last executing test programs:

2.119001501s ago: executing program 0 (id=1588):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010459a4afdeeef86432894d89f0001000000c8a2387300000000000a40000000160a030200000000000000000200000009f57a8aaa8c9003cb5adafaa839571600000900010073797a3000000000140003800800014000000000"], 0x68}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x3)
listen(r4, 0x10000)
r5 = socket$netlink(0x10, 0x3, 0x15)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x40494}, 0x0)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000080900020073797a30220000000900010073797a30139e8ed75aa5bdcd0a134eec213037b84c177410d842af79647ebef74438da30c0caf18cde88699710ca696ed7af807b46bcd2b61203f7a7593aad175a4880de1b4ed2ebd727d803983d6f0c5ed2e0a22121469fbf2525217b8c5dea9fb842726bf41d2091b401"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r2, 0x40000000000000, {0x1, 0xf0, 0x3}, 0xfd}, 0xfffffffffffffe5c)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$kcm(0xa, 0x2, 0x0)

1.32995654s ago: executing program 1 (id=1606):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010009000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800f25486b6a74c25048008000240000000120800014000000000140003006e657464657673696d30000000000000080005400000000014000000110001000000000000"], 0xac}}, 0x0)

1.278082466s ago: executing program 1 (id=1608):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a0000000000000000004e07000070035fc9c7b3bec500000000000000000d00000000000000000000000d00000000080000000000000700000000005f5f5f5f2e305f2e00"/102], 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28)

1.274871548s ago: executing program 0 (id=1609):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r3, 0x5c2a7000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r4, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf250e0000001800016c6176655f31000000000400028000"/42], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

1.274412217s ago: executing program 1 (id=1610):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x3}, 0x0, &(0x7f00000002c0)={0x8000000000003ff, 0x0, 0x0, 0x2000000000009, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
close(0x4)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r7, 0x10c, 0x7, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)

1.190600867s ago: executing program 0 (id=1611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe0}, {0x6, 0xd}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x54, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c484}, 0x240080d1)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4)

1.189127097s ago: executing program 0 (id=1613):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x70bd28, 0x25dfdbfd, {{@in6=@private2={0xfc, 0x2, '\x00', 0x9}, 0x4d4, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, {@in=@multicast1, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x7, 0xe, 0x30, 0x20, 0x2c}, {{@in=@private=0xa010101, @in=@multicast2, 0x4e22, 0x3, 0x4e24, 0x2, 0xa, 0xa0, 0x0, 0xc}, {0x3, 0x3, 0x5, 0xc606, 0xbf3, 0x3d60000000000000, 0x5, 0x4}, {0x8000000000000000, 0x9, 0x10000, 0xffffffffffff602c}, 0xc, 0x6e6bb9, 0x2, 0x1, 0x1}, 0x6, 0x6, 0xad6, 0x70bd2d}}, 0x128}}, 0x814)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0xcc10)
socket$kcm(0x10, 0x2, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0)
setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000), 0x4)
sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000003c0)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72076fdbd11017c1a40f6f56bd41d59dcbabc1440634b9c7d6c12128a25de47cd5f85b9eecdacf10621e9dafb7a304208d2a10a3c99837", 0x4d}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c617665"], 0x2c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000001c000003000000000300000001000000ec2a0126a60cfa7e92bb0c221ca827bfd4e10be66a33e01b93bb8e9b8b0c6bb806cbc79c542e09c99eb88393590f095d379611a1e14f716d312bf934186a96e8c1bb46d0be60c038b9f45957f7ff7301a16ad9ea1b", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r3, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r10, r9, 0x6, 0x0, 0x0, @void, @value=r10, @void, @void, r11}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="2900000020000000000000002af8314db41857dc4f82d5fa986f87d2b5f76b9ba63702c28fcb92b3693d4b2ff89dfec868fca9b8ed07a9240806f5660a02a1d28575637dfde5d7a55cb146c870e41c252c8f12a8f48784c6e85b7dd8d5c410365bd6ff7032a23af9d611e8a822534818daacef", @ANYRES32=0x0, @ANYRES64=r11], 0x20)

440.463865ms ago: executing program 0 (id=1614):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r5=>0x0, 0x29, 0x24, 0xde, 0x2, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x10, 0x7, 0x78}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r6=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', <r7=>0x0, 0x29, 0x9, 0x9, 0x2, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0x8400, 0x8, 0x0, 0x7}}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x41, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000940)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'team0\x00', <r11=>0x0}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x0, 0x0, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'team0\x00', <r15=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000dc0)={'gre0\x00', <r16=>0x0, 0x10, 0x10, 0x4, 0x3, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x64, 0x0, 0x6, 0x0, 0x0, @multicast1, @private=0xa010102, {[@timestamp={0x44, 0x10, 0x9a, 0x0, 0x8, [0x4, 0xfffffffd, 0x8]}, @ssrr={0x89, 0x17, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101, @empty, @empty]}, @lsrr={0x83, 0x1b, 0x9f, [@dev={0xac, 0x14, 0x14, 0x15}, @local, @rand_addr=0x64010102, @multicast2, @local, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xc3, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x2b, 0x3, 0x9, [{@broadcast, 0xfffff800}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}]}, @cipso={0x86, 0x18, 0x2, [{0x1, 0x12, "43e6d1d8cbd84dc244722537c198eee0"}]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000f00)={0x6a0, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x80, 0x8, 0x2}, {0x6, 0x1, 0x3, 0x7f}, {0xffc0, 0x3, 0xa, 0x10001}, {0x7, 0x4, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x9}, {0x81, 0x0, 0xfd, 0xd0fd}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3ff, 0x5, 0x1, 0x4}, {0x4, 0x5, 0x75, 0x9}, {0x7f4c, 0x7, 0x2, 0x4}, {0x6, 0x1, 0x0, 0xfff}]}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r13}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x6a0}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) (async)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000001640)=""/182, &(0x7f0000001700)=0xb6)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r13, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) (async)
r18 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001800)={r12}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{r17}, &(0x7f00000017c0), &(0x7f0000001840)=r18}, 0x20)
r19 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r19, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x3c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async)
r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a40)={'wlan1\x00', <r21=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001b00)={&(0x7f00000019c0), 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, r20, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r21}, @val={0xc, 0x99, {0x7, 0x27}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001b40)) (async)
socket$alg(0x26, 0x5, 0x0) (async)
r22 = accept4$ax25(0xffffffffffffffff, &(0x7f0000001b80)={{0x3, @rose}, [@remote, @null, @rose, @remote, @netrom, @null, @rose, @rose]}, &(0x7f0000001c00)=0x48, 0x80800)
getsockopt$ax25_int(r22, 0x101, 0x8, &(0x7f0000001c40), &(0x7f0000001c80)=0x4)

268.83037ms ago: executing program 1 (id=1617):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffea}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x800}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x31, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x10, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r6], 0x0, 0x10, 0xaf3}, 0x94)

209.228972ms ago: executing program 2 (id=1619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7}, {0x5}, {0x6, 0x0, 0x0, 0x3fe2}]}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x3, 0x4, 0x12}]}}, @TCA_RATE={0x0, 0x5, {0x7, 0x1}}]}, 0xb8}}, 0x0)

208.951961ms ago: executing program 1 (id=1620):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000), &(0x7f0000000100)=0x4)
write$cgroup_type(r2, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
listen(r0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) (async)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) (async)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
getsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async)
write$cgroup_type(r2, &(0x7f0000000040), 0x9) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) (async)

208.713174ms ago: executing program 0 (id=1621):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x13, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x476c88fb0d864184, 0x3, 0x4, 0x5, 0x30, 0x1}, @call={0x85, 0x0, 0x0, 0x8}], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

158.383424ms ago: executing program 2 (id=1622):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000000000000000000000000012001000000002000000000000000000100006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES8=r0], 0x16c}, 0x1, 0x0, 0x0, 0x88004}, 0x1)

156.359701ms ago: executing program 2 (id=1623):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1}]}, {0x0, [0x5f, 0x0]}}, 0x0, 0x2c, 0x0, 0x1, 0x1ff}, 0x28)
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={<r7=>r0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x29, 0x0, 0xb, 0x101, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x80, 0x20, 0x2ba, 0x3a2}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)=""/4079, 0xfef}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x40010040, 0x0)
sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@alg={0xe8, 0x10, 0x1, 0x70bd3d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2400}, [{0x8, 0x1, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8041}, 0x20008090)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000005c0)={'hsr0\x00', @multicast})
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r12, 0x16318}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe9, 0x3}}]}]}}}]}, 0x44}}, 0x8004)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c000780080085000200000008000600000004"], 0xe0}}, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x17, 0x0, 0x2}}], {0x14}}, 0xa4}}, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0))
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010003904faffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000002800128008000100677265001c000280080004000900219848963ff6b066893d987f9181343e0b39233e11004e"], 0x48}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)

155.804811ms ago: executing program 1 (id=1624):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff665767907800000000ffffffff2100907812000228250000090000000000000000e0000002e0000000e3b691ef08f337efddc6680eefb4b83f912cdd0d8fa064a20000"], 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r3 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r10}, 0xc)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff7fe668d195b049832700009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) (async)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000004000000020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c00028008000140000000001400000010000100000000000000000000009c06b495e338a6bbfdf39705054e1b2ab401b6643bbca55473595c28b0dfdcf6dd5a58cf14de12c6a1e0a5f99df34a5d9ede7856cf76f8e5b88a70e090aa46cc46ba19a2fa5a3f80944ceea057c567d5d024040d0a13d40811930c43b5bbb04581b326694e3f28644da66eaa13745878c5b002b74bb1a2875619edae8d8465d8b1bae68bab505ab586bd7d0964df781fb9dd6faf"], 0xa4}}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r10}, 0xc) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r12], 0x20}, 0x1, 0x0, 0x0, 0x4000891}, 0x40010) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800) (async)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r15, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

50.791093ms ago: executing program 2 (id=1625):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a0000000003000000000007000070035fc9c7b3bec500000000000000000d00000000000000000000000d00000000080000000000000700000000005f5f5f5f2e305f2e00"/102], 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28)

49.738775ms ago: executing program 2 (id=1626):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40048c4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x40884, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r2 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xec, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0x8, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0)

