last executing test programs:

4m1.895789971s ago: executing program 1 (id=3946):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

4m1.813632744s ago: executing program 1 (id=3948):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00000000000000d641000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095000000000000003604c9c0d734a6721cf547a7b1fd13fba7eb6545f66be890d72fed25a134361411863a8ff74f08a482ef0da055e930161e3437d6f4f8fe"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8)
sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0xc03, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4m1.260121595s ago: executing program 1 (id=3962):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89", 0x0, 0x0, 0x0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

4m1.207907832s ago: executing program 1 (id=3963):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044844)

4m1.124065764s ago: executing program 1 (id=3966):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00")
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

4m0.995586052s ago: executing program 1 (id=3970):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20)

4m0.872278237s ago: executing program 32 (id=3970):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20)

1m33.472977181s ago: executing program 3 (id=7323):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000440), 0x0}, 0x20)

1m33.402750918s ago: executing program 3 (id=7325):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x504)
recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)

1m32.579800703s ago: executing program 2 (id=7338):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000be000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1m32.540876472s ago: executing program 3 (id=7339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x10, 0x15, 0x0, 0x0, @str=',.{((&@\'-$#\x00'}]}]}, 0x34}}, 0x0)

1m32.537077879s ago: executing program 2 (id=7340):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa000100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2b}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0)

1m32.452636246s ago: executing program 3 (id=7342):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x15}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

1m32.451906284s ago: executing program 2 (id=7343):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

1m32.359198984s ago: executing program 2 (id=7345):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x8918, 0x0)

1m32.357876656s ago: executing program 3 (id=7346):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002e40)='ns/mnt\x00')
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000002e80)={{}, "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"})

1m32.343077092s ago: executing program 2 (id=7347):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x2, 0x5, 0xffff, 0x3}, 0x20)

1m32.210850702s ago: executing program 2 (id=7348):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004001)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x0)
r2 = socket(0x2, 0x3, 0x40)
setsockopt(r2, 0xff, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x93aa}}, 0x0, 0x60, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

1m32.070403074s ago: executing program 33 (id=7348):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004001)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x0)
r2 = socket(0x2, 0x3, 0x40)
setsockopt(r2, 0xff, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x93aa}}, 0x0, 0x60, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

1m32.020821313s ago: executing program 3 (id=7350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x7f62c4469923ede5}, 0x14}}, 0x0)

1m32.011199882s ago: executing program 34 (id=7350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x7f62c4469923ede5}, 0x14}}, 0x0)

1.582730085s ago: executing program 4 (id=9568):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

1.49254235s ago: executing program 4 (id=9571):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)

810.798017ms ago: executing program 4 (id=9587):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0)

719.026822ms ago: executing program 4 (id=9589):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r0, 0x104, 0x5, 0x0, &(0x7f0000000180))

634.756676ms ago: executing program 4 (id=9591):
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9d}]}], @echo_reply}}}}}, 0x0)

633.401772ms ago: executing program 4 (id=9594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x17, 0x1, "18069c0131b1daae261374e6fe20c389c72d7d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x124, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0xa8, 0xc, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x148, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xe0, 0x8, "533dd3c715faa18691837abf5ba1e8d27d0d48f6b9fed32c22d45985f259f11bba3eb67df884fae20882c6b0da31719232f341361c07d34674c24ea9e96794597e63c09442290eb565585440f690a714ac31a4d9a709648bb2f4efb90ed826890dedae246181eb39dc21bf4c98188340f70782702477de01da6bc5ec4515ee908b99dcdbbc5131026e9a7dc2aa91d8ff7b1ff612bfd0501191ba7606fa809a6f8dbe98784f5561aa0752b009931441b3cbc6c5f6324f553daf2ca9a5797eb607249022b549c6081820fada9c1692e08a6324307882a5ca7f6793881a"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x438}}, 0x0)
close(0x3)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000050000d1cf6455efb031e7d31f000dfc3026e7d607b8000000070000000110000000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000030000000a00"/28], 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x80000000000000a, 0x2, 0x9)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
close(r3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000191600010025bd7000fcdbdf250a1800fe23d758abe04d9af54282f77b618accc8ff6ffdb526b581a4ceb030163e21e422b8203f92f5ad4aa54d482cbb476fc1643d43a44904cbb7c5353b21071a704f2eb6c79ba40d34f45362", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x8010)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
close(0x3)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20044001}, 0x0)
close(0x3)
r8 = socket$inet6(0xa, 0x5, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000040)={r10, 0x80000000, 0x7fffffff, 0x6, 0x1, 0x2, 0x8, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x400, 0xfff, 0xa, 0x0, 0x1}}, &(0x7f0000000100)=0xb0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000240), &(0x7f0000000300)=0x4)

324.654385ms ago: executing program 5 (id=9598):
r0 = socket$inet(0x2, 0x3, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000001140)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x3, 0x3, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x67, 0x0, 0x7e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x1b, 0x0, [{0x6, 0xb, "43daca862f0c6f8b38"}, {0x1, 0xa, "4b3859758566c882"}]}, @timestamp_addr={0x44, 0x14, 0xee, 0x1, 0x9, [{@remote, 0x5}, {@multicast2, 0xd}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}]}}}}})
pipe(&(0x7f0000001a00))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r6}, 0x18)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8})
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001740)={0x25c, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r3}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6a19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

244.21906ms ago: executing program 0 (id=9601):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can})
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

229.653823ms ago: executing program 5 (id=9602):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0)

154.730304ms ago: executing program 0 (id=9603):
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc)
close(r0)

154.202208ms ago: executing program 0 (id=9604):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0)

124.260537ms ago: executing program 0 (id=9605):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(r0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000002400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x40044)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x87b, 0x8, 0xf, 0x2, 0x3}, 0x14)

123.857688ms ago: executing program 5 (id=9606):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040))

54.387259ms ago: executing program 5 (id=9607):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8)

53.973081ms ago: executing program 0 (id=9608):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0)

660.528µs ago: executing program 0 (id=9609):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a", 0x23}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x2a, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0xa, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x16c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x140, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x100, 0x3}}, @TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x4, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x3, 0xffff}, {0x5, 0x81, 0x2, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x2, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x200, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x7}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x16c}}, 0x4080)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))

269.44µs ago: executing program 5 (id=9610):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x48, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

0s ago: executing program 5 (id=9611):
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
socket$packet(0x11, 0x2, 0x300)

kernel console output (not intermixed with test programs):

