last executing test programs:

269.44803ms ago: executing program 0 (id=2952):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd)
write$ppp(r0, 0x0, 0x0)

263.278928ms ago: executing program 2 (id=2954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000b700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

200.761054ms ago: executing program 1 (id=2955):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db)

200.649022ms ago: executing program 2 (id=2956):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000180001f8e2000000000000000a800000ff0300060000000014000100fe"], 0x30}}, 0x0)

200.528246ms ago: executing program 0 (id=2957):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x1b8, 0x2a8, 0x1b8, 0x2a8, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)

200.482332ms ago: executing program 2 (id=2958):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10)

152.082355ms ago: executing program 1 (id=2959):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x12000, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
r3 = epoll_create1(0x0)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='netdevsim0\x00')
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x10000001})
close(r2)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0000000000000000070200002004681efa361595f6937420563b4b2a881877da027f90f0c42a621756c5656408d9979a40b7230c1fc399cc8aef53e454b2a0334c41f13bfc57f543fcc539d3bd6f558515dbf7ba74136f46a40db01903cd94f37a991a"], 0x14}}, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x21, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000100000008000b400000000054000480400001800e000100696d6d6564696174650000002c0002800800014002000000040002801c0002801800028008000180fffffffc0900020073797a3000000000100001800a0001006c696d69740000000900010073797a30"], 0xf0}}, 0x0)

151.849475ms ago: executing program 0 (id=2960):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000)

151.715102ms ago: executing program 2 (id=2961):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x24048841)

91.073979ms ago: executing program 2 (id=2962):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00})

90.897722ms ago: executing program 1 (id=2963):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r0, 0x0)
close(0x4)

90.613624ms ago: executing program 0 (id=2964):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x1, 0x6, @link_local}, 0x14)

90.415715ms ago: executing program 1 (id=2965):
r0 = socket$isdn_base(0x22, 0x2, 0x10)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

907.062µs ago: executing program 0 (id=2966):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8)
close(r0)

767.858µs ago: executing program 1 (id=2967):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)="780768d4939900", 0x7}, 0x1, 0x0, 0x0, 0x4}, 0x4)

394.236µs ago: executing program 2 (id=2968):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8)

