last executing test programs:

1.049637743s ago: executing program 0 (id=1957):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

931.197354ms ago: executing program 0 (id=1965):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty, 0x40000}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)

931.149252ms ago: executing program 0 (id=1966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000000101010100000000000000000a0000930c00198008000200080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004)

870.316443ms ago: executing program 0 (id=1971):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28"], 0xe0}], 0x1}, 0x40040)

821.594762ms ago: executing program 0 (id=1976):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

769.708248ms ago: executing program 0 (id=1979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@remote, 0x0, 0x3c}, 0xa, @in6=@private0, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbfc}, 0x14}, 0x1, 0x2b1e}, 0x2000c000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0)
sendto$inet6(r6, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000080)=0x2, 0x4)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r8, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r8, 0x1)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000005c0)={r10, 0x0, 0x0, 0xfffffffe}, 0x14)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000000c0)={r10, 0x6}, 0x8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_skbedit={0x70, 0x1, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0xffffffffffffffaa, 0x2, {0x0, 0x86, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xea37}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)

479.953391ms ago: executing program 1 (id=1998):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

432.019738ms ago: executing program 1 (id=2000):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0)

431.800543ms ago: executing program 1 (id=2002):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20)

370.536859ms ago: executing program 1 (id=2004):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)

369.8891ms ago: executing program 1 (id=2006):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef0000060003"], 0x24}}, 0x0)

369.636931ms ago: executing program 1 (id=2008):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
write(r4, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

111.258966ms ago: executing program 2 (id=2013):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)

111.15315ms ago: executing program 2 (id=2014):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
getsockopt$ax25_int(r0, 0x101, 0x4, 0x0, &(0x7f0000000400))

50.690951ms ago: executing program 2 (id=2015):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0)

50.492244ms ago: executing program 2 (id=2016):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000)

414.465µs ago: executing program 2 (id=2017):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