yz.3.5179'.
[  295.147432][T18029] x_tables: ip_tables: udp match: only valid for protocol 17
[  295.267533][T18036] netlink: 'syz.2.5191': attribute type 39 has an invalid length.
[  295.339984][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5193'.
[  295.787926][T18053] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  295.790895][T18053] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  295.794075][T18053] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  297.407759][T18055] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  297.598166][T18092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.693841][T18101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.785668][T18109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5224'.
[  297.826778][T18111] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5225'.
[  298.503574][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5234'.
[  298.510520][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5234'.
[  298.543170][T18130] netlink: 'syz.3.5234': attribute type 7 has an invalid length.
[  298.559511][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.559551][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5234'.
[  298.562688][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.585073][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5234'.
[  298.587408][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.618839][T18130] netlink: 'syz.3.5234': attribute type 7 has an invalid length.
[  299.700392][T18163] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5249'.
[  301.198245][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5268'.
[  301.543891][T18225] pim6reg1: entered promiscuous mode
[  301.547846][T18225] pim6reg1: entered allmulticast mode
[  301.708746][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5280'.
[  301.711714][T18236] smc: net device bond0 applied user defined pnetid SYZ
[  301.872305][T18251] tipc: Resetting bearer <eth:syzkaller0>
[  302.091302][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5288'.
[  302.797640][T18323] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  303.307389][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5329'.
[  303.722628][T18406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.727900][T18406] syzkaller0: entered promiscuous mode
[  303.730201][T18406] syzkaller0: entered allmulticast mode
[  303.761714][T18406] tipc: Resetting bearer <eth:syzkaller0>
[  303.789913][T18406] tipc: Resetting bearer <eth:syzkaller0>
[  303.804555][T18406] tipc: Disabling bearer <eth:syzkaller0>
[  303.953405][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5352'.
[  304.059928][T18432] netlink: 'syz.3.5357': attribute type 4 has an invalid length.
[  304.229257][T18443] openvswitch: netlink: IPv4 tunnel dst address is zero
[  304.396869][T18454] netlink: 'syz.0.5367': attribute type 7 has an invalid length.
[  304.399423][T18454] netlink: 'syz.0.5367': attribute type 8 has an invalid length.
[  304.402112][T18454] netlink: 'syz.0.5367': attribute type 4 has an invalid length.
[  304.406227][T18454] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5367'.
[  304.870072][   T97] block nbd1: Possible stuck request ffff888020e80000: control (read@0,1024B). Runtime 60 seconds
[  304.874149][   T97] block nbd1: Possible stuck request ffff888020e80200: control (read@1024,1024B). Runtime 60 seconds
[  304.885279][   T97] block nbd1: Possible stuck request ffff888020e80400: control (read@2048,1024B). Runtime 60 seconds
[  304.889479][   T97] block nbd1: Possible stuck request ffff888020e80600: control (read@3072,1024B). Runtime 60 seconds
[  305.024771][T18489] netlink: 'syz.0.5379': attribute type 1 has an invalid length.
[  305.041543][T18489] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5379'.
[  305.256191][T18498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5383'.
[  305.688631][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5394'.
[  305.708565][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'.
[  305.824851][T18513] netlink: 'syz.3.5390': attribute type 1 has an invalid length.
[  305.827624][T18513] nbd: error processing sock list
[  305.830065][T18513] block nbd3: shutting down sockets
[  305.903887][T18531] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5398'.
[  306.338339][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5414'.
[  306.456471][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5418'.
[  306.955840][T18620] Unsupported ieee802154 address type: 0
[  307.988570][T18667] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  308.067825][T18667] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  308.074220][T18670] netem: change failed
[  308.213501][T18680] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  308.832811][T18714] netlink: 'syz.2.5481': attribute type 16 has an invalid length.
[  308.845591][T18714] netlink: 'syz.2.5481': attribute type 17 has an invalid length.
[  308.890920][T18714] 8021q: adding VLAN 0 to HW filter on device team0
[  309.078319][T18714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  309.200141][T18717] __nla_validate_parse: 4 callbacks suppressed
[  309.200159][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5482'.
[  309.671764][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5490'.
[  309.677415][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5490'.
[  309.682097][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5490'.
[  309.686772][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5490'.
[  309.861543][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5493'.
[  310.345810][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5502'.
[  310.526157][T18768] netlink: 'syz.3.5504': attribute type 1 has an invalid length.
[  310.529435][T18768] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5504'.
[  310.625352][T18766] tipc: Resetting bearer <eth:gre0>
[  310.755877][ T5744] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 256 - 0
[  310.758741][ T5744] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 8472 - 0
[  310.761616][ T5744] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  310.765130][ T5744] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 256 - 0
[  310.768024][ T5744] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 8472 - 0
[  310.771238][ T5744] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  310.774942][ T5744] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 256 - 0
[  310.778228][ T5744] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 8472 - 0
[  310.781465][ T5744] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  310.787436][ T5744] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 256 - 0
[  310.790641][ T5744] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 8472 - 0
[  310.793954][ T5744] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  310.924121][T18788] netlink: 'syz.3.5513': attribute type 21 has an invalid length.
[  310.925824][T18789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  310.929935][T18789] IPv6: NLM_F_CREATE should be set when creating new route
[  310.932804][T18789] IPv6: NLM_F_CREATE should be set when creating new route
[  310.939046][T18789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  311.343723][T18822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5529'.
[  311.349895][T18822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5529'.
[  311.714497][ T5294] udevd[5294]: worker [13381] /devices/virtual/block/nbd1 is taking a long time
[  312.113646][T18859] syzkaller1: entered promiscuous mode
[  312.116798][T18859] syzkaller1: entered allmulticast mode
[  313.063294][T18936] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  313.097054][T18869] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  313.384492][T18963] geneve2: entered promiscuous mode
[  313.387586][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.390509][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.397117][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.738530][T18987] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  314.041372][T19010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.049783][T19010] syzkaller0: entered promiscuous mode
[  314.052019][T19010] syzkaller0: entered allmulticast mode
[  314.070332][T19010] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  314.098236][T19010] tipc: Resetting bearer <eth:syzkaller0>
[  314.102529][T19009] tipc: Resetting bearer <eth:syzkaller0>
[  314.123692][T19009] tipc: Disabling bearer <eth:syzkaller0>
[  314.277396][T19026] netlink: 'syz.2.5619': attribute type 1 has an invalid length.
[  314.280674][T19026] __nla_validate_parse: 5 callbacks suppressed
[  314.280688][T19026] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5619'.
[  314.291733][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5619'.
[  314.295939][ T5884] Bluetooth: hci0: command 0x0405 tx timeout
[  314.605077][T19046] netlink: 'syz.0.5628': attribute type 2 has an invalid length.
[  314.769527][T19053] netlink: 'syz.3.5631': attribute type 13 has an invalid length.
[  314.776756][T19053] netlink: 'syz.3.5631': attribute type 17 has an invalid length.
[  314.862001][T19053] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.867201][T19053] 8021q: adding VLAN 0 to HW filter on device team0
[  314.879590][T19053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  314.892374][T19056] xfrm0: entered promiscuous mode
[  314.895619][T19056] xfrm0: entered allmulticast mode
[  315.286847][T19070] tipc: Resetting bearer <ib:ip6gre0>
[  315.781857][T19088] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  316.329073][T19127] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5664'.
[  316.337024][T19129] netlink: 'syz.2.5665': attribute type 1 has an invalid length.
[  316.339897][T19129] netlink: 'syz.2.5665': attribute type 2 has an invalid length.
[  316.346666][T19129] netlink: 'syz.2.5665': attribute type 1 has an invalid length.
[  316.349192][T19129] netlink: 'syz.2.5665': attribute type 2 has an invalid length.
[  316.492524][T19147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.620172][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5680'.
[  316.623844][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5680'.
[  316.703572][T19165] syz_tun: refused to change device tx_queue_len
[  316.706476][T19165] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  317.122262][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'.
[  317.374181][T19214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.389141][T19214] syzkaller0: entered promiscuous mode
[  317.390956][T19214] syzkaller0: entered allmulticast mode
[  317.392016][T19216] netlink: 'syz.0.5706': attribute type 2 has an invalid length.
[  317.418208][T19214] tipc: Resetting bearer <eth:syzkaller0>
[  317.422225][T19213] tipc: Resetting bearer <eth:syzkaller0>
[  317.440422][T19213] tipc: Disabling bearer <eth:syzkaller0>
[  317.502656][T19220] veth0: entered promiscuous mode
[  317.507248][T19219] veth0: left promiscuous mode
[  317.654230][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5714'.
[  317.803644][T19244] netlink: 'syz.3.5718': attribute type 9 has an invalid length.
[  317.807452][T19244] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.5718'.
[  318.083735][T19261] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  318.190099][T19269] openvswitch: netlink: IP tunnel TTL not specified.
[  318.298062][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5735'.
[  318.562414][T19291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5741'.
[  318.647147][T19299] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  318.651119][T19299] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  318.797703][T19316] netlink: 'syz.0.5752': attribute type 1 has an invalid length.
[  318.800643][T19316] netlink: 'syz.0.5752': attribute type 2 has an invalid length.
[  319.104641][ T5887] Bluetooth: hci2: command 0x0406 tx timeout
[  319.367021][T19330] IPVS: fo: TCP 172.20.20.170:0 - no destination available
[  320.040124][T19349] bond0: (slave batadv_slave_0): Releasing backup interface
[  320.049467][T19349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  320.317598][T19360] netlink: 'syz.0.5768': attribute type 1 has an invalid length.
[  320.321308][T19360] netlink: 'syz.0.5768': attribute type 4 has an invalid length.
[  320.324691][T19360] __nla_validate_parse: 4 callbacks suppressed
[  320.324707][T19360] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5768'.
[  320.906209][T19365] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5770'.
[  320.944483][T19367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  320.958408][T19367] syz.3.5771: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  320.967249][T19367] CPU: 0 UID: 0 PID: 19367 Comm: syz.3.5771 Not tainted syzkaller #0 PREEMPT(full) 
[  320.967278][T19367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.967289][T19367] Call Trace:
[  320.967328][T19367]  <TASK>
[  320.967339][T19367]  dump_stack_lvl+0x189/0x250
[  320.967387][T19367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.967407][T19367]  ? __pfx__printk+0x10/0x10
[  320.967429][T19367]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  320.967448][T19367]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  320.967465][T19367]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  320.967483][T19367]  warn_alloc+0x214/0x310
[  320.967506][T19367]  ? stack_depot_save_flags+0x40/0x860
[  320.967532][T19367]  ? __pfx_warn_alloc+0x10/0x10
[  320.967555][T19367]  ? kasan_save_track+0x4f/0x80
[  320.967573][T19367]  ? xskq_create+0x56/0x170
[  320.967586][T19367]  ? xsk_init_queue+0xb0/0x110
[  320.967596][T19367]  ? xsk_setsockopt+0x4dc/0x8d0
[  320.967615][T19367]  ? do_sock_setsockopt+0x17c/0x1b0
[  320.967633][T19367]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  320.967648][T19367]  ? do_syscall_64+0xfa/0x3b0
[  320.967662][T19367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.967681][T19367]  __vmalloc_node_range_noprof+0x125/0x12f0
[  320.967724][T19367]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  320.967748][T19367]  ? __kasan_kmalloc+0x93/0xb0
[  320.967768][T19367]  vmalloc_user_noprof+0xad/0xf0
[  320.967787][T19367]  ? xskq_create+0xbf/0x170
[  320.967801][T19367]  xskq_create+0xbf/0x170
[  320.967836][T19367]  xsk_init_queue+0xb0/0x110
[  320.967853][T19367]  xsk_setsockopt+0x4dc/0x8d0
[  320.967878][T19367]  ? __pfx_xsk_setsockopt+0x10/0x10
[  320.967901][T19367]  ? __pfx_aa_sk_perm+0x10/0x10
[  320.967926][T19367]  ? aa_sock_opt_perm+0xff/0x1b0
[  320.967943][T19367]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  320.967957][T19367]  ? __pfx_xsk_setsockopt+0x10/0x10
[  320.967978][T19367]  do_sock_setsockopt+0x17c/0x1b0
[  320.967999][T19367]  __x64_sys_setsockopt+0x13f/0x1b0
[  320.968021][T19367]  do_syscall_64+0xfa/0x3b0
[  320.968035][T19367]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.968049][T19367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.968062][T19367]  ? exc_page_fault+0x9f/0xf0
[  320.968077][T19367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.968091][T19367] RIP: 0033:0x7f304338ec29
[  320.968108][T19367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.968121][T19367] RSP: 002b:00007f30442a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  320.968140][T19367] RAX: ffffffffffffffda RBX: 00007f30435d5fa0 RCX: 00007f304338ec29
[  320.968151][T19367] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  320.968160][T19367] RBP: 00007f3043411e41 R08: 0000000000000004 R09: 0000000000000000
[  320.968169][T19367] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.968178][T19367] R13: 00007f30435d6038 R14: 00007f30435d5fa0 R15: 00007ffc06fb6bd8
[  320.968203][T19367]  </TASK>
[  320.968625][T19367] Mem-Info:
[  321.087331][T19367] active_anon:15715 inactive_anon:0 isolated_anon:0
[  321.087331][T19367]  active_file:1394 inactive_file:38350 isolated_file:0
[  321.087331][T19367]  unevictable:1768 dirty:304 writeback:0
[  321.087331][T19367]  slab_reclaimable:10846 slab_unreclaimable:104769
[  321.087331][T19367]  mapped:18325 shmem:2417 pagetables:1056
[  321.087331][T19367]  sec_pagetables:0 bounce:0
[  321.087331][T19367]  kernel_misc_reclaimable:0
[  321.087331][T19367]  free:220509 free_pcp:20247 free_cma:0
[  321.104895][T19367] Node 0 active_anon:37628kB inactive_anon:0kB active_file:3816kB inactive_file:25448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39544kB dirty:1032kB writeback:0kB shmem:4604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5968kB pagetables:2072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  321.117312][T19367] Node 1 active_anon:25232kB inactive_anon:0kB active_file:1760kB inactive_file:127952kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33824kB dirty:184kB writeback:0kB shmem:5064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6916kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  321.129638][T19367] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  321.140841][T19367] lowmem_reserve[]: 0 811 811 811 811
[  321.143040][T19367] Node 0 DMA32 free:270920kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37628kB inactive_anon:0kB active_file:3816kB inactive_file:25448kB unevictable:3536kB writepending:1032kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:38932kB local_pcp:22996kB free_cma:0kB
[  321.155531][T19367] lowmem_reserve[]: 0 0 0 0 0
[  321.157479][T19367] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  321.169054][T19367] lowmem_reserve[]: 0 0 854 854 854
[  321.171181][T19367] Node 1 Normal free:137264kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25232kB inactive_anon:0kB active_file:1760kB inactive_file:127952kB unevictable:3536kB writepending:184kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41932kB local_pcp:21064kB free_cma:0kB
[  321.183943][T19367] lowmem_reserve[]: 0 0 0 0 0
[  321.185970][T19367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  321.190859][T19367] Node 0 DMA32: 504*4kB (UME) 249*8kB (UME) 154*16kB (UME) 208*32kB (UME) 148*64kB (UM) 76*128kB (UM) 40*256kB (UM) 32*512kB (UM) 21*1024kB (UM) 9*2048kB (U) 42*4096kB (UM) = 270920kB
[  321.198403][T19367] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  321.205118][T19367] Node 1 Normal: 59*4kB (UME) 545*8kB (UME) 176*16kB (ME) 175*32kB (UME) 135*64kB (UM) 93*128kB (UM) 63*256kB (UM) 43*512kB (UME) 40*1024kB (UME) 8*2048kB (UME) 2*4096kB (M) = 137236kB
[  321.213517][T19367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  321.217519][T19367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  321.222268][T19367] 42161 total pagecache pages
[  321.224432][T19367] 0 pages in swap cache
[  321.226125][T19367] Free swap  = 124996kB
[  321.227824][T19367] Total swap = 124996kB
[  321.229561][T19367] 786301 pages RAM
[  321.231087][T19367] 0 pages HighMem/MovableOnly
[  321.233044][T19367] 241356 pages reserved
[  321.235166][T19367] 0 pages cma reserved
[  321.632561][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5789'.
[  321.703972][T19409] validate_nla: 2 callbacks suppressed
[  321.703993][T19409] netlink: 'syz.0.5791': attribute type 1 has an invalid length.
[  321.709486][T19409] netlink: 'syz.0.5791': attribute type 6 has an invalid length.
[  321.742297][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5792'.
[  323.280036][T19488] syzkaller0: entered promiscuous mode
[  323.284935][T19488] syzkaller0: entered allmulticast mode