177.691µs ago: executing program 0 (id=2969):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 1 (id=2970):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x8805}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x6525c000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10)
recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60836' (ED25519) to the list of known hosts.
syzkaller login: [   48.184421][ T5763] cgroup: Unknown subsys name 'net'
[   48.325731][ T5763] cgroup: Unknown subsys name 'cpuset'
[   48.331440][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.744500][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.888863][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.892820][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.896296][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.910812][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.915615][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.919072][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.922778][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.926859][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.944894][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.950044][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.963258][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.968031][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.976355][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.978992][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.982048][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.174244][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.304908][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.307690][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.310508][ T5831] bridge_slave_0: entered allmulticast mode
[   54.314744][ T5831] bridge_slave_0: entered promiscuous mode
[   54.319056][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.321601][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.325285][ T5831] bridge_slave_1: entered allmulticast mode
[   54.328645][ T5831] bridge_slave_1: entered promiscuous mode
[   54.404028][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.421874][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.448214][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.487727][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   54.507295][ T5831] team0: Port device team_slave_0 added
[   54.530848][ T5831] team0: Port device team_slave_1 added
[   54.565713][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.568089][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.570815][ T5835] bridge_slave_0: entered allmulticast mode
[   54.574910][ T5835] bridge_slave_0: entered promiscuous mode
[   54.590560][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.595069][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.598271][ T5835] bridge_slave_1: entered allmulticast mode
[   54.602339][ T5835] bridge_slave_1: entered promiscuous mode
[   54.605718][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.608034][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.616850][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.640587][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.643239][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.651545][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.685104][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.687549][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.690046][ T5839] bridge_slave_0: entered allmulticast mode
[   54.693065][ T5839] bridge_slave_0: entered promiscuous mode
[   54.697367][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.703282][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.707052][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.709559][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.712776][ T5839] bridge_slave_1: entered allmulticast mode
[   54.715658][ T5839] bridge_slave_1: entered promiscuous mode
[   54.772504][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.777103][ T5835] team0: Port device team_slave_0 added
[   54.781109][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.789923][ T5831] hsr_slave_0: entered promiscuous mode
[   54.793682][ T5831] hsr_slave_1: entered promiscuous mode
[   54.800811][ T5835] team0: Port device team_slave_1 added
[   54.822679][ T5839] team0: Port device team_slave_0 added
[   54.866192][ T5839] team0: Port device team_slave_1 added
[   54.876255][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.879540][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.891249][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.924197][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.927099][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.939433][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.964371][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.967025][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.976894][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.998926][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.002195][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.013833][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.047419][ T5835] hsr_slave_0: entered promiscuous mode
[   55.049778][ T5835] hsr_slave_1: entered promiscuous mode
[   55.052378][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.055359][ T5835] Cannot create hsr debugfs directory
[   55.132103][ T5839] hsr_slave_0: entered promiscuous mode
[   55.135692][ T5839] hsr_slave_1: entered promiscuous mode
[   55.139052][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.144674][ T5839] Cannot create hsr debugfs directory
[   55.316359][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.325643][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.345056][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.361628][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.406245][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.431490][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.437793][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.457728][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.498578][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.503294][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.508208][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.524357][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.594660][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.619700][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   55.630978][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.642226][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.645257][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.655497][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.658192][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.667841][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   55.695730][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.698148][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.708735][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.730233][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.733637][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.747393][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   55.765918][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.768726][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.788269][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.790582][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.952954][   T55] Bluetooth: hci0: command tx timeout
[   55.987326][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.042020][   T55] Bluetooth: hci1: command tx timeout
[   56.044206][   T55] Bluetooth: hci2: command tx timeout
[   56.080723][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.091504][ T5831] veth0_vlan: entered promiscuous mode
[   56.107835][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.131350][ T5831] veth1_vlan: entered promiscuous mode
[   56.165584][ T5839] veth0_vlan: entered promiscuous mode
[   56.180525][ T5839] veth1_vlan: entered promiscuous mode
[   56.187596][ T5835] veth0_vlan: entered promiscuous mode
[   56.217773][ T5831] veth0_macvtap: entered promiscuous mode
[   56.220583][ T5835] veth1_vlan: entered promiscuous mode
[   56.225099][ T5839] veth0_macvtap: entered promiscuous mode
[   56.229779][ T5839] veth1_macvtap: entered promiscuous mode
[   56.235800][ T5831] veth1_macvtap: entered promiscuous mode
[   56.249388][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.255520][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.269331][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.275758][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.278554][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.281509][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.290054][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.304810][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.307723][ T5835] veth0_macvtap: entered promiscuous mode
[   56.319613][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.326414][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.330240][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.338522][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.351600][ T5835] veth1_macvtap: entered promiscuous mode
[   56.379473][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.398170][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.423564][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.427223][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.430177][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.434947][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.450196][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.454587][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.509784][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.519192][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.520127][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.539778][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.560106][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.568030][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.570655][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.610414][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.619604][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.652965][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.664341][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.666354][ T5903] syz.2.4 uses obsolete (PF_INET,SOCK_PACKET)
[   56.868753][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.876278][ T5919] netlink: 'syz.0.9': attribute type 4 has an invalid length.
[   57.056517][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13'.
[   57.098654][ T5930] netlink: 'syz.0.14': attribute type 12 has an invalid length.
[   57.102679][ T5930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14'.
[   57.134090][ T5932] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15'.
[   57.805335][ T5957] netlink: 'syz.2.25': attribute type 4 has an invalid length.
[   58.032653][   T55] Bluetooth: hci0: command tx timeout
[   58.122858][ T5837] Bluetooth: hci1: command tx timeout
[   58.125266][   T55] Bluetooth: hci2: command tx timeout
[   58.499809][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'.
[   58.796044][ T6029] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   58.799503][ T6029] netlink: 'syz.2.57': attribute type 2 has an invalid length.
