last executing test programs:

398.833232ms ago: executing program 2 (id=4376):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd}, @jmp={0x5, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffffffc}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)

398.5577ms ago: executing program 2 (id=4377):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)

331.654433ms ago: executing program 1 (id=4378):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x5)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x9, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80)

331.382344ms ago: executing program 0 (id=4379):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

266.051879ms ago: executing program 1 (id=4380):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24)

265.577002ms ago: executing program 0 (id=4381):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

265.421681ms ago: executing program 1 (id=4382):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000011"], 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

211.184805ms ago: executing program 2 (id=4383):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0)

210.914731ms ago: executing program 0 (id=4384):
r0 = socket$unix(0x1, 0x5, 0x0)
recvmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0)

159.349084ms ago: executing program 1 (id=4385):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
close(r0)

158.978248ms ago: executing program 2 (id=4386):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

158.441306ms ago: executing program 2 (id=4387):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_settings={0x80000000, 0x100009, @sync=0x0}})

158.324572ms ago: executing program 0 (id=4388):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x68}, [@ldst={0x6}]}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180080001"], 0x50}}, 0x0)

60.621427ms ago: executing program 0 (id=4389):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c)

60.077247ms ago: executing program 1 (id=4390):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

874.259µs ago: executing program 2 (id=4391):
r0 = socket$inet(0x10, 0x3, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}}, 0x0)

382.049µs ago: executing program 0 (id=4392):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_emit_ethernet(0xd9, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020800471700cb00660000670190780a01049c0102ac1414aa94047dbb940401000b01906700060000490c000600650005040c0400640101007f000001891fe57f000001ac1414aa000000007f7a000164010102e00000027f000001560c4d936401010200a24614d40b056401010000000000864500000001060200034b05072351daba6c060c32590a112f58e8179b91060356070b0da53affca23b032d20512009100000000a97e4df46ab964606ece01058905e407020702890bf9ac1414aae00000028606ffffffff00004c4066"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000240)=0x2c)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, 0x0, 0xc000001)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "097f00b800", "595786437e882122fba809000000e265", "0200f8c7", "47f47ac2f720d652"}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @llc={0x1a, 0x337, 0xe, 0x20, 0xfa, 0x5, @broadcast}, @can={0x1d, r4}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0xb9, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='team_slave_0\x00', 0x2, 0x3, 0x9d4f})

0s ago: executing program 1 (id=4393):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4)

kernel console output (not intermixed with test programs):