[  323.426554][T19504] syzkaller1: entered promiscuous mode
[  323.428656][T19504] syzkaller1: entered allmulticast mode
[  323.676740][T19512] xfrm0: left promiscuous mode
[  323.678634][T19512] xfrm0: left allmulticast mode
[  323.682638][T19512] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  323.685917][T19512] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  323.689753][T19512] veth3: left promiscuous mode
[  323.691963][T19512] xfrm1: left promiscuous mode
[  323.693742][T19512] xfrm1: left allmulticast mode
[  323.712980][T19512] geneve2: left promiscuous mode
[  323.737802][T19525] 8021q: adding VLAN 0 to HW filter on device team0
[  323.740687][T19525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  323.755196][   T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.758555][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.762006][   T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.772646][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.784216][   T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.789258][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.299739][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5858'.
[  324.309431][T19564] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  325.089843][T19589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5871'.
[  325.138642][T19591] syzkaller1: entered promiscuous mode
[  325.141112][T19591] syzkaller1: entered allmulticast mode
[  325.645969][T19614] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5883'.
[  325.841682][T19633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5891'.
[  326.527381][T19688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5917'.
[  327.224973][T19731] netlink: 'syz.0.5936': attribute type 29 has an invalid length.
[  327.235988][T19731] netlink: 'syz.0.5936': attribute type 29 has an invalid length.
[  327.240425][T19731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5936'.
[  327.441533][T19739] macvlan1: entered promiscuous mode
[  327.443925][T19739] ipvlan0: entered promiscuous mode
[  327.447284][T19739] ipvlan0: left promiscuous mode
[  327.461687][T19739] macvlan1: left promiscuous mode
[  327.641882][T19751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5945'.
[  327.646057][T19751] openvswitch: netlink: Missing key (keys=40, expected=80)
[  327.795099][T19764] netlink: 'syz.0.5950': attribute type 12 has an invalid length.
[  327.973363][T19776] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  327.979013][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5956'.
[  328.042134][T19779] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  328.848368][T19801] syzkaller0: entered promiscuous mode
[  328.850475][T19801] syzkaller0: entered allmulticast mode
[  328.860577][T19801] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  329.421693][T19831] netlink: 'syz.3.5978': attribute type 1 has an invalid length.
[  329.425211][T19831] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5978'.
[  329.428150][T19831] netlink: 'syz.3.5978': attribute type 2 has an invalid length.
[  329.430719][T19831] netlink: 'syz.3.5978': attribute type 1 has an invalid length.
[  330.101702][T19859] delete_channel: no stack
[  330.159123][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5994'.
[  330.169333][T19865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5993'.
[  330.198514][T19865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5993'.
[  330.390012][T19878] syzkaller1: entered promiscuous mode
[  330.392245][T19878] syzkaller1: entered allmulticast mode
[  330.703006][T19907] veth0: entered promiscuous mode
[  330.706366][T19907] __nla_validate_parse: 3 callbacks suppressed
[  330.706379][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6014'.
[  330.742392][T19907] veth0 (unregistering): left promiscuous mode
[  331.197420][T19925] xt_l2tp: invalid flags combination: 0
[  331.311838][T19932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.331970][T19932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6024'.
[  331.513466][T19946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.528273][T19946] tipc: Resetting bearer <eth:syzkaller0>
[  332.366541][T20007] lo speed is unknown, defaulting to 1000
[  332.369348][T20007] lo speed is unknown, defaulting to 1000
[  332.372094][T20007] lo speed is unknown, defaulting to 1000
[  332.390507][T20007] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  332.413199][T20007] lo speed is unknown, defaulting to 1000
[  332.417916][T20007] lo speed is unknown, defaulting to 1000
[  332.422087][T20007] lo speed is unknown, defaulting to 1000
[  332.426842][T20007] lo speed is unknown, defaulting to 1000
[  332.556912][T20015] netlink: 'syz.0.6060': attribute type 21 has an invalid length.
[  332.559446][T20015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6060'.
[  332.562996][T20015] netlink: 'syz.0.6060': attribute type 4 has an invalid length.
[  332.566630][T20015] netlink: 'syz.0.6060': attribute type 5 has an invalid length.
[  332.570488][T20015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6060'.
[  332.580697][T20018] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6062'.
[  332.821023][T20042] syzkaller1: entered promiscuous mode
[  332.823403][T20042] syzkaller1: entered allmulticast mode
[  333.247446][T20056] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  333.772700][T20074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.980655][T20088] syzkaller1: entered promiscuous mode
[  333.982626][T20088] syzkaller1: entered allmulticast mode
[  334.116093][T20092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6094'.
[  334.233255][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6099'.
[  334.319025][T20108] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6102'.
[  334.481141][T20124] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6111'.
[  334.549843][T20126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6110'.
[  334.696163][T20137] IPVS: Scheduler module ip_vs_sip not found
[  334.912789][T20153] netlink: 'syz.3.6124': attribute type 303 has an invalid length.
[  334.937639][   T97] block nbd1: Possible stuck request ffff888020e80000: control (read@0,1024B). Runtime 90 seconds
[  334.941382][   T97] block nbd1: Possible stuck request ffff888020e80200: control (read@1024,1024B). Runtime 90 seconds
[  334.945358][   T97] block nbd1: Possible stuck request ffff888020e80400: control (read@2048,1024B). Runtime 90 seconds
[  334.949169][   T97] block nbd1: Possible stuck request ffff888020e80600: control (read@3072,1024B). Runtime 90 seconds
[  334.972617][T20156] siw: device registration error -23
[  335.112322][   T33] audit: type=1107 audit(1758555512.655:5): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  335.165856][T20156] lo speed is unknown, defaulting to 1000
[  335.509436][T20191] openvswitch: netlink: Invalid VLAN frame
[  335.650673][T20203] netlink: 'syz.2.6147': attribute type 1 has an invalid length.
[  335.700694][T20205] netlink: 'syz.2.6148': attribute type 7 has an invalid length.
[  335.988691][T20235] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  336.151778][T20249] tipc: Resetting bearer <eth:syzkaller0>
[  336.157762][T20249] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  336.160691][T20249] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  336.490481][T20260] netlink: 'syz.2.6173': attribute type 2 has an invalid length.
[  336.493234][T20260] __nla_validate_parse: 24 callbacks suppressed
[  336.493247][T20260] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6173'.
[  336.617847][T20264] bridge8: the hash_elasticity option has been deprecated and is always 16
[  336.622004][T20264] bridge8: entered allmulticast mode
[  337.188841][T20295] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  337.319605][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6190'.
[  337.619664][T20313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6197'.
[  338.634431][T20366] syzkaller1: entered promiscuous mode
[  338.636218][T20366] syzkaller1: entered allmulticast mode
[  338.945244][T20383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.950898][T20382] tipc: Resetting bearer <eth:syzkaller0>
[  340.513142][T20389] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  341.058721][T20382] tipc: Disabling bearer <eth:syzkaller0>
[  341.064694][T20385] netlink: 'syz.3.6228': attribute type 12 has an invalid length.
[  341.400203][T20411] netlink: 'syz.0.6237': attribute type 1 has an invalid length.
[  341.458904][T20417] netlink: 'syz.2.6238': attribute type 10 has an invalid length.
[  341.506828][T20420] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6240'.
[  341.874142][T20453] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  342.157661][T20466] netlink: 'syz.2.6261': attribute type 1 has an invalid length.
[  342.181654][T20466] 8021q: adding VLAN 0 to HW filter on device bond10
[  342.192646][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6262'.
[  342.348536][T20466] bond10 (unregistering): Released all slaves
[  342.378503][T20472] 8021q: adding VLAN 0 to HW filter on device bond5
[  342.509672][T20488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6269'.
[  342.543529][T20488] bridge11: port 1(veth9) entered blocking state
[  342.547991][T20488] bridge11: port 1(veth9) entered disabled state
[  342.550741][T20488] veth9: entered allmulticast mode
[  342.554954][T20488] veth9: entered promiscuous mode
[  342.569166][T20487] macvtap2: entered promiscuous mode
[  342.571293][T20487] macvtap2: entered allmulticast mode
[  342.581935][T20488] bridge11: port 2(veth0_to_bond) entered blocking state
[  342.585014][T20488] bridge11: port 2(veth0_to_bond) entered disabled state
[  342.587993][T20488] veth0_to_bond: entered allmulticast mode
[  342.592317][T20488] veth0_to_bond: entered promiscuous mode
[  342.661771][T20492] xt_socket: unknown flags 0x50
[  342.731243][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6272'.
[  342.992202][T20512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6280'.
[  343.040806][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6282'.
[  343.045039][T20516] netlink: 'syz.2.6282': attribute type 1 has an invalid length.
[  343.048196][T20516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6282'.
[  343.788851][ T8812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.791538][ T8812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.843762][T20584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6313'.
[  343.983152][T20592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  343.986094][T20592] IPv6: NLM_F_CREATE should be set when creating new route
[  343.989076][T20592] IPv6: NLM_F_CREATE should be set when creating new route
[  343.991977][T20592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  344.655799][T20621] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  344.697722][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6332'.
[  344.765923][T20635] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6335'.
[  344.768695][T20636] tipc: Invalid UDP bearer configuration
[  344.768861][T20636] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  344.768901][T20635] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  344.827241][T20639] vlan7: entered allmulticast mode
[  344.829227][T20639] bond6: entered allmulticast mode
[  345.058410][   T12] syzkaller0: tun_net_xmit 76
[  345.060203][   T12] syzkaller0: tun_net_xmit 48
[  345.094697][ T5911] syzkaller0: tun_net_xmit 76
[  347.414923][T20685] __nla_validate_parse: 4 callbacks suppressed
[  347.414945][T20685] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6359'.
[  347.557845][T20709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'.
[  347.577041][T20705] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6369'.
[  347.718382][T20726] openvswitch: netlink: Multiple metadata blocks provided
[  348.220789][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6386'.
[  348.232148][T20753] macvtap2: entered promiscuous mode
[  348.235141][T20753] batadv0: entered promiscuous mode
[  348.237308][T20753] macvtap2: entered allmulticast mode
[  348.239202][T20753] batadv0: entered allmulticast mode
[  348.242557][T20753] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  348.632267][T20775] netlink: 'syz.0.6397': attribute type 3 has an invalid length.
[  348.635528][T20775] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6397'.
[  348.666599][T20777] netlink: 14679 bytes leftover after parsing attributes in process `syz.0.6398'.
[  348.699513][T20779] netlink: 'syz.0.6399': attribute type 21 has an invalid length.
[  348.702616][T20779] IPv6: NLM_F_CREATE should be specified when creating new route
[  348.707725][T20779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  348.710132][T20779] IPv6: NLM_F_CREATE should be set when creating new route
[  348.712357][T20779] IPv6: NLM_F_CREATE should be set when creating new route
[  348.715039][T20779] IPv6: NLM_F_CREATE should be set when creating new route
[  348.951657][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6409'.
[  349.965588][T20817] syzkaller0: entered promiscuous mode
[  349.967551][T20817] syzkaller0: entered allmulticast mode
[  350.923474][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6419'.
[  350.926962][T20831] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6419'.
[  352.566982][T20854] bridge0: port 1(erspan0) entered blocking state
[  352.570405][T20854] bridge0: port 1(erspan0) entered disabled state
[  352.572903][T20854] erspan0: entered allmulticast mode
[  352.580852][T20854] erspan0: entered promiscuous mode
[  352.590062][T20854] erspan0: left allmulticast mode
[  352.591728][T20854] erspan0: left promiscuous mode
[  352.595787][T20854] bridge0: port 1(erspan0) entered disabled state
[  353.745049][T20885] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  353.748374][T20885] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  353.800536][T20887] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  353.813192][T20887] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  353.817167][T20887] tipc: Resetting bearer <eth:syzkaller0>
[  353.875011][T20893] netlink: 'syz.2.6444': attribute type 4 has an invalid length.
[  353.880276][T20893] netlink: 'syz.2.6444': attribute type 4 has an invalid length.
[  353.886760][  T793] lo speed is unknown, defaulting to 1000
[  353.889033][  T793] syz2: Port: 1 Link ACTIVE
[  354.291703][T20908] lo speed is unknown, defaulting to 1000
[  354.801801][T20937] ip6gretap2: entered promiscuous mode
[  355.219220][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6479'.
[  355.504709][T20997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6488'.
[  355.508046][T20997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6488'.
[  355.551212][T20975] lo speed is unknown, defaulting to 1000
[  355.789611][T21017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6496'.
[  355.888527][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6498'.
[  356.287945][T21035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  356.320085][T21035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  356.333192][T21019] lo speed is unknown, defaulting to 1000
[  356.773662][T21061] netlink: 'syz.2.6511': attribute type 1 has an invalid length.
[  356.778232][T21061] NCSI netlink: No device for ifindex 0
[  357.074813][T21071] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6514'.
[  357.191813][T21080] netlink: 'syz.3.6519': attribute type 2 has an invalid length.
[  357.322165][T21088] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  357.916269][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6529'.
[  358.084571][T21108] netlink: 'syz.3.6531': attribute type 16 has an invalid length.
[  358.087739][T21108] netlink: 'syz.3.6531': attribute type 17 has an invalid length.
[  358.212687][T21108] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.220220][T21108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  358.238031][T21105] lo speed is unknown, defaulting to 1000
[  358.423540][T21132] netlink: 'syz.2.6538': attribute type 1 has an invalid length.
[  358.429164][T21132] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6538'.
[  358.809286][T21158] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6550'.
[  358.812903][T21158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6550'.
[  358.816401][T21156] geneve3: entered promiscuous mode
[  358.821240][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.831930][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.843903][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.854712][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.880905][T21162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.885257][T21162] tipc: Resetting bearer <eth:syzkaller0>
[  358.992859][T21150] lo speed is unknown, defaulting to 1000
[  359.939723][T21209] netlink: 'syz.3.6573': attribute type 11 has an invalid length.
[  359.948675][T21209] netlink: 'syz.3.6573': attribute type 11 has an invalid length.
[  360.303744][T21227] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  361.835289][T21282] __nla_validate_parse: 3 callbacks suppressed
[  361.835422][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6603'.
[  362.492113][T21301] tipc: Resetting bearer <eth:syzkaller0>
[  363.296092][T21311] netlink: 'syz.3.6614': attribute type 1 has an invalid length.
[  363.299118][T21311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6614'.
[  363.503824][T21328] smc: net device bond0 erased user defined pnetid SYZ
[  363.840414][T21328] bond0 (unregistering): Released all slaves
[  364.337201][T21365] dvmrp0: entered allmulticast mode
[  365.018995][   T97] block nbd1: Possible stuck request ffff888020e80000: control (read@0,1024B). Runtime 120 seconds
[  365.023189][   T97] block nbd1: Possible stuck request ffff888020e80200: control (read@1024,1024B). Runtime 120 seconds
[  365.029428][   T97] block nbd1: Possible stuck request ffff888020e80400: control (read@2048,1024B). Runtime 120 seconds
[  365.033384][   T97] block nbd1: Possible stuck request ffff888020e80600: control (read@3072,1024B). Runtime 120 seconds
[  365.258565][T21418] syzkaller0: entered promiscuous mode
[  365.261030][T21418] syzkaller0: entered allmulticast mode
[  365.511975][T21440] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6671'.
[  365.518750][T21440] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  365.521957][T21440] openvswitch: netlink: Duplicate key (type 0).
[  365.558449][T21445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6674'.
[  365.563055][T21445] netlink: 'syz.0.6674': attribute type 1 has an invalid length.
[  365.680078][T21457] vlan0: entered promiscuous mode
[  366.165669][T21485] team0: Device ipip0 is up. Set it down before adding it as a team port
[  366.184222][T21487] lo: entered promiscuous mode
[  366.187534][T21487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.211831][T21488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.216012][T21488] syzkaller0: entered promiscuous mode
[  366.218383][T21488] syzkaller0: entered allmulticast mode
[  366.258651][T21485] tipc: Resetting bearer <eth:syzkaller0>
[  366.267505][T21484] tipc: Resetting bearer <eth:syzkaller0>
[  366.285872][T21484] tipc: Disabling bearer <eth:syzkaller0>
[  366.512118][T21505] netlink: 'syz.2.6703': attribute type 1 has an invalid length.
[  366.515532][T21505] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.6703'.
