last executing test programs:

958.67816ms ago: executing program 2 (id=2657):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x38)

890.834952ms ago: executing program 2 (id=2658):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002bbd7000fcdbdf250900020073797ae730"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

890.475578ms ago: executing program 2 (id=2659):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1)

828.153046ms ago: executing program 2 (id=2660):
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x8e, 0xbf22, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r0, 0x0, 0x1500}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

826.975156ms ago: executing program 2 (id=2661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x5, 0xffffffff}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f00000002c0)="cd31b963", &(0x7f0000000380)=""/100}, 0x20)

780.197741ms ago: executing program 2 (id=2662):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x20000800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0)
readv(r5, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=r5], 0x80}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$kcm(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0)

197.506267ms ago: executing program 1 (id=2674):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000004a0001002dbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0f00000014000100fec201"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

195.258364ms ago: executing program 1 (id=2676):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0xa502}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20090}}}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x4}]}, 0x18}}, 0x0)

194.830693ms ago: executing program 0 (id=2677):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @bcast, 0xa}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffc0000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)

140.925373ms ago: executing program 0 (id=2678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x4c, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xe7, 0xa5f, 0x9}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x4c}}, 0x0)

140.641867ms ago: executing program 0 (id=2679):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0)

140.204078ms ago: executing program 1 (id=2680):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)

67.924145ms ago: executing program 1 (id=2681):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910000700000000620000000000000095107400000000008facdfd7ebdbdb0e342ddf85668c8bcb4a3dda2d612d16f1716a362aad118a81e75b9d7945e77d5b477e77d13d75e682617c0481090c83376431ed74668bd6d0550fa824e0e0b12f44f06fd54191bcad3808af6d77161268be5f07b8cc5cbf036c38d650"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x64}, 0x21)

67.432314ms ago: executing program 0 (id=2682):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001d00)=""/10, 0xa}, {0x0}], 0x2}, 0xc}], 0x1, 0x10000, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
unshare(0x2c060000)
unshare(0x24020400)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b300", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
syz_emit_ethernet(0x12e, &(0x7f0000000780)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x21, 0x4, 0x2, 0x6, 0x120, 0x66, 0x0, 0x1, 0x11, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x9c, 0x3, 0xd, [{@private=0xa010102, 0x6}, {@broadcast, 0x7de4}, {@private=0xa010102}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x1b, 0x53, [@empty, @empty, @remote, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}]}, @ssrr={0x89, 0x13, 0x9e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @broadcast]}, @lsrr={0x83, 0x1b, 0x59, [@rand_addr=0x64010101, @loopback, @multicast2, @rand_addr=0x64010100, @local, @multicast2]}]}}, {0x4e22, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7e4236bbcbfe3890a17a3fec479ff459a7fb2de618e4adf4b2f71af4363dddd8", "67c3360415c2bfaa22e46732f0e746302ed6cb5f42f78b28ce342e4fcee4c871ff2a94475c8acf3ab0025e18a0b8b211", "7c8e9b0841cf4869d9bcf5bf687bded45d362aa12e129f1cd99e849d", {"f586092ce1afbd8ad065eb738d5b8dec", "55d815078bd445f070595a666bbf6138"}}}}}}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @empty, @local, {[@routing={0x84}], "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"}}}}}, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x20, 0x0, 0x2a)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x2, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181000000000000000000000000000001800000001c6e842000000004e0e0000950000000000c574"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x5, 0x8801, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xf7, 0x40, 0x3d, 0x4}}}}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x40)

67.122281ms ago: executing program 1 (id=2683):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
close(0x3)

338.903µs ago: executing program 0 (id=2684):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000)

193.265µs ago: executing program 1 (id=2685):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000001140)='Y', 0x1)