0s ago: executing program 2 (id=2018):
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)=0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
socket$inet_sctp(0x2, 0x1, 0x84)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56181' (ED25519) to the list of known hosts.
syzkaller login: [   41.145986][ T5769] cgroup: Unknown subsys name 'net'
[   41.270307][ T5769] cgroup: Unknown subsys name 'cpuset'
[   41.274133][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.544286][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.740922][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.743961][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.746673][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.749668][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.752305][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.792170][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.796295][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.799398][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.802644][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.805036][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.808084][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.810992][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.814057][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.814146][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.820062][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.925582][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   46.038599][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.041132][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.043621][ T5817] bridge_slave_0: entered allmulticast mode
[   46.046454][ T5817] bridge_slave_0: entered promiscuous mode
[   46.069721][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.072157][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.074614][ T5817] bridge_slave_1: entered allmulticast mode
[   46.077455][ T5817] bridge_slave_1: entered promiscuous mode
[   46.083276][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   46.101145][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   46.123605][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.142184][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.183869][ T5817] team0: Port device team_slave_0 added
[   46.194620][ T5817] team0: Port device team_slave_1 added
[   46.221542][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.224017][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.226530][ T5824] bridge_slave_0: entered allmulticast mode
[   46.229581][ T5824] bridge_slave_0: entered promiscuous mode
[   46.246959][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.249591][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.251944][ T5824] bridge_slave_1: entered allmulticast mode
[   46.254635][ T5824] bridge_slave_1: entered promiscuous mode
[   46.271875][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.274256][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.283242][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.294062][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.296504][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.299561][ T5821] bridge_slave_0: entered allmulticast mode
[   46.302338][ T5821] bridge_slave_0: entered promiscuous mode
[   46.305334][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.307636][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.316330][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.326436][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.329913][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.332408][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.334843][ T5821] bridge_slave_1: entered allmulticast mode
[   46.337540][ T5821] bridge_slave_1: entered promiscuous mode
[   46.348966][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.374265][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.378953][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.405369][ T5817] hsr_slave_0: entered promiscuous mode
[   46.408576][ T5817] hsr_slave_1: entered promiscuous mode
[   46.411829][ T5824] team0: Port device team_slave_0 added
[   46.423591][ T5824] team0: Port device team_slave_1 added
[   46.432557][ T5821] team0: Port device team_slave_0 added
[   46.446014][ T5821] team0: Port device team_slave_1 added
[   46.477718][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.480423][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.489335][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.493356][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.495745][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.504942][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.509553][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.511841][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.520358][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.532408][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.534672][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.543965][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.578062][ T5821] hsr_slave_0: entered promiscuous mode
[   46.580810][ T5821] hsr_slave_1: entered promiscuous mode
[   46.583054][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   46.585020][ T5821] Cannot create hsr debugfs directory
[   46.610785][ T5824] hsr_slave_0: entered promiscuous mode
[   46.613101][ T5824] hsr_slave_1: entered promiscuous mode
[   46.615265][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   46.617188][ T5824] Cannot create hsr debugfs directory
[   46.756374][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.775220][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.787225][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.792564][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.819430][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.824365][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.829197][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.833317][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.859061][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.861561][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.864313][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.866740][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.884231][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.890752][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.896323][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.898854][ T5821] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.901372][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.903765][ T5821] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.912552][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.917732][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.930892][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.933839][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.938779][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.941586][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.989168][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.003830][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.020211][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   47.027600][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   47.035261][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.037666][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.046302][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.048797][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.052509][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.054940][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.070187][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.072573][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.091060][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.117607][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.133278][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   47.144399][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.146869][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.156330][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.158859][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.196284][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.240301][ T5821] veth0_vlan: entered promiscuous mode
[   47.244982][ T5821] veth1_vlan: entered promiscuous mode
[   47.253549][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.266228][ T5821] veth0_macvtap: entered promiscuous mode
[   47.270983][ T5821] veth1_macvtap: entered promiscuous mode
[   47.282089][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.287542][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.296372][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.300378][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.303561][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.306670][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.346830][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.351283][ T5817] veth0_vlan: entered promiscuous mode
[   47.357572][ T5817] veth1_vlan: entered promiscuous mode
[   47.395395][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.399741][ T5817] veth0_macvtap: entered promiscuous mode
[   47.403918][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.407073][ T5817] veth1_macvtap: entered promiscuous mode
[   47.415252][ T5824] veth0_vlan: entered promiscuous mode
[   47.429146][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.434996][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.436586][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.437666][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.442921][ T5824] veth1_vlan: entered promiscuous mode