[   58.805842][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'.
[   58.847653][ T6031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   58.949610][ T6041] batadv_slave_1: entered promiscuous mode
[   58.955734][ T6040] batadv_slave_1: left promiscuous mode
[   59.169913][ T6060] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   59.181599][ T6060] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   59.299472][ T6069] warning: `syz.1.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.311098][ T6071] dummy0: entered promiscuous mode
[   59.313302][ T6071] macsec1: entered promiscuous mode
[   59.315295][ T6071] macsec1: entered allmulticast mode
[   59.317282][ T6071] dummy0: entered allmulticast mode
[   59.321371][ T6071] dummy0: left allmulticast mode
[   59.335063][ T6071] dummy0: left promiscuous mode
[   59.448121][ T6081] tipc: Started in network mode
[   59.450073][ T6081] tipc: Node identity 6ac24c62f614, cluster identity 4711
[   59.454585][ T6081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.458140][ T6081] syzkaller0: entered promiscuous mode
[   59.460389][ T6081] syzkaller0: entered allmulticast mode
[   59.637734][ T6086] tipc: Resetting bearer <eth:syzkaller0>
[   59.647496][ T6080] tipc: Resetting bearer <eth:syzkaller0>
[   59.679946][ T6080] tipc: Disabling bearer <eth:syzkaller0>
[   59.826745][ T6093] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.84'.
[   59.927879][ T6102] Bluetooth: MGMT ver 1.23
[   60.128062][   T55] Bluetooth: hci0: command tx timeout
[   60.192631][ T5837] Bluetooth: hci1: command tx timeout
[   60.195037][   T55] Bluetooth: hci2: command tx timeout
[   60.338641][ T6131] openvswitch: netlink: IP tunnel dst address not specified
[   60.447237][ T6139] Zero length message leads to an empty skb
[   60.732506][ T6151] netlink: 176 bytes leftover after parsing attributes in process `syz.1.109'.
[   60.916233][ T6162] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   61.186358][ T6188] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   61.241440][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'.
[   61.274905][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'.
[   61.286572][ T6200] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   61.300515][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.304342][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.325075][ T6202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.443683][ T6207] bridge0: port 3(syz_tun) entered blocking state
[   61.445929][ T6207] bridge0: port 3(syz_tun) entered disabled state
[   61.448218][ T6207] syz_tun: entered allmulticast mode
[   61.450979][ T6207] syz_tun: entered promiscuous mode
[   61.454217][ T6207] bridge0: port 3(syz_tun) entered blocking state
[   61.456801][ T6207] bridge0: port 3(syz_tun) entered forwarding state
[   61.595847][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'.
[   61.962543][ T6229] bond0: entered promiscuous mode
[   61.965028][ T6229] bond_slave_0: entered promiscuous mode
[   61.967957][ T6229] bond_slave_1: entered promiscuous mode
[   61.973815][ T6229] bond0: left promiscuous mode
[   61.976185][ T6229] bond_slave_0: left promiscuous mode
[   61.978951][ T6229] bond_slave_1: left promiscuous mode
[   62.193767][   T55] Bluetooth: hci0: command tx timeout
[   62.272986][ T5837] Bluetooth: hci1: command tx timeout
[   62.274500][   T55] Bluetooth: hci2: command tx timeout
[   63.009134][ T6252] __nla_validate_parse: 2 callbacks suppressed
[   63.009148][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   63.078909][ T6253] netlink: 'syz.2.154': attribute type 15 has an invalid length.
[   63.143176][ T6254] IPv6: NLM_F_REPLACE set, but no existing node found!
[   63.933793][ T6288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.938086][ T6288] syzkaller0: entered promiscuous mode
[   63.940369][ T6288] syzkaller0: entered allmulticast mode
[   63.960247][ T6288] tipc: Resetting bearer <eth:syzkaller0>
[   63.967608][ T6287] tipc: Resetting bearer <eth:syzkaller0>
[   63.985204][ T6287] tipc: Disabling bearer <eth:syzkaller0>
[   64.104427][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'.
[   64.677207][ T6342] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   64.973003][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.202'.
[   65.090144][ T6375] netlink: 'syz.1.209': attribute type 21 has an invalid length.
[   65.093534][ T6375] netlink: 128 bytes leftover after parsing attributes in process `syz.1.209'.
[   65.096890][ T6375] netlink: 3 bytes leftover after parsing attributes in process `syz.1.209'.
[   65.904577][ T6401] tipc: Started in network mode
[   65.906813][ T6401] tipc: Node identity 2a915c4e157, cluster identity 4711
[   65.910640][ T6401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.915972][ T6401] syzkaller0: entered promiscuous mode
[   65.918358][ T6401] syzkaller0: entered allmulticast mode
[   65.950565][ T6401] tipc: Resetting bearer <eth:syzkaller0>
[   65.959938][ T6400] tipc: Resetting bearer <eth:syzkaller0>
[   65.977072][ T6400] tipc: Disabling bearer <eth:syzkaller0>
[   66.350159][ T6425] only policy match revision 0 supported
[   66.350172][ T6425] unable to load match
[   66.517121][ T6435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.237'.
[   66.520229][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'.
[   66.559046][ T6437] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.238'.
[   66.563057][ T6439] bridge0: port 3(erspan0) entered blocking state
[   66.563154][ T6439] bridge0: port 3(erspan0) entered disabled state
[   66.563231][ T6439] erspan0: entered allmulticast mode
[   66.564229][ T6439] erspan0: entered promiscuous mode
[   66.575489][ T6439] bridge0: port 3(erspan0) entered blocking state
[   66.577569][ T6439] bridge0: port 3(erspan0) entered forwarding state
[   66.581415][ T6439] erspan0: left allmulticast mode
[   66.586564][ T6439] erspan0: left promiscuous mode
[   66.588945][ T6439] bridge0: port 3(erspan0) entered disabled state
[   67.074721][ T6469] netlink: 'syz.2.247': attribute type 16 has an invalid length.
[   67.077648][ T6469] netlink: 'syz.2.247': attribute type 17 has an invalid length.
[   67.094348][ T6469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.182034][ T6471] netlink: 'syz.0.253': attribute type 2 has an invalid length.
[   67.278123][ T6479] netlink: 27 bytes leftover after parsing attributes in process `syz.1.257'.
[   67.437233][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'.
[   67.460424][ T6488] erspan0: entered promiscuous mode
[   67.471544][ T6488] batman_adv: batadv0: Adding interface: macvlan2
[   67.478007][ T6488] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.489452][ T6488] batman_adv: batadv0: Interface activated: macvlan2
[   68.034050][ T6533] pim6reg1: entered promiscuous mode
[   68.035897][ T6533] pim6reg1: entered allmulticast mode
[   68.119137][ T6542] __nla_validate_parse: 4 callbacks suppressed
[   68.119152][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'.
[   68.129175][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'.
[   68.219077][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'.
[   68.224443][ T6540] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   68.228828][ T6540] tipc: Enabled bearer <udp:syz1>, priority 10
[   68.398465][  T971] cfg80211: failed to load regulatory.db
[   68.518574][ T6564] netlink: 'syz.0.294': attribute type 1 has an invalid length.
[   68.521349][ T6564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.594098][ T6568] netlink: 'syz.2.295': attribute type 13 has an invalid length.
[   68.596752][ T6568] netlink: 'syz.2.295': attribute type 17 has an invalid length.
[   68.631221][ T6568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.081338][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'.
[   69.086337][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'.
[   69.089919][ T6588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.302'.
[   69.204749][ T6596] netlink: 'syz.2.306': attribute type 1 has an invalid length.
[   69.265439][ T6600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.270308][ T6600] netlink: 'syz.2.308': attribute type 12 has an invalid length.
[   69.273181][ T6600] netlink: 'syz.2.308': attribute type 29 has an invalid length.
[   69.275868][ T6600] netlink: 148 bytes leftover after parsing attributes in process `syz.2.308'.
[   69.279022][ T6600] netlink: 'syz.2.308': attribute type 2 has an invalid length.
[   69.286125][ T6600] netlink: 43 bytes leftover after parsing attributes in process `syz.2.308'.
[   69.345612][  T971] tipc: Node number set to 1071733838
[   69.432124][ T6608] bridge0: port 3(syz_tun) entered disabled state
[   69.448573][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.453478][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.900743][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'.
[   71.000396][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.109830][ T6662] netlink: 'syz.2.338': attribute type 1 has an invalid length.
[   71.114227][ T6662] netlink: 224 bytes leftover after parsing attributes in process `syz.2.338'.
[   71.506554][ T6703] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   71.511210][ T6703] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   71.537072][ T6703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   71.607011][ T6711] netlink: 'syz.2.361': attribute type 12 has an invalid length.
[   71.619346][ T6711] netlink: 'syz.2.361': attribute type 29 has an invalid length.
[   71.817709][ T6729] raw_sendmsg: syz.2.370 forgot to set AF_INET. Fix it!
[   73.239863][ T6829] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.281883][ T6829] bond1: (slave bridge1): making interface the new active one
[   73.292623][ T6829] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   73.334146][ T6829] gretap1: entered promiscuous mode
[   73.340356][ T6829] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   73.358538][ T6829] macvlan3: entered promiscuous mode
[   73.360954][ T6829] macvlan3: entered allmulticast mode
[   73.364416][ T6829] bond1: entered promiscuous mode
[   73.366851][ T6829] bridge1: entered promiscuous mode
[   73.370098][ T6829] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   73.375906][ T6829] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   73.384105][ T6829] bond1: left promiscuous mode
[   73.386829][ T6829] bridge1: left promiscuous mode
[   73.700792][ T6849] __nla_validate_parse: 7 callbacks suppressed
[   73.700807][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'.
[   73.849446][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'.
[   73.918589][ T6864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.427'.
[   73.923311][ T6864] netlink: 260 bytes leftover after parsing attributes in process `syz.2.427'.
[   74.021099][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'.
[   74.216517][ T6886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.438'.
[   74.395022][ T6903] x_tables: duplicate entry at hook 2
[   74.436319][ T6905] netlink: 14 bytes leftover after parsing attributes in process `syz.0.445'.
[   74.505445][ T6905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.514546][ T6905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.521105][ T6905] bond0 (unregistering): Released all slaves
[   75.089294][ T6919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.418363][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'.