0s ago: executing program 0 (id=2686):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x31, 0x701, 0x70bd2a, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31012' (ED25519) to the list of known hosts.
syzkaller login: [   48.712649][ T5770] cgroup: Unknown subsys name 'net'
[   48.801475][ T5770] cgroup: Unknown subsys name 'cpuset'
[   48.805748][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.257307][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.483738][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.489600][ T5886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.493248][ T5886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.496925][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.500257][ T5886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.503961][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.538612][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.544883][ T5886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.548648][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.549273][ T5886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.556779][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.556933][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.564572][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.568559][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.572866][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.891756][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   59.984805][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.987177][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.990413][ T5889] bridge_slave_0: entered allmulticast mode
[   59.993192][ T5889] bridge_slave_0: entered promiscuous mode
[   60.035086][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.038060][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.041868][ T5889] bridge_slave_1: entered allmulticast mode
[   60.045728][ T5889] bridge_slave_1: entered promiscuous mode
[   60.068200][ T5885] chnl_net:caif_netlink_parms(): no params data found
[   60.101383][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.107715][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.144857][ T5889] team0: Port device team_slave_0 added
[   60.163502][ T5889] team0: Port device team_slave_1 added
[   60.171981][ T5892] chnl_net:caif_netlink_parms(): no params data found
[   60.227043][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.230361][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.240564][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.280545][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.283451][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.294233][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.298289][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.301714][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.304433][ T5885] bridge_slave_0: entered allmulticast mode
[   60.307857][ T5885] bridge_slave_0: entered promiscuous mode
[   60.321550][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.323861][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.326409][ T5885] bridge_slave_1: entered allmulticast mode
[   60.330198][ T5885] bridge_slave_1: entered promiscuous mode
[   60.391166][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.394289][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.397356][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.401372][ T5892] bridge_slave_0: entered allmulticast mode
[   60.405186][ T5892] bridge_slave_0: entered promiscuous mode
[   60.426445][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.437822][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.440436][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.443156][ T5892] bridge_slave_1: entered allmulticast mode
[   60.446970][ T5892] bridge_slave_1: entered promiscuous mode
[   60.467947][ T5889] hsr_slave_0: entered promiscuous mode
[   60.471233][ T5889] hsr_slave_1: entered promiscuous mode
[   60.500091][ T5885] team0: Port device team_slave_0 added
[   60.504320][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.509724][ T5885] team0: Port device team_slave_1 added
[   60.513541][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.575457][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.577683][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.587809][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.593485][ T5892] team0: Port device team_slave_0 added
[   60.598666][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.601531][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.611239][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.623003][ T5892] team0: Port device team_slave_1 added
[   60.676979][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.680228][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.691626][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.706611][ T5885] hsr_slave_0: entered promiscuous mode
[   60.709609][ T5885] hsr_slave_1: entered promiscuous mode
[   60.711816][ T5885] debugfs: 'hsr0' already exists in 'hsr'
[   60.713675][ T5885] Cannot create hsr debugfs directory
[   60.721634][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.724497][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.736565][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.803835][ T5892] hsr_slave_0: entered promiscuous mode
[   60.806206][ T5892] hsr_slave_1: entered promiscuous mode
[   60.808380][ T5892] debugfs: 'hsr0' already exists in 'hsr'
[   60.810376][ T5892] Cannot create hsr debugfs directory
[   60.912981][ T5889] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.934405][ T5889] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.940586][ T5889] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.952509][ T5889] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.038884][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.068489][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.076986][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.091873][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.118708][ T5892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.135453][ T5892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.143238][ T5892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.157252][ T5892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.168040][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.212127][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   61.226219][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.228800][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.244991][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.248121][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.297442][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.333255][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[   61.349784][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.353028][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.372055][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.376345][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.379365][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.411476][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[   61.434907][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.438042][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.443079][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.445746][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.486280][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.507522][ T5892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.513114][ T5892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.552504][ T5889] veth0_vlan: entered promiscuous mode
[   61.558160][ T5889] veth1_vlan: entered promiscuous mode
[   61.575832][ T5889] veth0_macvtap: entered promiscuous mode
[   61.582834][ T5889] veth1_macvtap: entered promiscuous mode
[   61.602023][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.619780][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.626506][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.636405][ T5741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.643125][ T5888] Bluetooth: hci2: command tx timeout
[   61.648555][ T5741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.652870][ T5888] Bluetooth: hci0: command tx timeout
[   61.653146][   T54] Bluetooth: hci1: command tx timeout
[   61.657868][ T5898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.668618][ T5898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.708571][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.718229][ T5885] veth0_vlan: entered promiscuous mode
[   61.752359][ T5885] veth1_vlan: entered promiscuous mode
[   61.784455][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.787332][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.818022][ T5892] veth0_vlan: entered promiscuous mode
[   61.823498][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.827666][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.836034][ T5892] veth1_vlan: entered promiscuous mode
[   61.841308][ T5885] veth0_macvtap: entered promiscuous mode
[   61.855095][ T5885] veth1_macvtap: entered promiscuous mode
[   61.878421][ T5889] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.895860][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.904402][ T5892] veth0_macvtap: entered promiscuous mode
[   61.911828][ T5892] veth1_macvtap: entered promiscuous mode
[   61.920198][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.945296][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.960248][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.963212][ T5741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.966545][ T5741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.990155][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.993548][ T5741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.017848][ T5741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.027879][ T5741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.041182][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   62.044969][ T5954] openvswitch: netlink: Unknown nsh attribute 0
[   62.047882][ T5954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.048197][ T5741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.056878][ T5741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.099933][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.104442][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.152082][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.155224][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.208466][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.215389][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.238168][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.249818][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.588156][ T5978] vcan0: tx drop: invalid da for name 0x0000000000000001
[   62.645526][ T5980] Zero length message leads to an empty skb
[   62.750411][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'.
[   62.755852][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'.
[   63.192487][ T6006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.362444][ T6017] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.719528][   T54] Bluetooth: hci0: command tx timeout
[   63.720605][ T5888] Bluetooth: hci2: command tx timeout
[   63.721862][   T54] Bluetooth: hci1: command tx timeout
[   63.818937][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.989776][ T6058] bridge0: port 3(erspan0) entered blocking state
[   63.992820][ T6058] bridge0: port 3(erspan0) entered disabled state
[   63.995597][ T6058] erspan0: entered allmulticast mode
[   64.021375][ T6058] erspan0: entered promiscuous mode
[   64.033601][ T6058] bridge0: port 3(erspan0) entered blocking state
[   64.036572][ T6058] bridge0: port 3(erspan0) entered forwarding state
[   64.056861][ T6058] erspan0: left allmulticast mode
[   64.058859][ T6058] erspan0: left promiscuous mode
[   64.074595][ T6058] bridge0: port 3(erspan0) entered disabled state
[   64.864328][ T6119] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   64.867390][ T6119] netlink: 224 bytes leftover after parsing attributes in process `syz.2.97'.
[   65.334138][ T6146] Illegal XDP return value 112237760 on prog  (id 14) dev syz_tun, expect packet loss!
[   65.783246][ T6162] netlink: 'syz.1.117': attribute type 1 has an invalid length.
[   65.787090][ T6162] netlink: 180 bytes leftover after parsing attributes in process `syz.1.117'.
