last executing test programs:

2m20.54681212s ago: executing program 0 (id=4526):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m20.479598333s ago: executing program 0 (id=4529):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804)

2m20.400299781s ago: executing program 0 (id=4531):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m20.350127139s ago: executing program 0 (id=4534):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80)

2m20.22003462s ago: executing program 0 (id=4537):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, 0xdf, 0x0, 0x0, 0x3, 0x10000}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x0, 0x34}, 0x28)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20)

2m20.152164639s ago: executing program 0 (id=4538):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000280)=""/83, 0x53, 0x20, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd8efb076b3815638, 0xffffffffffffffff, 0x4000)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40)

2m5.157408895s ago: executing program 32 (id=4538):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000280)=""/83, 0x53, 0x20, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd8efb076b3815638, 0xffffffffffffffff, 0x4000)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40)

2m2.337745824s ago: executing program 3 (id=4826):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000f0"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

2m2.179030084s ago: executing program 3 (id=4832):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000112020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

2m2.108655873s ago: executing program 3 (id=4835):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
close(r0)

2m2.028081597s ago: executing program 3 (id=4838):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)="6e4e76dc25", 0x5}], 0x1}}], 0x1, 0x24044c41)

2m1.937296697s ago: executing program 3 (id=4839):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})

2m1.928184887s ago: executing program 3 (id=4840):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

1m58.788683885s ago: executing program 1 (id=4873):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2000000000000002)

1m58.72897193s ago: executing program 1 (id=4875):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0)

1m58.677005717s ago: executing program 1 (id=4876):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1m58.56611531s ago: executing program 1 (id=4881):
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0)

1m58.534891546s ago: executing program 1 (id=4882):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r0, 0x0)
accept(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20)

1m57.608550045s ago: executing program 1 (id=4899):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)

1m46.507646888s ago: executing program 33 (id=4840):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

1m42.504356786s ago: executing program 34 (id=4899):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)

54.964699598s ago: executing program 4 (id=5918):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000)

54.915011931s ago: executing program 4 (id=5921):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[], 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

54.652848208s ago: executing program 4 (id=5923):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801)
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r10, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r11}, 0x10)
ppoll(&(0x7f0000000100)=[{r3, 0x8000}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r13 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r13, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)

53.626318637s ago: executing program 4 (id=5924):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc51}}, 0xfffc, 0xe}, &(0x7f0000000500)=0x90)

53.625835256s ago: executing program 4 (id=5925):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xa)
write$cgroup_devices(r1, &(0x7f0000000000)={'b', ' *:* ', 'w\x00'}, 0x8)

53.532772581s ago: executing program 4 (id=5926):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket(0x8, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x61d9, &(0x7f0000000040))

38.474757702s ago: executing program 35 (id=5926):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket(0x8, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x61d9, &(0x7f0000000040))

15.372891599s ago: executing program 5 (id=6665):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0)

15.37266246s ago: executing program 5 (id=6666):
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local={0x3}, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}}}}}, 0x0)

15.321980964s ago: executing program 5 (id=6668):
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x2)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r1, 0x3a5)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x50)

15.212037162s ago: executing program 5 (id=6671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0)

15.21171646s ago: executing program 5 (id=6672):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x24}, 0xc)

15.124783212s ago: executing program 5 (id=6673):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x15, 0x5, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)

831.763744ms ago: executing program 6 (id=6938):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)

831.509871ms ago: executing program 6 (id=6940):
syz_emit_ethernet(0xf, &(0x7f0000000040)={@local, @remote, @void, {@generic={0x88f5, '\x00'}}}, 0x0)

779.919874ms ago: executing program 6 (id=6942):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
shutdown(r2, 0x0)

639.667908ms ago: executing program 6 (id=6943):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'tunl0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'batadv0\x00'}})

639.230492ms ago: executing program 6 (id=6945):
syz_emit_ethernet(0x84a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x814, 0x2b, 0x0, @empty, @local, {[@dstopts={0x89, 0x100, '\x00', [@ra, @generic={0x0, 0x7fa, "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"}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

569.800572ms ago: executing program 6 (id=6948):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x65, "3b94c4465c672603dd5ce40dea74e081e19eeab37510c73c03ec211d93ce9491db5e8657e3960b11e9aa3c56011c4beb2362e4bd1fa978e1989f47ec1e07c3d97b33c1ebc3a3413bcfd7bcd213c068bf2834de5c157269772e7dbdd379e996755e0d5f0ec1"}, &(0x7f0000000140)=0x6d)

569.656914ms ago: executing program 2 (id=6949):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000)

569.511813ms ago: executing program 2 (id=6950):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x9, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x9}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

484.627441ms ago: executing program 2 (id=6951):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4048000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

341.933996ms ago: executing program 2 (id=6952):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)

341.395181ms ago: executing program 2 (id=6953):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x20, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r4, 0x25, 0x2, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@setlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x4014, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806c", 0x5a}], 0x3}, 0x4000005)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4)
close(0xffffffffffffffff)

47.295813ms ago: executing program 36 (id=6673):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x15, 0x5, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)

0s ago: executing program 2 (id=6955):
unshare(0x2c020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

kernel console output (not intermixed with test programs):