[   47.453258][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.461559][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.474053][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.482459][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.491286][ T5824] veth0_macvtap: entered promiscuous mode
[   47.506928][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.522336][ T5824] veth1_macvtap: entered promiscuous mode
[   47.536342][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.544869][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.561853][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.565423][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.572768][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.577241][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.580593][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.584173][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.618321][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.622006][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.636737][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.642343][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.665057][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.667726][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.687189][ T5889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.700480][ T5890] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.808304][ T5823] Bluetooth: hci0: command tx timeout
[   47.822218][ T5900] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.898847][ T5823] Bluetooth: hci2: command tx timeout
[   47.900943][ T5820] Bluetooth: hci1: command tx timeout
[   48.125351][ T5928] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   48.232537][ T5931] syzkaller0: entered promiscuous mode
[   48.234511][ T5931] syzkaller0: entered allmulticast mode
[   48.406031][ T5938] Bluetooth: MGMT ver 1.23
[   49.076255][ T5944] netlink: 'syz.2.26': attribute type 1 has an invalid length.
[   49.218712][ T5950] IPv6: addrconf: prefix option has invalid lifetime
[   49.549941][ T5981] netlink: 'syz.0.43': attribute type 11 has an invalid length.
[   49.552526][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'.
[   49.581009][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   49.581052][ T5981] netlink: 'syz.0.43': attribute type 11 has an invalid length.
[   49.586524][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'.
[   49.587110][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   49.598136][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   49.601024][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   49.638171][ T5981] Zero length message leads to an empty skb
[   49.702167][ T5993] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   49.714116][ T5996] pim6reg: entered allmulticast mode
[   49.721310][ T5996] pim6reg: left allmulticast mode
[   49.844339][ T5998] netlink: 'syz.2.51': attribute type 10 has an invalid length.
[   49.854005][ T5998] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   49.889449][ T5823] Bluetooth: hci0: command tx timeout
[   49.984677][ T5823] Bluetooth: hci2: command 0x041b tx timeout
[   49.986825][ T5823] Bluetooth: hci1: command tx timeout
[   50.039354][ T5998] syz.2.51 (5998) used greatest stack depth: 19848 bytes left
[   50.113112][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   50.160424][ T6036] team0: entered promiscuous mode
[   50.162316][ T6036] team_slave_0: entered promiscuous mode
[   50.164333][ T6036] team_slave_1: entered promiscuous mode
[   50.166542][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'.
[   50.211567][ T6036] team0 (unregistering): left promiscuous mode
[   50.213761][ T6036] team_slave_0: left promiscuous mode
[   50.215703][ T6036] team_slave_1: left promiscuous mode
[   50.223970][ T6036] team0 (unregistering): Port device team_slave_0 removed
[   50.229134][ T6036] team0 (unregistering): Port device team_slave_1 removed
[   50.277622][ T6045] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   50.382307][ T6055] netlink: 'syz.1.78': attribute type 21 has an invalid length.
[   50.385060][ T6055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.78'.
[   50.614035][ T6085] netlink: 'syz.0.90': attribute type 2 has an invalid length.
[   50.629697][ T6086] tipc: Started in network mode
[   50.631525][ T6086] tipc: Node identity 7a1926344262, cluster identity 4711
[   50.634049][ T6086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.646870][ T6086] syzkaller0: entered promiscuous mode
[   50.649351][ T6086] syzkaller0: entered allmulticast mode
[   50.655736][ T6086] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   50.669078][ T6086] tipc: Resetting bearer <eth:syzkaller0>
[   50.672506][ T6084] tipc: Resetting bearer <eth:syzkaller0>
[   50.681052][ T6084] tipc: Disabling bearer <eth:syzkaller0>
[   50.807702][ T6096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'.
[   50.991550][ T6111] netlink: 'syz.1.98': attribute type 25 has an invalid length.
[   50.994190][ T6111] netlink: 'syz.1.98': attribute type 1 has an invalid length.
[   50.997968][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.049502][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'.
[   51.382065][ T6140] netlink: 4608 bytes leftover after parsing attributes in process `syz.1.111'.
[   51.389614][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'.
[   51.395732][ T6140] team0: entered promiscuous mode
[   51.397546][ T6140] team_slave_0: entered promiscuous mode
[   51.401086][ T6140] team_slave_1: entered promiscuous mode
[   51.404883][ T6140] bond0: entered promiscuous mode
[   51.407038][ T6140] bond_slave_0: entered promiscuous mode
[   51.410482][ T6140] bond_slave_1: entered promiscuous mode
[   51.414283][ T6140] 8021q: adding VLAN 0 to HW filter on device hsr1
[   51.496878][ T6144] tipc: Cannot configure node identity twice
[   51.567129][ T6150] syz.1.116 uses obsolete (PF_INET,SOCK_PACKET)
[   51.978412][ T5820] Bluetooth: hci0: command tx timeout
[   52.048209][ T5820] Bluetooth: hci1: command tx timeout
[   52.051328][ T5823] Bluetooth: hci2: command 0x041b tx timeout
[   52.100447][ T6206] veth0_to_bond: entered allmulticast mode
[   52.390360][ T6240] batadv1: entered promiscuous mode
[   52.392205][ T6240] batadv1: entered allmulticast mode
[   53.451446][ T6334] __nla_validate_parse: 5 callbacks suppressed
[   53.451456][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[   53.611018][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'.
[   54.047855][ T5820] Bluetooth: hci0: command tx timeout
[   54.071784][ T6349] pimreg: entered allmulticast mode
[   54.080943][ T6349] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   54.128599][ T5820] Bluetooth: hci1: command tx timeout
[   54.130425][ T5820] Bluetooth: hci2: command 0x041b tx timeout
[   54.204434][ T6365] netlink: 'syz.2.170': attribute type 5 has an invalid length.
[   54.387281][   T33] audit: type=1800 audit(1754486681.690:2): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="blkio.bfq.time_recursive" dev="tmpfs" ino=264 res=0 errno=0
[   54.768323][ T6394] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   54.770837][    T9] IPVS: starting estimator thread 0...
[   54.889817][ T6398] IPVS: using max 80 ests per chain, 192000 per kthread
[   54.942738][ T6404] openvswitch: netlink: Message has 4 unknown bytes.
[   54.945076][ T6404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.306956][ T6430] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[   55.371224][ T6432] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[   55.403392][ T6432] bond1: entered promiscuous mode
[   55.405526][ T6432] bond1: entered allmulticast mode
[   55.407717][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.416682][ T6432] ip6gretap1: entered promiscuous mode
[   55.418917][ T6432] ip6gretap1: entered allmulticast mode
[   55.421371][ T6432] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   55.518578][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   55.628801][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   55.653360][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   55.700751][ T6449] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   55.885307][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'.
[   56.207914][ T5823] Bluetooth: hci2: command 0x041b tx timeout
[   56.404901][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'.
[   56.456693][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[   56.480691][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'.
[   56.481027][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.490395][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.494487][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.497632][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.527482][ T6471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.219'.
[   56.612855][ T6486] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.226'.
[   56.692685][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'.
[   56.881629][ T6515] openvswitch: netlink: Message has 4 unknown bytes.
[   57.534772][ T6607] bond0: Device is already in use.
[   57.537744][ T6609] tc_dump_action: action bad kind
[   57.538090][   T13] bond1: (slave ip6gretap1): link status up again after 0 ms
[   57.560182][   T13] bond1: (slave ip6gretap1): link status up again after 0 ms
[   57.569403][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   57.618101][ T6617] erspan0: entered promiscuous mode
