: usage 307200kB, limit 307200kB, failcnt 394
[  168.724540][ T5878] memory+swap: usage 288088kB, limit 9007199254740988kB, failcnt 0
[  168.729215][ T5878] kmem: usage 286848kB, limit 9007199254740988kB, failcnt 0
[  168.732194][ T5878] Memory cgroup stats for /syz1:
[  168.732297][ T5878] cache 0
[  168.736233][ T5878] rss 0
[  168.737397][ T5878] rss_huge 0
[  168.738766][ T5878] shmem 0
[  168.739982][ T5878] mapped_file 0
[  168.741387][ T5878] dirty 0
[  168.742553][ T5878] writeback 0
[  168.744681][ T5878] workingset_refault_anon 10
[  168.746572][ T5878] workingset_refault_file 0
[  168.748400][ T5878] swap 131072
[  168.749790][ T5878] swapcached 28672
[  168.751302][ T5878] pgpgin 104673
[  168.752731][ T5878] pgpgout 104666
[  168.754901][ T5878] pgfault 210930
[  168.756376][ T5878] pgmajfault 15
[  168.757828][ T5878] inactive_anon 0
[  168.759328][ T5878] active_anon 28672
[  168.760913][ T5878] inactive_file 0
[  168.762386][ T5878] active_file 0
[  168.764596][ T5878] unevictable 0
[  168.765990][ T5878] hierarchical_memory_limit 314572800
[  168.768130][ T5878] hierarchical_memsw_limit 9223372036854771712
[  168.770565][ T5878] total_cache 0
[  168.772055][ T5878] total_rss 0
[  168.774177][ T5878] total_rss_huge 0
[  168.775712][ T5878] total_shmem 0
[  168.777072][ T5878] total_mapped_file 0
[  168.778658][ T5878] total_dirty 0
[  168.780011][ T5878] total_writeback 0
[  168.781508][ T5878] total_workingset_refault_anon 10
[  168.784151][ T5878] total_workingset_refault_file 0
[  168.786224][ T5878] total_swap 131072
[  168.788152][ T5878] total_swapcached 28672
[  168.789929][ T5878] total_pgpgin 104673
[  168.791580][ T5878] total_pgpgout 104666
[  168.793204][ T5878] total_pgfault 210930
[  168.795659][ T5878] total_pgmajfault 15
[  168.797331][ T5878] total_inactive_anon 0
[  168.799046][ T5878] total_active_anon 28672
[  168.800820][ T5878] total_inactive_file 0
[  168.802529][ T5878] total_active_file 0
[  168.804869][ T5878] total_unevictable 0
[  168.806538][ T5878] anon_cost 0
[  168.807901][ T5878] file_cost 0
[  168.809273][ T5878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3630,pid=14143,uid=0
[  168.815768][ T5878] Memory cgroup out of memory: Killed process 14143 (syz.1.3630) total-vm:101756kB, anon-rss:1076kB, file-rss:21796kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  169.187952][T14185] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3645'.
[  169.191651][T14185] netem: invalid attributes len -16
[  169.196980][T14185] netem: change failed
[  169.422935][T14218] C speed is unknown, defaulting to 1000
[  169.599470][T14236] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3666'.
[  169.605945][T14236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3666'.
[  169.636707][T14240] netlink: 'syz.2.3667': attribute type 1 has an invalid length.
[  169.679652][T14242] syz_tun: entered allmulticast mode
[  169.700976][T14242] dvmrp8: entered allmulticast mode
[  169.759702][T14242] C speed is unknown, defaulting to 1000
[  169.787838][T14250] netlink: 'syz.1.3668': attribute type 23 has an invalid length.
[  169.821527][T14241] syz_tun: left allmulticast mode
[  169.824361][T14241] dvmrp8: left allmulticast mode
[  169.964849][T14265] netlink: 'syz.1.3678': attribute type 2 has an invalid length.
[  170.005806][T14271] syzkaller1: entered promiscuous mode
[  170.009051][T14271] syzkaller1: entered allmulticast mode
[  170.044558][T14274] syzkaller1: entered promiscuous mode
[  170.046802][T14274] syzkaller1: entered allmulticast mode
[  170.368451][T14287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.394876][T14287] syzkaller0: entered promiscuous mode
[  170.396795][T14287] syzkaller0: entered allmulticast mode
[  170.425984][T14287] tipc: Resetting bearer <eth:syzkaller0>
[  170.446232][T14286] tipc: Resetting bearer <eth:syzkaller0>
[  170.460860][T14286] tipc: Disabling bearer <eth:syzkaller0>
[  170.556290][T14297] netlink: 'syz.1.3692': attribute type 1 has an invalid length.
[  170.857959][T14321] tipc: Resetting bearer <eth:team0>
[  170.867840][T14321] team0: Port device vlan0 removed
[  170.886919][T14321] bond2: (slave gretap1): Releasing active interface
[  170.900217][T14321] bond3: (slave wireguard0): Releasing backup interface
[  170.903049][T14321] wireguard0: left promiscuous mode
[  170.905860][T14321] bond3: (slave wireguard1): making interface the new active one
[  170.908986][T14321] wireguard1: entered promiscuous mode
[  170.926679][T14321] bond3: (slave wireguard1): Releasing backup interface
[  170.929194][T14321] wireguard1: left promiscuous mode
[  171.039800][T14346] C speed is unknown, defaulting to 1000
[  171.085723][T14348] netlink: 'syz.2.3718': attribute type 10 has an invalid length.