vlan1) entered blocking state
[  159.994535][T10723] bridge0: port 1(macvlan1) entered disabled state
[  159.998485][T10723] macvlan1: entered allmulticast mode
[  160.001941][T10723] macvlan1: entered promiscuous mode
[  160.681941][T10772] team0: Mode changed to "roundrobin"
[  160.712184][T10774] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  160.715045][T10774] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  162.814910][T10857] validate_nla: 9 callbacks suppressed
[  162.814920][T10857] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  162.881773][T10861] netlink: 'syz.2.2138': attribute type 10 has an invalid length.
[  164.011282][T10909] netlink: 'syz.0.2161': attribute type 1 has an invalid length.
[  164.082481][T10913] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  164.093183][T10913] __nla_validate_parse: 19 callbacks suppressed
[  164.093194][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'.
[  164.101705][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'.
[  164.554111][T10949] bridge0: port 4(erspan0) entered blocking state
[  164.556812][T10949] bridge0: port 4(erspan0) entered disabled state
[  164.559532][T10949] erspan0: entered allmulticast mode
[  164.563998][T10949] erspan0: entered promiscuous mode
[  164.569989][T10949] bridge0: port 4(erspan0) entered blocking state
[  164.573086][T10949] bridge0: port 4(erspan0) entered forwarding state
[  164.581939][T10949] erspan0: left allmulticast mode
[  164.583899][T10949] erspan0: left promiscuous mode
[  164.586536][T10949] bridge0: port 4(erspan0) entered disabled state
[  164.634838][T10953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.834987][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'.
[  165.030724][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'.
[  165.931330][T11019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2203'.
[  165.935132][T11019] netlink: 'syz.2.2203': attribute type 1 has an invalid length.
[  166.216082][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'.
[  166.219120][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.221693][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.224266][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.228294][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.230890][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.233437][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.244610][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.247376][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.421801][T11048] vxcan1 speed is unknown, defaulting to 1000
[  166.614998][T11057] bond3: entered promiscuous mode
[  166.626096][T11057] bond3: entered allmulticast mode
[  166.628998][T11057] 8021q: adding VLAN 0 to HW filter on device bond3
[  167.154822][T11074] netlink: 'syz.2.2226': attribute type 3 has an invalid length.
[  167.587683][T11089] IPVS: Scheduler module ip_vs_ not found
[  167.689163][T11096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2237'.
[  168.527652][T11156] netlink: 'syz.2.2263': attribute type 99 has an invalid length.
[  168.611298][T11161] vxcan1 speed is unknown, defaulting to 1000
[  168.936259][T11186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.942037][T11186] syzkaller0: entered promiscuous mode
[  168.944006][T11186] syzkaller0: entered allmulticast mode
[  168.961695][T11186] tipc: Resetting bearer <eth:syzkaller0>
[  168.964997][T11183] tipc: Resetting bearer <eth:syzkaller0>
[  168.979382][T11183] tipc: Disabling bearer <eth:syzkaller0>
[  170.022698][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'.
[  170.032238][T11268] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  170.069470][T11268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.073263][T11268] netlink: 'syz.1.2314': attribute type 1 has an invalid length.
[  170.119529][T11268] tipc: Disabling bearer <eth:syzkaller0>
[  170.484054][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'.
[  170.636139][T11292] tipc: Resetting bearer <eth:syzkaller0>
[  171.473349][T11333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2339'.
[  171.559240][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'.
[  171.699642][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  171.851822][T11361] vxcan1 speed is unknown, defaulting to 1000
[  171.913822][T11364] ieee802154 phy1 wpan1: encryption failed: -22
[  172.205211][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'.
[  173.226700][T11418] netlink: 'syz.1.2371': attribute type 4 has an invalid length.
[  173.229808][T11418] IPv6: NLM_F_CREATE should be specified when creating new route
[  173.573522][T11440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  174.177932][T11445] netlink: 'syz.0.2385': attribute type 9 has an invalid length.
[  174.180868][T11445] netlink: 'syz.0.2385': attribute type 7 has an invalid length.
[  174.183386][T11445] netlink: 'syz.0.2385': attribute type 8 has an invalid length.
[  174.215755][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'.
[  174.245050][T11454] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2389'.
[  174.302125][T11460] netlink: 'syz.2.2389': attribute type 15 has an invalid length.
[  174.318912][T11459] vxcan1 speed is unknown, defaulting to 1000
[  174.362574][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2392'.
[  174.462363][T11467] netlink: 'syz.2.2394': attribute type 13 has an invalid length.
[  174.465519][T11467] netlink: 'syz.2.2394': attribute type 17 has an invalid length.
[  174.523169][T11467] 8021q: adding VLAN 0 to HW filter on device team0
[  174.533062][T11467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.605745][T11467] vxcan1 speed is unknown, defaulting to 1000
[  174.681758][T11468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.120998][T11478] tipc: Invalid UDP bearer configuration
[  175.121047][T11478] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  175.570629][T11508] syzkaller1: entered promiscuous mode
[  175.572858][T11508] syzkaller1: entered allmulticast mode
[  175.756342][T11514] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  176.845171][T11560] netlink: 'syz.0.2436': attribute type 15 has an invalid length.
[  176.889102][T11557] vxcan1 speed is unknown, defaulting to 1000
[  176.895692][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'.
[  176.916108][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'.
[  176.923520][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'.
[  176.927706][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'.
[  177.241783][T11575] netlink: 'syz.0.2442': attribute type 8 has an invalid length.
[  177.457961][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2448'.
[  177.679459][T11607] sctp: [Deprecated]: syz.2.2458 (pid 11607) Use of int in maxseg socket option.
[  177.679459][T11607] Use struct sctp_assoc_value instead
[  177.879406][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'.
[  178.441040][T11655] syzkaller1: entered promiscuous mode
[  178.443160][T11655] syzkaller1: entered allmulticast mode
[  178.454420][   T24] IPVS: starting estimator thread 0...
[  178.556183][T11658] IPVS: using max 63 ests per chain, 151200 per kthread
[  178.808405][T11672] syzkaller1: entered promiscuous mode
[  178.810999][T11672] syzkaller1: entered allmulticast mode
[  179.424206][T11696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.561467][T11715] vxcan1 speed is unknown, defaulting to 1000
[  179.749104][T11729] netlink: 'syz.2.2509': attribute type 5 has an invalid length.
[  179.884200][T11734] tap0: tun_chr_ioctl cmd 1074812118
[  180.055355][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2516'.
[  180.062602][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2516'.
[  180.363973][T11766] batman_adv: batadv0: Adding interface: macvtap1
[  180.369054][T11766] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  180.378859][T11766] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  180.519971][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'.
[  180.778686][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'.
[  181.815015][T11844] vxcan1 speed is unknown, defaulting to 1000
[  181.824945][T11854] macvlan1: left allmulticast mode
[  181.827512][T11854] macvlan1: left promiscuous mode
[  181.829834][T11854] bridge0: port 1(macvlan1) entered disabled state
[  182.353580][T11890] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  182.466438][T11898] __nla_validate_parse: 2 callbacks suppressed
[  182.466451][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'.
[  182.599020][T11904] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2577'.
[  182.647792][T11907] vxcan1 speed is unknown, defaulting to 1000
[  182.841946][T11914] veth0: Caught tx_queue_len zero misconfig
[  183.145999][T11928] netlink: 'syz.0.2586': attribute type 10 has an invalid length.
[  183.149019][T11928] team0: Device dummy0 is up. Set it down before adding it as a team port
[  183.360086][T11939] netlink: 'syz.2.2589': attribute type 1 has an invalid length.
[  183.362797][T11939] netlink: 'syz.2.2589': attribute type 4 has an invalid length.
[  183.367811][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'.
[  184.202262][T12008] vxcan1 speed is unknown, defaulting to 1000
[  184.242278][T12011] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.2617'.
[  184.393262][T12018] batadv_slave_1: entered promiscuous mode
[  184.398316][T12017] batadv_slave_1: left promiscuous mode
[  184.949771][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2641'.
[  185.065998][T12069] IPVS: Scheduler module ip_vs_sip not found
[  185.804082][T12124] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2665'.
[  185.939555][T12124] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  185.943643][T12124] bond0 (unregistering): Released all slaves
[  186.340173][T12158] netlink: 'syz.0.2677': attribute type 1 has an invalid length.
[  186.346753][T12158] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2677'.
[  186.350296][T12156] vxcan1 speed is unknown, defaulting to 1000
[  187.061524][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'.
[  187.300461][T12209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2699'.
[  187.344017][T12211] netlink: 'syz.1.2700': attribute type 322 has an invalid length.
[  187.419584][T12213] vxcan1 speed is unknown, defaulting to 1000
[  188.204560][T12264] netlink: 'syz.2.2719': attribute type 1 has an invalid length.
[  188.249203][T12264] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.298021][T12264] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.303494][T12264] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  188.333126][T12264] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  188.415115][T12269] veth9: entered promiscuous mode
[  188.429026][T12269] bond0: (slave veth9): Enslaving as an active interface with a down link
[  188.438341][T12265] vxcan1 speed is unknown, defaulting to 1000
[  188.819454][T12288] Unknown options in mask b7f2
[  188.875662][T12290] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  190.248146][T12306] vlan3: entered allmulticast mode
[  190.529103][T12326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.542293][T12326] syzkaller0: entered promiscuous mode
[  190.546095][T12326] syzkaller0: entered allmulticast mode
[  190.580585][T12326] tipc: Resetting bearer <eth:syzkaller0>
[  190.582247][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2743'.
[  190.588090][T12325] tipc: Resetting bearer <eth:syzkaller0>
[  190.599413][T12325] tipc: Disabling bearer <eth:syzkaller0>
[  190.607543][T12329] bond0: entered promiscuous mode
[  190.610028][T12329] batadv0: entered promiscuous mode
[  190.612512][T12329] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  190.615530][T12329] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  190.620236][T12329] 8021q: adding VLAN 0 to HW filter on device hsr1
[  190.623457][T12323] vxcan1 speed is unknown, defaulting to 1000
[  190.638215][T12329] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2743'.
[  190.768471][T12329] smc: removing net device bond0 with user defined pnetid SYZ2
[  190.772223][T12329] bond0 (unregistering): left promiscuous mode
[  190.775335][T12329] bond0 (unregistering): Released all slaves
[  191.126334][ T6035] Bluetooth: hci1: command 0x0406 tx timeout
[  191.551770][T12377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2765'.
[  192.437034][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'.
[  192.605570][T12467] netlink: 'syz.0.2802': attribute type 1 has an invalid length.
[  192.615645][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'.
[  192.880464][T12489] vxcan1 speed is unknown, defaulting to 1000
[  193.172345][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2820'.
[  193.301958][T12523] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2826'.
[  193.350810][T12527] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2828'.
[  194.403958][T12566] vxcan1 speed is unknown, defaulting to 1000
[  194.621105][T12580] vxcan1 speed is unknown, defaulting to 1000
[  195.598761][T12632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.645197][T12634] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  195.702733][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'.
[  195.705541][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'.
[  195.708767][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'.
[  195.864272][T12656] syzkaller0: tun_chr_ioctl cmd 1074025677
[  195.867770][T12656] syzkaller0: linktype set to 1
[  196.011423][T12664] vxcan1 speed is unknown, defaulting to 1000
[  196.464626][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'.
[  196.478105][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'.
[  196.802419][T12704] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2906'.
[  196.809563][T12704] netlink: 'syz.2.2906': attribute type 3 has an invalid length.
[  198.963952][T12761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2928'.
[  200.350925][T12798] vxcan1 speed is unknown, defaulting to 1000
[  200.676191][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2954'.
[  200.883594][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'.
[  201.059544][T12849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2966'.
[  201.071947][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2967'.
[  201.142555][T12855] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  201.195427][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'.
[  201.248943][T12863] netlink: 'syz.2.2973': attribute type 1 has an invalid length.
[  201.253808][T12865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2974'.
[  201.275842][T12865] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2974'.
[  201.290800][T12863] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  201.296409][T12863] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  201.329508][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2975'.
[  201.365677][T12869] gretap1: entered promiscuous mode
[  201.372406][T12869] bond2: (slave gretap1): making interface the new active one
[  201.376346][T12869] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  201.407568][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'.
[  201.579421][T12880] netlink: 'syz.2.2978': attribute type 1 has an invalid length.
[  201.581904][T12880] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2978'.
[  202.340844][T12940] netlink: 'syz.1.3009': attribute type 4 has an invalid length.
[  202.551750][T12957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3016'.
[  204.008898][T13030] vxcan1 speed is unknown, defaulting to 1000
[  204.072581][T13038] lo: entered allmulticast mode
[  204.075279][T13038] lo: left allmulticast mode
[  204.859362][T13091] IPVS: Scheduler module ip_vs_ not found
[  205.248842][T13128] veth1: Caught tx_queue_len zero misconfig
[  205.627019][T13159] openvswitch: netlink: IPv4 tun info is not correct
[  206.053254][T13182] __nla_validate_parse: 10 callbacks suppressed
[  206.053276][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'.
[  206.103421][T13186] netlink: 156260 bytes leftover after parsing attributes in process `syz.0.3117'.
[  206.373795][T13193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.600536][T13203] vxcan1 speed is unknown, defaulting to 1000
[  207.088919][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'.
[  207.557276][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'.
[  207.640608][T13219] smc: adding net device bond0 with user defined pnetid SYZ2
[  207.771504][T13231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3133'.
[  207.774357][T13231] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3133'.
[  207.779128][T13231] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  208.023962][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'.