[  366.660149][T21512] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6702'.
[  367.428074][T21534] netlink: 'syz.3.6716': attribute type 12 has an invalid length.
[  368.179416][T21606] netlink: 'syz.3.6736': attribute type 1 has an invalid length.
[  369.224152][T21625] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  369.227971][T21625] tipc: Enabled bearer <udp:syz2>, priority 26
[  369.299921][T21629] netlink: 'syz.3.6748': attribute type 1 has an invalid length.
[  369.303336][T21629] netlink: 'syz.3.6748': attribute type 2 has an invalid length.
[  369.307143][T21629] netlink: 'syz.3.6748': attribute type 8 has an invalid length.
[  369.310243][T21629] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.6748'.
[  369.364867][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  369.634882][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  369.671556][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6760'.
[  369.810117][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6766'.
[  369.813679][T21672] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6766'.
[  369.826251][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6766'.
[  369.828734][T21675] tc_dump_action: action bad kind
[  369.829684][T21672] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6766'.
[  369.829764][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6766'.
[  369.916167][T21681] netlink: 212384 bytes leftover after parsing attributes in process `syz.2.6770'.
[  369.919907][T21681] netlink: get zone limit has 8 unknown bytes
[  370.096987][T21697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'.
[  370.164521][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  370.190053][T21703] netlink: 'syz.3.6781': attribute type 1 has an invalid length.
[  370.193244][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6781'.
[  370.647624][T21741] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  370.847919][T21741] lo speed is unknown, defaulting to 1000
[  371.037477][T21770] netlink: 'syz.3.6812': attribute type 10 has an invalid length.
[  371.174454][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  371.283398][T21789] batadv_slave_1: entered promiscuous mode
[  371.289057][T21788] batadv_slave_1: left promiscuous mode
[  371.617608][T21822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  371.631596][ T5911] lo speed is unknown, defaulting to 1000
[  371.635882][ T5911] syz2: Port: 1 Link DOWN
[  371.888632][T21824] lo speed is unknown, defaulting to 1000
[  371.923147][T21843] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  372.224630][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  372.512154][T21867] dvmrp8: entered allmulticast mode
[  372.807228][T21867] lo speed is unknown, defaulting to 1000
[  372.967460][T21866] dvmrp8: left allmulticast mode
[  373.264549][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  373.503860][T21921] netlink: 'syz.3.6869': attribute type 21 has an invalid length.
[  373.515416][T21921] netlink: 'syz.3.6869': attribute type 22 has an invalid length.
[  373.517931][T21921] netlink: 'syz.3.6869': attribute type 23 has an invalid length.
[  373.529833][T21921] netlink: 'syz.3.6869': attribute type 25 has an invalid length.
[  373.757461][T21942] geneve5: entered promiscuous mode
[  373.759388][T21942] geneve5: entered allmulticast mode
[  373.762217][ T6203] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.774482][ T6203] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.777967][ T6203] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.781211][ T6203] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.801089][T21945] netlink: 'syz.2.6881': attribute type 1 has an invalid length.
[  373.812671][T21946] netlink: 'syz.3.6880': attribute type 6 has an invalid length.
[  373.816721][T21946] netlink: 'syz.3.6880': attribute type 25 has an invalid length.
[  373.819268][T21946] netlink: 'syz.3.6880': attribute type 27 has an invalid length.
[  373.821686][T21946] netlink: 'syz.3.6880': attribute type 28 has an invalid length.
[  374.304516][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  374.352302][T21994] __nla_validate_parse: 10 callbacks suppressed
[  374.352313][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6899'.
[  374.360164][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6899'.
[  374.469302][T22000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  374.630504][T22010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6904'.
[  374.749751][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6904'.
[  374.760347][T22010] vlan0: entered promiscuous mode
[  374.766696][T22010] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  375.131255][T22033] 8021q: adding VLAN 0 to HW filter on device bond10
[  375.170863][T22037] bond10: (slave geneve2): making interface the new active one
[  375.181180][T22037] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  375.202867][ T6203] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.215268][ T6203] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.219656][T22039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6911'.
[  375.237944][ T6203] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.241301][ T6203] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.289348][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6914'.
[  375.334669][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  375.595218][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6925'.
[  375.687841][T22081] netlink: 'syz.0.6929': attribute type 11 has an invalid length.
[  375.722466][ T6203] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.741243][ T6203] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.744122][ T6203] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.747211][ T6203] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.004642][T22101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6939'.
[  376.008156][T22101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6939'.
[  376.062860][T22105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6941'.
[  376.172903][T22105] vlan0: entered promiscuous mode
[  376.176269][T22105] geneve1: entered promiscuous mode
[  376.184670][T22105] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  376.324799][T22131] syzkaller1: entered promiscuous mode
[  376.326758][T22131] syzkaller1: entered allmulticast mode
[  376.329805][T22130] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  376.348336][T22130] syzkaller0: entered promiscuous mode
[  376.350684][T22130] syzkaller0: entered allmulticast mode
[  376.384678][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  376.532630][ T6203] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.536502][ T6203] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.539555][ T6203] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.545858][ T6203] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.554601][ T6203] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  376.558480][ T6203] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  376.564731][ T6203] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  376.571063][ T6203] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  377.155543][T22189] team0: Mode changed to "broadcast"
[  377.165129][T22189] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  377.424673][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  377.432977][T22212] bridge0: failed insert local address into bridge forwarding table
[  377.763291][T22238] pim6reg1: entered promiscuous mode
[  377.768493][T22238] pim6reg1: entered allmulticast mode
[  378.047198][T22258] macsec0: entered promiscuous mode
[  378.049304][T22258] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  378.055792][T22258] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  378.386946][T22290] validate_nla: 3 callbacks suppressed
[  378.386965][T22290] netlink: 'syz.0.7027': attribute type 5 has an invalid length.
[  378.454548][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  379.471970][T22333] __nla_validate_parse: 8 callbacks suppressed
[  379.471989][T22333] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7046'.
[  379.478360][T22333] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7046'.
[  379.494624][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  379.597493][T22344] netlink: 'syz.3.7052': attribute type 11 has an invalid length.
[  379.606283][T22344] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7052'.
[  379.607023][T22347] openvswitch: netlink: Unknown key attributes 2
[  379.837069][T22361] syzkaller0: entered promiscuous mode
[  379.839252][T22361] syzkaller0: entered allmulticast mode
[  380.537983][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  381.576532][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  381.968353][T22407] netlink: 'syz.3.7080': attribute type 1 has an invalid length.
[  382.552877][T22425] bridge8: entered allmulticast mode
[  382.614977][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  383.113765][T22452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7100'.
[  383.216021][T22460] netlink: 'syz.0.7104': attribute type 8 has an invalid length.
[  383.218827][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7104'.
[  383.224061][T22461] netlink: 'syz.2.7103': attribute type 9 has an invalid length.
[  383.270686][T22460] netlink: 'syz.0.7104': attribute type 8 has an invalid length.
[  383.273983][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7104'.
[  383.310589][T22465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7106'.
[  383.485173][T22474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7109'.
[  383.654683][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  383.739179][T22490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7118'.
[  383.754161][T22496] syzkaller0: entered promiscuous mode
[  383.757341][T22496] syzkaller0: entered allmulticast mode
[  384.694802][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  385.734742][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  385.869016][T22513] netlink: 'syz.3.7126': attribute type 13 has an invalid length.
[  385.955880][T22523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.002708][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7134'.
[  386.007730][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7134'.
[  386.010626][T22527] netlink: 'syz.2.7134': attribute type 5 has an invalid length.
[  386.013123][T22527] netlink: 'syz.2.7134': attribute type 6 has an invalid length.
[  386.088451][T22537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.179864][T22547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7143'.
[  386.228357][T22554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7147'.
[  386.255479][T22557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7148'.
[  386.278768][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7149'.
[  386.297595][T22563] netlink: 404 bytes leftover after parsing attributes in process `syz.2.7151'.
[  386.304559][T22563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7151'.
[  386.307579][T22563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7151'.
[  386.310535][T22563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7151'.
[  386.473650][T22577] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  386.477965][T22577] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  386.481788][T22577] tipc: Resetting bearer <eth:syzkaller0>
[  386.740269][T22606] sctp: [Deprecated]: syz.3.7167 (pid 22606) Use of int in maxseg socket option.
[  386.740269][T22606] Use struct sctp_assoc_value instead
[  386.775259][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  386.969833][T22627] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  386.972797][T22627] netem: change failed
[  387.066905][T22612] lo speed is unknown, defaulting to 1000
[  387.104977][T22634] netlink: 'syz.3.7181': attribute type 5 has an invalid length.
[  387.109601][T22634] netlink: 'syz.3.7181': attribute type 6 has an invalid length.
[  387.465495][T22664] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  387.814503][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  387.930716][T22699] netlink: 'syz.0.7210': attribute type 1 has an invalid length.
[  388.860005][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  389.040244][T22766] netlink: 'syz.3.7239': attribute type 1 has an invalid length.
[  389.042926][T22766] netlink: 'syz.3.7239': attribute type 1 has an invalid length.
[  389.648280][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  389.652777][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  389.661917][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  389.673732][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  389.894622][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  390.299752][T22870] netlink: 'syz.2.7287': attribute type 1 has an invalid length.
[  390.304122][T22870] netlink: 'syz.2.7287': attribute type 1 has an invalid length.
[  390.322554][T22874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.660454][T22915] IPv6: NLM_F_CREATE should be specified when creating new route
[  390.934527][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  391.585603][T22968] __nla_validate_parse: 22 callbacks suppressed
[  391.585616][T22968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7331'.
[  391.876468][T22984] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  391.887349][T22986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7340'.
[  391.953487][T22992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7342'.
[  391.974952][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  391.975333][T22992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7342'.
[  392.047356][T22994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  392.174615][T23001] gre0: entered allmulticast mode
[  392.194568][T23001] dvmrp8: entered allmulticast mode
[  392.828331][T22993] gre0: left allmulticast mode
[  392.830474][T22993] dvmrp8: left allmulticast mode
[  393.014745][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  393.174679][T22955] Bluetooth: hci2: command 0x0406 tx timeout
[  393.788653][T22955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  393.794519][T22955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  393.799503][T22955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  393.803203][T22955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  393.807061][T22955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  393.937611][T23024] lo speed is unknown, defaulting to 1000
[  394.054609][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  394.059337][T23024] chnl_net:caif_netlink_parms(): no params data found
[  394.126921][T23024] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.129269][T23024] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.131614][T23024] bridge_slave_0: entered allmulticast mode
[  394.136971][T23024] bridge_slave_0: entered promiscuous mode
[  394.141751][T23024] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.145073][T23024] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.148046][T23024] bridge_slave_1: entered allmulticast mode
[  394.151932][T23024] bridge_slave_1: entered promiscuous mode
[  394.180976][T23024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.187264][T23024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.207784][T23024] team0: Port device team_slave_0 added
[  394.211287][T23024] team0: Port device team_slave_1 added
[  394.233266][T23024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.235965][T23024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.243730][T23024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.248778][T23024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.251008][T23024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.259052][T23024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.289138][T23024] hsr_slave_0: entered promiscuous mode
[  394.291947][T23024] hsr_slave_1: entered promiscuous mode
[  394.295144][T23024] debugfs: 'hsr0' already exists in 'hsr'
[  394.297395][T23024] Cannot create hsr debugfs directory
[  394.445118][T23024] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  394.456922][T23024] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  394.468351][T23024] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  394.478765][T23024] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  394.538243][T23024] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.540579][T23024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.542974][T23024] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.545259][T23024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.608619][T23024] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.622129][T11569] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.631260][T11569] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.658401][T23024] 8021q: adding VLAN 0 to HW filter on device team0
[  394.685301][T11569] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.686448][T23049] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7357'.
[  394.688109][T11569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.712855][ T5884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  394.720092][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  394.723353][T11569] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.725792][T11569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.728075][ T5884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  394.732586][ T5884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  394.736503][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  394.937523][T23048] lo speed is unknown, defaulting to 1000
[  394.942126][T23024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.094832][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  395.098597][   T97] block nbd1: Possible stuck request ffff888020e80000: control (read@0,1024B). Runtime 150 seconds
[  395.103135][   T97] block nbd1: Possible stuck request ffff888020e80200: control (read@1024,1024B). Runtime 150 seconds
[  395.107682][   T97] block nbd1: Possible stuck request ffff888020e80400: control (read@2048,1024B). Runtime 150 seconds
[  395.111985][   T97] block nbd1: Possible stuck request ffff888020e80600: control (read@3072,1024B). Runtime 150 seconds
[  395.179683][T23024] veth0_vlan: entered promiscuous mode
[  395.190316][T23048] chnl_net:caif_netlink_parms(): no params data found
[  395.266503][T23075] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  395.269988][T23024] veth1_vlan: entered promiscuous mode
[  395.296403][T23048] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.300064][T23048] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.302965][T23048] bridge_slave_0: entered allmulticast mode
[  395.306283][T23048] bridge_slave_0: entered promiscuous mode
[  395.310186][T23048] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.315044][T23048] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.317719][T23048] bridge_slave_1: entered allmulticast mode
[  395.320891][T23048] bridge_slave_1: entered promiscuous mode
[  395.353176][T23048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.361566][T23024] veth0_macvtap: entered promiscuous mode
[  395.366233][T23048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.382206][T23024] veth1_macvtap: entered promiscuous mode
[  395.403130][T23048] team0: Port device team_slave_0 added