[   65.802442][   T54] Bluetooth: hci1: command tx timeout
[   65.811534][   T54] Bluetooth: hci2: command tx timeout
[   65.811581][ T5888] Bluetooth: hci0: command tx timeout
[   65.946516][ T6177] veth1_to_team: entered allmulticast mode
[   65.954504][ T6177] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   65.986791][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   66.017128][ T6179] gretap0: entered promiscuous mode
[   66.176758][ T6193] netlink: 172 bytes leftover after parsing attributes in process `syz.0.132'.
[   66.205233][ T6195] netlink: 76 bytes leftover after parsing attributes in process `syz.2.133'.
[   66.213713][ T6195] netlink: 128 bytes leftover after parsing attributes in process `syz.2.133'.
[   66.635053][ T6210] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.641459][ T6210] bridge0: port 3(bond1) entered blocking state
[   66.648012][ T6210] bridge0: port 3(bond1) entered disabled state
[   66.652878][ T6210] bond1: entered allmulticast mode
[   66.657133][ T6210] bond1: entered promiscuous mode
[   66.660723][ T6210] bridge0: port 3(bond1) entered blocking state
[   66.663671][ T6210] bridge0: port 3(bond1) entered forwarding state
[   66.917377][ T6228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.013836][ T6228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.041749][   T40] bridge0: port 3(bond1) entered disabled state
[   67.096796][ T6228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.165300][ T6228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.268389][ T5910] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.272986][ T5910] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.283649][ T5910] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.306946][ T5910] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.708011][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'.
[   67.714949][ T6275] netlink: 'syz.2.169': attribute type 2 has an invalid length.
[   67.724112][ T6275] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   67.730573][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'.
[   67.741995][ T5876] IPVS: starting estimator thread 0...
[   67.850682][ T6278] IPVS: using max 78 ests per chain, 187200 per kthread
[   67.879355][   T54] Bluetooth: hci1: command tx timeout
[   67.879419][ T5886] Bluetooth: hci0: command tx timeout
[   67.881772][ T5888] Bluetooth: hci2: command tx timeout
[   67.911244][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'.
[   68.098915][ T6307] netlink: 96 bytes leftover after parsing attributes in process `syz.1.180'.
[   68.193995][ T6313] tipc: Started in network mode
[   68.195770][ T6313] tipc: Node identity 5a0de425b0e7, cluster identity 4711
[   68.198229][ T6313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.203844][ T6313] syzkaller0: entered promiscuous mode
[   68.205714][ T6313] syzkaller0: entered allmulticast mode
[   68.228238][ T6313] tipc: Resetting bearer <eth:syzkaller0>
[   68.233914][ T6312] tipc: Resetting bearer <eth:syzkaller0>
[   68.243074][ T6312] tipc: Disabling bearer <eth:syzkaller0>
[   68.397519][ T6316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.185'.
[   68.721406][ T6333] netlink: 'syz.1.193': attribute type 7 has an invalid length.
[   68.724530][ T6333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.193'.
[   68.818491][ T6340] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[   68.821623][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[   68.927767][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'.
[   69.011469][ T6356] ipvlan2: entered promiscuous mode
[   69.285313][ T6370] syz.0.207 uses obsolete (PF_INET,SOCK_PACKET)
[   69.607397][ T6380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'.
[   69.827011][ T6366] netlink: 'syz.1.205': attribute type 6 has an invalid length.
[   69.961634][ T5888] Bluetooth: hci2: command tx timeout
[   70.185667][ T6388] netlink: 'syz.1.212': attribute type 10 has an invalid length.
[   70.212744][ T6388] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   70.248654][ T6390] syzkaller1: entered promiscuous mode
[   70.251034][ T6390] syzkaller1: entered allmulticast mode
[   70.398908][ T6394] netlink: 104 bytes leftover after parsing attributes in process `syz.1.215'.
[   70.696673][ T6402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.783534][ T6408] geneve2: entered allmulticast mode
[   70.874558][ T6416] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   71.135697][ T6438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.166439][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.169421][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.713270][ T6467] netlink: 'syz.0.249': attribute type 11 has an invalid length.
[   71.822564][ T5294] udevd[5294]: worker [5868] terminated by signal 33 (Unknown signal 33)
[   71.826084][ T5294] udevd[5294]: worker [5868] failed while handling '/devices/virtual/block/loop2'
[   71.883644][ T5294] udevd[5294]: worker [5896] terminated by signal 33 (Unknown signal 33)
[   71.887359][ T5294] udevd[5294]: worker [5896] failed while handling '/devices/virtual/block/loop0'
[   71.957530][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.961887][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.970896][ T6482] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   72.344977][ T6496] netlink: 'syz.0.262': attribute type 30 has an invalid length.
[   72.932859][ T6523] netlink: 'syz.2.266': attribute type 1 has an invalid length.
[   73.728549][ T6556] __nla_validate_parse: 7 callbacks suppressed
[   73.728562][ T6556] netlink: 428 bytes leftover after parsing attributes in process `syz.2.277'.
[   73.734733][ T6556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.277'.
[   74.202269][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'.
[   74.706768][ T6602] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.295'.
[   74.846837][ T6616] bond0: entered promiscuous mode
[   74.848685][ T6616] bond_slave_0: entered promiscuous mode
[   74.852183][ T6616] bond_slave_1: entered promiscuous mode
[   74.855314][ T6616] batadv0: entered promiscuous mode
[   74.857873][ T6616] hsr1: entered allmulticast mode
[   74.860013][ T6616] bond0: entered allmulticast mode
[   74.862098][ T6616] bond_slave_0: entered allmulticast mode
[   74.864457][ T6616] bond_slave_1: entered allmulticast mode
[   74.866454][ T6616] batadv0: entered allmulticast mode
[   74.872494][ T6616] 8021q: adding VLAN 0 to HW filter on device hsr1
[   74.880642][ T6616] bond0: left promiscuous mode
[   74.882765][ T6616] bond_slave_0: left promiscuous mode
[   74.885230][ T6616] bond_slave_1: left promiscuous mode
[   74.885505][ T6618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'.
[   74.896208][ T6616] batadv0: left promiscuous mode
[   74.919629][ T5886] Bluetooth: hci2: command 0x0405 tx timeout
[   74.924843][ T6620] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[   75.236920][ T6654] netlink: 68 bytes leftover after parsing attributes in process `syz.0.315'.
[   75.284357][ T5898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.287538][ T5898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.309166][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.469192][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.619172][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   76.370530][ T6771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.380489][ T6771] syzkaller0: entered promiscuous mode
[   76.384812][ T6771] syzkaller0: entered allmulticast mode
[   76.402184][ T6771] tipc: Resetting bearer <eth:syzkaller0>
[   76.405268][ T6771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.408849][ T6771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.425393][ T6778] netlink: 'syz.1.368': attribute type 1 has an invalid length.
[   76.440155][ T6770] tipc: Resetting bearer <eth:syzkaller0>
[   76.457323][ T6770] tipc: Disabling bearer <eth:syzkaller0>
[   76.694728][ T6795] syz.2.375: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   76.717943][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: syz.2.375 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   76.717966][ T6795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.717973][ T6795] Call Trace:
[   76.717979][ T6795]  <TASK>
[   76.717985][ T6795]  dump_stack_lvl+0x189/0x250
[   76.718007][ T6795]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.718024][ T6795]  ? __pfx__printk+0x10/0x10
[   76.718041][ T6795]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.718056][ T6795]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.718071][ T6795]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   76.718087][ T6795]  warn_alloc+0x214/0x310
[   76.718105][ T6795]  ? stack_depot_save_flags+0x41b/0x860
[   76.718121][ T6795]  ? __pfx_warn_alloc+0x10/0x10
[   76.718141][ T6795]  ? kasan_save_track+0x4f/0x80
[   76.718156][ T6795]  ? xskq_create+0x56/0x170
[   76.718169][ T6795]  ? xsk_init_queue+0xb0/0x110
[   76.718180][ T6795]  ? xsk_setsockopt+0x4dc/0x8d0
[   76.718193][ T6795]  ? do_sock_setsockopt+0x17c/0x1b0
[   76.718209][ T6795]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   76.718225][ T6795]  ? do_syscall_64+0xfa/0x3b0
[   76.718240][ T6795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.718258][ T6795]  __vmalloc_node_range_noprof+0x125/0x12f0
[   76.718297][ T6795]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   76.718315][ T6795]  ? xskq_create+0x56/0x170
[   76.718331][ T6795]  ? __kasan_kmalloc+0x93/0xb0
[   76.718349][ T6795]  vmalloc_user_noprof+0xad/0xf0
[   76.718368][ T6795]  ? xskq_create+0xbf/0x170
[   76.718383][ T6795]  xskq_create+0xbf/0x170
[   76.718399][ T6795]  xsk_init_queue+0xb0/0x110
[   76.718415][ T6795]  xsk_setsockopt+0x4dc/0x8d0
[   76.718430][ T6795]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.718443][ T6795]  ? __pfx_aa_sk_perm+0x10/0x10
[   76.718462][ T6795]  ? aa_sock_opt_perm+0xff/0x1b0
[   76.718481][ T6795]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   76.718494][ T6795]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.718508][ T6795]  do_sock_setsockopt+0x17c/0x1b0
[   76.718529][ T6795]  __x64_sys_setsockopt+0x13f/0x1b0
[   76.718549][ T6795]  do_syscall_64+0xfa/0x3b0
[   76.718571][ T6795]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.718584][ T6795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.718595][ T6795]  ? exc_page_fault+0x9f/0xf0
[   76.718609][ T6795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.718620][ T6795] RIP: 0033:0x7f05a7b8ebe9
[   76.718632][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.718643][ T6795] RSP: 002b:00007f05a8ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   76.718657][ T6795] RAX: ffffffffffffffda RBX: 00007f05a7db6090 RCX: 00007f05a7b8ebe9
[   76.718666][ T6795] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[   76.718673][ T6795] RBP: 00007f05a7c11e19 R08: 0000000000000004 R09: 0000000000000000
[   76.718680][ T6795] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.718687][ T6795] R13: 00007f05a7db6128 R14: 00007f05a7db6090 R15: 00007fff69839b28
[   76.718708][ T6795]  </TASK>
[   76.718714][ T6795] Mem-Info:
[   76.850461][ T6795] active_anon:5555 inactive_anon:0 isolated_anon:0
[   76.850461][ T6795]  active_file:1045 inactive_file:38219 isolated_file:0
[   76.850461][ T6795]  unevictable:1768 dirty:1507 writeback:0
[   76.850461][ T6795]  slab_reclaimable:9515 slab_unreclaimable:51389
[   76.850461][ T6795]  mapped:18231 shmem:2436 pagetables:1010
[   76.850461][ T6795]  sec_pagetables:0 bounce:0
[   76.850461][ T6795]  kernel_misc_reclaimable:0
[   76.850461][ T6795]  free:299089 free_pcp:21221 free_cma:0
[   76.874241][ T6795] Node 0 active_anon:13540kB inactive_anon:0kB active_file:2432kB inactive_file:53172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39100kB dirty:1856kB writeback:0kB shmem:4944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5392kB pagetables:1940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.889506][ T6795] Node 1 active_anon:8680kB inactive_anon:0kB active_file:1748kB inactive_file:99704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33824kB dirty:4172kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6196kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.902613][ T6795] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.916954][ T6795] lowmem_reserve[]: 0 811 811 811 811
[   76.920998][ T6795] Node 0 DMA32 free:364112kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13540kB inactive_anon:0kB active_file:2432kB inactive_file:53172kB unevictable:3536kB writepending:1856kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:56736kB local_pcp:19160kB free_cma:0kB