[   57.620073][ T6617] macvtap1: entered promiscuous mode
[   57.621942][ T6617] macvtap1: entered allmulticast mode
[   57.623777][ T6617] erspan0: entered allmulticast mode
[   57.637191][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.668211][ T6621] bridge_slave_1 (unregistering): left allmulticast mode
[   57.670792][ T6621] bridge_slave_1 (unregistering): left promiscuous mode
[   57.673137][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.680777][ T6617] erspan0: left allmulticast mode
[   57.682665][ T6617] erspan0: left promiscuous mode
[   58.288000][ T5820] Bluetooth: hci2: command 0x041b tx timeout
[   58.749734][ T6709] netlink: 'syz.2.327': attribute type 8 has an invalid length.
[   58.850487][ T6713] __nla_validate_parse: 9 callbacks suppressed
[   58.850497][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'.
[   59.797985][   T12] net_ratelimit: 19 callbacks suppressed
[   59.799058][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   59.827581][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.344'.
[   59.836683][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.344'.
[   59.911182][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.048159][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.090696][ T6769] netlink: 'syz.1.355': attribute type 3 has an invalid length.
[   60.093308][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'.
[   60.157968][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.268097][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.378006][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.384846][ T6795] syz_tun: entered allmulticast mode
[   60.390722][ T6794] syz_tun: left allmulticast mode
[   60.488010][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.597937][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.612594][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'.
[   60.658536][ T6815] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   60.663415][ T6815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   60.687430][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'.
[   60.692169][ T6817] netlink: 'syz.1.379': attribute type 21 has an invalid length.
[   60.708336][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.763363][ T6825] bond0: Unable to set up delay as MII monitoring is disabled
[   60.947451][ T6855] netlink: 'syz.1.396': attribute type 3 has an invalid length.
[   60.951947][ T6855] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.396'.
[   61.055866][ T6876] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[   61.259800][ T6896] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.956468][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[   62.003977][ T6936] tipc: Started in network mode
[   62.005894][ T6936] tipc: Node identity 8665c2cc5149, cluster identity 4711
[   62.008718][ T6936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.013611][ T6936] syzkaller0: entered promiscuous mode
[   62.019715][ T6936] syzkaller0: entered allmulticast mode
[   62.021921][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'.
[   62.032696][ T6936] tipc: Resetting bearer <eth:syzkaller0>
[   62.035865][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[   62.051877][ T6935] tipc: Disabling bearer <eth:syzkaller0>
[   62.062959][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[   62.239131][ T6965] netlink: 'syz.0.438': attribute type 4 has an invalid length.
[   62.261107][ T6965] netlink: 'syz.0.438': attribute type 4 has an invalid length.
[   62.396322][ T6982] dvmrp1: entered allmulticast mode
[   62.399600][ T6982] dvmrp1: left allmulticast mode
[   62.611887][ T6996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.614554][ T6996] syzkaller0: entered promiscuous mode
[   62.616464][ T6996] syzkaller0: entered allmulticast mode
[   62.626500][ T6996] tipc: Resetting bearer <eth:syzkaller0>
[   62.630380][ T6995] tipc: Resetting bearer <eth:syzkaller0>
[   62.635641][ T6995] tipc: Disabling bearer <eth:syzkaller0>
[   62.960862][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.990420][ T7014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.993148][ T7014] syzkaller0: entered promiscuous mode
[   62.995138][ T7014] syzkaller0: entered allmulticast mode
[   63.005477][ T7014] tipc: Resetting bearer <eth:syzkaller0>
[   63.009288][ T7013] tipc: Resetting bearer <eth:syzkaller0>
[   63.015362][ T7013] tipc: Disabling bearer <eth:syzkaller0>
[   63.291663][ T7053] netlink: 'syz.0.474': attribute type 6 has an invalid length.
[   63.477009][ T7083] dummy0: entered allmulticast mode
[   63.596668][ T7099] ieee802154 phy0 wpan0: encryption failed: -22
[   64.231221][ T7192] netlink: 'syz.2.536': attribute type 10 has an invalid length.
[   64.233856][ T7192] __nla_validate_parse: 2 callbacks suppressed
[   64.233863][ T7192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.536'.
[   64.247853][ T7192] veth0_vlan: entered allmulticast mode
[   64.250356][ T7192] bridge0: port 2(veth0_vlan) entered blocking state
[   64.254291][ T7192] bridge0: port 2(veth0_vlan) entered disabled state
[   64.323207][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[   64.330776][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'.
[   64.397443][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'.
[   64.411702][ T7212] vlan2: entered promiscuous mode
[   64.413420][ T7212] bond0: entered promiscuous mode
[   64.415136][ T7212] bond_slave_0: entered promiscuous mode
[   64.418375][ T7212] bond_slave_1: entered promiscuous mode
[   64.420956][ T7212] bridge0: port 3(vlan2) entered blocking state
[   64.423133][ T7212] bridge0: port 3(vlan2) entered disabled state
[   64.425451][ T7212] vlan2: entered allmulticast mode
[   64.427297][ T7212] bond0: entered allmulticast mode
[   64.435476][ T7212] bond_slave_0: entered allmulticast mode
[   64.437439][ T7212] bond_slave_1: entered allmulticast mode
[   64.828225][   T12] net_ratelimit: 34 callbacks suppressed
[   64.828235][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   64.949823][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.057952][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.168437][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.277880][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.388258][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.508030][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.617892][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.818343][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.947942][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.181339][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'.
[   66.196829][ T7356] netlink: 23932 bytes leftover after parsing attributes in process `syz.2.602'.
[   66.254689][ T7350] netlink: 'syz.1.600': attribute type 13 has an invalid length.
[   66.257210][ T7350] netlink: 'syz.1.600': attribute type 17 has an invalid length.
[   66.442914][ T7350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.502857][ T7350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.741864][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'.
[   67.145786][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[   67.152531][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.155614][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[   67.156793][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.162031][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.166894][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.567598][ T7470] netlink: 248 bytes leftover after parsing attributes in process `syz.1.649'.
[   67.576370][ T7470] lo speed is unknown, defaulting to 1000
[   67.580163][ T7470] lo speed is unknown, defaulting to 1000
[   67.582957][ T7470] lo speed is unknown, defaulting to 1000
[   67.668571][    T9] lo speed is unknown, defaulting to 1000
[   67.670857][ T7470] infiniband syz0: set active
[   67.672544][ T7470] infiniband syz0: added lo
[   67.694070][ T7470] RDS/IB: syz0: added
[   67.696698][ T7470] smc: adding ib device syz0 with port count 1
[   67.699077][ T7470] smc:    ib device syz0 port 1 has pnetid 
[   67.701988][    T9] lo speed is unknown, defaulting to 1000
[   67.705003][ T7470] lo speed is unknown, defaulting to 1000
[   67.791693][ T7470] lo speed is unknown, defaulting to 1000
[   67.877203][ T7470] lo speed is unknown, defaulting to 1000
[   68.143361][ T7483] netlink: 'syz.0.654': attribute type 31 has an invalid length.
[   68.225625][ T7493] tipc: MTU too low for tipc bearer
[   68.479178][ T7505] netlink: 'syz.0.664': attribute type 1 has an invalid length.
[   68.481983][ T7505] netlink: 'syz.0.664': attribute type 1 has an invalid length.
[   68.485183][ T7505] block nbd0: shutting down sockets
[   69.014508][    T9] IPVS: starting estimator thread 0...
[   69.039342][ T7533] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   69.097847][ T7531] IPVS: using max 80 ests per chain, 192000 per kthread
[   69.693002][ T7546] syzkaller1: entered promiscuous mode
[   69.694983][ T7546] syzkaller1: entered allmulticast mode
[   69.768326][ T7548] netlink: 'syz.0.682': attribute type 6 has an invalid length.
[   69.938751][ T5832] net_ratelimit: 34 callbacks suppressed
[   69.938762][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.003535][ T7570] lo speed is unknown, defaulting to 1000
[   70.022139][ T7576] __nla_validate_parse: 2 callbacks suppressed
[   70.022148][ T7576] netlink: 68 bytes leftover after parsing attributes in process `syz.1.696'.
[   70.048334][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.157881][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.279254][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.347291][ T7606] netlink: 168 bytes leftover after parsing attributes in process `syz.2.710'.
