last executing test programs:

1.341160518s ago: executing program 2 (id=3292):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})

1.284400766s ago: executing program 2 (id=3293):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040005)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r0, 0x1ad72f7)
accept4(r0, 0x0, 0x0, 0x80000)
r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000)
writev(r2, &(0x7f00000001c0), 0x7)

1.221343361s ago: executing program 1 (id=3294):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xa4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}, {0x10, 0x113}, {0x10, 0x117}], 0x38}, 0x404f444)

1.22110763s ago: executing program 1 (id=3295):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8}]}, 0x28}}, 0x0)

1.161649421s ago: executing program 1 (id=3296):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)

1.091875735s ago: executing program 1 (id=3297):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040))
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xa0}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

451.120564ms ago: executing program 0 (id=3306):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280ec1617801f"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000)

401.259388ms ago: executing program 0 (id=3307):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1c1e15582399572a3f2983e1a15eb78767b87da6d3da400d215326419919de0df00007736000000000000000000edd0c789d37a7dcf3f5b8c9aa5329c38e2ed4c0fe3a0eae2a169c0322b4e5b96dd251a4477da4961b81a965463617e444bfac080d03ac4fbf2d0c40e22aed01bea5ce1b4ca5e0b249366f1b777a13fcfad3d0a047371d2169230d0d0597e10f58c8e2b20cf205740044c15fab6d52121b0a6b2c122096848d4e29e968e20c1615b1e11c61d8e0c58fe667224e89b83ef29e04c0c6fdf73c50bf051d8651613e5bf65f9e91a91f5ce1080bcbad3aa36f82e9d367cb537444e25cdc8c21b60216d540ac605f39e02950b5af27d81a80cddc1a96754465fe43887165f7dc70939eefaf15dce85857c9329b2bbdcf10f5c85f110a42bcc3489b45f3ffd8a8fadf90cf9", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000)

400.801805ms ago: executing program 2 (id=3308):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)

341.712995ms ago: executing program 2 (id=3309):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$pptp(0x18, 0x1, 0x2)
socket$pptp(0x18, 0x1, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x69}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4040000)

341.420271ms ago: executing program 0 (id=3310):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

291.993255ms ago: executing program 0 (id=3311):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @typedef={0x5}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x71, 0x2e, 0x5f, 0x30, 0x6f]}}, 0x0, 0x4b, 0x0, 0x1, 0x79a}, 0x28)

291.773929ms ago: executing program 0 (id=3312):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)

233.736075ms ago: executing program 1 (id=3313):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="851000000100000095000000000000008500000076000000"], &(0x7f0000000040)='syzkaller\x00', 0xf}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x124, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x3}, {0x5, 0x8, 0xb, 0x4}, {0x1000, 0x3, 0xf, 0x7}, {0xc9, 0x1, 0xffff, 0x4}, {0x9, 0xc, 0x2, 0x400}, {0xcf, 0x9384, 0x800, 0x4}, {0x6, 0x7, 0x7, 0x7}, {0x9c9, 0x9, 0x3, 0x7}, {0x81, 0x3, 0x1, 0xdaf9}, {0xffffffff, 0x8, 0x5, 0x2}, {0x745, 0x3, 0xe9, 0x4a}, {0x9, 0x9, 0x5, 0x7}, {0x2f875030, 0x3, 0x7, 0x2}, {0x100, 0x2199, 0xfffffffe, 0x4}, {0x7, 0x1, 0xfcf, 0x4}]}}]}}]}, 0x15c}}, 0x24040084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x2c, 0x2, 0x3, 0xe0d, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000fa040000181b0000", @ANYRES32, @ANYBLOB="00000000000000002020fcffffffffff9500000000000000950026b7f70b0f3cee6d3fd78db5de88e5aa8734b0601beb8ef0596abe6d1a58602ca5a0113179f465d6c2a01e8505962e0dbaca082b550bd0d9985adf0e69a84a1312474ef65b566ff4872816700244b78c948b6689"], &(0x7f0000000040)='GPL\x00', 0x1, 0x2a, &(0x7f00000000c0)=""/42, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x3, 0x6, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xd}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0)

230.490571ms ago: executing program 1 (id=3314):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/205, 0xcd}, 0x9}], 0x1, 0x23, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

171.924163ms ago: executing program 0 (id=3315):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1)
sendmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000640)="677aecfe797f8d51d044ffe055cad917bec425f37e820d7bf3139d969938bb9555deb072de644dddf4e6f6a34f8321785db05d761836e6168b5fcf9f0d36b713fb378e75f0d11d21e17c24142f4c7a661f8c732a0c4b99aae62873e2918d478bcfcb4574028110654d62", 0x6a}, {&(0x7f00000006c0)="e5dd6029aac2c1b5b684e2b87bc032e8141a5bf3e031033308554253683aef4fa3f618e253b39f1af707db7b965696bed68b4eaf92e34e345a13836be1b5a4b66ccc6598d00f1693d04df75b1664bd0d07dcd1407453f9104763ff320a76c68296f5863312533f0d7779e6a38b54f524af78d579f335f0dda7c553e5548483e2820755e6f204aaba027af946629a580a5593fdcd41057420902e8026989eb8d754cfa94510a7f15e073128a2c9afd7e6c9ef8f010bd1457ce51fe36e145723df2644d0669b10a6248d7d89335db6725c038e988035ba608591c2ffc1d17b4d0b4184a4231910c4183712035e11b8a53a4bcc0a", 0xf3}, {&(0x7f0000001700)="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", 0xe83}], 0x3, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x1118}}], 0x1, 0x400c894)

86.960329ms ago: executing program 2 (id=3316):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x4, 0x4)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)