[   75.538096][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'.
[   75.573488][ T6936] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.623333][ T6936] macvlan3: entered promiscuous mode
[   75.625582][ T6936] macvlan3: entered allmulticast mode
[   75.629043][ T6936] bond2: (slave macvlan3): Opening slave failed
[   75.875541][ T6949] bridge_slave_0: left allmulticast mode
[   75.887935][ T6949] bridge_slave_0: left promiscuous mode
[   75.890002][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.906130][ T6949] bridge_slave_1: left allmulticast mode
[   75.908410][ T6949] bridge_slave_1: left promiscuous mode
[   75.920424][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.929244][ T6954] validate_nla: 5 callbacks suppressed
[   75.929258][ T6954] netlink: 'syz.1.464': attribute type 10 has an invalid length.
[   75.948991][ T6949] bond0: (slave bond_slave_0): Releasing backup interface
[   75.962479][ T6949] bond0: (slave bond_slave_1): Releasing backup interface
[   75.979064][ T6949] team0: Port device team_slave_0 removed
[   75.990545][ T6949] team0: Port device team_slave_1 removed
[   75.995324][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.998212][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.003571][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.007095][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.016411][ T6949] batman_adv: batadv0: Interface deactivated: macvlan2
[   76.024586][ T6949] batman_adv: batadv0: Removing interface: macvlan2
[   76.029764][ T6949] bond1: (slave bridge1): Releasing active interface
[   76.034162][ T6949] bond1: (slave bridge1): the permanent HWaddr of slave - d2:85:76:9b:e6:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   76.040403][ T6949] bond1: (slave gretap1): making interface the new active one
[   76.051497][ T6949] bond1: (slave gretap1): Releasing active interface
[   76.089883][ T6954] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   76.163139][ T6971] bridge0: port 3(syz_tun) entered disabled state
[   76.299940][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.307864][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.313397][ T6982] netlink: 'syz.1.475': attribute type 29 has an invalid length.
[   76.383751][ T6971] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.387884][ T6971] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.391024][ T6971] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.395249][ T6971] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.421033][ T6976] syzkaller1: entered promiscuous mode
[   76.424399][ T6976] syzkaller1: entered allmulticast mode
[   76.560470][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'.
[   76.816512][ T7011] xt_TCPMSS: Only works on TCP SYN packets
[   80.502920][ T7060] __nla_validate_parse: 1 callbacks suppressed
[   80.502930][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[   80.587585][ T7067] netlink: 84 bytes leftover after parsing attributes in process `syz.1.514'.
[   81.443331][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'.
[   81.465110][ T7135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.540167][ T7135] syzkaller0: entered promiscuous mode
[   81.542887][ T7135] syzkaller0: entered allmulticast mode
[   81.546145][ T7135] tipc: Resetting bearer <eth:syzkaller0>
[   81.556884][ T7134] tipc: Resetting bearer <eth:syzkaller0>
[   81.563416][ T7145] netlink: 'syz.0.546': attribute type 1 has an invalid length.
[   82.529189][ T7134] tipc: Disabling bearer <eth:syzkaller0>
[   82.535877][ T7145] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   82.976350][ T5699] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   83.058749][ T7197] Illegal XDP return value 4294967274 on prog  (id 93) dev N/A, expect packet loss!
[   84.030206][ T7218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.347481][ T7242] netlink: 'syz.1.583': attribute type 21 has an invalid length.
[   84.898587][ T7235] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   85.040693][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[   85.049642][ T7280] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[   85.088895][ T7280] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   85.103533][ T7280] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.103653][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   85.123585][ T7280] veth3: entered promiscuous mode
[   85.133188][ T7280] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   85.164556][ T7280] bond0: (slave wlan1): Releasing backup interface
[   85.175310][ T7280] bond3: (slave ip6gretap1): Removing an active aggregator
[   85.178318][ T7280] bond3: (slave ip6gretap1): Releasing backup interface
[   85.180980][ T7280] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 8a:62:07:f9:bf:4f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   85.197159][ T7280] bond3: (slave veth3): Releasing backup interface
[   85.396237][ T7297] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[   85.714560][ T7327] syzkaller1: entered promiscuous mode
[   85.717255][ T7327] syzkaller1: entered allmulticast mode
[   86.467761][ T7390] netlink: 'syz.1.640': attribute type 27 has an invalid length.
[   86.542670][ T7397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.546334][ T7397] syzkaller0: entered promiscuous mode
[   86.548865][ T7397] syzkaller0: entered allmulticast mode
[   86.559963][ T7398] netlink: 'syz.2.643': attribute type 1 has an invalid length.
[   86.569261][ T7398] netlink: 208 bytes leftover after parsing attributes in process `syz.2.643'.
[   86.575727][ T7397] tipc: Resetting bearer <eth:syzkaller0>
[   86.579633][ T7398] netlink: 'syz.2.643': attribute type 1 has an invalid length.
[   86.582593][ T7398] netlink: 'syz.2.643': attribute type 2 has an invalid length.
[   86.585256][ T7396] tipc: Resetting bearer <eth:syzkaller0>
[   86.605486][ T7396] tipc: Disabling bearer <eth:syzkaller0>
[   86.630124][ T7402] syz_tun: entered promiscuous mode
[   86.638593][ T7402] syz_tun: left promiscuous mode
[   86.836758][ T7417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'.
[   87.311255][ T7449] netlink: 52 bytes leftover after parsing attributes in process `syz.0.667'.
[   87.342403][ T7453] netlink: 10 bytes leftover after parsing attributes in process `syz.1.669'.
[   87.492746][ T7463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.496180][ T7463] syzkaller0: entered promiscuous mode
[   87.498421][ T7463] syzkaller0: entered allmulticast mode
[   87.520605][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[   87.526766][ T7463] tipc: Resetting bearer <eth:syzkaller0>
[   87.530310][ T7462] tipc: Resetting bearer <eth:syzkaller0>
[   87.541414][ T7462] tipc: Disabling bearer <eth:syzkaller0>
[   87.806634][ T7469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.852462][  T971] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   87.856300][  T971] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   87.864338][ T1093] wlan1: authenticated
[   87.866388][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.883007][ T1093] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[   87.925613][   T53] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[   87.930199][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.934550][   T53] wlan1: associated
[   88.158120][ T7488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.161394][ T7488] syzkaller0: entered promiscuous mode
[   88.163348][ T7488] syzkaller0: entered allmulticast mode
[   88.176308][ T7488] tipc: Resetting bearer <eth:syzkaller0>
[   88.179895][ T7487] tipc: Resetting bearer <eth:syzkaller0>
[   88.187778][ T7487] tipc: Disabling bearer <eth:syzkaller0>
[   88.312545][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.687'.
[   88.317504][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.687'.
[   88.590702][ T7506] netlink: 'syz.1.695': attribute type 1 has an invalid length.
[   88.597489][ T7506] netlink: 228 bytes leftover after parsing attributes in process `syz.1.695'.
[   89.861131][ T7565] batadv_slave_0: entered promiscuous mode
[   89.866140][ T7565] batadv_slave_0: entered allmulticast mode
[   89.908041][ T7570] delete_channel: no stack
[   90.233305][ T7604] netlink: 'syz.1.743': attribute type 10 has an invalid length.
[   90.241212][ T7604] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.253958][ T7603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.299522][ T7612] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.745'.
[   90.413706][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.751'.
[   90.421860][ T7625] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   90.648267][ T7645] xt_TPROXY: Can be used only with -p tcp or -p udp
[   91.655965][ T7732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.693237][ T7736] __nla_validate_parse: 4 callbacks suppressed
[   91.693250][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'.
[   91.996062][ T7760] netlink: 68 bytes leftover after parsing attributes in process `syz.2.817'.
[   92.040452][ T7765] netlink: 'syz.2.819': attribute type 5 has an invalid length.
[   92.097804][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.822'.
[   92.316047][ T7786] openvswitch: netlink: Message has 4 unknown bytes.
[   92.447335][ T7791] bridge2: entered promiscuous mode
[   92.449664][ T7791] bridge2: entered allmulticast mode
[   92.457314][ T7791] team0: Port device bridge2 added
[   92.869578][ T7824] netlink: 'syz.0.846': attribute type 1 has an invalid length.
[   92.884063][ T7824] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.898301][ T7824] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.900713][ T7824] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   92.904816][ T7824] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   92.940209][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.943477][ T7828] batadv_slave_1: entered promiscuous mode
[   92.949396][ T7828] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.955451][ T7828] bond1: (slave batadv_slave_1): making interface the new active one
[   92.960377][ T7828] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link
[   92.967923][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.846'.
[   92.973923][ T7824] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.064585][ T7835] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   93.255028][ T7837] syzkaller0: entered allmulticast mode
[   93.264960][ T7837] syzkaller0 (unregistering): left allmulticast mode
[   93.841268][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[   93.847768][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'.
[   93.890297][ T7883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.895413][ T7883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.899128][ T7883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.902851][ T7883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.134514][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.880'.
[   94.136532][ T7908] netlink: 'syz.2.881': attribute type 10 has an invalid length.
[   94.144586][ T7908] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.147586][ T7908] team0: Port device bond0 added
[   94.162125][ T7908] syz.2.881 (7908) used greatest stack depth: 20232 bytes left
[   94.209563][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'.
[   94.295653][ T7922] netlink: 'syz.2.889': attribute type 1 has an invalid length.
[   94.424193][ T7930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.446196][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[   95.102251][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'.