[   76.934729][ T6795] lowmem_reserve[]: 0 0 0 0 0
[   76.937025][ T6795] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.949523][ T6795] lowmem_reserve[]: 0 0 854 854 854
[   76.951776][ T6795] Node 1 Normal free:358140kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8680kB inactive_anon:0kB active_file:1748kB inactive_file:99704kB unevictable:3536kB writepending:4172kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:28024kB local_pcp:6248kB free_cma:0kB
[   76.965796][ T6795] lowmem_reserve[]: 0 0 0 0 0
[   76.967904][ T6795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   76.973441][ T6795] Node 0 DMA32: 390*4kB (UM) 167*8kB (UME) 56*16kB (UME) 17*32kB (UME) 14*64kB (ME) 8*128kB (UM) 3*256kB (UME) 1*512kB (M) 2*1024kB (ME) 1*2048kB (U) 86*4096kB (M) = 363888kB
[   76.981074][ T6795] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   76.987861][ T6795] Node 1 Normal: 383*4kB (UM) 186*8kB (UME) 75*16kB (M) 326*32kB (UM) 62*64kB (UM) 20*128kB (UM) 12*256kB (UM) 8*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 78*4096kB (M) = 358076kB
[   76.997054][ T6795] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.001234][ T6795] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.005215][ T6795] 41700 total pagecache pages
[   77.007264][ T6795] 0 pages in swap cache
[   77.010724][ T6795] Free swap  = 124996kB
[   77.012571][ T6795] Total swap = 124996kB
[   77.014389][ T6795] 786301 pages RAM
[   77.016017][ T6795] 0 pages HighMem/MovableOnly
[   77.018067][ T6795] 241320 pages reserved
[   77.019971][ T6795] 0 pages cma reserved
[   77.490334][ T6791] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   77.614782][ T6817] netlink: 'syz.1.385': attribute type 12 has an invalid length.
[   77.634515][ T6819] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   77.736613][ T6824] netlink: 'syz.0.384': attribute type 12 has an invalid length.
[   77.740078][ T6824] netlink: 'syz.0.384': attribute type 29 has an invalid length.
[   77.743231][ T6824] netlink: 148 bytes leftover after parsing attributes in process `syz.0.384'.
[   77.887844][ T6832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.391'.
[   78.082081][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'.
[   78.085857][ T6844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.396'.
[   78.144796][ T6834] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[   78.148908][ T6834] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[   78.463852][ T6878] syzkaller0: entered promiscuous mode
[   78.465712][ T6878] syzkaller0: entered allmulticast mode
[   79.159299][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   79.494491][ T6886] tap0: tun_chr_ioctl cmd 1074025677
[   79.496881][ T6886] tap0: linktype set to 0
[   80.402191][ T6958] __nla_validate_parse: 1 callbacks suppressed
[   80.402205][ T6958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'.
[   81.208107][ T6997] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[   81.440347][ T1272] cfg80211: failed to load regulatory.db
[   81.626360][ T7009] netlink: 'syz.2.445': attribute type 16 has an invalid length.
[   81.634968][ T7009] netlink: 'syz.2.445': attribute type 17 has an invalid length.
[   81.864431][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'.
[   82.011481][ T7040] geneve2: entered allmulticast mode
[   82.154001][ T7050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.464'.
[   82.158038][ T7050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.221554][ T7054] netlink: 'syz.0.466': attribute type 1 has an invalid length.
[   82.225091][ T7054] netlink: 224 bytes leftover after parsing attributes in process `syz.0.466'.
[   82.228778][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[   82.558420][ T7082] netlink: 'syz.0.481': attribute type 13 has an invalid length.
[   82.562374][ T7082] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.481'.
[   82.777385][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[   82.988924][ T7111] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[   82.994423][ T7111] netlink: 204 bytes leftover after parsing attributes in process `syz.1.494'.
[   83.000830][ T7111] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[   83.233091][ T7140] ip6tnl1: entered promiscuous mode
[   83.235238][ T7140] ip6tnl1: entered allmulticast mode
[   83.238055][ T7140] team0: Device ip6tnl1 is of different type
[   83.470864][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'.
[   83.516851][ T7165] netlink: 'syz.1.518': attribute type 21 has an invalid length.
[   83.554924][ T7165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.518'.
[   83.772318][ T7187] bond0: Unable to set down delay as MII monitoring is disabled
[   85.217719][ T7253] syzkaller0: entered promiscuous mode
[   85.220271][ T7253] syzkaller0: entered allmulticast mode
[   85.520348][ T7275] netlink: 'syz.0.565': attribute type 3 has an invalid length.
[   85.671273][ T7287] trusted_key: syz.0.570 sent an empty control message without MSG_MORE.
[   86.664088][ T7348] netlink: 'syz.1.598': attribute type 11 has an invalid length.
[   86.924610][ T7376] __nla_validate_parse: 2 callbacks suppressed
[   86.924621][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'.
[   86.954667][ T7380] openvswitch: netlink: IPv4 tun info is not correct
[   87.159173][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.346519][ T7413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.610749][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.630766][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.776444][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'.
[   87.953903][ T7455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.054942][ T7463] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   88.083111][ T7460] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.083854][ T5938] IPVS: starting estimator thread 0...
[   88.167451][ T7471] sctp: [Deprecated]: syz.1.652 (pid 7471) Use of int in max_burst socket option.
[   88.167451][ T7471] Use struct sctp_assoc_value instead
[   88.209235][ T7467] IPVS: using max 49 ests per chain, 117600 per kthread
[   88.218665][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'.
[   88.426276][ T7494] netlink: 17 bytes leftover after parsing attributes in process `syz.2.662'.
[   88.547504][ T7505] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0
[   88.632680][ T7513] sctp: [Deprecated]: syz.2.671 (pid 7513) Use of int in maxseg socket option.
[   88.632680][ T7513] Use struct sctp_assoc_value instead
[   88.691787][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'.
[   88.995418][ T7533] netlink: 'syz.2.680': attribute type 1 has an invalid length.
[   89.009475][ T7533] netlink: 224 bytes leftover after parsing attributes in process `syz.2.680'.
[   89.118421][ T7539] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[   89.353250][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[   89.356597][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[   89.365161][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[   89.368057][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[   89.729517][ T7574] netlink: 'syz.2.698': attribute type 4 has an invalid length.
[   89.900384][ T7580] Bluetooth: MGMT ver 1.23
[   90.131583][ T7577] netlink: 'syz.1.699': attribute type 13 has an invalid length.
[   90.134720][ T7577] netlink: 'syz.1.699': attribute type 17 has an invalid length.
[   90.166750][ T7577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   91.667638][ T7677] netlink: 'syz.1.744': attribute type 2 has an invalid length.
[   91.764059][ T7687] syzkaller0: entered promiscuous mode
[   91.766238][ T7687] syzkaller0: entered allmulticast mode
[   91.873121][ T7699] IPVS: Scheduler module ip_vs_sip not found
[   91.971283][ T5888] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   92.203490][ T7725] sctp: [Deprecated]: syz.0.766 (pid 7725) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.203490][ T7725] Use struct sctp_sack_info instead
[   92.214809][ T7725] sctp: [Deprecated]: syz.0.766 (pid 7725) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.214809][ T7725] Use struct sctp_sack_info instead
[   92.423067][ T7717] __nla_validate_parse: 46 callbacks suppressed
[   92.423084][ T7717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.759'.
[   92.590627][ T7747] netlink: 'syz.1.776': attribute type 1 has an invalid length.
[   92.911702][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'.
[   92.953733][ T7762] delete_channel: no stack
[   93.012838][ T7767] tipc: Started in network mode
[   93.015043][ T7767] tipc: Node identity 1a95b745bcd2, cluster identity 4711
[   93.018896][ T7767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.026245][ T7767] syzkaller0: entered promiscuous mode
[   93.028526][ T7767] syzkaller0: entered allmulticast mode
[   93.046066][ T7767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   93.065561][ T7767] tipc: Resetting bearer <eth:syzkaller0>
[   93.075279][ T7766] tipc: Resetting bearer <eth:syzkaller0>
[   93.089456][ T7766] tipc: Disabling bearer <eth:syzkaller0>
[   93.172730][ T7775] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   93.282136][ T7782] netlink: 264 bytes leftover after parsing attributes in process `syz.1.792'.
[   93.285316][ T7782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.792'.
[   93.433458][ T7800] netlink: 'syz.1.801': attribute type 25 has an invalid length.
[   93.661534][ T7823] netlink: 64 bytes leftover after parsing attributes in process `syz.0.811'.
[   93.767072][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'.
[   93.771894][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'.
[   94.093070][ T7859] netlink: 'syz.0.827': attribute type 1 has an invalid length.
[   94.095875][ T7859] netlink: 88 bytes leftover after parsing attributes in process `syz.0.827'.
[   94.150502][ T7866] !: renamed from dummy0 (while UP)
[   94.433202][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'.
[   94.782689][ T7910] netlink: 'syz.0.843': attribute type 10 has an invalid length.
[   94.802774][ T7910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.843'.
[   94.820622][ T7910] veth0_vlan: entered allmulticast mode
[   94.835403][ T7910] bridge0: port 4(veth0_vlan) entered blocking state
[   94.861330][ T7910] bridge0: port 4(veth0_vlan) entered disabled state
[   94.866676][ T7910] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   94.973150][ T7924] netlink: set zone limit has 8 unknown bytes
[   95.120548][ T7929] IPVS: persistence engine module ip_vs_pe_ not found
[   95.127897][ T7934] tun0: tun_chr_ioctl cmd 2148045848
[   95.132552][ T7934] tun0: tun_chr_ioctl cmd 21731
[   95.453948][ T7972] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   95.753651][ T8000] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   95.757404][ T8000] macvtap0: entered promiscuous mode
[   95.764615][ T8000] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   96.460819][ T8057] syzkaller1: entered promiscuous mode
[   96.466616][ T8057] syzkaller1: entered allmulticast mode
[   97.666571][ T8128] __nla_validate_parse: 4 callbacks suppressed
[   97.666580][ T8128] netlink: 108 bytes leftover after parsing attributes in process `syz.1.925'.
[   97.761987][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'.
[   97.834519][ T8144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.927385][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[   98.933208][ T8189] netlink: 'syz.2.948': attribute type 1 has an invalid length.
[   98.936576][ T8189] netlink: 140 bytes leftover after parsing attributes in process `syz.2.948'.
[   99.200106][ T8196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.307733][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.320831][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.325429][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.329820][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.355449][ T8191] netlink: 'syz.2.950': attribute type 1 has an invalid length.
[   99.359334][ T8191] netlink: 'syz.2.950': attribute type 3 has an invalid length.
[   99.362765][ T8191] netlink: 224 bytes leftover after parsing attributes in process `syz.2.950'.
[   99.381432][ T8196] syz.0.952 (8196) used greatest stack depth: 19864 bytes left
[   99.449505][ T8199] tap0: tun_chr_ioctl cmd 1074025680
[   99.453852][ T8199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.461580][ T8199] D: renamed from syzkaller0