[  208.953951][T13265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.959224][T13265] syzkaller0: entered promiscuous mode
[  208.961649][T13265] syzkaller0: entered allmulticast mode
[  208.981434][T13265] tipc: Resetting bearer <eth:syzkaller0>
[  208.987746][T13264] tipc: Resetting bearer <eth:syzkaller0>
[  209.004224][T13264] tipc: Disabling bearer <eth:syzkaller0>
[  209.010892][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'.
[  209.159959][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'.
[  209.553149][T13296] syz.2.3162 (13296) used obsolete PPPIOCDETACH ioctl
[  210.220750][T13330] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  210.229985][T13332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3179'.
[  210.402362][T13341] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.406611][T13341] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.432135][T13343] IPv6: NLM_F_REPLACE set, but no existing node found!
[  210.441933][T13341] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.446516][T13341] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.503862][T13341] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.508205][T13341] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.556290][T13341] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.560505][T13341] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.647673][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.651779][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.667296][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.670679][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.687965][ T5898] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.691242][ T5898] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.704149][ T5898] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.714660][ T5898] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.288316][T13395] __nla_validate_parse: 1 callbacks suppressed
[  211.288326][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3208'.
[  211.393670][T13401] IPVS: Error connecting to the multicast addr
[  211.653760][T13417] netlink: 'syz.2.3219': attribute type 1 has an invalid length.
[  211.788287][T13417] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.798850][T13425] bond3: entered promiscuous mode
[  211.807868][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'.
[  211.812130][T13424] tipc: Enabled bearer <eth:vlan0>, priority 18
[  212.092900][T13452] netlink: 'syz.0.3234': attribute type 19 has an invalid length.
[  212.116194][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'.
[  212.128124][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3236'.
[  212.138352][T13452] netlink: 'syz.0.3234': attribute type 19 has an invalid length.
[  212.141506][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'.
[  212.213222][T13459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.230333][T13459] syzkaller0: entered promiscuous mode
[  212.232523][T13459] syzkaller0: entered allmulticast mode
[  212.263789][T13459] tipc: Resetting bearer <eth:syzkaller0>
[  212.272743][T13457] tipc: Resetting bearer <eth:syzkaller0>
[  212.306514][T13457] tipc: Disabling bearer <eth:syzkaller0>
[  212.434068][T13482] netlink: 'syz.1.3250': attribute type 1 has an invalid length.
[  212.437540][T13482] netlink: 'syz.1.3250': attribute type 3 has an invalid length.
[  212.440617][T13482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3250'.
[  212.449916][T13482] NCSI netlink: No device for ifindex 246
[  212.580675][T13496] netlink: 'syz.2.3255': attribute type 12 has an invalid length.
[  212.644180][T13500] netlink: 'syz.2.3257': attribute type 16 has an invalid length.
[  212.647911][T13500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3257'.
[  212.708377][T13502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.974336][T13512] netlink: 'syz.2.3261': attribute type 1 has an invalid length.
[  212.983093][T13512] netlink: 17231 bytes leftover after parsing attributes in process `syz.2.3261'.
[  213.051667][T13514] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  213.519493][T13530] syzkaller1: entered promiscuous mode
[  213.521660][T13530] syzkaller1: entered allmulticast mode
[  213.628890][T13535] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  214.809662][T13587] nbd: socks must be embedded in a SOCK_ITEM attr
[  214.970151][T13591] vxcan1 speed is unknown, defaulting to 1000
[  215.003248][T13590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.019271][T13594] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  215.142932][T13600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3299'.
[  216.091091][T13629] netlink: 'syz.2.3311': attribute type 3 has an invalid length.
[  216.094258][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[  217.237859][T13658] __nla_validate_parse: 1 callbacks suppressed
[  217.237878][T13658] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3323'.
[  217.528531][T13663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  218.689408][T13715] vxcan1 speed is unknown, defaulting to 1000
[  218.892374][T13729] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  218.895240][T13729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.206588][ T6035] Bluetooth: hci2: command 0x0405 tx timeout
[  220.001476][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'.
[  220.427491][T13832] syzkaller1: entered promiscuous mode
[  220.430144][T13832] syzkaller1: entered allmulticast mode
[  220.575694][T13843] syzkaller1: entered promiscuous mode
[  220.578171][T13843] syzkaller1: entered allmulticast mode
[  220.582110][T13844] vxcan1: entered allmulticast mode
[  220.599994][T13844] vxcan1: left allmulticast mode
[  220.666523][T13844] raw_sendmsg: syz.0.3407 forgot to set AF_INET. Fix it!
[  221.162383][T13873] tipc: Cannot configure node identity twice
[  221.165195][ T5898] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.171116][ T5898] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.175762][ T5898] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.179617][ T5898] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.182997][ T5898] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.186729][ T5898] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.190141][ T5898] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.193255][ T5898] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.254766][T13876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  221.391165][T13876] vlan0: left promiscuous mode
[  221.397606][T13876] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  221.401114][T13876] xfrm1: left promiscuous mode
[  221.403194][T13876] xfrm1: left allmulticast mode
[  221.406001][T13876] geneve0: left promiscuous mode
[  221.408394][T13876] ip6gretap1: left allmulticast mode
[  221.411583][T13876] geneve2: left promiscuous mode
[  221.413611][T13876] geneve2: left allmulticast mode
[  221.418591][T13876] bridge5: left allmulticast mode
[  221.428489][T13876] veth9: left promiscuous mode
[  221.440005][T13876] gretap1: left promiscuous mode
[  221.444298][T13876] bond3: left promiscuous mode
[  221.544257][T13888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3427'.
[  221.945116][T13916] vxcan1 speed is unknown, defaulting to 1000
[  222.400921][T13935] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  223.071596][T13961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3459'.
[  223.075284][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3459'.
[  223.079307][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'.
[  223.378581][T13991] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  223.638014][T14016] ip6gre1: entered allmulticast mode
[  223.949824][T14039] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  223.953346][T14039] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.691896][T14089] tipc: Failed to remove unknown binding: 66,1,1/134418688:4191952198/4191952200
[  224.698307][T14089] tipc: Failed to remove unknown binding: 66,1,1/134418688:4191952198/4191952200
[  224.949456][T14099] vxcan1 speed is unknown, defaulting to 1000
[  225.573941][T14123] veth0: entered promiscuous mode
[  225.576140][T14122] veth0: left promiscuous mode
[  225.600918][T14127] netlink: 'syz.2.3505': attribute type 13 has an invalid length.
[  225.610421][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'.
[  225.614149][T14127] netlink: 'syz.2.3505': attribute type 13 has an invalid length.
[  225.630687][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'.
[  225.699981][T14132] netlink: 'syz.1.3506': attribute type 8 has an invalid length.
[  226.268794][T14171] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.286634][T14171] tipc: Resetting bearer <eth:syzkaller0>
[  226.687828][T14191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3532'.
[  226.705758][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3533'.
[  226.744525][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'.
[  226.748807][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3534'.
[  226.752686][T14195] netlink: 'syz.0.3534': attribute type 1 has an invalid length.
[  226.844552][T14201] vxcan1 speed is unknown, defaulting to 1000
[  227.061623][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'.
[  227.420851][T14227] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.882262][T14253] netlink: 'syz.0.3554': attribute type 4 has an invalid length.
[  227.900012][T14253] netlink: 'syz.0.3554': attribute type 4 has an invalid length.
[  228.128800][T14281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3568'.
[  228.132758][T14281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3568'.
[  228.458800][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'.
[  228.639942][T14328] macsec1: entered promiscuous mode
[  228.642116][T14328] ip6gretap0: entered promiscuous mode
[  228.644378][T14328] macsec1: entered allmulticast mode
[  228.652045][T14328] ip6gretap0: entered allmulticast mode
[  228.994211][T14354] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.163234][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3609'.
[  229.321182][T14383] netlink: 'syz.0.3615': attribute type 1 has an invalid length.
[  229.362963][T14383] bond4: entered promiscuous mode
[  229.365530][T14383] 8021q: adding VLAN 0 to HW filter on device bond4
[  229.403480][T14383] bond4: (slave bridge4): making interface the new active one
[  229.407074][T14383] bridge4: entered promiscuous mode
[  229.410838][T14383] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  229.491352][T14395] 8021q: adding VLAN 0 to HW filter on device bond2
[  229.528007][T14395] macvlan2: entered promiscuous mode
[  229.530143][T14395] macvlan2: entered allmulticast mode
[  229.547113][T14395] bond2: entered promiscuous mode
[  229.550050][T14395] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  229.555446][T14395] bond2: left promiscuous mode
[  229.584500][T14403] netlink: 'syz.2.3623': attribute type 5 has an invalid length.
[  229.597714][T14407] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3622'.
[  230.569933][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'.
[  230.721566][T14463] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3648'.
[  231.010656][T14484] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3657'.
[  231.014231][T14484] IPVS: Unknown mcast interface: vetN1_macvtap
[  231.202001][T14499] erspan0: entered promiscuous mode
[  231.204442][T14499] netlink: 'syz.1.3664': attribute type 2 has an invalid length.
[  231.472294][T14523] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.681204][T14543] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3681'.
[  231.697418][T14543] ..0: renamed from hsr0
[  231.734571][T14543] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  231.746074][T14543] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.786076][T14543] ..0: entered allmulticast mode
[  231.787946][T14543] hsr_slave_0: entered allmulticast mode
[  231.792094][T14543] hsr_slave_1: entered allmulticast mode
[  231.804278][T14543] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  232.203855][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3688'.
[  232.593794][T14570] bridge_slave_0: default FDB implementation only supports local addresses
[  232.679714][T14578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.682922][T14578] syzkaller0: entered promiscuous mode
[  232.684829][T14578] syzkaller0: entered allmulticast mode
[  232.710547][T14578] tipc: Resetting bearer <eth:syzkaller0>
[  232.714416][T14577] tipc: Resetting bearer <eth:syzkaller0>
[  232.731804][T14577] tipc: Disabling bearer <eth:syzkaller0>
[  233.012564][T14606] trusted_key: syz.1.3709 sent an empty control message without MSG_MORE.
[  233.018199][T14606] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  233.027792][T14606] bridge3: entered promiscuous mode
[  233.029477][T14606] bridge3: entered allmulticast mode
[  233.032857][T14606] team0: Port device bridge3 added
[  233.068581][T14609] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  233.079388][T14610] vxcan1 speed is unknown, defaulting to 1000
[  234.435553][T14659] __nla_validate_parse: 2 callbacks suppressed
[  234.435563][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3730'.
[  234.464274][T14661] netlink: 'syz.0.3731': attribute type 10 has an invalid length.
[  234.533138][T14665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.812104][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'.
[  234.998098][T14714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3754'.
[  235.001138][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'.
[  235.030031][T14717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3756'.
[  235.037777][T14717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3756'.
[  235.040702][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3756'.
[  235.043579][T14717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3756'.
[  235.050024][T14717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3756'.
[  235.853694][T14739] netlink: 'syz.2.3765': attribute type 2 has an invalid length.
[  235.858268][T14739] netlink: 'syz.2.3765': attribute type 2 has an invalid length.
[  236.095300][T14762] netlink: 'syz.2.3776': attribute type 4 has an invalid length.
[  236.101997][T14762] netlink: 'syz.2.3776': attribute type 4 has an invalid length.
[  236.596380][T14822] xfrm0: Caught tx_queue_len zero misconfig
[  236.776097][T14845] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3810'.
[  236.852585][T14855] sock: sock_set_timeout: `syz.2.3815' (pid 14855) tries to set negative timeout
[  237.220048][T14896] erspan0: entered promiscuous mode
[  237.898308][T14916] erspan0: left promiscuous mode
[  237.905259][T14916] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  237.909574][T14916] geneve2: left promiscuous mode
[  237.913311][T14916] ip6gretap0: left allmulticast mode
[  237.915427][T14916] ip6gretap0: left promiscuous mode
[  237.918605][T14916] macsec1: left promiscuous mode
[  237.920316][T14916] macsec1: left allmulticast mode
[  237.927917][T14916] bridge3: left promiscuous mode
[  237.929552][T14916] bridge3: left allmulticast mode
[  237.963397][T14916] hsr_slave_0: left promiscuous mode
[  237.966900][T14916] hsr_slave_1: left promiscuous mode
[  238.910761][T14931] netlink: 'syz.2.3844': attribute type 23 has an invalid length.
[  238.998901][T14936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.001759][T14936] syzkaller0: entered promiscuous mode
[  239.003468][T14936] syzkaller0: entered allmulticast mode
[  239.027777][T14936] tipc: Resetting bearer <eth:syzkaller0>
[  239.031678][T14935] tipc: Resetting bearer <eth:syzkaller0>
[  239.046797][T14935] tipc: Disabling bearer <eth:syzkaller0>
[  239.272556][T14949] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  239.286822][T14949] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  239.374182][T14934] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  239.606633][T14966] vxcan1 speed is unknown, defaulting to 1000
[  239.630220][T14971] netlink: 'syz.1.3856': attribute type 29 has an invalid length.
[  239.637451][T14971] netlink: 'syz.1.3856': attribute type 29 has an invalid length.
[  239.648975][T14972] geneve2: entered promiscuous mode
[  239.650685][T14972] geneve2: entered allmulticast mode
[  239.786729][T14962] vxcan1 speed is unknown, defaulting to 1000
[  240.155510][T15003] netlink: 'syz.2.3871': attribute type 1 has an invalid length.
[  240.210661][T15006] __nla_validate_parse: 7 callbacks suppressed
[  240.210672][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3873'.
[  240.268436][T15006] bond3: entered promiscuous mode
[  240.274946][T15006] 8021q: adding VLAN 0 to HW filter on device bond3