0s ago: executing program 2 (id=3317):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18)
sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000280)="d36df3f7367fa648a2fec4bd9de70a780712bdfaec8434d80e8354108d52beef73a30e7deda0b184431152ec2702bcce2e71eca13ff2a360ff5f63c558be709c70e7c65dae8c9651df413222e217c5fbdef897b27300d96303526e90bfa944e8a5e79c6c3e041af859e32cd9cfa705325a01", 0x72}, {&(0x7f0000000380)="28c6d1e184f849a59b2043712aee30dd8abef7f1db04fe69df18401eb7ebebedf37a2cfbd8", 0x25}], 0x2}}], 0x1, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45154' (ED25519) to the list of known hosts.
syzkaller login: [   48.330491][ T5819] cgroup: Unknown subsys name 'net'
[   48.437730][ T5819] cgroup: Unknown subsys name 'cpuset'
[   48.442053][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.132877][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.408336][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.420303][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.423589][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.426499][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.429481][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.459282][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.465398][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.468638][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.472146][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.481727][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.494213][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.498205][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.502751][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.506576][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.509472][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.675373][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.778586][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.781888][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.784376][ T5828] bridge_slave_0: entered allmulticast mode
[   54.787889][ T5828] bridge_slave_0: entered promiscuous mode
[   54.803097][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.805634][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.807856][ T5828] bridge_slave_1: entered allmulticast mode
[   54.810680][ T5828] bridge_slave_1: entered promiscuous mode
[   54.866150][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.872987][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.886224][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.926622][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   54.934355][ T5828] team0: Port device team_slave_0 added
[   54.947225][ T5828] team0: Port device team_slave_1 added
[   55.002500][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.006013][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.013779][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.037381][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.039549][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.048045][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.051716][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.054034][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.056913][ T5833] bridge_slave_0: entered allmulticast mode
[   55.059815][ T5833] bridge_slave_0: entered promiscuous mode
[   55.086590][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.088868][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.091170][ T5833] bridge_slave_1: entered allmulticast mode
[   55.093924][ T5833] bridge_slave_1: entered promiscuous mode
[   55.107178][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.109499][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.111982][ T5838] bridge_slave_0: entered allmulticast mode
[   55.115382][ T5838] bridge_slave_0: entered promiscuous mode
[   55.119410][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.121707][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.124022][ T5838] bridge_slave_1: entered allmulticast mode
[   55.127979][ T5838] bridge_slave_1: entered promiscuous mode
[   55.166145][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.179399][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.186428][ T5828] hsr_slave_0: entered promiscuous mode
[   55.189162][ T5828] hsr_slave_1: entered promiscuous mode
[   55.193326][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.206125][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.219672][ T5833] team0: Port device team_slave_0 added
[   55.223214][ T5833] team0: Port device team_slave_1 added
[   55.269923][ T5838] team0: Port device team_slave_0 added
[   55.272372][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.275236][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.282909][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.301217][ T5838] team0: Port device team_slave_1 added
[   55.303754][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.306240][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.313971][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.356833][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.359114][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.367395][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.389321][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.391482][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.399483][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.435231][ T5833] hsr_slave_0: entered promiscuous mode
[   55.437638][ T5833] hsr_slave_1: entered promiscuous mode
[   55.439777][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.442204][ T5833] Cannot create hsr debugfs directory
[   55.489631][ T5838] hsr_slave_0: entered promiscuous mode
[   55.491976][ T5838] hsr_slave_1: entered promiscuous mode
[   55.494149][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.497355][ T5838] Cannot create hsr debugfs directory