[   70.404236][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.523981][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.662044][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.801477][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.809072][ T7650] netlink: 'syz.1.729': attribute type 1 has an invalid length.
[   70.815103][ T7650] netlink: 15 bytes leftover after parsing attributes in process `syz.1.729'.
[   70.851590][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.853922][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.908733][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.998722][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[   71.003546][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[   71.007024][ T7672] netlink: 58 bytes leftover after parsing attributes in process `syz.1.738'.
[   71.028144][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.395109][ T7691] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.748'.
[   71.873835][ T7695] netlink: 96 bytes leftover after parsing attributes in process `syz.2.750'.
[   72.003467][ T7707] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.123322][    T9] IPVS: starting estimator thread 0...
[   72.219463][ T7728] IPVS: using max 79 ests per chain, 189600 per kthread
[   72.595002][ T7774] vlan3: entered promiscuous mode
[   72.829124][ T7788] sctp: [Deprecated]: syz.1.792 (pid 7788) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.829124][ T7788] Use struct sctp_sack_info instead
[   72.860844][ T7790] : renamed from pim6reg1
[   73.142815][ T7815] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   73.156615][ T7815] bridge_slave_0: left allmulticast mode
[   73.158927][ T7815] bridge_slave_0: left promiscuous mode
[   73.161314][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.165400][ T7815] bridge_slave_1: left allmulticast mode
[   73.167348][ T7815] bridge_slave_1: left promiscuous mode
[   73.170193][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.175460][ T7815] bond0: (slave bond_slave_0): Releasing backup interface
[   73.182130][ T7815] bond_slave_0: left promiscuous mode
[   73.184088][ T7815] bond_slave_0: left allmulticast mode
[   73.187960][ T7815] bond0: (slave bond_slave_1): Releasing backup interface
[   73.191937][ T7815] bond_slave_1: left promiscuous mode
[   73.193794][ T7815] bond_slave_1: left allmulticast mode
[   73.201538][ T7815] team0: Port device team_slave_0 removed
[   73.209680][ T7815] team0: Port device team_slave_1 removed
[   73.212038][ T7815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.214553][ T7815] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.218821][ T7815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.221370][ T7815] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.236770][ T7815] vlan2: left allmulticast mode
[   73.243097][ T7815] bond0: left allmulticast mode
[   73.244928][ T7815] bridge0: port 3(vlan2) entered disabled state
[   73.261160][ T7821] netlink: 'syz.0.805': attribute type 10 has an invalid length.
[   73.270085][ T7821] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   73.273022][ T7821] bond0: (slave wlan1): refused to change device type
[   73.302495][ T7823] netlink: 'syz.1.807': attribute type 1 has an invalid length.
[   73.350709][ T7823] bond1: (slave gretap1): making interface the new active one
[   73.354111][ T7823] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   73.472566][ T5832] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   73.500517][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.816'.
[   73.539007][ T7848] netlink: 'syz.1.817': attribute type 3 has an invalid length.
[   73.979148][  T970] cfg80211: failed to load regulatory.db
[   74.057669][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'.
[   74.307338][ T7884] lo speed is unknown, defaulting to 1000
[   74.733721][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.754228][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.792102][ T7906] IPv6: Can't replace route, no match found
[   74.971990][ T7924] lo speed is unknown, defaulting to 1000
[   74.997861][ T5832] net_ratelimit: 33 callbacks suppressed
[   74.997870][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.148655][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.267933][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.318668][ T7944] netlink: 'syz.0.855': attribute type 1 has an invalid length.
[   75.321294][ T7944] __nla_validate_parse: 3 callbacks suppressed
[   75.321300][ T7944] netlink: 172 bytes leftover after parsing attributes in process `syz.0.855'.
[   75.377896][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.497958][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.617933][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.667323][ T7958] netlink: 9 bytes leftover after parsing attributes in process `syz.1.862'.
[   75.676226][ T7958] 0: renamed from hsr0 (while UP)
[   75.685117][ T7958] 0: entered allmulticast mode
[   75.686752][ T7958] hsr_slave_0: entered allmulticast mode
[   75.694935][ T7958] hsr_slave_1: entered allmulticast mode
[   75.697119][ T7958] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   75.728152][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.733450][ T7966] sock: sock_timestamping_bind_phc: sock not bind to device
[   75.811520][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.828615][  T970] lo speed is unknown, defaulting to 1000
[   75.849279][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.970935][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   75.995042][ T8000] netlink: 'syz.2.882': attribute type 29 has an invalid length.
[   76.236423][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[   76.343481][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'.
[   76.372449][ T8040] netlink: 'syz.0.898': attribute type 4 has an invalid length.
[   76.376639][ T8040] netlink: 152 bytes leftover after parsing attributes in process `syz.0.898'.
[   76.384124][ T8037] hsr_slave_1 (unregistering): left promiscuous mode
[   76.405257][ T8040] : renamed from bond0 (while UP)
[   76.631909][ T8074] netlink: 'syz.1.909': attribute type 1 has an invalid length.
[   76.728934][ T8085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.920'.
[   77.599364][ T8145] vlan0: entered promiscuous mode
[   77.786044][ T8155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.791275][ T8155] syzkaller0: entered promiscuous mode
[   77.793493][ T8155] syzkaller0: entered allmulticast mode
[   77.815342][ T8155] tipc: Resetting bearer <eth:syzkaller0>
[   77.821193][ T8154] tipc: Resetting bearer <eth:syzkaller0>
[   77.832552][ T8154] tipc: Disabling bearer <eth:syzkaller0>
[   77.897104][ T8160] netlink: 64 bytes leftover after parsing attributes in process `syz.0.956'.
[   78.161942][ T8179] bridge0: entered promiscuous mode
[   78.340098][ T8198] netlink: 'syz.1.973': attribute type 2 has an invalid length.
[   78.707664][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[   78.883925][ T8272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'.
[   78.961640][ T8288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1005'.
[   79.053965][ T8296] lo speed is unknown, defaulting to 1000
[   79.186460][ T8297] lo speed is unknown, defaulting to 1000
[   80.090153][ T5832] net_ratelimit: 38 callbacks suppressed
[   80.090162][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.210080][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.339961][ T8400] veth1: entered promiscuous mode
[   80.342586][ T8400] bridge2: entered promiscuous mode
[   80.345030][ T8400] hsr0: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[   80.349910][ T8400] hsr0: entered promiscuous mode
[   80.371238][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.441766][ T8413] netlink: 'syz.0.1056': attribute type 2 has an invalid length.
[   80.482965][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.588813][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.599172][ T8429] __nla_validate_parse: 5 callbacks suppressed
[   80.599181][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'.
[   80.699142][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.710832][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'.
[   80.721730][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'.
[   80.787588][ T8454] lo speed is unknown, defaulting to 1000
[   80.809463][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.934027][ T8467] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1081'.
[   80.948899][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   80.994874][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'.
[   81.058411][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.129706][ T8484] smc: net device bond0 applied user defined pnetid SYZ2
[   81.191936][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.284237][ T8512] gtp1: entered promiscuous mode
[   81.292339][ T8512] gtp1: entered allmulticast mode
[   81.340630][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1105'.
[   81.441190][ T8529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1109'.
[   81.649388][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout
[   81.651481][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   81.674128][ T8560] netlink: 'syz.2.1121': attribute type 11 has an invalid length.
[   81.759691][ T8564] tipc: Started in network mode
[   81.764895][ T8564] tipc: Node identity c2c68f2c9651, cluster identity 4711