[  240.316293][T15011] 8021q: adding VLAN 0 to HW filter on device bond3
[  240.318832][T15011] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  240.325415][T15011] bond3: (slave vcan0): Error -95 calling set_mac_address
[  240.600235][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3880'.
[  240.603304][T15024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3880'.
[  240.645573][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'.
[  240.696016][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'.
[  240.700244][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'.
[  240.708386][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'.
[  240.713005][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'.
[  240.721271][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'.
[  240.724839][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'.
[  241.218467][T15046] ..0: left allmulticast mode
[  241.220183][T15046] hsr_slave_0: left allmulticast mode
[  241.222195][T15046] hsr_slave_1: left allmulticast mode
[  241.232058][T15046] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  241.245364][T15046] tipc: Resetting bearer <eth:syzkaller0>
[  241.264817][T15046] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  241.276111][T15046] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  241.287152][T15046] bond3: left promiscuous mode
[  241.288939][T15046] bond3: left allmulticast mode
[  241.294502][T15046] bond4: left promiscuous mode
[  241.296319][T15046] bridge4: left promiscuous mode
[  242.178545][T15087] netlink: 'syz.1.3902': attribute type 1 has an invalid length.
[  243.681814][T15171] syz.2.3929 uses old SIOCAX25GETINFO
[  243.844721][T15188] netlink: 'syz.1.3937': attribute type 6 has an invalid length.
[  244.562238][T15235] vxcan1 speed is unknown, defaulting to 1000
[  245.360810][T15291] netlink: 'syz.0.3981': attribute type 1 has an invalid length.
[  245.426929][T15291] 8021q: adding VLAN 0 to HW filter on device bond5
[  245.440450][T15296] bond5: (slave wlan0): Enslaving as an active interface with a down link
[  245.491684][T15291] vlan4: entered allmulticast mode
[  245.493785][T15291] veth1: entered allmulticast mode
[  245.536602][T15291] bond5: (slave vlan4): Opening slave failed
[  245.739184][T15310] __nla_validate_parse: 30 callbacks suppressed
[  245.739196][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3987'.
[  246.043698][T15320] vxcan1 speed is unknown, defaulting to 1000
[  246.067526][T15324] netlink: 'syz.2.3990': attribute type 23 has an invalid length.
[  246.974157][T15370] netlink: 'syz.2.4013': attribute type 7 has an invalid length.
[  246.979157][T15370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4013'.
[  247.833839][T15448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4049'.
[  247.957059][T15454] !: renamed from dummy0
[  248.046942][T15455] vxcan1 speed is unknown, defaulting to 1000
[  248.302379][T15459] netlink: 'syz.1.4053': attribute type 12 has an invalid length.
[  248.310249][T15459] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4053'.
[  248.515226][T15439] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  248.518940][T15439] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  248.529847][T15439] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  248.532897][T15439] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  248.655181][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4056'.
[  248.816787][T15485] sctp: [Deprecated]: syz.1.4060 (pid 15485) Use of struct sctp_assoc_value in delayed_ack socket option.
[  248.816787][T15485] Use struct sctp_sack_info instead
[  250.014758][T15520] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  250.018491][T15520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.972309][T15529] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4080'.
[  251.064403][T15540] sctp: [Deprecated]: syz.0.4086 (pid 15540) Use of int in maxseg socket option.
[  251.064403][T15540] Use struct sctp_assoc_value instead
[  251.123006][T15545] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  251.549155][T15591] can: request_module (can-proto-5) failed.
[  251.560273][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4110'.
[  252.251932][T15661] vlan4: entered allmulticast mode
[  252.254114][T15661] bridge_slave_0: entered allmulticast mode
[  252.821202][T15699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4161'.
[  253.149470][T15712] netlink: zone id is out of range
[  253.151593][T15712] netlink: zone id is out of range
[  253.153710][T15712] netlink: zone id is out of range
[  253.155750][T15712] netlink: zone id is out of range
[  253.159699][T15712] netlink: zone id is out of range
[  253.161738][T15712] netlink: zone id is out of range
[  253.163894][T15712] netlink: zone id is out of range
[  253.169398][T15712] netlink: zone id is out of range
[  253.423082][T15722] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.441931][T15722] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  253.446252][T15722] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  253.506268][T15724] tipc: New replicast peer: 255.255.255.255
[  253.509473][T15724] tipc: Enabled bearer <udp:syz2>, priority 26
[  254.016537][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4178'.
[  254.020230][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4178'.
[  254.393561][T15762] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4192'.
[  254.729822][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'.
[  255.323719][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4212'.
[  255.366008][T15808] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4213'.
[  255.587633][T15830] netlink: 'syz.2.4224': attribute type 4 has an invalid length.
[  255.698553][T15838] netlink: 'syz.2.4227': attribute type 1 has an invalid length.
[  255.738175][T15838] bond4: (slave geneve4): making interface the new active one
[  255.742524][T15838] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  255.747312][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  255.750420][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  255.755605][T15838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4227'.
[  255.758346][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  255.762361][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  255.769183][T15838] 8021q: adding VLAN 0 to HW filter on device bond4
[  255.791448][T15838] syz.2.4227 (15838) used greatest stack depth: 19984 bytes left
[  256.114044][T15862] vxcan1 speed is unknown, defaulting to 1000
[  256.270801][T15876] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4244'.
[  256.435631][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4247'.
[  256.632556][T15895] netlink: 'syz.0.4252': attribute type 29 has an invalid length.
[  256.666499][T15895] netlink: 'syz.0.4252': attribute type 29 has an invalid length.
[  256.681543][T15895] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4252'.
[  256.747829][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4253'.
[  257.074553][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'.
[  257.082134][T15923] netlink: 'syz.0.4263': attribute type 20 has an invalid length.
[  257.087359][T15923] netlink: 'syz.0.4263': attribute type 21 has an invalid length.
[  257.252264][T15941] netlink: 'syz.0.4273': attribute type 15 has an invalid length.
[  257.268947][T15943] nbd: must specify a device to reconfigure
[  258.219953][T15973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.221323][T15975] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4287'.
[  258.228586][T15975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4287'.
[  258.235197][T15975] dvmrp0: left allmulticast mode
[  258.291222][T15976] lo speed is unknown, defaulting to 1000
[  258.296809][T15976] lo speed is unknown, defaulting to 1000
[  258.299865][T15976] lo speed is unknown, defaulting to 1000
[  258.381936][T15975] 8021q: adding VLAN 0 to HW filter on device team0
[  258.390252][T15975] net_ratelimit: 12 callbacks suppressed
[  258.390276][T15975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.456975][T15976] infiniband syz0: set active
[  258.458961][T15976] infiniband syz0: added lo
[  258.463837][   T47] lo speed is unknown, defaulting to 1000
[  258.466766][   T47] syz0: Port: 1 Link ACTIVE
[  258.496083][T15976] RDS/IB: syz0: added
[  258.497816][T15976] smc: adding ib device syz0 with port count 1
[  258.500283][T15976] smc:    ib device syz0 port 1 has pnetid 
[  258.502743][   T47] lo speed is unknown, defaulting to 1000
[  258.506260][T15976] lo speed is unknown, defaulting to 1000
[  258.692783][T15976] lo speed is unknown, defaulting to 1000
[  258.714170][T15981] C: renamed from team_slave_0
[  258.721810][T15981] netlink: 'syz.2.4288': attribute type 1 has an invalid length.
[  258.724769][T15981] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4288'.
[  258.730768][T15981] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  258.904868][T15976] lo speed is unknown, defaulting to 1000
[  260.245031][T16068] vlan3: entered promiscuous mode
[  260.249777][T16068] bond0: entered promiscuous mode
[  260.252121][T16068] vlan3: entered allmulticast mode
[  260.254109][T16068] bond0: entered allmulticast mode
[  260.294639][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4329'.
[  260.667684][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4341'.
[  260.796583][ T5898] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  260.800409][ T5898] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  260.803177][ T5898] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  260.805693][ T5898] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  260.974225][T16125] vxcan1 speed is unknown, defaulting to 1000
[  261.138507][T16125] lo speed is unknown, defaulting to 1000
[  261.298540][T16147] __nla_validate_parse: 1 callbacks suppressed
[  261.298565][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4365'.
[  261.501759][T16159] netlink: 'syz.2.4370': attribute type 1 has an invalid length.
[  261.540805][T16159] bond5: entered promiscuous mode
[  261.542792][T16159] bond5: entered allmulticast mode
[  261.545077][T16159] 8021q: adding VLAN 0 to HW filter on device bond5
[  261.622484][T16159] bridge6: entered promiscuous mode
[  261.624890][T16159] bridge6: entered allmulticast mode
[  261.630149][T16159] bond5: (slave bridge6): Enslaving as a backup interface with an up link
[  261.640196][T16162] vxcan1 speed is unknown, defaulting to 1000
[  261.647954][ T5859] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  261.767946][ T5859] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  261.971170][T16162] lo speed is unknown, defaulting to 1000
[  262.042070][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'.
[  262.048103][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'.
[  262.209846][T16182] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  262.213449][T16182] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  262.912329][T16221] ip6gretap2: entered allmulticast mode
[  263.024275][T16229] netlink: 'syz.1.4399': attribute type 41 has an invalid length.
[  263.129290][T16236] netlink: 'syz.1.4400': attribute type 4 has an invalid length.
[  263.489614][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4417'.
[  263.638685][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4423'.
[  264.179370][T16294] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  264.191877][T16294] CPU: 1 UID: 0 PID: 16294 Comm: syz.1.4428 Not tainted syzkaller #0 PREEMPT(full) 
[  264.191905][T16294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.191916][T16294] Call Trace:
[  264.191924][T16294]  <TASK>
[  264.191931][T16294]  dump_stack_lvl+0x189/0x250
[  264.191974][T16294]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.191994][T16294]  ? __pfx__printk+0x10/0x10
[  264.192021][T16294]  ? kernfs_path_from_node+0x2f/0x290
[  264.192038][T16294]  ? kernfs_path_from_node+0x250/0x290
[  264.192053][T16294]  ? kernfs_path_from_node+0x2f/0x290
[  264.192072][T16294]  sysfs_warn_dup+0x8e/0xa0
[  264.192088][T16294]  sysfs_do_create_link_sd+0xc0/0x110
[  264.192107][T16294]  device_add_class_symlinks+0x1cf/0x240
[  264.192163][T16294]  device_add+0x475/0xb50
[  264.192186][T16294]  wiphy_register+0x1ba6/0x28d0
[  264.192220][T16294]  ? __pfx_wiphy_register+0x10/0x10
[  264.192235][T16294]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  264.192264][T16294]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  264.192290][T16294]  ieee80211_register_hw+0x3484/0x4100
[  264.192324][T16294]  ? ieee80211_register_hw+0x1461/0x4100
[  264.192352][T16294]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  264.192375][T16294]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  264.192405][T16294]  ? __hrtimer_setup+0x187/0x210
[  264.192419][T16294]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  264.192438][T16294]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  264.192486][T16294]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  264.192508][T16294]  ? trace_kmalloc+0x1f/0xd0
[  264.192525][T16294]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  264.192544][T16294]  ? kstrndup+0xbf/0x160
[  264.192568][T16294]  hwsim_new_radio_nl+0xea4/0x1b10
[  264.192591][T16294]  ? __pfx___nla_validate_parse+0x10/0x10
[  264.192621][T16294]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  264.192653][T16294]  ? __nla_parse+0x40/0x60
[  264.192671][T16294]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  264.192699][T16294]  genl_family_rcv_msg_doit+0x215/0x300
[  264.192725][T16294]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  264.192756][T16294]  ? bpf_lsm_capable+0x9/0x20
[  264.192775][T16294]  ? security_capable+0x7e/0x2e0
[  264.192803][T16294]  genl_rcv_msg+0x60e/0x790
[  264.192829][T16294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  264.192852][T16294]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  264.192890][T16294]  netlink_rcv_skb+0x208/0x470
[  264.192904][T16294]  ? __lock_acquire+0xab9/0xd20
[  264.192928][T16294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  264.192949][T16294]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  264.192983][T16294]  ? down_read+0x1ad/0x2e0
[  264.193004][T16294]  genl_rcv+0x28/0x40
[  264.193023][T16294]  netlink_unicast+0x82f/0x9e0
[  264.193053][T16294]  ? __pfx_netlink_unicast+0x10/0x10
[  264.193078][T16294]  ? netlink_sendmsg+0x642/0xb30
[  264.193091][T16294]  ? skb_put+0x11b/0x210
[  264.193112][T16294]  netlink_sendmsg+0x805/0xb30
[  264.193166][T16294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.193186][T16294]  ? aa_sock_msg_perm+0xf1/0x1d0
[  264.193205][T16294]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  264.193222][T16294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.193238][T16294]  __sock_sendmsg+0x21c/0x270
[  264.193263][T16294]  ____sys_sendmsg+0x505/0x830
[  264.193287][T16294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.193314][T16294]  ? import_iovec+0x74/0xa0
[  264.193337][T16294]  ___sys_sendmsg+0x21f/0x2a0
[  264.193357][T16294]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.193408][T16294]  ? __fget_files+0x2a/0x420
[  264.193420][T16294]  ? __fget_files+0x3a0/0x420
[  264.193443][T16294]  __x64_sys_sendmsg+0x19b/0x260
[  264.193464][T16294]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  264.193491][T16294]  ? rcu_is_watching+0x15/0xb0
[  264.193511][T16294]  ? do_syscall_64+0xbe/0x3b0
[  264.193531][T16294]  do_syscall_64+0xfa/0x3b0
[  264.193546][T16294]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.193561][T16294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.193576][T16294]  ? exc_page_fault+0x9f/0xf0
[  264.193591][T16294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.193606][T16294] RIP: 0033:0x7fae43d8ec29
[  264.193621][T16294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.193636][T16294] RSP: 002b:00007fae44bae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.193653][T16294] RAX: ffffffffffffffda RBX: 00007fae43fd5fa0 RCX: 00007fae43d8ec29
[  264.193665][T16294] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  264.193675][T16294] RBP: 00007fae43e11e41 R08: 0000000000000000 R09: 0000000000000000
[  264.193685][T16294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.193694][T16294] R13: 00007fae43fd6038 R14: 00007fae43fd5fa0 R15: 00007ffd705ddc48
[  264.193721][T16294]  </TASK>
[  264.456882][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4430'.
[  265.175254][T16345] syzkaller1: entered promiscuous mode
[  265.177575][T16345] syzkaller1: entered allmulticast mode
[  266.844408][T16391] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4470'.
[  266.920370][T16403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4476'.