[  171.211644][T14346] netlink: 'syz.1.3717': attribute type 13 has an invalid length.
[  171.214983][T14346] netlink: 'syz.1.3717': attribute type 17 has an invalid length.
[  171.222121][T14346] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  171.488324][T14395] netlink: get zone limit has 8 unknown bytes
[  171.505616][T14392] geneve4: entered promiscuous mode
[  171.513053][ T5740] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  171.519737][ T5740] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  171.526122][ T5740] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  171.532365][ T5740] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  171.654411][T14414] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  171.798570][T14432] netlink: 'syz.0.3754': attribute type 8 has an invalid length.
[  171.942665][T14466] netlink: 'syz.2.3767': attribute type 13 has an invalid length.
[  172.505399][T14539] nbd: nbd1 already in use
[  172.661649][T14549] __nla_validate_parse: 15 callbacks suppressed
[  172.661664][T14549] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3805'.
[  172.717571][T14551] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3806'.
[  172.731266][T14551] ieee802154 phy1 wpan1: encryption failed: -22
[  172.776341][T14558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.325342][T14584] ieee802154 phy1 wpan1: encryption failed: -22
[  173.381975][T14588] C speed is unknown, defaulting to 1000
[  173.610004][T14594] gretap0: left promiscuous mode
[  173.615054][T14594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.664723][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3824'.
[  173.899540][T14621] syzkaller1: entered allmulticast mode
[  174.077474][T14649] gtp0: entered promiscuous mode
[  174.079213][T14649] gtp0: entered allmulticast mode
[  174.104760][T14651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.009704][T14684] openvswitch: netlink: IP tunnel dst address not specified
[  175.351046][T14736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3890'.
[  175.474321][T14743] C speed is unknown, defaulting to 1000
[  176.517260][T14769] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  176.865934][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3919'.
[  176.903101][T14807] vlan2: entered promiscuous mode
[  176.905283][T14807] vlan2: entered allmulticast mode
[  176.907093][T14807] hsr_slave_1: entered allmulticast mode
[  176.938348][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3920'.
[  177.436781][T14845] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  177.440205][T14845] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  177.466619][T14845] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  177.470820][T14845] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  177.527247][T14845] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  177.531354][T14845] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  177.587181][T14845] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  177.590573][T14845] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  177.706604][ T5895] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.709295][ T5895] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  177.715457][ T5895] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.718334][ T5895] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  177.725271][ T5895] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.727859][ T5895] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  177.733910][ T5895] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.736457][ T5895] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  177.895568][T14891] netlink: 'syz.1.3960': attribute type 1 has an invalid length.
[  177.898736][T14891] netlink: 'syz.1.3960': attribute type 1 has an invalid length.
[  177.906026][T14890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3958'.
[  177.913767][T14892] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  177.929208][T14896] netlink: 'syz.1.3962': attribute type 10 has an invalid length.
[  177.931786][T14896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3962'.
[  177.937055][T14896] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  178.106468][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3972'.
[  178.252045][T14924] netlink: 212280 bytes leftover after parsing attributes in process `syz.0.3975'.
[  178.334122][T14934] netlink: 'syz.1.3980': attribute type 1 has an invalid length.
[  178.411874][T14946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.415132][T14946] syzkaller0: entered promiscuous mode
[  178.417132][T14946] syzkaller0: entered allmulticast mode
[  178.425808][T14946] tipc: Resetting bearer <eth:syzkaller0>
[  178.429183][T14945] tipc: Resetting bearer <eth:syzkaller0>
[  178.433108][T14945] tipc: Disabling bearer <eth:syzkaller0>
[  178.519212][T14962] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  178.612037][T14978] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4002'.
[  178.618531][T14978] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4002'.
[  178.706844][T14990] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4008'.
[  178.759446][T14995] netlink: 'syz.0.4010': attribute type 13 has an invalid length.
[  178.792451][T14999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4012'.
[  179.074969][T15045] tunl0: entered promiscuous mode
[  179.081277][T15045] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  179.126893][T15054] netlink: 'syz.1.4035': attribute type 10 has an invalid length.
[  179.134412][T15054] 8021q: adding VLAN 0 to HW filter on device team0
[  179.137333][T15054] team0: entered promiscuous mode
[  179.139030][T15054] team0: entered allmulticast mode
[  179.149345][T15054] bond0: (slave team0): Enslaving as an active interface with an up link
[  179.240919][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'.
[  179.331137][T15076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.340657][T15076] syzkaller0: entered promiscuous mode
[  179.342570][T15076] syzkaller0: entered allmulticast mode
[  179.350801][T15076] tipc: Resetting bearer <eth:syzkaller0>
[  179.354896][T15075] tipc: Resetting bearer <eth:syzkaller0>
[  179.358130][T15075] tipc: Disabling bearer <eth:syzkaller0>
[  179.861939][T15103] netlink: 516 bytes leftover after parsing attributes in process `syz.2.4058'.
[  180.046807][T15115] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  181.640837][T15225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.678910][T15231] netlink: 'syz.2.4117': attribute type 5 has an invalid length.