etdevsim0 netdevsim2: renamed from eth2
[   65.906918][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.995904][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.005307][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.021270][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.028902][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.151020][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.177695][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.206393][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   66.212335][ T5236] Bluetooth: hci0: command tx timeout
[   66.212414][ T5857] Bluetooth: hci2: command tx timeout
[   66.214812][ T5852] Bluetooth: hci1: command tx timeout
[   66.220072][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   66.238667][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.241725][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.246784][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.249408][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.268774][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.271237][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.275888][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.278167][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.291534][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.325447][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.366850][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.369570][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.393382][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.404314][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.407210][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.586140][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.597619][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.657202][ T5845] veth0_vlan: entered promiscuous mode
[   66.671725][ T5845] veth1_vlan: entered promiscuous mode
[   66.677356][ T5846] veth0_vlan: entered promiscuous mode
[   66.690323][ T5846] veth1_vlan: entered promiscuous mode
[   66.709812][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.729361][ T5846] veth0_macvtap: entered promiscuous mode
[   66.737110][ T5846] veth1_macvtap: entered promiscuous mode
[   66.741335][ T5845] veth0_macvtap: entered promiscuous mode
[   66.756168][ T5845] veth1_macvtap: entered promiscuous mode
[   66.769231][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.785284][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.797722][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.809302][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.814140][ T5854] veth0_vlan: entered promiscuous mode
[   66.816495][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.819844][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.841387][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.845459][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.857981][ T5854] veth1_vlan: entered promiscuous mode
[   66.870156][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.875548][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.884491][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.898720][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.968112][ T5854] veth0_macvtap: entered promiscuous mode
[   66.994182][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.997432][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.018743][ T5854] veth1_macvtap: entered promiscuous mode
[   67.039158][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.052770][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.073332][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.078248][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.090357][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.109288][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.127923][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.131533][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.137814][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.151050][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.158052][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.174560][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.176080][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.284313][ T5917] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   67.293147][ T5917] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   67.400514][ T3979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.404235][ T3979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.462487][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.465663][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.753583][ T5930] lo speed is unknown, defaulting to 1000
[   67.757114][ T5930] lo speed is unknown, defaulting to 1000
[   67.783534][ T5930] lo speed is unknown, defaulting to 1000
[   68.003906][ T5900] lo speed is unknown, defaulting to 1000
[   68.007183][ T5930] infiniband syz0: set active
[   68.008905][ T5930] infiniband syz0: added lo
[   68.050629][ T5930] RDS/IB: syz0: added
[   68.059565][ T5930] smc: adding ib device syz0 with port count 1
[   68.066985][ T5930] smc:    ib device syz0 port 1 has pnetid 
[   68.076056][ T5899] lo speed is unknown, defaulting to 1000
[   68.081232][ T5930] lo speed is unknown, defaulting to 1000
[   68.296305][ T5852] Bluetooth: hci1: command tx timeout
[   68.296348][ T5857] Bluetooth: hci0: command tx timeout
[   68.300669][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.303534][ T5857] Bluetooth: hci2: command tx timeout
[   68.338280][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.524012][ T5930] lo speed is unknown, defaulting to 1000
[   68.620562][ T5963] netlink: 'syz.0.11': attribute type 13 has an invalid length.
[   68.625021][ T5963] netlink: 'syz.0.11': attribute type 17 has an invalid length.
[   68.686278][ T5963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.730271][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.747556][ T5930] lo speed is unknown, defaulting to 1000
[   68.972078][ T5966] bridge0: port 3(netdevsim2) entered blocking state
[   68.974960][ T5966] bridge0: port 3(netdevsim2) entered disabled state
[   68.977909][ T5966] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   68.984269][ T5966] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[   68.988229][ T5966] bridge0: port 3(netdevsim2) entered blocking state
[   68.991109][ T5966] bridge0: port 3(netdevsim2) entered forwarding state
[   69.130693][ T5970] ieee802154 phy0 wpan0: encryption failed: -22
[   69.250084][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   69.468482][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'.
[   69.481281][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'.
[   69.563975][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   69.564524][ T5997] netlink: 228 bytes leftover after parsing attributes in process `syz.0.27'.
[   69.567488][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   70.349405][   T10] cfg80211: failed to load regulatory.db
[   70.360638][ T6026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.39'.
[   70.376830][ T5857] Bluetooth: hci1: command tx timeout
[   70.384323][ T5857] Bluetooth: hci2: command tx timeout
[   70.773717][ T6048] netlink: 'syz.0.49': attribute type 6 has an invalid length.
[   70.853266][ T6051] netlink: 364 bytes leftover after parsing attributes in process `syz.0.50'.
[   70.856249][ T6051] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   70.988164][ T6056] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   70.993285][ T6056] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   71.099240][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.102973][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.206519][ T6068] netlink: 'syz.0.58': attribute type 29 has an invalid length.
[   71.210272][ T6068] netlink: 'syz.0.58': attribute type 29 has an invalid length.
[   71.300964][ T6074] warning: `syz.0.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.308148][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'.
[   71.311111][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.61'.
[   71.808870][ T6094] Bluetooth: MGMT ver 1.23
[   71.978792][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.452740][ T5857] Bluetooth: hci2: command tx timeout
[   72.452833][ T5852] Bluetooth: hci1: command tx timeout
[   72.787901][ T6141] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET)
[   73.043516][ T6159] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   73.171164][ T6168] sctp: [Deprecated]: syz.0.101 (pid 6168) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.171164][ T6168] Use struct sctp_sack_info instead
[   73.438898][ T6187] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.462638][ T6187] bond0: (slave rose0): Enslaving as an active interface with an up link
[   73.465850][ T6192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.700798][ T6208] bond0: option mode: unable to set because the bond device has slaves
[   73.745065][ T6217] Zero length message leads to an empty skb
[   73.873031][ T6228] netlink: 'syz.2.123': attribute type 10 has an invalid length.
[   73.879474][ T6228] dummy0: entered promiscuous mode
[   73.881393][ T6228] dummy0: entered allmulticast mode
[   73.885628][ T6228] bridge0: port 3(dummy0) entered blocking state
[   73.887686][ T6228] bridge0: port 3(dummy0) entered disabled state
[   73.894708][ T6228] bridge0: port 3(dummy0) entered blocking state
[   73.896774][ T6228] bridge0: port 3(dummy0) entered forwarding state
[   73.967166][ T6233] tipc: Started in network mode
[   73.968808][ T6233] tipc: Node identity e649b412f08f, cluster identity 4711
[   73.971847][ T6233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.974913][ T6233] syzkaller0: entered promiscuous mode
[   73.976658][ T6233] syzkaller0: entered allmulticast mode
[   74.009917][ T6233] tipc: Resetting bearer <eth:syzkaller0>
[   74.023047][ T6232] tipc: Resetting bearer <eth:syzkaller0>
[   74.036625][ T6232] tipc: Disabling bearer <eth:syzkaller0>
[   74.363416][ T6257] __nla_validate_parse: 9 callbacks suppressed
[   74.363432][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'.
[   74.479558][ T6257] lo speed is unknown, defaulting to 1000
[   75.224303][ T6284] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   75.227306][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.141'.
[   75.304013][ T6287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.141'.
[   76.129779][ T6310] netlink: 'syz.2.153': attribute type 21 has an invalid length.
[   76.210681][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   76.215777][  T844] IPVS: starting estimator thread 0...
[   76.303353][ T6317] IPVS: using max 46 ests per chain, 110400 per kthread
[   76.904082][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'.
[   76.936714][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'.
[   76.957231][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'.
[   77.693985][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'.
[   77.745919][ T6428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.813324][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'.
[   77.846423][ T6435] netlink: 52 bytes leftover after parsing attributes in process `syz.2.209'.
[   77.849711][ T6433] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[   77.854546][ T6433] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[   77.858609][ T6433] bridge0: port 3(netdevsim2) entered disabled state
[   77.870798][ T6433] bridge_slave_1: left allmulticast mode
[   77.873654][ T6433] bridge_slave_1: left promiscuous mode
[   77.876245][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.895336][ T6433] bridge_slave_0: left promiscuous mode
[   77.898153][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.931093][ T6494] tipc: Started in network mode
[   78.933790][ T6494] tipc: Node identity 76c41541c772, cluster identity 4711
[   78.939542][ T6494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.947958][ T6494] syzkaller0: entered promiscuous mode
[   78.950473][ T6494] syzkaller0: entered allmulticast mode
[   78.957374][ T6496] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   78.985858][ T6494] tipc: Resetting bearer <eth:syzkaller0>
[   78.988658][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.003927][ T6494] tipc: Resetting bearer <eth:syzkaller0>
[   79.037448][ T6494] tipc: Disabling bearer <eth:syzkaller0>
[   79.731257][ T6547] __nla_validate_parse: 3 callbacks suppressed
[   79.731269][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'.
[   79.736707][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'.
[   79.884652][ T6562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.269'.
[   80.210526][ T6577] IPVS: length: 49 != 24
[   80.291777][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[   80.996295][ T6590] wg0 speed is unknown, defaulting to 1000
[   81.010569][ T6590] wg0 speed is unknown, defaulting to 1000
[   81.020504][ T6590] wg0 speed is unknown, defaulting to 1000
[   81.155352][ T6602] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   81.225544][ T6590] infiniband syz2: set active
[   81.227338][ T5886] wg0 speed is unknown, defaulting to 1000
[   81.229459][ T6590] infiniband syz2: added wg0
[   81.260896][ T6590] RDS/IB: syz2: added
[   81.263584][ T6590] smc: adding ib device syz2 with port count 1
[   81.265920][ T6590] smc:    ib device syz2 port 1 has pnetid 
[   81.268694][ T6590] wg0 speed is unknown, defaulting to 1000
[   81.271258][ T5886] wg0 speed is unknown, defaulting to 1000
[   81.308915][ T6608] Illegal XDP return value 4294967282 on prog  (id 40) dev N/A, expect packet loss!
[   81.395984][ T6590] wg0 speed is unknown, defaulting to 1000
[   81.556012][ T6590] wg0 speed is unknown, defaulting to 1000
[   81.801409][ T6614] netlink: 'syz.2.290': attribute type 10 has an invalid length.
[   81.817797][ T6614] batman_adv: batadv0: Adding interface: team0
[   81.820583][ T6614] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.835130][ T6614] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   81.842303][ T6614] netlink: 'syz.2.290': attribute type 10 has an invalid length.
[   81.845507][ T6614] netlink: 2 bytes leftover after parsing attributes in process `syz.2.290'.
[   81.849205][ T6614] team0: entered promiscuous mode
[   81.851337][ T6614] team_slave_0: entered promiscuous mode
[   81.854081][ T6614] team_slave_1: entered promiscuous mode
[   81.859201][ T6614] 8021q: adding VLAN 0 to HW filter on device team0
[   81.862321][ T6614] batman_adv: batadv0: Interface activated: team0
[   81.864994][ T6614] batman_adv: batadv0: Interface deactivated: team0
[   81.867678][ T6614] batman_adv: batadv0: Removing interface: team0
[   81.871435][ T6614] bridge0: port 4(team0) entered blocking state
[   81.874508][ T6614] bridge0: port 4(team0) entered disabled state
[   81.877224][ T6614] team0: entered allmulticast mode
[   81.879432][ T6614] team_slave_0: entered allmulticast mode
[   81.882046][ T6614] team_slave_1: entered allmulticast mode
[   81.887333][ T6614] bridge0: port 4(team0) entered blocking state
[   81.889997][ T6614] bridge0: port 4(team0) entered forwarding state
[   81.921029][ T6596] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   82.063036][ T6624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'.
[   82.094529][ T6624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'.
[   82.357301][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'.
[   82.646496][ T6664] lo speed is unknown, defaulting to 1000
[   82.729724][ T6674] netlink: 100 bytes leftover after parsing attributes in process `syz.1.317'.
[   82.738416][ T6674] netlink: 100 bytes leftover after parsing attributes in process `syz.1.317'.
[   82.768073][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'.
[   82.927551][ T6664] wg0 speed is unknown, defaulting to 1000
[   82.977180][ T6690] netlink: 'syz.0.325': attribute type 21 has an invalid length.
[   82.980718][ T6690] netlink: 'syz.0.325': attribute type 22 has an invalid length.
[   82.991437][ T6690] netlink: 'syz.0.325': attribute type 23 has an invalid length.
[   82.995001][ T6690] netlink: 'syz.0.325': attribute type 25 has an invalid length.
[   82.998023][ T6690] netlink: 'syz.0.325': attribute type 26 has an invalid length.
[   83.384995][ T6714] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[   83.524173][ T6721] netlink: 'syz.2.337': attribute type 1 has an invalid length.
[   83.606217][ T6725] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   83.818688][ T6741] nft_compat: unsupported protocol 0
[   83.907317][ T6748] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   84.101299][ T6765] vcan0: tx drop: invalid sa for name 0x0000000000000002
[   85.978202][ T5857] Bluetooth: hci0: command tx timeout
[   86.095237][ T6864] lo speed is unknown, defaulting to 1000
[   86.211080][ T6873] __nla_validate_parse: 6 callbacks suppressed
[   86.211094][ T6873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.403'.
[   86.353920][ T6881] tipc: Enabling <ib:lo> not permitted
[   86.356356][ T6881] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   86.361077][ T6864] wg0 speed is unknown, defaulting to 1000
[   86.693191][ T6856] mpoa:mpoad_close: (<unknown>) going down
[   86.795505][ T6901] lo speed is unknown, defaulting to 1000
[   86.862032][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[   86.962620][ T6901] wg0 speed is unknown, defaulting to 1000
[   87.065546][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'.
[   87.072529][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.416'.
[   87.080544][ T6904] netlink: 'syz.1.416': attribute type 13 has an invalid length.
[   87.086813][ T6904] netlink: 'syz.1.416': attribute type 17 has an invalid length.
[   87.189929][ T6904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.196207][ T5886] lo speed is unknown, defaulting to 1000
[   87.737245][ T6934] netlink: 'syz.0.427': attribute type 3 has an invalid length.
[   88.410487][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'.
[   88.509553][ T6982] syzkaller0: entered promiscuous mode