[   55.600067][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.606966][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.631698][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.658539][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.737253][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.747324][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.756516][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.762109][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.808706][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.816412][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.822882][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.828749][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.892892][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.927636][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.937809][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.940265][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.949555][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.957268][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.959542][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.987073][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   56.009551][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.012887][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.015281][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.039485][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.041760][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.071161][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   56.096727][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.098972][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.102585][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.104832][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.172531][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.243923][ T5828] veth0_vlan: entered promiscuous mode
[   56.259425][ T5828] veth1_vlan: entered promiscuous mode
[   56.268359][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.277033][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.300194][ T5828] veth0_macvtap: entered promiscuous mode
[   56.312589][ T5828] veth1_macvtap: entered promiscuous mode
[   56.322607][ T5838] veth0_vlan: entered promiscuous mode
[   56.338844][ T5838] veth1_vlan: entered promiscuous mode
[   56.349792][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.362685][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.372908][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.377184][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.379866][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.382491][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.390126][ T5833] veth0_vlan: entered promiscuous mode
[   56.411346][ T5833] veth1_vlan: entered promiscuous mode
[   56.417036][ T5838] veth0_macvtap: entered promiscuous mode
[   56.421140][ T5838] veth1_macvtap: entered promiscuous mode
[   56.446093][   T55] Bluetooth: hci0: command tx timeout
[   56.452909][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.486906][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.498792][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.500047][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.501339][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.503931][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.513901][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.518089][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.522375][ T5833] veth0_macvtap: entered promiscuous mode
[   56.525202][   T55] Bluetooth: hci2: command tx timeout
[   56.525445][ T5834] Bluetooth: hci1: command tx timeout
[   56.544120][ T5833] veth1_macvtap: entered promiscuous mode
[   56.586633][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.590460][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.595098][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.604277][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.612208][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.616018][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.618729][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.621359][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.650550][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.652912][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.668660][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.692984][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.696211][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.745565][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.748779][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.782231][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.786648][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.788640][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.990296][ T5910] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   57.036820][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   57.798734][ T5970] netlink: 208 bytes leftover after parsing attributes in process `syz.1.24'.
[   57.801529][ T5970] netlink: 208 bytes leftover after parsing attributes in process `syz.1.24'.
[   57.937328][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'.
[   58.330692][ T5989] netem: incorrect gi model size
[   58.332465][ T5989] netem: change failed
[   58.535689][ T5834] Bluetooth: hci0: command tx timeout
[   58.605327][ T5834] Bluetooth: hci1: command tx timeout
[   58.615925][ T5834] Bluetooth: hci2: command tx timeout
[   58.630588][ T5999] syz.1.37 (5999) used greatest stack depth: 20600 bytes left
[   58.713041][ T6005] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET)
[   58.841766][ T6010] Cannot find map_set index 0 as target
[   58.884672][ T6010] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[   58.932861][ T6013] syzkaller1: entered promiscuous mode
[   58.935605][ T6013] syzkaller1: entered allmulticast mode
[   58.939101][ T6013] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   59.101585][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'.
[   59.741881][ T6044] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.805623][ T6050] netlink: 44 bytes leftover after parsing attributes in process `syz.2.63'.
[   59.891690][ T6057] gretap0: entered promiscuous mode
[   59.893726][ T6057] vlan2: entered promiscuous mode
[   59.922833][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.993178][ T6062] Zero length message leads to an empty skb
[   60.010779][ T6067] netlink: 116 bytes leftover after parsing attributes in process `syz.0.70'.
[   60.317372][ T6093] IPv6: Can't replace route, no match found
[   60.606138][ T5834] Bluetooth: hci0: command tx timeout
[   60.685431][ T5834] Bluetooth: hci2: command tx timeout
[   60.687125][ T5834] Bluetooth: hci1: command tx timeout
[   61.084010][ T6122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.85'.
[   61.117332][ T6124] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.87'.
[   61.297700][ T6133] GUP no longer grows the stack in syz.2.90 (6133): 200000006000-20000000a000 (200000005000)
[   61.301042][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.2.90 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[   61.301055][ T6133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.301062][ T6133] Call Trace:
[   61.301066][ T6133]  <TASK>
[   61.301083][ T6133]  dump_stack_lvl+0x189/0x250
[   61.301102][ T6133]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.301113][ T6133]  ? __pfx__printk+0x10/0x10
[   61.301123][ T6133]  ? find_vma+0xe7/0x160
[   61.301142][ T6133]  __get_user_pages+0x2a60/0x30b0
[   61.301169][ T6133]  ? __pfx___get_user_pages+0x10/0x10
[   61.301178][ T6133]  ? __gup_longterm_locked+0xbf7/0x15b0
[   61.301188][ T6133]  ? down_read_killable+0x1d1/0x350
[   61.301199][ T6133]  ? try_get_folio+0x633/0x660
[   61.301211][ T6133]  __gup_longterm_locked+0xd66/0x15b0
[   61.301224][ T6133]  ? try_grab_folio_fast+0x1be/0x4f0
[   61.301245][ T6133]  ? gup_fast_fallback+0x1afc/0x2260
[   61.301257][ T6133]  gup_fast_fallback+0x1cd4/0x2260
[   61.301284][ T6133]  ? __pfx_gup_fast_fallback+0x10/0x10
[   61.301292][ T6133]  ? trace_contention_end+0x39/0x120
[   61.301306][ T6133]  ? __mutex_lock+0x330/0xe80
[   61.301317][ T6133]  ? is_valid_gup_args+0x11f/0x200
[   61.301328][ T6133]  ? get_user_pages_fast+0x4d/0xb0
[   61.301339][ T6133]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   61.301355][ T6133]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   61.301362][ T6133]  ? wait_for_space+0x24d/0x2d0
[   61.301375][ T6133]  iov_iter_get_pages2+0x5e/0xa0
[   61.301387][ T6133]  __se_sys_vmsplice+0x548/0x10d0
[   61.301404][ T6133]  ? wake_up_q+0xca/0x110
[   61.301416][ T6133]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   61.301429][ T6133]  ? __pfx_futex_wake+0x10/0x10
[   61.301446][ T6133]  ? __lock_acquire+0xab9/0xd20
[   61.301470][ T6133]  ? do_pipe2+0xf7/0x170
[   61.301485][ T6133]  ? rcu_is_watching+0x15/0xb0
[   61.301497][ T6133]  ? do_syscall_64+0xbe/0x3b0
[   61.301509][ T6133]  do_syscall_64+0xfa/0x3b0
[   61.301517][ T6133]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.301525][ T6133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.301533][ T6133]  ? exc_page_fault+0x9f/0xf0
[   61.301543][ T6133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.301551][ T6133] RIP: 0033:0x7f70a238e9a9
[   61.301561][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.301568][ T6133] RSP: 002b:00007f70a32b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   61.301577][ T6133] RAX: ffffffffffffffda RBX: 00007f70a25b6080 RCX: 00007f70a238e9a9
[   61.301583][ T6133] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   61.301588][ T6133] RBP: 00007f70a2410d69 R08: 0000000000000000 R09: 0000000000000000
[   61.301619][ T6133] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   61.301624][ T6133] R13: 0000000000000000 R14: 00007f70a25b6080 R15: 00007ffc55e20598
[   61.301638][ T6133]  </TASK>
[   61.500670][ T6139] netlink: 'syz.0.94': attribute type 3 has an invalid length.
[   61.616507][ T6147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.693374][ T6154] delete_channel: no stack
[   61.867901][ T6170] nbd: must specify a device to reconfigure
[   61.901704][ T6174] __nla_validate_parse: 3 callbacks suppressed
[   61.901717][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'.
[   61.932843][ T6174] erspan0: entered promiscuous mode
[   61.936011][ T6174] macvtap1: entered promiscuous mode
[   61.938862][ T6174] macvtap1: entered allmulticast mode
[   61.948002][ T6174] erspan0: entered allmulticast mode
[   61.959462][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'.
[   62.115231][ T6188] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   62.120929][ T6188] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   62.685363][   T55] Bluetooth: hci0: command tx timeout
[   62.765114][   T55] Bluetooth: hci1: command tx timeout
[   62.765833][ T5834] Bluetooth: hci2: command tx timeout
[   62.857586][ T6242] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   62.949916][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[   63.067712][ T5895] IPVS: starting estimator thread 0...
[   63.167246][ T6250] IPVS: using max 62 ests per chain, 148800 per kthread
[   63.338472][ T6268] syzkaller1: entered promiscuous mode
[   63.340191][ T6268] syzkaller1: entered allmulticast mode
[   63.478497][ T6277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.480785][ T6277] IPv6: NLM_F_CREATE should be set when creating new route
[   63.483157][ T6277] IPv6: NLM_F_CREATE should be set when creating new route
[   63.485593][ T6277] IPv6: NLM_F_CREATE should be set when creating new route
[   63.495335][ T6277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.555419][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.624365][ T6291] geneve2: entered allmulticast mode
[   63.851877][ T6305] bridge0: entered promiscuous mode
[   63.899466][ T6312] pimreg3: entered allmulticast mode
[   64.014859][ T6322] netlink: 'syz.2.177': attribute type 1 has an invalid length.
[   64.018141][ T6322] netlink: 228 bytes leftover after parsing attributes in process `syz.2.177'.
[   64.073028][ T6322] xt_CT: No such helper "snmp"
[   64.081285][ T6321] IPv6: NLM_F_REPLACE set, but no existing node found!
[   64.084161][ T6321] netlink: 124 bytes leftover after parsing attributes in process `syz.0.172'.
[   64.619639][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[   64.623078][ T6341] bond0: option miimon: invalid value (18446744073709551615)
[   64.626568][ T6341] bond0: option miimon: allowed values 0 - 2147483647
[   64.684273][ T6345] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   64.708831][ T6348] netlink: 666 bytes leftover after parsing attributes in process `syz.2.188'.
[   64.730548][ T6345] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.739058][ T6345] bond1: (slave bond2): making interface the new active one
[   64.744952][ T6345] bond1: (slave bond2): Enslaving as an active interface with an up link
[   64.832551][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'.
[   64.916949][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.194'.
[   64.919942][ T6364] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   65.022455][ T6376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.109400][ T6377] bridge_slave_0: left allmulticast mode
[   65.111419][ T6377] bridge_slave_0: left promiscuous mode
[   65.114669][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.121544][ T6377] bridge_slave_1: left allmulticast mode
[   65.123402][ T6377] bridge_slave_1: left promiscuous mode
[   65.127228][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.133568][ T6377] bond0: (slave bond_slave_0): Releasing backup interface