0s ago: executing program 2 (id=1627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010030bd7000ffdbdf350a0000000c000380080100"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @remote}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_macvtap\x00'})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27952' (ED25519) to the list of known hosts.
syzkaller login: [   48.651309][ T5836] cgroup: Unknown subsys name 'net'
[   48.760975][ T5836] cgroup: Unknown subsys name 'cpuset'
[   48.766424][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.448081][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.233528][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.247536][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.250579][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.253765][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.256507][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.350976][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.353836][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.356634][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.362602][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.368125][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.405393][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.409257][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.412498][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.418066][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.422432][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.573974][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   54.592296][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   54.696166][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.699734][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.702198][ T5848] bridge_slave_0: entered allmulticast mode
[   54.705008][ T5848] bridge_slave_0: entered promiscuous mode
[   54.725813][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.728769][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.731187][ T5848] bridge_slave_1: entered allmulticast mode
[   54.734189][ T5848] bridge_slave_1: entered promiscuous mode
[   54.786510][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.790010][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.793033][ T5853] bridge_slave_0: entered allmulticast mode
[   54.796802][ T5853] bridge_slave_0: entered promiscuous mode
[   54.812104][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.815237][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.818665][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.821621][ T5853] bridge_slave_1: entered allmulticast mode
[   54.825555][ T5853] bridge_slave_1: entered promiscuous mode
[   54.837932][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.903434][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.908200][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   54.915126][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.921137][ T5848] team0: Port device team_slave_0 added
[   54.939313][ T5848] team0: Port device team_slave_1 added
[   54.954903][ T5853] team0: Port device team_slave_0 added
[   54.978839][ T5853] team0: Port device team_slave_1 added
[   55.011098][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.013369][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.021698][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.042503][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.045229][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.055004][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.059832][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.062101][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.070964][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.077831][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.080714][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.090403][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.103169][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.105789][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.108926][ T5854] bridge_slave_0: entered allmulticast mode
[   55.111839][ T5854] bridge_slave_0: entered promiscuous mode
[   55.125479][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.128417][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.131047][ T5854] bridge_slave_1: entered allmulticast mode
[   55.134006][ T5854] bridge_slave_1: entered promiscuous mode
[   55.178247][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.186209][ T5848] hsr_slave_0: entered promiscuous mode
[   55.189626][ T5848] hsr_slave_1: entered promiscuous mode
[   55.204982][ T5853] hsr_slave_0: entered promiscuous mode
[   55.207802][ T5853] hsr_slave_1: entered promiscuous mode
[   55.210056][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.211961][ T5853] Cannot create hsr debugfs directory
[   55.216104][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.235255][ T5854] team0: Port device team_slave_0 added
[   55.252851][ T5854] team0: Port device team_slave_1 added
[   55.305103][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.308541][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.319327][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.335989][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.339405][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.349962][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.438569][ T5854] hsr_slave_0: entered promiscuous mode
[   55.441510][ T5854] hsr_slave_1: entered promiscuous mode
[   55.444466][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   55.446846][ T5854] Cannot create hsr debugfs directory
[   55.631181][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.645052][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.666109][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.682920][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.742635][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.751952][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.774915][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.779411][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.851193][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.858612][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.865729][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.877214][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.904554][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.929977][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   55.944259][ T4627] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.946810][ T4627] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.963275][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.966074][ T4627] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.022112][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.055404][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   56.066997][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.069565][ T4957] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.080090][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.082807][ T4957] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.089500][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.139737][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   56.149423][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.151971][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.196787][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.199974][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.253633][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.323250][ T5853] veth0_vlan: entered promiscuous mode
[   56.331603][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.339989][ T5238] Bluetooth: hci0: command tx timeout
[   56.342923][ T5853] veth1_vlan: entered promiscuous mode
[   56.372196][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.399659][ T5853] veth0_macvtap: entered promiscuous mode
[   56.412169][ T5853] veth1_macvtap: entered promiscuous mode
[   56.417922][ T5238] Bluetooth: hci1: command tx timeout
[   56.438346][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.449371][ T5848] veth0_vlan: entered promiscuous mode
[   56.452669][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.455404][ T5854] veth0_vlan: entered promiscuous mode
[   56.467787][ T5848] veth1_vlan: entered promiscuous mode
[   56.470519][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.474463][ T5854] veth1_vlan: entered promiscuous mode
[   56.490259][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.497212][ T5238] Bluetooth: hci2: command tx timeout
[   56.499937][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.512017][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.543870][ T5848] veth0_macvtap: entered promiscuous mode
[   56.559466][ T5848] veth1_macvtap: entered promiscuous mode
[   56.578353][ T5854] veth0_macvtap: entered promiscuous mode
[   56.592333][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.597377][ T5854] veth1_macvtap: entered promiscuous mode
[   56.602008][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.608073][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.610567][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.611333][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.614134][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.621293][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.634162][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.659257][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.689136][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.707677][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.710653][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.721906][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.729025][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.732172][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.735012][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.766405][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.784543][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.801099][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.806402][ T5916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.832231][ T5916] v: renamed from veth1_vlan (while UP)
[   56.840337][ T5916] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.853372][  T739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.856004][  T739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.900883][ T4627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.903780][ T4627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.982630][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.985646][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.056207][ T5924] Zero length message leads to an empty skb
[   57.111309][ T5937] Bluetooth: MGMT ver 1.23
[   57.158962][ T5939] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   57.273264][ T5944] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET)
[   57.292010][ T5947] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   57.296145][ T5946] IPVS: stopping backup sync thread 5947 ...
[   57.375876][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'.
[   57.393786][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'.
[   57.445247][ T5965] netlink: 'syz.1.16': attribute type 14 has an invalid length.
[   57.515763][ T5887] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.519599][ T5887] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.522099][ T5887] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 7/9
[   57.525120][ T5887] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   57.532456][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'.
[   57.622384][ T5975] netlink: 'syz.1.20': attribute type 21 has an invalid length.
[   57.625021][ T5975] netlink: 128 bytes leftover after parsing attributes in process `syz.1.20'.
[   57.628990][ T5975] netlink: 'syz.1.20': attribute type 4 has an invalid length.
[   57.631783][ T5975] netlink: 'syz.1.20': attribute type 3 has an invalid length.
[   57.634482][ T5975] netlink: 3 bytes leftover after parsing attributes in process `syz.1.20'.
[   57.850947][ T5989] netlink: 'syz.1.23': attribute type 12 has an invalid length.
[   57.853613][ T5989] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.23'.
[   57.972240][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   58.141907][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   58.153963][ T6017] bond_slave_0: entered promiscuous mode
[   58.155999][ T6017] bond_slave_1: entered promiscuous mode
[   58.160456][ T6017] macvlan2: entered promiscuous mode
[   58.162174][ T6017] bond0: entered promiscuous mode
[   58.165599][ T6017] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   58.319381][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.417993][ T5238] Bluetooth: hci0: command tx timeout
[   58.498070][ T5238] Bluetooth: hci1: command tx timeout
[   58.548771][ T6047] bridge_slave_0: left allmulticast mode
[   58.551241][ T6047] bridge_slave_0: left promiscuous mode
[   58.553573][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.560328][ T6047] bridge_slave_1: left allmulticast mode
[   58.562701][ T6047] bridge_slave_1: left promiscuous mode
[   58.565081][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.577915][ T5851] Bluetooth: hci2: command tx timeout
[   58.578462][ T5887] IPVS: starting estimator thread 0...
[   58.584028][ T6047] bond0: (slave bond_slave_0): Releasing backup interface
[   58.591898][ T6047] bond_slave_0: left promiscuous mode
[   58.599885][ T6047] bond0: (slave bond_slave_1): Releasing backup interface
[   58.604745][ T6047] bond_slave_1: left promiscuous mode
[   58.618769][ T6047] team0: Port device team_slave_0 removed
[   58.629371][ T6047] team0: Port device team_slave_1 removed
[   58.631952][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.634973][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.640272][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.642929][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.651510][ T6057] netlink: 'syz.0.40': attribute type 10 has an invalid length.
[   58.667022][ T6057] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   58.671436][ T6057] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.697679][ T6052] IPVS: using max 81 ests per chain, 194400 per kthread
[   58.733261][ T6061] policy can only be matched on NF_INET_PRE_ROUTING
[   58.733275][ T6061] unable to load match
[   58.770621][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'.
[   58.829207][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'.
[   58.889761][ T6074] ip6tnl1: entered promiscuous mode
[   58.891486][ T6074] ip6tnl1: entered allmulticast mode
[   58.894522][ T6074] team0: Device ip6tnl1 is of different type
[   59.530250][   T47] cfg80211: failed to load regulatory.db
[   60.034231][ T6126] pimreg: entered allmulticast mode