[   88.515121][ T6982] syzkaller0: entered allmulticast mode
[   88.565547][ T6986] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   90.130697][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'.
[   90.270218][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'.
[   90.279233][ T7016] netlink: 'syz.1.460': attribute type 4 has an invalid length.
[   90.347095][ T7020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.351553][ T7020] syzkaller0: entered promiscuous mode
[   90.353950][ T7020] syzkaller0: entered allmulticast mode
[   90.382716][ T7020] tipc: Resetting bearer <eth:syzkaller0>
[   90.384913][ T7018] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   90.390722][ T7018] netlink: 'syz.2.461': attribute type 4 has an invalid length.
[   90.395603][ T7019] tipc: Resetting bearer <eth:syzkaller0>
[   90.410994][ T7019] tipc: Disabling bearer <eth:syzkaller0>
[   90.527550][ T7018] bridge0: port 4(team0) entered disabled state
[   90.529794][ T7018] bridge0: port 3(dummy0) entered disabled state
[   90.531934][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.534031][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.535214][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.684256][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.697046][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.894000][   T47] wg0 speed is unknown, defaulting to 1000
[   90.896546][   T47] syz2: Port: 1 Link DOWN
[   90.898590][   T47] wg0 speed is unknown, defaulting to 1000
[   90.901078][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.906206][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.909089][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.913804][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.961344][ T7044] netlink: 176 bytes leftover after parsing attributes in process `syz.0.471'.
[   90.966429][ T7044] ip6gretap0: entered promiscuous mode
[   90.969101][ T7044] netlink: 176 bytes leftover after parsing attributes in process `syz.0.471'.
[   91.545528][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'.
[   91.633924][ T7085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.489'.
[   91.778638][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'.
[   91.978791][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.496'.
[   92.154611][ T5886] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1
[   92.168241][ T5886] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[   92.245197][ T7111] geneve2: entered allmulticast mode
[   92.461846][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'.
[   92.721406][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.833696][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[   93.549197][ T7068] Set syz1 is full, maxelem 65536 reached
[   93.649977][ T7151] netlink: 'syz.0.517': attribute type 3 has an invalid length.
[   93.652945][ T7151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.517'.
[   93.819289][ T7165] netlink: 52 bytes leftover after parsing attributes in process `syz.0.524'.
[   93.824170][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'.
[   93.946697][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'.
[   94.095507][ T7184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.098858][ T7184] syzkaller0: entered promiscuous mode
[   94.100722][ T7184] syzkaller0: entered allmulticast mode
[   94.117582][ T7184] tipc: Resetting bearer <eth:syzkaller0>
[   94.123230][ T7182] tipc: Resetting bearer <eth:syzkaller0>
[   94.145333][ T7182] tipc: Disabling bearer <eth:syzkaller0>
[   94.424396][ T7206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.428692][ T7206] syzkaller0: entered promiscuous mode
[   94.431169][ T7206] syzkaller0: entered allmulticast mode
[   94.466700][ T7206] tipc: Resetting bearer <eth:syzkaller0>
[   94.472848][ T7205] tipc: Resetting bearer <eth:syzkaller0>
[   94.487505][ T7205] tipc: Disabling bearer <eth:syzkaller0>
[   95.183484][ T7249] Bluetooth: MGMT ver 1.23
[   95.415929][ T7269] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   96.256212][ T7321] netlink: 'syz.0.597': attribute type 1 has an invalid length.
[   96.318231][ T7323] vlan0: entered promiscuous mode
[   96.354864][ T7323] team0: Port device vlan0 added
[   96.602778][ T7343] __nla_validate_parse: 4 callbacks suppressed
[   96.602797][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.606'.
[   97.211164][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.215195][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.355395][ T7375] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.364853][ T7375] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.425719][ T7375] vlan0: left promiscuous mode
[   97.476772][ T7375] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   97.515131][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.520968][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.532610][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.536569][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.625961][ T7399] IPVS: Scheduler module ip_vs_sip not found
[   97.944175][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'.
[   97.944793][ T7417] netlink: 'syz.0.638': attribute type 9 has an invalid length.
[   97.981334][ T7420] netlink: 'syz.0.639': attribute type 6 has an invalid length.
[   98.061360][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'.
[   98.197147][ T7438] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   98.491215][ T7457] IPVS: Scheduler module ip_vs_sip not found
[   98.652927][ T7470] bond0: entered promiscuous mode
[   98.655844][ T7470] bond_slave_0: entered promiscuous mode
[   98.658174][ T7470] bond_slave_1: entered promiscuous mode
[   98.679016][ T7472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.683124][ T7472] syzkaller0: entered promiscuous mode
[   98.684888][ T7472] syzkaller0: entered allmulticast mode
[   98.708554][ T7476] netlink: 'syz.1.664': attribute type 1 has an invalid length.
[   98.729628][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'.
[   98.744143][ T7472] tipc: Resetting bearer <eth:syzkaller0>
[   98.748246][ T7471] tipc: Resetting bearer <eth:syzkaller0>
[   98.770670][ T7471] tipc: Disabling bearer <eth:syzkaller0>
[   98.786366][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'.
[   99.214963][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.225627][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.348448][   T47] lo speed is unknown, defaulting to 1000
[   99.350586][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.353788][   T47] syz0: Port: 1 Link DOWN
[   99.357468][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.382906][   T47] lo speed is unknown, defaulting to 1000
[   99.383018][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.401904][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.046691][ T7568] netlink: 'syz.0.706': attribute type 6 has an invalid length.
[  100.109214][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  100.370359][ T7583] bond0: (slave bond_slave_1): Releasing backup interface
[  100.374079][ T7583] bond_slave_1: left promiscuous mode
[  101.174923][ T7617] tipc: Started in network mode
[  101.176961][ T7617] tipc: Node identity 9afac3f1b6fd, cluster identity 4711
[  101.179901][ T7617] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.187555][ T7617] syzkaller0: entered promiscuous mode
[  101.190036][ T7617] syzkaller0: entered allmulticast mode
[  101.205308][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz.0.732'.
[  101.209272][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz.0.732'.
[  101.266167][ T7617] tipc: Resetting bearer <eth:syzkaller0>
[  101.275694][ T7616] tipc: Resetting bearer <eth:syzkaller0>
[  101.311235][ T7616] tipc: Disabling bearer <eth:syzkaller0>
[  101.414947][ T7638] lo speed is unknown, defaulting to 1000
[  101.465289][ T7642] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.469041][ T7642] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.628346][ T7638] wg0 speed is unknown, defaulting to 1000
[  101.759872][ T7643] netlink: 'syz.2.740': attribute type 13 has an invalid length.
[  101.763678][ T7643] netlink: 'syz.2.740': attribute type 17 has an invalid length.
[  101.816313][ T7643] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.821193][ T7643] 8021q: adding VLAN 0 to HW filter on device team0
[  101.830908][ T7643] bridge0: port 3(dummy0) entered blocking state
[  101.833456][ T7643] bridge0: port 3(dummy0) entered forwarding state
[  101.843667][ T7643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.890363][ T7659] bridge: RTM_NEWNEIGH with invalid ether address
[  101.933540][ T7661] tipc: Can't bind to reserved service type 2
[  102.516385][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[  102.523047][ T7704] netlink: 248 bytes leftover after parsing attributes in process `syz.0.768'.
[  102.526404][ T7704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.768'.
[  102.535487][ T7704] rdma_rxe: rxe_newlink: failed to add lo
[  102.550988][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.558773][ T7704] 8021q: adding VLAN 0 to HW filter on device team0
[  102.565270][ T7704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.643504][ T7711] netlink: 'syz.1.770': attribute type 4 has an invalid length.
[  102.650731][ T7711] netlink: 'syz.1.770': attribute type 4 has an invalid length.
[  102.657381][  T844] lo speed is unknown, defaulting to 1000
[  102.659219][  T844] syz0: Port: 1 Link ACTIVE
[  102.663173][  T844] lo speed is unknown, defaulting to 1000
[  102.720277][ T7715] netlink: 'syz.0.773': attribute type 1 has an invalid length.
[  102.723010][ T7715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.236165][ T7728] netlink: 'syz.2.779': attribute type 10 has an invalid length.
[  103.239168][ T7728] veth0_vlan: left promiscuous mode
[  103.244451][ T7728] veth0_vlan: entered promiscuous mode
[  103.247632][ T7728] team0: Device veth0_vlan failed to register rx_handler
[  103.575353][ T7747] syzkaller0: entered promiscuous mode
[  103.577595][ T7747] syzkaller0: entered allmulticast mode
[  104.853381][ T7757] bridge0: port 3(macsec0) entered blocking state
[  104.864201][ T7757] bridge0: port 3(macsec0) entered disabled state
[  104.868001][ T7757] macsec0: entered allmulticast mode
[  104.879908][ T7757] macsec0: entered promiscuous mode
[  105.073335][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'.
[  105.080511][ T7774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.798'.
[  105.123156][ T7779] tipc: New replicast peer: 255.255.255.255
[  105.125805][ T7779] tipc: Enabled bearer <udp:syz2>, priority 10
[  105.198077][ T7789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.806'.
[  105.212406][ T7786] netlink: 47 bytes leftover after parsing attributes in process `syz.0.804'.
[  105.241411][ T7793] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[  105.347161][ T7797] TCP: TCP_TX_DELAY enabled
[  105.428256][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'.
[  106.009057][ T7820] netlink: 'syz.1.819': attribute type 2 has an invalid length.
[  106.012380][ T7820] netlink: 244 bytes leftover after parsing attributes in process `syz.1.819'.
[  106.204584][ T7832] netlink: 264 bytes leftover after parsing attributes in process `syz.2.823'.
[  106.243178][   T10] tipc: Node number set to 738706417
[  107.065450][ T7849] syzkaller1: entered promiscuous mode
[  107.067720][ T7849] syzkaller1: entered allmulticast mode
[  107.239195][ T7859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.243898][ T7859] syzkaller0: entered promiscuous mode
[  107.245748][ T7859] syzkaller0: entered allmulticast mode
[  107.294132][ T7859] sch_fq: defrate 257 ignored.
[  107.313771][ T7861] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  107.332556][ T7859] tipc: Resetting bearer <eth:syzkaller0>
[  107.348862][ T7861] bridge4: the hash_elasticity option has been deprecated and is always 16
[  107.388033][ T7858] tipc: Resetting bearer <eth:syzkaller0>
[  107.405207][ T7858] tipc: Disabling bearer <eth:syzkaller0>
[  107.425643][ T7867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.433020][ T7867] syzkaller0: entered promiscuous mode
[  107.435326][ T7867] syzkaller0: entered allmulticast mode
[  107.466936][ T7867] tipc: Resetting bearer <eth:syzkaller0>
[  107.479806][ T7866] tipc: Resetting bearer <eth:syzkaller0>
[  107.516669][ T7866] tipc: Disabling bearer <eth:syzkaller0>
[  108.164104][ T7929] __nla_validate_parse: 4 callbacks suppressed
[  108.164126][ T7929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.864'.
[  108.834794][ T7988] lo speed is unknown, defaulting to 1000
[  108.986004][ T8006] netlink: 168 bytes leftover after parsing attributes in process `syz.0.899'.
[  109.025305][ T7988] wg0 speed is unknown, defaulting to 1000
[  109.107567][ T8013] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[  109.111092][ T8013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.841374][ T8043] netlink: 'syz.0.915': attribute type 4 has an invalid length.
[  109.850150][ T8043] netlink: 'syz.0.915': attribute type 4 has an invalid length.
[  109.914960][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'.
[  109.918766][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'.
[  110.383686][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'.
[  110.386515][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'.
[  110.672730][ T8073] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  111.214303][ T8096] netlink: 240 bytes leftover after parsing attributes in process `syz.0.937'.
[  111.260397][ T8098] netlink: 'syz.2.940': attribute type 3 has an invalid length.
[  111.449348][ T8114] syzkaller1: entered promiscuous mode
[  111.454093][ T8114] syzkaller1: entered allmulticast mode
[  111.515915][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'.
[  111.527967][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'.
[  111.543731][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'.
[  111.719437][ T8132] netlink: 'syz.1.956': attribute type 9 has an invalid length.
[  111.722477][ T8132] netlink: 'syz.1.956': attribute type 6 has an invalid length.
[  111.725303][ T8132] netlink: 'syz.1.956': attribute type 7 has an invalid length.
[  111.728234][ T8132] netlink: 'syz.1.956': attribute type 8 has an invalid length.
[  112.062389][ T8165] vlan2: entered promiscuous mode
[  112.064458][ T8165] bridge0: entered promiscuous mode
[  112.066645][ T8165] vlan2: entered allmulticast mode
[  112.068706][ T8165] bridge0: entered allmulticast mode
[  112.166527][ T8172] syzkaller1: entered allmulticast mode
[  112.176770][ T8172] syzkaller1: left allmulticast mode
[  112.294981][ T8175] netlink: 'syz.2.977': attribute type 21 has an invalid length.
[  112.298311][ T8175] netlink: 'syz.2.977': attribute type 22 has an invalid length.
[  112.301589][ T8175] netlink: 'syz.2.977': attribute type 23 has an invalid length.
[  113.028485][ T8205] geneve2: entered promiscuous mode
[  113.030265][ T8205] geneve2: entered allmulticast mode
[  113.040283][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.044319][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.047473][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.050758][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.216925][ T8219] __nla_validate_parse: 6 callbacks suppressed
[  113.216945][ T8219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'.
[  113.221565][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'.
[  113.308430][ T8227] netlink: 'syz.2.1003': attribute type 9 has an invalid length.
[  113.562908][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'.
[  113.566242][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'.
[  113.569199][ T8253] netlink: 'syz.0.1015': attribute type 18 has an invalid length.
[  113.592461][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'.
[  113.741088][ T8263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1019'.
[  113.757604][ T8263] unsupported nlmsg_type 40
[  113.924665][ T8271] pim6reg1: entered promiscuous mode
[  113.926742][ T8271] pim6reg1: entered allmulticast mode
[  114.243892][ T8293] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  114.348635][ T8304] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0
[  114.605314][ T8324] k*]: entered promiscuous mode
[  114.972605][ T8354] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  115.012764][ T8354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1060'.
[  115.157306][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[  115.308274][   T10] lo speed is unknown, defaulting to 1000
[  115.310325][   T10] syz0: Port: 1 Link DOWN
[  115.311941][   T10] lo speed is unknown, defaulting to 1000
[  115.434850][ T8406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.438000][ T8406] syzkaller0: entered promiscuous mode
[  115.439920][ T8406] syzkaller0: entered allmulticast mode
[  115.457178][ T8406] tipc: Resetting bearer <eth:syzkaller0>
[  115.460327][ T8405] tipc: Resetting bearer <eth:syzkaller0>
[  115.483389][ T8405] tipc: Disabling bearer <eth:syzkaller0>
[  115.632701][ T8418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'.
[  115.670301][ T8422] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1089'.
[  116.625184][ T8473] validate_nla: 7 callbacks suppressed
[  116.625209][ T8473] netlink: 'syz.0.1102': attribute type 5 has an invalid length.
[  116.645865][ T8473] geneve2: entered promiscuous mode
[  116.647902][ T8473] geneve2: entered allmulticast mode
[  116.664972][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  116.670370][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  116.675315][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  116.689320][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  117.015343][ T8501] netlink: 'syz.0.1115': attribute type 32 has an invalid length.
[  117.018538][ T8501] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  117.160991][ T8507] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  117.523800][ T8535] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  117.528081][ T5886] IPVS: starting estimator thread 0...