[  182.489224][T15292] netlink: 'syz.1.4142': attribute type 1 has an invalid length.
[  182.492265][T15292] netlink: 'syz.1.4142': attribute type 1 has an invalid length.
[  182.564144][T15296] netlink: 'syz.1.4144': attribute type 4 has an invalid length.
[  182.756450][T15314] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  182.759951][T15314] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  182.980323][T15355] __nla_validate_parse: 6 callbacks suppressed
[  182.980335][T15355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4168'.
[  182.999042][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4170'.
[  183.002578][T15357] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  183.012507][T15357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.152956][T15381] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4181'.
[  183.224643][T15389] validate_nla: 1 callbacks suppressed
[  183.224656][T15389] netlink: 'syz.2.4184': attribute type 1 has an invalid length.
[  183.320811][T15400] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  184.046730][T15471] IPVS: Scheduler module ip_vs_sip not found
[  184.308938][T15487] batadv_slave_1: entered promiscuous mode
[  184.314919][T15487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4227'.
[  184.318637][T15486] batadv_slave_1: left promiscuous mode
[  184.364317][T15493] netlink: 'syz.2.4230': attribute type 11 has an invalid length.
[  184.367485][T15493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4230'.
[  184.434775][T15498] lo speed is unknown, defaulting to 1000
[  184.436829][T15498] lo speed is unknown, defaulting to 1000
[  184.439530][T15498] lo speed is unknown, defaulting to 1000
[  184.445725][T15498] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  184.457535][T15498] lo speed is unknown, defaulting to 1000
[  184.462639][T15498] lo speed is unknown, defaulting to 1000
[  184.466578][T15498] lo speed is unknown, defaulting to 1000
[  184.641633][T15509] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4236'.
[  184.747207][T15517] tipc: Resetting bearer <eth:syzkaller0>
[  184.771652][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'.
[  184.798276][T15519] gretap0: entered promiscuous mode
[  185.231693][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'.
[  185.240978][T15556] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  185.522411][T15573] C speed is unknown, defaulting to 1000
[  185.549915][T15573] lo speed is unknown, defaulting to 1000
[  185.554778][T15576] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4262'.
[  185.558599][T15576] netlink: 'syz.0.4262': attribute type 1 has an invalid length.
[  185.717160][T15590] netlink: 'syz.0.4267': attribute type 83 has an invalid length.
[  185.727932][T15592] netlink: 'syz.1.4268': attribute type 1 has an invalid length.
[  185.731167][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4268'.
[  185.874396][T15605] netlink: 'syz.0.4274': attribute type 1 has an invalid length.
[  185.907672][T15608] netlink: 'syz.0.4277': attribute type 9 has an invalid length.
[  186.034764][T15625] netlink: 'syz.1.4284': attribute type 5 has an invalid length.
[  186.037351][T15625] netlink: 'syz.1.4284': attribute type 5 has an invalid length.
[  186.069752][T15629] netlink: 'syz.1.4286': attribute type 20 has an invalid length.
[  186.135548][   T57] block nbd2: Receive control failed (result -32)
[  186.678477][T15698] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  188.092898][T15794] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.178970][T15804] __nla_validate_parse: 9 callbacks suppressed
[  188.178984][T15804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4363'.
[  188.264229][T15808] C speed is unknown, defaulting to 1000
[  188.267548][T15808] lo speed is unknown, defaulting to 1000
[  188.296900][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4366'.
[  188.389630][T15823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'.
[  188.393948][T15823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4372'.
[  188.397771][T15823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'.
[  188.401572][T15823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'.
[  188.553092][T15844] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4382'.
[  188.559933][T15844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4382'.
[  188.565107][T15844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4382'.
[  188.705042][T15855] netlink: 2748 bytes leftover after parsing attributes in process `syz.0.4387'.
[  188.989986][T15886] validate_nla: 5 callbacks suppressed
[  188.990007][T15886] netlink: 'syz.1.4400': attribute type 1 has an invalid length.
[  189.067971][T15894] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  189.149664][ T5907] lo speed is unknown, defaulting to 1000
[  189.277998][T15927] netlink: 'syz.2.4420': attribute type 21 has an invalid length.
[  189.456360][T15959] netlink: 'syz.2.4435': attribute type 3 has an invalid length.
[  189.458877][T15959] netlink: 'syz.2.4435': attribute type 2 has an invalid length.
[  189.461372][T15959] netlink: 'syz.2.4435': attribute type 2 has an invalid length.
[  189.670524][T15987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.101182][T16050] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  190.104004][T16050] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  190.270825][T16074] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  190.375332][T16084] netlink: 'syz.1.4493': attribute type 7 has an invalid length.
[  190.378603][T16084] netlink: 'syz.1.4493': attribute type 8 has an invalid length.
[  190.402004][T16087] IPv6: NLM_F_CREATE should be specified when creating new route
[  191.614025][T16170] team0: Mode changed to "activebackup"
[  191.617416][T16170] vlan0: entered promiscuous mode
[  191.620931][T16170] tipc: Enabled bearer <eth:team0>, priority 0
[  191.703027][T16180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.939341][T16211] x9: renamed from bridge_slave_0
[  192.633555][ T5907] tipc: Node number set to 2497348143
[  192.769364][T16235] nbd: couldn't find a device at index 65546
[  192.881507][T16245] netlink: 'syz.2.4565': attribute type 3 has an invalid length.
