last executing test programs:

680.520293ms ago: executing program 1 (id=2459):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x20000092, '\x00'/12}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

680.346438ms ago: executing program 1 (id=2460):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)

610.99669ms ago: executing program 1 (id=2463):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x12)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)

389.784887ms ago: executing program 0 (id=2473):
r0 = socket(0x2, 0x80805, 0x0)
unshare(0x2c020400)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0)

340.518075ms ago: executing program 0 (id=2476):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dcda0c8f9c7011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b68705ec32080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee8540ab4106286e0f7568f6a9cd0c0da51df08e42848496b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffd}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0)

339.309455ms ago: executing program 1 (id=2477):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
unshare(0x4000400)
ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0)

260.699131ms ago: executing program 1 (id=2480):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)

211.089798ms ago: executing program 0 (id=2481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2)

129.799579ms ago: executing program 0 (id=2483):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8800)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x24004800)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

129.527482ms ago: executing program 2 (id=2484):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)

129.447782ms ago: executing program 2 (id=2485):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x4c, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x4c}, 0x4, 0x700000000000000}, 0x0)

85.390106ms ago: executing program 2 (id=2486):
syz_emit_ethernet(0x11, &(0x7f0000001480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@llc={0x4, {@llc={0xdc, 0x0, "85"}}}}}, 0x0)

85.250488ms ago: executing program 2 (id=2487):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYBLOB="020000000a0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0)

575.436µs ago: executing program 2 (id=2488):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x610c40, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

302.273µs ago: executing program 0 (id=2489):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0)

231.511µs ago: executing program 1 (id=2490):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

120.022µs ago: executing program 0 (id=2491):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c084)