[   65.145256][ T6377] bond0: (slave bond_slave_1): Releasing backup interface
[   65.154108][ T6384] netlink: 'syz.1.202': attribute type 10 has an invalid length.
[   65.173215][ T6377] team0: Port device team_slave_0 removed
[   65.187747][ T6377] team0: Port device team_slave_1 removed
[   65.190135][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.192437][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.206294][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.218278][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.227410][ T6377] bond1: (slave bond2): Releasing backup interface
[   65.257894][ T6384] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   65.270795][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   65.469574][ T6411] lo: entered allmulticast mode
[   65.471256][ T6411] lo: left allmulticast mode
[   65.943097][  T789] cfg80211: failed to load regulatory.db
[   65.999819][ T6456] bond0: option ad_select: unable to set because the bond device is up
[   66.113052][ T6465] bond_slave_0: entered promiscuous mode
[   66.115092][ T6465] bond_slave_1: entered promiscuous mode
[   66.118716][ T6465] macvtap2: entered promiscuous mode
[   66.121582][ T6465] bond0: entered promiscuous mode
[   66.127070][ T6465] macvtap2: entered allmulticast mode
[   66.139977][ T6465] bond0: entered allmulticast mode
[   66.144482][ T6465] bond_slave_0: entered allmulticast mode
[   66.163492][ T6465] bond_slave_1: entered allmulticast mode
[   66.166600][ T6465] 8021q: adding VLAN 0 to HW filter on device macvtap2
[   66.173595][ T6471] bond0: left allmulticast mode
[   66.179052][ T6471] bond_slave_0: left allmulticast mode
[   66.180857][ T6471] bond_slave_1: left allmulticast mode
[   66.182546][ T6471] bond0: left promiscuous mode
[   66.184427][ T6471] bond_slave_0: left promiscuous mode
[   66.186327][ T6471] bond_slave_1: left promiscuous mode
[   66.249927][ T6482] netlink: 'syz.1.246': attribute type 2 has an invalid length.
[   66.339304][ T6488] syzkaller1: entered promiscuous mode
[   66.341825][ T6490] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   66.342240][ T6488] syzkaller1: entered allmulticast mode
[   66.611966][ T6517] delete_channel: no stack
[   66.772323][ T6535] Unknown options in mask 700
[   67.018144][ T6560] __nla_validate_parse: 6 callbacks suppressed
[   67.018158][ T6560] netlink: 164 bytes leftover after parsing attributes in process `syz.2.285'.
[   67.169222][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'.
[   67.216257][ T6578] netlink: 104 bytes leftover after parsing attributes in process `syz.0.293'.
[   67.246673][ T6582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.439509][ T6604] netlink: 830 bytes leftover after parsing attributes in process `syz.0.306'.
[   67.497645][ T6610] veth1_macvtap: left promiscuous mode
[   67.500302][ T6610] macsec0: entered allmulticast mode
[   67.507853][ T6610] veth1_macvtap: entered promiscuous mode
[   67.509701][ T6610] veth1_macvtap: entered allmulticast mode
[   67.512284][ T6610] macsec0: left allmulticast mode
[   67.513852][ T6610] veth1_macvtap: left allmulticast mode
[   67.560330][ T6616] netlink: 'syz.0.311': attribute type 21 has an invalid length.
[   67.564680][ T6616] netlink: 128 bytes leftover after parsing attributes in process `syz.0.311'.
[   67.568488][ T6616] netlink: 3 bytes leftover after parsing attributes in process `syz.0.311'.
[   67.926095][ T6653] xt_ecn: cannot match TCP bits for non-tcp packets
[   68.123230][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'.
[   68.392254][ T6700] netlink: 'syz.0.349': attribute type 21 has an invalid length.
[   68.396568][ T6700] netlink: 128 bytes leftover after parsing attributes in process `syz.0.349'.
[   68.416274][ T6700] netlink: 'syz.0.349': attribute type 4 has an invalid length.
[   68.419420][ T6700] netlink: 'syz.0.349': attribute type 5 has an invalid length.
[   68.434434][ T6700] netlink: 3 bytes leftover after parsing attributes in process `syz.0.349'.
[   68.513374][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[   68.694420][ T6726] netlink: 'syz.2.360': attribute type 5 has an invalid length.
[   68.708542][ T6726] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   68.718119][ T6726] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   68.720795][ T6726] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   68.723516][ T6726] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   68.749769][ T6726] geneve2: entered promiscuous mode
[   68.751569][ T6726] geneve2: entered allmulticast mode
[   69.015570][ T6741] syz.1.365: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   69.020217][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.1.365 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[   69.020230][ T6741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.020236][ T6741] Call Trace:
[   69.020241][ T6741]  <TASK>
[   69.020247][ T6741]  dump_stack_lvl+0x189/0x250
[   69.020265][ T6741]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.020275][ T6741]  ? __pfx__printk+0x10/0x10
[   69.020287][ T6741]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   69.020300][ T6741]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   69.020312][ T6741]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   69.020323][ T6741]  warn_alloc+0x214/0x310
[   69.020331][ T6741]  ? stack_depot_save_flags+0x40/0x900
[   69.020344][ T6741]  ? __pfx_warn_alloc+0x10/0x10
[   69.020352][ T6741]  ? kasan_save_track+0x4f/0x80
[   69.020365][ T6741]  ? xskq_create+0x56/0x170
[   69.020373][ T6741]  ? xsk_init_queue+0xb0/0x110
[   69.020380][ T6741]  ? xsk_setsockopt+0x43f/0x710
[   69.020390][ T6741]  ? do_sock_setsockopt+0x17c/0x1b0
[   69.020402][ T6741]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   69.020413][ T6741]  ? do_syscall_64+0xfa/0x3b0
[   69.020421][ T6741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.020432][ T6741]  __vmalloc_node_range_noprof+0x125/0x12f0
[   69.020459][ T6741]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   69.020473][ T6741]  ? __kasan_kmalloc+0x93/0xb0
[   69.020485][ T6741]  vmalloc_user_noprof+0xad/0xf0
[   69.020496][ T6741]  ? xskq_create+0xbf/0x170
[   69.020504][ T6741]  xskq_create+0xbf/0x170
[   69.020514][ T6741]  xsk_init_queue+0xb0/0x110
[   69.020522][ T6741]  xsk_setsockopt+0x43f/0x710
[   69.020535][ T6741]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.020548][ T6741]  ? __fget_files+0x2a/0x420
[   69.020556][ T6741]  ? aa_sock_opt_perm+0x74/0x110
[   69.020566][ T6741]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   69.020581][ T6741]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.020594][ T6741]  do_sock_setsockopt+0x17c/0x1b0