[  193.035107][T16273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.351695][T16320] tap0: tun_chr_ioctl cmd 1074025677
[  193.354036][T16320] tap0: linktype set to 823
[  193.690443][T16341] batadv_slave_0: entered promiscuous mode
[  193.692416][T16341] batadv_slave_0: entered allmulticast mode
[  193.726848][T16345] netlink: 'syz.1.4614': attribute type 2 has an invalid length.
[  193.730011][T16345] __nla_validate_parse: 31 callbacks suppressed
[  193.730024][T16345] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4614'.
[  193.798280][T16353] netlink: 'syz.2.4618': attribute type 10 has an invalid length.
[  193.805636][T16350] C speed is unknown, defaulting to 1000
[  193.807855][T16350] lo speed is unknown, defaulting to 1000
[  194.045705][T16385] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.050096][T16385] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  194.055352][T16385] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  194.100612][T16389] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  194.378484][T16411] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4645'.
[  194.501595][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4646'.
[  194.561300][T16417] syzkaller1: entered promiscuous mode
[  194.563859][T16417] syzkaller1: entered allmulticast mode
[  194.760970][T16432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4655'.
[  194.941065][T16453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4665'.
[  195.357807][T16505] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  195.361623][T16505] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  195.609517][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4698'.
[  195.704595][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4701'.
[  195.856560][T16546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4709'.
[  196.088486][T16574] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4722'.
[  196.147432][T16584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4727'.
[  196.422801][T16629] validate_nla: 1 callbacks suppressed
[  196.422816][T16629] netlink: 'syz.0.4747': attribute type 12 has an invalid length.
[  196.432914][T16631] netlink: 'syz.1.4748': attribute type 1 has an invalid length.
[  196.548513][T16646] netlink: 'syz.0.4755': attribute type 21 has an invalid length.
[  196.649897][T16664] netlink: 'syz.0.4761': attribute type 11 has an invalid length.
[  196.697736][T16672] netlink: 'syz.1.4765': attribute type 1 has an invalid length.
[  196.705193][T16672] netlink: 'syz.1.4765': attribute type 1 has an invalid length.
[  196.740822][T16676] bridge0: port 1(erspan0) entered blocking state
[  196.744431][T16676] bridge0: port 1(erspan0) entered disabled state
[  196.748925][T16676] erspan0: entered allmulticast mode
[  196.753882][T16676] erspan0: entered promiscuous mode
[  196.928247][T16690] netlink: 'syz.0.4774': attribute type 4 has an invalid length.
[  196.936561][T16690] netlink: 'syz.0.4774': attribute type 4 has an invalid length.
[  197.049228][T16704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.136808][T16716] netlink: 'syz.1.4786': attribute type 10 has an invalid length.
[  197.139954][T16716] tipc: Resetting bearer <eth:team0>
[  197.526174][T16751] rdma_rxe: rxe_newlink: failed to add vxcan1
[  198.718635][T16852] svc: failed to register nfsdv3 RPC service (errno 111).
[  198.722379][T16852] svc: failed to register nfsaclv3 RPC service (errno 111).
[  198.779496][T16871] __nla_validate_parse: 13 callbacks suppressed
[  198.779512][T16871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4855'.
[  198.912314][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'.
[  199.074738][T16892] netlink: 'syz.1.4864': attribute type 10 has an invalid length.
[  199.091985][T16892] bond0: (slave team0): Releasing backup interface
[  199.095870][T16892] team0: left promiscuous mode
[  199.097913][T16892] team0: left allmulticast mode
[  199.100110][T16892] tipc: Resetting bearer <eth:team0>
[  199.118553][T16892] team0: Cannot enslave team device to itself
[  199.300581][T16904] syz_tun: entered promiscuous mode
[  199.307470][T16904] syz_tun: entered allmulticast mode
[  199.310237][T16904] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  199.336796][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4871'.
[  199.345837][T16906] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4871'.
[  199.539067][T16920] netlink: 'syz.2.4877': attribute type 11 has an invalid length.
[  199.651407][T16930] 8021q: adding VLAN 0 to HW filter on device bond4
[  199.674436][T16930] 8021q: adding VLAN 0 to HW filter on device bond4
[  199.677233][T16930] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  199.686998][T16930] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  199.763610][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4883'.
[  199.798132][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.801408][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.803954][T16944] macvlan4: left allmulticast mode
[  199.805955][T16944] dummy0: left allmulticast mode
[  199.807935][T16944] macvlan4: left promiscuous mode
[  199.809932][T16944] bridge0: port 1(macvlan4) entered disabled state
[  199.814524][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4888'.
[  200.007973][T16958] openvswitch: netlink: Message has 1 unknown bytes.
[  200.010647][T16958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.059806][T16964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.077006][T16966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4896'.
[  200.352203][T16987] syzkaller1: entered promiscuous mode
[  200.354610][T16987] syzkaller1: entered allmulticast mode
[  200.462018][T16993] pim6reg1: entered promiscuous mode
[  200.464473][T16993] pim6reg1: entered allmulticast mode
[  200.532483][T16995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4909'.
[  200.608895][T17001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4912'.