[   96.822522][ T8019] __nla_validate_parse: 2 callbacks suppressed
[   96.822539][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'.
[   96.831886][   T55] Bluetooth: hci0: command tx timeout
[   96.838267][ T8019] xfrm1: entered promiscuous mode
[   96.850650][ T8019] xfrm1: entered allmulticast mode
[   96.908069][ T8021] netlink: 'syz.1.934': attribute type 1 has an invalid length.
[   97.298184][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'.
[   97.546568][ T8050] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.606136][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.951'.
[   97.623543][ T8062] IPVS: Error connecting to the multicast addr
[   97.713807][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[   97.771163][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'.
[   97.968841][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'.
[   98.200175][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'.
[   98.523074][ T8136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.985'.
[   98.649655][   T95] IPVS: starting estimator thread 0...
[   98.742026][ T8144] IPVS: using max 77 ests per chain, 184800 per kthread
[   98.776885][   T33] audit: type=1804 audit(1753187934.636:2): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.990" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1740 res=1 errno=0
[   98.788002][   T33] audit: type=1800 audit(1753187934.646:3): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.990" name="cgroup.controllers" dev="tmpfs" ino=1740 res=0 errno=0
[   99.016466][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'.
[   99.225655][ T8186] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   99.315373][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[   99.713621][  T971] IPVS: starting estimator thread 0...
[   99.754486][ T8242] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   99.758567][ T8243] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   99.763116][ T8242] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   99.812724][ T8239] IPVS: using max 75 ests per chain, 180000 per kthread
[   99.847949][ T8251] syzkaller1: entered promiscuous mode
[   99.849793][ T8251] syzkaller1: entered allmulticast mode
[  100.514905][ T8255] tipc: Started in network mode
[  100.521968][ T8255] tipc: Node identity 7, cluster identity 4711
[  100.524827][ T8255] tipc: Node number set to 7
[  100.620920][ T8266] nbd: must specify at least one socket
[  100.706153][ T8277] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  100.969942][ T8297] netlink: 'syz.2.1057': attribute type 9 has an invalid length.
[  101.087834][ T8312] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  101.310786][ T8322] v: renamed from veth0_vlan
[  101.421954][ T8339] delete_channel: no stack
[  101.575492][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.578618][ T8355] bridge0: port 2(bridge_slave_1) entered listening state
[  101.581318][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.583922][ T8355] bridge0: port 1(bridge_slave_0) entered listening state
[  101.590905][ T8355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.681114][ T8366] vlan2: entered promiscuous mode
[  101.685481][ T8366] bridge0: entered promiscuous mode
[  102.063385][ T8397] netlink: 'syz.1.1093': attribute type 1 has an invalid length.
[  102.066131][ T8397] __nla_validate_parse: 8 callbacks suppressed
[  102.066139][ T8397] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1093'.
[  102.551392][ T8444] netlink: 'syz.1.1110': attribute type 13 has an invalid length.
[  102.566345][ T8444] netlink: 'syz.1.1110': attribute type 17 has an invalid length.
[  102.665986][ T8444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.676627][ T8455] netlink: 'syz.0.1118': attribute type 1 has an invalid length.
[  102.679837][ T8455] netlink: 'syz.0.1118': attribute type 1 has an invalid length.
[  102.736641][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1110'.
[  102.914154][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'.
[  103.086096][ T8482] netlink: 'syz.2.1131': attribute type 10 has an invalid length.
[  103.089820][ T8482] bridge0: port 4(netdevsim0) entered blocking state
[  103.095670][ T8482] bridge0: port 4(netdevsim0) entered disabled state
[  103.105191][ T8482] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  103.121971][ T8486] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1133'.
[  103.185464][ T8494] openvswitch: netlink: Missing valid actions attribute.
[  103.188104][ T8494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.224232][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'.
[  103.227339][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'.
[  103.290352][ T8503] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  103.848699][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'.
[  103.853592][ T8554] netlink: 'syz.2.1166': attribute type 1 has an invalid length.
[  103.897163][ T8557] netlink: 'syz.2.1167': attribute type 10 has an invalid length.
[  103.902622][ T8557] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  104.240266][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1185'.
[  104.542115][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'.
[  104.620543][   T10] IPVS: starting estimator thread 0...
[  104.650159][ T8639] netlink: 'syz.0.1205': attribute type 3 has an invalid length.
[  104.733343][ T8635] IPVS: using max 78 ests per chain, 187200 per kthread
[  105.101210][ T8682] xt_TCPMSS: Only works on TCP SYN packets
[  105.315082][ T8694] syzkaller1: entered promiscuous mode
[  105.317487][ T8694] syzkaller1: entered allmulticast mode
[  105.720905][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1246'.
[  105.993437][ T8747] validate_nla: 2 callbacks suppressed
[  105.993452][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  105.998506][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.001413][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.004791][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.007583][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.010380][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.016024][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.018986][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.022523][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  106.026200][ T8747] netlink: 'syz.0.1258': attribute type 29 has an invalid length.
[  108.270198][ T8859] team0: No ports can be present during mode change
[  108.648663][ T8895] 8021q: adding VLAN 0 to HW filter on device team0
[  108.653616][ T8895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.866142][ T8920] __nla_validate_parse: 2 callbacks suppressed
[  108.866152][ T8920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'.
[  108.977506][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'.
[  110.324636][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'.
[  110.552295][ T9017] IPVS: sh: FWM 3 0x00000003 - no destination available
[  110.555182][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  110.612198][ T9019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  111.218434][ T9043] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1359'.
[  111.549873][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'.
[  111.553093][ T9069] sctp: [Deprecated]: syz.0.1368 (pid 9069) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.553093][ T9069] Use struct sctp_sack_info instead
[  111.642250][ T9078] validate_nla: 22 callbacks suppressed
[  111.642264][ T9078] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  111.655081][ T9078] netlink: 'syz.1.1376': attribute type 10 has an invalid length.
[  111.658627][ T9078] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1376'.
[  111.749672][ T9086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1380'.
[  111.951105][ T9100] Cannot find add_set index 4 as target
[  112.108994][ T9116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.298641][ T9138] netlink: 'syz.2.1403': attribute type 1 has an invalid length.
[  112.341350][ T9138] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  112.346989][ T9138] syz_tun: left allmulticast mode
[  112.349431][ T9138] syz_tun: left promiscuous mode
[  112.354888][ T9138] bridge0: port 3(syz_tun) entered disabled state
[  112.368520][ T9138] team0: Port device bond0 removed
[  112.374633][ T9138] bridge_slave_0: left allmulticast mode
[  112.378602][ T9144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1406'.
[  112.380390][ T9138] bridge_slave_0: left promiscuous mode
[  112.391628][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.397508][ T9138] bridge_slave_1: left allmulticast mode
[  112.399586][ T9138] bridge_slave_1: left promiscuous mode
[  112.401495][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.408760][ T9138] bond0: (slave bond_slave_0): Releasing backup interface
[  112.414301][ T9138] bond0: (slave bond_slave_1): Releasing backup interface
[  112.422254][ T9138] team0: Port device team_slave_0 removed
[  112.432200][ T9138] team0: Port device team_slave_1 removed
[  112.434466][ T9138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.438050][ T9138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.441395][ T9138] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  112.446748][ T9138] bridge0: port 4(netdevsim0) entered disabled state
[  112.452960][ T9138] bond0: (slave wlan1): Releasing backup interface
[  112.466148][ T9138] bond1: (slave ip6gretap1): Releasing backup interface
[  112.671198][ T9170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.678060][ T9170] syzkaller0: entered promiscuous mode
[  112.690263][ T9170] syzkaller0: entered allmulticast mode
[  112.722945][ T9170] sch_fq: defrate 257 ignored.
[  112.727382][ T9170] tipc: Resetting bearer <eth:syzkaller0>
[  112.731298][ T9169] tipc: Resetting bearer <eth:syzkaller0>
[  112.743223][ T9169] tipc: Disabling bearer <eth:syzkaller0>
[  112.831026][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'.
[  112.836597][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  112.859020][ T9185] lo speed is unknown, defaulting to 1000
[  112.861366][ T9185] lo speed is unknown, defaulting to 1000
[  112.869432][ T9185] lo speed is unknown, defaulting to 1000
[  112.876333][ T9185] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.895077][ T9185] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  112.931945][ T9185] lo speed is unknown, defaulting to 1000
[  112.939825][ T9185] lo speed is unknown, defaulting to 1000
[  112.946143][ T9185] lo speed is unknown, defaulting to 1000
[  113.164575][ T9221] netlink: 'syz.1.1439': attribute type 21 has an invalid length.
[  113.196440][ T9216] netlink: 'syz.0.1436': attribute type 1 has an invalid length.
[  113.199631][ T9216] netlink: 'syz.0.1436': attribute type 1 has an invalid length.
[  113.252897][ T9229] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  113.407054][ T9236] netlink: 'syz.0.1445': attribute type 8 has an invalid length.
[  113.637311][ T9252] netlink: 'syz.2.1452': attribute type 1 has an invalid length.
[  113.885028][ T9266] __nla_validate_parse: 6 callbacks suppressed
[  113.885037][ T9266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'.
[  114.126964][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'.
[  114.175868][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  114.302605][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'.