[   69.020608][ T6741]  __x64_sys_setsockopt+0x13f/0x1b0
[   69.020623][ T6741]  do_syscall_64+0xfa/0x3b0
[   69.020631][ T6741]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.020640][ T6741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.020648][ T6741]  ? exc_page_fault+0x9f/0xf0
[   69.020656][ T6741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.020665][ T6741] RIP: 0033:0x7fb01bd8e9a9
[   69.020674][ T6741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.020681][ T6741] RSP: 002b:00007fb01cb3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   69.020690][ T6741] RAX: ffffffffffffffda RBX: 00007fb01bfb6080 RCX: 00007fb01bd8e9a9
[   69.020696][ T6741] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   69.020701][ T6741] RBP: 00007fb01be10d69 R08: 0000000000000004 R09: 0000000000000000
[   69.020706][ T6741] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.020710][ T6741] R13: 0000000000000000 R14: 00007fb01bfb6080 R15: 00007ffd935c2608
[   69.020723][ T6741]  </TASK>
[   69.020727][ T6741] Mem-Info:
[   69.170359][ T6741] active_anon:9288 inactive_anon:0 isolated_anon:0
[   69.170359][ T6741]  active_file:873 inactive_file:38210 isolated_file:0
[   69.170359][ T6741]  unevictable:1768 dirty:1478 writeback:0
[   69.170359][ T6741]  slab_reclaimable:9100 slab_unreclaimable:52155
[   69.170359][ T6741]  mapped:22036 shmem:5310 pagetables:965
[   69.170359][ T6741]  sec_pagetables:0 bounce:0
[   69.170359][ T6741]  kernel_misc_reclaimable:0
[   69.170359][ T6741]  free:292743 free_pcp:23426 free_cma:0
[   69.177299][ T6738] Bluetooth: MGMT ver 1.23
[   69.274699][ T6741] Node 0 active_anon:22568kB inactive_anon:0kB active_file:2904kB inactive_file:8808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38416kB dirty:2432kB writeback:0kB shmem:16288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7388kB pagetables:2008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.295149][ T6741] Node 1 active_anon:15060kB inactive_anon:0kB active_file:588kB inactive_file:144032kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49864kB dirty:3480kB writeback:0kB shmem:4952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4384kB pagetables:1784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.316174][ T6741] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   69.336214][ T6741] lowmem_reserve[]: 0 812 812 812 812
[   69.340792][ T6741] Node 0 DMA32 free:382508kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23180kB inactive_anon:0kB active_file:2904kB inactive_file:8808kB unevictable:3536kB writepending:2432kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:36120kB local_pcp:17416kB free_cma:0kB
[   69.368386][ T6741] lowmem_reserve[]: 0 0 0 0 0
[   69.372615][ T6741] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   69.408194][ T6741] lowmem_reserve[]: 0 0 854 854 854
[   69.409905][ T6741] Node 1 Normal free:316948kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15040kB inactive_anon:0kB active_file:652kB inactive_file:144032kB unevictable:3536kB writepending:3552kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:54136kB local_pcp:37964kB free_cma:0kB
[   69.444819][ T6741] lowmem_reserve[]: 0 0 0 0 0
[   69.446398][ T6741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   69.450291][ T6741] Node 0 DMA32: 3*4kB (UME) 278*8kB (UME) 223*16kB (UME) 194*32kB (UME) 92*64kB (U) 11*128kB (UE) 7*256kB (UM) 7*512kB (UE) 7*1024kB (UM) 7*2048kB (UM) 82*4096kB (UM) = 382060kB
[   69.484904][ T6741] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   69.490457][ T6741] Node 1 Normal: 1073*4kB (UM) 3365*8kB (UME) 277*16kB (UME) 424*32kB (UME) 92*64kB (UME) 25*128kB (UM) 12*256kB (UME) 4*512kB (UM) 4*1024kB (U) 6*2048kB (UME) 59*4096kB (UM) = 321468kB
[   69.514738][ T6741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.517685][ T6741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.524815][ T6741] 44431 total pagecache pages
[   69.526361][ T6741] 0 pages in swap cache
[   69.527660][ T6741] Free swap  = 124996kB
[   69.528970][ T6741] Total swap = 124996kB
[   69.530284][ T6741] 786301 pages RAM
[   69.531451][ T6741] 0 pages HighMem/MovableOnly
[   69.544736][ T6741] 241058 pages reserved
[   69.546096][ T6741] 0 pages cma reserved
[   69.756217][ T6749] sctp: [Deprecated]: syz.1.369 (pid 6749) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.756217][ T6749] Use struct sctp_sack_info instead
[   70.100648][ T6762] raw_sendmsg: syz.0.375 forgot to set AF_INET. Fix it!
[   70.200483][ T6767] netlink: 'syz.1.377': attribute type 14 has an invalid length.
[   70.202964][ T6767] netlink: 'syz.1.377': attribute type 11 has an invalid length.
[   70.291703][ T6774] trusted_key: syz.1.380 sent an empty control message without MSG_MORE.
[   70.701418][ T6807] xt_hashlimit: size too large, truncated to 1048576
[   70.723893][   T33] audit: type=1800 audit(1753169038.301:2): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.399" name="blkio.bfq.time_recursive" dev="tmpfs" ino=833 res=0 errno=0
[   70.743625][   T33] audit: type=1800 audit(1753169038.301:3): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.399" name="blkio.bfq.time_recursive" dev="tmpfs" ino=833 res=0 errno=0
[   70.918681][ T6821] pimreg: entered allmulticast mode
[   70.929153][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.931482][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.950727][ T6821] pimreg: left allmulticast mode
[   71.733983][ T6832] af_packet: tpacket_rcv: packet too big, clamped from 9920 to 3952. macoff=96
[   71.741378][ T6832] netlink: zone id is out of range
[   71.743156][ T6832] netlink: zone id is out of range
[   71.749045][ T6832] netlink: zone id is out of range
[   71.750647][ T6832] netlink: zone id is out of range
[   71.753284][ T6832] netlink: zone id is out of range
[   71.758022][ T6832] netlink: zone id is out of range
[   71.759613][ T6832] netlink: zone id is out of range
[   71.761177][ T6832] netlink: zone id is out of range
[   71.763701][ T6832] netlink: zone id is out of range
[   72.032426][ T6860] vti0: entered promiscuous mode
[   72.034032][ T6860] vti0: entered allmulticast mode
[   72.064308][ T5894] IPVS: starting estimator thread 0...
[   72.118242][ T6868] __nla_validate_parse: 13 callbacks suppressed
[   72.118254][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'.
[   72.123006][ T6868] netlink: 92 bytes leftover after parsing attributes in process `syz.1.423'.
[   72.154744][ T6862] IPVS: using max 62 ests per chain, 148800 per kthread