[  200.613051][T17001] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4912'.
[  200.908297][T17024] 8021q: adding VLAN 0 to HW filter on device bond6
[  200.916041][T17024] bond6: (slave ip6gretap3): making interface the new active one
[  200.919411][T17024] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link
[  200.928930][T17024] veth9: entered promiscuous mode
[  200.932098][T17024] bond6: (slave veth9): Enslaving as an active interface with a down link
[  200.943540][T17024] erspan0: entered allmulticast mode
[  200.948884][T17024] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  201.005549][T17029] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  201.014856][T17029] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  201.315304][T17079] sctp: [Deprecated]: syz.2.4941 (pid 17079) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.315304][T17079] Use struct sctp_sack_info instead
[  201.383514][T17063] tunl0: left promiscuous mode
[  201.390508][T17063] bridge0: port 1(erspan0) entered blocking state
[  201.393298][T17063] bridge0: port 1(erspan0) entered forwarding state
[  201.401491][T17063] sit0: left promiscuous mode
[  201.412918][   T12] bond0: (slave syz_tun): interface is now down
[  201.420259][T17063] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.424343][T17063] 8021q: adding VLAN 0 to HW filter on device team0
[  201.428162][T17063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.433599][   T13] bond0: (slave syz_tun): interface is now down
[  201.436262][ T5907] C speed is unknown, defaulting to 1000
[  201.438654][ T5907] syz2: Port: 1 Link ACTIVE
[  201.455688][   T13] bond0: (slave syz_tun): interface is now down
[  201.471558][T17090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.476200][T17090] syzkaller0: entered promiscuous mode
[  201.478900][T17090] syzkaller0: entered allmulticast mode
[  201.484721][   T12] bond0: (slave syz_tun): interface is now down
[  201.488704][   T12] bond0: now running without any active interface!
[  201.496701][T17090] tipc: Resetting bearer <eth:syzkaller0>
[  201.500383][T17089] tipc: Resetting bearer <eth:syzkaller0>
[  201.506099][T17089] tipc: Disabling bearer <eth:syzkaller0>
[  202.785242][T17172] sctp: [Deprecated]: syz.1.4976 (pid 17172) Use of int in max_burst socket option.
[  202.785242][T17172] Use struct sctp_assoc_value instead
[  203.007057][T17199] validate_nla: 6 callbacks suppressed
[  203.007076][T17199] netlink: 'syz.2.4989': attribute type 1 has an invalid length.
[  203.253684][T17227] x_tables: ip_tables: udp match: only valid for protocol 17
[  203.307584][T17230] geneve0: entered promiscuous mode
[  203.310521][T11624] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.324041][T11624] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.326662][T11624] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.329289][T11624] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.417775][T17245] C speed is unknown, defaulting to 1000
[  203.420854][T17245] lo speed is unknown, defaulting to 1000
[  203.508168][T17252] C speed is unknown, defaulting to 1000
[  203.511988][T17252] lo speed is unknown, defaulting to 1000
[  203.898140][T17304] C speed is unknown, defaulting to 1000
[  203.900920][T17304] lo speed is unknown, defaulting to 1000
[  204.257270][T17348] syzkaller1: entered promiscuous mode
[  204.259328][T17348] syzkaller1: entered allmulticast mode
[  204.313464][T17350] ==================================================================
[  204.316043][T17350] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  204.318767][T17350] Read of size 4 at addr ffff88803c1392c4 by task syz.1.5054/17350
[  204.322567][T17350] 
[  204.323996][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.1.5054 Not tainted syzkaller #0 PREEMPT(full) 
[  204.324020][T17350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.324030][T17350] Call Trace:
[  204.324038][T17350]  <TASK>
[  204.324046][T17350]  dump_stack_lvl+0x189/0x250
[  204.324072][T17350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.324082][T17350]  ? lock_release+0x4b/0x3e0
[  204.324098][T17350]  ? __virt_addr_valid+0x4a5/0x5c0
[  204.324112][T17350]  print_report+0xca/0x240
[  204.324123][T17350]  ? xfrm_alloc_spi+0x570/0xf30
[  204.324136][T17350]  kasan_report+0x118/0x150
[  204.324149][T17350]  ? lock_acquire+0x5f/0x360
[  204.324161][T17350]  ? xfrm_alloc_spi+0x570/0xf30
[  204.324174][T17350]  xfrm_alloc_spi+0x570/0xf30
[  204.324184][T17350]  ? xfrm_alloc_spi+0x2a0/0xf30
[  204.324197][T17350]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  204.324208][T17350]  ? xfrm_find_acq+0x87/0xa0
[  204.324220][T17350]  xfrm_alloc_userspi+0x70b/0xc90
[  204.324234][T17350]  ? apparmor_capable+0x137/0x1b0
[  204.324245][T17350]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  204.324255][T17350]  ? __nla_parse+0x40/0x60