[  266.923577][T16403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4476'.
[  267.074616][T16417] veth0_to_bridge: entered promiscuous mode
[  267.172869][T16421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  267.346726][T16438] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4492'.
[  267.443749][T16446] openvswitch: netlink: Flow actions attr not present in new flow.
[  268.684060][T16516] tipc: Enabled bearer <ib:caif0>, priority 14
[  268.730890][T16524] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  268.733884][T16524] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  268.753372][T16524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  269.036750][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4538'.
[  269.061534][ T1095] smc: removing ib device syz2
[  269.420670][T16568] netlink: 'syz.2.4546': attribute type 1 has an invalid length.
[  269.610874][T16577] netlink: 'syz.2.4550': attribute type 4 has an invalid length.
[  269.624369][T16577] netlink: 'syz.2.4550': attribute type 4 has an invalid length.
[  269.894245][T16588] syzkaller0: entered promiscuous mode
[  269.896892][T16588] syzkaller0: entered allmulticast mode
[  271.295299][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4563'.
[  271.386710][T16611] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4566'.
[  272.363665][T16630] netlink: 'syz.2.4574': attribute type 1 has an invalid length.
[  272.367992][T16630] netlink: 'syz.2.4574': attribute type 4 has an invalid length.
[  272.454467][T16632] lo speed is unknown, defaulting to 1000
[  272.558290][T16639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4575'.
[  273.126671][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'.
[  273.275547][T16671] lo speed is unknown, defaulting to 1000
[  273.631897][T16686] netlink: zone id is out of range
[  273.734142][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4596'.
[  273.984000][T16700] ip6gre0: entered allmulticast mode
[  275.279280][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4614'.
[  276.127031][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4631'.
[  276.567805][T16808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4646'.
[  277.870259][T16841] lo speed is unknown, defaulting to 1000
[  277.886913][T16847] netlink: 'syz.1.4660': attribute type 4 has an invalid length.
[  277.892982][T16847] netlink: 'syz.1.4660': attribute type 4 has an invalid length.
[  278.320495][T16855] lo speed is unknown, defaulting to 1000
[  278.761293][T16861] veth0_to_bridge: entered promiscuous mode
[  278.841148][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4668'.
[  281.049233][T16997] Bluetooth: MGMT ver 1.23
[  281.644260][T17048] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4748'.
[  282.788862][T17078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4760'.
[  282.840708][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4762'.
[  282.844345][T17082] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4762'.
[  283.922125][T17112] netlink: 'syz.1.4774': attribute type 13 has an invalid length.
[  284.118645][T17119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4778'.
[  284.337588][ T6035] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  284.341508][ T6035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  284.347356][ T6035] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  284.369304][ T6035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  284.373380][ T6035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  284.381493][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  284.387522][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  284.390598][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  284.393384][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  284.397674][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  284.474971][T17132] lo speed is unknown, defaulting to 1000
[  284.830630][T17132] chnl_net:caif_netlink_parms(): no params data found
[  284.929972][T17132] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.933089][T17132] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.939049][T17132] bridge_slave_0: entered allmulticast mode
[  284.943420][T17132] bridge_slave_0: entered promiscuous mode
[  284.953244][T17132] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.957174][T17132] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.961364][T17132] bridge_slave_1: entered allmulticast mode
[  284.965245][T17132] bridge_slave_1: entered promiscuous mode
[  285.027165][T17132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.034480][T17132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.080746][T17132] team0: Port device team_slave_0 added
[  285.088039][T17132] team0: Port device team_slave_1 added
[  285.089989][T17162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4791'.
[  285.145174][T17132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.153178][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.164182][T17132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.173970][T17132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.178503][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.190657][T17132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.292269][T17132] hsr_slave_0: entered promiscuous mode
[  285.312395][T17132] hsr_slave_1: entered promiscuous mode
[  285.332548][   T24] hid-generic 0005:04F3:1010.0001: item fetching failed at offset 0/1
[  285.356498][   T24] hid-generic 0005:04F3:1010.0001: probe with driver hid-generic failed with error -22
[  285.462725][T17182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.469177][T17182] syzkaller0: entered promiscuous mode
[  285.471472][T17182] syzkaller0: entered allmulticast mode
[  285.528259][T17182] tipc: Resetting bearer <eth:syzkaller0>
[  285.539048][T17181] tipc: Resetting bearer <eth:syzkaller0>
[  285.551749][T17181] tipc: Disabling bearer <eth:syzkaller0>
[  285.671302][T17132] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  285.680600][T17132] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  285.686812][T17132] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  285.699201][T17132] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  285.828285][T17132] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.853433][T17132] 8021q: adding VLAN 0 to HW filter on device team0
[  285.863716][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.866733][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.887397][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.890756][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.153248][T17132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.210638][T17132] veth0_vlan: entered promiscuous mode
[  286.221171][T17132] veth1_vlan: entered promiscuous mode
[  286.255868][T17132] veth0_macvtap: entered promiscuous mode
[  286.262724][T17132] veth1_macvtap: entered promiscuous mode
[  286.280727][T17132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.289993][T17132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.312297][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.328380][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.333803][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.352184][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.425907][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.432813][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.449892][T17223] bridge8: entered allmulticast mode
[  286.487010][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.494390][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.496661][ T5238] Bluetooth: hci3: command tx timeout
[  286.654265][T17235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4817'.
[  287.177105][T17279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.252057][T17279] syzkaller0: entered promiscuous mode
[  287.254410][T17279] syzkaller0: entered allmulticast mode
[  287.259458][T17279] tipc: Resetting bearer <eth:syzkaller0>
[  287.303958][T17278] tipc: Resetting bearer <eth:syzkaller0>
[  288.569510][T17278] tipc: Disabling bearer <eth:syzkaller0>
[  288.575965][ T5238] Bluetooth: hci3: command tx timeout
[  288.630681][T17291] lo speed is unknown, defaulting to 1000
[  289.038400][T17323] syzkaller0: entered promiscuous mode
[  289.040385][T17323] syzkaller0: entered allmulticast mode
[  290.169903][T17369] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  290.467793][T17384] netlink: 'syz.1.4875': attribute type 1 has an invalid length.
[  290.470297][T17385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4874'.
[  290.650828][ T5238] Bluetooth: hci3: command tx timeout
[  292.736786][ T5238] Bluetooth: hci3: command tx timeout
[  292.740425][T17438] lo speed is unknown, defaulting to 1000
[  293.213247][T17458] netlink: 'syz.2.4907': attribute type 21 has an invalid length.
[  293.216895][T17458] IPv6: NLM_F_CREATE should be specified when creating new route
[  293.219968][T17458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  293.222800][T17458] IPv6: NLM_F_CREATE should be set when creating new route
[  293.225663][T17458] IPv6: NLM_F_CREATE should be set when creating new route
[  293.228565][T17458] IPv6: NLM_F_CREATE should be set when creating new route
[  294.593873][T17482] netlink: 'syz.2.4917': attribute type 13 has an invalid length.
[  294.598025][T17482] netlink: 'syz.2.4917': attribute type 17 has an invalid length.
[  294.608855][T17482] erspan0: left promiscuous mode
[  294.630921][T17482] 8021q: adding VLAN 0 to HW filter on device team0
[  294.638620][T17482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  294.667934][T17481] xfrm0: entered promiscuous mode
[  294.670112][T17481] xfrm0: entered allmulticast mode
[  294.701111][T17481] lo speed is unknown, defaulting to 1000
[  294.862851][T17480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.777228][T17497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.143159][T17515] syzkaller1: entered promiscuous mode
[  296.145378][T17515] syzkaller1: entered allmulticast mode
[  296.700916][T17533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4941'.
[  296.801678][T17537] lo speed is unknown, defaulting to 1000
[  296.834424][T17538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  299.449328][T17595] IPVS: Unknown mcast interface: geneve0
[  299.817543][T17615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4977'.
[  300.039313][T17630] : renamed from macvlan0
[  300.235245][T17640] syzkaller1: entered promiscuous mode
[  300.239415][T17640] syzkaller1: entered allmulticast mode
[  300.643653][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4993'.
[  300.649766][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4993'.
[  300.653394][T17650] netlink: 'syz.2.4993': attribute type 1 has an invalid length.
[  300.658677][T17650] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4993'.
[  300.696732][T17650] nbd: socks must be embedded in a SOCK_ITEM attr
[  300.699928][T17650] block nbd1: shutting down sockets
[  300.987201][T17663] netlink: 'syz.2.4999': attribute type 2 has an invalid length.
[  300.990291][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4999'.
[  301.179033][T17669] dvmrp12: entered allmulticast mode
[  301.182438][T17668] dvmrp12: left allmulticast mode
[  302.921121][ T6035] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.925515][ T6035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.929660][ T6035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.933424][ T6035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.938991][ T6035] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.966478][T17719] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  302.973988][T17715] lo speed is unknown, defaulting to 1000
[  303.262942][T17715] chnl_net:caif_netlink_parms(): no params data found
[  303.357622][T17715] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.360479][T17715] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.363581][T17715] bridge_slave_0: entered allmulticast mode
[  303.369090][T17715] bridge_slave_0: entered promiscuous mode
[  303.381619][T17715] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.384510][T17715] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.390783][T17715] bridge_slave_1: entered allmulticast mode
[  303.394700][T17715] bridge_slave_1: entered promiscuous mode
[  303.427247][T17715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.433548][T17715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.473486][T17715] team0: Port device team_slave_0 added
[  303.479167][T17715] team0: Port device team_slave_1 added
[  303.519776][T17715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.522526][T17715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.532745][T17715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.538214][T17715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.540462][T17715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.550474][T17715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.598607][T17715] hsr_slave_0: entered promiscuous mode
[  303.601774][T17715] hsr_slave_1: entered promiscuous mode
[  303.604640][T17715] debugfs: 'hsr0' already exists in 'hsr'
[  303.607306][T17715] Cannot create hsr debugfs directory
[  303.793741][T17715] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  303.804494][T17715] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  303.812425][T17715] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  303.820304][T17715] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  303.852793][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.861695][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.864848][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.868579][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.872219][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.875473][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.880495][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.884300][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.888586][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.892463][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'.
[  303.898276][T17736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.950710][T17715] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.984911][T17715] 8021q: adding VLAN 0 to HW filter on device team0
[  304.004999][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.007443][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.016482][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.019138][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.164166][T17715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.181522][T17759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.188323][T17759] syzkaller0: entered promiscuous mode
[  304.190537][T17759] syzkaller0: entered allmulticast mode
[  304.216444][T17759] tipc: Resetting bearer <eth:syzkaller0>
[  304.219703][T17758] tipc: Resetting bearer <eth:syzkaller0>
[  304.231102][T17758] tipc: Disabling bearer <eth:syzkaller0>
[  304.460199][T17715] veth0_vlan: entered promiscuous mode
[  304.470501][T17715] veth1_vlan: entered promiscuous mode
[  304.521809][T17715] veth0_macvtap: entered promiscuous mode
[  304.530404][T17715] veth1_macvtap: entered promiscuous mode
[  304.546947][T17715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.556244][T17715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.564860][T16874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.570739][T16874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.577937][T16874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.594732][T16874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.666047][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.668864][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.711028][T17777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.715065][T17777] syzkaller0: entered promiscuous mode
[  304.719953][T17777] syzkaller0: entered allmulticast mode
[  304.724298][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.729988][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.749275][T17777] tipc: Resetting bearer <eth:syzkaller0>
[  304.753359][T17776] tipc: Resetting bearer <eth:syzkaller0>
[  304.780863][T17776] tipc: Disabling bearer <eth:syzkaller0>
[  304.966124][ T6035] Bluetooth: hci4: command tx timeout
[  305.069048][T17793] netlink: 'syz.2.5048': attribute type 5 has an invalid length.
[  305.212933][T16874] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  305.218982][T16874] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  305.222325][T16874] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  305.227455][T16874] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  305.482039][T17823] netlink: 'syz.4.5061': attribute type 1 has an invalid length.