[  114.406692][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'.
[  114.977879][ T9331] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[  115.325204][ T9345] netlink: 'syz.2.1493': attribute type 1 has an invalid length.
[  115.327909][ T9345] netlink: 'syz.2.1493': attribute type 10 has an invalid length.
[  115.331157][ T9345] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1493'.
[  115.388335][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1494'.
[  115.458992][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'.
[  115.467440][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'.
[  115.565277][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'.
[  115.977619][ T9397] block nbd0: Unsupported socket: shutdown callout must be supported.
[  115.997254][   T55] Bluetooth: hci2: link tx timeout
[  115.999939][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.099615][ T5837] Bluetooth: hci2: link tx timeout
[  116.103732][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.143940][ T5837] Bluetooth: hci2: link tx timeout
[  116.146164][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.149241][ T5837] Bluetooth: hci2: link tx timeout
[  116.151224][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.363214][ T9427] syzkaller1: entered promiscuous mode
[  116.365163][ T9427] syzkaller1: entered allmulticast mode
[  116.419059][ T9431] lo speed is unknown, defaulting to 1000
[  116.922043][ T5837] Bluetooth: hci2: link tx timeout
[  116.923764][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.007982][ T9459] SET target dimension over the limit!
[  117.165286][ T5837] Bluetooth: hci2: link tx timeout
[  117.167141][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.457615][ T5837] Bluetooth: hci2: link tx timeout
[  117.459838][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.490728][ T9511] syzkaller0: entered allmulticast mode
[  117.704614][ T5837] Bluetooth: hci2: link tx timeout
[  117.706986][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.872697][ T5837] Bluetooth: hci2: link tx timeout
[  117.874444][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.904502][ T9546] lo speed is unknown, defaulting to 1000
[  118.031978][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  118.720899][ T9578] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[  119.900897][ T9630] validate_nla: 2 callbacks suppressed
[  119.900907][ T9630] netlink: 'syz.2.1592': attribute type 5 has an invalid length.
[  119.905367][ T9630] netlink: 'syz.2.1592': attribute type 7 has an invalid length.
[  119.942242][ T9630] : entered promiscuous mode
[  119.999072][ T9632] netlink: 'syz.2.1593': attribute type 3 has an invalid length.
[  120.155944][ T9632] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  120.309190][ T9649] netlink: 'syz.0.1601': attribute type 10 has an invalid length.
[  120.312835][ T9649] __nla_validate_parse: 11 callbacks suppressed
[  120.312844][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1601'.
[  120.318579][ T9649] bridge0: port 3(dummy0) entered blocking state
[  120.321554][ T9649] bridge0: port 3(dummy0) entered disabled state
[  120.325465][ T9649] dummy0: entered allmulticast mode
[  120.329373][ T9649] dummy0: entered promiscuous mode
[  120.334398][ T9649] bridge0: port 3(dummy0) entered blocking state
[  120.337162][ T9649] bridge0: port 3(dummy0) entered listening state
[  120.433278][ T9657] lo speed is unknown, defaulting to 1000
[  121.255904][ T9674] tipc: New replicast peer: 255.255.255.255
[  121.259249][ T9674] tipc: Enabled bearer <udp:syz2>, priority 10
[  121.455420][ T9688] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1618'.
[  121.476816][ T9688] batadv1: entered promiscuous mode
[  121.478923][ T9688] batadv1: entered allmulticast mode
[  121.563574][ T9698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1618'.
[  121.571060][ T9692] bridge0: port 3(dummy0) entered disabled state
[  121.574082][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.577392][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.683770][ T9692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.784171][ T5861] bond1: (slave batadv_slave_1): link status definitely down, disabling slave
[  121.789670][ T5861] bond1: now running without any active interface!
[  121.950304][ T9720] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  121.978185][ T9722] lo speed is unknown, defaulting to 1000
[  122.259881][ T9749] netlink: 'syz.2.1646': attribute type 33 has an invalid length.
[  122.273394][ T9749] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1646'.
[  122.307321][ T9751] netlink: 'syz.1.1647': attribute type 4 has an invalid length.
[  122.316564][ T9751] netlink: 'syz.1.1647': attribute type 4 has an invalid length.
[  122.324852][ T9753] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1648'.
[  122.329004][ T9753] ip6gretap0: entered promiscuous mode
[  122.342319][ T9753] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1648'.
[  122.449361][ T9761] ..@: renamed from bond_slave_0
[  122.853067][ T9784] netlink: 'syz.2.1661': attribute type 1 has an invalid length.
[  122.913570][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'.
[  122.925230][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'.
[  122.977585][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'.
[  123.175004][ T9814] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  123.596887][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'.
[  123.597705][ T9861] bond0: option ad_select: unable to set because the bond device is up
[  123.674906][ T9872] netlink: 'syz.1.1705': attribute type 14 has an invalid length.
[  123.734505][ T9872] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.012684][ T9918] netlink: 'syz.2.1724': attribute type 3 has an invalid length.
[  124.075309][ T9921] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.284760][ T9938] blkio.reset_stats is deprecated
[  124.837508][ T9973] pimreg: entered allmulticast mode
[  124.862645][ T9973] pimreg: left allmulticast mode
[  125.666443][ T9978] __nla_validate_parse: 4 callbacks suppressed
[  125.666459][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1746'.
[  125.682390][ T9978] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1746'.
[  125.859054][T10000] vlan2: entered allmulticast mode
[  125.860745][T10000] bond0: entered allmulticast mode
[  125.868806][T10000] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  126.088827][T10029] validate_nla: 1 callbacks suppressed
[  126.088837][T10029] netlink: 'syz.2.1771': attribute type 12 has an invalid length.
[  126.150438][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'.
[  126.259375][T10039] IPVS: Error connecting to the multicast addr
[  126.623569][T10064] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1786'.
[  127.715126][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'.
[  127.744513][T10094] Bluetooth: MGMT ver 1.23
[  127.905772][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'.
[  127.985409][T10114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.111842][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  128.429425][T10160] syzkaller1: entered promiscuous mode
[  128.441441][T10160] syzkaller1: entered allmulticast mode
[  128.613896][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'.
[  128.649486][T10174] geneve2: entered promiscuous mode
[  129.116828][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  129.373798][T10223] netlink: 'syz.2.1847': attribute type 1 has an invalid length.
[  129.637346][T10252] geneve2: entered promiscuous mode
[  129.700132][T10262] nbd: must specify an index to disconnect
[  129.765282][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'.
[  129.805323][T10275] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  129.873371][T10284] xt_bpf: check failed: parse error
[  129.948870][T10288] syzkaller0: entered promiscuous mode
[  129.950657][T10288] syzkaller0: entered allmulticast mode
[  131.013951][T10316] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1891'.
[  131.031216][T10317] pim6reg1: entered promiscuous mode
[  131.038935][T10317] pim6reg1: entered allmulticast mode
[  131.053241][T10321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1893'.
[  131.201143][T10337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1901'.
[  131.526044][T10386] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  131.648029][T10398] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1932'.
[  131.653521][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'.
[  131.656741][T10399] openvswitch: netlink: Unknown nsh attribute 0
[  131.659051][T10399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.777837][T10411] block nbd2: NBD_DISCONNECT
[  131.837809][T10420] netlink: 'syz.1.1942': attribute type 1 has an invalid length.
[  131.840398][T10420] netlink: 'syz.1.1942': attribute type 2 has an invalid length.
[  132.001095][T10426] lo speed is unknown, defaulting to 1000
[  132.280191][T10448] netlink: 'syz.2.1954': attribute type 1 has an invalid length.
[  132.283833][T10448] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1954'.
[  132.287833][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1954'.
[  132.436827][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.629959][T10471] netlink: 'syz.2.1963': attribute type 11 has an invalid length.
[  132.635781][T10471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1963'.
[  132.677749][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'.
[  133.147104][T10486] gre0: entered allmulticast mode
[  133.796301][T10511] syz_tun: entered allmulticast mode
[  133.798539][T10511] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  133.828234][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'.
[  133.912650][T10519] netlink: 'syz.0.1986': attribute type 1 has an invalid length.
[  134.045774][T10529] netlink: 'syz.0.1991': attribute type 29 has an invalid length.
[  134.049389][T10529] netlink: 'syz.0.1991': attribute type 29 has an invalid length.
[  134.324758][T10557] syzkaller0: entered promiscuous mode
[  134.327373][T10557] syzkaller0: entered allmulticast mode
[  135.216098][T10564] lo speed is unknown, defaulting to 1000
[  135.240301][T10573] openvswitch: netlink: Actions may not be safe on all matching packets
[  135.435740][T10586] C: renamed from team_slave_0
[  135.441610][T10586] netlink: 'syz.0.2016': attribute type 4 has an invalid length.
[  135.445407][T10586] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  135.685325][T10610] netlink: 'syz.0.2028': attribute type 32 has an invalid length.
[  136.069600][T10652] __nla_validate_parse: 9 callbacks suppressed
[  136.069610][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  136.417032][T10677] netlink: 'syz.2.2055': attribute type 26 has an invalid length.
[  136.764187][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[  136.767909][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'.
[  136.775680][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'.
[  137.056686][T10722] Cannot find add_set index 3 as target
[  137.112203][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2077'.
[  137.423578][T10760] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2094'.
[  137.426583][T10760] netlink: zone id is out of range
[  137.437298][T10760] netlink: zone id is out of range
[  137.439227][T10760] netlink: zone id is out of range
[  137.440898][T10760] netlink: zone id is out of range
[  137.447918][T10760] netlink: zone id is out of range