[  117.622411][ T8541] IPVS: using max 61 ests per chain, 146400 per kthread
[  117.855411][ T8569] openvswitch: netlink: Missing valid actions attribute.
[  117.858389][ T8569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.230398][ T8603] __nla_validate_parse: 7 callbacks suppressed
[  118.230416][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1159'.
[  118.457770][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  118.550590][ T8633] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  118.559692][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'.
[  118.563523][ T8633] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  118.608739][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'.
[  118.648197][ T8639] netlink: 'syz.1.1174': attribute type 2 has an invalid length.
[  118.660858][ T8639] : entered promiscuous mode
[  118.775373][ T8647] netlink: 'syz.2.1178': attribute type 7 has an invalid length.
[  119.007892][ T8665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.070923][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  119.194153][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1195'.
[  119.238718][ T8689] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1196'.
[  119.248934][ T8691] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  119.400744][ T3979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.406041][ T3979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.422828][ T8703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'.
[  119.450788][ T8703] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  119.638949][ T8716] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1207'.
[  120.083007][ T8755] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1226'.
[  120.336928][ T8771] trusted_key: syz.2.1233 sent an empty control message without MSG_MORE.
[  120.592402][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  121.496593][ T8803] openvswitch: netlink: Actions may not be safe on all matching packets
[  121.538376][ T8806] netlink: 'syz.1.1247': attribute type 1 has an invalid length.
[  121.540789][ T8806] netlink: 'syz.1.1247': attribute type 4 has an invalid length.
[  121.608530][ T8812] netlink: 'syz.1.1249': attribute type 1 has an invalid length.
[  122.206328][ T8867] sctp: [Deprecated]: syz.1.1270 (pid 8867) Use of int in max_burst socket option.
[  122.206328][ T8867] Use struct sctp_assoc_value instead
[  122.341071][ T8883] syzkaller1: entered promiscuous mode
[  122.348901][ T8883] syzkaller1: entered allmulticast mode
[  123.251565][ T8929] netlink: 'syz.2.1296': attribute type 10 has an invalid length.
[  123.259517][ T8929] macvlan0: entered promiscuous mode
[  123.267280][ T8929] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  123.306384][ T8931] __nla_validate_parse: 6 callbacks suppressed
[  123.306406][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1297'.
[  123.454537][   T33] audit: type=1800 audit(1754746770.887:2): pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1297" name="memory.events" dev="tmpfs" ino=2213 res=0 errno=0
[  123.745628][ T8974] netlink: 'syz.1.1315': attribute type 4 has an invalid length.
[  124.571040][ T9038] ip6tnl2: entered promiscuous mode
[  124.575442][ T9038] ip6tnl2: entered allmulticast mode
[  124.647501][ T5852] Bluetooth: hci2: link tx timeout
[  124.650084][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.659096][ T5857] Bluetooth: hci2: link tx timeout
[  124.660903][ T5857] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.767193][ T9051] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1346'.
[  124.879198][ T9048] vlan2: entered promiscuous mode
[  124.881397][ T9048] bridge0: entered promiscuous mode
[  124.945373][ T9056] syzkaller1: entered promiscuous mode
[  124.947346][ T9056] syzkaller1: entered allmulticast mode
[  124.949226][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'.
[  125.074602][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1355'.
[  125.178905][ T9074] netlink: 'syz.1.1357': attribute type 4 has an invalid length.
[  125.253262][ T9085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.568207][ T9114] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  125.575947][ T9114] batadv_slave_0: entered promiscuous mode
[  125.579361][ T9114] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  125.585907][ T9114] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.592308][ T9114] hsr1: entered promiscuous mode
[  126.593730][ T9178] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  126.691978][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  127.007831][ T9201] netlink: 'syz.1.1411': attribute type 1 has an invalid length.
[  127.053927][ T9203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.057560][ T9203] syzkaller0: entered promiscuous mode
[  127.059958][ T9203] syzkaller0: entered allmulticast mode
[  127.080770][ T9203] tipc: Resetting bearer <eth:syzkaller0>
[  127.088622][ T9202] tipc: Resetting bearer <eth:syzkaller0>
[  127.100561][ T9202] tipc: Disabling bearer <eth:syzkaller0>
[  127.257145][ T9219] netlink: 'syz.2.1420': attribute type 21 has an invalid length.
[  127.435949][ T9236] netlink: 'syz.0.1427': attribute type 83 has an invalid length.
[  127.546394][ T9244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.554277][ T9244] syzkaller0: entered promiscuous mode
[  127.556755][ T9244] syzkaller0: entered allmulticast mode
[  127.576100][ T9244] tipc: Resetting bearer <eth:syzkaller0>
[  127.580438][ T9242] tipc: Resetting bearer <eth:syzkaller0>
[  127.591164][ T9242] tipc: Disabling bearer <eth:syzkaller0>
[  127.776957][ T9261] netlink: 'syz.2.1437': attribute type 1 has an invalid length.
[  127.805859][ T9261] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.829597][ T9261] bond1: (slave gretap1): making interface the new active one
[  127.834687][ T9261] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  127.959537][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1442'.
[  128.117583][ T9277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1445'.
[  128.153809][ T9261] syz.2.1437 (9261) used greatest stack depth: 19944 bytes left
[  128.395003][ T9293] IPVS: Scheduler module ip_vs_sip not found
[  128.397054][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1453'.
[  128.397796][ T9293] IPVS: length: 8 != 446622349272
[  128.400358][ T9296] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1453'.
[  129.024095][ T9347] veth1: mtu greater than device maximum
[  129.076658][ T9353] team0: No ports can be present during mode change
[  129.262263][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'.
[  129.266182][ T9364] netlink: 'syz.0.1482': attribute type 1 has an invalid length.
[  129.269387][ T9364] netlink: 'syz.0.1482': attribute type 2 has an invalid length.
[  129.274406][ T9364] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1482'.
[  129.424168][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1478'.
[  129.752469][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'.
[  129.755568][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'.
[  129.891435][ T9407] veth0_to_bridge: entered promiscuous mode
[  129.896294][ T9407] veth0_to_bridge: left promiscuous mode
[  129.974774][ T9413] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1505'.
[  130.134598][ T9429] syzkaller1: entered promiscuous mode
[  130.135639][ T9430] netlink: 'syz.2.1511': attribute type 10 has an invalid length.
[  130.136867][ T9429] syzkaller1: entered allmulticast mode
[  130.157153][ T9430] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  130.828625][ T9481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.832883][ T9481] syzkaller0: entered promiscuous mode
[  130.835891][ T9481] syzkaller0: entered allmulticast mode
[  130.861421][ T9481] tipc: Resetting bearer <eth:syzkaller0>
[  130.867735][ T9480] tipc: Resetting bearer <eth:syzkaller0>
[  130.879138][ T9480] tipc: Disabling bearer <eth:syzkaller0>
[  131.386742][ T9499] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1539'.
[  131.505800][ T9507] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1543'.
[  131.971087][ T9558] netlink: 'syz.0.1568': attribute type 2 has an invalid length.
[  132.256386][ T9577] netlink: 'syz.1.1576': attribute type 7 has an invalid length.
[  132.417583][ T9591] ieee802154 phy1 wpan1: encryption failed: -22
[  132.422563][ T9591] bond0: left promiscuous mode
[  132.424388][ T9591] bond_slave_0: left promiscuous mode
[  132.455583][ T9593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.501426][ T9593] syzkaller0: entered promiscuous mode
[  132.504091][ T9593] syzkaller0: entered allmulticast mode
[  132.506958][ T9593] tipc: Resetting bearer <eth:syzkaller0>
[  132.525490][ T9592] tipc: Resetting bearer <eth:syzkaller0>
[  132.544355][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.501781][ T5886] tipc: Node number set to 2981500225
[  133.730098][ T9592] tipc: Disabling bearer <eth:syzkaller0>
[  133.969979][ T9636] netlink: 'syz.2.1604': attribute type 4 has an invalid length.
[  133.994022][ T9638] __nla_validate_parse: 3 callbacks suppressed
[  133.994039][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'.
[  134.207621][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'.
[  134.220231][ T9664] erspan0: entered promiscuous mode
[  134.230163][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'.
[  134.273936][ T9670] netlink: 'syz.2.1619': attribute type 4 has an invalid length.
[  134.281843][ T9670] netlink: 'syz.2.1619': attribute type 4 has an invalid length.
[  134.435667][ T9680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1623'.
[  134.750015][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'.
[  134.802689][ T9708] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  134.805900][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  134.814021][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  134.819443][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  134.829892][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  135.468927][ T9736] bridge_slave_0: left allmulticast mode
[  135.675100][ T9742] openvswitch: netlink: Duplicate or invalid key (type 0).
[  135.678004][ T9742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.758502][ T9747] syz.0.1648: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  135.777326][ T9747] CPU: 1 UID: 0 PID: 9747 Comm: syz.0.1648 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  135.777352][ T9747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.777362][ T9747] Call Trace:
[  135.777370][ T9747]  <TASK>
[  135.777377][ T9747]  dump_stack_lvl+0x189/0x250
[  135.777436][ T9747]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.777457][ T9747]  ? __pfx__printk+0x10/0x10
[  135.777481][ T9747]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  135.777500][ T9747]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  135.777519][ T9747]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  135.777538][ T9747]  warn_alloc+0x214/0x310
[  135.777563][ T9747]  ? stack_depot_save_flags+0x40/0x860
[  135.777583][ T9747]  ? __pfx_warn_alloc+0x10/0x10
[  135.777611][ T9747]  ? kasan_save_track+0x4f/0x80
[  135.777630][ T9747]  ? xskq_create+0x56/0x170
[  135.777646][ T9747]  ? xsk_init_queue+0xb0/0x110
[  135.777659][ T9747]  ? xsk_setsockopt+0x4dc/0x8d0
[  135.777672][ T9747]  ? do_sock_setsockopt+0x17c/0x1b0
[  135.777690][ T9747]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  135.777710][ T9747]  ? do_syscall_64+0xfa/0x3b0
[  135.777728][ T9747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.777748][ T9747]  __vmalloc_node_range_noprof+0x125/0x12f0
[  135.777791][ T9747]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  135.777817][ T9747]  ? __kasan_kmalloc+0x93/0xb0
[  135.777838][ T9747]  vmalloc_user_noprof+0xad/0xf0
[  135.777859][ T9747]  ? xskq_create+0xbf/0x170
[  135.777876][ T9747]  xskq_create+0xbf/0x170
[  135.777895][ T9747]  xsk_init_queue+0xb0/0x110
[  135.777912][ T9747]  xsk_setsockopt+0x4dc/0x8d0
[  135.777930][ T9747]  ? __pfx_xsk_setsockopt+0x10/0x10
[  135.777946][ T9747]  ? __pfx_aa_sk_perm+0x10/0x10
[  135.777967][ T9747]  ? aa_sock_opt_perm+0xff/0x1b0
[  135.777989][ T9747]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  135.778005][ T9747]  ? __pfx_xsk_setsockopt+0x10/0x10
[  135.778022][ T9747]  do_sock_setsockopt+0x17c/0x1b0
[  135.778046][ T9747]  __x64_sys_setsockopt+0x13f/0x1b0
[  135.778070][ T9747]  do_syscall_64+0xfa/0x3b0
[  135.778087][ T9747]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.778103][ T9747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.778118][ T9747]  ? exc_page_fault+0x9f/0xf0
[  135.778136][ T9747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.778150][ T9747] RIP: 0033:0x7f93fd98ebe9
[  135.778186][ T9747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.778201][ T9747] RSP: 002b:00007f93fe84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  135.778218][ T9747] RAX: ffffffffffffffda RBX: 00007f93fdbb6090 RCX: 00007f93fd98ebe9
[  135.778230][ T9747] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  135.778239][ T9747] RBP: 00007f93fda11e19 R08: 0000000000000004 R09: 0000000000000000
[  135.778248][ T9747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.778258][ T9747] R13: 00007f93fdbb6128 R14: 00007f93fdbb6090 R15: 00007ffe85466938
[  135.778281][ T9747]  </TASK>
[  135.778288][ T9747] Mem-Info:
[  135.909249][ T9747] active_anon:5288 inactive_anon:0 isolated_anon:0
[  135.909249][ T9747]  active_file:979 inactive_file:38235 isolated_file:0
[  135.909249][ T9747]  unevictable:1771 dirty:274 writeback:0
[  135.909249][ T9747]  slab_reclaimable:9651 slab_unreclaimable:144348
[  135.909249][ T9747]  mapped:18121 shmem:2574 pagetables:894
[  135.909249][ T9747]  sec_pagetables:0 bounce:0
[  135.909249][ T9747]  kernel_misc_reclaimable:0
[  135.909249][ T9747]  free:203454 free_pcp:21137 free_cma:0
[  135.915841][ T9753] xt_limit: Overflow, try lower: 271964/0
[  135.933321][ T9747] Node 0 active_anon:11780kB inactive_anon:0kB active_file:2808kB inactive_file:32608kB unevictable:3548kB isolated(anon):0kB isolated(file):0kB mapped:34740kB dirty:832kB writeback:0kB shmem:5200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4640kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  135.948033][ T9747] Node 1 active_anon:9372kB inactive_anon:0kB active_file:1108kB inactive_file:120332kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37812kB dirty:264kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6960kB pagetables:1396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  135.959537][ T9747] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  135.971216][ T9747] lowmem_reserve[]: 0 811 811 811 811
[  135.974753][ T9747] Node 0 DMA32 free:65152kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11712kB inactive_anon:0kB active_file:2808kB inactive_file:32608kB unevictable:3548kB writepending:832kB present:1556484kB managed:830996kB mlocked:12kB bounce:0kB free_pcp:53968kB local_pcp:33412kB free_cma:0kB
[  135.983338][ T9755] ieee802154 phy1 wpan1: encryption failed: -22
[  135.998954][ T9747] lowmem_reserve[]: 0 0 0 0 0
[  136.000701][ T9747] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.016486][ T9747] lowmem_reserve[]: 0 0 854 854 854
[  136.019083][ T9747] Node 1 Normal free:274416kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9304kB inactive_anon:0kB active_file:1108kB inactive_file:120332kB unevictable:3536kB writepending:264kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30712kB local_pcp:20880kB free_cma:0kB
[  136.038295][ T9747] lowmem_reserve[]: 0 0 0 0 0
[  136.043211][ T9747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  136.048555][ T9747] Node 0 DMA32: 2*4kB (ME) 463*8kB (UE) 186*16kB (U) 77*32kB (UE) 18*64kB (UE) 22*128kB (UM) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 11*4096kB (M) = 65088kB
[  136.057723][ T9747] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  136.067613][ T9747] Node 1 Normal: 756*4kB (UM) 573*8kB (UME) 259*16kB (UME) 500*32kB (UME) 154*64kB (UME) 74*128kB (UM) 12*256kB (UME) 2*512kB (U) 4*1024kB (UM) 7*2048kB (ME) 50*4096kB (UM) = 274408kB
[  136.075220][ T9747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.079132][ T9747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.083009][ T9747] 41788 total pagecache pages
[  136.085072][ T9747] 0 pages in swap cache
[  136.086523][ T9747] Free swap  = 124996kB
[  136.087943][ T9747] Total swap = 124996kB
[  136.089858][ T9747] 786301 pages RAM
[  136.091507][ T9747] 0 pages HighMem/MovableOnly
[  136.094222][ T9747] 241320 pages reserved
[  136.096228][ T9747] 0 pages cma reserved
[  136.379592][ T9780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'.
[  136.497862][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'.
[  136.925206][ T9816] netlink: 'syz.2.1682': attribute type 1 has an invalid length.
[  136.928340][ T9816] netlink: 'syz.2.1682': attribute type 2 has an invalid length.
[  137.976910][ T9877] netlink: 'syz.2.1709': attribute type 1 has an invalid length.
[  137.979493][ T9877] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1709'.
[  137.983717][ T9877] netlink: 'syz.2.1709': attribute type 1 has an invalid length.
[  137.986227][ T9877] netlink: 'syz.2.1709': attribute type 2 has an invalid length.
[  138.015476][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  138.104583][ T9887] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  138.108636][ T9887] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  138.288550][ T9906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1720'.
[  138.845639][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  139.912271][T10015] IPVS: Error connecting to the multicast addr
[  140.047876][T10032] __nla_validate_parse: 1 callbacks suppressed
[  140.047887][T10032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1778'.
[  140.054248][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'.
[  140.057839][T10032] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1778'.
[  140.061383][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1777'.
[  140.539314][T10073] lo speed is unknown, defaulting to 1000