0s ago: executing program 2 (id=2492):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18388' (ED25519) to the list of known hosts.
syzkaller login: [   49.014273][ T5770] cgroup: Unknown subsys name 'net'
[   49.125052][ T5770] cgroup: Unknown subsys name 'cpuset'
[   49.138728][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.943603][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.565035][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.568429][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.571436][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.575357][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.578211][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.581210][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.584732][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.588663][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.588708][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.592458][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.680914][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.683904][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.687081][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.690969][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.694925][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.844189][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   55.964471][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.968320][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.972166][ T5840] bridge_slave_0: entered allmulticast mode
[   55.976154][ T5840] bridge_slave_0: entered promiscuous mode
[   55.985091][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.988206][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.991709][ T5840] bridge_slave_1: entered allmulticast mode
[   55.995479][ T5840] bridge_slave_1: entered promiscuous mode
[   56.044315][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.054286][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.079185][ T5840] team0: Port device team_slave_0 added
[   56.086331][ T5840] team0: Port device team_slave_1 added
[   56.092724][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   56.177644][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.190831][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.201703][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.221927][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.224366][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.233710][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.263041][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.300197][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.305214][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.308435][ T5838] bridge_slave_0: entered allmulticast mode
[   56.312674][ T5838] bridge_slave_0: entered promiscuous mode
[   56.340712][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.343767][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.346488][ T5838] bridge_slave_1: entered allmulticast mode
[   56.350132][ T5838] bridge_slave_1: entered promiscuous mode
[   56.372683][ T5840] hsr_slave_0: entered promiscuous mode
[   56.375271][ T5840] hsr_slave_1: entered promiscuous mode
[   56.420579][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.445921][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.487448][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.491056][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.494200][ T5848] bridge_slave_0: entered allmulticast mode
[   56.498128][ T5848] bridge_slave_0: entered promiscuous mode
[   56.503546][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.506632][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.509945][ T5848] bridge_slave_1: entered allmulticast mode
[   56.514338][ T5848] bridge_slave_1: entered promiscuous mode
[   56.527041][ T5838] team0: Port device team_slave_0 added
[   56.530875][ T5838] team0: Port device team_slave_1 added
[   56.577640][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.590883][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.595224][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.597726][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.608267][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.613828][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.616655][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.626919][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.671418][ T5848] team0: Port device team_slave_0 added
[   56.692224][ T5848] team0: Port device team_slave_1 added
[   56.716973][ T5838] hsr_slave_0: entered promiscuous mode
[   56.720392][ T5838] hsr_slave_1: entered promiscuous mode
[   56.723191][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   56.725602][ T5838] Cannot create hsr debugfs directory
[   56.752896][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.755716][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.766952][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.792422][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.794855][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.804570][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.872288][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.894074][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.902002][ T5848] hsr_slave_0: entered promiscuous mode
[   56.904806][ T5848] hsr_slave_1: entered promiscuous mode
[   56.907465][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   56.909848][ T5848] Cannot create hsr debugfs directory
[   56.919398][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.942420][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.068250][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.097543][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.123004][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.129646][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.226274][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.239853][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.245635][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.254751][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.269693][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.295924][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   57.305187][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.322639][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.325281][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.339219][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.342434][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.354748][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   57.390798][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.394011][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.408139][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.410618][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.501817][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.531706][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.565166][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.568180][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.574991][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.578031][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.653699][ T5235] Bluetooth: hci0: command tx timeout
[   57.656273][ T5235] Bluetooth: hci1: command tx timeout
[   57.722408][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.731982][ T5845] Bluetooth: hci2: command tx timeout
[   57.765567][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.806583][ T5840] veth0_vlan: entered promiscuous mode
[   57.835868][ T5840] veth1_vlan: entered promiscuous mode
[   57.845277][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.873482][ T5838] veth0_vlan: entered promiscuous mode
[   57.902355][ T5838] veth1_vlan: entered promiscuous mode
[   57.915121][ T5848] veth0_vlan: entered promiscuous mode
[   57.926713][ T5840] veth0_macvtap: entered promiscuous mode
[   57.942622][ T5840] veth1_macvtap: entered promiscuous mode
[   57.945859][ T5848] veth1_vlan: entered promiscuous mode
[   57.958721][ T5838] veth0_macvtap: entered promiscuous mode
[   57.966236][ T5838] veth1_macvtap: entered promiscuous mode
[   57.974653][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.986003][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.000399][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.004281][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.007759][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.016397][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.027041][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.042316][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.045727][ T5848] veth0_macvtap: entered promiscuous mode
[   58.058925][ T5848] veth1_macvtap: entered promiscuous mode
[   58.069224][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.074758][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.090106][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.095933][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.118023][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.146676][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.165177][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.188576][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.212941][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.213413][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.216415][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.228938][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.246184][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.250672][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.300195][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.306621][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.342284][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.345890][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.381990][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.382088][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.385341][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.467850][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.478307][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.696614][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.133183][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.191610][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   59.219465][ T5938] bridge_slave_1: left allmulticast mode
[   59.223396][ T5938] bridge_slave_1: left promiscuous mode