[  204.324268][T17350]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.324278][T17350]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.324295][T17350]  ? __pfx___mutex_trylock_common+0x10/0x10
[  204.324305][T17350]  ? rcu_is_watching+0x15/0xb0
[  204.324313][T17350]  ? trace_contention_end+0x39/0x120
[  204.324322][T17350]  ? __mutex_lock+0x335/0x1350
[  204.324331][T17350]  netlink_rcv_skb+0x208/0x470
[  204.324344][T17350]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.324354][T17350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.324367][T17350]  ? lock_release+0x4b/0x3e0
[  204.324381][T17350]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.324394][T17350]  xfrm_netlink_rcv+0x79/0x90
[  204.324404][T17350]  netlink_unicast+0x82f/0x9e0
[  204.324416][T17350]  ? __pfx_netlink_unicast+0x10/0x10
[  204.324427][T17350]  ? netlink_sendmsg+0x642/0xb30
[  204.324438][T17350]  ? skb_put+0x11b/0x210
[  204.324447][T17350]  netlink_sendmsg+0x805/0xb30
[  204.324460][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.324472][T17350]  ? futex_unqueue+0x22/0x240
[  204.324482][T17350]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.324491][T17350]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.324501][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.324540][T17350]  __sock_sendmsg+0x21c/0x270
[  204.324554][T17350]  ____sys_sendmsg+0x505/0x830
[  204.324565][T17350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.324576][T17350]  ? import_iovec+0x74/0xa0
[  204.324585][T17350]  ___sys_sendmsg+0x21f/0x2a0
[  204.324594][T17350]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.324603][T17350]  ? futex_wait+0x285/0x360
[  204.324619][T17350]  ? __fget_files+0x2a/0x420
[  204.324626][T17350]  ? __fget_files+0x3a0/0x420
[  204.324635][T17350]  __x64_sys_sendmsg+0x19b/0x260
[  204.324643][T17350]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.324655][T17350]  ? rcu_is_watching+0x15/0xb0
[  204.324663][T17350]  do_syscall_64+0xfa/0x3b0
[  204.324671][T17350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.324680][T17350]  ? exc_page_fault+0x9f/0xf0
[  204.324690][T17350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.324699][T17350] RIP: 0033:0x7fa7f078ebe9
[  204.324708][T17350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.324718][T17350] RSP: 002b:00007fa7f158d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.324735][T17350] RAX: ffffffffffffffda RBX: 00007fa7f09b5fa0 RCX: 00007fa7f078ebe9
[  204.324742][T17350] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  204.324749][T17350] RBP: 00007fa7f0811e19 R08: 0000000000000000 R09: 0000000000000000
[  204.324755][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.324761][T17350] R13: 00007fa7f09b6038 R14: 00007fa7f09b5fa0 R15: 00007ffdeeb2b778
[  204.324771][T17350]  </TASK>
[  204.324775][T17350] 
[  204.394783][T17350] Allocated by task 14318:
[  204.394795][T17350]  kasan_save_track+0x3e/0x80
[  204.427067][T17351] __nla_validate_parse: 7 callbacks suppressed
[  204.427083][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5054'.
[  204.428223][T17350]  __kasan_slab_alloc+0x6c/0x80
[  204.428246][T17350]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  204.428259][T17350]  xfrm_state_alloc+0x24/0x2f0
[  204.428273][T17350]  __find_acq_core+0x8a7/0x1c00
[  204.469958][T17350]  xfrm_find_acq+0x78/0xa0
[  204.471522][T17350]  xfrm_alloc_userspi+0x6b3/0xc90
[  204.473478][T17350]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.475337][T17350]  netlink_rcv_skb+0x208/0x470
[  204.477025][T17350]  xfrm_netlink_rcv+0x79/0x90
[  204.478871][T17350]  netlink_unicast+0x82f/0x9e0
[  204.480775][T17350]  netlink_sendmsg+0x805/0xb30
[  204.482691][T17350]  __sock_sendmsg+0x21c/0x270
[  204.484562][T17350]  ____sys_sendmsg+0x505/0x830
[  204.486320][T17350]  ___sys_sendmsg+0x21f/0x2a0
[  204.487909][T17350]  __x64_sys_sendmsg+0x19b/0x260
[  204.489545][T17350]  do_syscall_64+0xfa/0x3b0
[  204.491105][T17350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.493151][T17350] 
[  204.494003][T17350] Freed by task 95:
[  204.495571][T17350]  kasan_save_track+0x3e/0x80
[  204.497415][T17350]  kasan_save_free_info+0x46/0x50
[  204.499199][T17350]  __kasan_slab_free+0x5b/0x80
[  204.501053][T17350]  kmem_cache_free+0x18f/0x400
[  204.502596][T17350]  xfrm_state_gc_task+0x52d/0x6b0
[  204.504191][T17350]  process_scheduled_works+0xae1/0x17b0
[  204.506186][T17350]  worker_thread+0x8a0/0xda0
[  204.508079][T17350]  kthread+0x711/0x8a0
[  204.509657][T17350]  ret_from_fork+0x3fc/0x770
[  204.511358][T17350]  ret_from_fork_asm+0x1a/0x30
[  204.513318][T17350] 
[  204.514256][T17350] The buggy address belongs to the object at ffff88803c139200
[  204.514256][T17350]  which belongs to the cache xfrm_state of size 928
[  204.518634][T17350] The buggy address is located 196 bytes inside of
[  204.518634][T17350]  freed 928-byte region [ffff88803c139200, ffff88803c1395a0)
[  204.523040][T17350] 
[  204.523820][T17350] The buggy address belongs to the physical page:
[  204.525830][T17350] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c139680 pfn:0x3c138
[  204.529044][T17350] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  204.531812][T17350] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  204.534410][T17350] page_type: f5(slab)
[  204.536011][T17350] raw: 00fff00000000040 ffff888105363280 dead000000000122 0000000000000000
[  204.539273][T17350] raw: ffff88803c139680 00000000800e0007 00000000f5000000 0000000000000000
[  204.542717][T17350] head: 00fff00000000040 ffff888105363280 dead000000000122 0000000000000000
[  204.546170][T17350] head: ffff88803c139680 00000000800e0007 00000000f5000000 0000000000000000
[  204.549528][T17350] head: 00fff00000000002 ffffea0000f04e01 00000000ffffffff 00000000ffffffff
[  204.552707][T17350] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  204.555432][T17350] page dumped because: kasan: bad access detected
[  204.557413][T17350] page_owner tracks the page as allocated
[  204.559129][T17350] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11373, tgid 11372 (syz.2.2371), ts 132689823546, free_ts 116817882884
[  204.566449][T17350]  post_alloc_hook+0x240/0x2a0
[  204.568373][T17350]  get_page_from_freelist+0x21e4/0x22c0
[  204.570649][T17350]  __alloc_frozen_pages_noprof+0x181/0x370
[  204.573048][T17350]  alloc_pages_mpol+0x232/0x4a0
[  204.575046][T17350]  allocate_slab+0x8a/0x370
[  204.576942][T17350]  ___slab_alloc+0xbeb/0x1410
[  204.578867][T17350]  kmem_cache_alloc_noprof+0x283/0x3c0
[  204.581045][T17350]  xfrm_state_alloc+0x24/0x2f0
[  204.582993][T17350]  xfrm_state_find+0x37d4/0x5400
[  204.584935][T17350]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  204.587474][T17350]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  204.589708][T17350]  xfrm_lookup_route+0x3c/0x1c0
[  204.591738][T17350]  udp_sendmsg+0x142e/0x2170
[  204.593652][T17350]  __sock_sendmsg+0x19c/0x270
[  204.595568][T17350]  ____sys_sendmsg+0x52d/0x830
[  204.597526][T17350]  ___sys_sendmsg+0x21f/0x2a0
[  204.599320][T17350] page last free pid 10060 tgid 10060 stack trace:
[  204.601898][T17350]  __free_frozen_pages+0xbc4/0xd30
[  204.603951][T17350]  __put_partials+0x156/0x1a0
[  204.605871][T17350]  put_cpu_partial+0x17c/0x250
[  204.607760][T17350]  __slab_free+0x2d5/0x3c0
[  204.609638][T17350]  qlist_free_all+0x97/0x140
[  204.611544][T17350]  kasan_quarantine_reduce+0x148/0x160
[  204.613751][T17350]  __kasan_slab_alloc+0x22/0x80
[  204.615793][T17350]  __kmalloc_noprof+0x224/0x4f0
[  204.617795][T17350]  tomoyo_encode+0x28b/0x550
[  204.619695][T17350]  tomoyo_path_perm+0x2b3/0x4b0
[  204.621682][T17350]  tomoyo_path_symlink+0xa3/0xe0
[  204.623719][T17350]  security_path_symlink+0x177/0x380
[  204.625665][T17350]  do_symlinkat+0x107/0x3f0
[  204.627233][T17350]  __x64_sys_symlinkat+0x95/0xb0
[  204.629213][T17350]  do_syscall_64+0xfa/0x3b0
[  204.631031][T17350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.633346][T17350] 
[  204.634335][T17350] Memory state around the buggy address:
[  204.636600][T17350]  ffff88803c139180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  204.639813][T17350]  ffff88803c139200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.642946][T17350] >ffff88803c139280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.646151][T17350]                                            ^
[  204.648585][T17350]  ffff88803c139300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.651819][T17350]  ffff88803c139380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.655080][T17350] ==================================================================
[  204.658625][T17350] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  204.661584][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.1.5054 Not tainted syzkaller #0 PREEMPT(full) 
[  204.665181][T17350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.668958][T17350] Call Trace:
[  204.670185][T17350]  <TASK>
[  204.671396][T17350]  dump_stack_lvl+0x99/0x250
[  204.673249][T17350]  ? __asan_memcpy+0x40/0x70
[  204.675126][T17350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.677054][T17350]  ? __pfx__printk+0x10/0x10
[  204.678533][T17350]  vpanic+0x281/0x750
[  204.679902][T17350]  ? __pfx_vpanic+0x10/0x10
[  204.681756][T17350]  ? rcu_is_watching+0x15/0xb0
[  204.683726][T17350]  panic+0xb9/0xc0
[  204.685236][T17350]  ? __pfx_panic+0x10/0x10
[  204.686981][T17350]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  204.689227][T17350]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  204.691785][T17350]  ? xfrm_alloc_spi+0x570/0xf30
[  204.693794][T17350]  check_panic_on_warn+0x89/0xb0
[  204.695830][T17350]  ? xfrm_alloc_spi+0x570/0xf30
[  204.697742][T17350]  end_report+0x78/0x160
[  204.699458][T17350]  kasan_report+0x129/0x150
[  204.701375][T17350]  ? lock_acquire+0x5f/0x360
[  204.703296][T17350]  ? xfrm_alloc_spi+0x570/0xf30
[  204.705336][T17350]  xfrm_alloc_spi+0x570/0xf30