[   99.464677][ T8199] tipc: Disabling bearer <eth:syzkaller0>
[   99.813839][ T8236] bridge0: port 3(netdevsim2) entered blocking state
[   99.816335][ T8236] bridge0: port 3(netdevsim2) entered disabled state
[   99.818804][ T8236] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   99.822966][ T8236] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[   99.826196][ T8236] bridge0: port 3(netdevsim2) entered blocking state
[   99.829123][ T8236] bridge0: port 3(netdevsim2) entered forwarding state
[   99.944258][ T8252] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  100.048955][ T8260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.052903][ T8260] syzkaller0: entered promiscuous mode
[  100.055310][ T8260] syzkaller0: entered allmulticast mode
[  100.075570][ T8260] tipc: Resetting bearer <eth:syzkaller0>
[  100.084438][ T8259] tipc: Resetting bearer <eth:syzkaller0>
[  100.093691][ T8259] tipc: Disabling bearer <eth:syzkaller0>
[  100.248400][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'.
[  100.273991][ T8278] netlink: 112 bytes leftover after parsing attributes in process `syz.1.989'.
[  100.277017][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'.
[  100.323047][ T8282] netlink: 'syz.2.991': attribute type 4 has an invalid length.
[  100.382594][ T8291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.387684][ T8291] syzkaller0: entered promiscuous mode
[  100.391928][ T8291] syzkaller0: entered allmulticast mode
[  100.400420][ T8291] tipc: Resetting bearer <eth:syzkaller0>
[  100.414139][ T8288] tipc: Resetting bearer <eth:syzkaller0>
[  100.442649][ T8288] tipc: Disabling bearer <eth:syzkaller0>
[  100.500308][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'.
[  100.507196][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'.
[  101.803624][ T8409] ip6erspan0: entered promiscuous mode
[  102.023689][ T8430] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  102.430096][ T8465] vlan2: entered promiscuous mode
[  102.434557][ T8465] vlan2: entered allmulticast mode
[  102.438898][ T8465] hsr_slave_1: entered allmulticast mode
[  102.537867][ T8469] netlink: 'syz.0.1062': attribute type 3 has an invalid length.
[  102.962437][ T8482] __nla_validate_parse: 6 callbacks suppressed
[  102.962453][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'.
[  103.063845][ T8492] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1072'.
[  103.212246][ T8504] syzkaller0: entered promiscuous mode
[  103.214188][ T8504] syzkaller0: entered allmulticast mode
[  103.282529][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'.
[  104.012558][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1080'.
[  104.288531][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'.
[  104.329477][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1082'.
[  104.554043][ T8614] openvswitch: netlink: Flow actions attr not present in new flow.
[  104.658017][ T8628] netlink: 'syz.2.1104': attribute type 83 has an invalid length.
[  104.841716][ T8642] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1112'.
[  105.225267][ T8663] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1121'.
[  105.238244][ T8663] batadv1: entered promiscuous mode
[  105.242063][ T8663] batadv1: entered allmulticast mode
[  105.244078][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'.
[  105.270640][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'.
[  106.511794][ T8699] netlink: 'syz.1.1135': attribute type 9 has an invalid length.
[  106.796814][ T8722] bridge0: entered promiscuous mode
[  108.051323][ T8805] netlink: 'syz.0.1182': attribute type 1 has an invalid length.
[  108.714477][ T8872] macsec2: entered promiscuous mode
[  108.726260][ T8872] macsec2: entered allmulticast mode
[  108.826285][ T8883] __nla_validate_parse: 5 callbacks suppressed
[  108.826299][ T8883] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1217'.
[  108.921705][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'.
[  108.930381][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'.
[  108.994210][ T8899] openvswitch: netlink: Message has 4 unknown bytes.
[  109.095895][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'.
[  109.416524][ T8921] syz_tun: entered promiscuous mode
[  109.418847][ T8921] macsec1: entered allmulticast mode
[  109.420984][ T8921] syz_tun: entered allmulticast mode
[  109.426006][ T8921] syz_tun: left allmulticast mode
[  109.427834][ T8921] syz_tun: left promiscuous mode
[  110.072124][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.075473][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.080020][ T8944] bridge0: left promiscuous mode
[  110.162771][ T8944] veth1_to_team: left allmulticast mode
[  110.173028][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.183603][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.277988][ T8944] geneve2: left allmulticast mode
[  110.308443][ T8944] syz.2.1243 (8944) used greatest stack depth: 19840 bytes left
[  110.360883][ T8952] syzkaller0: entered promiscuous mode
[  110.363519][ T8952] syzkaller0: entered allmulticast mode
[  110.370755][ T5910] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.374470][ T5910] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.378066][ T5910] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.382476][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.406550][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1246'.
[  110.466914][ T8934] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  110.755636][ T8980] netlink: 'syz.2.1255': attribute type 2 has an invalid length.
[  110.771901][ T8980] netlink: 'syz.2.1255': attribute type 1 has an invalid length.
[  110.797341][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1258'.
[  111.583258][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'.
[  111.810384][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1273'.
[  111.818581][ T9017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.056752][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1282'.
[  112.306261][ T9066] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  112.455816][ T9085] netlink: 'syz.1.1304': attribute type 1 has an invalid length.
[  112.651895][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'.
[  114.129429][ T9220] netlink: 'syz.2.1364': attribute type 12 has an invalid length.
[  115.052414][ T9258] syzkaller1: entered promiscuous mode
[  115.054815][ T9258] syzkaller1: entered allmulticast mode
[  115.428252][ T9290] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  115.582264][ T9302] __nla_validate_parse: 3 callbacks suppressed
[  115.582275][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'.
[  115.662693][ T9313] netlink: 'syz.0.1409': attribute type 21 has an invalid length.
[  115.666218][ T9314] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  115.718595][ T9318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'.
[  115.742774][ T9323] netlink: 'syz.2.1413': attribute type 4 has an invalid length.
[  115.885734][ T9338] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1421'.
[  115.888923][ T9338] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.935292][ T9345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.949946][ T9347] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.050876][ T9354] sctp: [Deprecated]: syz.0.1428 (pid 9354) Use of int in max_burst socket option.
[  116.050876][ T9354] Use struct sctp_assoc_value instead
[  116.293328][ T9382] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1441'.
[  116.305528][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'.
[  116.664037][ T9410] netlink: 'syz.1.1455': attribute type 3 has an invalid length.
[  116.666630][ T9410] netlink: 'syz.1.1455': attribute type 1 has an invalid length.
[  116.670754][ T9410] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1455'.
[  116.864130][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'.
[  116.985012][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'.
[  116.988178][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'.
[  117.263857][ T9439] infiniband syz2: set down
[  117.265475][ T9439] infiniband syz2: added syzkaller0
[  117.304279][ T9439] RDS/IB: syz2: added
[  117.306518][ T9439] smc: adding ib device syz2 with port count 1
[  117.310294][ T9439] smc:    ib device syz2 port 1 has pnetid 
[  117.536865][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'.
[  117.690810][ T9460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.921756][   T87] smc: removing ib device syz2
[  118.608685][ T9528] netlink: 'syz.0.1510': attribute type 4 has an invalid length.
[  119.453847][ T9555] netlink: zone id is out of range
[  120.395887][ T9638] nbd: couldn't find a device at index 0
[  120.445145][ T9643] lo speed is unknown, defaulting to 1000
[  120.448509][ T9643] lo speed is unknown, defaulting to 1000
[  120.456628][ T9643] lo speed is unknown, defaulting to 1000
[  120.463914][ T9643] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  120.486738][ T9643] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.511431][ T9643] lo speed is unknown, defaulting to 1000
[  120.515686][ T9643] lo speed is unknown, defaulting to 1000
[  120.521325][ T9643] lo speed is unknown, defaulting to 1000
[  120.632104][ T9657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.635341][ T9657] IPv6: NLM_F_CREATE should be set when creating new route
[  120.638374][ T9657] IPv6: NLM_F_CREATE should be set when creating new route
[  120.641463][ T9657] IPv6: NLM_F_CREATE should be set when creating new route
[  120.645725][ T9657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.739548][ T9665] netlink: 'syz.1.1571': attribute type 10 has an invalid length.
[  120.749630][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.760932][ T9665] team0: Port device bond0 added
[  120.790063][ T9669] __nla_validate_parse: 5 callbacks suppressed
[  120.790079][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'.
[  121.355520][ T9705] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  121.793895][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'.
[  121.896249][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'.
[  122.061780][ T9760] netlink: 'syz.0.1617': attribute type 1 has an invalid length.
[  122.064719][ T9760] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1617'.
[  122.068732][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'.
[  123.037036][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'.
[  123.041875][ T9773] netlink: 'syz.2.1623': attribute type 29 has an invalid length.
[  123.050175][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'.
[  123.242877][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'.
[  123.896031][ T9827] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1645'.
[  123.899269][ T9827] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1645'.
[  124.101529][ T9839] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  124.342205][ T1272] IPVS: starting estimator thread 0...
[  124.353970][ T9858] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  124.431910][ T9859] IPVS: using max 79 ests per chain, 189600 per kthread
[  124.527215][ T9872] tipc: Started in network mode
[  124.531280][ T9872] tipc: Node identity 0e1dfbe8288a, cluster identity 4711
[  124.534509][ T9872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.538299][ T9872] syzkaller0: entered promiscuous mode
[  124.540807][ T9872] syzkaller0: entered allmulticast mode
[  124.551565][ T9872] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  124.566548][ T9872] tipc: Resetting bearer <eth:syzkaller0>
[  124.571622][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.587530][ T9870] tipc: Resetting bearer <eth:syzkaller0>
[  124.599908][ T9870] tipc: Disabling bearer <eth:syzkaller0>
[  126.112583][ T9960] __nla_validate_parse: 2 callbacks suppressed
[  126.112596][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'.
[  126.120471][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'.
[  126.123469][ T9960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.490032][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'.
[  126.493315][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'.
[  126.706665][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1722'.
[  127.812204][T10070] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  128.001176][T10094] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  128.056972][ T5888] Bluetooth: hci2: link tx timeout
[  128.060710][ T5888] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.196867][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'.