[  140.739029][T10082] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  140.765371][T10073] wg0 speed is unknown, defaulting to 1000
[  141.771330][T10138] netlink: 'syz.2.1824': attribute type 1 has an invalid length.
[  141.776990][T10138] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1824'.
[  141.780349][T10138] netlink: 'syz.2.1824': attribute type 1 has an invalid length.
[  141.785176][T10138] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1824'.
[  141.952478][T10156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1833'.
[  142.185685][T10175] syzkaller0: entered promiscuous mode
[  142.187546][T10175] syzkaller0: entered allmulticast mode
[  142.291802][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  143.506767][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'.
[  143.520297][T10190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'.
[  143.591328][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'.
[  143.675414][T10202] GUP no longer grows the stack in syz.1.1854 (10202): 200000003000-20000000a000 (200000001000)
[  143.702239][T10202] CPU: 1 UID: 0 PID: 10202 Comm: syz.1.1854 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  143.702256][T10202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.702262][T10202] Call Trace:
[  143.702266][T10202]  <TASK>
[  143.702271][T10202]  dump_stack_lvl+0x189/0x250
[  143.702289][T10202]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.702301][T10202]  ? __pfx__printk+0x10/0x10
[  143.702313][T10202]  ? find_vma+0xe7/0x160
[  143.702325][T10202]  ? __lock_acquire+0xab9/0xd20
[  143.702343][T10202]  __get_user_pages+0x24d0/0x2ce0
[  143.702355][T10202]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  143.702386][T10202]  ? rcu_is_watching+0x15/0xb0
[  143.702400][T10202]  __gup_longterm_locked+0xde9/0x1660
[  143.702418][T10202]  ? sanity_check_pinned_pages+0x123a/0x1300
[  143.702435][T10202]  gup_fast_fallback+0x1e6a/0x2010
[  143.702463][T10202]  ? __pfx_gup_fast_fallback+0x10/0x10
[  143.702481][T10202]  ? pin_user_pages_fast+0x4d/0xb0
[  143.702495][T10202]  iov_iter_extract_pages+0x35a/0x5e0
[  143.702509][T10202]  extract_iter_to_sg+0xe46/0x24e0
[  143.702528][T10202]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  143.702573][T10202]  ? __asan_memset+0x22/0x50
[  143.702592][T10202]  af_alg_get_rsgl+0x436/0x810
[  143.702625][T10202]  aead_recvmsg+0x4cc/0x13f0
[  143.702652][T10202]  ? rcu_is_watching+0x15/0xb0
[  143.702673][T10202]  ? __pfx_aead_recvmsg+0x10/0x10
[  143.702685][T10202]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  143.702695][T10202]  ? __pfx_aead_recvmsg+0x10/0x10
[  143.702707][T10202]  sock_recvmsg_nosec+0x186/0x1c0
[  143.702722][T10202]  ____sys_recvmsg+0x3aa/0x460
[  143.702751][T10202]  ? __pfx_____sys_recvmsg+0x10/0x10
[  143.702780][T10202]  ? import_iovec+0x74/0xa0
[  143.702790][T10202]  ___sys_recvmsg+0x1b5/0x510
[  143.702805][T10202]  ? __pfx____sys_recvmsg+0x10/0x10
[  143.702833][T10202]  ? __might_fault+0xb0/0x130
[  143.702847][T10202]  do_recvmmsg+0x307/0x770
[  143.702863][T10202]  ? __pfx_do_recvmmsg+0x10/0x10
[  143.702874][T10202]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  143.702894][T10202]  ? __pfx_do_futex+0x10/0x10
[  143.702912][T10202]  __x64_sys_recvmmsg+0x190/0x240
[  143.702926][T10202]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  143.702938][T10202]  ? __task_pid_nr_ns+0x28/0x470
[  143.702951][T10202]  ? do_syscall_64+0xbe/0x3b0
[  143.702964][T10202]  do_syscall_64+0xfa/0x3b0
[  143.702973][T10202]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.702983][T10202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.702993][T10202]  ? exc_page_fault+0x9f/0xf0
[  143.703003][T10202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.703012][T10202] RIP: 0033:0x7f85a258ebe9
[  143.703021][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.703029][T10202] RSP: 002b:00007f85a07f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  143.703038][T10202] RAX: ffffffffffffffda RBX: 00007f85a27b5fa0 RCX: 00007f85a258ebe9
[  143.703044][T10202] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  143.703049][T10202] RBP: 00007f85a2611e19 R08: 0000000000000000 R09: 0000000000000000
[  143.703054][T10202] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  143.703058][T10202] R13: 00007f85a27b6038 R14: 00007f85a27b5fa0 R15: 00007ffed8cd11e8
[  143.703073][T10202]  </TASK>
[  145.681043][T10283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.292438][T10310] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  146.341243][T10314] netlink: 'syz.0.1904': attribute type 3 has an invalid length.
[  146.345868][T10314] __nla_validate_parse: 2 callbacks suppressed
[  146.345876][T10314] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1904'.
[  146.667118][T10343] netlink: 'syz.1.1918': attribute type 1 has an invalid length.
[  146.688431][T10343] bond4: entered promiscuous mode
[  146.690286][T10343] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.710803][T10343] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.713385][T10343] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  146.717181][T10343] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  146.724529][T10343] bond4: (slave wireguard0): making interface the new active one
[  146.727674][T10343] wireguard0: entered promiscuous mode
[  146.730666][T10343] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  146.747554][T10343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.750041][T10343] IPv6: NLM_F_CREATE should be set when creating new route
[  146.752487][T10343] IPv6: NLM_F_CREATE should be set when creating new route
[  146.756604][T10343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.764116][T10343] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  146.771552][T10343] bond4: (slave wireguard1): Enslaving as a backup interface with an up link
[  147.019692][T10380] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1935'.
[  147.023758][T10380] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  147.092984][T10388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.095467][T10388] IPv6: NLM_F_CREATE should be set when creating new route
[  147.098100][T10388] IPv6: NLM_F_CREATE should be set when creating new route
[  148.371814][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  148.474019][T10449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.483771][T10449] syzkaller0: entered promiscuous mode
[  148.490578][T10449] syzkaller0: entered allmulticast mode
[  148.509001][T10449] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  148.529690][T10449] tipc: Resetting bearer <eth:syzkaller0>
[  148.537508][T10460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.546226][T10446] tipc: Resetting bearer <eth:syzkaller0>
[  148.564390][T10446] tipc: Disabling bearer <eth:syzkaller0>
[  148.649303][T10471] netlink: 'syz.2.1975': attribute type 1 has an invalid length.
[  148.708801][T10469] lo speed is unknown, defaulting to 1000
[  148.836632][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'.
[  148.870808][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'.
[  148.873859][T10497] block nbd0: not configured, cannot reconfigure
[  148.910198][T10469] wg0 speed is unknown, defaulting to 1000
[  149.133602][T10468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.185767][T10509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  149.285909][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1995'.
[  149.322371][T10522] tun0: tun_chr_ioctl cmd 2148045848
[  149.327106][T10522] tun0: tun_chr_ioctl cmd 21731
[  149.336817][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[  149.357055][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'.
[  149.535715][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'.
[  149.569628][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2007'.
[  149.613845][T10548] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2008'.
[  150.184683][T10587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.759079][T10656] netlink: 'syz.1.2060': attribute type 31 has an invalid length.
[  150.874717][T10665] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  151.596469][T10707] __nla_validate_parse: 7 callbacks suppressed
[  151.596480][T10707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2082'.
[  151.601346][T10707] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2082'.
[  151.606803][T10707] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2082'.
[  151.610414][T10707] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  151.803374][T10715] netlink: 'syz.2.2086': attribute type 13 has an invalid length.
[  152.007630][T10731] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2094'.
[  152.299699][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'.
[  152.304268][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'.
[  152.626063][T10782] netlink: 'syz.2.2117': attribute type 1 has an invalid length.
[  152.629304][T10782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.673915][T10785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.676503][T10785] syzkaller0: entered promiscuous mode
[  152.678546][T10785] syzkaller0: entered allmulticast mode
[  152.682875][T10787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2119'.
[  152.708349][T10785] tipc: Resetting bearer <eth:syzkaller0>
[  152.711929][T10784] tipc: Resetting bearer <eth:syzkaller0>
[  152.721533][T10784] tipc: Disabling bearer <eth:syzkaller0>
[  152.726450][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'.
[  153.447907][T10822] netlink: 'syz.0.2134': attribute type 1 has an invalid length.
[  153.451294][T10822] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2134'.
[  153.768078][T10844] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2144'.
[  153.817211][T10847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.820558][T10847] syzkaller0: entered promiscuous mode
[  153.823982][T10847] syzkaller0: entered allmulticast mode
[  153.854406][T10847] tipc: Resetting bearer <eth:syzkaller0>
[  153.859611][T10845] tipc: Resetting bearer <eth:syzkaller0>
[  153.880181][T10845] tipc: Disabling bearer <eth:syzkaller0>
[  154.149611][T10880] netlink: 'syz.1.2162': attribute type 83 has an invalid length.
[  154.533573][T10899] netlink: 'syz.0.2170': attribute type 1 has an invalid length.
[  155.092170][T10925] netlink: 'syz.2.2182': attribute type 1 has an invalid length.
[  155.156661][T10928] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  155.200279][T10935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.399137][T10958] syzkaller1: entered promiscuous mode
[  155.403045][T10958] syzkaller1: entered allmulticast mode
[  155.701990][T10978] syzkaller0: entered promiscuous mode
[  155.704100][T10978] syzkaller0: entered allmulticast mode
[  155.740376][   T33] audit: type=1800 audit(1754746803.167:3): pid=10972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2202" name="cgroup.controllers" dev="tmpfs" ino=3593 res=0 errno=0
[  156.124624][T10999] bond5: entered promiscuous mode
[  156.126797][T10999] bond5: entered allmulticast mode
[  156.129309][T10999] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.177800][T11004] batadv_slave_1: entered promiscuous mode
[  156.194068][T11003] batadv_slave_1: left promiscuous mode
[  156.341343][T11023] sit2: entered promiscuous mode
[  156.737535][T11057] __nla_validate_parse: 10 callbacks suppressed
[  156.737551][T11057] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2241'.
[  156.753506][T11057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'.
[  156.756376][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'.
[  156.784576][T11057] netlink: 'syz.1.2241': attribute type 4 has an invalid length.
[  156.820105][T11071] netlink: 'syz.0.2249': attribute type 12 has an invalid length.
[  157.988779][T11099] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  158.106025][T11107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.119761][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2265'.
[  158.197524][T11114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2267'.
[  158.201484][T11114] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2267'.
[  158.274297][T11116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.277630][T11116] syzkaller0: entered promiscuous mode
[  158.279858][T11116] syzkaller0: entered allmulticast mode
[  158.304545][T11116] tipc: Resetting bearer <eth:syzkaller0>
[  158.312601][T11115] tipc: Resetting bearer <eth:syzkaller0>
[  158.325515][T11115] tipc: Disabling bearer <eth:syzkaller0>
[  158.454046][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'.
[  158.556832][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'.
[  158.713693][T11130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2275'.
[  158.932622][T11148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2284'.
[  159.017628][T11154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.027581][T11154] syzkaller0: entered promiscuous mode
[  159.029655][T11154] syzkaller0: entered allmulticast mode
[  159.038532][T11156] bridge0: entered allmulticast mode
[  159.041544][T11156] macsec0: left allmulticast mode
[  159.046503][T11156] macsec0: left promiscuous mode
[  159.049764][T11156] bridge0: port 3(macsec0) entered disabled state
[  159.062845][T11156] bridge_slave_1: left allmulticast mode
[  159.064937][T11156] bridge_slave_1: left promiscuous mode
[  159.067218][T11156] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.083676][T11156] bridge_slave_0: left allmulticast mode
[  159.086115][T11156] bridge_slave_0: left promiscuous mode
[  159.088559][T11156] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.107937][T11156] bridge0 (unregistering): left allmulticast mode
[  159.187644][T11154] tipc: Resetting bearer <eth:syzkaller0>
[  159.199665][T11152] tipc: Resetting bearer <eth:syzkaller0>
[  159.222533][T11152] tipc: Disabling bearer <eth:syzkaller0>
[  159.345168][T11172] netlink: 'syz.2.2295': attribute type 10 has an invalid length.
[  159.366934][T11174] macsec2: entered promiscuous mode
[  159.371271][T11174] team0: entered promiscuous mode
[  159.379224][T11174] team_slave_0: entered promiscuous mode
[  159.382337][T11174] team_slave_1: entered promiscuous mode
[  159.384738][T11174] vlan0: entered promiscuous mode
[  159.532206][T11188] tun0: tun_chr_ioctl cmd 1074025675
[  159.534081][T11188] tun0: persist enabled
[  159.535623][T11188] tun0: tun_chr_ioctl cmd 1074025675
[  159.537308][T11188] tun0: persist disabled
[  159.975966][T11237] netlink: 'syz.2.2321': attribute type 16 has an invalid length.
[  159.979958][T11237] netlink: 'syz.2.2321': attribute type 17 has an invalid length.
[  160.091031][T11237] bridge0: port 3(dummy0) entered disabled state
[  160.215396][ T5878] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.220186][ T5878] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  160.224242][ T5878] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.227646][ T5878] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  160.231006][ T5878] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.234712][ T5878] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  160.238301][ T5878] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.241790][ T5878] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  160.616086][T11284] openvswitch: netlink: Unknown nsh attribute 0
[  160.618616][T11284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.691436][T11288] netlink: 'syz.1.2348': attribute type 16 has an invalid length.
[  160.796092][T11299] team0: left allmulticast mode
[  160.798009][T11299] team_slave_0: left allmulticast mode
[  160.800405][T11299] team_slave_1: left allmulticast mode
[  160.804908][T11299] team0: left promiscuous mode
[  160.806871][T11299] team_slave_0: left promiscuous mode
[  160.809136][T11299] team_slave_1: left promiscuous mode
[  160.811562][T11299] bridge0: port 4(team0) entered disabled state
[  160.825383][T11299] dummy0: left allmulticast mode
[  160.827427][T11299] dummy0: left promiscuous mode
[  160.829668][T11299] bridge0: port 3(dummy0) entered disabled state
[  160.844862][T11299] bridge_slave_0: left allmulticast mode
[  160.847172][T11299] bridge_slave_0: left promiscuous mode
[  160.850533][T11299] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.858950][T11299] bridge_slave_1: left promiscuous mode
[  160.861456][T11299] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.869204][T11299] bond0: (slave bond_slave_0): Releasing backup interface
[  160.886268][T11299] bond0: (slave bond_slave_1): Releasing backup interface
[  160.899283][T11299] team0: Port device team_slave_0 removed
[  160.904569][T11299] team0: Port device team_slave_1 removed
[  160.907240][T11299] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.913900][T11299] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.919248][T11299] bond0: (slave macvlan0): Releasing backup interface
[  160.924853][T11299] bond0: (slave wlan1): Releasing backup interface
[  160.929449][T11299] bond1: (slave gretap1): Releasing active interface
[  160.937517][T11299] bond2: (slave geneve3): Releasing backup interface
[  161.196189][T11337] netlink: 'syz.2.2365': attribute type 39 has an invalid length.
[  161.216816][ T4591] smc: removing ib device syz2
[  161.685977][T11355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.688946][T11355] syzkaller0: entered promiscuous mode
[  161.690864][T11355] syzkaller0: entered allmulticast mode
[  161.710700][T11355] tipc: Resetting bearer <eth:syzkaller0>
[  161.714552][T11354] tipc: Resetting bearer <eth:syzkaller0>
[  161.723975][T11354] tipc: Disabling bearer <eth:syzkaller0>
[  162.023801][T11366] __nla_validate_parse: 8 callbacks suppressed
[  162.023816][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'.
[  162.040553][T11366] macvlan3: entered promiscuous mode
[  162.042996][T11366] bond0: entered promiscuous mode
[  162.045075][T11366] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  162.140979][T11372] bond0: left promiscuous mode
[  162.371324][T11383] tipc: Enabling of bearer <et:g> rejected, media not registered