[  395.409434][T23048] team0: Port device team_slave_1 added
[  395.423749][T23024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.446335][T23048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.448634][T23048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.457193][T23048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.463967][T23024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.470451][T23048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.473255][T23048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.483829][T23048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.523857][ T6203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.538391][T23048] hsr_slave_0: entered promiscuous mode
[  395.542355][T23048] hsr_slave_1: entered promiscuous mode
[  395.544899][T23048] debugfs: 'hsr0' already exists in 'hsr'
[  395.546721][T23048] Cannot create hsr debugfs directory
[  395.548568][ T6203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.591510][ T6203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.614870][ T6203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.749004][T11569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.751572][T11569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.808947][T11569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.812636][T11569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.823270][T23048] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  395.829781][T22955] Bluetooth: hci0: command tx timeout
[  395.847114][T23048] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  395.856562][T23048] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  395.872416][T23048] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  395.880630][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7365'.
[  395.883608][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7365'.
[  395.887494][T23083] validate_nla: 1 callbacks suppressed
[  395.887502][T23083] netlink: 'syz.0.7365': attribute type 15 has an invalid length.
[  395.933681][T23093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7366'.
[  396.034766][T23048] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.050032][T23048] 8021q: adding VLAN 0 to HW filter on device team0
[  396.076745][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.079283][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.104160][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.106733][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.129046][T23108] netlink: 'syz.0.7373': attribute type 4 has an invalid length.
[  396.138146][T23108] netlink: 'syz.0.7373': attribute type 4 has an invalid length.
[  396.291110][T23118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7377'.
[  396.378243][T23048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.546043][T23048] veth0_vlan: entered promiscuous mode
[  396.561247][T23048] veth1_vlan: entered promiscuous mode
[  396.601681][T23048] veth0_macvtap: entered promiscuous mode
[  396.614341][T23048] veth1_macvtap: entered promiscuous mode
[  396.639861][T23048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.651893][T23048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.662615][ T6203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.668062][ T6203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.679353][ T6203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.683563][ T6203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.765671][T23149] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7388'.
[  396.766338][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.776079][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.785283][T22955] Bluetooth: hci1: command tx timeout
[  396.807147][  T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.812959][  T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.899386][T23155] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7391'.
[  397.174942][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  397.895471][T22955] Bluetooth: hci0: command tx timeout
[  398.214724][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  398.304990][T23223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7423'.
[  398.317392][T23223] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.321334][T23223] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.426029][T23225] lo speed is unknown, defaulting to 1000
[  398.652923][T23231] IPv6: NLM_F_CREATE should be specified when creating new route
[  398.858256][T22955] Bluetooth: hci1: command tx timeout
[  399.118974][T23251] bond0: (slave rose0): Error: Device can not be enslaved while up
[  399.204833][T23255] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7434'.
[  399.251412][T23257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7435'.
[  399.254600][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  399.920852][T23290] netlink: 'syz.4.7451': attribute type 5 has an invalid length.
[  399.974858][T22955] Bluetooth: hci0: command tx timeout
[  400.114145][T23300] netlink: 'syz.4.7455': attribute type 29 has an invalid length.
[  400.129041][T23300] netlink: 'syz.4.7455': attribute type 29 has an invalid length.
[  400.141714][T23300] netlink: 500 bytes leftover after parsing attributes in process `syz.4.7455'.
[  400.179691][T23307] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7457'.
[  400.294567][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  400.347987][T23291] lo speed is unknown, defaulting to 1000
[  400.902983][T23345] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7475'.
[  400.922302][T23345] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7475'.
[  400.942528][T22955] Bluetooth: hci1: command tx timeout
[  400.992073][T23350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7477'.
[  401.159433][T23361] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  401.334576][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  401.511692][T23383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.549809][T23383] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.055059][T22955] Bluetooth: hci0: command tx timeout
[  402.192091][T23399] netlink: 'syz.4.7497': attribute type 1 has an invalid length.
[  402.241761][T23402] netlink: 'syz.5.7499': attribute type 4 has an invalid length.
[  402.301760][T23409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  402.374500][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  402.556499][T23429] __nla_validate_parse: 4 callbacks suppressed
[  402.556518][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7510'.
[  402.727236][T23443] sock: sock_timestamping_bind_phc: sock not bind to device
[  402.921635][T23455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7523'.
[  403.015659][T22955] Bluetooth: hci1: command tx timeout
[  403.117980][T23469] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7530'.
[  403.414603][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  404.170078][T23506] netlink: 'syz.4.7544': attribute type 5 has an invalid length.
[  404.209148][T23508] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7545'.
[  404.274085][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7547'.
[  404.415122][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7551'.
[  404.454728][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  404.477849][T23521] vlan2: entered allmulticast mode
[  404.487046][T23521] bridge0: entered allmulticast mode
[  404.489587][T23521] bridge1: port 1(vlan2) entered blocking state
[  404.503435][T23521] bridge1: port 1(vlan2) entered disabled state
[  404.510186][T23521] vlan2: entered promiscuous mode
[  404.512223][T23521] bridge0: entered promiscuous mode
[  404.553089][T23532] netlink: 'syz.5.7556': attribute type 10 has an invalid length.
[  404.556461][T23521] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode
[  405.337996][T23555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.453909][T23555] mac80211_hwsim hwsim33 wlan0: left allmulticast mode
[  405.494563][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  405.500201][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.507967][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.514674][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.521705][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.551395][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7566'.
[  405.555544][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7566'.
[  405.728493][T23567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7571'.
[  405.912155][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7578'.
[  405.955678][T23581] smc: removing ib device syz!
[  406.534767][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  407.352925][T23627] bridge0: port 3(netdevsim2) entered blocking state
[  407.355665][T23627] bridge0: port 3(netdevsim2) entered disabled state
[  407.358012][T23627] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  407.361893][T23627] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  407.410103][T23631] lo speed is unknown, defaulting to 1000
[  407.412321][T23633] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  407.507264][T23635] lo speed is unknown, defaulting to 1000
[  407.574557][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  407.768252][T23643] __nla_validate_parse: 1 callbacks suppressed
[  407.768275][T23643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7604'.
[  407.798899][T23643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7604'.
[  408.001737][T23651] lo speed is unknown, defaulting to 1000
[  408.388050][   T33] audit: type=1804 audit(1758555585.925:6): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7612" name="/newroot/103/cgroup.controllers" dev="tmpfs" ino=536 res=1 errno=0
[  408.401635][T23669] netlink: 'syz.0.7615': attribute type 83 has an invalid length.
[  408.413153][   T33] audit: type=1800 audit(1758555585.945:7): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7612" name="cgroup.controllers" dev="tmpfs" ino=536 res=0 errno=0
[  408.587511][T23683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.618088][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  408.733979][T23689] lo speed is unknown, defaulting to 1000
[  409.371791][T23725] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7640'.
[  409.654596][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  409.670545][T23742] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7646'.
[  409.673857][T23742] nbd: couldn't find a device at index 0
[  409.940089][T23756] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7653'.
[  410.348630][T23795] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7672'.
[  410.352751][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7672'.
[  410.357049][T23795] netlink: 'syz.0.7672': attribute type 1 has an invalid length.
[  410.411743][T23800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7674'.
[  410.423756][T23802] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7676'.
[  410.565552][T23810] netlink: 'syz.4.7679': attribute type 12 has an invalid length.
[  410.694621][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  410.748818][T23826] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7687'.
[  410.790451][T23830] batadv_slave_1: entered promiscuous mode
[  410.793239][T23829] batadv_slave_1: left promiscuous mode
[  410.908202][T23838] sctp: [Deprecated]: syz.0.7693 (pid 23838) Use of struct sctp_assoc_value in delayed_ack socket option.
[  410.908202][T23838] Use struct sctp_sack_info instead
[  410.978409][T23844] tipc: Failed to remove unknown binding: 66,1,1/0:2627298241/2627298243
[  410.982708][T23844] tipc: Failed to remove unknown binding: 66,1,1/0:2627298241/2627298243
[  410.985547][T23844] tipc: Failed to remove unknown binding: 66,1,1/0:2627298241/2627298243
[  410.998513][T23846] netlink: 'syz.0.7697': attribute type 9 has an invalid length.
[  411.100966][T23850] netlink: 'syz.4.7699': attribute type 4 has an invalid length.
[  411.205449][T23860] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.227813][   T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  411.231644][   T13] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  411.237484][   T13] bond0: now running without any active interface!
[  411.424999][T23875] netlink: 'syz.5.7711': attribute type 2 has an invalid length.
[  411.479799][T23879] netlink: 'syz.5.7713': attribute type 1 has an invalid length.
[  411.482933][T23879] netlink: 'syz.5.7713': attribute type 1 has an invalid length.
[  411.713615][T23897] bridge1: entered promiscuous mode
[  411.717716][T23897] bridge1: entered allmulticast mode
[  411.727165][T23897] team0: Port device bridge1 added
[  411.734622][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  412.011543][T23921] delete_channel: no stack
[  412.066804][T23926] netlink: 'syz.0.7735': attribute type 19 has an invalid length.
[  412.071193][T23926] netlink: 'syz.0.7735': attribute type 19 has an invalid length.
[  412.774703][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  413.226101][T23948] tipc: Started in network mode
[  413.227805][T23948] tipc: Node identity ac14142f, cluster identity 4711
[  413.230434][T23948] tipc: New replicast peer: 0.0.0.0
[  413.233538][T23948] tipc: Enabled bearer <udp:syz2>, priority 26
[  413.236667][T23948] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  413.789809][T23994] netlink: 'syz.0.7764': attribute type 1 has an invalid length.
[  413.798505][T23994] netlink: 'syz.0.7764': attribute type 6 has an invalid length.
[  413.814569][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  414.162525][T24015] lo speed is unknown, defaulting to 1000
[  414.202191][T24030] __nla_validate_parse: 7 callbacks suppressed
[  414.202203][T24030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7781'.
[  414.208308][T24030] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  414.211326][T24030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.322553][T24041] netlink: 'syz.4.7786': attribute type 1 has an invalid length.
[  414.326258][T24041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.353469][  T793] tipc: Node number set to 2886997039
[  414.696625][T24071] netlink: 209572 bytes leftover after parsing attributes in process `syz.0.7801'.
[  414.860405][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  415.896382][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  416.618054][T24083] pimreg3: entered allmulticast mode
[  416.698176][T24091] netlink: 468 bytes leftover after parsing attributes in process `syz.0.7810'.
[  416.916240][T24103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7816'.
[  416.934682][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  417.475821][T24130] netlink: 296 bytes leftover after parsing attributes in process `syz.5.7827'.
[  417.558358][T24125] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7825'.
[  417.565939][T24125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.857863][T24152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7837'.
[  417.860970][T24152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7837'.
[  417.867023][T24152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7837'.
[  417.901246][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7839'.
[  418.113398][T24180] erspan0: entered promiscuous mode
[  418.293438][T24197] syz.0.7858 (24197) used obsolete PPPIOCDETACH ioctl
[  418.353199][T24201] lo speed is unknown, defaulting to 1000
[  418.771564][T24230] openvswitch: netlink: IP tunnel TTL not specified.
[  419.351694][T24271] __nla_validate_parse: 7 callbacks suppressed
[  419.351719][T24271] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7893'.
[  419.428872][T24272] lo speed is unknown, defaulting to 1000
[  419.620188][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7895'.
[  419.673593][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7896'.
[  419.677633][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7896'.
[  419.904074][T24291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7901'.
[  419.923235][T24291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7901'.
[  420.349740][T24315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7911'.
[  420.969403][T24326] nbd: couldn't find a device at index 0
[  421.029533][T24332] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7916'.
[  421.041987][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7916'.
[  421.048214][T24332] netdevsim netdevsim4 netdevsim2: left allmulticast mode
[  421.051481][T24332] netdevsim netdevsim4 netdevsim2: left promiscuous mode
[  421.054545][T24332] bridge0: port 3(netdevsim2) entered disabled state
[  421.060381][T24332] bridge_slave_1: left allmulticast mode
[  421.062895][T24332] bridge_slave_1: left promiscuous mode
[  421.065986][T24332] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.072203][T24332] bridge_slave_0: left allmulticast mode
[  421.077299][T24332] bridge_slave_0: left promiscuous mode
[  421.079951][T24332] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.103869][T24332] vlan2 (unregistering): left allmulticast mode
[  421.110996][T24332] bridge0 (unregistering): left allmulticast mode
[  421.113812][T24332] vlan2 (unregistering): left promiscuous mode
[  421.116870][T24332] bridge0 (unregistering): left promiscuous mode
[  421.120894][T24332] bridge1: port 1(vlan2) entered disabled state
[  421.309162][T24347] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7923'.
[  421.657535][ T6203] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  422.771260][T24421] erspan0: left promiscuous mode
[  422.831902][T24421] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.835294][T24421] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.968133][T24421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.979886][T24421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.115917][T24421] bridge1: left promiscuous mode
[  423.117760][T24421] bridge1: left allmulticast mode
[  423.133363][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.137823][T24439] syzkaller0: tun_chr_ioctl cmd 1074812118
[  423.150224][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.156424][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.160616][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.218378][T24443] netlink: 'syz.5.7966': attribute type 8 has an invalid length.
[  423.229985][T24443] bond0: entered promiscuous mode
[  423.232088][T24443] bond_slave_0: entered promiscuous mode
[  423.235579][T24443] bond_slave_1: entered promiscuous mode
[  423.239997][T24443] bond0: left promiscuous mode
[  423.241912][T24443] bond_slave_0: left promiscuous mode
[  423.252103][T24443] bond_slave_1: left promiscuous mode
[  423.603635][T24468] netlink: 'syz.0.7975': attribute type 3 has an invalid length.
[  424.400082][T24480] __nla_validate_parse: 5 callbacks suppressed
[  424.400102][T24480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7979'.
[  424.615810][T24498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  424.708896][T24500] syzkaller0: entered promiscuous mode
[  424.711379][T24500] syzkaller0: entered allmulticast mode
[  424.716989][T24504] netlink: 'syz.0.7991': attribute type 10 has an invalid length.
[  424.720060][T24504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7991'.
[  424.723667][T24504] dummy0: entered promiscuous mode
[  424.732339][T24504] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  425.181684][   T97] block nbd1: Possible stuck request ffff888020e80000: control (read@0,1024B). Runtime 180 seconds