[   81.772238][ T8564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.779655][ T8564] syzkaller0: entered promiscuous mode
[   81.785157][ T8564] syzkaller0: entered allmulticast mode
[   81.808802][ T8564] tipc: Resetting bearer <eth:syzkaller0>
[   81.815253][ T8563] tipc: Resetting bearer <eth:syzkaller0>
[   81.822880][ T8563] tipc: Disabling bearer <eth:syzkaller0>
[   82.826054][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1141'.
[   82.955088][ T8623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1150'.
[   83.037086][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'.
[   83.050079][ T8631] bond4: entered promiscuous mode
[   83.052051][ T8631] 8021q: adding VLAN 0 to HW filter on device bond4
[   83.062364][ T8631] 8021q: adding VLAN 0 to HW filter on device bond4
[   83.064844][ T8631] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   83.069104][ T8631] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   83.108687][ T8633] 8021q: adding VLAN 0 to HW filter on device bond4
[   83.264617][ T8642] netlink: 'syz.2.1157': attribute type 13 has an invalid length.
[   83.267294][ T8642] netlink: 'syz.2.1157': attribute type 17 has an invalid length.
[   83.303517][ T8642] dummy0: left allmulticast mode
[   83.307512][ T5832] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   83.347636][ T8641] lo speed is unknown, defaulting to 1000
[   83.487897][ T5820] Bluetooth: hci2: command 0x041b tx timeout
[   83.935102][ T8684] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   84.030456][ T8690] lo speed is unknown, defaulting to 1000
[   84.071276][ T8692] netlink: 'syz.2.1176': attribute type 10 has an invalid length.
[   84.074070][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.082078][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.084471][ T8692] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.089272][ T8692] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   84.193947][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.196515][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.204119][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.206683][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.242280][ T8699] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.250820][ T8699] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   85.030543][ T8725] netlink: 'syz.2.1187': attribute type 9 has an invalid length.
[   85.103585][ T8735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.107266][ T8735] tipc: Resetting bearer <eth:syzkaller0>
[   85.112397][ T8733] tipc: Disabling bearer <eth:syzkaller0>
[   85.158176][ T5832] net_ratelimit: 32 callbacks suppressed
[   85.158185][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.278395][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.400237][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.508333][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.608123][ T8801] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   85.611078][ T8801] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   85.615207][ T8801] __nla_validate_parse: 10 callbacks suppressed
[   85.615214][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'.
[   85.623147][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'.
[   85.625446][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.626383][ T8801] netlink: 'syz.1.1217': attribute type 19 has an invalid length.
[   85.738806][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.857905][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   85.967987][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.078204][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.578287][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.687185][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[   87.487895][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   87.490637][ T8965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.493394][ T8965] syzkaller0: entered promiscuous mode
[   87.495449][ T8965] syzkaller0: entered allmulticast mode
[   87.504713][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1287'.
[   87.510552][ T8965] tipc: Resetting bearer <eth:syzkaller0>
[   87.516724][ T8964] tipc: Resetting bearer <eth:syzkaller0>
[   87.524442][ T8964] tipc: Disabling bearer <eth:syzkaller0>
[   87.970475][ T9038] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1318'.
[   88.885346][ T9076] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1336'.
[   89.397365][ T9107] netlink: 'syz.2.1350': attribute type 1 has an invalid length.
[   89.414327][ T9107] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[   89.420319][ T9107] bond5: (slave vxcan3): Error -95 calling set_mac_address
[   89.814372][ T9133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.820464][ T9133] syzkaller0: entered promiscuous mode
[   89.827567][ T9133] syzkaller0: entered allmulticast mode
[   89.849118][ T9133] tipc: Resetting bearer <eth:syzkaller0>
[   89.852526][ T9132] tipc: Resetting bearer <eth:syzkaller0>
[   89.860728][ T9132] tipc: Disabling bearer <eth:syzkaller0>
[   89.879107][ T9137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.882806][ T9137] syzkaller0: entered promiscuous mode
[   89.884701][ T9137] syzkaller0: entered allmulticast mode
[   89.894741][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'.
[   89.898879][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'.
[   89.901993][ T9137] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[   89.906124][ T9137] tipc: Resetting bearer <eth:syzkaller0>
[   89.915583][ T9136] tipc: Resetting bearer <eth:syzkaller0>
[   89.932513][ T9136] tipc: Disabling bearer <eth:syzkaller0>
[   90.046688][ T9156] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1369'.
[   90.050948][ T9152] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1369'.
[   90.167889][   T13] net_ratelimit: 34 callbacks suppressed
[   90.167900][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.277836][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.387987][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.507891][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.617908][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.728076][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.810208][ T9166] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   90.838579][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   90.912659][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'.
[   90.915730][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'.
[   91.008325][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.037268][ T9197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.118280][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.172742][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1398'.
[   91.202005][ T9225] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[   91.230886][ T9231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1404'.
[   91.383683][ T9249] netlink: 'syz.2.1412': attribute type 3 has an invalid length.
[   91.545192][ T9266] syz_tun: entered allmulticast mode
[   92.963074][ T9360] lo speed is unknown, defaulting to 1000
[   93.337058][ T9365] lo speed is unknown, defaulting to 1000
[   93.375636][ T9367] bridge3: entered promiscuous mode
[   93.377926][ T9367] bridge3: entered allmulticast mode
[   93.858661][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'.
[   93.866201][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'.
[   93.873926][ T9415] netlink: 'syz.0.1484': attribute type 13 has an invalid length.
[   93.876639][ T9415] netlink: 'syz.0.1484': attribute type 12 has an invalid length.
[   94.762088][ T9427] rdma_rxe: rxe_newlink: failed to add lo
[   94.785473][ T9424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.187278][ T9484] bridge0: entered allmulticast mode
[   95.227931][ T5832] net_ratelimit: 32 callbacks suppressed
[   95.227940][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.264194][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[   95.316490][ T9496] netlink: 'syz.0.1522': attribute type 4 has an invalid length.
[   95.347922][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.458831][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.568442][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.677996][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.787884][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   95.897895][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   96.007881][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   96.118628][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   96.142993][ T9549] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   96.146411][ T9548] IPVS: stopping backup sync thread 9549 ...
[   96.150272][ T9548] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1547'.
[   96.154775][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1547'.
[   96.159362][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1547'.
[   96.227905][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   96.341923][ T9556] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1550'.
[   96.389317][ T9560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   96.396181][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'.
[   96.402280][ T9556] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.405515][ T9556] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.447879][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   96.834565][ T9604] netlink: 'syz.2.1573': attribute type 21 has an invalid length.
[   96.837166][ T9604] IPv6: NLM_F_CREATE should be specified when creating new route