[   59.226671][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.237135][ T5938] bridge_slave_0: left allmulticast mode
[   59.239382][ T5938] bridge_slave_0: left promiscuous mode
[   59.242058][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.741068][ T5845] Bluetooth: hci1: command tx timeout
[   59.743496][ T5845] Bluetooth: hci0: command tx timeout
[   59.810719][ T5845] Bluetooth: hci2: command tx timeout
[   60.085322][ T5949] tipc: Started in network mode
[   60.087568][ T5949] tipc: Node identity 72e8395e240d, cluster identity 4711
[   60.091858][ T5949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.101647][ T5949] syzkaller0: entered promiscuous mode
[   60.104182][ T5949] syzkaller0: entered allmulticast mode
[   60.126028][ T5949] tipc: Resetting bearer <eth:syzkaller0>
[   60.130219][ T5948] tipc: Resetting bearer <eth:syzkaller0>
[   60.163278][ T5948] tipc: Disabling bearer <eth:syzkaller0>
[   60.487592][ T5965] Driver unsupported XDP return value 0 on prog  (id 8) dev N/A, expect packet loss!
[   60.701117][ T5973] batadv_slave_1: entered promiscuous mode
[   60.708003][ T5973] batman_adv: batadv0: Adding interface: macsec1
[   60.716438][ T5973] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.734414][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.739455][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.744927][ T5973] batman_adv: batadv0: Interface activated: macsec1
[   61.819175][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.833234][ T5845] Bluetooth: hci0: command tx timeout
[   61.835586][ T5845] Bluetooth: hci1: command tx timeout
[   61.892606][ T5845] Bluetooth: hci2: command tx timeout
[   62.000188][ T6059] warning: `syz.1.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.669070][ T6076] netlink: 312 bytes leftover after parsing attributes in process `syz.0.69'.
[   63.148189][ T6116] netlink: 292 bytes leftover after parsing attributes in process `syz.2.88'.
[   63.230274][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'.
[   63.396396][ T6130] sctp: [Deprecated]: syz.0.95 (pid 6130) Use of int in maxseg socket option.
[   63.396396][ T6130] Use struct sctp_assoc_value instead
[   63.452577][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.457878][ T6132] team0: Port device bond1 added
[   63.607107][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'.
[   63.894336][ T5845] Bluetooth: hci0: command tx timeout
[   63.894615][ T5235] Bluetooth: hci1: command tx timeout
[   63.969726][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'.
[   63.974053][ T5235] Bluetooth: hci2: command tx timeout
[   64.163037][ T6181] Zero length message leads to an empty skb
[   64.274874][ T6188] netlink: 44 bytes leftover after parsing attributes in process `syz.1.120'.
[   64.364608][ T6196] netlink: 'syz.0.125': attribute type 10 has an invalid length.
[   64.397718][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.419366][ T6196] team0: Port device bond0 added
[   64.562585][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.130'.
[   64.573379][ T6208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.130'.
[   64.576397][ T6208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.130'.
[   64.795032][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'.
[   65.019676][ T6247] netlink: 277 bytes leftover after parsing attributes in process `syz.0.146'.
[   65.630334][   T33] audit: type=1800 audit(1758547076.023:2): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.160" name="memory.events" dev="tmpfs" ino=208 res=0 errno=0
[   65.657730][   T33] audit: type=1804 audit(1758547076.053:3): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.160" name="/newroot/38/memory.events" dev="tmpfs" ino=208 res=1 errno=0
[   65.733842][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'.
[   65.793321][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   65.812917][ T6294] netlink: 'syz.1.162': attribute type 1 has an invalid length.
[   65.816245][ T6294] netlink: 'syz.1.162': attribute type 4 has an invalid length.
[   65.822068][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   65.873876][ T6305] netlink: 'syz.1.169': attribute type 1 has an invalid length.
[   66.032124][ T6319] gretap1: entered promiscuous mode
[   66.212497][ T6329] netlink: 'syz.1.180': attribute type 303 has an invalid length.
[   66.364959][ T6340] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   66.405154][ T6340] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.409864][ T6340] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   66.460439][ T6348] netlink: 'syz.1.186': attribute type 14 has an invalid length.
[   66.480186][ T6348] gretap1: entered promiscuous mode
[   66.487701][ T6348] bond2: (slave gretap1): making interface the new active one
[   66.494369][ T6348] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   66.528263][ T6340] macvlan2: entered promiscuous mode
[   66.531872][ T6340] macvlan2: entered allmulticast mode
[   66.534640][ T6340] bond2: entered promiscuous mode
[   66.537516][ T6340] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   66.553878][ T6340] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   66.560043][ T6340] bond2: left promiscuous mode
[   66.718088][ T6364] netlink: 'syz.1.193': attribute type 39 has an invalid length.
[   66.740170][ T6364] veth0_macvtap: left promiscuous mode
[   67.216244][ T6390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.256525][   T33] audit: type=1800 audit(1758547077.653:4): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.206" name="blkio.bfq.time_recursive" dev="tmpfs" ino=496 res=0 errno=0
[   67.429303][ T6404] syz.0.209 uses obsolete (PF_INET,SOCK_PACKET)
[   67.458357][ T6405] netlink: 'syz.2.211': attribute type 3 has an invalid length.
[   67.743983][ T6428] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   67.866739][ T6440] batadv1: entered promiscuous mode
[   67.868711][ T6440] batadv1: entered allmulticast mode
[   67.930232][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.989546][ T6449] netlink: 'syz.0.224': attribute type 11 has an invalid length.
[   68.263831][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.266255][ T6522] syzkaller1: entered allmulticast mode
[   69.827338][ T6544] __nla_validate_parse: 4 callbacks suppressed
[   69.827352][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'.
[   70.815417][ T6595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.819091][ T6595] syzkaller0: entered promiscuous mode
[   70.822125][ T6595] syzkaller0: entered allmulticast mode
[   70.887071][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[   70.898242][ T6596] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   70.909101][ T6595] tipc: Resetting bearer <eth:syzkaller0>
[   70.917699][ T6594] tipc: Resetting bearer <eth:syzkaller0>
[   70.932480][ T6594] tipc: Disabling bearer <eth:syzkaller0>
[   70.999281][ T6603] dvmrp8: entered allmulticast mode
[   71.179823][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.182938][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.286430][ T6602] dvmrp8: left allmulticast mode
[   71.314450][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'.
[   71.473899][ T6624] netlink: 22 bytes leftover after parsing attributes in process `syz.1.291'.
[   72.132360][ T6647] netlink: 'syz.1.301': attribute type 49 has an invalid length.
[   72.650881][ T6685] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   72.867618][ T6699] netlink: 'syz.2.325': attribute type 31 has an invalid length.
[   72.997197][ T6709] netlink: 'syz.2.330': attribute type 1 has an invalid length.
[   73.001160][ T6709] netlink: 212 bytes leftover after parsing attributes in process `syz.2.330'.
[   73.004255][ T6709] netlink: 'syz.2.330': attribute type 1 has an invalid length.
[   73.124144][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'.
[   73.284259][ T6730] netlink: 'syz.2.339': attribute type 6 has an invalid length.
[   73.287264][ T6730] netlink: 14573 bytes leftover after parsing attributes in process `syz.2.339'.
[   73.950307][ T6781] pim6reg1: entered promiscuous mode
[   73.963996][ T6781] pim6reg1: entered allmulticast mode
[   74.255915][ T6811] netlink: 188 bytes leftover after parsing attributes in process `syz.1.372'.
[   74.406309][ T6824] tipc: Started in network mode
[   74.410071][ T6824] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[   74.419909][ T6824] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   74.706737][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[   74.971795][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'.
[   74.979381][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'.
[   74.983721][ T6865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.531629][ T1850] IPVS: starting estimator thread 0...
[   75.629481][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'.
[   75.632608][ T6895] IPVS: using max 79 ests per chain, 189600 per kthread
[   75.826057][ T6913] netlink: 332 bytes leftover after parsing attributes in process `syz.1.415'.
[   75.839781][ T6913] netlink: 104 bytes leftover after parsing attributes in process `syz.1.415'.
[   75.847295][ T6913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.415'.
[   76.738879][ T6967] netlink: 'syz.2.431': attribute type 6 has an invalid length.
[   76.873381][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'.
[   76.876704][ T6971] bridge_slave_1: left allmulticast mode
[   76.878768][ T6971] bridge_slave_1: left promiscuous mode
[   76.881126][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.886685][ T6971] bridge_slave_0: left allmulticast mode
[   76.888981][ T6971] bridge_slave_0: left promiscuous mode
[   76.892294][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.638811][ T7015] ieee802154 phy0 wpan0: encryption failed: -22
[   77.655429][ T7015] team0: No ports can be present during mode change
[   77.757458][ T7030] netlink: 'syz.1.457': attribute type 1 has an invalid length.
[   77.773902][ T7034] openvswitch: netlink: Message has 16 unknown bytes.
[   77.882944][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'.
[   77.889466][ T7042] netlink: 'syz.1.464': attribute type 1 has an invalid length.
[   78.015356][ T7052] netlink: 'syz.1.467': attribute type 74 has an invalid length.
[   78.167149][ T7057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.231127][ T7057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.292294][ T7057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.376016][ T7057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.415193][ T7073] netlink: 'syz.2.477': attribute type 3 has an invalid length.