[   60.355968][ T6140] netlink: 'syz.1.67': attribute type 7 has an invalid length.
[   60.370532][ T6142] sctp: [Deprecated]: syz.0.68 (pid 6142) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.370532][ T6142] Use struct sctp_sack_info instead
[   60.481719][ T6146] batadv_slave_1: entered promiscuous mode
[   60.499377][ T5238] Bluetooth: hci0: command tx timeout
[   60.502659][ T6145] batadv_slave_1: left promiscuous mode
[   60.577329][ T5238] Bluetooth: hci1: command tx timeout
[   60.658331][ T5238] Bluetooth: hci2: command tx timeout
[   60.673375][ T6164] netlink: 'syz.1.76': attribute type 18 has an invalid length.
[   60.693240][ T6164] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   60.764090][ T6181] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   60.902667][ T6193] IPVS: length: 24 != 55320
[   60.949864][ T6197] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   61.076484][ T6206] syzkaller1: entered promiscuous mode
[   61.081754][ T6206] syzkaller1: entered allmulticast mode
[   61.422413][ T6231] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   61.426239][ T6231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   61.656279][ T5880] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.670463][ T5880] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.676716][ T5880] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.685144][ T5880] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.979116][ T6250] bond0: left promiscuous mode
[   61.980918][ T6250] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   61.984026][ T6250] macvlan2: left promiscuous mode
[   61.990263][ T5880] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   61.995396][ T5880] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.000321][ T5880] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.003877][ T5880] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.099118][ T5880] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.102938][ T5880] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.106645][ T5880] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.110658][ T5880] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.273514][ T6260] bridge0: entered promiscuous mode
[   62.279508][ T6260] bridge0: left promiscuous mode
[   62.501033][ T6292] __nla_validate_parse: 16 callbacks suppressed
[   62.501043][ T6292] netlink: 308 bytes leftover after parsing attributes in process `syz.1.111'.
[   62.506254][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[   62.514172][ T6292] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   62.553958][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'.
[   62.556772][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   62.562600][ T6297] validate_nla: 5 callbacks suppressed
[   62.562606][ T6297] netlink: 'syz.2.113': attribute type 15 has an invalid length.
[   62.579709][ T5238] Bluetooth: hci0: command tx timeout
[   62.657154][ T5238] Bluetooth: hci1: command tx timeout
[   62.725996][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'.
[   62.739105][ T5238] Bluetooth: hci2: command tx timeout
[   62.786194][ T6313] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.850267][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'.
[   62.886069][ T6325] vlan0: entered allmulticast mode
[   62.929818][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'.
[   62.938473][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.941607][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.092335][ T6343] syzkaller1: entered promiscuous mode
[   63.094204][ T6343] syzkaller1: entered allmulticast mode
[   63.111324][ T6345] netlink: 786 bytes leftover after parsing attributes in process `syz.2.124'.
[   63.266487][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[   63.295105][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'.
[   63.566590][ T6398] netlink: 'syz.0.139': attribute type 1 has an invalid length.
[   63.587553][ T6401] tun0: tun_chr_ioctl cmd 2148553947
[   63.594972][ T6398] bond1: (slave geneve2): making interface the new active one
[   63.598617][ T6398] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   63.621373][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[   63.627243][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[   63.634516][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[   63.642373][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[   63.706811][ T6415] syzkaller0: entered promiscuous mode
[   63.710091][ T6415] syzkaller0: entered allmulticast mode
[   63.713960][ T6414] tipc: Started in network mode
[   63.715679][ T6414] tipc: Node identity 7e75e9fd3e88, cluster identity 4711
[   63.719166][ T6414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.730151][ T6414] tipc: Resetting bearer <eth:syzkaller0>
[   63.740587][ T6414] tipc: Disabling bearer <eth:syzkaller0>
[   63.926636][ T6450] netlink: 'syz.0.152': attribute type 14 has an invalid length.
[   63.955564][ T6450] netlink: 'syz.0.152': attribute type 14 has an invalid length.
[   64.223331][ T6496] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   64.304065][ T6506] sock: sock_timestamping_bind_phc: sock not bind to device
[   64.324037][ T6511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.525930][ T6521] netlink: 'syz.0.178': attribute type 3 has an invalid length.
[   65.415553][ T6551] ieee802154 phy0 wpan0: encryption failed: -22
[   66.788654][ T6616] sock: sock_set_timeout: `syz.0.210' (pid 6616) tries to set negative timeout
[   67.651879][ T6664] __nla_validate_parse: 50 callbacks suppressed
[   67.651890][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'.
[   67.876769][ T6667] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   68.203272][ T6692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.233'.
[   68.208891][ T6692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.233'.
[   68.241289][ T6692] nbd: socks must be embedded in a SOCK_ITEM attr
[   68.245612][ T5852] block nbd64: NBD_DISCONNECT
[   68.385274][ T6703] netlink: 52 bytes leftover after parsing attributes in process `syz.1.235'.
[   68.389034][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[   68.458357][ T6707] tipc: Started in network mode
[   68.460659][ T6707] tipc: Node identity 8a60f894f26d, cluster identity 4711
[   68.464110][ T6707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.467076][ T6707] syzkaller0: entered promiscuous mode
[   68.469164][ T6707] syzkaller0: entered allmulticast mode
[   68.489056][ T6707] tipc: Resetting bearer <eth:syzkaller0>
[   68.495038][ T6706] tipc: Resetting bearer <eth:syzkaller0>
[   68.519938][ T6706] tipc: Disabling bearer <eth:syzkaller0>
[   68.578077][ T5238] Bluetooth: hci2: command tx timeout
[   68.884349][ T6731] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.245'.
[   68.887523][ T6731] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   68.890190][ T6731] openvswitch: netlink: Duplicate key (type 0).
[   68.912395][ T6733] team0: entered allmulticast mode
[   68.915425][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.246'.
[   68.985142][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   69.006191][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.249'.
[   69.810935][ T6747] ip6tnl1: entered promiscuous mode
[   69.813333][ T6747] ip6tnl1: entered allmulticast mode
[   69.818806][ T6747] team0: Device ip6tnl1 is of different type
[   69.883382][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'.
[   69.914099][ T6755] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   70.115348][ T6797] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   70.120038][ T6797] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   70.438488][ T6811] syzkaller0: entered promiscuous mode
[   70.440529][ T6811] syzkaller0: entered allmulticast mode
[   71.067803][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.070447][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.899003][ T6870] block nbd0: server does not support multiple connections per device.
[   71.905256][ T6870] block nbd0: shutting down sockets
[   71.928074][ T6874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.932593][ T6874] syzkaller0: entered promiscuous mode
[   71.935226][ T6874] syzkaller0: entered allmulticast mode
[   71.964012][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[   71.970546][ T6873] tipc: Resetting bearer <eth:syzkaller0>
[   71.979936][ T6873] tipc: Disabling bearer <eth:syzkaller0>
[   72.277318][ T6906] netlink: 'syz.1.297': attribute type 2 has an invalid length.
[   72.298161][ T6906] IPv6: sit1: Disabled Multicast RS
[   72.456856][ T6923] delete_channel: no stack
[   72.494494][ T6927] netlink: 'syz.2.305': attribute type 1 has an invalid length.
[   72.556514][ T6930] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   72.559656][ T6930] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   72.686757][ T6938] syzkaller0: entered promiscuous mode
[   72.688794][ T6938] syzkaller0: entered allmulticast mode
[   72.706346][ T6938] __nla_validate_parse: 22 callbacks suppressed
[   72.706361][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.896816][ T6948] netlink: 88 bytes leftover after parsing attributes in process `syz.0.312'.
[   73.063482][ T6964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.066209][ T6964] syzkaller0: entered promiscuous mode
[   73.068904][ T6964] syzkaller0: entered allmulticast mode
[   73.084064][ T6964] tipc: Resetting bearer <eth:syzkaller0>
[   73.163769][ T6963] tipc: Resetting bearer <eth:syzkaller0>
[   73.171975][ T6963] tipc: Disabling bearer <eth:syzkaller0>
[   73.292140][ T6985] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[   73.498547][ T7008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.327'.
[   73.502386][ T7008] netlink: 'syz.0.327': attribute type 5 has an invalid length.
[   74.263425][ T7020] netlink: 'syz.0.331': attribute type 2 has an invalid length.
[   74.266770][ T7020] netlink: 119 bytes leftover after parsing attributes in process `syz.0.331'.
[   74.361387][ T7025] syzkaller0: entered promiscuous mode
[   74.363205][ T7025] syzkaller0: entered allmulticast mode
[   74.837060][ T7041] netlink: 'syz.2.337': attribute type 13 has an invalid length.
[   74.859855][ T7041] syzkaller0: entered promiscuous mode
[   74.862137][ T7041] syzkaller0: entered allmulticast mode
[   75.015000][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'.
[   75.706718][ T7060] netlink: 9 bytes leftover after parsing attributes in process `syz.1.343'.
[   76.032815][ T7072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.345'.
[   76.037131][ T7072] netlink: 43 bytes leftover after parsing attributes in process `syz.2.345'.
[   76.041092][ T7072] netlink: 'syz.2.345': attribute type 6 has an invalid length.
[   76.045348][ T7072] netlink: 'syz.2.345': attribute type 5 has an invalid length.
[   76.048836][ T7072] netlink: 43 bytes leftover after parsing attributes in process `syz.2.345'.
[   76.360057][ T7060] gretap0: entered promiscuous mode
[   76.563470][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'.
[   76.599586][ T7090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.602133][ T7090] syzkaller0: entered promiscuous mode
[   76.603893][ T7090] syzkaller0: entered allmulticast mode
[   76.615476][ T7090] tipc: Resetting bearer <eth:syzkaller0>
[   76.620059][ T7091] netlink: 'syz.2.349': attribute type 10 has an invalid length.
[   76.625393][ T7091] team0: Port device dummy0 added
[   76.628469][ T7089] tipc: Resetting bearer <eth:syzkaller0>
[   76.636720][ T7091] netlink: 'syz.2.349': attribute type 10 has an invalid length.
[   76.640972][ T7089] tipc: Disabling bearer <eth:syzkaller0>
[   76.650734][ T7091] team0: Port device dummy0 removed
[   76.654989][ T7091] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   77.926697][ T7147] __nla_validate_parse: 2 callbacks suppressed
[   77.926708][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'.
[   77.964040][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[   78.022514][ T7151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.026343][ T7151] syzkaller0: entered promiscuous mode
[   78.029252][ T7151] syzkaller0: entered allmulticast mode
[   78.060999][ T7151] tipc: Resetting bearer <eth:syzkaller0>
[   78.070619][ T7150] tipc: Resetting bearer <eth:syzkaller0>
[   78.087420][ T7150] tipc: Disabling bearer <eth:syzkaller0>
[   78.199815][ T7160] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   78.202606][ T7160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.133656][ T7174] netlink: 'syz.0.379': attribute type 4 has an invalid length.
[   79.136774][ T7174] netlink: 27 bytes leftover after parsing attributes in process `syz.0.379'.
[   79.225055][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'.
[   79.293781][ T7191] syzkaller0: entered allmulticast mode
[   79.420286][ T7192] netlink: 'syz.1.383': attribute type 7 has an invalid length.
[   79.510552][ T7211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.392'.
[   79.603005][ T7220] netlink: 'syz.2.394': attribute type 9 has an invalid length.
[   79.680216][ T7228] netlink: 112 bytes leftover after parsing attributes in process `syz.2.397'.
[   79.683719][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'.
[   79.785610][ T7240] lo speed is unknown, defaulting to 1000
[   79.799593][ T7240] lo speed is unknown, defaulting to 1000
[   79.803658][ T7240] lo speed is unknown, defaulting to 1000
[   79.813789][ T7240] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.835699][ T7247] netlink: 32 bytes leftover after parsing attributes in process `syz.1.400'.
[   79.838815][ T7240] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   79.841394][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'.
[   79.851063][ T7240] lo speed is unknown, defaulting to 1000
[   79.854120][ T7240] lo speed is unknown, defaulting to 1000
[   79.858844][ T7240] lo speed is unknown, defaulting to 1000
[   79.871271][ T7240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.873571][ T7240] veth0_to_bridge: entered promiscuous mode
[   79.875552][ T7240] veth0_to_bridge: entered allmulticast mode
[   79.885781][ T7236] tipc: Disabling bearer <eth:syzkaller0>
[   81.102656][ T7302] tipc: Started in network mode
[   81.106809][ T7302] tipc: Node identity ac14140f, cluster identity 4711
[   81.112975][ T7302] tipc: New replicast peer: 255.255.255.255
[   81.116285][ T7302] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.751480][    T9] IPVS: starting estimator thread 0...
[   81.837602][ T7363] IPVS: using max 80 ests per chain, 192000 per kthread
[   81.844051][ T7372] netlink: 'syz.0.425': attribute type 1 has an invalid length.
[   81.874520][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'.
[   82.108062][ T2281] tipc: Node number set to 2886997007
[   82.165204][   T33] audit: type=1800 audit(1756898436.373:2): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.434" name="memory.events" dev="tmpfs" ino=749 res=0 errno=0
[   82.603455][ T7448] bond0: (slave wlan1): Releasing backup interface