[  162.975128][T11402] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2392'.
[  163.164112][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'.
[  163.312387][   T33] audit: type=1804 audit(1754746810.747:4): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2406" name="/newroot/823/cgroup.controllers" dev="tmpfs" ino=4176 res=1 errno=0
[  163.330405][   T33] audit: type=1800 audit(1754746810.747:5): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2406" name="cgroup.controllers" dev="tmpfs" ino=4176 res=0 errno=0
[  163.350519][T11431] batman_adv: batadv0: Adding interface: ip6gretap1
[  163.352770][T11431] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.360607][T11431] batman_adv: batadv0: Interface activated: ip6gretap1
[  163.437851][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2410'.
[  163.798973][T11472] sctp: [Deprecated]: syz.1.2419 (pid 11472) Use of int in max_burst socket option deprecated.
[  163.798973][T11472] Use struct sctp_assoc_value instead
[  163.841299][T11474] netlink: 'syz.2.2420': attribute type 21 has an invalid length.
[  163.847542][T11474] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2420'.
[  163.855150][T11474] netlink: 'syz.2.2420': attribute type 4 has an invalid length.
[  163.858227][T11474] netlink: 'syz.2.2420': attribute type 5 has an invalid length.
[  163.860536][T11474] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2420'.
[  164.197771][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'.
[  164.391810][T11529] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2446'.
[  164.539924][T11545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.560094][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2454'.
[  164.664097][T11559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2460'.
[  164.760622][T11570] macvlan0: entered allmulticast mode
[  164.762852][T11570] veth1_vlan: entered allmulticast mode
[  164.765774][T11570] team0: Port device macvlan0 added
[  164.813643][T11574] netlink: 'syz.0.2466': attribute type 7 has an invalid length.
[  164.816039][T11574] netlink: 'syz.0.2466': attribute type 8 has an invalid length.
[  164.821542][T11574] gretap0: entered promiscuous mode
[  164.840786][T11574] batadv_slave_1: entered promiscuous mode
[  164.845529][T11574] debugfs: 'hsr1' already exists in 'hsr'
[  164.847356][T11574] Cannot create hsr debugfs directory
[  164.849102][T11574] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  164.852358][T11574] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.343910][T11641] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  165.346685][T11641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.857679][T11688] netlink: 'syz.2.2511': attribute type 1 has an invalid length.
[  165.926365][T11694] xt_policy: too many policy elements
[  167.050774][T11804] __nla_validate_parse: 11 callbacks suppressed
[  167.050786][T11804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2554'.
[  167.056092][T11799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2554'.
[  167.293531][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'.
[  167.784417][T11842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.890048][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2569'.
[  168.550585][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2584'.
[  168.688067][T11895] netlink: 'syz.2.2590': attribute type 1 has an invalid length.
[  168.688817][T11896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2589'.
[  168.691104][T11895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2590'.
[  168.732978][T11900] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2591'.
[  169.032423][T11932] geneve2: entered promiscuous mode
[  169.035715][ T5878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.038422][ T5878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.043383][ T5878] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.047405][ T5878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.051185][T11934] netlink: 'syz.2.2608': attribute type 23 has an invalid length.
[  169.086594][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2610'.
[  169.089654][T11938] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  169.494804][T11974] syzkaller1: entered promiscuous mode
[  169.497157][T11974] syzkaller1: entered allmulticast mode
[  169.788099][T11997] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2639'.
[  169.802162][T11997] NCSI netlink: No device for ifindex 0
[  170.050214][T12015] netlink: 'syz.1.2648': attribute type 5 has an invalid length.
[  170.071321][T12017] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  170.167457][T12023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  170.362854][T12036] vlan2: entered promiscuous mode
[  170.365009][T12036] batadv0: entered promiscuous mode
[  170.899815][T12070] netlink: 'syz.2.2670': attribute type 62 has an invalid length.
[  170.930278][T12072] netlink: 'syz.0.2671': attribute type 1 has an invalid length.
[  170.996312][T12080] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  171.089747][T12088] syzkaller1: entered promiscuous mode
[  171.092318][T12088] syzkaller1: entered allmulticast mode
[  171.123810][T12091] netlink: 'syz.2.2680': attribute type 2 has an invalid length.
[  171.222788][T12101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  171.420615][T12119] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  171.428475][T12119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.698313][T12145] netlink: 'syz.2.2706': attribute type 1 has an invalid length.
[  171.778988][T12152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.781432][T12152] syzkaller0: entered promiscuous mode
[  171.786304][T12152] syzkaller0: entered allmulticast mode
[  171.799045][T12152] tipc: Resetting bearer <eth:syzkaller0>
[  171.805416][T12151] tipc: Resetting bearer <eth:syzkaller0>
[  171.815013][T12151] tipc: Disabling bearer <eth:syzkaller0>
[  171.925117][T12158] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  172.943219][T12211] __nla_validate_parse: 6 callbacks suppressed
[  172.943235][T12211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2733'.
[  172.949263][T12206] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2733'.
[  173.054607][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'.
[  173.095111][T12223] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2741'.
[  173.098548][T12178] Bluetooth: hci0: Opcode 0x080f failed: -4
[  173.098561][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'.
[  173.098586][T12223] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  173.168912][T12229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'.
[  173.173691][T12229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'.
[  173.250067][T12233] syzkaller0: entered promiscuous mode
[  173.251934][T12233] syzkaller0: entered allmulticast mode
[  174.602362][T12257] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.935697][T12298] bridge0: entered allmulticast mode
[  175.184374][T12323] netlink: 'syz.1.2782': attribute type 3 has an invalid length.
[  175.210938][T12328] openvswitch: netlink: IPv4 tunnel dst address is zero
[  176.150317][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'.
[  176.190138][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'.
[  176.227217][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.267541][T12353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2796'.
[  176.549566][T12383] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  176.637458][T12394] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  176.641431][T12394] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  176.748452][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  176.864005][T12415] bridge7: entered allmulticast mode
[  177.575956][T12435] syz.1.2831 uses old SIOCAX25GETINFO
[  177.821027][T12461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.830832][T12461] syzkaller0: entered promiscuous mode
[  177.832824][T12461] syzkaller0: entered allmulticast mode
[  177.838208][T12461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  177.854106][T12461] tipc: Resetting bearer <eth:syzkaller0>
[  177.857550][T12459] tipc: Resetting bearer <eth:syzkaller0>
[  177.869635][T12459] tipc: Disabling bearer <eth:syzkaller0>
[  178.887797][T12522] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  178.928636][T12526] netlink: 'syz.0.2873': attribute type 9 has an invalid length.
[  179.124246][T12542] __nla_validate_parse: 2 callbacks suppressed
[  179.124270][T12542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2878'.
[  179.158862][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'.
[  179.210288][T12550] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2882'.
[  179.472246][T12569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.535073][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'.
[  179.540794][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'.
[  180.022980][T12601] tap0: tun_chr_ioctl cmd 35108
[  180.679289][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'.
[  180.992636][T12650] syz.2.2926 (12650) used obsolete PPPIOCDETACH ioctl
[  181.158818][T12663] netlink: 'syz.2.2931': attribute type 2 has an invalid length.
[  181.172349][T12663] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2931'.
[  181.226100][T12669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  181.304608][T12675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.315582][T12675] syzkaller0: entered promiscuous mode
[  181.318135][T12675] syzkaller0: entered allmulticast mode
[  181.363259][T12675] tipc: Resetting bearer <eth:syzkaller0>
[  181.383707][T12673] tipc: Resetting bearer <eth:syzkaller0>
[  181.410014][T12673] tipc: Disabling bearer <eth:syzkaller0>
[  181.410196][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'.
[  181.416859][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'.
[  181.604136][T12698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2950'.
[  181.609678][T12701] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  181.728699][T12712] netlink: 'syz.1.2957': attribute type 21 has an invalid length.
[  181.743621][T12712] netlink: 'syz.1.2957': attribute type 5 has an invalid length.
[  181.755756][T12712] netlink: 'syz.1.2957': attribute type 6 has an invalid length.
[  181.999244][T12738] netlink: 'syz.0.2967': attribute type 11 has an invalid length.
[  182.328977][T12760] netlink: 'syz.2.2979': attribute type 12 has an invalid length.
[  182.603217][T12769] netlink: 'syz.2.2983': attribute type 21 has an invalid length.
[  183.316025][T12799] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  183.530461][T12811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.683888][T12825] ..@: renamed from bond_slave_0
[  183.846067][T12835] netlink: 'syz.2.3015': attribute type 1 has an invalid length.
[  184.392645][T12727] Set syz1 is full, maxelem 65536 reached
[  184.529003][T12873] __nla_validate_parse: 7 callbacks suppressed
[  184.529015][T12873] netlink: 87 bytes leftover after parsing attributes in process `syz.1.3033'.
[  184.743346][T12885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3039'.
[  184.752897][T12885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3039'.
[  184.816621][T12902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3046'.
[  184.874327][T12905] netlink: 'syz.0.3048': attribute type 7 has an invalid length.
[  184.886726][T12908] openvswitch: netlink: Multiple metadata blocks provided
[  184.942283][T12914] bridge4: entered allmulticast mode
[  185.147775][T12929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3059'.
[  185.151397][T12929] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  185.278347][T12937] netlink: 'syz.1.3063': attribute type 322 has an invalid length.
[  185.495970][T12954] raw_sendmsg: syz.1.3071 forgot to set AF_INET. Fix it!
[  185.599306][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'.
[  185.602451][T12964] netlink: 'syz.2.3076': attribute type 1 has an invalid length.
[  185.650068][T12966] openvswitch: netlink: Key type 30 is not supported
[  185.686770][T12966] lo speed is unknown, defaulting to 1000
[  185.901144][T12968] lo speed is unknown, defaulting to 1000
[  186.311389][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'.
[  186.558206][T13002] validate_nla: 1 callbacks suppressed
[  186.558223][T13002] netlink: 'syz.0.3089': attribute type 16 has an invalid length.
[  186.581702][T13002] netlink: 'syz.0.3089': attribute type 17 has an invalid length.
[  186.752434][T13002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.809188][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  186.824525][   T33] audit: type=1800 audit(1754746834.257:6): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3093" name="memory.events" dev="tmpfs" ino=5230 res=0 errno=0
[  186.848734][   T33] audit: type=1804 audit(1754746834.257:7): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3093" name="/newroot/1035/memory.events" dev="tmpfs" ino=5230 res=1 errno=0
[  186.946219][T13010] team0: Mode changed to "loadbalance"
[  187.317881][T13027] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3102'.
[  187.447009][T13035] syzkaller1: entered promiscuous mode
[  187.449528][T13035] syzkaller1: entered allmulticast mode
[  187.968735][T13051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3113'.
[  188.163106][T13066] xt_socket: unknown flags 0xd0
[  188.864558][T13142] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  189.037731][T13161] syzkaller1: entered promiscuous mode
[  189.039963][T13161] syzkaller1: entered allmulticast mode
[  189.565202][T13196] netlink: 'syz.1.3178': attribute type 1 has an invalid length.
[  189.568165][T13196] __nla_validate_parse: 7 callbacks suppressed
[  189.568182][T13196] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3178'.
[  189.607714][T13198] syzkaller1: entered promiscuous mode
[  189.609779][T13198] syzkaller1: entered allmulticast mode
[  189.688805][T13202] netlink: 'syz.1.3182': attribute type 3 has an invalid length.
[  189.691510][T13202] netlink: 'syz.1.3182': attribute type 1 has an invalid length.
[  189.701808][T13202] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3182'.
[  190.002208][T13222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3191'.
[  190.498511][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'.
[  190.584810][T13260] netlink: 'syz.2.3209': attribute type 2 has an invalid length.
[  190.850683][T13281] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  190.939027][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  191.037922][T13301] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3228'.
[  191.040898][T13301] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3228'.
[  191.065186][T13301] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3228'.
[  191.552977][T13350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.659959][T13357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.664671][T13353] tipc: Resetting bearer <eth:syzkaller0>
[  191.678446][T13353] tipc: Disabling bearer <eth:syzkaller0>
[  191.827699][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3256'.
[  191.861269][T13364] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.887894][T13364] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  191.896521][T13364] bond6: (slave macvlan3): Enslaving as an active interface with an up link
[  191.904129][T13365] syzkaller1: entered allmulticast mode
[  192.039559][T13371] team0: Device sit1 is of different type
[  192.176756][T13375] syzkaller1: entered promiscuous mode
[  192.179666][T13375] syzkaller1: entered allmulticast mode
[  193.070379][T13424] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3276'.
[  193.079391][T13424] netlink: 'syz.1.3276': attribute type 10 has an invalid length.
[  193.094177][T13424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.108273][T13424] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  193.119197][T13424] netlink: 'syz.1.3276': attribute type 10 has an invalid length.
[  193.123509][T13424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3276'.
[  193.127523][T13424] batadv0: entered promiscuous mode
[  193.130264][T13424] batadv0: entered allmulticast mode
[  193.143995][T13424] bond0: (slave batadv0): Releasing backup interface
[  193.153963][T13424] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  193.162519][T13428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.418843][T13444] sctp: [Deprecated]: syz.2.3287 (pid 13444) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.418843][T13444] Use struct sctp_sack_info instead
[  193.643659][T13460] sctp: [Deprecated]: syz.1.3295 (pid 13460) Use of int in maxseg socket option.
[  193.643659][T13460] Use struct sctp_assoc_value instead
[  193.975644][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.661335][T13515] __nla_validate_parse: 3 callbacks suppressed
[  194.661447][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'.
[  194.975170][T13515] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.192873][T13532] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  195.195316][T13532] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  195.248308][T13536] netlink: 'syz.1.3328': attribute type 178 has an invalid length.
[  195.317878][T13535] lo speed is unknown, defaulting to 1000
[  195.348955][ T5852] Bluetooth: hci2: link tx timeout
[  195.351995][ T5852] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  195.362788][ T5852] Bluetooth: hci2: link tx timeout
[  195.364796][ T5852] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  195.368289][ T5852] Bluetooth: hci2: link tx timeout
[  195.370511][ T5852] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  195.674655][T13552] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  195.734113][T13560] netlink: 'syz.1.3339': attribute type 1 has an invalid length.
[  195.740533][T13560] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3339'.
[  195.785208][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3341'.
[  195.954794][T13571] lo speed is unknown, defaulting to 1000
[  195.991503][T13579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3347'.