[   78.477450][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.492663][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.504697][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.515624][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.736985][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'.
[   79.183587][ T7120] netlink: 'syz.0.494': attribute type 3 has an invalid length.
[   79.186938][ T7120] netlink: 'syz.0.494': attribute type 1 has an invalid length.
[   79.190237][ T7120] netlink: 212 bytes leftover after parsing attributes in process `syz.0.494'.
[   80.026760][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.034077][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.195088][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.230812][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.234696][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.238594][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.401085][ T7179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   80.436961][ T7181] syzkaller0: entered promiscuous mode
[   80.448866][ T7181] syzkaller0: entered allmulticast mode
[   80.865817][ T7210] netlink: 'syz.2.532': attribute type 3 has an invalid length.
[   81.089621][ T7231] __nla_validate_parse: 1 callbacks suppressed
[   81.089631][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'.
[   81.236310][ T7237] sctp: [Deprecated]: syz.2.544 (pid 7237) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.236310][ T7237] Use struct sctp_sack_info instead
[   81.277943][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[   81.283144][ T7239] openvswitch: netlink: Missing key (keys=40, expected=100)
[   81.318471][ T7243] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[   81.418245][  T794] cfg80211: failed to load regulatory.db
[   81.495585][ T7252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.498825][ T7252] syzkaller0: entered promiscuous mode
[   81.502877][ T7252] syzkaller0: entered allmulticast mode
[   81.512341][ T7252] tipc: Resetting bearer <eth:syzkaller0>
[   81.514968][ T7251] tipc: Resetting bearer <eth:syzkaller0>
[   81.522360][ T7251] tipc: Disabling bearer <eth:syzkaller0>
[   82.734258][ T7280] netlink: 'syz.2.559': attribute type 1 has an invalid length.
[   83.231404][ T7312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.738707][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'.
[   83.746516][ T7356] openvswitch: netlink: Missing key (keys=40, expected=80)
[   83.864155][ T7369] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   84.313303][ T7407] netlink: 'syz.1.617': attribute type 12 has an invalid length.
[   84.354998][ T7412] syzkaller1: tun_chr_ioctl cmd 1074025677
[   84.357123][ T7412] syzkaller1: linktype set to 823
[   84.804886][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.634'.
[   84.808333][ T7450] netlink: 3 bytes leftover after parsing attributes in process `syz.1.634'.
[   85.008771][ T7466] bridge_slave_0: left allmulticast mode
[   85.011945][ T7466] bridge_slave_0: left promiscuous mode
[   85.014886][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.026775][ T7466] bridge_slave_1: left allmulticast mode
[   85.032567][ T7466] bridge_slave_1: left promiscuous mode
[   85.034610][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.053899][ T7466] bond0: (slave bond_slave_0): Releasing backup interface
[   85.064339][ T7466] bond0: (slave bond_slave_1): Releasing backup interface
[   85.079182][ T7466] team0: Port device team_slave_0 removed
[   85.086648][ T7466] team0: Port device team_slave_1 removed
[   85.089799][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.095640][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.100395][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.104367][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.119584][ T7466] batman_adv: batadv0: Interface deactivated: macsec1
[   85.123361][ T7466] batman_adv: batadv0: Removing interface: macsec1
[   85.126734][ T7473] netlink: 'syz.1.643': attribute type 10 has an invalid length.
[   85.142058][ T7466] team0: Port device bond1 removed
[   85.161394][ T7466] bond2: (slave gretap1): Releasing active interface
[   85.206168][ T7473] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.213687][ T7466] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   85.217811][ T7466] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   85.932847][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[   85.937194][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'.
[   85.946016][ T7484] netlink: 'syz.1.647': attribute type 18 has an invalid length.
[   86.452271][ T5235] Bluetooth: hci2: command tx timeout
[   86.536055][ T7511] vlan2: entered allmulticast mode
[   86.538162][ T7511] dummy0: entered allmulticast mode
[   86.634605][ T7519] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.663'.
[   86.649318][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'.
[   86.716120][ T7525] tipc: Started in network mode
[   86.718481][ T7525] tipc: Node identity ac14140f, cluster identity 4711
[   86.723651][ T7525] tipc: New replicast peer: 255.255.255.255
[   86.726705][ T7525] tipc: Enabled bearer <udp:s>, priority 10
[   87.489636][ T7558] netlink: 'syz.2.678': attribute type 1 has an invalid length.
[   87.731265][ T5866] tipc: Node number set to 2886997007
[   87.919222][ T7585] netlink: 'syz.2.692': attribute type 10 has an invalid length.
[   87.931874][ T7585] 8021q: adding VLAN 0 to HW filter on device team0
[   87.935192][ T7585] bond0: (slave team0): Enslaving as an active interface with an up link
[   88.113287][ T7602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'.
[   88.334955][ T7624] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[   88.338835][ T7624] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.319862][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.721'.
[   89.477323][ T7646] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   89.479600][ T7646] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   89.548104][ T7646] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   89.555149][ T7646] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   89.579903][ T7646] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   89.591373][ T7646] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   89.907104][ T7714] syzkaller1: entered promiscuous mode
[   89.909303][ T7714] syzkaller1: entered allmulticast mode
[   90.379230][ T7739] netlink: 44 bytes leftover after parsing attributes in process `syz.1.742'.
[   90.757575][ T7758] syzkaller1: entered promiscuous mode
[   90.763622][ T7758] syzkaller1: entered allmulticast mode
[   91.010399][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'.
[   91.125469][ T7773] ip6tnl1: entered promiscuous mode
[   91.134490][ T7773] ip6tnl1: entered allmulticast mode
[   91.139924][ T7773] team0: Device ip6tnl1 is of different type
[   91.274553][ T7781] netlink: 'syz.1.758': attribute type 4 has an invalid length.
[   91.724758][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'.
[   91.728451][ T7798] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   91.952665][ T7813] netlink: 'syz.2.771': attribute type 5 has an invalid length.
[   92.456057][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.738757][ T7870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.747507][ T7870] syzkaller0: entered promiscuous mode
[   92.749852][ T7870] syzkaller0: entered allmulticast mode
[   92.765413][ T7870] tipc: Resetting bearer <eth:syzkaller0>
[   92.769137][ T7869] tipc: Resetting bearer <eth:syzkaller0>
[   92.780628][ T7869] tipc: Disabling bearer <eth:syzkaller0>
[   92.878789][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'.
[   93.038488][ T7891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.800'.
[   93.042622][ T7891] netlink: 36 bytes leftover after parsing attributes in process `syz.0.800'.
[   96.024777][ T7930] syzkaller1: entered promiscuous mode
[   96.029509][ T7930] syzkaller1: entered allmulticast mode
[   96.302860][ T7959] : renamed from veth0_to_bond (while UP)
[   96.337236][ T7965] netlink: 144 bytes leftover after parsing attributes in process `syz.2.835'.
[   96.721260][ T7995] netlink: 'syz.0.847': attribute type 5 has an invalid length.
[   96.768047][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.851'.
[   96.937890][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'.
[   96.998670][ T8029] netlink: 'syz.0.859': attribute type 1 has an invalid length.
[   97.989744][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.867'.
[   97.995627][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.867'.
[   98.425400][ T8140] pim6reg1: entered promiscuous mode
[   98.427313][ T8140] pim6reg1: entered allmulticast mode
[   98.462150][ T8142] syzkaller1: entered promiscuous mode
[   98.464484][ T8142] syzkaller1: entered allmulticast mode
[   98.694572][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'.
[   98.757406][ T8148] netlink: 'syz.2.887': attribute type 1 has an invalid length.
[   98.762192][ T8148] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.887'.
[   98.910963][ T8160] IPVS: Scheduler module ip_vs_sip not found
[   99.124630][ T8172] IPVS: Error connecting to the multicast addr
[   99.905595][ T8190] netlink: 'syz.1.902': attribute type 13 has an invalid length.
[   99.908636][ T8190] netlink: 'syz.1.902': attribute type 17 has an invalid length.
[   99.941469][ T8190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.058533][ T8190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.203348][ T8204] netlink: 'syz.1.906': attribute type 1 has an invalid length.
[  101.807325][ T8217] geneve2: entered promiscuous mode
[  101.904079][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'.
[  102.197763][ T8153] Set syz1 is full, maxelem 65536 reached
[  102.317117][ T8241] netlink: 'syz.1.919': attribute type 5 has an invalid length.
[  102.467047][ T8256] IPVS: Scheduler module ip_vs_sip not found
[  102.470033][ T8256] IPVS: length: 24 != 1272
[  102.578312][ T8268] netlink: 'syz.1.933': attribute type 10 has an invalid length.
[  102.593529][ T8268] 8021q: adding VLAN 0 to HW filter on device team0
[  102.597852][ T8268] bond0: (slave team0): Enslaving as an active interface with an up link
[  102.671043][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.938'.
[  102.673920][ T8274] dvmrp0: entered allmulticast mode
[  102.676050][ T8277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.036494][ T8301] batadv_slave_1: entered promiscuous mode
[  103.039594][ T8300] batadv_slave_1: left promiscuous mode