[   82.996517][ T7471] __nla_validate_parse: 6 callbacks suppressed
[   82.996535][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'.
[   83.823028][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'.
[   83.840895][ T7500] 8021q: VLANs not supported on ip_vti0
[   84.290054][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[   84.293459][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'.
[   84.669108][ T7562] netlink: 'syz.1.480': attribute type 5 has an invalid length.
[   84.672800][ T7562] netlink: 480 bytes leftover after parsing attributes in process `syz.1.480'.
[   84.676668][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'.
[   84.693374][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'.
[   84.746548][ T7574] sch_fq: defrate 34430 ignored.
[   84.844645][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'.
[   84.905890][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   85.022857][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.495'.
[   85.069596][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'.
[   85.340978][ T7614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.344510][ T7614] syzkaller0: entered promiscuous mode
[   85.350309][ T7614] syzkaller0: entered allmulticast mode
[   85.365326][ T7614] tipc: Resetting bearer <eth:syzkaller0>
[   85.440577][ T7616] sctp: [Deprecated]: syz.1.502 (pid 7616) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.440577][ T7616] Use struct sctp_sack_info instead
[   85.450339][ T7613] tipc: Resetting bearer <eth:syzkaller0>
[   85.453614][ T7617] sctp: [Deprecated]: syz.1.502 (pid 7617) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.453614][ T7617] Use struct sctp_sack_info instead
[   85.469504][ T7613] tipc: Disabling bearer <eth:syzkaller0>
[   85.536245][ T7623] netlink: 'syz.1.504': attribute type 2 has an invalid length.
[   85.584765][ T7625] syz.2.505 (7625) used obsolete PPPIOCDETACH ioctl
[   85.804052][ T7650] netlink: 'syz.0.512': attribute type 4 has an invalid length.
[   85.809046][ T7650] netlink: 'syz.0.512': attribute type 4 has an invalid length.
[   85.835782][ T7650] v: renamed from ip6_vti0
[   85.882536][ T7653] bond0: (slave bond_slave_1): Releasing backup interface
[   87.560724][ T7732] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[   87.563912][ T7732] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[   87.779138][ T7753] tipc: New replicast peer: 0.0.0.0
[   87.782176][ T7753] tipc: Enabled bearer <udp:syz2>, priority 10
[   87.794447][ T7753] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   87.801840][ T7756] netlink: 'syz.2.540': attribute type 30 has an invalid length.
[   88.013953][ T7773] __nla_validate_parse: 10 callbacks suppressed
[   88.013970][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'.
[   88.335628][ T7782] netlink: 'syz.2.548': attribute type 13 has an invalid length.
[   88.343848][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'.
[   88.352190][ T7782] netlink: 'syz.2.548': attribute type 13 has an invalid length.
[   88.364430][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'.
[   88.589919][ T7789] Bluetooth: MGMT ver 1.23
[   88.897539][  T793] tipc: Node number set to 1090382333
[   89.482056][ T7806] netlink: 'syz.2.555': attribute type 1 has an invalid length.
[   89.484791][ T7806] netlink: 136 bytes leftover after parsing attributes in process `syz.2.555'.
[   89.493639][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'.
[   89.630320][ T7823] netlink: 64 bytes leftover after parsing attributes in process `syz.2.561'.
[   89.795832][ T7837] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.526668][ T7893] netlink: 'syz.2.581': attribute type 1 has an invalid length.
[   90.657451][ T5238] Bluetooth: hci2: command tx timeout
[   90.685941][ T7906] netlink: 'syz.1.585': attribute type 30 has an invalid length.
[   90.716816][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'.
[   90.721935][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'.
[   90.794313][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.588'.
[   90.845716][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'.
[   90.944650][ T7923] netlink: 'syz.2.590': attribute type 3 has an invalid length.
[   91.488031][ T7945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.496724][ T7945] syzkaller0: entered promiscuous mode
[   91.504547][ T7945] syzkaller0: entered allmulticast mode
[   91.536341][ T7945] tipc: Resetting bearer <eth:syzkaller0>
[   91.547182][ T7945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.550167][ T7945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.559584][ T7944] tipc: Resetting bearer <eth:syzkaller0>
[   91.581717][ T7944] tipc: Disabling bearer <eth:syzkaller0>
[   92.106788][ T7980] netlink: 'syz.0.609': attribute type 10 has an invalid length.
[   92.116775][ T7980] 8021q: adding VLAN 0 to HW filter on device team0
[   92.123314][ T7980] bond0: (slave team0): Enslaving as an active interface with an up link
[   92.129618][ T7980] netlink: 'syz.0.609': attribute type 10 has an invalid length.
[   92.138521][ T7980] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   92.164450][ T7980] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.168416][ T7982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.171722][ T7982] syzkaller0: entered promiscuous mode
[   92.173677][ T7982] syzkaller0: entered allmulticast mode
[   92.186591][ T7982] sch_fq: defrate 257 ignored.
[   92.191889][ T7982] tipc: Resetting bearer <eth:syzkaller0>
[   92.196700][ T7981] tipc: Resetting bearer <eth:syzkaller0>
[   92.207599][ T7981] tipc: Disabling bearer <eth:syzkaller0>
[   92.414419][ T8009] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   92.417687][ T8009] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   92.432713][ T8009] pim6reg1: entered promiscuous mode
[   92.434993][ T8009] pim6reg1: entered allmulticast mode
[   92.848022][ T8034] syz.1.627: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   92.855219][ T8034] CPU: 1 UID: 0 PID: 8034 Comm: syz.1.627 Not tainted syzkaller #0 PREEMPT(full) 
[   92.855231][ T8034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.855235][ T8034] Call Trace:
[   92.855239][ T8034]  <TASK>
[   92.855242][ T8034]  dump_stack_lvl+0x189/0x250
[   92.855258][ T8034]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.855266][ T8034]  ? __pfx__printk+0x10/0x10
[   92.855276][ T8034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.855286][ T8034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.855294][ T8034]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   92.855302][ T8034]  warn_alloc+0x214/0x310
[   92.855316][ T8034]  ? __pfx_warn_alloc+0x10/0x10
[   92.855329][ T8034]  ? __get_vm_area_node+0x28f/0x300
[   92.855339][ T8034]  ? xskq_create+0xbf/0x170
[   92.855350][ T8034]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   92.855370][ T8034]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.855382][ T8034]  ? __kasan_kmalloc+0x93/0xb0
[   92.855393][ T8034]  vmalloc_user_noprof+0xad/0xf0
[   92.855402][ T8034]  ? xskq_create+0xbf/0x170
[   92.855409][ T8034]  xskq_create+0xbf/0x170
[   92.855416][ T8034]  xsk_init_queue+0xb0/0x110
[   92.855427][ T8034]  xsk_setsockopt+0x57b/0x8d0
[   92.855438][ T8034]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.855447][ T8034]  ? __pfx_aa_sk_perm+0x10/0x10
[   92.855458][ T8034]  ? __fget_files+0x2a/0x420
[   92.855464][ T8034]  ? aa_sock_opt_perm+0xff/0x1b0
[   92.855471][ T8034]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   92.855480][ T8034]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.855489][ T8034]  do_sock_setsockopt+0x17c/0x1b0
[   92.855499][ T8034]  __x64_sys_setsockopt+0x13f/0x1b0
[   92.855508][ T8034]  do_syscall_64+0xfa/0x3b0
[   92.855516][ T8034]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.855523][ T8034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.855530][ T8034]  ? exc_page_fault+0x9f/0xf0
[   92.855537][ T8034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.855543][ T8034] RIP: 0033:0x7f19d198ebe9
[   92.855551][ T8034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.855557][ T8034] RSP: 002b:00007f19d2759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   92.855566][ T8034] RAX: ffffffffffffffda RBX: 00007f19d1bc6090 RCX: 00007f19d198ebe9
[   92.855571][ T8034] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[   92.855575][ T8034] RBP: 00007f19d1a11e19 R08: 0000000000000004 R09: 0000000000000000
[   92.855578][ T8034] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[   92.855582][ T8034] R13: 00007f19d1bc6128 R14: 00007f19d1bc6090 R15: 00007ffea535b8e8
[   92.855593][ T8034]  </TASK>
[   92.855596][ T8034] Mem-Info:
[   92.948452][ T8034] active_anon:5687 inactive_anon:0 isolated_anon:0
[   92.948452][ T8034]  active_file:1293 inactive_file:38237 isolated_file:0
[   92.948452][ T8034]  unevictable:1770 dirty:50 writeback:0
[   92.948452][ T8034]  slab_reclaimable:10209 slab_unreclaimable:53244
[   92.948452][ T8034]  mapped:18156 shmem:2461 pagetables:965
[   92.948452][ T8034]  sec_pagetables:0 bounce:0
[   92.948452][ T8034]  kernel_misc_reclaimable:0
[   92.948452][ T8034]  free:297471 free_pcp:20618 free_cma:0
[   92.962812][ T8034] Node 0 active_anon:15060kB inactive_anon:0kB active_file:3996kB inactive_file:22904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36876kB dirty:180kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7120kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.972816][ T8034] Node 1 active_anon:7688kB inactive_anon:0kB active_file:1176kB inactive_file:130044kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:35748kB dirty:20kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4720kB pagetables:1608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.983534][ T8034] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.993144][ T8034] lowmem_reserve[]: 0 811 811 811 811
[   92.995156][ T8034] Node 0 DMA32 free:384052kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15060kB inactive_anon:0kB active_file:3996kB inactive_file:22904kB unevictable:3536kB writepending:180kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:37032kB local_pcp:20260kB free_cma:0kB
[   93.022254][ T8034] lowmem_reserve[]: 0 0 0 0 0
[   93.024005][ T8034] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   93.034532][ T8034] lowmem_reserve[]: 0 0 854 854 854
[   93.036291][ T8034] Node 1 Normal free:331776kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7688kB inactive_anon:0kB active_file:1176kB inactive_file:130044kB unevictable:3544kB writepending:20kB present:1048576kB managed:874952kB mlocked:8kB bounce:0kB free_pcp:46036kB local_pcp:24068kB free_cma:0kB
[   93.047075][ T8034] lowmem_reserve[]: 0 0 0 0 0
[   93.049636][ T8034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.054233][ T8034] Node 0 DMA32: 551*4kB (U) 613*8kB (UME) 333*16kB (UE) 29*32kB (UME) 17*64kB (UM) 4*128kB (UME) 14*256kB (UM) 10*512kB (UME) 6*1024kB (UM) 3*2048kB (UME) 85*4096kB (M) = 384116kB
[   93.062339][ T8034] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   93.068114][ T8034] Node 1 Normal: 598*4kB (ME) 284*8kB (UME) 453*16kB (UME) 340*32kB (UME) 162*64kB (UME) 55*128kB (UME) 11*256kB (UME) 4*512kB (UE) 6*1024kB (ME) 7*2048kB (ME) 65*4096kB (M) = 331784kB
[   93.074071][ T8034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.077338][ T8034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.080377][ T8034] 41991 total pagecache pages
[   93.082227][ T8034] 0 pages in swap cache
[   93.083985][ T8034] Free swap  = 124996kB
[   93.085662][ T8034] Total swap = 124996kB
[   93.087629][ T8034] 786301 pages RAM
[   93.089011][ T8034] 0 pages HighMem/MovableOnly
[   93.090965][ T8034] 241344 pages reserved
[   93.092759][ T8034] 0 pages cma reserved
[   93.149644][ T8054] __nla_validate_parse: 8 callbacks suppressed
[   93.149654][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'.
[   93.163649][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.630'.
[   93.188722][ T8060] sctp: [Deprecated]: syz.1.635 (pid 8060) Use of int in maxseg socket option.
[   93.188722][ T8060] Use struct sctp_assoc_value instead
[   93.202483][ T8060] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.635'.
[   93.256233][ T8068] netlink: 22 bytes leftover after parsing attributes in process `syz.1.638'.
[   93.279659][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[   93.369526][ T8083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.643'.
[   93.410675][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'.
[   93.426196][ T8086] veth5: entered promiscuous mode
[   93.616836][ T8103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'.
[   93.620019][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.651'.
[   93.622951][ T8103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'.
[   93.776364][ T8110] netlink: 'syz.0.654': attribute type 11 has an invalid length.
[   93.781088][ T8111] netlink: 'syz.0.654': attribute type 11 has an invalid length.
[   94.418332][ T8162] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[   94.814074][ T8188] netlink: 'syz.0.664': attribute type 23 has an invalid length.
[   94.890973][ T8194] netlink: 'syz.0.667': attribute type 11 has an invalid length.
[   94.893534][ T8194] netlink: 'syz.0.667': attribute type 11 has an invalid length.
[   95.067574][ T8204] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.312580][ T8240] netlink: 'syz.1.684': attribute type 1 has an invalid length.
[   95.316194][ T8240] NCSI netlink: No device for ifindex 0
[   95.474201][ T8263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.483550][ T8265] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   95.487958][ T8265] macsec1: entered promiscuous mode
[   95.489827][ T8265] macsec1: entered allmulticast mode
[   95.491742][ T8265] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   95.495209][ T8263] syzkaller0: entered promiscuous mode
[   95.499313][ T8263] syzkaller0: entered allmulticast mode
[   95.506474][ T8265] macsec2: entered promiscuous mode
[   95.508769][ T8265] macsec2: entered allmulticast mode
[   95.595526][ T8268] sctp: [Deprecated]: syz.1.696 (pid 8268) Use of int in max_burst socket option.
[   95.595526][ T8268] Use struct sctp_assoc_value instead
[   95.612119][ T8261] tipc: Resetting bearer <eth:syzkaller0>
[   95.622357][ T8261] tipc: Disabling bearer <eth:syzkaller0>
[   95.677102][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.680239][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.683142][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.686113][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.699839][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.809159][ T8287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   96.592743][ T8301] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   96.603919][ T8304] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   96.740155][ T8318] bridge_slave_0: left allmulticast mode