[  196.086430][T13585] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  196.091992][T13585] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  196.096315][T13580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.367545][T13597] syzkaller0: entered promiscuous mode
[  196.370070][T13597] syzkaller0: entered allmulticast mode
[  197.423429][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  198.541395][T13605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3358'.
[  198.573278][T13606] sock: sock_timestamping_bind_phc: sock not bind to device
[  199.778936][T13670] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3391'.
[  199.841913][T13674] vlan2: entered promiscuous mode
[  199.906817][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3396'.
[  200.021759][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  200.025737][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  200.029571][T13685] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3398'.
[  200.788186][T13711] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3412'.
[  200.794321][T13711] netem: unknown loss type 0
[  200.796828][T13711] netem: change failed
[  201.232393][T13728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3420'.
[  201.364830][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'.
[  201.368619][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'.
[  201.382886][T13734] netlink: 'syz.2.3423': attribute type 5 has an invalid length.
[  201.387146][T13734] netlink: 'syz.2.3423': attribute type 6 has an invalid length.
[  201.549601][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3429'.
[  202.217177][T13804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.290623][T13813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.524512][T13838] netlink: 'syz.1.3472': attribute type 6 has an invalid length.
[  202.527380][T13838] netlink: 'syz.1.3472': attribute type 5 has an invalid length.
[  202.634888][T13850] netlink: 'syz.0.3478': attribute type 13 has an invalid length.
[  202.673143][T13854] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  202.675827][T13854] openvswitch: netlink: Duplicate key (type 0).
[  202.722640][T13850] gretap0: refused to change device tx_queue_len
[  202.725352][T13850] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  203.057517][T13885] netlink: 'syz.2.3493': attribute type 10 has an invalid length.
[  203.113828][T13890] ieee802154 phy1 wpan1: encryption failed: -90
[  203.468837][T13915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.383356][T13994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.399691][T13996] netem: invalid attributes len -16
[  204.402328][T13996] netem: change failed
[  204.534237][T14008] lo speed is unknown, defaulting to 1000
[  204.740790][T14025] netlink: 'syz.0.3555': attribute type 8 has an invalid length.
[  204.806725][T14033] netlink: 'syz.0.3558': attribute type 1 has an invalid length.
[  204.828548][T14033] bond2: entered promiscuous mode
[  204.830538][T14033] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.859424][T14033] bond2: (slave bridge6): making interface the new active one
[  204.868519][T14033] bridge6: entered promiscuous mode
[  204.871469][T14033] bond2: (slave bridge6): Enslaving as an active interface with an up link
[  205.303506][T14076] netlink: 'syz.2.3577': attribute type 1 has an invalid length.
[  205.330120][T14076] bond4: entered promiscuous mode
[  205.333264][T14076] 8021q: adding VLAN 0 to HW filter on device bond4
[  205.340846][T14076] __nla_validate_parse: 10 callbacks suppressed
[  205.340868][T14076] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3577'.
[  205.356974][T14076] batadv1: entered promiscuous mode
[  205.359314][T14076] batadv1: entered allmulticast mode
[  205.370176][T14076] 8021q: adding VLAN 0 to HW filter on device batadv1
[  205.376523][T14076] bond4: (slave batadv1): making interface the new active one
[  205.380562][T14076] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  205.430380][T14082] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3580'.
[  205.516470][T14090] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3577'.
[  205.624936][T14098] C: renamed from lo
[  205.641957][T14098] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  205.730322][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'.
[  205.737868][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'.
[  206.250663][T14145] netlink: 'syz.2.3607': attribute type 5 has an invalid length.
[  206.360519][T14155] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.3612'.
[  206.405028][T14160] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  207.025956][T14204] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3636'.
[  207.169102][T14212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3640'.
[  207.620074][T14239] validate_nla: 1 callbacks suppressed
[  207.620092][T14239] netlink: 'syz.1.3650': attribute type 2 has an invalid length.
[  207.811568][T14249] lo speed is unknown, defaulting to 1000
[  207.837649][T14259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3656'.
[  207.843179][T14259] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  208.349045][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3673'.
[  208.588325][T14307] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  208.699487][T14315] sctp: [Deprecated]: syz.2.3687 (pid 14315) Use of struct sctp_assoc_value in delayed_ack socket option.
[  208.699487][T14315] Use struct sctp_sack_info instead
[  208.962145][ T5900] IPVS: starting estimator thread 0...
[  209.063745][T14339] IPVS: using max 62 ests per chain, 148800 per kthread
[  209.074013][T14351] atomic_op ffff888109ad4998 conn xmit_atomic 0000000000000000
[  209.364797][T14377] lo speed is unknown, defaulting to 1000
[  210.500775][T14434] tun0: tun_chr_ioctl cmd 2148553947
[  210.521315][T14434] lo speed is unknown, defaulting to 1000
[  210.530131][T14436] __nla_validate_parse: 5 callbacks suppressed
[  210.530155][T14436] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3745'.
[  210.618439][T14444] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  210.823280][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'.
[  210.945163][T14459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  211.215884][T14467] lo speed is unknown, defaulting to 1000
[  211.834282][T14508] netlink: 'syz.2.3774': attribute type 1 has an invalid length.
[  211.838061][T14508] netlink: 'syz.2.3774': attribute type 1 has an invalid length.
[  212.479600][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3790'.
[  212.486597][T14541] bridge0: left allmulticast mode
[  212.853033][T14571] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  212.964321][T14585] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  213.149450][T14604] lo speed is unknown, defaulting to 1000
[  213.204504][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3822'.
[  213.231777][T14611] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  213.235120][T14611] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  213.331042][T14619] netlink: 'syz.1.3826': attribute type 10 has an invalid length.
[  213.352405][T14619] syz_tun: entered promiscuous mode
[  213.362791][T14619] netlink: 'syz.1.3826': attribute type 10 has an invalid length.
[  213.369710][T14619] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.373601][T14619] team0: Device bond0 failed to register rx_handler
[  213.519717][T14637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3835'.
[  213.628068][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3839'.
[  213.729766][T14655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3842'.
[  213.798062][T14661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3845'.
[  213.849806][T14665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.855716][T14665] syzkaller0: entered promiscuous mode
[  213.857933][T14665] syzkaller0: entered allmulticast mode
[  213.883065][T14665] tipc: Resetting bearer <eth:syzkaller0>
[  213.895990][T14664] tipc: Resetting bearer <eth:syzkaller0>
[  213.910464][T14664] tipc: Disabling bearer <eth:syzkaller0>
[  213.949295][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'.
[  214.008033][T14672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3851'.
[  214.149513][T14688] batadv2: entered promiscuous mode
[  214.270598][T14697] netlink: 'syz.1.3863': attribute type 10 has an invalid length.
[  214.277397][T14697] batman_adv: batadv0: Adding interface: virt_wifi0
[  214.279655][T14697] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.288668][T14697] batman_adv: batadv0: Interface activated: virt_wifi0
[  214.328165][T14701] netlink: 'syz.1.3865': attribute type 1 has an invalid length.
[  214.393654][T14703] veth9: entered allmulticast mode
[  214.503365][T14711] netlink: 'syz.2.3871': attribute type 1 has an invalid length.
[  214.559122][T14717] tipc: Failed to remove unknown binding: 66,1,1/738706417:2221556550/2221556552
[  214.568967][T14717] tipc: Failed to remove unknown binding: 66,1,1/738706417:2221556550/2221556552
[  214.572951][T14717] tipc: Failed to remove unknown binding: 66,1,1/738706417:2221556550/2221556552
[  214.994658][T14750] veth5: entered promiscuous mode
[  215.189642][T14762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.197330][T14762] syzkaller0: entered promiscuous mode
[  215.200783][T14762] syzkaller0: entered allmulticast mode
[  215.245709][T14762] tipc: Resetting bearer <eth:syzkaller0>
[  215.250470][T14760] tipc: Resetting bearer <eth:syzkaller0>
[  215.274151][T14760] tipc: Disabling bearer <eth:syzkaller0>
[  215.554494][T14787] netlink: 'syz.1.3905': attribute type 1 has an invalid length.
[  215.558084][T14787] __nla_validate_parse: 3 callbacks suppressed
[  215.558101][T14787] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3905'.
[  215.584146][T14790] netlink: 'syz.0.3908': attribute type 12 has an invalid length.
[  215.645929][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'.
[  216.700510][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3934'.
[  216.704947][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3934'.
[  216.732159][T14852] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3935'.
[  216.838020][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'.
[  216.948035][T14859] netlink: 'syz.0.3936': attribute type 10 has an invalid length.
[  217.246718][T14873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.251217][T14873] syzkaller0: entered promiscuous mode
[  217.253846][T14873] syzkaller0: entered allmulticast mode
[  217.297829][T14873] tipc: Resetting bearer <eth:syzkaller0>
[  217.304513][T14872] tipc: Resetting bearer <eth:syzkaller0>
[  217.329935][T14872] tipc: Disabling bearer <eth:syzkaller0>
[  217.500324][T14894] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3953'.
[  217.642384][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'.
[  217.868089][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'.
[  218.107311][T14949] macvtap0: entered promiscuous mode
[  218.109791][T14949] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  218.119994][T14949] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  218.260269][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3983'.
[  218.297711][T14959] bridge0: port 1(macvlan4) entered blocking state
[  218.300763][T14959] bridge0: port 1(macvlan4) entered disabled state
[  218.303899][T14959] macvlan4: entered allmulticast mode
[  218.306206][T14959] bridge0: entered allmulticast mode
[  218.312803][T14959] macvlan4: left allmulticast mode
[  218.314885][T14959] bridge0: left allmulticast mode
[  218.946514][T14970] lo speed is unknown, defaulting to 1000
[  219.203191][   T24] IPVS: starting estimator thread 0...
[  219.301949][T14977] IPVS: using max 33 ests per chain, 79200 per kthread
[  219.551785][T14988] nbd0: detected capacity change from 0 to 127
[  219.570255][ T5878] IPVS: stop unused estimator thread 0...
[  219.576299][   T56] block nbd0: Receive control failed (result -32)
[  219.580141][T14971] block nbd0: Send control failed (result -32)
[  219.591138][T14971] block nbd0: Request send failed, requeueing
[  219.609971][T14971] block nbd0: Dead connection, failed to find a fallback
[  219.628659][   T61] block nbd0: Dead connection, failed to find a fallback
[  219.632117][   T61] block nbd0: shutting down sockets
[  219.634831][   T61] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.639091][   T61] Buffer I/O error on dev nbd0, logical block 0, async page read
[  219.644605][T14971] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.659548][T14971] Buffer I/O error on dev nbd0, logical block 1, async page read
[  219.662692][T14971] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.665548][T14971] Buffer I/O error on dev nbd0, logical block 2, async page read
[  219.668037][T14971] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.672311][T14971] Buffer I/O error on dev nbd0, logical block 3, async page read
[  219.676038][T14971] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.679581][T14971] Buffer I/O error on dev nbd0, logical block 0, async page read
[  219.682868][T14971] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.686271][T14971] Buffer I/O error on dev nbd0, logical block 1, async page read
[  219.694047][T14971] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.697787][T14971] Buffer I/O error on dev nbd0, logical block 2, async page read
[  219.701074][T14971] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.712915][T14971] Buffer I/O error on dev nbd0, logical block 3, async page read
[  219.716219][T14971] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.719140][T14971] Buffer I/O error on dev nbd0, logical block 0, async page read
[  219.722348][T14971] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.725293][T14971] Buffer I/O error on dev nbd0, logical block 1, async page read
[  219.730939][T14971] ldm_validate_partition_table(): Disk read failed.
[  219.735558][T14971] Dev nbd0: unable to read RDB block 0
[  219.741922][T14971]  nbd0: unable to read partition table
[  219.750964][T14971] ldm_validate_partition_table(): Disk read failed.
[  219.761810][T14971] Dev nbd0: unable to read RDB block 0
[  219.764911][T14971]  nbd0: unable to read partition table
[  220.131849][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  220.480347][T15072] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  220.661215][T15087] __nla_validate_parse: 9 callbacks suppressed
[  220.661267][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4041'.
[  220.724826][T15092] netlink: 'syz.1.4043': attribute type 11 has an invalid length.
[  220.743705][T15092] netlink: 'syz.1.4043': attribute type 11 has an invalid length.
[  220.747080][T15092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4043'.
[  221.443175][T15131] netlink: 'syz.1.4058': attribute type 10 has an invalid length.
[  221.446955][T15131] veth0_vlan: left promiscuous mode
[  221.450399][T15131] veth0_vlan: entered promiscuous mode
[  221.455224][T15131] team0: Device veth0_vlan failed to register rx_handler
[  221.511456][T15135] syzkaller1: entered promiscuous mode
[  221.513572][T15135] syzkaller1: entered allmulticast mode
[  221.625416][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f5b8000: rx timeout, send abort
[  221.630571][    C1] vcan0: j1939_tp_rxtimer: 0xffff888122f08c00: rx timeout, send abort
[  221.633613][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f5b8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  221.638821][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888122f08c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  222.031050][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4075'.
[  222.925313][T15231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.929296][T15231] syzkaller0: entered promiscuous mode
[  222.931538][T15231] syzkaller0: entered allmulticast mode
[  222.953778][T15231] tipc: Resetting bearer <eth:syzkaller0>
[  222.957801][T15230] tipc: Resetting bearer <eth:syzkaller0>
[  222.969046][T15230] tipc: Disabling bearer <eth:syzkaller0>
[  223.335042][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'.
[  223.341025][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'.
[  223.631492][T15287] netem: change failed
[  223.886673][T15308] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  223.898658][T15310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4133'.
[  224.112117][T15327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4140'.
[  224.349721][T15341] batman_adv: batadv0: Adding interface: dummy0
[  224.352115][T15341] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.372072][T15341] batman_adv: batadv0: Interface activated: dummy0
[  224.386116][T15341] batadv0: mtu less than device minimum
[  224.389622][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.395471][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.400643][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.405960][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.411320][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.416727][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.422370][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.427760][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.433546][T15341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  224.684987][T15349] syzkaller0: refused to change device tx_queue_len
[  224.988030][T15374] netlink: 'syz.0.4162': attribute type 2 has an invalid length.
[  225.187812][T15393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4167'.
[  225.208686][T15393] netlink: 'syz.2.4167': attribute type 8 has an invalid length.
[  225.527094][T15416] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4177'.
[  225.701560][T15422] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4179'.
[  225.927552][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4184'.
[  225.944748][T15433] macvtap1: entered promiscuous mode
[  225.947640][T15433] erspan0: entered promiscuous mode
[  225.949698][T15433] macvtap1: entered allmulticast mode
[  225.961740][T15433] erspan0: entered allmulticast mode