[  103.740084][ T8356] smc: net device bond0 applied user defined pnetid SYZ2
[  104.812571][ T5890] IPVS: starting estimator thread 0...
[  104.912229][ T8401] IPVS: using max 48 ests per chain, 115200 per kthread
[  105.033239][ T8419] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  105.038680][ T8419] netlink: 224 bytes leftover after parsing attributes in process `syz.2.994'.
[  105.508612][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'.
[  106.500664][ T8477] syz_tun: entered allmulticast mode
[  106.524742][ T8477] dvmrp8: entered allmulticast mode
[  106.639087][ T8477] netlink: 'syz.0.1020': attribute type 23 has an invalid length.
[  106.667038][ T8476] syz_tun: left allmulticast mode
[  106.668955][ T8476] dvmrp8: left allmulticast mode
[  107.459328][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1055'.
[  107.473241][ T8553] netlink: 'syz.1.1053': attribute type 5 has an invalid length.
[  107.494229][ T8553] ieee802154 phy0 wpan0: encryption failed: -22
[  107.609729][ T8559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.613860][ T8559] syzkaller0: entered promiscuous mode
[  107.615793][ T8559] syzkaller0: entered allmulticast mode
[  107.628443][ T8559] tipc: Resetting bearer <eth:syzkaller0>
[  107.641631][ T8558] tipc: Resetting bearer <eth:syzkaller0>
[  107.655701][ T8558] tipc: Disabling bearer <eth:syzkaller0>
[  108.503601][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'.
[  108.507699][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'.
[  108.598983][ T8607] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4000030939/4000030941
[  108.605561][ T8607] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4000030939/4000030941
[  110.166156][ T8721] tipc: New replicast peer: 0.0.0.0
[  110.169670][ T8721] tipc: Enabled bearer <udp:syz2>, priority 10
[  110.176342][ T8721] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  110.420419][ T8742] netlink: 'syz.0.1118': attribute type 11 has an invalid length.
[  110.427389][ T8742] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1118'.
[  110.755948][ T8769] netlink: 'syz.2.1130': attribute type 1 has an invalid length.
[  110.766231][ T8769] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1130'.
[  110.777596][ T8769] netlink: 'syz.2.1130': attribute type 1 has an invalid length.
[  110.787872][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'.
[  110.838028][ T8773] netlink: 412 bytes leftover after parsing attributes in process `syz.2.1132'.
[  110.995609][ T8783] syzkaller1: entered promiscuous mode
[  110.997974][ T8783] syzkaller1: entered allmulticast mode
[  111.269577][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'.
[  111.316137][ T8803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.684841][ T8821] bridge0: entered allmulticast mode
[  111.696458][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'.
[  111.701856][ T8819] hsr_slave_0: left promiscuous mode
[  111.704868][ T8819] hsr_slave_1: left promiscuous mode
[  112.050136][ T8840] veth0: entered promiscuous mode
[  112.058808][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'.
[  112.223921][ T8854] netlink: 'syz.2.1169': attribute type 1 has an invalid length.
[  112.557948][ T8887] macvtap1: entered promiscuous mode
[  112.560220][ T8887] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  112.573369][ T8887] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  112.758757][ T8905] IPVS: length: 139 != 8
[  113.719978][ T8938] netlink: 'syz.0.1208': attribute type 1 has an invalid length.
[  113.925902][ T8948] netlink: 'syz.1.1205': attribute type 1 has an invalid length.
[  113.940654][ T8948] __nla_validate_parse: 3 callbacks suppressed
[  113.940666][ T8948] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1205'.
[  114.138507][ T8972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1223'.
[  114.147037][ T8974] netlink: 'syz.2.1224': attribute type 1 has an invalid length.
[  114.152338][ T8972] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.203741][ T8974] ieee802154 phy1 wpan1: encryption failed: -22
[  114.619582][ T8986] netlink: 'syz.1.1227': attribute type 29 has an invalid length.
[  114.627016][ T8986] netlink: 'syz.1.1227': attribute type 29 has an invalid length.
[  114.672767][ T8988] netlink: 'syz.1.1228': attribute type 10 has an invalid length.
[  114.676692][ T8988] bridge0: port 1(macsec0) entered blocking state
[  114.679697][ T8988] bridge0: port 1(macsec0) entered disabled state
[  114.684637][ T8988] macsec0: entered allmulticast mode
[  114.687043][ T8988] veth1_macvtap: entered allmulticast mode
[  114.694045][ T8988] macsec0: entered promiscuous mode
[  114.698206][ T8988] bridge0: port 1(macsec0) entered blocking state
[  114.701203][ T8988] bridge0: port 1(macsec0) entered forwarding state
[  115.095130][ T9005] bond3: entered promiscuous mode
[  115.096792][ T9005] bond3: entered allmulticast mode
[  115.102166][ T9005] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.219690][ T9005] bond3 (unregistering): Released all slaves
[  115.473134][ T9028] Bluetooth: MGMT ver 1.23
[  115.548722][ T9038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.708889][ T9097] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4038221887/4038221889
[  116.714695][ T9097] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4038221887/4038221889
[  116.718759][ T9097] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4038221887/4038221889
[  116.815562][ T9099] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  117.263125][ T9112] netlink: zone id is out of range
[  117.603924][ T9135] can: request_module (can-proto-0) failed.
[  117.812064][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  118.171149][ T9149] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1299'.
[  118.374744][ T9153] Bluetooth: MGMT ver 1.23
[  119.311334][ T9225] tc_dump_action: action bad kind
[  119.356851][ T9231] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[  119.586607][ T9253] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  119.846541][ T9271] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1355'.
[  119.866473][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1355'.
[  119.870266][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1355'.
[  119.905342][ T9275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.910926][ T9275] syzkaller0: entered promiscuous mode
[  119.916686][ T9275] syzkaller0: entered allmulticast mode
[  119.931485][ T9275] tipc: Resetting bearer <eth:syzkaller0>
[  119.940925][ T9274] tipc: Resetting bearer <eth:syzkaller0>
[  119.955144][ T9274] tipc: Disabling bearer <eth:syzkaller0>
[  120.049158][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  120.301273][ T9293] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.316684][ T9293] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.992457][ T9327] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.043148][ T9327] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  121.064079][ T9327] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  121.095222][ T9327] bond0: (slave team0): Releasing backup interface
[  121.102741][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  121.108723][ T9327] bond0: (slave bond_slave_0): Releasing backup interface
[  121.123564][ T9327] bond0: (slave bond_slave_1): Releasing backup interface
[  121.131693][ T9327] team0: Port device team_slave_0 removed
[  121.156116][ T9327] team0: Port device team_slave_1 removed
[  121.160940][ T9327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.169047][ T9327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.189500][ T9327] bond0: (slave wlan1): Releasing backup interface
[  121.197084][ T9327] bond1: (slave macvlan2): Removing an active aggregator
[  121.200208][ T9327] bond1: (slave macvlan2): Releasing backup interface
[  121.206021][ T9338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1387'.
[  121.538905][ T9367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1401'.
[  121.632502][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.636343][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.640438][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.650019][ T9373] netlink: 'syz.0.1404': attribute type 1 has an invalid length.
[  121.654860][ T9373] netlink: 'syz.0.1404': attribute type 2 has an invalid length.
[  121.662488][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.762017][ T9384] trusted_key: syz.0.1409 sent an empty control message without MSG_MORE.
[  121.947212][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'.
[  121.952788][ T9399] netlink: 'syz.0.1414': attribute type 14 has an invalid length.
[  121.962258][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'.
[  121.966117][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.969768][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.976399][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.979093][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.983370][ T9399] netlink: 'syz.0.1414': attribute type 14 has an invalid length.
[  122.382595][ T9436] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1431'.
[  122.505431][ T9443] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  122.587555][ T9445] netlink: 'syz.1.1435': attribute type 1 has an invalid length.
[  122.593407][ T9445] netlink: 'syz.1.1435': attribute type 1 has an invalid length.
[  122.662360][ T9453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1438'.
[  122.843664][ T9464] netlink: 'syz.1.1444': attribute type 1 has an invalid length.
[  123.520754][ T9513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.679921][ T9524] netlink: 'syz.2.1470': attribute type 1 has an invalid length.
[  123.697259][ T9524] netlink: 'syz.2.1470': attribute type 6 has an invalid length.
[  124.341104][ T9550] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  125.195125][ T9613] __nla_validate_parse: 7 callbacks suppressed
[  125.195139][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'.
[  125.203186][ T9613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1512'.
[  125.373020][ T9630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1519'.
[  125.977418][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'.
[  125.989105][ T9682] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1543'.
[  125.997498][ T9682] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1543'.
[  126.195957][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'.
[  126.198967][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'.
[  126.679741][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'.
[  126.939139][ T9738] validate_nla: 2 callbacks suppressed