[  128.260983][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'.
[  128.282147][T10123] macsec0: entered promiscuous mode
[  128.284543][T10123] macvlan1: entered promiscuous mode
[  128.291071][T10123] macvlan1: left promiscuous mode
[  128.373579][T10127] netlink: 'syz.1.1780': attribute type 2 has an invalid length.
[  128.376488][T10127] netlink: 'syz.1.1780': attribute type 5 has an invalid length.
[  128.711387][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  128.714508][T10155] netlink: 'syz.0.1793': attribute type 5 has an invalid length.
[  128.717260][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1793'.
[  128.759233][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.852149][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1797'.
[  129.354422][T10215] Bluetooth: MGMT ver 1.23
[  129.734555][T10249] netlink: 'syz.2.1834': attribute type 1 has an invalid length.
[  129.820839][ T5294] udevd[5294]: worker [10102] terminated by signal 33 (Unknown signal 33)
[  129.827076][ T5294] udevd[5294]: worker [10102] failed while handling '/fs/nfs/net/nfs_client'
[  129.828226][T10252] lo speed is unknown, defaulting to 1000
[  130.041889][ T5886] Bluetooth: hci2: link tx timeout
[  130.044182][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.120962][ T5886] Bluetooth: hci2: command 0x0405 tx timeout
[  130.141009][ T5910] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.143781][ T5910] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.151759][ T5910] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.155066][ T5910] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.251252][T10280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.254363][T10280] syzkaller0: entered promiscuous mode
[  130.256585][T10280] syzkaller0: entered allmulticast mode
[  130.272265][T10280] tipc: Resetting bearer <eth:syzkaller0>
[  130.277085][T10278] tipc: Resetting bearer <eth:syzkaller0>
[  130.289243][T10278] tipc: Disabling bearer <eth:syzkaller0>
[  130.615734][T10308] lo speed is unknown, defaulting to 1000
[  130.690240][T10318] sit0: entered promiscuous mode
[  130.692293][T10318] netlink: 'syz.2.1862': attribute type 1 has an invalid length.
[  131.452541][T10347] __nla_validate_parse: 15 callbacks suppressed
[  131.452558][T10347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'.
[  131.747362][T10370] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1885'.
[  131.996013][T10378] netlink: 'syz.1.1888': attribute type 1 has an invalid length.
[  132.010258][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1888'.
[  132.331435][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'.
[  132.337380][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  132.339934][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  132.606936][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.905713][T10424] lo speed is unknown, defaulting to 1000
[  132.924725][ T5910] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  133.279656][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'.
[  133.289250][T10442] nbd: socks must be embedded in a SOCK_ITEM attr
[  133.294639][T10442] block nbd1: shutting down sockets
[  133.387810][T10452] netlink: 'syz.0.1916': attribute type 13 has an invalid length.
[  133.393703][T10452] netlink: 'syz.0.1916': attribute type 17 has an invalid length.
[  133.403869][T10452] gretap0: left promiscuous mode
[  133.445766][T10452] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.452654][T10452] 8021q: adding VLAN 0 to HW filter on device team0
[  133.464056][T10452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.478009][T10455] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  133.526752][T10452] netlink: 'syz.0.1916': attribute type 10 has an invalid length.
[  133.532919][T10452] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  133.562040][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1916'.
[  133.581062][T10452] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.588264][T10452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  133.871571][T10477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.924527][T10479] sctp: [Deprecated]: syz.1.1929 (pid 10479) Use of int in max_burst socket option deprecated.
[  133.924527][T10479] Use struct sctp_assoc_value instead
[  133.988014][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'.
[  134.244707][T10452] syz.0.1916 (10452) used greatest stack depth: 19680 bytes left
[  134.412868][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1946'.
[  134.420537][T10519] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  134.771929][T10550] netlink: zone id is out of range
[  134.776491][T10550] netlink: zone id is out of range
[  134.778778][T10550] netlink: zone id is out of range
[  134.786008][T10550] netlink: zone id is out of range
[  134.791454][T10550] netlink: zone id is out of range
[  134.793590][T10550] netlink: zone id is out of range
[  134.795721][T10550] netlink: zone id is out of range
[  134.817677][T10555] syzkaller1: entered promiscuous mode
[  134.819807][T10555] syzkaller1: entered allmulticast mode
[  135.693893][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'.
[  137.050804][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  137.067091][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'.
[  137.076309][T10667] netlink: 'syz.1.2009': attribute type 18 has an invalid length.
[  137.095614][ T5898] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.095777][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  137.099758][ T5898] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.103173][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'.
[  137.103197][T10667] netlink: 'syz.1.2009': attribute type 18 has an invalid length.
[  137.106921][ T5898] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.121746][ T5898] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.216929][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2014'.
[  137.246756][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2016'.
[  137.253294][T10681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.257246][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2016'.
[  137.257296][T10681] syzkaller0: entered promiscuous mode
[  137.263332][T10681] syzkaller0: entered allmulticast mode
[  137.286724][T10681] tipc: Resetting bearer <eth:syzkaller0>
[  137.288407][T10682] syz.0.2016 (10682) used greatest stack depth: 19544 bytes left
[  137.292299][T10679] tipc: Resetting bearer <eth:syzkaller0>
[  137.301582][T10679] tipc: Disabling bearer <eth:syzkaller0>
[  137.402247][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'.
[  137.572158][T10698] svc: failed to register nfsdv3 RPC service (errno 111).
[  137.580692][T10698] svc: failed to register nfsaclv3 RPC service (errno 111).
[  137.600348][T10703] lo speed is unknown, defaulting to 1000
[  138.283672][T10741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2041'.
[  138.820912][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'.
[  139.217247][T10777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.221217][T10777] syzkaller0: entered promiscuous mode
[  139.223157][T10777] syzkaller0: entered allmulticast mode
[  139.259854][T10777] tipc: Resetting bearer <eth:syzkaller0>
[  139.267492][T10776] tipc: Resetting bearer <eth:syzkaller0>
[  139.284957][T10776] tipc: Disabling bearer <eth:syzkaller0>
[  139.410894][T10790] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  139.465358][T10792] syzkaller1: entered promiscuous mode
[  139.467848][T10792] syzkaller1: entered allmulticast mode
[  139.610903][T10807] netlink: 'syz.1.2071': attribute type 2 has an invalid length.
[  139.647989][T10810] batadv_slave_0: entered promiscuous mode
[  139.871018][T10797] batadv_slave_0: left promiscuous mode
[  141.043669][T10910] sit0: left promiscuous mode
[  141.056647][ T5898] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.063203][ T5898] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.066583][ T5898] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.071603][ T5898] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.235751][T10920] net_ratelimit: 165 callbacks suppressed
[  141.235764][T10920] veth1: mtu greater than device maximum
[  141.443977][T10928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.448328][T10928] syzkaller0: entered promiscuous mode
[  141.450840][T10928] syzkaller0: entered allmulticast mode
[  141.473003][T10928] tipc: Resetting bearer <eth:syzkaller0>
[  141.478331][T10927] tipc: Resetting bearer <eth:syzkaller0>
[  141.492042][T10927] tipc: Disabling bearer <eth:syzkaller0>
[  142.526123][T10943] __nla_validate_parse: 6 callbacks suppressed
[  142.526133][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'.
[  142.531473][T10943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2128'.
[  142.691726][T10963] bridge_slave_0: left allmulticast mode
[  142.709368][T10963] bridge_slave_0: left promiscuous mode
[  142.712282][T10963] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.726296][T10963] bridge_slave_1: left allmulticast mode
[  142.734941][T10963] bridge_slave_1: left promiscuous mode
[  142.736937][T10963] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.751336][T10963] bond0: (slave bond_slave_0): Releasing backup interface
[  142.755182][T10963] bond_slave_0: left allmulticast mode
[  142.758946][T10963] bond0: (slave bond_slave_1): Releasing backup interface
[  142.765645][T10963] bond_slave_1: left allmulticast mode
[  142.770883][T10963] team0: Port device team_slave_0 removed
[  142.774303][T10963] team0: Port device team_slave_1 removed
[  142.776725][T10963] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.781943][T10963] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.802239][T10963] team0: Mode changed to "activebackup"
[  143.132647][T10995] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  143.146317][T10997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.153827][T10997] syzkaller0: entered promiscuous mode
[  143.156154][T10997] syzkaller0: entered allmulticast mode
[  143.175946][T10997] tipc: Resetting bearer <eth:syzkaller0>
[  143.182861][T10996] tipc: Resetting bearer <eth:syzkaller0>
[  143.197860][T10996] tipc: Disabling bearer <eth:syzkaller0>
[  143.248958][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'.
[  143.682010][T11026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2165'.
[  143.787287][T11035] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2169'.
[  144.324492][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'.
[  144.401765][T11077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.405197][T11077] syzkaller0: entered promiscuous mode
[  144.407585][T11077] syzkaller0: entered allmulticast mode
[  144.413931][T11077] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  144.428578][T11077] tipc: Resetting bearer <eth:syzkaller0>
[  144.432202][T11076] tipc: Resetting bearer <eth:syzkaller0>
[  144.445163][T11076] tipc: Disabling bearer <eth:syzkaller0>
[  144.607742][T11089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2195'.
[  144.644427][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2197'.
[  144.742751][T11089] smc: net device bond0 applied user defined pnetid SYZ2
[  144.748810][T11089] smc: net device bond0 erased user defined pnetid SYZ2
[  144.991292][T11117] netlink: 'syz.2.2206': attribute type 1 has an invalid length.
[  145.091930][   T33] audit: type=1804 audit(1755249719.631:2): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2213" name="/newroot/758/cgroup.controllers" dev="tmpfs" ino=3839 res=1 errno=0
[  145.100762][   T33] audit: type=1800 audit(1755249719.631:3): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2213" name="cgroup.controllers" dev="tmpfs" ino=3839 res=0 errno=0
[  145.111405][   T33] audit: type=1800 audit(1755249719.641:4): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2213" name="cgroup.controllers" dev="tmpfs" ino=3839 res=0 errno=0
[  146.075316][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.078708][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2222'.
[  146.083210][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.089260][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2222'.
[  146.093439][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.097206][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.107109][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.112007][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.115705][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.119731][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.123366][T11158] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  146.171413][ T1272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.478854][T11194] nbd: must specify at least one socket