[  225.971052][T15433] erspan0: left allmulticast mode
[  225.981738][T15433] erspan0: left promiscuous mode
[  226.527958][T15489] netlink: 'syz.2.4212': attribute type 3 has an invalid length.
[  226.758538][T15504] lo speed is unknown, defaulting to 1000
[  227.094339][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  227.328481][T15538] lo speed is unknown, defaulting to 1000
[  228.537489][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  228.753612][T15573] syzkaller0: entered promiscuous mode
[  228.755594][T15573] syzkaller0: entered allmulticast mode
[  229.685974][T15614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4263'.
[  229.719238][T15616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4264'.
[  230.055891][T15649] ipvlan2: entered promiscuous mode
[  230.326673][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4282'.
[  230.537897][T15675] netlink: 'syz.0.4290': attribute type 2 has an invalid length.
[  230.541191][T15675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4290'.
[  231.427906][T15716] net_ratelimit: 10 callbacks suppressed
[  231.427950][T15716] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  231.433125][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4311'.
[  231.553752][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4312'.
[  231.719251][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4315'.
[  231.908491][T15741] netlink: 'syz.2.4320': attribute type 4 has an invalid length.
[  231.911053][T15741] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4320'.
[  232.038928][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'.
[  232.638958][T15805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4348'.
[  233.305453][T15853] syzkaller1: entered promiscuous mode
[  233.308032][T15853] syzkaller1: entered allmulticast mode
[  233.551501][T15865] nbd1: detected capacity change from 0 to 549764202496
[  233.560813][   T56] block nbd1: Receive control failed (result -104)
[  233.889581][T15903] ==================================================================
[  233.892254][T15903] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  233.894732][T15903] Read of size 4 at addr ffff888122f12944 by task syz.1.4394/15903
[  233.897857][T15903] 
[  233.899117][T15903] CPU: 0 UID: 0 PID: 15903 Comm: syz.1.4394 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  233.899134][T15903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.899142][T15903] Call Trace:
[  233.899148][T15903]  <TASK>
[  233.899154][T15903]  dump_stack_lvl+0x189/0x250
[  233.899172][T15903]  ? __kasan_check_byte+0x12/0x40
[  233.899188][T15903]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.899199][T15903]  ? lock_release+0x4b/0x3e0
[  233.899214][T15903]  ? __virt_addr_valid+0x4a5/0x5c0
[  233.899227][T15903]  print_report+0xca/0x240
[  233.899236][T15903]  ? xfrm_alloc_spi+0x570/0xf30
[  233.899245][T15903]  kasan_report+0x118/0x150
[  233.899257][T15903]  ? xfrm_alloc_spi+0x570/0xf30
[  233.899266][T15903]  xfrm_alloc_spi+0x570/0xf30
[  233.899274][T15903]  ? xfrm_alloc_spi+0x2a0/0xf30
[  233.899285][T15903]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  233.899299][T15903]  ? xfrm_find_acq+0x87/0xa0
[  233.899312][T15903]  xfrm_alloc_userspi+0x70b/0xc90
[  233.899325][T15903]  ? apparmor_capable+0x137/0x1b0
[  233.899334][T15903]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  233.899344][T15903]  ? __nla_parse+0x40/0x60
[  233.899356][T15903]  xfrm_user_rcv_msg+0x7a3/0xab0
[  233.899366][T15903]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  233.899383][T15903]  ? __pfx___mutex_trylock_common+0x10/0x10
[  233.899394][T15903]  ? rcu_is_watching+0x15/0xb0
[  233.899403][T15903]  ? trace_contention_end+0x39/0x120
[  233.899412][T15903]  ? __mutex_lock+0x335/0x1360
[  233.899425][T15903]  netlink_rcv_skb+0x208/0x470
[  233.899437][T15903]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  233.899446][T15903]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  233.899460][T15903]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.899470][T15903]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.899481][T15903]  xfrm_netlink_rcv+0x79/0x90
[  233.899489][T15903]  netlink_unicast+0x82f/0x9e0
[  233.899500][T15903]  ? __pfx_netlink_unicast+0x10/0x10
[  233.899510][T15903]  ? netlink_sendmsg+0x642/0xb30
[  233.899519][T15903]  ? skb_put+0x11b/0x210
[  233.899531][T15903]  netlink_sendmsg+0x805/0xb30
[  233.899544][T15903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.899555][T15903]  ? aa_sock_msg_perm+0xf1/0x1d0
[  233.899566][T15903]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  233.899576][T15903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.899586][T15903]  __sock_sendmsg+0x21c/0x270
[  233.899597][T15903]  ____sys_sendmsg+0x505/0x830
[  233.899610][T15903]  ? __pfx_____sys_sendmsg+0x10/0x10
[  233.899624][T15903]  ? import_iovec+0x74/0xa0
[  233.899633][T15903]  ___sys_sendmsg+0x21f/0x2a0
[  233.899646][T15903]  ? __pfx____sys_sendmsg+0x10/0x10
[  233.899664][T15903]  ? __fget_files+0x2a/0x420
[  233.899677][T15903]  ? __fget_files+0x3a0/0x420
[  233.899690][T15903]  __x64_sys_sendmsg+0x19b/0x260
[  233.899710][T15903]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  233.899726][T15903]  ? rcu_is_watching+0x15/0xb0
[  233.899736][T15903]  ? do_syscall_64+0xbe/0x3b0
[  233.899749][T15903]  do_syscall_64+0xfa/0x3b0
[  233.899759][T15903]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.899768][T15903]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.899779][T15903]  ? exc_page_fault+0x9f/0xf0
[  233.899818][T15903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.899830][T15903] RIP: 0033:0x7f85a258ebe9
[  233.899840][T15903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.899849][T15903] RSP: 002b:00007f85a07f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.899861][T15903] RAX: ffffffffffffffda RBX: 00007f85a27b5fa0 RCX: 00007f85a258ebe9
[  233.899867][T15903] RDX: 000000000400c014 RSI: 0000200000000340 RDI: 0000000000000003
[  233.899873][T15903] RBP: 00007f85a2611e19 R08: 0000000000000000 R09: 0000000000000000
[  233.899879][T15903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.899884][T15903] R13: 00007f85a27b6038 R14: 00007f85a27b5fa0 R15: 00007ffed8cd11e8
[  233.899894][T15903]  </TASK>
[  233.899898][T15903] 
[  233.943514][T15907] openvswitch: netlink: Unknown key attributes 2
[  233.944842][T15903] Allocated by task 10224:
[  233.944854][T15903]  kasan_save_track+0x3e/0x80
[  234.041549][T15903]  __kasan_slab_alloc+0x6c/0x80
[  234.043512][T15903]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  234.045667][T15903]  xfrm_state_alloc+0x24/0x2f0
[  234.047570][T15903]  __find_acq_core+0x8a7/0x1c00
[  234.049522][T15903]  xfrm_find_acq+0x78/0xa0
[  234.051317][T15903]  xfrm_alloc_userspi+0x6b3/0xc90
[  234.053341][T15903]  xfrm_user_rcv_msg+0x7a3/0xab0
[  234.055597][T15903]  netlink_rcv_skb+0x208/0x470
[  234.057715][T15903]  xfrm_netlink_rcv+0x79/0x90
[  234.059828][T15903]  netlink_unicast+0x82f/0x9e0
[  234.061873][T15903]  netlink_sendmsg+0x805/0xb30
[  234.063849][T15903]  __sock_sendmsg+0x21c/0x270
[  234.065751][T15903]  ____sys_sendmsg+0x505/0x830
[  234.067862][T15903]  ___sys_sendmsg+0x21f/0x2a0
[  234.069882][T15903]  __x64_sys_sendmsg+0x19b/0x260
[  234.071849][T15903]  do_syscall_64+0xfa/0x3b0
[  234.073670][T15903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.076212][T15903] 
[  234.077290][T15903] Freed by task 24:
[  234.078852][T15903]  kasan_save_track+0x3e/0x80
[  234.080745][T15903]  kasan_save_free_info+0x46/0x50
[  234.082826][T15903]  __kasan_slab_free+0x5b/0x80
[  234.084797][T15903]  kmem_cache_free+0x18f/0x400
[  234.086705][T15903]  xfrm_state_gc_task+0x52d/0x6b0
[  234.088736][T15903]  process_scheduled_works+0xae1/0x17b0
[  234.090962][T15903]  worker_thread+0x8a0/0xda0
[  234.092802][T15903]  kthread+0x711/0x8a0
[  234.094453][T15903]  ret_from_fork+0x3fc/0x770
[  234.096300][T15903]  ret_from_fork_asm+0x1a/0x30
[  234.098205][T15903] 
[  234.099183][T15903] The buggy address belongs to the object at ffff888122f12880
[  234.099183][T15903]  which belongs to the cache xfrm_state of size 928
[  234.104710][T15903] The buggy address is located 196 bytes inside of
[  234.104710][T15903]  freed 928-byte region [ffff888122f12880, ffff888122f12c20)
[  234.111047][T15903] 
[  234.112176][T15903] The buggy address belongs to the physical page:
[  234.115299][T15903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888122f13a80 pfn:0x122f10
[  234.119552][T15903] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  234.122529][T15903] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  234.124953][T15903] page_type: f5(slab)
[  234.126245][T15903] raw: 057ff00000000040 ffff888104f4e640 dead000000000122 0000000000000000
[  234.129116][T15903] raw: ffff888122f13a80 00000000800e0005 00000000f5000000 0000000000000000
[  234.131873][T15903] head: 057ff00000000040 ffff888104f4e640 dead000000000122 0000000000000000
[  234.134548][T15903] head: ffff888122f13a80 00000000800e0005 00000000f5000000 0000000000000000
[  234.137276][T15903] head: 057ff00000000002 ffffea00048bc401 00000000ffffffff 00000000ffffffff
[  234.140017][T15903] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  234.142699][T15903] page dumped because: kasan: bad access detected
[  234.144669][T15903] page_owner tracks the page as allocated
[  234.146462][T15903] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5937, tgid 5933 (syz.2.7), ts 68000778175, free_ts 67993272530
[  234.152668][T15903]  post_alloc_hook+0x240/0x2a0
[  234.154419][T15903]  get_page_from_freelist+0x21e4/0x22c0
[  234.156652][T15903]  __alloc_frozen_pages_noprof+0x181/0x370
[  234.158897][T15903]  alloc_pages_mpol+0x232/0x4a0
[  234.160579][T15903]  allocate_slab+0x8a/0x370
[  234.162160][T15903]  ___slab_alloc+0xbeb/0x1410
[  234.163678][T15903]  kmem_cache_alloc_noprof+0x283/0x3c0
[  234.165344][T15903]  xfrm_state_alloc+0x24/0x2f0
[  234.166846][T15903]  xfrm_add_sa+0x17d1/0x4070
[  234.168238][T15903]  xfrm_user_rcv_msg+0x7a3/0xab0
[  234.169777][T15903]  netlink_rcv_skb+0x208/0x470
[  234.171325][T15903]  xfrm_netlink_rcv+0x79/0x90
[  234.172807][T15903]  netlink_unicast+0x82f/0x9e0
[  234.174329][T15903]  netlink_sendmsg+0x805/0xb30
[  234.175953][T15903]  __sock_sendmsg+0x21c/0x270
[  234.177727][T15903]  ____sys_sendmsg+0x505/0x830
[  234.179278][T15903] page last free pid 5930 tgid 5925 stack trace:
[  234.181349][T15903]  __free_frozen_pages+0xbc4/0xd30
[  234.183090][T15903]  __slab_free+0x303/0x3c0
[  234.184606][T15903]  qlist_free_all+0x97/0x140
[  234.186211][T15903]  kasan_quarantine_reduce+0x148/0x160
[  234.188015][T15903]  __kasan_slab_alloc+0x22/0x80
[  234.189594][T15903]  __kmalloc_node_track_caller_noprof+0x216/0x4e0
[  234.191645][T15903]  kstrdup+0x42/0x100
[  234.192942][T15903]  __kernfs_new_node+0x9c/0x7e0
[  234.194503][T15903]  kernfs_new_node+0x102/0x210
[  234.196063][T15903]  __kernfs_create_file+0x4b/0x2e0
[  234.197929][T15903]  sysfs_add_file_mode_ns+0x238/0x300
[  234.199748][T15903]  internal_create_group+0x66d/0x1110
[  234.201589][T15903]  sysfs_create_groups+0x59/0x120
[  234.203306][T15903]  ib_setup_port_attrs+0x1407/0x2070
[  234.205154][T15903]  ib_register_device+0x10a6/0x1380
[  234.206803][T15903]  rxe_register_device+0x1ef/0x310
[  234.208445][T15903] 
[  234.209230][T15903] Memory state around the buggy address:
[  234.210984][T15903]  ffff888122f12800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  234.213381][T15903]  ffff888122f12880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.215817][T15903] >ffff888122f12900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.218395][T15903]                                            ^
[  234.220389][T15903]  ffff888122f12980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.223284][T15903]  ffff888122f12a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  234.225946][T15903] ==================================================================
[  234.228652][T15903] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  234.230865][T15903] CPU: 0 UID: 0 PID: 15903 Comm: syz.1.4394 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  234.234918][T15903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.238319][T15903] Call Trace:
[  234.239670][T15903]  <TASK>
[  234.240829][T15903]  dump_stack_lvl+0x99/0x250
[  234.242686][T15903]  ? __asan_memcpy+0x40/0x70
[  234.244505][T15903]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.246599][T15903]  ? __pfx__printk+0x10/0x10
[  234.248484][T15903]  vpanic+0x281/0x750
[  234.250108][T15903]  ? __pfx_vpanic+0x10/0x10
[  234.251961][T15903]  ? irqentry_exit+0x74/0x90
[  234.253847][T15903]  panic+0xb9/0xc0
[  234.255343][T15903]  ? __pfx_panic+0x10/0x10
[  234.257119][T15903]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  234.259487][T15903]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.261832][T15903]  ? xfrm_alloc_spi+0x570/0xf30
[  234.263728][T15903]  check_panic_on_warn+0x89/0xb0
[  234.265693][T15903]  ? xfrm_alloc_spi+0x570/0xf30
[  234.267745][T15903]  end_report+0x78/0x160
[  234.269567][T15903]  kasan_report+0x129/0x150
[  234.271528][T15903]  ? xfrm_alloc_spi+0x570/0xf30
[  234.273295][T15903]  xfrm_alloc_spi+0x570/0xf30
[  234.274882][T15903]  ? xfrm_alloc_spi+0x2a0/0xf30
[  234.276488][T15903]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  234.278165][T15903]  ? xfrm_find_acq+0x87/0xa0
[  234.279672][T15903]  xfrm_alloc_userspi+0x70b/0xc90
[  234.281307][T15903]  ? apparmor_capable+0x137/0x1b0
[  234.282962][T15903]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  234.284854][T15903]  ? __nla_parse+0x40/0x60
[  234.286519][T15903]  xfrm_user_rcv_msg+0x7a3/0xab0
[  234.288073][T15903]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  234.289815][T15903]  ? __pfx___mutex_trylock_common+0x10/0x10
[  234.291942][T15903]  ? rcu_is_watching+0x15/0xb0
[  234.293856][T15903]  ? trace_contention_end+0x39/0x120
[  234.295974][T15903]  ? __mutex_lock+0x335/0x1360
[  234.297797][T15903]  netlink_rcv_skb+0x208/0x470
[  234.299286][T15903]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  234.300991][T15903]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  234.302575][T15903]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.304116][T15903]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.305684][T15903]  xfrm_netlink_rcv+0x79/0x90
[  234.307647][T15903]  netlink_unicast+0x82f/0x9e0
[  234.309545][T15903]  ? __pfx_netlink_unicast+0x10/0x10
[  234.311240][T15903]  ? netlink_sendmsg+0x642/0xb30
[  234.312829][T15903]  ? skb_put+0x11b/0x210
[  234.314171][T15903]  netlink_sendmsg+0x805/0xb30
[  234.315789][T15903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.317979][T15903]  ? aa_sock_msg_perm+0xf1/0x1d0
[  234.319718][T15903]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  234.321563][T15903]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.323458][T15903]  __sock_sendmsg+0x21c/0x270
[  234.325399][T15903]  ____sys_sendmsg+0x505/0x830
[  234.327267][T15903]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.329057][T15903]  ? import_iovec+0x74/0xa0
[  234.330603][T15903]  ___sys_sendmsg+0x21f/0x2a0
[  234.332528][T15903]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.334628][T15903]  ? __fget_files+0x2a/0x420
[  234.336474][T15903]  ? __fget_files+0x3a0/0x420
[  234.338476][T15903]  __x64_sys_sendmsg+0x19b/0x260
[  234.340441][T15903]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  234.342410][T15903]  ? rcu_is_watching+0x15/0xb0
[  234.344020][T15903]  ? do_syscall_64+0xbe/0x3b0
[  234.345619][T15903]  do_syscall_64+0xfa/0x3b0
[  234.347335][T15903]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.349126][T15903]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.351188][T15903]  ? exc_page_fault+0x9f/0xf0
[  234.352714][T15903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.354556][T15903] RIP: 0033:0x7f85a258ebe9
[  234.356126][T15903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.362879][T15903] RSP: 002b:00007f85a07f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.365603][T15903] RAX: ffffffffffffffda RBX: 00007f85a27b5fa0 RCX: 00007f85a258ebe9
[  234.368238][T15903] RDX: 000000000400c014 RSI: 0000200000000340 RDI: 0000000000000003
[  234.370777][T15903] RBP: 00007f85a2611e19 R08: 0000000000000000 R09: 0000000000000000
[  234.373353][T15903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.375868][T15903] R13: 00007f85a27b6038 R14: 00007f85a27b5fa0 R15: 00007ffed8cd11e8
[  234.378418][T15903]  </TASK>
[  234.380131][T15903] Kernel Offset: disabled
[  234.381614][T15903] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:41:21  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000fd3 RDI=0000000000000fd4 RBP=00000000000003f8 RSP=ffffc9000647e9f0
R8 =ffff888108bc0237 R9 =1ffff11021178046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4912 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f85a07f66c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000340 CR3=000000010bfe2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f85a2787498 00007f85a2787470 XMM03=00007f85a27874a8 00007f85a27874a0
XMM04=00007f85a32ed100 00007f85a2787460 XMM05=00007f85a2787478 00007f85a27874c0
XMM06=00007f85a27874b8 00007f85a27874b0 XMM07=00007f85a27874a8 00007f85a27874a0
XMM08=0000000000000000 00007f85a2612ee7 XMM09=0000000000000000 00007f85a2612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11003e00b1b RBX=ffffc900035ffd40 RCX=dffffc0000000000 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc900035ffb60 RBP=ffffffff99d65190 RSP=ffffc900035ffc78
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520006bff6c
R12=ffff88801f0058d8 R13=ffff88801f0058c0 R14=dffffc0000000000 R15=000000000000000a
RIP=ffffffff84cf71c8 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555576006500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34a654 CR3=000000001ed72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb23c212e53
XMM06=0000000000000000 00007fb23c212e4d XMM07=0000000000000000 00007fb23c212e61
XMM08=0000000000000000 00007fb23c212ee7 XMM09=0000000000000000 00007fb23c212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