[   96.742075][ T8318] bridge_slave_0: left promiscuous mode
[   96.744087][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.753746][ T8318] bridge_slave_1: left allmulticast mode
[   96.755748][ T8318] bridge_slave_1: left promiscuous mode
[   96.763678][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.779505][ T8318] bond0: (slave bond_slave_0): Releasing backup interface
[   96.787889][ T8318] team0: Port device team_slave_0 removed
[   96.804424][ T8318] team0: Port device team_slave_1 removed
[   96.809719][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.817218][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.822583][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.825871][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.846261][ T8320] team0: Mode changed to "broadcast"
[   96.862777][ T8318] vlan0: entered promiscuous mode
[   96.869904][ T8318] team0: Port device vlan0 added
[   96.875393][ T8318] tipc: Enabled bearer <eth:team0>, priority 0
[   96.970969][ T8328] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   96.974546][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   96.980172][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   96.983556][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   96.986687][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   97.261564][ T8351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.569201][ T8373] delete_channel: no stack
[   97.657809][ T8372] delete_channel: no stack
[   97.662279][ T8372] delete_channel: no stack
[   97.663914][ T8372] delete_channel: no stack
[   97.665490][ T8372] delete_channel: no stack
[   97.667812][ T8372] delete_channel: no stack
[   97.669391][ T8372] delete_channel: no stack
[   97.670930][ T8372] delete_channel: no stack
[   97.672561][ T8372] delete_channel: no stack
[   97.674142][ T8372] delete_channel: no stack
[   97.675685][ T8372] delete_channel: no stack
[   97.681532][ T8372] delete_channel: no stack
[   97.683282][ T8372] delete_channel: no stack
[   97.684886][ T8372] delete_channel: no stack
[   97.686430][ T8372] delete_channel: no stack
[   97.688151][ T8372] delete_channel: no stack
[   97.689638][ T8372] delete_channel: no stack
[   97.691242][ T8372] delete_channel: no stack
[   97.692750][ T8372] delete_channel: no stack
[   97.694333][ T8372] delete_channel: no stack
[   97.695833][ T8372] delete_channel: no stack
[   97.697843][ T8372] delete_channel: no stack
[   97.699387][ T8372] delete_channel: no stack
[   97.700971][ T8372] delete_channel: no stack
[   97.702516][ T8372] delete_channel: no stack
[   97.704082][ T8372] delete_channel: no stack
[   97.705768][ T8372] delete_channel: no stack
[   97.707700][ T8372] delete_channel: no stack
[   97.709275][ T8372] delete_channel: no stack
[   97.710810][ T8372] delete_channel: no stack
[   97.712417][ T8372] delete_channel: no stack
[   97.714034][ T8372] delete_channel: no stack
[   97.715620][ T8372] delete_channel: no stack
[   97.925452][ T8410] bridge0: entered allmulticast mode
[   97.932668][ T8410] syzkaller1: entered promiscuous mode
[   97.934594][ T8410] syzkaller1: entered allmulticast mode
[   97.988512][   T47] tipc: Node number set to 2014181524
[   98.220469][ T8433] __nla_validate_parse: 28 callbacks suppressed
[   98.220479][ T8433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[   98.539518][ T8454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.583341][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv1
[   98.589155][ T8455] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   98.593148][ T8455] team0: Failed to send options change via netlink (err -105)
[   98.596491][ T8455] team0: Port device batadv1 added
[   98.614626][ T8454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.660977][ T8454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.732644][ T8454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.816725][ T5914] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.831914][ T5914] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.841655][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.858117][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'.
[   98.865101][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.014132][ T8480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.018414][ T8480] syzkaller0: entered promiscuous mode
[   99.021882][ T8480] syzkaller0: entered allmulticast mode
[   99.041752][ T8490] bond0: Device is already in use.
[   99.050208][ T8486] tipc: Resetting bearer <eth:syzkaller0>
[   99.074019][ T8486] tipc: Disabling bearer <eth:syzkaller0>
[   99.103632][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[   99.182037][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[   99.186168][ T8502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'.
[   99.206730][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.776'.
[   99.449734][ T8521] sctp: [Deprecated]: syz.0.781 (pid 8521) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.449734][ T8521] Use struct sctp_sack_info instead
[   99.636556][ T8523] netlink: 'syz.1.782': attribute type 4 has an invalid length.
[  100.390618][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.393239][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.535663][ T8541] raw_sendmsg: syz.1.788 forgot to set AF_INET. Fix it!
[  100.632473][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'.
[  100.751846][ T8563] tipc: Resetting bearer <eth:team0>
[  100.772886][ T8563] team0: Port device vlan0 removed
[  100.780987][ T8563] bond2: (slave geneve2): Releasing backup interface
[  100.786194][ T5914] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  100.790695][ T5914] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  100.793859][ T5914] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  100.800681][ T5914] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  100.810694][ T8563] tipc: Resetting bearer <eth:team0>
[  100.853921][ T8568] netlink: 'syz.0.796': attribute type 10 has an invalid length.
[  100.858134][ T8568] netlink: 152 bytes leftover after parsing attributes in process `syz.0.796'.
[  100.861749][ T8568] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  101.077848][ T8576] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  101.103519][ T8576] netlink: 68 bytes leftover after parsing attributes in process `syz.0.800'.
[  101.390987][ T8603] 8021q: VLANs not supported on ip_vti0
[  101.408462][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'.
[  101.411734][ T8604] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  101.452164][ T8609] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[  101.456538][ T8609] netlink: 'syz.1.810': attribute type 2 has an invalid length.
[  101.461498][ T8609] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[  101.475573][ T8609] vlan2: entered allmulticast mode
[  101.478193][ T8609] team0: entered allmulticast mode
[  101.480500][ T8609] team0: Device vlan2 is already an upper device of the team interface
[  101.719643][ T8635] syzkaller0: entered promiscuous mode
[  101.722064][ T8635] syzkaller0: entered allmulticast mode
[  101.750786][ T8637] syzkaller1: entered promiscuous mode
[  101.752752][ T8637] syzkaller1: entered allmulticast mode
[  102.093639][ T8667] netlink: 'syz.0.831': attribute type 10 has an invalid length.
[  102.123796][ T8669] netlink: 'syz.1.829': attribute type 21 has an invalid length.
[  102.144099][ T8669] syz_tun: entered allmulticast mode
[  102.224229][ T8676] netlink: 'syz.0.833': attribute type 6 has an invalid length.
[  102.224279][ T8677] netlink: 'syz.0.833': attribute type 6 has an invalid length.
[  102.238801][ T8676] bond4: entered promiscuous mode
[  102.267345][ T8677] bond5: entered promiscuous mode
[  102.270210][ T8676] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[  102.272832][ T8677] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[  102.314771][ T8685] batadv_slave_1: entered promiscuous mode
[  102.330894][ T8684] batadv_slave_1: left promiscuous mode
[  102.351366][ T8689] trusted_key: syz.0.837 sent an empty control message without MSG_MORE.
[  102.900576][ T8661] syz_tun: left allmulticast mode
[  103.246498][ T8707] netlink: 'syz.0.843': attribute type 2 has an invalid length.
[  103.283576][ T8709] __nla_validate_parse: 4 callbacks suppressed
[  103.283587][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'.
[  103.295100][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.844'.
[  103.331126][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'.
[  103.375372][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.846'.
[  103.784066][ T8755] 8021q: VLANs not supported on caif0
[  103.793279][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'.
[  103.875807][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'.
[  103.933730][ T8767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.962804][ T8767] syzkaller0: entered promiscuous mode
[  103.964875][ T8767] syzkaller0: entered allmulticast mode
[  104.774515][ T8775] sch_fq: defrate 257 ignored.
[  104.777805][ T8779] tipc: Resetting bearer <eth:syzkaller0>
[  104.781086][ T8770] syzkaller1: entered promiscuous mode
[  104.783569][ T8770] syzkaller1: entered allmulticast mode
[  104.823039][ T8766] tipc: Resetting bearer <eth:syzkaller0>
[  104.831788][ T8766] tipc: Disabling bearer <eth:syzkaller0>
[  104.911065][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'.
[  104.959123][ T8797] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  105.033616][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'.
[  105.093659][ T8812] openvswitch: netlink: IP tunnel TTL not specified.
[  105.149374][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'.
[  105.194496][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'.
[  105.209735][ T8822] 0X: renamed from caif0
[  105.229072][ T8822] 0X: entered allmulticast mode
[  105.231113][ T8822] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  105.238106][ T8829] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  105.269165][ T5238] Bluetooth: hci2: link tx timeout
[  105.271177][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.283106][ T8829] netlink: 'syz.2.879': attribute type 11 has an invalid length.
[  105.286103][ T8829] openvswitch: netlink: Message has 5 unknown bytes.
[  105.303481][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.498729][ T8840] batman_adv: batadv0: Adding interface: ipvlan0
[  105.500837][ T8840] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.509354][ T8840] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  105.552248][ T8846] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[  105.555315][ T8846] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[  105.634892][ T8853] syzkaller0: entered promiscuous mode
[  105.638458][ T8853] syzkaller0: entered allmulticast mode
[  105.830035][ T8883] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[  105.834000][ T8879] netlink: 'syz.0.894': attribute type 21 has an invalid length.
[  105.836590][ T8879] netlink: 'syz.0.894': attribute type 4 has an invalid length.
[  105.839709][ T8879] netlink: 'syz.0.894': attribute type 3 has an invalid length.
[  105.845168][ T8883] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  105.988061][ T8907] dvmrp1: tun_chr_ioctl cmd 1074025677
[  105.992761][ T8907] dvmrp1: linktype set to 769
[  106.033932][ T8912] netlink: 'syz.1.905': attribute type 1 has an invalid length.
[  106.075492][ T8912] 8021q: adding VLAN 0 to HW filter on device bond4
[  106.080168][ T8912] bond3: (slave bond4): making interface the new active one
[  106.083820][ T8912] bond3: (slave bond4): Enslaving as an active interface with an up link
[  106.096613][ T8912] bond3: (slave gretap1): Enslaving as a backup interface with an up link
[  106.102274][ T8912] netlink: 'syz.1.905': attribute type 2 has an invalid length.
[  106.107393][ T8912] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.142944][ T8920] netlink: 'syz.1.907': attribute type 2 has an invalid length.
[  106.303862][ T5914] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  106.308061][ T5914] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  106.313522][ T5914] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  106.317716][ T5914] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  106.343775][ T8934] tipc: Can't bind to reserved service type 2
[  106.679967][ T8946] geneve0: entered promiscuous mode
[  107.297733][ T5238] Bluetooth: hci2: command 0x0406 tx timeout
[  107.585041][ T8989] dvmrp8: entered allmulticast mode
[  107.590251][ T8987] dvmrp8: left allmulticast mode
[  108.899563][ T9062] __nla_validate_parse: 27 callbacks suppressed
[  108.899571][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'.
[  108.941670][ T9063] Driver unsupported XDP return value 0 on prog  (id 240) dev N/A, expect packet loss!
[  108.974395][ T9071] pim6reg: entered allmulticast mode
[  108.977418][ T9071] pim6reg: left allmulticast mode
[  109.124102][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.145589][ T9087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.148324][ T9087] IPv6: NLM_F_CREATE should be set when creating new route
[  109.150779][ T9087] IPv6: NLM_F_CREATE should be set when creating new route
[  109.153227][ T9087] IPv6: NLM_F_CREATE should be set when creating new route
[  109.667209][ T9133] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.961'.
[  109.679263][ T9133] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  109.763932][ T9141] netlink: 232 bytes leftover after parsing attributes in process `syz.2.964'.
[  109.798791][ T9145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.802314][ T9145] syzkaller0: entered promiscuous mode
[  109.804445][ T9145] syzkaller0: entered allmulticast mode
[  109.811692][ T9145] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  109.817008][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'.
[  109.820688][ T9145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.966'.
[  109.876548][ T9148] tipc: Resetting bearer <eth:syzkaller0>
[  109.946595][ T9153] netlink: 100 bytes leftover after parsing attributes in process `syz.1.968'.
[  112.808584][ T9143] tipc: Resetting bearer <eth:syzkaller0>
[  112.821660][ T9143] tipc: Disabling bearer <eth:syzkaller0>
[  112.914282][ T9167] validate_nla: 6 callbacks suppressed
[  112.914298][ T9167] netlink: 'syz.0.972': attribute type 12 has an invalid length.
[  112.978210][ T9176] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  113.039368][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'.
[  113.050243][ T9183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.054123][ T9183] syzkaller0: entered promiscuous mode
[  113.056381][ T9183] syzkaller0: entered allmulticast mode
[  113.078153][ T9183] tipc: Resetting bearer <eth:syzkaller0>
[  113.083456][ T9182] tipc: Resetting bearer <eth:syzkaller0>
[  113.095058][ T9182] tipc: Disabling bearer <eth:syzkaller0>
[  113.103248][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.981'.