[  146.763080][T11222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.766899][T11222] syzkaller0: entered promiscuous mode
[  146.769556][T11222] syzkaller0: entered allmulticast mode
[  146.796589][T11222] tipc: Resetting bearer <eth:syzkaller0>
[  146.805758][T11221] tipc: Resetting bearer <eth:syzkaller0>
[  146.816128][T11221] tipc: Disabling bearer <eth:syzkaller0>
[  146.849365][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.080541][ T5886] Bluetooth: hci2: command 0x0405 tx timeout
[  148.822228][T11287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.873816][T11287] syzkaller0: entered promiscuous mode
[  148.876079][T11287] syzkaller0: entered allmulticast mode
[  148.881377][T11287] tipc: Resetting bearer <eth:syzkaller0>
[  148.888057][T11294] __nla_validate_parse: 78 callbacks suppressed
[  148.888070][T11294] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2279'.
[  148.932646][T11286] tipc: Resetting bearer <eth:syzkaller0>
[  149.922953][    T9] tipc: Node number set to 2789717829
[  150.020620][T11286] tipc: Disabling bearer <eth:syzkaller0>
[  150.024754][T11315] validate_nla: 67 callbacks suppressed
[  150.024762][T11315] netlink: 'syz.2.2285': attribute type 1 has an invalid length.
[  150.029433][T11315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2285'.
[  150.372554][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2298'.
[  151.424228][T11392] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2323'.
[  151.470353][T11398] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  151.621229][T11415] netlink: 'syz.0.2330': attribute type 9 has an invalid length.
[  151.710500][T11421] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  151.816860][T11431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2341'.
[  151.961183][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'.
[  152.013263][T11454] lo speed is unknown, defaulting to 1000
[  152.078215][T11461] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2354'.
[  152.204916][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.214993][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.218624][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.222365][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.225348][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.228772][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.233062][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.236856][T11472] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  152.867601][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'.
[  153.064262][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.068681][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.564754][T11558] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2397'.
[  154.974001][T11591] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2413'.
[  155.136896][T11612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.147031][T11612] syzkaller0: entered promiscuous mode
[  155.149747][T11612] syzkaller0: entered allmulticast mode
[  155.167994][T11612] tipc: Resetting bearer <eth:syzkaller0>
[  155.173590][T11611] tipc: Resetting bearer <eth:syzkaller0>
[  155.184960][T11611] tipc: Disabling bearer <eth:syzkaller0>
[  155.328762][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[  155.465393][T11642] ipvlan2: entered promiscuous mode
[  155.572518][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'.
[  155.575551][T11660] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2445'.
[  155.578546][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'.
[  155.602013][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2447'.
[  155.605371][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2447'.
[  155.697463][T11676] validate_nla: 62 callbacks suppressed
[  155.697474][T11676] netlink: 'syz.0.2452': attribute type 5 has an invalid length.
[  155.772414][T11680] netlink: 'syz.0.2454': attribute type 1 has an invalid length.
[  155.775874][T11680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2454'.
[  156.453285][T11706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.374604][T11758] syzkaller1: entered promiscuous mode
[  157.376734][T11758] syzkaller1: entered allmulticast mode
[  157.462899][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'.
[  158.070933][T11815] vxcan1: entered allmulticast mode
[  158.080691][T11816] tun0: tun_chr_ioctl cmd 1074025675
[  158.083239][T11816] tun0: persist enabled
[  158.085298][T11816] tun0: tun_chr_ioctl cmd 1074025675
[  158.087512][T11816] tun0: persist enabled
[  159.028859][T11865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.046528][T11865] team0: Device gtp0 is of different type
[  159.336447][T11883] C: renamed from team_slave_0
[  159.343416][T11883] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  159.346630][T11883] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.083288][T11920] __nla_validate_parse: 9 callbacks suppressed
[  160.083298][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'.
[  160.088879][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'.
[  160.098853][T11920] bridge0: port 1(vlan2) entered blocking state
[  160.102916][T11920] bridge0: port 1(vlan2) entered disabled state
[  160.105755][T11920] vlan2: entered allmulticast mode
[  160.107871][T11920] bridge0: entered allmulticast mode
[  160.112005][T11920] vlan2: left allmulticast mode
[  160.113608][T11920] bridge0: left allmulticast mode
[  161.385833][T11969] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  161.692109][T11984] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2587'.
[  161.695941][T11984] gretap0: entered promiscuous mode
[  161.754471][T11988] bridge_slave_0: left promiscuous mode
[  161.757083][T11988] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.766034][T11988] bridge_slave_1: left allmulticast mode
[  161.768066][T11988] bridge_slave_1: left promiscuous mode
[  161.770303][T11988] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.778427][T11988] bond0: (slave bond_slave_0): Releasing backup interface
[  161.784228][T11988] bond0: (slave bond_slave_1): Releasing backup interface
[  161.791803][T11988] team0: Port device team_slave_0 removed
[  161.796433][T11988] team0: Port device team_slave_1 removed
[  161.799247][T11988] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.802344][T11988] bond1: left allmulticast mode
[  161.804155][T11988] bond1: left promiscuous mode
[  161.807266][T11988] bridge0: port 3(bond1) entered disabled state
[  161.816582][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2586'.
[  162.067842][T12011] netlink: 'syz.1.2599': attribute type 15 has an invalid length.
[  162.154495][T12020] netlink: 'syz.1.2603': attribute type 1 has an invalid length.
[  162.297796][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'.
[  162.628923][T12054] sock: sock_timestamping_bind_phc: sock not bind to device
[  162.727466][T12063] gretap0: left promiscuous mode
[  162.762409][T12063] bridge0: port 3(netdevsim2) entered disabled state
[  162.765440][T12063] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.769836][T12063] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.873539][T12063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.878726][T12063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.957626][T12063] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  162.981909][T12080] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2631'.
[  163.005498][T12063] ip6erspan0: left promiscuous mode
[  163.008086][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'.
[  163.022754][T12082] gtp0: entered promiscuous mode
[  163.024443][T12082] gtp0: entered allmulticast mode
[  163.026783][ T5898] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.033413][ T5898] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.039331][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.042472][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.129760][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'.
[  163.233406][T12093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2637'.
[  163.284856][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'.
[  163.626529][T12124] syzkaller1: entered promiscuous mode
[  163.628750][T12124] syzkaller1: entered allmulticast mode
[  163.795929][T12141] lo speed is unknown, defaulting to 1000
[  163.897734][T12145] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  163.940299][T12154] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  164.327321][T12176] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  164.333639][T12176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.745327][T12199] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  164.886214][T12215] netlink: 'syz.0.2684': attribute type 2 has an invalid length.
[  164.890704][T12215] netlink: 'syz.0.2684': attribute type 2 has an invalid length.
[  164.962762][T12223] ==================================================================
[  164.965322][T12223] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  164.967767][T12223] Read of size 4 at addr ffff888022114544 by task syz.1.2688/12223
[  164.971263][T12223] 
[  164.972158][T12223] CPU: 0 UID: 0 PID: 12223 Comm: syz.1.2688 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  164.972169][T12223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.972174][T12223] Call Trace:
[  164.972178][T12223]  <TASK>
[  164.972182][T12223]  dump_stack_lvl+0x189/0x250
[  164.972194][T12223]  ? __kasan_check_byte+0x12/0x40
[  164.972206][T12223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.972216][T12223]  ? lock_release+0x4b/0x3e0
[  164.972234][T12223]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.972250][T12223]  print_report+0xca/0x240
[  164.972261][T12223]  ? xfrm_alloc_spi+0x570/0xf30
[  164.972270][T12223]  kasan_report+0x118/0x150
[  164.972286][T12223]  ? xfrm_alloc_spi+0x570/0xf30
[  164.972298][T12223]  xfrm_alloc_spi+0x570/0xf30
[  164.972308][T12223]  ? xfrm_alloc_spi+0x2a0/0xf30
[  164.972323][T12223]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  164.972365][T12223]  ? xfrm_find_acq+0x87/0xa0
[  164.972384][T12223]  xfrm_alloc_userspi+0x70b/0xc90
[  164.972400][T12223]  ? apparmor_capable+0x137/0x1b0
[  164.972412][T12223]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  164.972425][T12223]  ? __nla_parse+0x40/0x60
[  164.972438][T12223]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.972446][T12223]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  164.972452][T12223]  ? bpf_trace_run2+0x322/0x4b0
[  164.972469][T12223]  ? rcu_is_watching+0x15/0xb0
[  164.972477][T12223]  ? trace_contention_end+0x39/0x120
[  164.972485][T12223]  ? __mutex_lock+0x335/0x1360
[  164.972496][T12223]  netlink_rcv_skb+0x208/0x470
[  164.972505][T12223]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  164.972511][T12223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.972522][T12223]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.972530][T12223]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.972538][T12223]  xfrm_netlink_rcv+0x79/0x90
[  164.972544][T12223]  netlink_unicast+0x82f/0x9e0
[  164.972554][T12223]  ? __pfx_netlink_unicast+0x10/0x10
[  164.972562][T12223]  ? netlink_sendmsg+0x642/0xb30
[  164.972571][T12223]  ? skb_put+0x11b/0x210
[  164.972581][T12223]  netlink_sendmsg+0x805/0xb30
[  164.972592][T12223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.972602][T12223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.972611][T12223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.972619][T12223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.972627][T12223]  __sock_sendmsg+0x21c/0x270
[  164.972635][T12223]  ____sys_sendmsg+0x505/0x830
[  164.972646][T12223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.972656][T12223]  ? import_iovec+0x74/0xa0
[  164.972663][T12223]  ___sys_sendmsg+0x21f/0x2a0
[  164.972673][T12223]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.972688][T12223]  ? __fget_files+0x2a/0x420
[  164.972699][T12223]  ? __fget_files+0x3a0/0x420
[  164.972710][T12223]  __x64_sys_sendmsg+0x19b/0x260
[  164.972720][T12223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.972731][T12223]  ? rcu_is_watching+0x15/0xb0
[  164.972739][T12223]  ? do_syscall_64+0xbe/0x3b0
[  164.972748][T12223]  do_syscall_64+0xfa/0x3b0