[  137.450080][T10760] netlink: zone id is out of range
[  137.452770][T10760] netlink: zone id is out of range
[  137.504971][T10768] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2098'.
[  137.694553][T10796] sctp: [Deprecated]: syz.2.2111 (pid 10796) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.694553][T10796] Use struct sctp_sack_info instead
[  137.750191][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'.
[  137.826298][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'.
[  137.829927][T10813] netlink: 'syz.2.2121': attribute type 30 has an invalid length.
[  137.885754][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'.
[  137.890056][T10813] netlink: 'syz.2.2121': attribute type 30 has an invalid length.
[  137.974885][T10822] netlink: 'syz.2.2123': attribute type 1 has an invalid length.
[  138.121130][T10833] netlink: 'syz.2.2128': attribute type 1 has an invalid length.
[  138.504094][T10849] IPVS: Error joining to the multicast group
[  138.703019][T10855] xt_CT: No such helper "syz0"
[  138.895225][T10876] netlink: 'syz.2.2148': attribute type 15 has an invalid length.
[  139.227203][T10907] netlink: 'syz.2.2163': attribute type 1 has an invalid length.
[  139.732451][T10927] gre0: left allmulticast mode
[  139.775324][T10927] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  139.787000][T10927] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.790121][T10927] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.793161][T10927] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.796238][T10927] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.824408][   T95] lo speed is unknown, defaulting to 1000
[  139.830546][   T95] syz1: Port: 1 Link DOWN
[  140.015849][T10941] netlink: 'syz.2.2179': attribute type 1 has an invalid length.
[  140.045622][T10946] netlink: 'syz.1.2181': attribute type 11 has an invalid length.
[  140.050674][T10941] bond3 (unregistering): Released all slaves
[  140.287115][T10955] vlan2: entered promiscuous mode
[  140.290969][T10955] bridge0: port 4(vlan2) entered blocking state
[  140.294485][T10955] bridge0: port 4(vlan2) entered disabled state
[  140.297234][T10955] vlan2: entered allmulticast mode
[  140.863799][T11000] nftables ruleset with unbound chain
[  140.986452][T11007] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  141.110695][T11014] __nla_validate_parse: 13 callbacks suppressed
[  141.110705][T11014] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2201'.
[  141.642910][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'.
[  141.892865][T11046] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  142.278941][T11085] netlink: 'syz.2.2235': attribute type 2 has an invalid length.
[  142.568187][T11109] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2247'.
[  142.574735][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2246'.
[  142.607330][T11113] lo speed is unknown, defaulting to 1000
[  142.777238][T11113] netlink: 'syz.2.2248': attribute type 13 has an invalid length.
[  142.785186][T11113] net_ratelimit: 159 callbacks suppressed
[  142.785195][T11113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  142.801872][T11113] syz.2.2248 (11113) used greatest stack depth: 19672 bytes left
[  143.143374][T11137] validate_nla: 1 callbacks suppressed
[  143.143390][T11137] netlink: 'syz.2.2258': attribute type 1 has an invalid length.
[  143.157995][T11137] NCSI netlink: No device for ifindex 0
[  143.216916][T11143] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2260'.
[  143.642718][T11168] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2269'.
[  143.642849][T11167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2272'.
[  143.777029][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'.
[  143.877081][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'.
[  143.900155][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'.
[  144.251590][T11198] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  144.272960][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  144.327770][   T33] audit: type=1800 audit(1753187980.186:4): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2290" name=33FFFF dev="tmpfs" ino=3481 res=0 errno=0
[  144.820643][T11261] netlink: 'syz.0.2317': attribute type 1 has an invalid length.
[  145.091346][T11298] lo speed is unknown, defaulting to 1000
[  145.121371][T11301] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  145.325859][T11298] bridge0: port 3(dummy0) entered disabled state
[  145.557955][T11325] netlink: 'syz.1.2347': attribute type 3 has an invalid length.
[  146.046612][ T7829] vlan2 (unregistering): left allmulticast mode
[  146.053128][ T7829] dummy0 (unregistering): left allmulticast mode
[  146.063539][ T7829] bridge0: port 4(vlan2) entered disabled state
[  146.480398][T11333] netlink: 'syz.0.2351': attribute type 39 has an invalid length.
[  146.575944][T11339] xt_TCPMSS: Only works on TCP SYN packets
[  146.786007][T11360] netlink: 'syz.1.2363': attribute type 1 has an invalid length.
[  146.799116][T11360] bond6: entered promiscuous mode
[  146.801035][T11360] 8021q: adding VLAN 0 to HW filter on device bond6
[  146.816036][T11360] 8021q: adding VLAN 0 to HW filter on device bond6
[  146.818712][T11360] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  146.822532][T11360] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  146.831000][T11360] bond6: (slave vcan1): making interface the new active one
[  146.837846][T11360] vcan1: entered promiscuous mode
[  146.840827][T11360] bond6: (slave vcan1): Enslaving as an active interface with an up link
[  146.926929][T11371] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  146.974696][T11377] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  146.977866][T11377] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  147.025915][T11382] __nla_validate_parse: 12 callbacks suppressed
[  147.025930][T11382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2370'.
[  147.647014][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2389'.
[  147.848347][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'.
[  147.868444][T11433] macvtap1: entered promiscuous mode
[  147.870853][T11433] bridge0: entered promiscuous mode
[  147.873054][T11433] macvtap1: entered allmulticast mode
[  147.874772][T11433] bridge0: entered allmulticast mode
[  147.881228][T11433] bridge0: left allmulticast mode
[  147.885450][T11433] bridge0: left promiscuous mode
[  147.941887][T11442] netlink: 'syz.2.2402': attribute type 1 has an invalid length.
[  147.963847][T11442] bond3: entered promiscuous mode
[  147.965721][T11442] bond3: entered allmulticast mode
[  147.976233][T11444] batman_adv: batadv0: Adding interface: dummy0
[  147.978309][T11444] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.990002][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'.
[  147.994106][T11444] batman_adv: batadv0: Interface activated: dummy0
[  148.002445][T11442] bridge3: the hash_elasticity option has been deprecated and is always 16
[  148.006713][T11442] bond3: (slave bridge3): making interface the new active one
[  148.009202][T11442] bridge3: entered promiscuous mode
[  148.011399][T11442] bridge3: entered allmulticast mode
[  148.013922][T11442] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  148.026687][T11444] batadv0: mtu less than device minimum
[  148.029633][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.034625][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.038483][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.042929][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.046807][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.050528][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.054866][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.058670][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.062711][T11444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.227054][T11466] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2413'.
[  148.315273][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2416'.
[  148.497431][T11496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2428'.
[  148.656742][T11511] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.667677][T11511] bond0: (slave rose0): Enslaving as an active interface with an up link
[  148.790658][T11523] pimreg: entered allmulticast mode
[  150.530522][T11613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2472'.
[  150.543752][T11613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2472'.
[  150.906325][T11650] netlink: 'syz.2.2489': attribute type 7 has an invalid length.
[  150.942085][T11652] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2490'.
[  151.156448][T11666] syzkaller0: entered promiscuous mode
[  151.158666][T11666] syzkaller0: entered allmulticast mode
[  152.227418][T11690] netlink: 'syz.1.2508': attribute type 4 has an invalid length.
[  152.286832][T11696] lo speed is unknown, defaulting to 1000
[  152.806714][T11745] lo speed is unknown, defaulting to 1000
[  152.855781][T11753] bridge4: entered promiscuous mode
[  152.857692][T11753] bridge4: entered allmulticast mode
[  153.659587][T11772] __nla_validate_parse: 6 callbacks suppressed
[  153.659597][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2545'.
[  153.961966][T11798] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  154.020008][T11802] lo speed is unknown, defaulting to 1000
[  154.147015][T11818] netlink: 'syz.1.2566': attribute type 64 has an invalid length.
[  155.204526][T11852] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2582'.
[  155.208242][T11852] tc_dump_action: action bad kind
[  155.232979][T11854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2583'.
[  155.604968][T11884] netlink: 'syz.2.2598': attribute type 10 has an invalid length.
[  155.608033][T11884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2598'.
[  155.632881][T11884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.636020][T11884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.639423][T11884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.643874][T11884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.655372][T11884] team0: Port device geneve0 added
[  155.811617][T11897] vlan2: entered promiscuous mode
[  155.815774][T11897] gretap0: entered promiscuous mode
[  156.033852][   T55] Bluetooth: hci0: command tx timeout
[  157.377323][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2624'.
[  157.380948][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2624'.
[  157.653481][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2636'.
[  157.657193][T11967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2636'.
[  157.661238][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2636'.
[  157.668975][T11967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2636'.
[  157.733214][T11975] netlink: 'syz.2.2632': attribute type 20 has an invalid length.
[  158.088629][T11994] netlink: 'syz.1.2648': attribute type 1 has an invalid length.
[  158.932663][T12043] delete_channel: no stack
[  159.090014][T12054] syzkaller1: entered promiscuous mode
[  159.092025][T12054] syzkaller1: entered allmulticast mode
[  159.343005][T12066] netlink: 'syz.0.2682': attribute type 1 has an invalid length.
[  159.445106][T12072] netlink: 'syz.0.2685': attribute type 30 has an invalid length.
[  159.917667][T12108] __nla_validate_parse: 2 callbacks suppressed
[  159.917676][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'.
[  160.054562][T12125] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.061376][T12125] netlink: 'syz.2.2710': attribute type 2 has an invalid length.