[  113.111317][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'.
[  114.228699][ T9251] netlink: 'syz.0.997': attribute type 10 has an invalid length.
[  114.233538][ T9243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  114.239638][ T9244] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  114.282095][ T5880] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  114.285612][ T9255] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  114.643437][ T9280] netdevsim netdevsim1: Direct firmware load for /. failed with error -2
[  114.646735][ T9280] netdevsim netdevsim1: Falling back to sysfs fallback for: /.
[  114.656860][ T9285] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  114.729376][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'.
[  115.145487][ T9303] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1015'.
[  115.297463][ T9312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  115.408764][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'.
[  115.527806][ T9336] IPVS: length: 47 != 8
[  115.569912][ T9340] netlink: 'syz.0.1027': attribute type 1 has an invalid length.
[  115.579398][ T9340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1027'.
[  115.704010][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1034'.
[  115.978917][ T9382] tipc: Invalid UDP bearer configuration
[  115.978944][ T9382] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  116.081204][ T9391] netlink: 'syz.0.1046': attribute type 1 has an invalid length.
[  116.100687][ T9391] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  116.105338][   T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  116.110755][ T9391] 8021q: adding VLAN 0 to HW filter on device bond6
[  116.120006][ T9391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1046'.
[  116.125578][ T9391] bond0: (slave syz_tun): Releasing backup interface
[  116.131944][ T9391] bond0: (slave team0): Releasing backup interface
[  116.135874][ T9391] bond1: (slave geneve2): Releasing active interface
[  116.143941][ T9391] bond6: (slave ip6gretap1): Removing an active aggregator
[  116.147865][ T9391] bond6: (slave ip6gretap1): Releasing backup interface
[  116.155836][ T5880] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  116.160710][ T5880] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  116.164196][ T5880] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  116.170194][ T5880] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  116.224345][ T9399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.263928][ T9399] syzkaller0: entered promiscuous mode
[  116.266277][ T9399] syzkaller0: entered allmulticast mode
[  116.269991][ T9399] tipc: Resetting bearer <eth:syzkaller0>
[  116.276780][ T9398] tipc: Resetting bearer <eth:syzkaller0>
[  117.199407][ T9398] tipc: Disabling bearer <eth:syzkaller0>
[  117.306371][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'.
[  117.310144][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'.
[  117.607271][ T9454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1070'.
[  117.610261][ T9454] openvswitch: netlink: Flow key attr not present in new flow.
[  117.614077][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'.
[  118.257404][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  118.523899][ T9473] netlink: 'syz.1.1076': attribute type 5 has an invalid length.
[  118.668744][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  118.713362][ T9493] netlink: 'syz.1.1083': attribute type 8 has an invalid length.
[  118.719319][ T9493] bond0: entered promiscuous mode
[  118.721933][ T9493] bond0: left promiscuous mode
[  119.610853][ T9518] netlink: 'syz.2.1091': attribute type 3 has an invalid length.
[  119.677954][ T9526] netlink: 'syz.1.1095': attribute type 1 has an invalid length.
[  119.696578][ T9530] netlink: 'syz.2.1097': attribute type 1 has an invalid length.
[  119.698858][ T9526] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.709938][ T9530] netlink: 'syz.2.1097': attribute type 3 has an invalid length.
[  119.712376][ T9532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.721267][ T9532] syzkaller0: entered promiscuous mode
[  119.723595][ T9532] syzkaller0: entered allmulticast mode
[  119.740108][ T9526] vlan2: entered promiscuous mode
[  119.742233][ T9526] bond5: entered promiscuous mode
[  119.744966][ T9526] vlan2: entered allmulticast mode
[  119.746725][ T9526] bond5: entered allmulticast mode
[  119.758122][ T9532] tipc: Resetting bearer <eth:syzkaller0>
[  119.763864][ T9529] tipc: Resetting bearer <eth:syzkaller0>
[  119.770532][ T9529] tipc: Disabling bearer <eth:syzkaller0>
[  119.906535][ T9545] __nla_validate_parse: 9 callbacks suppressed
[  119.906548][ T9545] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1102'.
[  120.022060][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'.
[  120.144345][ T9565] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1111'.
[  120.214085][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1110'.
[  120.671002][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1118'.
[  120.743267][ T9592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1120'.
[  120.747330][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'.
[  121.030003][ T9605] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[  121.035386][ T9605] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[  121.041406][ T9605] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[  121.044823][ T9605] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[  121.073573][ T9598] gretap0: left promiscuous mode
[  121.109404][ T9598] tipc: Resetting bearer <eth:team0>
[  121.112385][ T9598] tipc: Resetting bearer <eth:team0>
[  121.115437][ T9598] 0X: left allmulticast mode
[  121.118887][ T9598] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  121.201056][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1127'.
[  121.252735][ T9614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.261067][ T9614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.264647][ T9614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  121.284640][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'.
[  121.325854][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  121.343022][ T9614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.346641][ T9614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.351666][ T9614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  121.431986][ T9614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.435278][ T9614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.439369][ T9614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  121.512654][ T9614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.516103][ T9614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.519863][ T9614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  121.619271][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.626345][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  121.631868][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  121.651053][ T5880] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.654015][ T5880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  121.660659][ T5880] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  121.673956][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.677767][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  121.680845][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  121.691463][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.694050][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  121.696786][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  121.814354][ T9656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.831892][ T9656] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  121.835335][ T9656] macvtap1: entered promiscuous mode
[  121.853340][ T9656] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  122.936496][ T9737] tun0: tun_chr_ioctl cmd 1074812118
[  123.292697][ T9772] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  124.424701][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  124.620042][ T9832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.637744][ T9832] syzkaller0: entered promiscuous mode
[  124.639842][ T9832] syzkaller0: entered allmulticast mode
[  124.670399][ T9834] 8021q: adding VLAN 0 to HW filter on device bond5
[  124.680969][ T9832] tipc: Resetting bearer <eth:syzkaller0>
[  124.685219][ T9834] bond0: (slave dummy0): Releasing backup interface
[  124.693600][ T9834] bridge_slave_0: left promiscuous mode
[  124.696041][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.700571][ T9834] bridge_slave_1: left allmulticast mode
[  124.702480][ T9834] bridge_slave_1: left promiscuous mode
[  124.704514][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.710139][ T9834] bond0: (slave bond_slave_0): Releasing backup interface
[  124.714551][ T9834] bond0: (slave bond_slave_1): Releasing backup interface
[  124.722537][ T9834] team0: Port device team_slave_0 removed
[  124.729423][ T9834] team0: Port device team_slave_1 removed
[  124.731839][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.734547][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.739224][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.741873][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.751609][ T9834] team0: Port device batadv1 removed
[  124.754129][ T9830] tipc: Resetting bearer <eth:syzkaller0>
[  124.764998][ T9830] tipc: Disabling bearer <eth:syzkaller0>
[  125.126822][ T9866] sctp: [Deprecated]: syz.0.1208 (pid 9866) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.126822][ T9866] Use struct sctp_sack_info instead
[  125.219380][ T9879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.283280][ T9885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.287328][ T9885] syzkaller0: entered promiscuous mode
[  125.289971][ T9885] syzkaller0: entered allmulticast mode
[  125.409269][ T9884] tipc: Resetting bearer <eth:syzkaller0>
[  125.420545][ T9884] tipc: Disabling bearer <eth:syzkaller0>
[  125.594174][ T9891] __nla_validate_parse: 20 callbacks suppressed
[  125.594191][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'.
[  125.601514][ T9891] validate_nla: 131 callbacks suppressed
[  125.601526][ T9891] netlink: 'syz.0.1218': attribute type 30 has an invalid length.
[  125.615854][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.615882][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'.
[  125.620506][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.628279][ T9891] netlink: 'syz.0.1218': attribute type 30 has an invalid length.
[  125.638916][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.647134][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.925191][ T9895] netlink: 'syz.1.1219': attribute type 5 has an invalid length.
[  126.076166][ T9910] syz_tun: entered allmulticast mode
[  126.082524][ T9910] dvmrp8: entered allmulticast mode
[  126.097074][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.160661][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'.
[  126.166042][ T9910] netlink: 'syz.1.1222': attribute type 23 has an invalid length.
[  126.189257][ T9906] syz_tun: left allmulticast mode
[  126.191035][ T9906] dvmrp8: left allmulticast mode
[  126.263790][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'.
[  126.336817][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'.
[  126.344191][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1228'.
[  126.462672][ T9934] netlink: 'syz.0.1231': attribute type 1 has an invalid length.
[  126.465158][ T9934] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1231'.
[  126.669905][ T9953] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1239'.
[  126.741091][ T9959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'.
[  126.814828][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[  126.899015][ T9987] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  126.910309][ T9987] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  127.190201][T10005] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.194371][T10005] bond0: (slave bond8): Enslaving as an active interface with an up link
[  127.216045][T10011] team0: Failed to send options change via netlink (err -105)
[  127.223332][T10011] team0: Mode changed to "loadbalance"
[  127.653299][T10034] macvlan4: entered allmulticast mode
[  127.655541][T10034] veth1_vlan: entered allmulticast mode
[  127.932393][T10059] ip6erspan0: entered allmulticast mode
[  127.954906][T10060] netlink: 'syz.2.1269': attribute type 10 has an invalid length.
[  127.960412][T10060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.964829][T10060] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  128.115107][T10065] syzkaller0: entered allmulticast mode
[  128.293521][T10078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.566153][T10095] IPVS: persistence engine module ip_vs_pe_ not found
[  128.650103][T10111] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  128.683440][T10116] sctp: [Deprecated]: syz.0.1285 (pid 10116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.683440][T10116] Use struct sctp_sack_info instead
[  128.693526][T10116] sctp: [Deprecated]: syz.0.1285 (pid 10116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.693526][T10116] Use struct sctp_sack_info instead
[  128.972396][T10157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.974962][T10157] syzkaller0: entered promiscuous mode
[  128.976783][T10157] syzkaller0: entered allmulticast mode
[  128.984431][T10157] sch_tbf: burst 127 is lower than device geneve0 mtu (1464) !
[  128.993563][T10156] tipc: Resetting bearer <eth:syzkaller0>
[  129.029486][T10156] tipc: Disabling bearer <eth:syzkaller0>
[  129.052460][T10171] syzkaller1: entered promiscuous mode
[  129.054331][T10171] syzkaller1: entered allmulticast mode
[  129.110630][T10179] netlink: 'syz.1.1304': attribute type 1 has an invalid length.
[  129.121734][T10179] bond6: entered promiscuous mode
[  129.123369][T10179] bond6: entered allmulticast mode
[  129.135344][T10179] bridge6: entered promiscuous mode
[  129.137587][T10179] bridge6: entered allmulticast mode
[  129.142022][T10179] bond6: (slave bridge6): making interface the new active one
[  129.144981][T10179] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  129.185219][T10185] netlink: 'syz.1.1307': attribute type 1 has an invalid length.
[  129.259321][T10185] ip6tnl2: entered promiscuous mode
[  129.261139][T10185] ip6tnl2: entered allmulticast mode
[  129.264106][T10185] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  129.288092][T10196] syzkaller1: entered promiscuous mode
[  129.290997][T10196] syzkaller1: entered allmulticast mode
[  130.325842][T10236] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  130.427797][T10240] netlink: 'syz.1.1325': attribute type 1 has an invalid length.
[  130.431027][T10240] netem: change failed
[  130.464322][T10248] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  130.668584][T10261] __nla_validate_parse: 18 callbacks suppressed