[  164.972756][T12223]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.972763][T12223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.972771][T12223]  ? exc_page_fault+0x9f/0xf0
[  164.972779][T12223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.972785][T12223] RIP: 0033:0x7f0e48b8ebe9
[  164.972792][T12223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.972799][T12223] RSP: 002b:00007f0e49928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.972807][T12223] RAX: ffffffffffffffda RBX: 00007f0e48db5fa0 RCX: 00007f0e48b8ebe9
[  164.972812][T12223] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000009
[  164.972817][T12223] RBP: 00007f0e48c11e19 R08: 0000000000000000 R09: 0000000000000000
[  164.972821][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.972825][T12223] R13: 00007f0e48db6038 R14: 00007f0e48db5fa0 R15: 00007ffca9591f68
[  164.972833][T12223]  </TASK>
[  164.972835][T12223] 
[  165.097317][T12223] Allocated by task 7875:
[  165.098916][T12223]  kasan_save_track+0x3e/0x80
[  165.100522][T12223]  __kasan_slab_alloc+0x6c/0x80
[  165.102076][T12223]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  165.103788][T12223]  xfrm_state_alloc+0x24/0x2f0
[  165.105288][T12223]  xfrm_state_find+0x37d4/0x5400
[  165.106856][T12223]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  165.108793][T12223]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  165.110493][T12223]  xfrm_lookup_route+0x3c/0x1c0
[  165.112067][T12223]  udp_sendmsg+0x142e/0x2170
[  165.113544][T12223]  __sock_sendmsg+0x19c/0x270
[  165.115055][T12223]  ____sys_sendmsg+0x52d/0x830
[  165.116608][T12223]  ___sys_sendmsg+0x21f/0x2a0
[  165.118128][T12223]  __sys_sendmmsg+0x227/0x430
[  165.119673][T12223]  __x64_sys_sendmmsg+0xa0/0xc0
[  165.121332][T12223]  do_syscall_64+0xfa/0x3b0
[  165.122868][T12223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.124831][T12223] 
[  165.125624][T12223] Freed by task 5936:
[  165.126885][T12223]  kasan_save_track+0x3e/0x80
[  165.128424][T12223]  kasan_save_free_info+0x46/0x50
[  165.130048][T12223]  __kasan_slab_free+0x5b/0x80
[  165.131608][T12223]  kmem_cache_free+0x18f/0x400
[  165.133200][T12223]  xfrm_state_gc_task+0x52d/0x6b0
[  165.134876][T12223]  process_scheduled_works+0xae1/0x17b0
[  165.136714][T12223]  worker_thread+0x8a0/0xda0
[  165.138243][T12223]  kthread+0x711/0x8a0
[  165.139645][T12223]  ret_from_fork+0x3fc/0x770
[  165.141195][T12223]  ret_from_fork_asm+0x1a/0x30
[  165.142782][T12223] 
[  165.143587][T12223] The buggy address belongs to the object at ffff888022114480
[  165.143587][T12223]  which belongs to the cache xfrm_state of size 928
[  165.148106][T12223] The buggy address is located 196 bytes inside of
[  165.148106][T12223]  freed 928-byte region [ffff888022114480, ffff888022114820)
[  165.152497][T12223] 
[  165.153282][T12223] The buggy address belongs to the physical page:
[  165.155403][T12223] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022117600 pfn:0x22114
[  165.158621][T12223] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  165.161428][T12223] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  165.164182][T12223] page_type: f5(slab)
[  165.165495][T12223] raw: 00fff00000000240 ffff88801beec780 ffff88801af9f708 ffff88801af9f708
[  165.168299][T12223] raw: ffff888022117600 00000000000e0001 00000000f5000000 0000000000000000
[  165.171375][T12223] head: 00fff00000000240 ffff88801beec780 ffff88801af9f708 ffff88801af9f708
[  165.174897][T12223] head: ffff888022117600 00000000000e0001 00000000f5000000 0000000000000000
[  165.177660][T12223] head: 00fff00000000002 ffffea0000884501 00000000ffffffff 00000000ffffffff
[  165.180457][T12223] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  165.183212][T12223] page dumped because: kasan: bad access detected
[  165.185288][T12223] page_owner tracks the page as allocated
[  165.187135][T12223] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6022, tgid 6021 (syz.0.53), ts 63448170251, free_ts 63326882507
[  165.193269][T12223]  post_alloc_hook+0x240/0x2a0
[  165.194834][T12223]  get_page_from_freelist+0x21e4/0x22c0
[  165.196662][T12223]  __alloc_frozen_pages_noprof+0x181/0x370
[  165.198550][T12223]  alloc_pages_mpol+0x232/0x4a0
[  165.200168][T12223]  allocate_slab+0x8a/0x370
[  165.201665][T12223]  ___slab_alloc+0xbeb/0x1410
[  165.203162][T12223]  kmem_cache_alloc_noprof+0x283/0x3c0
[  165.204899][T12223]  xfrm_state_alloc+0x24/0x2f0
[  165.206498][T12223]  xfrm_add_sa+0x17d1/0x4070
[  165.208078][T12223]  xfrm_user_rcv_msg+0x7a3/0xab0
[  165.209714][T12223]  netlink_rcv_skb+0x208/0x470
[  165.211245][T12223]  xfrm_netlink_rcv+0x79/0x90
[  165.212769][T12223]  netlink_unicast+0x82f/0x9e0
[  165.214376][T12223]  netlink_sendmsg+0x805/0xb30
[  165.216011][T12223]  __sock_sendmsg+0x21c/0x270
[  165.217567][T12223]  ____sys_sendmsg+0x505/0x830
[  165.219367][T12223] page last free pid 5868 tgid 5868 stack trace:
[  165.221783][T12223]  __free_frozen_pages+0xbc4/0xd30
[  165.223699][T12223]  __put_partials+0x156/0x1a0
[  165.225278][T12223]  put_cpu_partial+0x17c/0x250
[  165.226860][T12223]  __slab_free+0x2d5/0x3c0
[  165.228304][T12223]  qlist_free_all+0x97/0x140
[  165.229817][T12223]  kasan_quarantine_reduce+0x148/0x160
[  165.231562][T12223]  __kasan_slab_alloc+0x22/0x80
[  165.233156][T12223]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  165.235040][T12223]  shmem_alloc_inode+0x28/0x40
[  165.236596][T12223]  alloc_inode+0x6a/0x1b0
[  165.237982][T12223]  new_inode+0x22/0x170
[  165.239394][T12223]  shmem_get_inode+0x346/0xe90
[  165.240977][T12223]  shmem_mknod+0x18c/0x3e0
[  165.242440][T12223]  path_openat+0x14f4/0x3830
[  165.243954][T12223]  do_filp_open+0x1fa/0x410
[  165.245443][T12223]  do_sys_openat2+0x121/0x1c0
[  165.246949][T12223] 
[  165.247747][T12223] Memory state around the buggy address:
[  165.249578][T12223]  ffff888022114400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  165.252141][T12223]  ffff888022114480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  165.254696][T12223] >ffff888022114500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  165.257269][T12223]                                            ^
[  165.259301][T12223]  ffff888022114580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  165.261839][T12223]  ffff888022114600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  165.264353][T12223] ==================================================================
[  165.267021][T12223] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  165.269313][T12223] CPU: 0 UID: 0 PID: 12223 Comm: syz.1.2688 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  165.273171][T12223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.276293][T12223] Call Trace:
[  165.277361][T12223]  <TASK>
[  165.278300][T12223]  dump_stack_lvl+0x99/0x250
[  165.279815][T12223]  ? __asan_memcpy+0x40/0x70
[  165.281284][T12223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.283041][T12223]  ? __pfx__printk+0x10/0x10
[  165.284588][T12223]  vpanic+0x281/0x750
[  165.285860][T12223]  ? __pfx_vpanic+0x10/0x10
[  165.287360][T12223]  ? irqentry_exit+0x74/0x90
[  165.288817][T12223]  panic+0xb9/0xc0
[  165.290042][T12223]  ? __pfx_panic+0x10/0x10
[  165.291494][T12223]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  165.293392][T12223]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  165.295278][T12223]  ? xfrm_alloc_spi+0x570/0xf30
[  165.296868][T12223]  check_panic_on_warn+0x89/0xb0
[  165.298466][T12223]  ? xfrm_alloc_spi+0x570/0xf30
[  165.300050][T12223]  end_report+0x78/0x160
[  165.301452][T12223]  kasan_report+0x129/0x150
[  165.302908][T12223]  ? xfrm_alloc_spi+0x570/0xf30
[  165.304473][T12223]  xfrm_alloc_spi+0x570/0xf30
[  165.305935][T12223]  ? xfrm_alloc_spi+0x2a0/0xf30
[  165.307528][T12223]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  165.309144][T12223]  ? xfrm_find_acq+0x87/0xa0
[  165.310629][T12223]  xfrm_alloc_userspi+0x70b/0xc90
[  165.312401][T12223]  ? apparmor_capable+0x137/0x1b0
[  165.314016][T12223]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  165.315785][T12223]  ? __nla_parse+0x40/0x60
[  165.317212][T12223]  xfrm_user_rcv_msg+0x7a3/0xab0
[  165.318799][T12223]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.320788][T12223]  ? bpf_trace_run2+0x322/0x4b0
[  165.322474][T12223]  ? rcu_is_watching+0x15/0xb0
[  165.324000][T12223]  ? trace_contention_end+0x39/0x120
[  165.325650][T12223]  ? __mutex_lock+0x335/0x1360
[  165.327175][T12223]  netlink_rcv_skb+0x208/0x470
[  165.328695][T12223]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.330447][T12223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.332112][T12223]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.333849][T12223]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.335594][T12223]  xfrm_netlink_rcv+0x79/0x90
[  165.337161][T12223]  netlink_unicast+0x82f/0x9e0
[  165.338758][T12223]  ? __pfx_netlink_unicast+0x10/0x10
[  165.340497][T12223]  ? netlink_sendmsg+0x642/0xb30
[  165.342184][T12223]  ? skb_put+0x11b/0x210
[  165.343702][T12223]  netlink_sendmsg+0x805/0xb30
[  165.345252][T12223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.347249][T12223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  165.349261][T12223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.351473][T12223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.353665][T12223]  __sock_sendmsg+0x21c/0x270
[  165.355591][T12223]  ____sys_sendmsg+0x505/0x830
[  165.357649][T12223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.359800][T12223]  ? import_iovec+0x74/0xa0
[  165.361649][T12223]  ___sys_sendmsg+0x21f/0x2a0
[  165.363587][T12223]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.365774][T12223]  ? __fget_files+0x2a/0x420
[  165.367710][T12223]  ? __fget_files+0x3a0/0x420
[  165.369663][T12223]  __x64_sys_sendmsg+0x19b/0x260
[  165.371687][T12223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.373942][T12223]  ? rcu_is_watching+0x15/0xb0
[  165.375919][T12223]  ? do_syscall_64+0xbe/0x3b0
[  165.377889][T12223]  do_syscall_64+0xfa/0x3b0
[  165.379787][T12223]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.381922][T12223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.384445][T12223]  ? exc_page_fault+0x9f/0xf0
[  165.386389][T12223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.388773][T12223] RIP: 0033:0x7f0e48b8ebe9
[  165.390624][T12223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.398501][T12223] RSP: 002b:00007f0e49928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.401917][T12223] RAX: ffffffffffffffda RBX: 00007f0e48db5fa0 RCX: 00007f0e48b8ebe9
[  165.405354][T12223] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000009
[  165.408608][T12223] RBP: 00007f0e48c11e19 R08: 0000000000000000 R09: 0000000000000000
[  165.411863][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.415120][T12223] R13: 00007f0e48db6038 R14: 00007f0e48db5fa0 R15: 00007ffca9591f68
[  165.418285][T12223]  </TASK>
[  165.420361][T12223] Kernel Offset: disabled
[  165.422153][T12223] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:22:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f4f RDI=0000000000000f50 RBP=00000000000003f8 RSP=ffffc9000612e9f0
R8 =ffff888107888237 R9 =1ffff11020f11046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f2 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0e499286c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34d1aff8 CR3=000000011df3e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0e48d87498 00007f0e48d87470 XMM03=00007f0e48d874a8 00007f0e48d874a0
XMM04=00007f0e498ed100 00007f0e48d87460 XMM05=00007f0e48d87478 00007f0e48d874c0
XMM06=00007f0e48d874b8 00007f0e48d874b0 XMM07=00007f0e48d874a8 00007f0e48d874a0
XMM08=0000000000000000 00007f0e48c12ee7 XMM09=0000000000000000 00007f0e48c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff821815e2 RBX=ffffffff8fbf5b80 RCX=ffffffff8fbf5b84 RDX=ffffffff8fbf5b80
RSI=ffffffff903f6aa4 RDI=ffffffff8be32620 RBP=ffffffff8fbf5b80 RSP=ffffc9000371f4f8
R8 =000000000000000f R9 =ffffffff8172c195 R10=ffffc9000371f618 R11=ffffffff81ac3890
R12=ffffffff8218175d R13=ffffffff8fbf5b80 R14=ffffc9000371f5c8 R15=ffffffff8fbf5b80
RIP=ffffffff8172d40f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555dd54500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555dd6f5c8 CR3=0000000107080000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f05a7c12e53
XMM06=0000000000000000 00007f05a7c12e4d XMM07=0000000000000000 00007f05a7c12e61
XMM08=0000000000000000 00007f05a7c12ee7 XMM09=0000000000000000 00007f05a7c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