[  204.707248][T17350]  ? xfrm_alloc_spi+0x2a0/0xf30
[  204.709236][T17350]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  204.711326][T17350]  ? xfrm_find_acq+0x87/0xa0
[  204.713268][T17350]  xfrm_alloc_userspi+0x70b/0xc90
[  204.715325][T17350]  ? apparmor_capable+0x137/0x1b0
[  204.717371][T17350]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  204.719611][T17350]  ? __nla_parse+0x40/0x60
[  204.721397][T17350]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.723389][T17350]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.725603][T17350]  ? __pfx___mutex_trylock_common+0x10/0x10
[  204.727982][T17350]  ? rcu_is_watching+0x15/0xb0
[  204.729938][T17350]  ? trace_contention_end+0x39/0x120
[  204.732089][T17350]  ? __mutex_lock+0x335/0x1350
[  204.734032][T17350]  netlink_rcv_skb+0x208/0x470
[  204.735990][T17350]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.738195][T17350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.740349][T17350]  ? lock_release+0x4b/0x3e0
[  204.742258][T17350]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.744393][T17350]  xfrm_netlink_rcv+0x79/0x90
[  204.746321][T17350]  netlink_unicast+0x82f/0x9e0
[  204.748248][T17350]  ? __pfx_netlink_unicast+0x10/0x10
[  204.750437][T17350]  ? netlink_sendmsg+0x642/0xb30
[  204.752464][T17350]  ? skb_put+0x11b/0x210
[  204.754183][T17350]  netlink_sendmsg+0x805/0xb30
[  204.756171][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.758286][T17350]  ? futex_unqueue+0x22/0x240
[  204.760115][T17350]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.762138][T17350]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.764225][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.766365][T17350]  __sock_sendmsg+0x21c/0x270
[  204.768296][T17350]  ____sys_sendmsg+0x505/0x830
[  204.770250][T17350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.772371][T17350]  ? import_iovec+0x74/0xa0
[  204.774214][T17350]  ___sys_sendmsg+0x21f/0x2a0
[  204.776148][T17350]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.778254][T17350]  ? futex_wait+0x285/0x360
[  204.780068][T17350]  ? __fget_files+0x2a/0x420
[  204.781924][T17350]  ? __fget_files+0x3a0/0x420
[  204.783857][T17350]  __x64_sys_sendmsg+0x19b/0x260
[  204.785887][T17350]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.788112][T17350]  ? rcu_is_watching+0x15/0xb0
[  204.790089][T17350]  do_syscall_64+0xfa/0x3b0
[  204.791990][T17350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.794399][T17350]  ? exc_page_fault+0x9f/0xf0
[  204.796313][T17350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.798767][T17350] RIP: 0033:0x7fa7f078ebe9
[  204.800662][T17350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.808555][T17350] RSP: 002b:00007fa7f158d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.812084][T17350] RAX: ffffffffffffffda RBX: 00007fa7f09b5fa0 RCX: 00007fa7f078ebe9
[  204.815384][T17350] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  204.818717][T17350] RBP: 00007fa7f0811e19 R08: 0000000000000000 R09: 0000000000000000
[  204.821941][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.825196][T17350] R13: 00007fa7f09b6038 R14: 00007fa7f09b5fa0 R15: 00007ffdeeb2b778
[  204.828572][T17350]  </TASK>
[  204.830671][T17350] Kernel Offset: disabled
[  204.832113][T17350] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:59:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000011d2 RDI=00000000000011d3 RBP=00000000000003f8 RSP=ffffc90002abe9f0
R8 =ffff888107038237 R9 =1ffff11020e07046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb90c R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa7f158d6c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa7f158cfc8 CR3=0000000023dc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa7f0987498 00007fa7f0987470 XMM03=00007fa7f09874a8 00007fa7f09874a0
XMM04=00007fa7f14ed100 00007fa7f0987460 XMM05=00007fa7f0987478 00007fa7f09874c0
XMM06=00007fa7f09874b8 00007fa7f09874b0 XMM07=00007fa7f09874a8 00007fa7f09874a0
XMM08=0000000000000000 00007fa7f0812ee7 XMM09=0000000000000000 00007fa7f0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=bda8ea2cdeef5800 RBX=ffffffff819683b8 RCX=bda8ea2cdeef5800 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005610ffe487e8 CR3=0000000110276000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=030002001fa20300 02001fa003018080
XMM02=030000000608061f a80301e804001fa4 XMM03=04001fb803160400 1fb4030a04001fb0
XMM04=ffe204001fc00307 ffe604001fbc030a XMM05=0103881000000401 0000040806060168
XMM06=e20280a808006003 001000500301f0ff XMM07=fffffffffffe1000 4003021000300348
XMM08=100009900307ffc0 04001fc40307ffe2 XMM09=79656b5f5f2e7469 6e695f6873656d5f
XMM10=6430306139666666 66666666660a372e XMM11=73656d5f76646174 6162206220303861
XMM12=697665645f726574 73696765725f6963 XMM13=666666660a36312e 79656b5f5f2e6563
XMM14=6e20622030346665 3030613966666666 XMM15=5f72657473696765 725f6963685f6366