[  305.578165][T17827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.715258][T17833] macsec1: entered promiscuous mode
[  305.718372][T17833] macsec0: entered promiscuous mode
[  305.720830][T17833] macsec1: entered allmulticast mode
[  305.722969][T17833] macsec0: entered allmulticast mode
[  305.725228][T17833] veth1_macvtap: entered allmulticast mode
[  306.957611][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  306.961771][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  306.965517][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  306.970561][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  306.975491][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.013209][T17854] lo speed is unknown, defaulting to 1000
[  307.046237][ T6035] Bluetooth: hci4: command 0x041b tx timeout
[  307.317126][T17854] chnl_net:caif_netlink_parms(): no params data found
[  307.393490][T17854] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.404160][T17854] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.408887][T17854] bridge_slave_0: entered allmulticast mode
[  307.411797][T17854] bridge_slave_0: entered promiscuous mode
[  307.415289][T17854] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.426090][T17854] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.428406][T17854] bridge_slave_1: entered allmulticast mode
[  307.431289][T17854] bridge_slave_1: entered promiscuous mode
[  307.463982][T17854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.476277][T17854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.503113][T17854] team0: Port device team_slave_0 added
[  307.513791][T17854] team0: Port device team_slave_1 added
[  307.545938][T17854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.548181][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.557518][T17854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.561138][T17884] lo speed is unknown, defaulting to 1000
[  307.562088][T17854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.565649][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.573846][T17854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.620327][T17854] hsr_slave_0: entered promiscuous mode
[  307.622907][T17854] hsr_slave_1: entered promiscuous mode
[  307.625056][T17854] debugfs: 'hsr0' already exists in 'hsr'
[  307.636111][T17854] Cannot create hsr debugfs directory
[  307.808868][T17854] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  307.819557][T17854] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  307.834068][T17854] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  307.847043][T17854] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  307.963085][T17854] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.978578][T17854] 8021q: adding VLAN 0 to HW filter on device team0
[  307.988264][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.990594][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.998552][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.001293][ T3746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.159672][T17854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.394984][T17854] veth0_vlan: entered promiscuous mode
[  308.410938][T17854] veth1_vlan: entered promiscuous mode
[  308.451186][T17854] veth0_macvtap: entered promiscuous mode
[  308.461531][T17854] veth1_macvtap: entered promiscuous mode
[  308.501911][T17854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.515148][T17854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.540792][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.578432][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.598942][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.642691][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.804818][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.809712][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.843409][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.847715][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.046119][ T5238] Bluetooth: hci5: command tx timeout
[  309.127784][ T5238] Bluetooth: hci4: command 0x041b tx timeout
[  309.748116][T17976] lo speed is unknown, defaulting to 1000
[  310.624681][T17994] IPv6: Can't replace route, no match found
[  310.704827][T18000] __nla_validate_parse: 9 callbacks suppressed
[  310.704846][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5118'.
[  310.728021][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5118'.
[  310.731600][T18000] netlink: 'syz.5.5118': attribute type 1 has an invalid length.
[  310.734629][T18000] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5118'.
[  310.776691][T18000] nbd: socks must be embedded in a SOCK_ITEM attr
[  310.778815][T18000] block nbd1: shutting down sockets
[  310.809411][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.812548][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.123479][T18035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5135'.
[  311.136405][ T5238] Bluetooth: hci5: command tx timeout
[  311.140140][T18036] dvmrp1: entered allmulticast mode
[  311.144405][T18036] dvmrp1: left allmulticast mode
[  311.206321][ T5238] Bluetooth: hci4: command 0x041b tx timeout
[  312.315487][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5169'.
[  312.410442][T18116] vxcan1: tx drop: invalid da for name 0x0000000000100002
[  313.163095][T18124] lo speed is unknown, defaulting to 1000
[  313.206783][ T5238] Bluetooth: hci5: command tx timeout
[  313.286486][ T5238] Bluetooth: hci4: command 0x041b tx timeout
[  313.603134][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5180'.
[  313.621804][T18136] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  313.624223][T18136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.648295][T18138] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5181'.
[  313.891212][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5187'.
[  313.912606][T18152] batadv0: entered promiscuous mode
[  313.922392][T18152] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  313.931661][T18152] batadv0: left promiscuous mode
[  314.141097][T18169] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5195'.
[  314.842692][T18209] lo speed is unknown, defaulting to 1000
[  315.160138][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5215'.
[  315.286147][ T5238] Bluetooth: hci5: command tx timeout
[  315.708237][T18269] __nla_validate_parse: 1 callbacks suppressed
[  315.708258][T18269] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5236'.
[  315.713728][T18269] netlink: 'syz.5.5236': attribute type 1 has an invalid length.
[  315.719845][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5236'.
[  315.852202][T18276] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5240'.
[  316.192440][T18300] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5252'.
[  316.245449][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5253'.
[  316.620294][T18345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5273'.
[  317.184860][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5294'.
[  317.231662][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5295'.
[  317.235196][T18391] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5295'.
[  317.255163][T18391] gretap1: entered promiscuous mode
[  317.441555][T18405] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5302'.
[  317.805173][T18424] lo speed is unknown, defaulting to 1000
[  318.930386][T18479] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  319.683459][T18503] netlink: 'syz.5.5346': attribute type 1 has an invalid length.
[  319.741022][T18505] netlink: 'syz.5.5347': attribute type 4 has an invalid length.
[  319.750859][T18507] netlink: 'syz.4.5348': attribute type 2 has an invalid length.
[  319.754348][T18507] netlink: 'syz.4.5348': attribute type 1 has an invalid length.
[  319.891706][    T9] IPVS: starting estimator thread 0...
[  319.976156][T18518] IPVS: using max 53 ests per chain, 127200 per kthread
[  320.011372][T18525] lo speed is unknown, defaulting to 1000
[  320.842941][T18536] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig
[  320.931474][T18539] lo speed is unknown, defaulting to 1000
[  320.956656][T18544] __nla_validate_parse: 2 callbacks suppressed
[  320.956672][T18544] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.5362'.
[  320.962850][T18544] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  320.980884][T18544] openvswitch: netlink: Message has 252 unknown bytes.
[  321.135018][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5365'.
[  321.159079][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5366'.
[  321.162847][T18553] netlink: 5252 bytes leftover after parsing attributes in process `syz.5.5366'.
[  321.183198][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5366'.
[  321.189038][T18553] netlink: 5252 bytes leftover after parsing attributes in process `syz.5.5366'.
[  321.840556][T18586] netlink: 'syz.2.5380': attribute type 4 has an invalid length.
[  321.854615][T18581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  322.038835][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5386'.
[  323.080550][T18628] tipc: Failed to remove unknown binding: 66,1,1/0:3333991998/3333992000
[  323.338293][T18638] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  323.523972][T18663] netlink: 'syz.4.5417': attribute type 10 has an invalid length.
[  323.531544][T18663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5417'.
[  323.534283][T18663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.719969][T18665] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.723751][T18665] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.915556][T18665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.933636][T18665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.220155][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.227579][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.231699][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.235683][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.394942][T18674] tipc: Started in network mode
[  324.398115][T18674] tipc: Node identity 360be2344c87, cluster identity 4711
[  324.401012][T18674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.406737][T18672] tipc: Resetting bearer <eth:syzkaller0>
[  324.421236][T18680] netlink: 212384 bytes leftover after parsing attributes in process `syz.2.5424'.
[  324.423939][T18680] netlink: get zone limit has 8 unknown bytes
[  324.666512][T18694] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5428'.
[  325.527009][    T9] tipc: Node number set to 2056053300
[  325.913046][T18672] tipc: Disabling bearer <eth:syzkaller0>
[  326.015170][T18702] netlink: 'syz.4.5430': attribute type 11 has an invalid length.
[  326.401852][T18718] lo speed is unknown, defaulting to 1000
[  326.542417][T18736] macvlan2: entered allmulticast mode
[  326.546523][T18736] ip6gretap0: entered allmulticast mode
[  326.551504][T18736] ip6gretap0: left allmulticast mode
[  327.600986][T18763] sctp: [Deprecated]: syz.5.5457 (pid 18763) Use of int in maxseg socket option.
[  327.600986][T18763] Use struct sctp_assoc_value instead
[  327.750005][T18774] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5462'.
[  327.752876][T18774] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  327.755547][T18774] openvswitch: netlink: Message has 1 unknown bytes.
[  328.340923][T18810] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5479'.
[  328.344458][T18810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5479'.
[  328.749907][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5489'.
[  329.701336][T18866] tap0: tun_chr_ioctl cmd 1074812118
[  329.788181][T18868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5505'.
[  331.009900][T18899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5520'.
[  331.094351][T18905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5523'.
[  331.168252][T18912] netem: change failed
[  332.214610][T18952] netlink: 'syz.2.5543': attribute type 13 has an invalid length.
[  332.361236][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5544'.
[  332.612299][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.615201][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  332.623275][   T12] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  332.634381][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.654047][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  332.664246][   T12] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  332.674967][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.684546][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  332.698828][   T12] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  332.702134][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  332.724924][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  332.728678][   T12] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  332.782615][T18967] lo speed is unknown, defaulting to 1000
[  332.991054][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.994128][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.824215][T19049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5584'.
[  333.865571][T19049] netlink: 'syz.5.5584': attribute type 1 has an invalid length.
[  334.598115][T19093] lo speed is unknown, defaulting to 1000
[  334.788985][T19095] lo speed is unknown, defaulting to 1000
[  335.925005][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5621'.
[  336.844154][T19223] netlink: 'syz.4.5645': attribute type 1 has an invalid length.
[  336.855445][T19223] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5645'.
[  336.860286][T19223] NCSI netlink: No device for ifindex 813332851
[  336.927691][T19230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5648'.
[  336.932085][T19230] 8021q: VLANs not supported on ipvlan1
[  337.080727][T19244] tipc: Started in network mode
[  337.082445][T19244] tipc: Node identity eac58a851bbe, cluster identity 4711
[  337.084835][T19244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.088167][T19244] syzkaller0: entered promiscuous mode
[  337.089934][T19244] syzkaller0: entered allmulticast mode
[  337.347212][T19250] tipc: Resetting bearer <eth:syzkaller0>
[  337.353394][T19243] tipc: Resetting bearer <eth:syzkaller0>
[  337.414157][T19243] tipc: Disabling bearer <eth:syzkaller0>
[  338.414217][T19310] bridge0: port 4(macvlan0) entered blocking state
[  338.418483][T19310] bridge0: port 4(macvlan0) entered disabled state
[  338.421218][T19310] macvlan0: entered allmulticast mode
[  338.423286][T19310] bridge0: entered allmulticast mode
[  338.427646][T19310] macvlan0: left allmulticast mode
[  338.429565][T19310] bridge0: left allmulticast mode
[  338.724343][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5694'.
[  338.841240][T19334] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  340.870897][T19351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5703'.
[  340.960106][T19355] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96
[  341.085986][T19364] syzkaller0: entered promiscuous mode
[  341.088439][T19364] syzkaller0: entered allmulticast mode
[  341.262878][T19372] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  341.352706][T19376] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5715'.
[  341.359660][T19376] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5715'.
[  341.363334][T19376] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5715'.
[  342.198744][T19409] netlink: 788 bytes leftover after parsing attributes in process `syz.2.5730'.
[  343.491651][T19418] lo speed is unknown, defaulting to 1000
[  343.753588][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5737'.
[  343.767655][T19434] veth0_to_bridge: left promiscuous mode
[  343.772030][T19434] xfrm0: left promiscuous mode
[  343.774035][T19434] xfrm0: left allmulticast mode
[  343.782629][T19434] ip6gre1: left allmulticast mode
[  343.784837][T19434] vlan3: left promiscuous mode
[  343.790859][T19434] bond0: left promiscuous mode
[  343.792453][T19434] vlan3: left allmulticast mode
[  343.794183][T19434] bond0: left allmulticast mode
[  343.801201][T19434] bond5: left promiscuous mode
[  343.803138][T19434] bridge6: left promiscuous mode
[  343.804882][T19434] bond5: left allmulticast mode
[  343.816118][T19434] bridge6: left allmulticast mode
[  343.818428][T19434] bridge8: left allmulticast mode
[  343.874466][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5737'.
[  343.882690][T19434] hsr_slave_0: left promiscuous mode
[  343.887255][T19434] hsr_slave_1: left promiscuous mode
[  344.369932][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5758'.