[  130.668602][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'.
[  130.675364][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'.
[  130.751307][T10265] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[  130.755449][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'.
[  130.768004][T10269] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1335'.
[  130.782931][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'.
[  130.857679][T10273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1337'.
[  130.941465][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'.
[  131.100619][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'.
[  131.326162][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1342'.
[  131.453601][T10300] 8021q: adding VLAN 0 to HW filter on device bond6
[  131.460993][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'.
[  131.468191][T10300] netlink: 'syz.2.1343': attribute type 5 has an invalid length.
[  131.475033][T10300] geneve2: entered promiscuous mode
[  131.479108][T10300] geneve2: entered allmulticast mode
[  131.481999][ T5914] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  131.485718][ T5914] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  131.490191][ T5914] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  131.493857][ T5914] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  131.766101][T10311] netlink: 'syz.2.1348': attribute type 1 has an invalid length.
[  131.797686][T10311] bond7: entered promiscuous mode
[  131.799888][T10311] bond7: entered allmulticast mode
[  131.802459][T10311] 8021q: adding VLAN 0 to HW filter on device bond7
[  131.806155][T10313] syzkaller1: entered promiscuous mode
[  131.811744][T10313] syzkaller1: entered allmulticast mode
[  131.825171][T10311] bridge2: entered promiscuous mode
[  131.827786][T10311] bridge2: entered allmulticast mode
[  131.831116][T10311] bond7: (slave bridge2): Enslaving as a backup interface with an up link
[  131.897718][ T9924] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.017986][ T9924] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.137993][ T9924] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.143059][ T9924] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  132.145880][ T9924] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.148973][ T9924] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  132.156436][ T9924] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.164040][ T9924] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  132.180068][ T9924] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.187381][ T9924] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  132.318238][T10335] netlink: 'syz.1.1356': attribute type 21 has an invalid length.
[  132.459756][T10358] batman_adv: batadv0: Adding interface: ipvlan0
[  132.462182][T10358] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.471219][T10358] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  132.497171][ T5851] Bluetooth: hci0: command tx timeout
[  132.503424][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.506089][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  132.614330][T10373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.658088][T10373] syzkaller0: entered promiscuous mode
[  132.660675][T10373] syzkaller0: entered allmulticast mode
[  132.729965][T10372] tipc: Resetting bearer <eth:syzkaller0>
[  133.688316][T10372] tipc: Disabling bearer <eth:syzkaller0>
[  133.739233][T10392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.741814][T10394] syzkaller0: entered promiscuous mode
[  133.744798][T10394] syzkaller0: entered allmulticast mode
[  133.761467][T10394] tipc: Resetting bearer <eth:syzkaller0>
[  133.774418][T10394] tipc: Disabling bearer <eth:syzkaller0>
[  133.788252][T10399] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  133.791667][T10399] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  133.883993][T10406] netlink: 'syz.0.1376': attribute type 12 has an invalid length.
[  133.911805][T10410] ieee802154 phy0 wpan0: encryption failed: -22
[  133.945813][T10406] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  134.060203][T10417] netlink: 'syz.2.1381': attribute type 12 has an invalid length.
[  134.071902][T10417] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  134.195218][T10438] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  134.493931][T10465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.498700][T10465] syzkaller0: entered promiscuous mode
[  134.501108][T10465] syzkaller0: entered allmulticast mode
[  134.519532][T10465] tipc: Resetting bearer <eth:syzkaller0>
[  134.526169][T10464] tipc: Resetting bearer <eth:syzkaller0>
[  134.538525][T10464] tipc: Disabling bearer <eth:syzkaller0>
[  134.603341][T10467] netlink: 'syz.0.1397': attribute type 29 has an invalid length.
[  134.608944][T10467] netlink: 'syz.0.1397': attribute type 29 has an invalid length.
[  135.939734][T10546] __nla_validate_parse: 20 callbacks suppressed
[  135.939748][T10546] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1422'.
[  136.668349][T10564] syz_tun: entered promiscuous mode
[  136.671561][T10564] syz_tun: entered allmulticast mode
[  136.973341][T10583] delete_channel: no stack
[  137.114972][T10602] netlink: 'syz.2.1442': attribute type 4 has an invalid length.
[  137.142904][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'.
[  137.973123][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'.
[  137.979020][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'.
[  138.031513][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'.
[  138.035263][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'.
[  138.119074][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'.
[  138.146638][T10630] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  138.154317][T10636] netlink: 'syz.1.1453': attribute type 5 has an invalid length.
[  138.158609][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'.
[  138.186359][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'.
[  138.236817][T10646] 8021q: VLANs not supported on vxcan0
[  138.501635][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1465'.
[  139.269211][T10760] nbd0: detected capacity change from 0 to 127
[  139.278443][T10768] block nbd0: Receive control failed (result -32)
[  139.287875][T10295] block nbd0: Send control failed (result -32)
[  139.290910][T10295] block nbd0: Request send failed, requeueing
[  139.301264][   T61] block nbd0: Dead connection, failed to find a fallback
[  139.304470][   T61] block nbd0: shutting down sockets
[  139.306887][   T61] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.311332][   T61] Buffer I/O error on dev nbd0, logical block 0, async page read
[  139.316361][T10295] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.329866][T10295] Buffer I/O error on dev nbd0, logical block 1, async page read
[  139.336702][T10295] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.350010][T10295] Buffer I/O error on dev nbd0, logical block 2, async page read
[  139.354337][T10295] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.361861][T10295] Buffer I/O error on dev nbd0, logical block 3, async page read
[  139.365430][T10295] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.372604][T10295] Buffer I/O error on dev nbd0, logical block 0, async page read
[  139.380220][T10295] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.385940][T10295] Buffer I/O error on dev nbd0, logical block 1, async page read
[  139.389717][T10295] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.393482][T10295] Buffer I/O error on dev nbd0, logical block 2, async page read
[  139.396723][T10295] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.419822][T10295] Buffer I/O error on dev nbd0, logical block 3, async page read
[  139.423446][T10295] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.428355][T10295] Buffer I/O error on dev nbd0, logical block 0, async page read
[  139.431878][T10295] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.457035][T10295] Buffer I/O error on dev nbd0, logical block 1, async page read
[  139.472540][T10295] ldm_validate_partition_table(): Disk read failed.
[  139.475787][T10295] Dev nbd0: unable to read RDB block 0
[  139.492403][T10295]  nbd0: unable to read partition table
[  139.509582][T10295] ldm_validate_partition_table(): Disk read failed.
[  139.512623][T10295] Dev nbd0: unable to read RDB block 0
[  139.515335][T10295]  nbd0: unable to read partition table
[  139.613489][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.463816][T10801] netlink: 'syz.0.1496': attribute type 11 has an invalid length.
[  140.469876][T10801] netlink: 'syz.0.1496': attribute type 11 has an invalid length.
[  140.716107][T10844] tipc: Resetting bearer <eth:team0>
[  140.943923][T10844] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  141.044824][T10842] 8021q: adding VLAN 0 to HW filter on device bond8
[  141.055570][T10848] geneve4: entered promiscuous mode
[  141.059102][T10848] geneve4: entered allmulticast mode
[  141.070250][T10845] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  141.074634][T10845] bond8: (slave macvlan1): Enslaving as a backup interface with an up link
[  141.078801][T10847] bond0: (slave batadv0): Releasing backup interface
[  141.082992][T10847] bond7: (slave bridge2): Removing an active aggregator
[  141.085869][T10847] bond7: (slave bridge2): Releasing backup interface
[  141.089266][T10847] bridge2: left promiscuous mode
[  141.091191][T10847] bridge2: left allmulticast mode
[  141.093491][T10847] batman_adv: batadv0: Removing interface: ipvlan0
[  141.097572][T10847] bond8: (slave macvlan1): Releasing backup interface
[  141.107713][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.113218][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.116038][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.123817][   T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 19999 - 0
[  141.133763][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.136567][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.146956][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.150769][T10857] __nla_validate_parse: 6 callbacks suppressed
[  141.150777][T10857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1509'.
[  141.152928][   T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 19999 - 0
[  141.160588][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.163527][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.166356][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.173039][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 19999 - 0
[  141.184447][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.195132][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.200203][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.203188][   T13] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 19999 - 0
[  141.239565][    T9] IPVS: starting estimator thread 0...
[  141.241618][T10857] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  141.251434][T10863] netlink: 'syz.2.1511': attribute type 6 has an invalid length.
[  141.256879][T10863] netlink: 'syz.2.1511': attribute type 6 has an invalid length.
[  141.327380][T10862] IPVS: using max 81 ests per chain, 194400 per kthread
[  141.363786][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  141.371752][T10874] sctp: [Deprecated]: syz.1.1509 (pid 10874) Use of int in max_burst socket option deprecated.
[  141.371752][T10874] Use struct sctp_assoc_value instead
[  141.457116][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  141.489936][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'.
[  141.551993][T10890] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1519'.
[  141.589451][T10888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1516'.
[  141.704268][T10897] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1520'.
[  141.814011][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'.
[  141.889495][T10916] netlink: 'syz.0.1527': attribute type 10 has an invalid length.
[  141.892871][T10916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1527'.
[  141.934262][T10918] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  141.993465][T10921] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  142.091805][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'.
[  142.186028][T10933] netlink: 'syz.0.1534': attribute type 101 has an invalid length.
[  142.189140][T10933] netlink: 'syz.0.1534': attribute type 7 has an invalid length.
[  142.213866][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  142.296798][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'.
[  143.572321][T11017] netlink: 'syz.0.1558': attribute type 1 has an invalid length.
[  143.671342][T11026] batadv2: entered promiscuous mode
[  143.673601][T11026] batadv2: entered allmulticast mode
[  143.835794][T11040] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  143.856538][T11042] openvswitch: netlink: Flow actions attr not present in new flow.
[  144.004849][T11050] netlink: 'syz.0.1569': attribute type 1 has an invalid length.
[  144.265944][T11062] syz_tun: entered allmulticast mode
[  144.274912][T11063] dvmrp6: entered allmulticast mode
[  144.300116][T11064] syz_tun: left allmulticast mode
[  144.302097][T11064] dvmrp6: left allmulticast mode
[  144.431817][T11089] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  144.549170][T11100] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.551880][T11100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  144.642396][T11108] pimreg: entered allmulticast mode
[  144.980838][T11137] veth0: entered promiscuous mode
[  144.994764][T11137] veth0 (unregistering): left promiscuous mode
[  145.166664][T11145] netlink: 'syz.1.1600': attribute type 1 has an invalid length.
[  145.343048][T11155] netlink: 'syz.1.1604': attribute type 11 has an invalid length.
[  145.351795][T11155] openvswitch: netlink: EtherType 0 is less than min 600
[  145.491463][T11164] netlink: 'syz.2.1607': attribute type 7 has an invalid length.
[  145.575066][T11175] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  146.488089][T11189] __nla_validate_parse: 29 callbacks suppressed
[  146.488101][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'.
[  146.554778][T11198] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1619'.
[  146.557871][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'.
[  146.635286][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'.
[  146.654574][T11209] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1623'.
[  146.660064][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'.
[  146.671570][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1623'.
[  146.694097][T11212] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1624'.
[  146.740406][T11217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1626'.
[  146.773666][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'.