[   72.376569][ T6890] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   72.461124][ T6896] net_ratelimit: 64 callbacks suppressed
[   72.461137][ T6896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   72.626842][ T6906] lo speed is unknown, defaulting to 1000
[   72.630038][ T6906] lo speed is unknown, defaulting to 1000
[   72.632337][ T6906] lo speed is unknown, defaulting to 1000
[   72.653600][ T6899] infiniband syz!: set down
[   72.656971][ T6899] infiniband syz!: added team_slave_0
[   72.702550][ T6899] RDS/IB: syz!: added
[   72.704470][ T6899] smc: adding ib device syz! with port count 1
[   72.707646][ T6899] smc:    ib device syz! port 1 has pnetid 
[   72.739008][ T6908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.181802][ T6906] infiniband syz0: set active
[   73.183327][ T6906] infiniband syz0: added lo
[   73.184933][ T5894] lo speed is unknown, defaulting to 1000
[   73.190831][ T5894] syz0: Port: 1 Link ACTIVE
[   73.236161][ T6906] RDS/IB: syz0: added
[   73.237469][ T6906] smc: adding ib device syz0 with port count 1
[   73.237497][ T6899] syz.1.438 (6899) used greatest stack depth: 19944 bytes left
[   73.239361][ T6906] smc:    ib device syz0 port 1 has pnetid 
[   73.239803][ T5894] lo speed is unknown, defaulting to 1000
[   73.258973][ T6906] lo speed is unknown, defaulting to 1000
[   73.440987][ T6906] lo speed is unknown, defaulting to 1000
[   73.620203][ T6906] lo speed is unknown, defaulting to 1000
[   74.080192][ T6984] netlink: 104 bytes leftover after parsing attributes in process `syz.1.478'.
[   74.352560][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'.
[   74.397293][ T7006] hsr_slave_0: left promiscuous mode
[   74.399988][ T7006] hsr_slave_1: left promiscuous mode
[   74.476941][ T7011] netlink: 'syz.0.489': attribute type 29 has an invalid length.
[   74.648448][ T7007] lo speed is unknown, defaulting to 1000
[   74.769544][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'.
[   74.776727][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'.
[   74.779515][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'.
[   75.068563][ T7039] xt_TCPMSS: Only works on TCP SYN packets
[   75.133544][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'.
[   75.141236][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'.
[   75.467048][ T7072] xt_hashlimit: overflow, try lower: 6/0
[   75.714118][ T7090] syz.0.526 (7090) used obsolete PPPIOCDETACH ioctl
[   75.748834][ T7097] netlink: 404 bytes leftover after parsing attributes in process `syz.1.529'.
[   76.263211][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.298870][ T7149] bridge_slave_0: invalid flags given to default FDB implementation
[   76.475459][ T7163] netlink: 'syz.2.560': attribute type 1 has an invalid length.
[   76.918073][ T7191] sctp: [Deprecated]: syz.2.570 (pid 7191) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.918073][ T7191] Use struct sctp_sack_info instead
[   76.945632][ T7197] netlink: 'syz.0.575': attribute type 12 has an invalid length.
[   77.269623][ T7203] __nla_validate_parse: 10 callbacks suppressed
[   77.269637][ T7203] netlink: 132 bytes leftover after parsing attributes in process `syz.0.577'.
[   78.543618][ T7296] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   78.570165][ T7296] bridge_slave_0: left allmulticast mode
[   78.571991][ T7296] bridge_slave_0: left promiscuous mode
[   78.573895][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.580119][ T7296] bridge_slave_1: left allmulticast mode
[   78.581923][ T7296] bridge_slave_1: left promiscuous mode
[   78.583963][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.597471][ T7296] bond0: (slave bond_slave_0): Releasing backup interface
[   78.604166][ T7296] bond0: (slave bond_slave_1): Releasing backup interface
[   78.610382][ T7301] netlink: 'syz.2.620': attribute type 10 has an invalid length.
[   78.629428][ T7296] team0: Port device team_slave_0 removed
[   78.636720][ T7296] team0: Port device team_slave_1 removed
[   78.639225][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.641630][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.647421][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.649742][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.658105][ T5895] lo speed is unknown, defaulting to 1000
[   78.680488][ T7301] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   78.683111][ T7301] bond0: (slave wlan1): refused to change device type
[   78.825256][ T7319] netlink: 'syz.1.632': attribute type 1 has an invalid length.
[   78.850155][ T7319] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.914250][ T7326] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[   78.975360][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'.
[   79.360932][ T7363] bond0: (slave wlan1): Releasing backup interface
[   79.404522][ T7367] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   79.412500][ T7367] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   80.308633][ T7443] netlink: 'syz.0.691': attribute type 4 has an invalid length.
[   80.433776][ T7455] netlink: 'syz.0.697': attribute type 4 has an invalid length.
[   80.520806][ T7466] netlink: 'syz.0.702': attribute type 6 has an invalid length.
[   80.862744][ T7509] netlink: 248 bytes leftover after parsing attributes in process `syz.0.721'.
[   81.097907][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'.
[   81.227734][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'.
[   81.650969][ T7572] "syz.2.744" (7572) uses obsolete ecb(arc4) skcipher
[   82.035134][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'.
[   82.041965][ T7606] vlan0: entered promiscuous mode
[   82.242597][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'.
[   82.682299][ T7651] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.772'.
[   82.849762][ T7666] netlink: 'syz.0.779': attribute type 4 has an invalid length.
[   82.877057][ T7666] netlink: 'syz.0.779': attribute type 4 has an invalid length.
[   82.919707][ T5894] hid-generic 0005:0B57:0006.0001: collection stack underflow
[   82.922672][ T5894] hid-generic 0005:0B57:0006.0001: item 0 2 0 12 parsing failed
[   82.930916][ T5894] hid-generic 0005:0B57:0006.0001: probe with driver hid-generic failed with error -22
[   83.085321][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   83.215466][ T7701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.855970][ T7737] lo speed is unknown, defaulting to 1000