[  344.470250][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5763'.
[  344.473968][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5763'.
[  344.775634][T19508] netlink: 'syz.2.5772': attribute type 2 has an invalid length.
[  344.869921][T19518] netlink: 'syz.5.5777': attribute type 13 has an invalid length.
[  344.876248][T19518] netlink: 'syz.5.5777': attribute type 17 has an invalid length.
[  344.944694][T19524] netlink: 'syz.4.5780': attribute type 1 has an invalid length.
[  344.952267][T19518] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.961294][T19518] 8021q: adding VLAN 0 to HW filter on device team0
[  344.971764][T19518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.986998][T19522] batadv_slave_1: entered promiscuous mode
[  345.012387][T19522] batadv_slave_1 (unregistering): left promiscuous mode
[  345.015202][T19522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.383092][T19543] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  345.464287][T19551] syzkaller0: create flow: hash 3251073875 index 2
[  345.620549][T19551] syzkaller0: delete flow: hash 3251073875 index 2
[  347.257580][T19571] lo speed is unknown, defaulting to 1000
[  348.112925][T19612] __nla_validate_parse: 7 callbacks suppressed
[  348.113052][T19612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5819'.
[  348.135488][T19612] batadv0: entered promiscuous mode
[  348.142624][T19612] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  348.157023][T19612] batadv0: left promiscuous mode
[  348.489737][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5824'.
[  348.891350][T19638] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5832'.
[  349.514947][T19665] delete_channel: no stack
[  349.573729][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5847'.
[  349.581475][T19671] bond1: left allmulticast mode
[  349.584384][T19671] bond1: left promiscuous mode
[  349.586678][T19671] bridge0: port 3(bond1) entered disabled state
[  349.592587][T19671] bridge_slave_1: left allmulticast mode
[  349.594879][T19671] bridge_slave_1: left promiscuous mode
[  349.601255][T19671] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.609446][T19671] bridge_slave_0: left promiscuous mode
[  349.611874][T19671] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.762414][T19711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5863'.
[  351.741954][T19734] netlink: 'syz.5.5874': attribute type 1 has an invalid length.
[  351.755113][T19734] netlink: 'syz.5.5874': attribute type 2 has an invalid length.
[  351.759007][T19734] netlink: 'syz.5.5874': attribute type 3 has an invalid length.
[  351.761971][T19734] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5874'.
[  351.815172][T19739] netlink: 'syz.5.5876': attribute type 1 has an invalid length.
[  351.863223][T19739] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  351.870852][T19739] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  351.882453][T19739] bond1: (slave vti0): making interface the new active one
[  351.887776][T19739] bond1: (slave vti0): Enslaving as an active interface with an up link
[  352.303568][T19762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5887'.
[  352.531570][T19771] lo speed is unknown, defaulting to 1000
[  353.165623][T19812] lo speed is unknown, defaulting to 1000
[  353.699437][T19828] lo speed is unknown, defaulting to 1000
[  356.422922][T19851] IPv6: sit1: Disabled Multicast RS
[  356.443452][T19868] lo speed is unknown, defaulting to 1000
[  356.653125][T19879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5930'.
[  357.236682][T19898] openvswitch: netlink: Message has 4 unknown bytes.
[  357.796247][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5949'.
[  357.804765][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5949'.
[  357.812562][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5949'.
[  357.816678][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5949'.
[  357.820779][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5949'.
[  357.825978][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5949'.
[  358.216719][T19946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.553808][T19957] gretap0: entered promiscuous mode
[  358.557398][T19957] vlan2: entered promiscuous mode
[  358.691108][T19961] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  358.695368][T19961] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  358.699110][T19961] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  359.060695][T19988] lo speed is unknown, defaulting to 1000
[  359.211942][T19998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5982'.
[  359.275402][T19998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5982'.
[  359.384556][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5982'.
[  359.842132][T20036] gre3: entered allmulticast mode
[  360.648989][T20084] delete_channel: no stack
[  360.691022][T20087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.694202][T20087] syzkaller0: entered promiscuous mode
[  360.697337][T20087] syzkaller0: entered allmulticast mode
[  360.713928][T20087] tipc: Resetting bearer <eth:syzkaller0>
[  360.719558][T20086] tipc: Resetting bearer <eth:syzkaller0>
[  360.732566][T20086] tipc: Disabling bearer <eth:syzkaller0>
[  363.803313][T20189] pim6reg1: entered promiscuous mode
[  363.805656][T20189] pim6reg1: entered allmulticast mode
[  363.840123][T20191] __nla_validate_parse: 1 callbacks suppressed
[  363.840134][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6070'.
[  364.143097][T20205] dvmrp8: entered allmulticast mode
[  364.146919][T20204] dvmrp8: left allmulticast mode
[  364.549197][T20220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6084'.
[  364.608336][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6084'.
[  364.612104][T20220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6084'.
[  364.619904][T20220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6084'.
[  364.623646][T20220] netlink: 540 bytes leftover after parsing attributes in process `syz.5.6084'.
[  364.629095][T20220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6084'.
[  364.893729][T20227] sctp: [Deprecated]: syz.2.6087 (pid 20227) Use of int in max_burst socket option.
[  364.893729][T20227] Use struct sctp_assoc_value instead
[  365.647624][T20263] lo speed is unknown, defaulting to 1000
[  366.233391][T20256] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  366.235701][T20256] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  366.243970][T20256] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  366.247360][T20256] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  366.254415][T20256] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  366.259205][T20256] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  366.845194][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6116'.
[  366.982088][T20308] netlink: 'syz.5.6121': attribute type 10 has an invalid length.
[  366.989348][T20308] bond0: (slave wlan1): Opening slave failed
[  367.005665][T20308] netlink: 'syz.5.6121': attribute type 12 has an invalid length.
[  368.350732][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6140'.
[  368.931110][T20394] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6156'.
[  368.934097][T20394] netlink: zone id is out of range
[  368.936805][T20394] netlink: get zone limit has 8 unknown bytes
[  369.191140][T20409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6163'.
[  369.448696][T20423] netlink: 'syz.2.6170': attribute type 1 has an invalid length.
[  369.968598][T20443] block nbd1: server does not support multiple connections per device.
[  369.972332][T20443] block nbd1: shutting down sockets
[  370.918755][ T6035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.926279][ T6035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.930575][ T6035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.939170][ T6035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.944353][ T6035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  370.995210][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.001923][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.005164][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.009165][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.012080][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.082286][T20474] lo speed is unknown, defaulting to 1000
[  371.088345][T20483] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6193'.
[  371.097580][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6193'.
[  371.406807][T20474] chnl_net:caif_netlink_parms(): no params data found
[  371.485681][T20474] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.488714][T20474] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.491020][T20474] bridge_slave_0: entered allmulticast mode
[  371.493917][T20474] bridge_slave_0: entered promiscuous mode
[  371.498739][T20474] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.501027][T20474] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.503399][T20474] bridge_slave_1: entered allmulticast mode
[  371.506850][T20474] bridge_slave_1: entered promiscuous mode
[  371.534273][T20474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.539334][T20474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.565306][T20474] team0: Port device team_slave_0 added
[  371.579321][T20474] team0: Port device team_slave_1 added
[  371.618838][T20474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.621232][T20474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.641051][T20474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.651177][T20474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.655679][T20474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.685970][T20474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.754940][T20474] hsr_slave_0: entered promiscuous mode
[  371.758064][T20474] hsr_slave_1: entered promiscuous mode
[  371.761137][T20474] debugfs: 'hsr0' already exists in 'hsr'
[  371.763018][T20474] Cannot create hsr debugfs directory
[  371.895075][T20474] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  371.900658][T20474] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  371.905498][T20474] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  371.911861][T20474] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  371.928476][T20511] netlink: 'syz.2.6200': attribute type 10 has an invalid length.
[  371.931389][T20511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6200'.
[  371.941054][T20474] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.943196][T20474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.946157][T20474] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.949278][T20474] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.960043][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6201'.
[  371.999883][T20474] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.038348][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.041715][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.056530][T20474] 8021q: adding VLAN 0 to HW filter on device team0
[  372.066874][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.069486][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.088131][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.090377][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.155079][T20527] 8021q: adding VLAN 0 to HW filter on device bond6
[  372.176047][T20527] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  372.211201][T20530] lo speed is unknown, defaulting to 1000
[  372.257351][   T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  372.327590][T20474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.368759][T16874] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  372.537402][T20474] veth0_vlan: entered promiscuous mode
[  372.547629][T20474] veth1_vlan: entered promiscuous mode
[  372.567672][T20474] veth0_macvtap: entered promiscuous mode
[  372.573246][T20474] veth1_macvtap: entered promiscuous mode
[  372.586792][T20474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.594596][T20474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.608346][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.620413][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.642602][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.646430][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.692963][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6219'.
[  372.721843][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.731257][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.758447][ T3746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.760911][ T3746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.863060][T20583] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  373.048469][ T6035] Bluetooth: hci6: command tx timeout
[  373.067783][T20596] lo speed is unknown, defaulting to 1000
[  373.644323][T20618] netlink: 'syz.5.6236': attribute type 1 has an invalid length.
[  373.668782][T20618] 8021q: adding VLAN 0 to HW filter on device bond2
[  373.683124][T20618] bond2: (slave geneve2): making interface the new active one
[  373.686834][T20618] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  373.689921][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.695756][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.702430][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.705048][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.720174][T20618] bond2: entered promiscuous mode
[  373.721927][T20618] geneve2: entered promiscuous mode
[  375.126074][ T6035] Bluetooth: hci6: command tx timeout
[  375.659576][T20697] pimreg: entered allmulticast mode
[  375.730409][T20703] netlink: 'syz.6.6271': attribute type 30 has an invalid length.
[  375.845224][T20714] netlink: 'syz.5.6272': attribute type 16 has an invalid length.
[  375.853958][T20714] netlink: 'syz.5.6272': attribute type 17 has an invalid length.
[  375.901366][T20714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.981670][T20718] bridge0: port 2(bridge_slave_1) entered learning state
[  376.172512][T20729] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6280'.
[  376.511204][T20747] lo speed is unknown, defaulting to 1000
[  377.022332][T20772] netlink: 'syz.5.6301': attribute type 1 has an invalid length.
[  377.207811][ T6035] Bluetooth: hci6: command tx timeout
[  377.213257][T20779] lo speed is unknown, defaulting to 1000
[  377.646119][T20814] netlink: 'syz.5.6319': attribute type 29 has an invalid length.
[  377.648551][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6319'.
[  378.581471][T20834] netlink: 'syz.5.6330': attribute type 1 has an invalid length.
[  379.289105][ T6035] Bluetooth: hci6: command tx timeout
[  379.483822][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6353'.
[  379.968313][T20917] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  380.073037][T20927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.082133][T20927] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  380.085189][T20927] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  380.096003][T20927] tipc: Resetting bearer <eth:syzkaller0>
[  380.106803][ T3674] tipc: Resetting bearer <eth:syzkaller0>
[  380.131842][T20927] tipc: Resetting bearer <eth:syzkaller0>
[  380.139053][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6374'.
[  380.142697][T20931] bridge_slave_1: left allmulticast mode
[  380.145001][T20931] bridge_slave_1: left promiscuous mode
[  380.153759][T20931] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.162830][T20931] bridge_slave_0: left allmulticast mode
[  380.165182][T20931] bridge_slave_0: left promiscuous mode
[  380.169299][T20931] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.425552][T20934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.438824][T20934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.126221][    T9] tipc: Node number set to 4051405445
[  381.381319][ T5898] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.385051][ T5898] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.437621][ T5898] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.441199][ T5898] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.480877][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6381'.
[  381.884035][T20973] lo speed is unknown, defaulting to 1000
[  382.038188][T20984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6398'.
[  382.144408][T20984] netdevsim0: renamed from gre0
[  382.152982][T20984] netdevsim0: entered promiscuous mode
[  382.244423][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6402'.
[  382.519581][T21021] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6415'.