[  425.195503][   T97] block nbd1: Possible stuck request ffff888020e80200: control (read@1024,1024B). Runtime 180 seconds
[  425.200493][   T97] block nbd1: Possible stuck request ffff888020e80400: control (read@2048,1024B). Runtime 180 seconds
[  425.205226][   T97] block nbd1: Possible stuck request ffff888020e80600: control (read@3072,1024B). Runtime 180 seconds
[  425.425776][ T5294] udevd[5294]: worker [13381] /devices/virtual/block/nbd1 timeout; kill it
[  425.429552][ T5294] udevd[5294]: seq 15593 '/devices/virtual/block/nbd1' killed
[  426.955707][T24516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7996'.
[  426.959101][T24520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7999'.
[  427.066854][T24530] syzkaller1: entered promiscuous mode
[  427.069118][T24530] syzkaller1: entered allmulticast mode
[  427.280689][T24550] Bluetooth: MGMT ver 1.23
[  428.121085][T24584] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  428.129873][T24584] syzkaller0: entered promiscuous mode
[  428.132670][T24584] syzkaller0: entered allmulticast mode
[  428.155700][T24588] bridge_slave_0: left allmulticast mode
[  428.160250][T24588] bridge_slave_0: left promiscuous mode
[  428.162191][T24588] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.166531][T24588] bridge_slave_1: left allmulticast mode
[  428.168821][T24588] bridge_slave_1: left promiscuous mode
[  428.171278][T24588] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.181474][T24588] bond0: (slave bond_slave_0): Releasing backup interface
[  428.189647][T24588] bond0: (slave bond_slave_1): Releasing backup interface
[  428.196839][T24588] team0: Port device team_slave_0 removed
[  428.201757][T24588] team0: Port device team_slave_1 removed
[  428.209669][T24588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.215436][T24588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.223612][T24588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  428.471135][T24613] netlink: 'syz.4.8041': attribute type 13 has an invalid length.
[  428.474158][T24613] netlink: 'syz.4.8041': attribute type 17 has an invalid length.
[  428.587100][T24613] 8021q: adding VLAN 0 to HW filter on device team0
[  428.596283][T24613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  428.693229][T24617] lo speed is unknown, defaulting to 1000
[  428.999247][T24634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.428161][T24664] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8065'.
[  429.430472][T24662] lo speed is unknown, defaulting to 1000
[  430.687555][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8084'.
[  431.032425][T24740] lo speed is unknown, defaulting to 1000
[  431.056234][T24749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8100'.
[  431.499208][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8113'.
[  431.530747][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  431.530854][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8113'.
[  431.535897][ T5894] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  431.544727][ T5894] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  431.548198][ T5894] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  431.682138][ T5744] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  431.762000][T24797] netlink: 'syz.4.8120': attribute type 10 has an invalid length.
[  431.764568][T24797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8120'.
[  431.782437][T24797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.808784][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8123'.
[  431.922189][T24812] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  431.978018][T24821] sctp: [Deprecated]: syz.0.8130 (pid 24821) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.978018][T24821] Use struct sctp_sack_info instead
[  431.995023][T24822] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  432.241138][T24843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8142'.
[  432.480048][T24863] netlink: 'syz.5.8151': attribute type 1 has an invalid length.
[  432.483328][T24863] netlink: 'syz.5.8151': attribute type 1 has an invalid length.
[  432.548743][T24869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.552106][T24869] syzkaller0: entered promiscuous mode
[  432.555622][T24869] syzkaller0: entered allmulticast mode
[  432.578616][T24869] tipc: Resetting bearer <eth:syzkaller0>
[  432.582787][T24868] tipc: Resetting bearer <eth:syzkaller0>
[  432.600773][T24868] tipc: Disabling bearer <eth:syzkaller0>
[  432.625808][T24873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8156'.
[  433.359666][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8174'.
[  433.739370][T24932] : renamed from bond_slave_0
[  433.808032][T24935] tipc: Started in network mode
[  433.810077][T24935] tipc: Node identity 76f5e727daf, cluster identity 4711
[  433.812950][T24935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  433.829057][T24935] syzkaller0: entered promiscuous mode
[  433.832835][T24935] syzkaller0: entered allmulticast mode
[  433.840700][T24935] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  433.867489][T24935] tipc: Resetting bearer <eth:syzkaller0>
[  433.883748][T24934] tipc: Resetting bearer <eth:syzkaller0>
[  433.900485][T24934] tipc: Disabling bearer <eth:syzkaller0>
[  434.110752][T24957] wg1: entered promiscuous mode
[  434.112774][T24957] wg1: entered allmulticast mode
[  434.139101][T24956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.280635][T24971] netlink: 'syz.0.8202': attribute type 6 has an invalid length.
[  434.667655][ T5911] IPVS: starting estimator thread 0...
[  434.757012][T24995] IPVS: using max 50 ests per chain, 120000 per kthread
[  434.796700][T25001] __nla_validate_parse: 5 callbacks suppressed
[  434.796711][T25001] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8216'.
[  435.069476][T25017] lo speed is unknown, defaulting to 1000
[  435.125688][T25020] netlink: 'syz.0.8224': attribute type 12 has an invalid length.
[  435.128752][T25020] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.8224'.
[  435.568733][T25055] lo speed is unknown, defaulting to 1000
[  435.570901][T25059] xt_bpf: check failed: parse error
[  435.659171][T25066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8245'.
[  435.662699][T25066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8245'.
[  435.979841][T25082] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.8252'.
[  436.288670][T25100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8261'.
[  436.768120][T25128] 8021q: adding VLAN 0 to HW filter on device bond7
[  436.898463][T25140] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  437.197661][T25159] netlink: 'syz.0.8285': attribute type 1 has an invalid length.
[  437.201146][T25159] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8285'.
[  437.815228][T25176] netlink: 'syz.4.8293': attribute type 1 has an invalid length.
[  437.818270][T25176] netlink: 'syz.4.8293': attribute type 3 has an invalid length.
[  437.821302][T25176] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8293'.
[  437.825384][T25176] NCSI netlink: No device for ifindex 246
[  437.867648][T25178] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8294'.
[  438.164004][T25190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8298'.
[  438.257406][T25194] netlink: 'syz.4.8300': attribute type 9 has an invalid length.
[  438.315754][T25196] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  438.319105][T25196] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  439.253916][T25283] sctp: [Deprecated]: syz.0.8342 (pid 25283) Use of struct sctp_assoc_value in delayed_ack socket option.
[  439.253916][T25283] Use struct sctp_sack_info instead
[  439.382517][T25278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.397199][T25293] netlink: 'syz.0.8346': attribute type 1 has an invalid length.
[  439.399749][T25293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.494207][T25278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.583988][T25278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.662625][T25278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.764529][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.784912][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.811669][ T5744] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.828794][ T5744] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.953319][T25310] team0: Device ipvlan2 failed to register rx_handler
[  440.156962][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.160187][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.215271][T25332] __nla_validate_parse: 8 callbacks suppressed
[  440.215288][T25332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8366'.
[  440.362766][T25345] netlink: 'syz.4.8372': attribute type 1 has an invalid length.
[  440.368023][T25345] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8372'.
[  440.499401][T25357] sctp: [Deprecated]: syz.4.8377 (pid 25357) Use of struct sctp_assoc_value in delayed_ack socket option.
[  440.499401][T25357] Use struct sctp_sack_info instead
[  440.620931][T25367] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8382'.
[  440.668036][T25371] netlink: 'syz.5.8384': attribute type 1 has an invalid length.
[  440.671396][T25371] netlink: 'syz.5.8384': attribute type 2 has an invalid length.
[  440.678828][T25371] netlink: 'syz.5.8384': attribute type 1 has an invalid length.
[  440.682873][T25371] netlink: 'syz.5.8384': attribute type 2 has an invalid length.
[  441.583988][T25419] netlink: 'syz.0.8403': attribute type 1 has an invalid length.
[  441.586756][T25419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8403'.
[  441.648771][T25421] sch_fq: defrate 0 ignored.
[  441.803209][T25425] netlink: 'syz.5.8404': attribute type 13 has an invalid length.
[  441.807993][T25425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8404'.
[  441.882888][T25435] netlink: 'syz.5.8408': attribute type 1 has an invalid length.
[  441.887158][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8408'.
[  441.890035][T25435] netlink: 45 bytes leftover after parsing attributes in process `syz.5.8408'.
[  441.977021][T25445] netlink: 'syz.4.8414': attribute type 7 has an invalid length.
[  441.979473][T25445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8414'.
[  442.011633][T25445] 8021q: adding VLAN 0 to HW filter on device bond1
[  442.014247][T25445] bridge0: port 1(bond1) entered blocking state
[  442.017121][T25445] bridge0: port 1(bond1) entered disabled state
[  442.019319][T25445] bond1: entered allmulticast mode
[  442.023708][T25445] bridge0: port 1(bond1) entered blocking state
[  442.025910][T25445] bridge0: port 1(bond1) entered forwarding state
[  442.032123][  T152] bridge0: port 1(bond1) entered disabled state
[  442.062997][T25450] geneve2: entered promiscuous mode
[  442.065468][T25450] geneve2: entered allmulticast mode
[  442.069087][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 56966 - 0
[  442.075466][   T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 40610 - 0
[  442.080361][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 56966 - 0
[  442.084630][   T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 40610 - 0
[  442.087520][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 56966 - 0
[  442.090285][   T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 40610 - 0
[  442.093278][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 56966 - 0
[  442.107083][   T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 40610 - 0
[  442.332434][T25466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8423'.
[  442.389849][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8423'.
[  442.934876][T25490] nft_compat: unsupported protocol 0
[  443.141546][T25510] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  443.151589][T25509] syzkaller1: entered promiscuous mode
[  443.161130][T25509] syzkaller1: entered allmulticast mode
[  443.620968][T25544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.378588][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  444.659246][T25629] openvswitch: netlink: Flow actions attr not present in new flow.
[  444.807714][T25641] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  445.083857][T25666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  445.273229][T25685] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  445.485806][T25703] openvswitch: netlink: Missing valid actions attribute.
[  445.488789][T25703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.570843][T25705] lo speed is unknown, defaulting to 1000
[  445.827854][   T33] audit: type=1804 audit(1758555623.375:8): pid=25715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8525" name="/newroot/419/x000000000000000500000000000000000000005" dev="tmpfs" ino=2132 res=1 errno=0
[  445.838290][   T33] audit: type=1800 audit(1758555623.375:9): pid=25715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8525" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2132 res=0 errno=0
[  446.598627][T25761] __nla_validate_parse: 11 callbacks suppressed
[  446.598642][T25761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8547'.
[  446.678861][T25766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8549'.
[  446.682310][T25766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8549'.
[  447.117249][T25787] validate_nla: 3 callbacks suppressed
[  447.117268][T25787] netlink: 'syz.0.8559': attribute type 11 has an invalid length.
[  448.139782][T25803] batadv_slave_0: entered promiscuous mode
[  448.143274][T25803] batadv_slave_0: left promiscuous mode
[  448.224076][T25809] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8570'.
[  449.128665][T25857] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  449.131814][T25857] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  449.227790][T25863] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8595'.
[  449.280298][T25869] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8598'.
[  449.331758][T25874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.360566][T25877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8602'.
[  449.363467][T25877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8602'.
[  449.367736][T25877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8602'.
[  449.398375][T25879] netlink: 'syz.5.8604': attribute type 8 has an invalid length.
[  449.591486][T25899] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  449.691028][T25905] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8616'.
[  449.706974][T25905] IPv6: sit1: Disabled Multicast RS
[  449.710057][T25905] sit1: entered allmulticast mode
[  449.880773][T25914] netlink: zone id is out of range
[  449.883523][T25914] netlink: zone id is out of range
[  449.895747][T25914] netlink: zone id is out of range
[  449.956256][T25917] netlink: del zone limit has 4 unknown bytes
[  449.980834][T25914] netlink: set zone limit has 4 unknown bytes
[  450.122986][T25930] netlink: 'syz.5.8627': attribute type 1 has an invalid length.
[  450.156168][T25930] bond2: entered promiscuous mode
[  450.158887][T25930] 8021q: adding VLAN 0 to HW filter on device bond2
[  450.182850][T25930] 8021q: adding VLAN 0 to HW filter on device bond3
[  450.188460][T25930] bond2: (slave bond3): making interface the new active one
[  450.191525][T25930] bond3: entered promiscuous mode
[  450.197123][T25930] bond2: (slave bond3): Enslaving as an active interface with an up link
[  450.524050][T25950] netlink: 'syz.5.8634': attribute type 4 has an invalid length.
[  451.455835][T26001] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma?
[  451.697856][T26001] bond0 (unregistering): Released all slaves
[  451.824985][T26022] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  451.829067][T26011] lo speed is unknown, defaulting to 1000
[  451.922793][T26028] netlink: 'syz.5.8669': attribute type 1 has an invalid length.
[  451.945170][T26028] __nla_validate_parse: 6 callbacks suppressed
[  451.945190][T26028] netlink: 208 bytes leftover after parsing attributes in process `syz.5.8669'.
[  452.236540][T26039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.246205][T26039] syzkaller0: entered promiscuous mode
[  452.248355][T26039] syzkaller0: entered allmulticast mode
[  452.273924][T26039] tipc: Resetting bearer <eth:syzkaller0>
[  452.293170][T26038] tipc: Resetting bearer <eth:syzkaller0>
[  452.331278][T26038] tipc: Disabling bearer <eth:syzkaller0>
[  452.347962][T26052] nbd: illegal input index -1
[  452.508576][T26062] tipc: Enabling of bearer <et:g> rejected, media not registered
[  452.647958][T26076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.694771][T26080] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8694'.
[  453.043421][T26091] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8696'.
[  453.050375][T26091] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8696'.
[  453.055425][T26091] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8696'.
[  453.058516][T26091] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8696'.
[  453.586158][T26113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8706'.
[  453.611787][T26115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  453.697167][T26124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8712'.
[  453.708245][T26125] team0: No ports can be present during mode change
[  454.074541][T26158] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  454.078789][T26158] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  454.202067][T26168] syz_tun: entered allmulticast mode
[  454.210738][T26168] dvmrp8: entered allmulticast mode
[  454.223706][T26170] tap0: tun_chr_ioctl cmd 1074025678
[  454.228481][T26170] tap0: group set to 0
[  454.263894][T26168] lo speed is unknown, defaulting to 1000
[  454.278096][T26171] netlink: 'syz.4.8733': attribute type 23 has an invalid length.
[  454.370918][T26167] syz_tun: left allmulticast mode
[  454.373302][T26167] dvmrp8: left allmulticast mode
[  454.770944][T26189] IPv6: sit2: Disabled Multicast RS
[  454.775095][T26189] sit2: entered allmulticast mode
[  455.277080][   T97] block nbd1: Possible stuck request ffff888020e80000: control (read@0,1024B). Runtime 210 seconds
[  455.280719][   T97] block nbd1: Possible stuck request ffff888020e80200: control (read@1024,1024B). Runtime 210 seconds
[  455.285043][   T97] block nbd1: Possible stuck request ffff888020e80400: control (read@2048,1024B). Runtime 210 seconds
[  455.289028][   T97] block nbd1: Possible stuck request ffff888020e80600: control (read@3072,1024B). Runtime 210 seconds
[  455.323174][T26216] bridge5: entered allmulticast mode
[  455.584180][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8765'.
[  455.633537][T26243] Bluetooth: MGMT ver 1.23
[  455.832943][T26261] netlink: 'syz.4.8776': attribute type 11 has an invalid length.
[  455.836628][T26261] netlink: 'syz.4.8776': attribute type 11 has an invalid length.
[  455.839923][T26261] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8776'.
[  456.074658][T26284] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  456.991577][T26347] __nla_validate_parse: 2 callbacks suppressed
[  456.991589][T26347] netlink: 412 bytes leftover after parsing attributes in process `syz.5.8817'.
[  457.291033][T26371] netlink: 'syz.5.8830': attribute type 1 has an invalid length.
[  457.299157][T26371] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8830'.
[  457.303149][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8830'.