[  126.939149][ T9738] netlink: 'syz.1.1568': attribute type 6 has an invalid length.
[  127.767163][ T9772] vxcan1 speed is unknown, defaulting to 1000
[  127.771104][ T9772] vxcan1 speed is unknown, defaulting to 1000
[  127.774283][ T9772] vxcan1 speed is unknown, defaulting to 1000
[  127.931834][ T9772] infiniband syz2: set down
[  127.935134][    T9] vxcan1 speed is unknown, defaulting to 1000
[  127.937445][ T9772] infiniband syz2: added vxcan1
[  127.969757][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  127.985624][ T9775] dummy0: entered promiscuous mode
[  127.990028][ T9775] dummy0: left promiscuous mode
[  127.999654][ T9772] RDS/IB: syz2: added
[  128.006634][ T9772] smc: adding ib device syz2 with port count 1
[  128.009064][ T9772] smc:    ib device syz2 port 1 has pnetid 
[  128.020007][ T5890] vxcan1 speed is unknown, defaulting to 1000
[  128.025313][ T9772] vxcan1 speed is unknown, defaulting to 1000
[  128.207871][ T9772] vxcan1 speed is unknown, defaulting to 1000
[  128.394183][ T9772] vxcan1 speed is unknown, defaulting to 1000
[  129.401389][ T9883] vxcan1 speed is unknown, defaulting to 1000
[  130.528622][ T9919] __nla_validate_parse: 6 callbacks suppressed
[  130.528638][ T9919] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1648'.
[  130.844970][ T9928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.849276][ T9928] syzkaller0: entered promiscuous mode
[  130.854899][ T9928] syzkaller0: entered allmulticast mode
[  130.865436][ T9928] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  130.877929][ T9928] tipc: Resetting bearer <eth:syzkaller0>
[  130.888381][ T9927] tipc: Resetting bearer <eth:syzkaller0>
[  130.899902][ T9927] tipc: Disabling bearer <eth:syzkaller0>
[  131.096755][ T9941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1659'.
[  131.142065][ T9943] syz.0.1660 (9943) used obsolete PPPIOCDETACH ioctl
[  131.204450][ T9946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1661'.
[  131.210266][ T9946] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1661'.
[  131.291373][ T9952] netlink: 'syz.0.1663': attribute type 27 has an invalid length.
[  131.298743][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'.
[  132.269504][T10010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.273694][T10010] syzkaller0: entered promiscuous mode
[  132.275759][T10010] syzkaller0: entered allmulticast mode
[  132.301624][T10010] tipc: Resetting bearer <eth:syzkaller0>
[  132.306336][T10009] tipc: Resetting bearer <eth:syzkaller0>
[  132.319945][T10009] tipc: Disabling bearer <eth:syzkaller0>
[  132.721992][T10032] vxcan1 speed is unknown, defaulting to 1000
[  132.789944][T10040] netlink: 'syz.0.1703': attribute type 1 has an invalid length.
[  132.793488][T10040] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1703'.
[  133.277277][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'.
[  133.301815][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'.
[  133.305307][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'.
[  133.308631][T10072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1717'.
[  133.357207][T10079] netlink: 'syz.0.1721': attribute type 1 has an invalid length.
[  133.360759][T10079] netlink: 'syz.0.1721': attribute type 2 has an invalid length.
[  133.364129][T10079] netlink: 'syz.0.1721': attribute type 1 has an invalid length.
[  133.482963][T10087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.492671][T10087] syzkaller0: entered promiscuous mode
[  133.495077][T10087] syzkaller0: entered allmulticast mode
[  133.515776][T10087] tipc: Resetting bearer <eth:syzkaller0>
[  133.521361][T10086] tipc: Resetting bearer <eth:syzkaller0>
[  133.534060][T10086] tipc: Disabling bearer <eth:syzkaller0>
[  133.546127][T10093] @: renamed from veth0_vlan (while UP)
[  134.092024][T10131] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  134.095261][T10131] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  134.098288][T10131] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  134.846826][ T6518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.849570][ T6518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.173162][T10230] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.264379][T10285] __nla_validate_parse: 9 callbacks suppressed
[  136.264395][T10285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1809'.
[  136.877636][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'.
[  136.883343][T10294] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  137.132846][T10318] vxcan1 speed is unknown, defaulting to 1000
[  137.193574][T10319] geneve2: entered promiscuous mode
[  137.195795][T10319] geneve2: entered allmulticast mode
[  137.651960][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'.
[  137.686760][T10356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.690833][T10356] syzkaller0: entered promiscuous mode
[  137.693429][T10356] syzkaller0: entered allmulticast mode
[  137.708086][T10356] tipc: Resetting bearer <eth:syzkaller0>
[  137.715043][T10355] tipc: Resetting bearer <eth:syzkaller0>
[  137.725126][T10355] tipc: Disabling bearer <eth:syzkaller0>
[  137.799216][T10358] bond1: option mode: unable to set because the bond device is up
[  137.812533][T10358] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  137.816364][T10358] bond1: (slave macvlan3): Enslaving as a backup interface with a down link
[  137.824562][T10358] bond1: (slave macvlan3): Releasing backup interface
[  137.828484][    T9] vxcan1 speed is unknown, defaulting to 1000
[  138.021319][T10366] vxcan1 speed is unknown, defaulting to 1000
[  138.433313][T10383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1852'.
[  138.437331][T10383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1852'.
[  138.754416][T10409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1865'.
[  139.242727][T10451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.507737][T10477] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1894'.
[  139.655148][T10486] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  139.746463][T10508] syzkaller1: entered promiscuous mode
[  139.748488][T10508] syzkaller1: entered allmulticast mode
[  139.867940][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'.
[  139.924530][T10535] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1918'.
[  139.940418][T10535] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1918'.
[  140.119009][T10565] syzkaller1: entered promiscuous mode
[  140.121091][T10565] syzkaller1: entered allmulticast mode
[  140.175405][T10572] netlink: 'syz.1.1937': attribute type 10 has an invalid length.
[  140.178841][T10572] team0: entered promiscuous mode
[  140.183962][T10572] bond0: (slave team0): Releasing backup interface
[  140.189742][T10572] bridge0: port 2(team0) entered blocking state
[  140.193762][T10572] bridge0: port 2(team0) entered disabled state
[  140.197566][T10572] team0: entered allmulticast mode
[  140.597580][T10618] vxcan1 speed is unknown, defaulting to 1000
[  140.813302][T10637] netlink: 'syz.2.1965': attribute type 10 has an invalid length.
[  140.830624][T10637] team0: Port device dummy0 added
[  141.011257][T10652] bridge0: entered promiscuous mode
[  141.076294][T10654] vxcan1 speed is unknown, defaulting to 1000
[  141.465603][T10667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.574348][T10675] netlink: 'syz.1.1980': attribute type 1 has an invalid length.
[  141.597131][T10675] 8021q: adding VLAN 0 to HW filter on device bond3
[  141.623638][T10675] bond3: (slave wlan0): Enslaving as an active interface with a down link
[  141.643519][T10675] vlan2: entered allmulticast mode
[  141.645788][T10675] veth1: entered allmulticast mode
[  141.648740][T10675] veth1: entered promiscuous mode
[  141.651690][T10675] veth1: left promiscuous mode
[  141.655565][T10675] bond3: (slave vlan2): making interface the new active one
[  141.658812][T10675] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  141.665625][T10675] veth1: entered promiscuous mode
[  141.667832][T10675] vlan2: entered promiscuous mode
[  141.669827][T10675] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  141.827270][T10694] __nla_validate_parse: 5 callbacks suppressed
[  141.827282][T10694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1988'.
[  141.958137][T10711] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  142.655804][T10733] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  143.891058][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  143.916622][T10780] netlink: 'syz.2.2020': attribute type 15 has an invalid length.
[  144.068838][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2025'.
[  144.218107][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2027'.
[  144.589913][T10839] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  144.594874][T10839] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  144.598991][T10839] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  144.604226][T10843] netlink: 'syz.0.2034': attribute type 12 has an invalid length.
[  144.731282][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.822358][T10858] raw_sendmsg: syz.1.2041 forgot to set AF_INET. Fix it!
[  144.863399][T10862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'.
[  145.006126][T10873] vxcan1 speed is unknown, defaulting to 1000
[  145.096752][T10881] netlink: 'syz.1.2050': attribute type 12 has an invalid length.
[  145.100574][T10881] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2050'.
[  145.361175][T10899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2057'.
[  145.534438][T10912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.536640][T10910] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2061'.
[  145.577475][T10914] netlink: 'syz.1.2063': attribute type 6 has an invalid length.
[  145.855445][T10951] netlink: 'syz.1.2079': attribute type 4 has an invalid length.
[  145.958895][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2086'.
[  146.098761][T10982] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.2095'.
[  146.138080][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'.
[  146.219018][T10995] nbd: socks must be embedded in a SOCK_ITEM attr
[  146.382410][T11011] vxcan1 speed is unknown, defaulting to 1000
[  146.629811][T11025] netlink: 'syz.2.2112': attribute type 10 has an invalid length.
[  146.657857][T11025] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  146.670005][T11027] netlink: 'syz.1.2113': attribute type 1 has an invalid length.
[  146.673388][T11027] netlink: 'syz.1.2113': attribute type 2 has an invalid length.
[  147.365928][T11078] netlink: 'syz.2.2136': attribute type 1 has an invalid length.