[  383.061256][T21044] lo speed is unknown, defaulting to 1000
[  383.131266][T21049] tun0: tun_chr_ioctl cmd 2147767521
[  383.334842][T21047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6425'.
[  383.493865][T21057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.824592][T21078] netdevsim0: entered allmulticast mode
[  383.869293][T21078] lo speed is unknown, defaulting to 1000
[  383.896718][T21082] netlink: 'syz.2.6440': attribute type 23 has an invalid length.
[  384.234485][T21077] netdevsim0: left allmulticast mode
[  384.791350][T21121] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6457'.
[  385.103705][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6462'.
[  385.161125][T21134] ip6tnl1: entered promiscuous mode
[  385.163333][T21134] ip6tnl1: entered allmulticast mode
[  385.169882][T21134] team0: Device ip6tnl1 is of different type
[  386.030828][T21152] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6471'.
[  386.106564][T21154] netlink: 'syz.5.6472': attribute type 29 has an invalid length.
[  386.109667][T21154] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6472'.
[  386.291652][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.294741][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.741438][T21195] bond0: (slave bond_slave_0): Releasing backup interface
[  386.748224][T21195] bond0: (slave bond_slave_1): Releasing backup interface
[  386.755019][T21195] team0: Port device team_slave_0 removed
[  386.764860][T21195] team0: Port device team_slave_1 removed
[  386.771209][T21195] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.774194][T21195] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.039943][T21216] netlink: 'syz.6.6500': attribute type 13 has an invalid length.
[  387.043202][T21216] netlink: 'syz.6.6500': attribute type 17 has an invalid length.
[  387.114830][T21216] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.122530][T21216] 8021q: adding VLAN 0 to HW filter on device team0
[  387.130364][T21216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.136287][T21221] netlink: 'syz.2.6502': attribute type 30 has an invalid length.
[  387.154936][T21219] lo speed is unknown, defaulting to 1000
[  387.224932][T21216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.294002][T21216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.192685][T21265] lo speed is unknown, defaulting to 1000
[  388.304823][T21216] syz.6.6500 (21216) used greatest stack depth: 19584 bytes left
[  388.695628][T21279] lo speed is unknown, defaulting to 1000
[  389.258751][T21292] tipc: Started in network mode
[  389.261940][T21292] tipc: Node identity 4, cluster identity 4711
[  389.264108][T21292] tipc: Node number set to 4
[  390.051595][T21339] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6553'.
[  390.285752][T21360] lo speed is unknown, defaulting to 1000
[  390.298074][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6563'.
[  390.307022][T21352] netlink: 'syz.5.6558': attribute type 10 has an invalid length.
[  390.311335][T21352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.316356][T21352] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  390.324622][T21352] netlink: 'syz.5.6558': attribute type 10 has an invalid length.
[  390.327529][T21352] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6558'.
[  390.330556][T21352] batadv0: entered promiscuous mode
[  390.332240][T21352] batadv0: entered allmulticast mode
[  390.343640][T21352] bond0: (slave batadv0): Releasing backup interface
[  390.379622][T21352] bridge0: port 3(batadv0) entered blocking state
[  390.382072][T21352] bridge0: port 3(batadv0) entered disabled state
[  390.846264][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  390.850084][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  391.158644][T21397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  391.312563][T21406] wireguard0: entered promiscuous mode
[  391.314349][T21406] wireguard0: entered allmulticast mode
[  391.620937][T21430] ip6gre1: entered allmulticast mode
[  392.274449][T21471] openvswitch: netlink: Missing valid actions attribute.
[  392.279058][T21471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.451798][T21561] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  393.504682][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6653'.
[  393.623829][T21571] netlink: 'syz.5.6657': attribute type 1 has an invalid length.
[  393.752879][T21582] syzkaller1: entered promiscuous mode
[  393.755208][T21582] syzkaller1: entered allmulticast mode
[  394.177393][T21606] lo speed is unknown, defaulting to 1000
[  394.333374][T21619] netlink: 'syz.6.6679': attribute type 2 has an invalid length.
[  394.346321][T21619] netlink: 'syz.6.6679': attribute type 1 has an invalid length.
[  394.349412][T21619] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6679'.
[  394.572318][T21625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6681'.
[  394.900398][T21640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6686'.
[  395.374694][T21669] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  395.435506][T21675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.441876][T21675] syzkaller0: entered promiscuous mode
[  395.444132][T21675] syzkaller0: entered allmulticast mode
[  395.460441][T21675] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6703'.
[  395.470513][T21675] tipc: Resetting bearer <eth:syzkaller0>
[  395.475882][T21674] tipc: Resetting bearer <eth:syzkaller0>
[  395.492578][T21674] tipc: Disabling bearer <eth:syzkaller0>
[  395.526546][ T6035] Bluetooth: hci4: command tx timeout
[  395.661951][T21691] netlink: 'syz.2.6711': attribute type 4 has an invalid length.
[  395.672988][T21691] netlink: 'syz.2.6711': attribute type 4 has an invalid length.
[  396.928616][T21762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.932303][T21762] syzkaller0: entered promiscuous mode
[  396.934563][T21762] syzkaller0: entered allmulticast mode
[  396.952437][T21762] tipc: Resetting bearer <eth:syzkaller0>
[  396.958043][T21761] tipc: Resetting bearer <eth:syzkaller0>
[  396.974807][T21761] tipc: Disabling bearer <eth:syzkaller0>
[  397.033979][T21768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.047037][T21768] syzkaller0: entered promiscuous mode
[  397.050061][T21768] syzkaller0: entered allmulticast mode
[  397.064270][T21768] tipc: Resetting bearer <eth:syzkaller0>
[  397.070302][T21767] tipc: Resetting bearer <eth:syzkaller0>
[  397.080777][T21767] tipc: Disabling bearer <eth:syzkaller0>
[  397.348469][T21794] netlink: 'syz.2.6756': attribute type 1 has an invalid length.
[  397.381271][T21794] bond8: entered promiscuous mode
[  397.383161][T21794] 8021q: adding VLAN 0 to HW filter on device bond8
[  397.402616][T21794] bond8: (slave bridge11): making interface the new active one
[  397.405607][T21794] bridge11: entered promiscuous mode
[  397.408425][T21794] bond8: (slave bridge11): Enslaving as an active interface with an up link
[  398.677930][T21842] netlink: 'syz.2.6777': attribute type 2 has an invalid length.
[  398.687448][T21842] : entered promiscuous mode
[  399.329243][T21867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.332201][T21867] syzkaller0: entered promiscuous mode
[  399.333934][T21867] syzkaller0: entered allmulticast mode
[  399.353657][T21867] tipc: Resetting bearer <eth:syzkaller0>
[  399.359252][T21866] tipc: Resetting bearer <eth:syzkaller0>
[  399.372042][T21866] tipc: Disabling bearer <eth:syzkaller0>
[  399.402737][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6788'.
[  399.405530][T21869] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6788'.
[  399.727290][T21886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.878897][T21899] tun0: tun_chr_ioctl cmd 1074025673
[  399.948125][T21903] netlink: 'syz.2.6805': attribute type 1 has an invalid length.
[  399.951214][T21903] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6805'.
[  399.954741][T21903] netlink: 97 bytes leftover after parsing attributes in process `syz.2.6805'.
[  400.053599][T21911] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  400.250532][T21923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6813'.
[  400.392231][T21935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6819'.
[  401.596106][T21963] tun0: tun_chr_ioctl cmd 1074025675
[  401.598755][T21963] tun0: persist disabled
[  401.859115][T21971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6834'.
[  401.900495][T21971] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6834'.
[  402.271351][T21982] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6839'.
[  402.423400][T21992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6844'.
[  402.429184][T21992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6844'.
[  402.675631][T22013] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6854'.
[  402.763843][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6855'.
[  403.878709][T22051] syzkaller1: entered promiscuous mode
[  403.880579][T22051] syzkaller1: entered allmulticast mode
[  404.283434][T22059] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  404.959076][T22078] lo speed is unknown, defaulting to 1000
[  405.446641][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6887'.
[  406.799743][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6902'.
[  406.803329][T22138] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6902'.
[  406.877435][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  407.637898][T22160] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  407.925648][T22174] syzkaller1: entered promiscuous mode
[  407.929426][T22174] syzkaller1: entered allmulticast mode
[  407.991707][T22178] __nla_validate_parse: 1 callbacks suppressed
[  407.991720][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6921'.
[  407.998780][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6921'.
[  408.154739][T22193] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6928'.
[  408.302227][T22210] macvlan1: entered allmulticast mode
[  408.364723][T22216] unsupported nla_type 52263
[  408.702249][T22243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.705693][T22243] syzkaller0: entered promiscuous mode
[  408.708824][T22243] syzkaller0: entered allmulticast mode
[  408.731793][T22243] tipc: Resetting bearer <eth:syzkaller0>
[  408.735320][T22242] tipc: Resetting bearer <eth:syzkaller0>
[  408.750473][T22242] tipc: Disabling bearer <eth:syzkaller0>
[  408.934392][T22247] lo speed is unknown, defaulting to 1000
[  409.330515][T16549] unregister_netdevice: waiting for vxcan1 to become free. Usage count = 4
[  409.334882][T16549] ref_tracker: netdev@ffff888120a88610 has 1/1 users at
[  409.334882][T16549]      ib_device_set_netdev+0x31f/0x6d0
[  409.334882][T16549]      rxe_register_device+0x1c7/0x310
[  409.334882][T16549]      rxe_net_add+0x81/0x110
[  409.334882][T16549]      rxe_newlink+0xdd/0x190
[  409.334882][T16549]      nldev_newlink+0x4a5/0x5a0
[  409.334882][T16549]      rdma_nl_rcv+0x6ae/0x980
[  409.334882][T16549]      netlink_unicast+0x82f/0x9e0
[  409.334882][T16549]      netlink_sendmsg+0x805/0xb30
[  409.334882][T16549]      __sock_sendmsg+0x21c/0x270
[  409.334882][T16549]      ____sys_sendmsg+0x505/0x830
[  409.334882][T16549]      ___sys_sendmsg+0x21f/0x2a0
[  409.334882][T16549]      __x64_sys_sendmsg+0x19b/0x260
[  409.334882][T16549]      do_syscall_64+0xfa/0x3b0
[  409.334882][T16549]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.334882][T16549] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  409.542536][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  409.552094][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  409.556286][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  409.559931][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  409.563301][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  409.674188][T22258] lo speed is unknown, defaulting to 1000
[  410.069074][T22258] chnl_net:caif_netlink_parms(): no params data found
[  410.166750][T22258] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.169767][T22258] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.172757][T22258] bridge_slave_0: entered allmulticast mode
[  410.176726][T22258] bridge_slave_0: entered promiscuous mode
[  410.181489][T22258] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.184349][T22258] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.187762][T22258] bridge_slave_1: entered allmulticast mode
[  410.191588][T22258] bridge_slave_1: entered promiscuous mode
[  410.223462][T22258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.228875][T22258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.253717][T22258] team0: Port device team_slave_0 added
[  410.257617][T22258] team0: Port device team_slave_1 added
[  410.276245][T22258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.278366][T22258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.286490][T22258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.291761][T22258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.293939][T22258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.301857][T22258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.333836][T22258] hsr_slave_0: entered promiscuous mode
[  410.337782][T22258] hsr_slave_1: entered promiscuous mode
[  410.339983][T22258] debugfs: 'hsr0' already exists in 'hsr'
[  410.342042][T22258] Cannot create hsr debugfs directory
[  410.465215][T22258] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  410.472232][T22258] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  410.477455][T22258] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  410.482808][T22258] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  410.504171][T22258] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.506534][T22258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.508890][T22258] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.511119][T22258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.565193][T22258] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.581745][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.585617][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.608021][T22258] 8021q: adding VLAN 0 to HW filter on device team0
[  410.621841][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.624578][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.641342][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.644203][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.819684][T22258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.977755][T22258] veth0_vlan: entered promiscuous mode
[  410.985293][T22258] veth1_vlan: entered promiscuous mode
[  411.010559][T22258] veth0_macvtap: entered promiscuous mode
[  411.015537][T22258] veth1_macvtap: entered promiscuous mode
[  411.027338][T22258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.036765][T22258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.043554][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.048108][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.052817][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.057668][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.127990][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.130418][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.158325][ T3674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.161324][ T3674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50

VM DIAGNOSIS:
18:57:50  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff934e5310 RBX=00000000000003dd RCX=ffffffff9635a568 RDX=0000000000000008
RSI=00000000000003dd RDI=ffff888108f69cc0 RBP=ffffffff934e4080 RSP=ffffc900030af350
R8 =ffffc900030af318 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dced0
R12=ffffffff934e4080 R13=ffffffff9635a568 R14=ffff888108f6a850 R15=00000000000002a3
RIP=ffffffff819db27d RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555570c6d500 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc0dff1e18 CR3=000000011c772000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc9801a7498 00007fc9801a7470 XMM03=00007fc9801a74a8 00007fc9801a74a0
XMM04=00007fc980d0d100 00007fc9801a7460 XMM05=00007fc9801a7478 00007fc9801a74c0
XMM06=00007fc9801a74b8 00007fc9801a74b0 XMM07=00007fc9801a74a8 00007fc9801a74a0
XMM08=0000000000000000 00007fc980012f0f XMM09=0000000000000000 00007fc980012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000040 RBX=0000000000000040 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc90006736810
R8 =ffff888108c38237 R9 =1ffff11021187046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b038eb R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3c334376c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f934f7d6038 CR3=0000000108800000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