[  457.385899][T26381] netlink: 'syz.4.8835': attribute type 5 has an invalid length.
[  457.853962][T26417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8852'.
[  458.112857][T26434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8860'.
[  458.116353][T26436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8861'.
[  458.116786][T26434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8860'.
[  458.664362][T26462] sctp: [Deprecated]: syz.0.8873 (pid 26462) Use of int in maxseg socket option.
[  458.664362][T26462] Use struct sctp_assoc_value instead
[  458.907057][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8879'.
[  458.951790][T26476] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8880'.
[  459.207809][T26489] netlink: 'syz.4.8886': attribute type 1 has an invalid length.
[  459.243648][T26489] bond2: (slave gretap1): making interface the new active one
[  459.261421][T26489] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  459.872513][T26505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8893'.
[  459.911227][T26509] netlink: 'syz.4.8894': attribute type 1 has an invalid length.
[  460.243229][T26529] netlink: 'syz.4.8904': attribute type 2 has an invalid length.
[  460.312499][T26537] netlink: 'syz.4.8907': attribute type 1 has an invalid length.
[  460.948280][T26447] Set syz1 is full, maxelem 65536 reached
[  461.297810][T26617] netlink: 'syz.5.8944': attribute type 10 has an invalid length.
[  461.438301][T26630] netlink: 'syz.0.8950': attribute type 22 has an invalid length.
[  462.184260][T26685] __nla_validate_parse: 9 callbacks suppressed
[  462.205733][T26685] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8977'.
[  462.307370][T26691] netlink: zone id is out of range
[  462.309396][T26691] netlink: zone id is out of range
[  462.311133][T26691] netlink: zone id is out of range
[  462.312916][T26691] netlink: zone id is out of range
[  462.315079][T26691] netlink: zone id is out of range
[  462.317850][T26691] netlink: zone id is out of range
[  462.319952][T26691] netlink: zone id is out of range
[  462.321992][T26691] netlink: zone id is out of range
[  462.324045][T26691] netlink: zone id is out of range
[  462.328850][T26691] netlink: zone id is out of range
[  462.608439][T26709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8988'.
[  462.611641][T26709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8988'.
[  462.800576][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8998'.
[  462.832389][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8999'.
[  463.050576][T26744] lo speed is unknown, defaulting to 1000
[  463.341165][T26767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.349695][T26767] syzkaller0: entered promiscuous mode
[  463.352930][T26767] syzkaller0: entered allmulticast mode
[  463.365500][T26767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  463.388152][T26767] tipc: Resetting bearer <eth:syzkaller0>
[  463.396031][T26766] tipc: Resetting bearer <eth:syzkaller0>
[  463.417903][T26766] tipc: Disabling bearer <eth:syzkaller0>
[  463.510144][T26772] netlink: 'syz.5.9016': attribute type 3 has an invalid length.
[  463.866964][T26796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9028'.
[  463.922420][T26801] delete_channel: no stack
[  464.099956][T26820] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9039'.
[  464.162858][T26826] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  464.171966][T26826] batman_adv: batadv0: Adding interface: gretap1
[  464.177272][T26826] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.188359][T26826] batman_adv: batadv0: Interface activated: gretap1
[  464.464003][T26849] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9053'.
[  464.586545][T26853] netlink: 'syz.5.9054': attribute type 10 has an invalid length.
[  464.601203][T26853] team0: Port device dummy0 added
[  464.676476][T26863] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9057'.
[  465.419809][T26924] netlink: 'syz.0.9079': attribute type 1 has an invalid length.
[  465.973603][T26962] netlink: 'syz.0.9093': attribute type 30 has an invalid length.
[  466.232916][T26980] pim6reg: entered allmulticast mode
[  466.239940][T26980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9103'.
[  466.622230][T27009] nbd: must specify at least one socket
[  466.976943][T27037] netlink: 'syz.5.9130': attribute type 1 has an invalid length.
[  467.018834][T27039] netlink: 'syz.5.9131': attribute type 1 has an invalid length.
[  467.022053][T27039] netlink: 'syz.5.9131': attribute type 3 has an invalid length.
[  467.776862][T27082] __nla_validate_parse: 3 callbacks suppressed
[  467.776881][T27082] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9151'.
[  467.917936][T27097] netlink: 'syz.5.9155': attribute type 9 has an invalid length.
[  468.299471][T27129] netlink: 'syz.0.9172': attribute type 1 has an invalid length.
[  468.309510][T27129] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9172'.
[  469.315804][T27187] netlink: 'syz.5.9198': attribute type 11 has an invalid length.
[  469.318993][T27187] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9198'.
[  469.485220][T27199] net_ratelimit: 13 callbacks suppressed
[  469.485234][T27199] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  469.861841][T27227] openvswitch: netlink: Missing valid actions attribute.
[  469.864618][T27227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.980174][T27236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9222'.
[  470.960231][T27312] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9258'.
[  470.963835][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9258'.
[  471.020365][T27318] rdma_rxe: rxe_newlink: failed to add lo
[  471.202231][T27336] netlink: 'syz.0.9270': attribute type 1 has an invalid length.
[  471.443119][T27357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9275'.
[  472.101185][ T5744] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.105230][ T5744] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.108509][ T5744] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.115412][ T5744] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.579753][T27416] netlink: 'syz.4.9304': attribute type 1 has an invalid length.
[  472.582138][T27416] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9304'.
[  472.913232][T27438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9314'.
[  473.018357][T27445] _Z`Ԁ@: entered promiscuous mode
[  474.858013][T27523] syzkaller0: entered promiscuous mode
[  474.859878][T27523] syzkaller0: entered allmulticast mode
[  475.469387][T27544] netlink: 'syz.5.9361': attribute type 1 has an invalid length.
[  475.609260][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9367'.
[  475.659804][T27558] tipc: Resetting bearer <eth:gre0>
[  475.669297][T27558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  475.771794][ T5911] IPVS: starting estimator thread 0...
[  475.864662][T27568] IPVS: using max 46 ests per chain, 110400 per kthread
[  476.265005][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9379'.
[  476.268170][T27589] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  476.271100][T27589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.323234][T27591] dvmrp1: tun_chr_ioctl cmd 1074812117
[  476.653133][T27601] 8021q: adding VLAN 0 to HW filter on device bond1
[  476.684140][T27601] team0: Port device dummy0 removed
[  476.688030][T27601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  477.037331][T27633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  477.231388][T27650] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9407'.
[  477.257067][T27650] vlan0: entered allmulticast mode
[  477.259182][T27650] gretap0: entered allmulticast mode
[  477.668234][T27675] netlink: 'syz.0.9419': attribute type 10 has an invalid length.
[  477.670743][T27675] netlink: 'syz.0.9419': attribute type 10 has an invalid length.
[  477.948484][T27689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9426'.
[  477.952925][T27689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9426'.
[  477.978038][T27691] netlink: 200 bytes leftover after parsing attributes in process `syz.0.9427'.
[  477.985232][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9427'.
[  478.113993][T27701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.295611][T27711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9436'.
[  478.356071][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9437'.
[  478.862546][T27741] netlink: 732 bytes leftover after parsing attributes in process `syz.5.9450'.
[  478.866598][T27741] netlink: 732 bytes leftover after parsing attributes in process `syz.5.9450'.
[  479.329913][T27765] netlink: 'syz.5.9458': attribute type 13 has an invalid length.
[  479.415020][T22955] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  479.471683][T27765] batman_adv: batadv0: Interface deactivated: gretap1
[  479.495193][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 56966 - 0
[  479.498756][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 40610 - 0
[  479.502349][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 56966 - 0
[  479.515701][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 40610 - 0
[  479.519092][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 56966 - 0
[  479.522636][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 40610 - 0
[  479.543924][T27775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9463'.
[  479.553531][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 56966 - 0
[  479.558893][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 40610 - 0
[  479.752209][T27795] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9472'.
[  479.819543][T27801] netlink: 'syz.4.9474': attribute type 1 has an invalid length.
[  480.725652][T27858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.729492][T27858] syzkaller0: entered promiscuous mode
[  480.731842][T27858] syzkaller0: entered allmulticast mode
[  480.738475][T27858] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  480.791770][T27858] tipc: Resetting bearer <eth:syzkaller0>
[  480.810170][T27858] tipc: Disabling bearer <eth:syzkaller0>
[  481.170427][T27881] netlink: 'syz.0.9505': attribute type 6 has an invalid length.
[  481.178255][T27881] netlink: 'syz.0.9505': attribute type 12 has an invalid length.
[  481.641256][T27920] xt_limit: Overflow, try lower: 271964/0
[  482.720743][T28005] netlink: 'syz.0.9565': attribute type 4 has an invalid length.
[  483.261439][T28028] __nla_validate_parse: 12 callbacks suppressed
[  483.261462][T28028] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9576'.
[  483.378330][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9580'.
[  483.822366][T28067] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9595'.
[  483.858868][T28070] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  483.913784][T28068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9594'.
[  483.993273][   T56] block nbd3: Receive control failed (result -32)
[  484.349794][T28104] netlink: 'syz.5.9610': attribute type 1 has an invalid length.
[  500.118706][T28125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  500.129291][T28125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  500.134063][T28125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  500.141090][T28125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  500.145356][T28125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  500.151154][T28125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  500.154231][T28125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  500.157572][T28125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  500.163247][T28125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  500.167327][T28125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  500.171893][T28125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  500.175128][T28125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  500.178059][T28125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  500.182100][T28125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  500.186220][ T5884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  502.214661][T28127] Bluetooth: hci3: command tx timeout
[  502.294764][T28126] Bluetooth: hci4: command tx timeout
[  502.298364][T28127] Bluetooth: hci5: command tx timeout
[  504.294563][T28127] Bluetooth: hci3: command tx timeout
[  504.374785][T28127] Bluetooth: hci5: command tx timeout
[  504.377046][T28127] Bluetooth: hci4: command tx timeout
[  506.374593][T28126] Bluetooth: hci3: command tx timeout
[  506.456232][T28126] Bluetooth: hci4: command tx timeout
[  506.458382][T28126] Bluetooth: hci5: command tx timeout
[  508.464656][T28127] Bluetooth: hci3: command tx timeout
[  508.534716][T28126] Bluetooth: hci4: command tx timeout
[  508.537172][T28127] Bluetooth: hci5: command tx timeout
[  568.294811][T28127] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  568.541393][T28127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  569.876393][T28125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  569.883423][T28125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  569.887410][T28125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  569.891945][T28125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  569.896052][T28125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  570.374998][T28134] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  571.494543][T28126] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  571.976180][T28125] Bluetooth: hci7: command tx timeout
[  572.335350][T28125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  572.341415][T28125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  572.344637][T28125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  572.347640][T28125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  572.350550][T28125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  573.574499][T28132] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  574.065052][T28125] Bluetooth: hci7: command tx timeout
[  574.384668][T28125] Bluetooth: hci6: command tx timeout
[  576.134720][T28125] Bluetooth: hci7: command tx timeout
[  576.455091][T28125] Bluetooth: hci6: command tx timeout
[  578.214790][T28125] Bluetooth: hci7: command tx timeout
[  578.534743][T28125] Bluetooth: hci6: command tx timeout
[  580.614670][T28125] Bluetooth: hci6: command tx timeout
[  589.454327][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  589.456803][    C1] rcu: 	1-....: (1 GPs behind) idle=2b1c/1/0x4000000000000000 softirq=117982/117988 fqs=4850
[  589.463327][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  589.465522][    C1] rcu: 	 number:    11654          0            0
[  589.467594][    C1] rcu: 	cputime:      465          0        52005   ==> 52490(ms)
[  589.470377][    C1] rcu: 	(t=10500 jiffies g=101781 q=374028 ncpus=2)
[  589.472950][    C1] CPU: 1 UID: 0 PID: 28108 Comm: syz.0.9609 Not tainted syzkaller #0 PREEMPT(full) 
[  589.472964][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  589.472971][    C1] RIP: 0010:debug_smp_processor_id+0xb/0x20
[  589.472989][    C1] Code: 84 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 a0 3e e3 8b <48> c7 c6 e0 3e e3 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90
[  589.472997][    C1] RSP: 0018:ffffc90007646f90 EFLAGS: 00000202
[  589.473005][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88801bba9cc0
[  589.473010][    C1] RDX: ffff88801bba9cc0 RSI: 0000000000000001 RDI: ffffffff8be33ea0
[  589.473015][    C1] RBP: 0000000000000001 R08: ffff88801bba9cc0 R09: 0000000000000002
[  589.473020][    C1] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88812acf5038
[  589.473025][    C1] R13: dffffc0000000000 R14: ffff888128cca400 R15: ffff88802f352478
[  589.473030][    C1] FS:  00007f264b7bf6c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  589.473037][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  589.473042][    C1] CR2: 0000001b34a11ff8 CR3: 000000002f978000 CR4: 00000000000006f0
[  589.473064][    C1] Call Trace:
[  589.473072][    C1]  <TASK>
[  589.473076][    C1]  rcu_is_watching+0x15/0xb0
[  589.473090][    C1]  rcu_read_lock_held+0x15/0x50
[  589.473100][    C1]  qdisc_lookup_rcu+0x32b/0x6d0
[  589.473115][    C1]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  589.473127][    C1]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  589.473139][    C1]  sfq_init+0x1a0f/0x2530
[  589.473163][    C1]  ? __pfx_sfq_init+0x10/0x10
[  589.473172][    C1]  qdisc_create+0x7ac/0xea0
[  589.473183][    C1]  tc_modify_qdisc+0x1538/0x20e0
[  589.473201][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  589.473225][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  589.473235][    C1]  rtnetlink_rcv_msg+0x77c/0xb70
[  589.473246][    C1]  ? __lock_acquire+0xab9/0xd20
[  589.473258][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  589.473266][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  589.473281][    C1]  netlink_rcv_skb+0x208/0x470
[  589.473290][    C1]  ? __lock_acquire+0xab9/0xd20
[  589.473306][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  589.473317][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  589.473336][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  589.473354][    C1]  netlink_unicast+0x82f/0x9e0
[  589.473373][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  589.473384][    C1]  ? netlink_sendmsg+0x642/0xb30
[  589.473395][    C1]  ? skb_put+0x11b/0x210
[  589.473412][    C1]  netlink_sendmsg+0x805/0xb30
[  589.473434][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.473449][    C1]  ? aa_sock_msg_perm+0xf1/0x1d0
[  589.473463][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  589.473479][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.473494][    C1]  __sock_sendmsg+0x21c/0x270
[  589.473510][    C1]  ____sys_sendmsg+0x52d/0x830
[  589.473532][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  589.473592][    C1]  ? import_iovec+0x74/0xa0
[  589.473607][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  589.473618][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  589.473645][    C1]  ? __fget_files+0x2a/0x420
[  589.473651][    C1]  ? __fget_files+0x3a0/0x420
[  589.473663][    C1]  __sys_sendmmsg+0x227/0x430
[  589.473675][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  589.473684][    C1]  ? do_futex+0x333/0x420
[  589.473717][    C1]  ? rcu_is_watching+0x15/0xb0
[  589.473732][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  589.473750][    C1]  do_syscall_64+0xfa/0x3b0
[  589.473762][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  589.473770][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.473778][    C1]  ? exc_page_fault+0x9f/0xf0
[  589.473786][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.473794][    C1] RIP: 0033:0x7f264a98ec29
[  589.473816][    C1] Code: Unable to access opcode bytes at 0x7f264a98ebff.
[  589.473820][    C1] RSP: 002b:00007f264b7bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  589.473829][    C1] RAX: ffffffffffffffda RBX: 00007f264abd6090 RCX: 00007f264a98ec29
[  589.473834][    C1] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009
[  589.473839][    C1] RBP: 00007f264aa11e41 R08: 0000000000000000 R09: 0000000000000000
[  589.473844][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.473848][    C1] R13: 00007f264abd6128 R14: 00007f264abd6090 R15: 00007ffc3ef5f758
[  589.473861][    C1]  </TASK>