[  147.369328][T11080] __nla_validate_parse: 4 callbacks suppressed
[  147.369335][T11080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2137'.
[  147.396744][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2138'.
[  147.442340][T11086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2139'.
[  147.796473][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'.
[  147.903260][T11128] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2156'.
[  147.923388][T11132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.966045][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2164'.
[  147.969970][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'.
[  147.975460][T11136] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  147.978750][T11136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.067085][T11139] vxcan1 speed is unknown, defaulting to 1000
[  148.699107][T11182] netlink: 'syz.0.2182': attribute type 12 has an invalid length.
[  148.928509][T11217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2192'.
[  148.932416][T11217] netlink: 245 bytes leftover after parsing attributes in process `syz.1.2192'.
[  149.189399][T11242] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  149.452221][T11256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'.
[  149.748152][T11274] netlink: 'syz.2.2217': attribute type 10 has an invalid length.
[  149.752025][T11274] dummy0: entered promiscuous mode
[  149.760826][T11274] team0: Port device dummy0 removed
[  149.763479][T11274] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  150.283861][T11323] netlink: 'syz.2.2237': attribute type 11 has an invalid length.
[  150.608559][T11344] vxcan1 speed is unknown, defaulting to 1000
[  150.803947][T11354] vxcan1 speed is unknown, defaulting to 1000
[  150.997693][T11365] netlink: 'syz.2.2254': attribute type 39 has an invalid length.
[  151.034669][T11368] netlink: 'syz.0.2255': attribute type 15 has an invalid length.
[  151.058303][T11368] netlink: 'syz.0.2255': attribute type 15 has an invalid length.
[  151.103558][T11373] sch_fq: defrate 0 ignored.
[  151.199200][T11379] netlink: 'syz.1.2261': attribute type 6 has an invalid length.
[  151.361965][T11394] netlink: zone id is out of range
[  151.408341][T11394] netlink: set zone limit has 4 unknown bytes
[  151.410775][T11399] netlink: zone id is out of range
[  151.417996][T11399] netlink: del zone limit has 4 unknown bytes
[  151.708370][T11421] netlink: 'syz.0.2277': attribute type 10 has an invalid length.
[  151.712930][T11421] dummy0: entered promiscuous mode
[  151.715797][T11421] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  151.810845][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  152.754378][ T7168] vlan2: left promiscuous mode
[  152.893126][T11488] netlink: 'syz.2.2309': attribute type 1 has an invalid length.
[  152.895980][T11488] __nla_validate_parse: 9 callbacks suppressed
[  152.895988][T11488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2309'.
[  153.001222][T11492] vxcan1 speed is unknown, defaulting to 1000
[  154.166843][T11557] pimreg: entered allmulticast mode
[  154.177140][T11557] pimreg: left allmulticast mode
[  154.662416][T11587] netlink: 'syz.2.2347': attribute type 1 has an invalid length.
[  154.683159][T11587] bond2: entered promiscuous mode
[  154.685488][T11587] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.726188][T11587] bond2: (slave bridge1): making interface the new active one
[  154.728539][T11587] bridge1: entered promiscuous mode
[  154.734895][T11587] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  154.875800][T11599] vxcan1 speed is unknown, defaulting to 1000
[  154.923980][T11603] netlink: 'syz.2.2353': attribute type 15 has an invalid length.
[  154.926620][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2353'.
[  155.275872][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.279748][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.292342][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.295367][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.402643][T11708] netlink: 'syz.0.2396': attribute type 12 has an invalid length.
[  156.939782][T11724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.423271][T11748] netlink: 664 bytes leftover after parsing attributes in process `syz.0.2416'.
[  157.427095][T11748] netlink: 664 bytes leftover after parsing attributes in process `syz.0.2416'.
[  157.527690][T11757] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  157.960145][T11802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2441'.
[  158.152581][T11828] sctp: [Deprecated]: syz.2.2451 (pid 11828) Use of int in max_burst socket option.
[  158.152581][T11828] Use struct sctp_assoc_value instead
[  158.357720][T11850] vxcan1 speed is unknown, defaulting to 1000
[  158.899779][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'.
[  158.915145][T11902] nbd: couldn't find a device at index 65546
[  158.950437][T11907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  159.026527][T11917] ==================================================================
[  159.029947][T11917] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  159.033343][T11917] Read of size 1 at addr ffff88811d5d9530 by task syz.1.2493/11917
[  159.037487][T11917] 
[  159.038515][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.1.2493 Not tainted syzkaller #0 PREEMPT(full) 
[  159.038528][T11917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.038557][T11917] Call Trace:
[  159.038564][T11917]  <TASK>
[  159.038569][T11917]  dump_stack_lvl+0x189/0x250
[  159.038587][T11917]  ? __virt_addr_valid+0x1c8/0x5c0
[  159.038602][T11917]  ? rcu_is_watching+0x15/0xb0
[  159.038616][T11917]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.038630][T11917]  ? rcu_is_watching+0x15/0xb0
[  159.038641][T11917]  ? lock_release+0x4b/0x3e0
[  159.038656][T11917]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  159.038677][T11917]  ? __virt_addr_valid+0x1c8/0x5c0
[  159.038689][T11917]  ? __virt_addr_valid+0x4a5/0x5c0
[  159.038704][T11917]  print_report+0xca/0x240
[  159.038715][T11917]  ? __xfrm_state_insert+0x8af/0x1450
[  159.038730][T11917]  kasan_report+0x118/0x150
[  159.038745][T11917]  ? __xfrm_state_insert+0x8af/0x1450
[  159.038759][T11917]  __xfrm_state_insert+0x8af/0x1450
[  159.038776][T11917]  ? xfrm_state_insert+0x44/0x60
[  159.038791][T11917]  xfrm_state_insert+0x54/0x60
[  159.038804][T11917]  ipcomp6_init_state+0x655/0x900
[  159.038818][T11917]  __xfrm_init_state+0xa76/0x13f0
[  159.038835][T11917]  ? __xfrm_init_state+0x7ef/0x13f0
[  159.038852][T11917]  xfrm_add_sa+0x2f5b/0x4070
[  159.038869][T11917]  ? __pfx_xfrm_add_sa+0x10/0x10
[  159.038884][T11917]  ? apparmor_capable+0x137/0x1b0
[  159.038899][T11917]  ? __nla_parse+0x40/0x60
[  159.038913][T11917]  xfrm_user_rcv_msg+0x7a3/0xab0
[  159.038929][T11917]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.038952][T11917]  ? __pfx___mutex_trylock_common+0x10/0x10
[  159.038973][T11917]  ? rcu_is_watching+0x15/0xb0
[  159.038984][T11917]  ? trace_contention_end+0x39/0x120
[  159.038996][T11917]  ? __mutex_lock+0x335/0x1350
[  159.039011][T11917]  netlink_rcv_skb+0x208/0x470
[  159.039022][T11917]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.039039][T11917]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  159.039053][T11917]  ? netlink_deliver_tap+0x2e/0x1b0
[  159.039066][T11917]  ? netlink_deliver_tap+0x2e/0x1b0
[  159.039078][T11917]  xfrm_netlink_rcv+0x79/0x90
[  159.039095][T11917]  netlink_unicast+0x82f/0x9e0
[  159.039113][T11917]  ? __pfx_netlink_unicast+0x10/0x10
[  159.039131][T11917]  ? netlink_sendmsg+0x642/0xb30
[  159.039141][T11917]  ? skb_put+0x11b/0x210
[  159.039155][T11917]  netlink_sendmsg+0x805/0xb30
[  159.039168][T11917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.039182][T11917]  ? aa_sock_msg_perm+0xf1/0x1d0
[  159.039193][T11917]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  159.039207][T11917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.039218][T11917]  __sock_sendmsg+0x21c/0x270
[  159.039235][T11917]  ____sys_sendmsg+0x505/0x830
[  159.039250][T11917]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.039266][T11917]  ? import_iovec+0x74/0xa0
[  159.039281][T11917]  ___sys_sendmsg+0x21f/0x2a0
[  159.039294][T11917]  ? __pfx____sys_sendmsg+0x10/0x10
[  159.039317][T11917]  ? __fget_files+0x2a/0x420
[  159.039328][T11917]  ? __fget_files+0x3a0/0x420
[  159.039339][T11917]  __x64_sys_sendmsg+0x19b/0x260
[  159.039352][T11917]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  159.039369][T11917]  ? rcu_is_watching+0x15/0xb0
[  159.039380][T11917]  ? do_syscall_64+0xbe/0x3b0
[  159.039395][T11917]  do_syscall_64+0xfa/0x3b0
[  159.039406][T11917]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.039416][T11917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.039428][T11917]  ? exc_page_fault+0x9f/0xf0
[  159.039438][T11917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.039451][T11917] RIP: 0033:0x7f686b18ec29
[  159.039461][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.039470][T11917] RSP: 002b:00007f686c010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.039484][T11917] RAX: ffffffffffffffda RBX: 00007f686b3d5fa0 RCX: 00007f686b18ec29
[  159.039491][T11917] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  159.039498][T11917] RBP: 00007f686b211e41 R08: 0000000000000000 R09: 0000000000000000
[  159.039506][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.039513][T11917] R13: 00007f686b3d6038 R14: 00007f686b3d5fa0 R15: 00007ffe160e28e8
[  159.039524][T11917]  </TASK>
[  159.039528][T11917] 
[  159.184444][T11917] Allocated by task 8385:
[  159.185914][T11917]  kasan_save_track+0x3e/0x80
[  159.187525][T11917]  __kasan_slab_alloc+0x6c/0x80
[  159.189223][T11917]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  159.191091][T11917]  xfrm_state_alloc+0x24/0x2f0
[  159.193077][T11917]  __find_acq_core+0x8a7/0x1c00
[  159.194912][T11917]  xfrm_find_acq+0x78/0xa0
[  159.196497][T11917]  xfrm_alloc_userspi+0x6b3/0xc90
[  159.198292][T11917]  xfrm_user_rcv_msg+0x7a3/0xab0
[  159.200077][T11917]  netlink_rcv_skb+0x208/0x470
[  159.201842][T11917]  xfrm_netlink_rcv+0x79/0x90
[  159.203587][T11917]  netlink_unicast+0x82f/0x9e0
[  159.205237][T11917]  netlink_sendmsg+0x805/0xb30
[  159.207041][T11917]  __sock_sendmsg+0x21c/0x270
[  159.208821][T11917]  ____sys_sendmsg+0x505/0x830
[  159.210492][T11917]  ___sys_sendmsg+0x21f/0x2a0
[  159.212147][T11917]  __x64_sys_sendmsg+0x19b/0x260
[  159.213904][T11917]  do_syscall_64+0xfa/0x3b0
[  159.215456][T11917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.217517][T11917] 