[   96.842321][ T9604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.844768][ T9604] IPv6: NLM_F_CREATE should be set when creating new route
[   96.847232][ T9604] IPv6: NLM_F_CREATE should be set when creating new route
[   96.849751][ T9604] IPv6: NLM_F_CREATE should be set when creating new route
[   96.872967][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'.
[   96.927045][ T9614] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1577'.
[   97.194947][ T9644] lo speed is unknown, defaulting to 1000
[   98.294063][ T9688] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1607'.
[   98.387033][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'.
[   98.396564][ T9705] veth1_macvtap: left promiscuous mode
[   99.046438][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'.
[   99.264571][ T9760] lo speed is unknown, defaulting to 1000
[   99.556067][ T9777] netlink: 'syz.0.1647': attribute type 10 has an invalid length.
[   99.561231][ T9777] dummy0: entered promiscuous mode
[   99.562982][ T9777] dummy0: entered allmulticast mode
[   99.565186][ T9777] bridge0: port 1(dummy0) entered blocking state
[   99.567502][ T9777] bridge0: port 1(dummy0) entered disabled state
[   99.571489][ T9777] bridge0: port 1(dummy0) entered blocking state
[   99.573652][ T9777] bridge0: port 1(dummy0) entered forwarding state
[   99.914474][ T9822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.917302][ T9822] syzkaller0: entered promiscuous mode
[   99.919626][ T9822] syzkaller0: entered allmulticast mode
[   99.923542][ T9821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.926741][ T9821] syzkaller0: entered promiscuous mode
[   99.930350][ T9821] syzkaller0: entered allmulticast mode
[   99.942130][ T9822] tipc: Resetting bearer <eth:syzkaller0>
[   99.951695][ T9819] tipc: Resetting bearer <eth:syzkaller0>
[   99.968627][ T9819] tipc: Disabling bearer <eth:syzkaller0>
[   99.980525][ T9821] tipc: Resetting bearer <eth:syzkaller0>
[   99.986325][ T9820] tipc: Resetting bearer <eth:syzkaller0>
[  100.007922][ T9820] tipc: Disabling bearer <eth:syzkaller0>
[  100.072057][ T9835] blkio.reset_stats is deprecated
[  100.292353][ T9874] lo speed is unknown, defaulting to 1000
[  100.308300][ T5832] net_ratelimit: 41 callbacks suppressed
[  100.308310][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  100.458038][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  100.569028][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  100.718360][ T5848] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  100.837969][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  100.912302][ T9941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.914987][ T9941] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  100.917578][ T9941] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  100.921693][ T9941] tipc: Resetting bearer <eth:syzkaller0>
[  100.929849][ T9941] tipc: Resetting bearer <eth:syzkaller0>
[  100.948638][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  100.975021][ T9947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.068342][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.178307][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.288378][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.398251][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.918714][   T24] tipc: Node number set to 1419218732
[  102.225992][ T9992] __nla_validate_parse: 7 callbacks suppressed
[  102.226002][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1740'.
[  102.420508][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1746'.
[  102.955183][T10044] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  103.123043][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'.
[  103.132029][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'.
[  103.158848][T10074] netlink: 'syz.2.1775': attribute type 1 has an invalid length.
[  103.164961][T10076] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1774'.
[  103.627644][T10137] smc: net device bond0 erased user defined pnetid SYZ2
[  103.666273][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'.
[  103.673058][T10139] bond_slave_0: entered promiscuous mode
[  103.675157][T10139] bond_slave_1: entered promiscuous mode
[  103.677059][T10139] bridge0: entered promiscuous mode
[  103.679084][T10139] macvtap1: entered promiscuous mode
[  103.680857][T10139] bond0: entered promiscuous mode
[  103.682697][T10139] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  103.685216][T10139] macvtap1: entered allmulticast mode
[  103.686987][T10139] bond0: entered allmulticast mode
[  103.690243][T10139] bond_slave_0: entered allmulticast mode
[  103.692093][T10139] bond_slave_1: entered allmulticast mode
[  103.694028][T10139] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  103.696375][T10139] bridge0: entered allmulticast mode
[  103.698885][T10139] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  103.708989][T10139] bond0: left allmulticast mode
[  103.710631][T10139] bond_slave_0: left allmulticast mode
[  103.712446][T10139] bond_slave_1: left allmulticast mode
[  103.714260][T10139] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  103.716472][T10139] bridge0: left allmulticast mode
[  103.718275][T10139] bond0: left promiscuous mode
[  103.720014][T10139] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  103.722492][T10139] bond_slave_0: left promiscuous mode
[  103.724703][T10139] bond_slave_1: left promiscuous mode
[  103.726522][T10139] bridge0: left promiscuous mode
[  104.162572][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'.
[  104.165668][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'.
[  104.293307][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'.
[  104.386492][T10195] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1825'.
[  105.082009][T10245] bridge0: port 1(dummy0) entered disabled state
[  105.199413][T10252] netlink: 'syz.0.1852': attribute type 2 has an invalid length.
[  105.259924][T10254] netlink: 'syz.0.1853': attribute type 13 has an invalid length.
[  105.262529][T10254] netlink: 'syz.0.1853': attribute type 17 has an invalid length.
[  105.289359][T10254] bridge0: left promiscuous mode
[  105.291184][T10254] bridge0: left allmulticast mode
[  105.294408][T10254] 8021q: adding VLAN 0 to HW filter on device 
[  105.299399][T10254] dummy0: left promiscuous mode
[  105.301167][T10254] dummy0: left allmulticast mode
[  105.335991][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.358351][   T13] net_ratelimit: 35 callbacks suppressed
[  105.358361][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  105.393611][T10253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.398436][T10266] netlink: 'syz.2.1859': attribute type 6 has an invalid length.
[  105.468939][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  105.487653][T10274] erspan0: entered promiscuous mode
[  105.579807][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  105.636210][T10288] openvswitch: netlink: Missing key (keys=40, expected=80)
[  105.688668][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  105.797873][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  105.813988][T10307] netlink: 'syz.2.1878': attribute type 3 has an invalid length.
[  105.908583][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  105.917716][T10254] syz.0.1853 (10254) used greatest stack depth: 19208 bytes left
[  106.027949][ T5832] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  106.138304][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  106.249286][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  107.011476][T10431] netlink: 'syz.2.1935': attribute type 7 has an invalid length.
[  107.041716][T10438] syzkaller1: tun_chr_ioctl cmd 1074025673
[  107.315814][T10467] __nla_validate_parse: 11 callbacks suppressed
[  107.315823][T10467] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1951'.
[  107.326903][T10467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  107.591535][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1966'.
[  107.734136][T10528] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  107.734185][T10527] IPVS: stopping backup sync thread 10528 ...
[  107.747225][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1979'.
[  107.756000][T10527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1979'.
[  107.769949][ T5820] Bluetooth: hci2: link tx timeout
[  107.771801][ T5820] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.814487][T10539] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1979'.
[  107.878527][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'.
[  107.881424][T10552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1990'.
[  107.889227][T10552] bridge0: port 2(vlan2) entered blocking state
[  107.891622][T10552] bridge0: port 2(vlan2) entered disabled state
[  107.894147][T10552] vlan2: entered allmulticast mode
[  107.895980][T10552] bridge0: entered allmulticast mode
[  107.903152][T10552] vlan2: left allmulticast mode
[  107.904849][T10552] bridge0: left allmulticast mode
[  108.026545][T10571] netlink: 'syz.2.1999': attribute type 1 has an invalid length.
[  108.031420][T10571] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1999'.
[  108.049026][T10574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2000'.
[  108.088228][T10580] DL<Y: renamed from lo (while UP)
[  108.151625][T10590] lo speed is unknown, defaulting to 1000
[  108.426519][T10611] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2015'.
[  108.429849][T10611] unsupported nla_type 65024
[  108.474132][T10615] netlink: 'syz.2.2017': attribute type 4 has an invalid length.
[  108.496176][T10617] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  108.504620][T10617] ------------[ cut here ]------------