VM DIAGNOSIS:
15:42:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000004 RBX=0000000000000001 RCX=0000000000000001 RDX=ffffffff89aa431a
RSI=ffffffff8f5a84a0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000006f48
R8 =ffff888107bcb980 R9 =0000000000000000 R10=0000000000000000 R11=0000000080000102
R12=0000000000000002 R13=ffff88802262dc28 R14=1ffff110044c5b80 R15=ffff88802262dc30
RIP=ffffffff81bfb3a7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055997e3070f8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fe424da7d20
XMM02=0000000000000015 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000011 XMM05=0000000000000000 000000000003bf12
XMM06=0000000000000000 0000000000000017 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03f0
R8 =ffff8881080c0237 R9 =1ffff11021018046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b02923 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f264b7bf6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34a11ff8 CR3=000000002f978000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff823c905c ffffffff823c8fd4
XMM02=ffffffff8958ad2a ffffffff8958ab91 XMM03=ffffffff823c9b24 ffffffff823c99bd
XMM04=ffffffff8133c59e ffffffff8133c59e XMM05=ffffffff8133c59e ffffffff8133c59e
XMM06=ffffffff8133c59e ffffffff8133c59e XMM07=ffffffff8133c59e ffffffff8133c59e
XMM08=09b05207aa61554f 7898be8d6f9a80fa XMM09=0000000000000000 00007f6837012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