[  159.218357][T11917] Freed by task 5866:
[  159.219731][T11917]  kasan_save_track+0x3e/0x80
[  159.221454][T11917]  kasan_save_free_info+0x46/0x50
[  159.223247][T11917]  __kasan_slab_free+0x5b/0x80
[  159.224999][T11917]  kmem_cache_free+0x18f/0x400
[  159.226856][T11917]  xfrm_state_gc_task+0x52d/0x6b0
[  159.228467][T11917]  process_scheduled_works+0xae1/0x17b0
[  159.230395][T11917]  worker_thread+0x8a0/0xda0
[  159.232266][T11917]  kthread+0x711/0x8a0
[  159.233814][T11917]  ret_from_fork+0x439/0x7d0
[  159.235517][T11917]  ret_from_fork_asm+0x1a/0x30
[  159.237352][T11917] 
[  159.238231][T11917] The buggy address belongs to the object at ffff88811d5d9200
[  159.238231][T11917]  which belongs to the cache xfrm_state of size 928
[  159.243230][T11917] The buggy address is located 816 bytes inside of
[  159.243230][T11917]  freed 928-byte region [ffff88811d5d9200, ffff88811d5d95a0)
[  159.247944][T11917] 
[  159.248816][T11917] The buggy address belongs to the physical page:
[  159.251138][T11917] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811d5d8d80 pfn:0x11d5d8
[  159.254753][T11917] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  159.257510][T11917] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  159.260507][T11917] page_type: f5(slab)
[  159.261919][T11917] raw: 057ff00000000040 ffff88801af77500 0000000000000000 0000000000000001
[  159.264879][T11917] raw: ffff88811d5d8d80 00000000000e0000 00000000f5000000 0000000000000000
[  159.268404][T11917] head: 057ff00000000040 ffff88801af77500 0000000000000000 0000000000000001
[  159.272107][T11917] head: ffff88811d5d8d80 00000000000e0000 00000000f5000000 0000000000000000
[  159.275788][T11917] head: 057ff00000000002 ffffea0004757601 00000000ffffffff 00000000ffffffff
[  159.279430][T11917] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  159.283000][T11917] page dumped because: kasan: bad access detected
[  159.285754][T11917] page_owner tracks the page as allocated
[  159.288177][T11917] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8019, tgid 8011 (syz.2.856), ts 96975750767, free_ts 91827285380
[  159.296097][T11917]  post_alloc_hook+0x240/0x2a0
[  159.298141][T11917]  get_page_from_freelist+0x21e4/0x22c0
[  159.300492][T11917]  __alloc_frozen_pages_noprof+0x181/0x370
[  159.302907][T11917]  alloc_pages_mpol+0x232/0x4a0
[  159.304924][T11917]  allocate_slab+0x8a/0x370
[  159.306882][T11917]  ___slab_alloc+0xbeb/0x1420
[  159.308921][T11917]  kmem_cache_alloc_noprof+0x283/0x3c0
[  159.311307][T11917]  xfrm_state_alloc+0x24/0x2f0
[  159.313402][T11917]  xfrm_state_find+0x37d4/0x5400
[  159.315557][T11917]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  159.318193][T11917]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  159.320559][T11917]  xfrm_lookup_route+0x3c/0x1c0
[  159.322694][T11917]  udp_sendmsg+0x142e/0x2170
[  159.324712][T11917]  __sock_sendmsg+0x19c/0x270
[  159.326783][T11917]  ____sys_sendmsg+0x52d/0x830
[  159.328847][T11917]  ___sys_sendmsg+0x21f/0x2a0
[  159.330868][T11917] page last free pid 7803 tgid 7802 stack trace:
[  159.333463][T11917]  __free_frozen_pages+0xbc4/0xd30
[  159.335555][T11917]  tlb_finish_mmu+0x112/0x1d0
[  159.337517][T11917]  exit_mmap+0x44c/0xb50
[  159.339265][T11917]  __mmput+0x118/0x430
[  159.340978][T11917]  exit_mm+0x1da/0x2c0
[  159.342482][T11917]  do_exit+0x648/0x2300
[  159.343984][T11917]  do_group_exit+0x21c/0x2d0
[  159.345708][T11917]  get_signal+0x1286/0x1340
[  159.347269][T11917]  arch_do_signal_or_restart+0x9a/0x750
[  159.349162][T11917]  exit_to_user_mode_loop+0x75/0x110
[  159.351070][T11917]  do_syscall_64+0x2bd/0x3b0
[  159.352864][T11917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.355387][T11917] 
[  159.356449][T11917] Memory state around the buggy address:
[  159.358860][T11917]  ffff88811d5d9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.362247][T11917]  ffff88811d5d9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.365594][T11917] >ffff88811d5d9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.369018][T11917]                                      ^
[  159.371378][T11917]  ffff88811d5d9580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  159.374824][T11917]  ffff88811d5d9600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  159.378243][T11917] ==================================================================
[  159.382025][T11917] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  159.385040][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.1.2493 Not tainted syzkaller #0 PREEMPT(full) 
[  159.389036][T11917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.393384][T11917] Call Trace:
[  159.394881][T11917]  <TASK>
[  159.396173][T11917]  dump_stack_lvl+0x99/0x250
[  159.398183][T11917]  ? __asan_memcpy+0x40/0x70
[  159.400167][T11917]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.402338][T11917]  ? __pfx__printk+0x10/0x10
[  159.404397][T11917]  vpanic+0x281/0x750
[  159.406179][T11917]  ? __pfx_vpanic+0x10/0x10
[  159.408045][T11917]  ? irqentry_exit+0x74/0x90
[  159.410024][T11917]  panic+0xb9/0xc0
[  159.411651][T11917]  ? __pfx_panic+0x10/0x10
[  159.413644][T11917]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  159.416213][T11917]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.418812][T11917]  ? is_module_address+0x17/0xf0
[  159.420938][T11917]  ? __xfrm_state_insert+0x8af/0x1450
[  159.423226][T11917]  check_panic_on_warn+0x89/0xb0
[  159.425330][T11917]  ? __xfrm_state_insert+0x8af/0x1450
[  159.427625][T11917]  end_report+0x78/0x160
[  159.429456][T11917]  kasan_report+0x129/0x150
[  159.431454][T11917]  ? __xfrm_state_insert+0x8af/0x1450
[  159.433831][T11917]  __xfrm_state_insert+0x8af/0x1450
[  159.436096][T11917]  ? xfrm_state_insert+0x44/0x60
[  159.438255][T11917]  xfrm_state_insert+0x54/0x60
[  159.440398][T11917]  ipcomp6_init_state+0x655/0x900
[  159.442618][T11917]  __xfrm_init_state+0xa76/0x13f0
[  159.444843][T11917]  ? __xfrm_init_state+0x7ef/0x13f0
[  159.447064][T11917]  xfrm_add_sa+0x2f5b/0x4070
[  159.449048][T11917]  ? __pfx_xfrm_add_sa+0x10/0x10
[  159.451180][T11917]  ? apparmor_capable+0x137/0x1b0
[  159.453368][T11917]  ? __nla_parse+0x40/0x60
[  159.455257][T11917]  xfrm_user_rcv_msg+0x7a3/0xab0
[  159.457233][T11917]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.459107][T11917]  ? __pfx___mutex_trylock_common+0x10/0x10
[  159.461108][T11917]  ? rcu_is_watching+0x15/0xb0
[  159.462898][T11917]  ? trace_contention_end+0x39/0x120
[  159.464855][T11917]  ? __mutex_lock+0x335/0x1350
[  159.466624][T11917]  netlink_rcv_skb+0x208/0x470
[  159.468505][T11917]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.470416][T11917]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  159.472265][T11917]  ? netlink_deliver_tap+0x2e/0x1b0
[  159.474135][T11917]  ? netlink_deliver_tap+0x2e/0x1b0
[  159.476034][T11917]  xfrm_netlink_rcv+0x79/0x90
[  159.477610][T11917]  netlink_unicast+0x82f/0x9e0
[  159.479305][T11917]  ? __pfx_netlink_unicast+0x10/0x10
[  159.481069][T11917]  ? netlink_sendmsg+0x642/0xb30
[  159.482665][T11917]  ? skb_put+0x11b/0x210
[  159.484110][T11917]  netlink_sendmsg+0x805/0xb30
[  159.485776][T11917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.487506][T11917]  ? aa_sock_msg_perm+0xf1/0x1d0
[  159.489137][T11917]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  159.490897][T11917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.492999][T11917]  __sock_sendmsg+0x21c/0x270
[  159.494939][T11917]  ____sys_sendmsg+0x505/0x830
[  159.496787][T11917]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.498809][T11917]  ? import_iovec+0x74/0xa0
[  159.500497][T11917]  ___sys_sendmsg+0x21f/0x2a0
[  159.502319][T11917]  ? __pfx____sys_sendmsg+0x10/0x10
[  159.504131][T11917]  ? __fget_files+0x2a/0x420
[  159.505721][T11917]  ? __fget_files+0x3a0/0x420
[  159.507490][T11917]  __x64_sys_sendmsg+0x19b/0x260
[  159.509397][T11917]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  159.511675][T11917]  ? rcu_is_watching+0x15/0xb0
[  159.513617][T11917]  ? do_syscall_64+0xbe/0x3b0
[  159.515327][T11917]  do_syscall_64+0xfa/0x3b0
[  159.516967][T11917]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.518725][T11917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.520781][T11917]  ? exc_page_fault+0x9f/0xf0
[  159.522376][T11917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.524387][T11917] RIP: 0033:0x7f686b18ec29
[  159.525912][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.532144][T11917] RSP: 002b:00007f686c010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.534891][T11917] RAX: ffffffffffffffda RBX: 00007f686b3d5fa0 RCX: 00007f686b18ec29
[  159.537755][T11917] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  159.540587][T11917] RBP: 00007f686b211e41 R08: 0000000000000000 R09: 0000000000000000
[  159.543682][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.546428][T11917] R13: 00007f686b3d6038 R14: 00007f686b3d5fa0 R15: 00007ffe160e28e8
[  159.549248][T11917]  </TASK>
[  159.551106][T11917] Kernel Offset: disabled
[  159.552565][T11917] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:19:29  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e677e RBX=8400000031c20805 RCX=ffff888110291cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900034cf350
R8 =ffffc900034cf527 R9 =1ffff92000699ea4 R10=dffffc0000000000 R11=fffff52000699ea5
R12=0000000000000000 R13=0000000000000000 R14=0000000000031c20 R15=0000000000000001
RIP=ffffffff822e677e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555580be1500 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feff93056c0 CR3=000000011ae1c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007feff8612e7b
XMM06=0000000000000000 00007feff8612e75 XMM07=0000000000000000 00007feff8612e89
XMM08=0000000000000000 00007feff8612f0f XMM09=0000000000000000 00007feff8612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000148b RDI=000000000000148c RBP=00000000000003f8 RSP=ffffc90002a0e9f0
R8 =ffff888107da8237 R9 =1ffff11020fb5046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008f5 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f686c0106c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000500 CR3=000000011090c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f686b3a7498 00007f686b3a7470 XMM03=00007f686b3a74a8 00007f686b3a74a0
XMM04=00007f686bf0d100 00007f686b3a7460 XMM05=00007f686b3a7478 00007f686b3a74c0
XMM06=00007f686b3a74b8 00007f686b3a74b0 XMM07=00007f686b3a74a8 00007f686b3a74a0
XMM08=0000000000000000 00007f686b212f0f XMM09=0000000000000000 00007f686b212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