[  160.129153][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2715'.
[  160.360353][T12158] netlink: 'syz.0.2720': attribute type 16 has an invalid length.
[  160.363921][T12158] netlink: 'syz.0.2720': attribute type 17 has an invalid length.
[  160.437388][T12158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.441335][T12158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.448066][T12158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.451085][T12158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.456909][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'.
[  160.488498][T12158] IPv6: NLM_F_REPLACE set, but no existing node found!
[  160.588295][T12164] ipt_rpfilter: unknown options
[  160.646372][T12166] netlink: 'syz.2.2724': attribute type 1 has an invalid length.
[  160.706839][T12166] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.729537][T12166] veth7: entered promiscuous mode
[  160.737842][T12166] bond4: (slave veth7): Enslaving as a backup interface with a down link
[  160.796189][T12166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.799485][T12166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.802994][T12166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.806294][T12166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.813583][T12166] team0: Port device geneve0 removed
[  160.819211][T12166] bond3: (slave bridge3): Releasing active interface
[  160.831838][T12166] bridge3: left promiscuous mode
[  160.834720][T12166] bridge3: left allmulticast mode
[  160.840219][T12166] bond4: (slave veth7): Releasing backup interface
[  161.004876][T12175] syzkaller1: entered promiscuous mode
[  161.006779][T12175] syzkaller1: entered allmulticast mode
[  161.237726][T12193] netlink: 'syz.2.2735': attribute type 1 has an invalid length.
[  161.249236][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2734'.
[  161.805591][T12258] netlink: 'syz.0.2765': attribute type 2 has an invalid length.
[  161.809198][T12258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2765'.
[  161.865053][T12264] team0: No ports can be present during mode change
[  162.134061][T12292] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2779'.
[  162.397843][T12305] veth0: entered promiscuous mode
[  162.404380][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'.
[  162.445228][T12305] veth0 (unregistering): left promiscuous mode
[  162.969671][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2790'.
[  163.373036][T12361] net_ratelimit: 10 callbacks suppressed
[  163.373047][T12361] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  163.458549][T12371] lo speed is unknown, defaulting to 1000
[  163.560918][T12383] sctp: [Deprecated]: syz.1.2818 (pid 12383) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.560918][T12383] Use struct sctp_sack_info instead
[  163.781477][T12389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.114327][T12399] bridge_slave_0: left allmulticast mode
[  164.116555][T12399] bridge_slave_0: left promiscuous mode
[  164.120631][T12399] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.131236][T12399] bridge_slave_1: left allmulticast mode
[  164.138006][T12399] bridge_slave_1: left promiscuous mode
[  164.140873][T12399] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.149949][T12399] team0: Port device C removed
[  164.154385][T12399] team0: Port device team_slave_1 removed
[  164.157253][T12399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.162698][T12399] bond1: (slave batadv_slave_1): Releasing active interface
[  164.168381][T12399] team0: Port device bridge2 removed
[  164.258412][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'.
[  164.567535][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2828'.
[  164.810680][T12424] netlink: 'syz.0.2832': attribute type 11 has an invalid length.
[  165.350911][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2846'.
[  165.683463][T12483] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  165.776260][T12493] SET target dimension over the limit!
[  165.869463][T12503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2864'.
[  166.064973][T12523] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  166.264769][T12538] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2879'.
[  166.268553][T12538] validate_nla: 1 callbacks suppressed
[  166.268560][T12538] netlink: 'syz.1.2879': attribute type 29 has an invalid length.
[  166.418588][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2883'.
[  167.338915][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'.
[  167.410639][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'.
[  167.414203][T12590] netlink: 'syz.1.2899': attribute type 30 has an invalid length.
[  167.417129][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2899'.
[  167.455524][T12594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2901'.
[  167.542246][T12606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.627030][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'.
[  167.630249][T12612] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2910'.
[  167.682870][T12614] xfrm2: entered promiscuous mode
[  167.685721][T12614] xfrm2: entered allmulticast mode
[  167.705988][T12614] xt_hashlimit: size too large, truncated to 1048576
[  167.786702][T12618] netlink: 'syz.2.2912': attribute type 1 has an invalid length.
[  167.809600][T12618] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  167.813165][T12618] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  167.817974][T12618] bond5: (slave vti0): making interface the new active one
[  167.821474][T12618] bond5: (slave vti0): Enslaving as an active interface with an up link
[  168.116486][T12641] netlink: 'syz.0.2918': attribute type 10 has an invalid length.
[  168.442563][T12656] netlink: 'syz.2.2929': attribute type 32 has an invalid length.
[  168.445499][T12656] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  168.520903][T12665] netlink: 'syz.2.2933': attribute type 1 has an invalid length.
[  168.583783][T12673] xt_TCPMSS: Only works on TCP SYN packets
[  168.590047][T12671] netlink: 'syz.1.2936': attribute type 1 has an invalid length.
[  168.889203][T12701] vlan0: entered promiscuous mode
[  168.955639][T12709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.958045][T12709] IPv6: NLM_F_CREATE should be set when creating new route
[  168.960412][T12709] IPv6: NLM_F_CREATE should be set when creating new route
[  169.019292][T12719] netlink: 'syz.0.2960': attribute type 1 has an invalid length.
[  169.037981][T12719] 8021q: adding VLAN 0 to HW filter on device bond3
[  169.055392][T12719] bond3: (slave ip6erspan0): making interface the new active one
[  169.062638][T12719] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  169.110668][T12727] delete_channel: no stack
[  169.154171][T12735] ieee802154 phy0 wpan0: encryption failed: -22
[  169.234600][T12745] 
[  169.235662][T12745] =============================
[  169.237317][T12745] WARNING: suspicious RCU usage
[  169.238894][T12745] 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 Not tainted
[  169.243132][T12745] -----------------------------
[  169.245252][T12745] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[  169.249390][T12745] 
[  169.249390][T12745] other info that might help us debug this:
[  169.249390][T12745] 
[  169.254147][T12745] 
[  169.254147][T12745] rcu_scheduler_active = 2, debug_locks = 1
[  169.257089][T12745] 1 lock held by syz.2.2973/12745:
[  169.258818][T12745]  #0: ffffffff8e13f2c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  169.263185][T12745] 
[  169.263185][T12745] stack backtrace:
[  169.265790][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.2.2973 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  169.265807][T12745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.265815][T12745] Call Trace:
[  169.265822][T12745]  <TASK>
[  169.265828][T12745]  dump_stack_lvl+0x189/0x250
[  169.265849][T12745]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.265865][T12745]  ? __pfx__printk+0x10/0x10
[  169.265885][T12745]  ? print_lock_name+0xde/0x100
[  169.265907][T12745]  lockdep_rcu_suspicious+0x140/0x1d0
[  169.265926][T12745]  task_cls_state+0x1a5/0x1d0
[  169.265940][T12745]  bpf_get_cgroup_classid_curr+0x18/0x60
[  169.265956][T12745]  bpf_prog_841aec7193f618b3+0x1b/0x21
[  169.265967][T12745]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[  169.265988][T12745]  bpf_prog_test_run_syscall+0x312/0x4b0
[  169.266007][T12745]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  169.266050][T12745]  ? __fget_files+0x2a/0x420
[  169.266068][T12745]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  169.266087][T12745]  bpf_prog_test_run+0x2c7/0x340
[  169.266104][T12745]  __sys_bpf+0x4a4/0x860
[  169.266126][T12745]  ? __pfx___sys_bpf+0x10/0x10
[  169.266155][T12745]  ? exc_page_fault+0x76/0xf0
[  169.266171][T12745]  ? rcu_is_watching+0x15/0xb0
[  169.266192][T12745]  __x64_sys_bpf+0x7c/0x90
[  169.266210][T12745]  do_syscall_64+0xfa/0x3b0
[  169.266223][T12745]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.266235][T12745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.266247][T12745]  ? exc_page_fault+0x9f/0xf0
[  169.266263][T12745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.266274][T12745] RIP: 0033:0x7f90ff18e9a9
[  169.266285][T12745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.266296][T12745] RSP: 002b:00007f90feff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  169.266309][T12745] RAX: ffffffffffffffda RBX: 00007f90ff3b5fa0 RCX: 00007f90ff18e9a9
[  169.266318][T12745] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[  169.266326][T12745] RBP: 00007f90ff210d69 R08: 0000000000000000 R09: 0000000000000000
[  169.266333][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.266339][T12745] R13: 0000000000000000 R14: 00007f90ff3b5fa0 R15: 00007ffef555ee28
[  169.266359][T12745]  </TASK>
[  175.971954][   T55] Bluetooth: hci2: link tx timeout
[  175.973825][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  178.032487][   T55] Bluetooth: hci2: command 0x0406 tx timeout

VM DIAGNOSIS:
12:40:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000fa7 RDI=0000000000000fa8 RBP=00000000000003f8 RSP=ffffc900046b7550
R8 =ffff888108af8237 R9 =1ffff1102115f046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18bf R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f90feff76c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3061fffc CR3=000000003aac2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f90ff386478 00007f90ff386450 XMM03=00007f90ff386488 00007f90ff386480
XMM04=00007f90ffeed100 00007f90ff386440 XMM05=00007f90ff386458 00007f90ff3864a0
XMM06=00007f90ff386498 00007f90ff386490 XMM07=00007f90ff386488 00007f90ff386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f90ff211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000447ce80 RBX=ffffc90007177c78 RCX=ffffea000447ce01 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff888111f3a000 RSP=ffffc90007177c40
R8 =ffffffff8fa1d6f7 R9 =1ffffffff1f43ade R10=dffffc0000000000 R11=fffffbfff1f43adf
R12=ffffea0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888111f3a000
RIP=ffffffff82224c96 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555572935500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007faba32e56c0 CR3=000000003aac0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007faba2611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