[  108.506592][T10617] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  108.509777][T10617] WARNING: CPU: 1 PID: 10617 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  108.515011][T10617] Modules linked in:
[  108.517180][T10617] CPU: 1 UID: 0 PID: 10617 Comm: syz.2.2018 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  108.521515][T10617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.524792][T10617] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  108.526852][T10617] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 7d ad 8c e8 06 3b a5 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 47 97 e1 f6 90 0f 0b 90 42 80 7c 3d
[  108.533188][T10617] RSP: 0018:ffffc9000179f910 EFLAGS: 00010246
[  108.535192][T10617] RAX: 926bd17af1d78600 RBX: 0000000000000000 RCX: 0000000000080000
[  108.537842][T10617] RDX: ffffc90009919000 RSI: 0000000000004805 RDI: 0000000000004806
[  108.540450][T10617] RBP: ffff88810b201728 R08: 0000000000000003 R09: 0000000000000004
[  108.543037][T10617] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff88810b2029d0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  108.545703][T10617] R13: ffff88810b200d80 R14: 1ffff110216402e5 R15: dffffc0000000000
[  108.548804][T10617] FS:  00007f2613d296c0(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  108.552429][T10617] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.554712][T10617] CR2: 0000001b2fa16ff8 CR3: 00000001102a4000 CR4: 00000000000006f0
[  108.557356][T10617] Call Trace:
[  108.558561][T10617]  <TASK>
[  108.559526][T10617]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  108.561456][T10617]  __ieee80211_link_release_channel+0x33b/0x4a0
[  108.563540][T10617]  ieee80211_if_change_type+0x14c/0x990
[  108.565371][T10617]  ieee80211_change_iface+0xd5/0x510
[  108.567094][T10617]  cfg80211_change_iface+0x795/0xef0
[  108.568968][T10617]  cfg80211_wext_siwmode+0x1db/0x2a0
[  108.570730][T10617]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  108.572651][T10617]  ? full_name_hash+0x92/0xe0
[  108.574270][T10617]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  108.576166][T10617]  ioctl_standard_call+0xcb/0x1b0
[  108.577986][T10617]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  108.579905][T10617]  wext_ioctl_dispatch+0xee/0x410
[  108.581520][T10617]  ? __pfx_ioctl_standard_call+0x10/0x10
[  108.583313][T10617]  wext_handle_ioctl+0x100/0x1c0
[  108.584889][T10617]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  108.586696][T10617]  ? __lock_acquire+0xab9/0xd20
[  108.588481][T10617]  sock_ioctl+0x15f/0x790
[  108.589931][T10617]  ? __pfx_sock_ioctl+0x10/0x10
[  108.591570][T10617]  ? __fget_files+0x2a/0x420
[  108.593094][T10617]  ? __fget_files+0x3a0/0x420
[  108.594585][T10617]  ? __fget_files+0x2a/0x420
[  108.596061][T10617]  ? bpf_lsm_file_ioctl+0x9/0x20
[  108.597702][T10617]  ? __pfx_sock_ioctl+0x10/0x10
[  108.599654][T10617]  __se_sys_ioctl+0xfc/0x170
[  108.601217][T10617]  do_syscall_64+0xfa/0x3b0
[  108.602727][T10617]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.604434][T10617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.606398][T10617]  ? exc_page_fault+0x9f/0xf0
[  108.608639][T10617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.610565][T10617] RIP: 0033:0x7f2612f8ebe9
[  108.611999][T10617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.618933][T10617] RSP: 002b:00007f2613d29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.621713][T10617] RAX: ffffffffffffffda RBX: 00007f26131b5fa0 RCX: 00007f2612f8ebe9
[  108.624644][T10617] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000008
[  108.627198][T10617] RBP: 00007f2613011e19 R08: 0000000000000000 R09: 0000000000000000
[  108.629912][T10617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.632436][T10617] R13: 00007f26131b6038 R14: 00007f26131b5fa0 R15: 00007fffdfb4f3e8
[  108.634950][T10617]  </TASK>
[  108.635990][T10617] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  108.638421][T10617] CPU: 1 UID: 0 PID: 10617 Comm: syz.2.2018 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  108.642262][T10617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.645481][T10617] Call Trace:
[  108.646606][T10617]  <TASK>
[  108.647620][T10617]  dump_stack_lvl+0x99/0x250
[  108.649211][T10617]  ? __asan_memcpy+0x40/0x70
[  108.650704][T10617]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.652392][T10617]  ? __pfx__printk+0x10/0x10
[  108.653864][T10617]  panic+0x2db/0x790
[  108.655117][T10617]  ? __pfx_panic+0x10/0x10
[  108.656573][T10617]  __warn+0x31b/0x4b0
[  108.657894][T10617]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  108.659746][T10617]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  108.661591][T10617]  report_bug+0x2be/0x4f0
[  108.662997][T10617]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  108.664883][T10617]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  108.666713][T10617]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  108.668563][T10617]  handle_bug+0x84/0x160
[  108.669931][T10617]  exc_invalid_op+0x1a/0x50
[  108.671413][T10617]  asm_exc_invalid_op+0x1a/0x20
[  108.672979][T10617] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  108.675054][T10617] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 7d ad 8c e8 06 3b a5 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 47 97 e1 f6 90 0f 0b 90 42 80 7c 3d
[  108.681180][T10617] RSP: 0018:ffffc9000179f910 EFLAGS: 00010246
[  108.683114][T10617] RAX: 926bd17af1d78600 RBX: 0000000000000000 RCX: 0000000000080000
[  108.685615][T10617] RDX: ffffc90009919000 RSI: 0000000000004805 RDI: 0000000000004806
[  108.688123][T10617] RBP: ffff88810b201728 R08: 0000000000000003 R09: 0000000000000004
[  108.690573][T10617] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff88810b2029d0
[  108.693057][T10617] R13: ffff88810b200d80 R14: 1ffff110216402e5 R15: dffffc0000000000
[  108.695639][T10617]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  108.697641][T10617]  __ieee80211_link_release_channel+0x33b/0x4a0
[  108.699599][T10617]  ieee80211_if_change_type+0x14c/0x990
[  108.701347][T10617]  ieee80211_change_iface+0xd5/0x510
[  108.703017][T10617]  cfg80211_change_iface+0x795/0xef0
[  108.704726][T10617]  cfg80211_wext_siwmode+0x1db/0x2a0
[  108.706476][T10617]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  108.708349][T10617]  ? full_name_hash+0x92/0xe0
[  108.709846][T10617]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  108.711714][T10617]  ioctl_standard_call+0xcb/0x1b0
[  108.713376][T10617]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  108.715225][T10617]  wext_ioctl_dispatch+0xee/0x410
[  108.716823][T10617]  ? __pfx_ioctl_standard_call+0x10/0x10
[  108.718613][T10617]  wext_handle_ioctl+0x100/0x1c0
[  108.720204][T10617]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  108.721962][T10617]  ? __lock_acquire+0xab9/0xd20
[  108.723583][T10617]  sock_ioctl+0x15f/0x790
[  108.724973][T10617]  ? __pfx_sock_ioctl+0x10/0x10
[  108.726517][T10617]  ? __fget_files+0x2a/0x420
[  108.727979][T10617]  ? __fget_files+0x3a0/0x420
[  108.729516][T10617]  ? __fget_files+0x2a/0x420
[  108.730987][T10617]  ? bpf_lsm_file_ioctl+0x9/0x20
[  108.732567][T10617]  ? __pfx_sock_ioctl+0x10/0x10
[  108.734136][T10617]  __se_sys_ioctl+0xfc/0x170
[  108.735633][T10617]  do_syscall_64+0xfa/0x3b0
[  108.737129][T10617]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.738787][T10617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.740698][T10617]  ? exc_page_fault+0x9f/0xf0
[  108.742199][T10617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.744092][T10617] RIP: 0033:0x7f2612f8ebe9
[  108.745549][T10617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.751643][T10617] RSP: 002b:00007f2613d29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.754276][T10617] RAX: ffffffffffffffda RBX: 00007f26131b5fa0 RCX: 00007f2612f8ebe9
[  108.756848][T10617] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000008
[  108.759330][T10617] RBP: 00007f2613011e19 R08: 0000000000000000 R09: 0000000000000000
[  108.761821][T10617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.764327][T10617] R13: 00007f26131b6038 R14: 00007f26131b5fa0 R15: 00007fffdfb4f3e8
[  108.766842][T10617]  </TASK>
[  108.768508][T10617] Kernel Offset: disabled
[  108.769907][T10617] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:25:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000004 RCX=0000000000000005 RDX=ffffffff81c18595
RSI=ffffffff8e191680 RDI=0000000000000004 RBP=0000001944efb6af RSP=ffffc90003e0e550
R8 =ffff888107203980 R9 =0000000000000020 R10=000000000000001f R11=0000000000000002
R12=dffffc0000000000 R13=ffff88801a490010 R14=ffff88801a490100 R15=000000000217a504
RIP=ffffffff81bfb734 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7145d5d6c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000008 CR3=00000000313a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7145187498 00007f7145187470 XMM03=00007f71451874a8 00007f71451874a0
XMM04=00007f7145ced100 00007f7145187460 XMM05=00007f7145187478 00007f71451874c0
XMM06=00007f71451874b8 00007f71451874b0 XMM07=00007f71451874a8 00007f71451874a0
XMM08=0000000000000000 00007f7145012ee7 XMM09=0000000000000000 00007f7145012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000142be RDI=00000000000142bf RBP=00000000000003f8 RSP=ffffc9000179f070
R8 =ffff888108b10237 R9 =1ffff11021162046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95900 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2613d296c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fa16ff8 CR3=00000001102a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