[  146.814197][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.816740][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.821171][ T9924] ------------[ cut here ]------------
[  146.823130][ T9924] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  146.826628][ T9924] WARNING: CPU: 1 PID: 9924 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  146.829919][ T9924] Modules linked in:
[  146.831570][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  146.835274][ T9924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.838572][ T9924] Workqueue: ipv6_addrconf addrconf_dad_work
[  146.840537][ T9924] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  146.842600][ T9924] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 86 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 8d 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  146.849141][ T9924] RSP: 0018:ffffc90007156298 EFLAGS: 00010246
[  146.851292][ T9924] RAX: ef8bbadbba91e100 RBX: 000000000000000c RCX: ffff888031bab980
[  146.853913][ T9924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  146.856511][ T9924] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  146.859242][ T9924] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888108cb9b28
[  146.861989][ T9924] R13: 0000000000000000 R14: ffff888031200e40 R15: ffff8880312030d8
[  146.864631][ T9924] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  146.867570][ T9924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.869672][ T9924] CR2: 00007f6778774c40 CR3: 000000012022c000 CR4: 00000000000006f0
[  146.872254][ T9924] Call Trace:
[  146.873373][ T9924]  <TASK>
[  146.874353][ T9924]  rate_control_send_low+0x194/0x7a0
[  146.876061][ T9924]  rate_control_get_rate+0x20b/0x5d0
[  146.877878][ T9924]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  146.879709][ T9924]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  146.881676][ T9924]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  146.883702][ T9924]  invoke_tx_handlers_late+0xb6/0x1820
[  146.885468][ T9924]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  146.887512][ T9924]  ieee80211_tx_dequeue+0x308e/0x4360
[  146.889299][ T9924]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  146.891171][ T9924]  ? __local_bh_enable_ip+0x12d/0x1c0
[  146.892950][ T9924]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  146.894873][ T9924]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  146.897052][ T9924]  ? __local_bh_enable_ip+0x12d/0x1c0
[  146.898791][ T9924]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  146.900601][ T9924]  ? do_raw_spin_unlock+0x4d/0x240
[  146.902328][ T9924]  ieee80211_queue_skb+0x1a31/0x21c0
[  146.904073][ T9924]  ieee80211_tx+0x297/0x420
[  146.905601][ T9924]  ? __pfx_ieee80211_tx+0x10/0x10
[  146.907433][ T9924]  ? ieee80211_xmit+0x315/0x400
[  146.908519][T11229] IPVS: set_ctl: invalid protocol: 44 172.30.1.2:20000
[  146.909088][ T9924]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  146.913258][ T9924]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  146.915310][ T9924]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  146.917513][ T9924]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  146.919499][ T9924]  ieee80211_subif_start_xmit+0xe0/0x510
[  146.921358][ T9924]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  146.923349][ T9924]  ? __pfx_netif_skb_features+0x10/0x10
[  146.925139][ T9924]  ? call_rcu+0x6ff/0x9c0
[  146.926624][ T9924]  ? __lock_acquire+0xab9/0xd20
[  146.928275][ T9924]  dev_hard_start_xmit+0x2d7/0x830
[  146.929951][ T9924]  __dev_queue_xmit+0x1b8d/0x3b50
[  146.931591][ T9924]  ? register_lock_class+0x51/0x320
[  146.933257][ T9924]  ? __dev_queue_xmit+0x27b/0x3b50
[  146.934900][ T9924]  ? __pfx___dev_queue_xmit+0x10/0x10
[  146.936619][ T9924]  ? read_seqbegin+0x122/0x250
[  146.938240][ T9924]  ? neigh_resolve_output+0x438/0x750
[  146.940003][ T9924]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.941753][ T9924]  ? read_seqbegin+0x1ac/0x250
[  146.943301][ T9924]  ? __pfx_read_seqbegin+0x10/0x10
[  146.944988][ T9924]  ? __local_bh_enable_ip+0x12d/0x1c0
[  146.946743][ T9924]  ? eth_header+0x11b/0x200
[  146.948282][ T9924]  ? __asan_memcpy+0x40/0x70
[  146.949822][ T9924]  ip6_finish_output2+0xfb3/0x1480
[  146.951509][ T9924]  ? __pfx_ip6_finish_output2+0x10/0x10
[  146.953297][ T9924]  ? ip6_mtu+0x7d/0x490
[  146.954676][ T9924]  ? ip6_mtu+0x38c/0x490
[  146.956047][ T9924]  ? ip6_finish_output+0x2ef/0x4e0
[  146.957794][ T9924]  ? ip6_output+0x126/0x550
[  146.959270][ T9924]  ip6_output+0x340/0x550
[  146.960743][ T9924]  NF_HOOK+0x9e/0x380
[  146.962101][ T9924]  ? NF_HOOK+0x101/0x380
[  146.963511][ T9924]  ? __pfx_NF_HOOK+0x10/0x10
[  146.965005][ T9924]  ? __pfx_dst_output+0x10/0x10
[  146.966574][ T9924]  ? icmp6_dst_alloc+0x3a5/0x420
[  146.968328][ T9924]  ? icmp6_dst_alloc+0x3a5/0x420
[  146.969980][ T9924]  mld_sendpack+0x8d4/0xe60
[  146.971527][ T9924]  ? mld_sendpack+0x1e7/0xe60
[  146.973105][ T9924]  ? __pfx_mld_sendpack+0x10/0x10
[  146.974776][ T9924]  ? mld_send_initial_cr+0x352/0x550
[  146.976503][ T9924]  ipv6_mc_dad_complete+0x88/0x410
[  146.978252][ T9924]  addrconf_dad_completed+0x6d5/0xd60
[  146.979970][ T9924]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  146.981888][ T9924]  addrconf_dad_work+0xc36/0x14b0
[  146.983552][ T9924]  ? __lock_acquire+0xab9/0xd20
[  146.985158][ T9924]  ? __pfx_addrconf_dad_work+0x10/0x10
[  146.986999][ T9924]  ? process_scheduled_works+0x9ef/0x17b0
[  146.988857][ T9924]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.990578][ T9924]  ? process_scheduled_works+0x9ef/0x17b0
[  146.992455][ T9924]  ? process_scheduled_works+0x9ef/0x17b0
[  146.994345][ T9924]  process_scheduled_works+0xae1/0x17b0
[  146.996155][ T9924]  ? __pfx_process_scheduled_works+0x10/0x10
[  146.998307][ T9924]  worker_thread+0x8a0/0xda0
[  146.999823][ T9924]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.002172][ T9924]  ? __kthread_parkme+0x7b/0x200
[  147.003809][ T9924]  kthread+0x711/0x8a0
[  147.005177][ T9924]  ? __pfx_worker_thread+0x10/0x10
[  147.006976][ T9924]  ? __pfx_kthread+0x10/0x10
[  147.008775][ T9924]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.010787][ T9924]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.012509][ T9924]  ? __pfx_kthread+0x10/0x10
[  147.014010][ T9924]  ret_from_fork+0x3fc/0x770
[  147.015527][ T9924]  ? __pfx_ret_from_fork+0x10/0x10
[  147.017240][ T9924]  ? __switch_to_asm+0x39/0x70
[  147.018814][ T9924]  ? __switch_to_asm+0x33/0x70
[  147.020363][ T9924]  ? __pfx_kthread+0x10/0x10
[  147.021949][ T9924]  ret_from_fork_asm+0x1a/0x30
[  147.023506][ T9924]  </TASK>
[  147.024529][ T9924] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  147.026832][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  147.029781][ T9924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.033019][ T9924] Workqueue: ipv6_addrconf addrconf_dad_work
[  147.034970][ T9924] Call Trace:
[  147.036056][ T9924]  <TASK>
[  147.037007][ T9924]  dump_stack_lvl+0x99/0x250
[  147.038504][ T9924]  ? __asan_memcpy+0x40/0x70
[  147.039964][ T9924]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.041690][ T9924]  ? __pfx__printk+0x10/0x10
[  147.043217][ T9924]  vpanic+0x281/0x750
[  147.044549][ T9924]  ? __pfx__printk+0x10/0x10
[  147.046082][ T9924]  ? __pfx_vpanic+0x10/0x10
[  147.047596][ T9924]  ? is_bpf_text_address+0x292/0x2b0
[  147.049288][ T9924]  panic+0xb9/0xc0
[  147.050561][ T9924]  ? __pfx_panic+0x10/0x10
[  147.052007][ T9924]  __warn+0x31b/0x4b0
[  147.053291][ T9924]  ? __rate_control_send_low+0x5df/0x820
[  147.055123][ T9924]  ? __rate_control_send_low+0x5df/0x820
[  147.056931][ T9924]  report_bug+0x2be/0x4f0
[  147.058343][ T9924]  ? __rate_control_send_low+0x5df/0x820
[  147.060167][ T9924]  ? __rate_control_send_low+0x5df/0x820
[  147.061989][ T9924]  ? __rate_control_send_low+0x5e1/0x820
[  147.063831][ T9924]  handle_bug+0x84/0x160
[  147.065218][ T9924]  exc_invalid_op+0x1a/0x50
[  147.066727][ T9924]  asm_exc_invalid_op+0x1a/0x20
[  147.068322][ T9924] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  147.070327][ T9924] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 86 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 8d 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  147.076930][ T9924] RSP: 0018:ffffc90007156298 EFLAGS: 00010246
[  147.079335][ T9924] RAX: ef8bbadbba91e100 RBX: 000000000000000c RCX: ffff888031bab980
[  147.081970][ T9924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  147.084472][ T9924] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  147.086992][ T9924] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888108cb9b28
[  147.089589][ T9924] R13: 0000000000000000 R14: ffff888031200e40 R15: ffff8880312030d8
[  147.092196][ T9924]  ? __rate_control_send_low+0x5de/0x820
[  147.094043][ T9924]  rate_control_send_low+0x194/0x7a0
[  147.095777][ T9924]  rate_control_get_rate+0x20b/0x5d0
[  147.097506][ T9924]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  147.099312][ T9924]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  147.101299][ T9924]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  147.103280][ T9924]  invoke_tx_handlers_late+0xb6/0x1820
[  147.105100][ T9924]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  147.107048][ T9924]  ieee80211_tx_dequeue+0x308e/0x4360
[  147.109002][ T9924]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  147.110917][ T9924]  ? __local_bh_enable_ip+0x12d/0x1c0
[  147.112692][ T9924]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  147.114735][ T9924]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  147.116819][ T9924]  ? __local_bh_enable_ip+0x12d/0x1c0
[  147.118529][ T9924]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  147.120315][ T9924]  ? do_raw_spin_unlock+0x4d/0x240
[  147.122010][ T9924]  ieee80211_queue_skb+0x1a31/0x21c0
[  147.123815][ T9924]  ieee80211_tx+0x297/0x420
[  147.125390][ T9924]  ? __pfx_ieee80211_tx+0x10/0x10
[  147.127026][ T9924]  ? ieee80211_xmit+0x315/0x400
[  147.128620][ T9924]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  147.130544][ T9924]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  147.132538][ T9924]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  147.134565][ T9924]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  147.136556][ T9924]  ieee80211_subif_start_xmit+0xe0/0x510
[  147.138363][ T9924]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  147.140366][ T9924]  ? __pfx_netif_skb_features+0x10/0x10
[  147.142172][ T9924]  ? call_rcu+0x6ff/0x9c0
[  147.143595][ T9924]  ? __lock_acquire+0xab9/0xd20
[  147.145163][ T9924]  dev_hard_start_xmit+0x2d7/0x830
[  147.146860][ T9924]  __dev_queue_xmit+0x1b8d/0x3b50
[  147.148462][ T9924]  ? register_lock_class+0x51/0x320
[  147.150126][ T9924]  ? __dev_queue_xmit+0x27b/0x3b50
[  147.151816][ T9924]  ? __pfx___dev_queue_xmit+0x10/0x10
[  147.153640][ T9924]  ? read_seqbegin+0x122/0x250
[  147.155311][ T9924]  ? neigh_resolve_output+0x438/0x750
[  147.157118][ T9924]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.158795][ T9924]  ? read_seqbegin+0x1ac/0x250
[  147.160347][ T9924]  ? __pfx_read_seqbegin+0x10/0x10
[  147.162006][ T9924]  ? __local_bh_enable_ip+0x12d/0x1c0
[  147.163715][ T9924]  ? eth_header+0x11b/0x200
[  147.165207][ T9924]  ? __asan_memcpy+0x40/0x70
[  147.166708][ T9924]  ip6_finish_output2+0xfb3/0x1480
[  147.168332][ T9924]  ? __pfx_ip6_finish_output2+0x10/0x10
[  147.170107][ T9924]  ? ip6_mtu+0x7d/0x490
[  147.171455][ T9924]  ? ip6_mtu+0x38c/0x490
[  147.172808][ T9924]  ? ip6_finish_output+0x2ef/0x4e0
[  147.174419][ T9924]  ? ip6_output+0x126/0x550
[  147.175893][ T9924]  ip6_output+0x340/0x550
[  147.177270][ T9924]  NF_HOOK+0x9e/0x380
[  147.178894][ T9924]  ? NF_HOOK+0x101/0x380
[  147.180612][ T9924]  ? __pfx_NF_HOOK+0x10/0x10
[  147.182550][ T9924]  ? __pfx_dst_output+0x10/0x10
[  147.184447][ T9924]  ? icmp6_dst_alloc+0x3a5/0x420
[  147.186089][ T9924]  ? icmp6_dst_alloc+0x3a5/0x420
[  147.187772][ T9924]  mld_sendpack+0x8d4/0xe60
[  147.189257][ T9924]  ? mld_sendpack+0x1e7/0xe60
[  147.190806][ T9924]  ? __pfx_mld_sendpack+0x10/0x10
[  147.192411][ T9924]  ? mld_send_initial_cr+0x352/0x550
[  147.194117][ T9924]  ipv6_mc_dad_complete+0x88/0x410
[  147.195788][ T9924]  addrconf_dad_completed+0x6d5/0xd60
[  147.197475][ T9924]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  147.199379][ T9924]  addrconf_dad_work+0xc36/0x14b0
[  147.201041][ T9924]  ? __lock_acquire+0xab9/0xd20
[  147.202675][ T9924]  ? __pfx_addrconf_dad_work+0x10/0x10
[  147.204464][ T9924]  ? process_scheduled_works+0x9ef/0x17b0
[  147.206824][ T9924]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.208672][ T9924]  ? process_scheduled_works+0x9ef/0x17b0
[  147.210630][ T9924]  ? process_scheduled_works+0x9ef/0x17b0
[  147.212584][ T9924]  process_scheduled_works+0xae1/0x17b0
[  147.214405][ T9924]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.216783][ T9924]  worker_thread+0x8a0/0xda0
[  147.218510][ T9924]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.220678][ T9924]  ? __kthread_parkme+0x7b/0x200
[  147.222405][ T9924]  kthread+0x711/0x8a0
[  147.223793][ T9924]  ? __pfx_worker_thread+0x10/0x10
[  147.225517][ T9924]  ? __pfx_kthread+0x10/0x10
[  147.227025][ T9924]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.228783][ T9924]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.230545][ T9924]  ? __pfx_kthread+0x10/0x10
[  147.232251][ T9924]  ret_from_fork+0x3fc/0x770
[  147.234132][ T9924]  ? __pfx_ret_from_fork+0x10/0x10
[  147.236266][ T9924]  ? __switch_to_asm+0x39/0x70
[  147.238289][ T9924]  ? __switch_to_asm+0x33/0x70
[  147.240278][ T9924]  ? __pfx_kthread+0x10/0x10
[  147.242237][ T9924]  ret_from_fork_asm+0x1a/0x30
[  147.244057][ T9924]  </TASK>
[  147.245779][ T9924] Kernel Offset: disabled
[  147.247262][ T9924] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:21:41  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd4000090782 RBX=ffffea0000483c10 RCX=dffffc0000000000 RDX=ffffc90004011000
RSI=000000000007ffff RDI=ffffea0000483c08 RBP=ffffc90009657330 RSP=ffffc90009657260
R8 =ffffffff8fa39337 R9 =1ffffffff1f47266 R10=dffffc0000000000 R11=fffffbfff1f47267
R12=dffffc0000000000 R13=ffff88801b6e9390 R14=1ffff110036dd272 R15=ffffea0000add548
RIP=ffffffff81fb36bf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd93dbe56c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa861cd2770 CR3=000000010f9ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000000000ff00 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007155a30
R8 =ffff888021978237 R9 =1ffff1100432f046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018e3 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6778774c40 CR3=000000012022c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f19d1a12e53
XMM06=0000000000000000 00007f19d1a12e4d XMM07=0000000000000000 00007f19d1a12e61
XMM08=0000000000000000 00007f19d1a12ee7 XMM09=0000000000000000 00007f19d1a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