[   84.087600][ T7742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.139929][ T7742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.323611][ T7742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.483265][ T7742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.487102][ T7758] syzkaller0: create flow: hash 3204390619 index 1
[   84.497201][   T12] syzkaller0: tun_net_xmit 76
[   84.498991][   T12] syzkaller0: tun_net_xmit 48
[   84.527415][ T7758] syzkaller0: delete flow: hash 3204390619 index 1
[   85.534453][ T7742] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.549775][ T7742] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.568283][ T7742] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.580569][ T7742] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.619184][ T7777] SET target dimension over the limit!
[   85.643003][ T7776] tipc: Started in network mode
[   85.646577][ T7776] tipc: Node identity da2a8cec3e56, cluster identity 4711
[   85.649022][ T7776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.653399][ T7776] syzkaller0: entered promiscuous mode
[   85.655318][ T7776] syzkaller0: entered allmulticast mode
[   85.660894][ T7776] tipc: Resetting bearer <eth:syzkaller0>
[   85.676022][ T7774] tipc: Resetting bearer <eth:syzkaller0>
[   85.705416][ T7774] tipc: Disabling bearer <eth:syzkaller0>
[   85.769972][ T7788] Cannot find add_set index 2 as target
[   85.810413][ T7792] unknown channel width for channel at 909000KHz?
[   85.812632][ T7792] unknown channel width for channel at 909000KHz?
[   85.929303][ T7802] netlink: 'syz.1.841': attribute type 3 has an invalid length.
[   86.087442][ T7813] IPVS: length: 148 != 24
[   86.213124][   T33] audit: type=1107 audit(1753169053.791:4): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[   86.225548][ T7808] lo speed is unknown, defaulting to 1000
[   86.569546][ T7855] netlink: 260 bytes leftover after parsing attributes in process `syz.0.864'.
[   86.572232][ T7855] netlink: 260 bytes leftover after parsing attributes in process `syz.0.864'.
[   86.633193][ T7861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.876542][ T7880] tun0: tun_chr_ioctl cmd 1074812117
[   86.878364][ T7882] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   86.994526][ T7892] netlink: 92 bytes leftover after parsing attributes in process `syz.0.881'.
[   86.998407][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.881'.
[   87.001375][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.881'.
[   87.379194][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.899'.
[   87.411720][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[   87.764390][ T7947] lo speed is unknown, defaulting to 1000
[   88.111230][ T7990] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.115582][ T5881] IPVS: starting estimator thread 0...
[   88.215369][ T7999] IPVS: using max 62 ests per chain, 148800 per kthread
[   88.350360][ T8015] netlink: 256 bytes leftover after parsing attributes in process `syz.0.934'.
[   88.353236][ T8015] netlink: 'syz.0.934': attribute type 5 has an invalid length.
[   88.393845][ T8014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.454198][ T8021] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   88.505044][ T8025] xt_cluster: node mask cannot exceed total number of nodes
[   88.692426][ T8044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.947'.
[   88.701223][ T8045] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[   88.730988][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'.
[   88.747930][ T8047] bond2: entered promiscuous mode
[   88.749955][ T8047] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.781005][ T8047] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.783464][ T8047] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[   88.791813][ T8047] bond2: (slave vcan1): Error -95 calling set_mac_address
[   88.928152][ T8059] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.952'.
[   88.943634][ T5846] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   88.976381][ T8062] netlink: 'syz.2.953': attribute type 3 has an invalid length.
[   89.103591][ T8074] tipc: Started in network mode
[   89.106885][ T8074] tipc: Node identity 7, cluster identity 4711
[   89.109207][ T8074] tipc: Node number set to 7
[   89.163438][ T8080] netlink: 'syz.1.961': attribute type 4 has an invalid length.
[   89.297804][ T8092] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   89.507583][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'.
[   89.511688][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'.
[   89.556765][ T8105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.560375][ T8105] syzkaller0: entered promiscuous mode
[   89.562103][ T8105] syzkaller0: entered allmulticast mode
[   89.585383][ T8105] tipc: Resetting bearer <eth:syzkaller0>
[   89.590375][ T8104] tipc: Resetting bearer <eth:syzkaller0>
[   89.602290][ T8104] tipc: Disabling bearer <eth:syzkaller0>
[   89.777513][ T8121] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[   89.779975][ T8121] netlink: 224 bytes leftover after parsing attributes in process `syz.0.981'.
[   89.782732][ T8121] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[   89.847392][ T8125] netlink: 'syz.0.983': attribute type 2 has an invalid length.
[   90.204125][ T8161] xt_bpf: check failed: parse error
[   90.231590][ T8163] netlink: 'syz.2.1000': attribute type 1 has an invalid length.
[   90.250293][ T8163] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.274696][ T8163] bond2: (slave bridge2): making interface the new active one
[   90.278656][ T8163] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   90.305620][ T8163] gretap1: entered promiscuous mode
[   90.309241][ T8163] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   90.321434][ T8163] macvlan0: entered promiscuous mode
[   90.323070][ T8163] macvlan0: entered allmulticast mode
[   90.326829][ T8163] bond2: entered promiscuous mode
[   90.328609][ T8163] bridge2: entered promiscuous mode
[   90.331143][ T8163] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   90.333704][ T8163] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   90.340059][ T8163] bond2: left promiscuous mode
[   90.341561][ T8163] bridge2: left promiscuous mode
[   92.700691][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'.
[   92.705013][ T8213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   92.707887][ T8213] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   92.729647][ T8229] delete_channel: no stack
[   92.807444][ T8240] tipc: Started in network mode
[   92.809008][ T8240] tipc: Node identity 1a8614fc2862, cluster identity 4711
[   92.811258][ T8240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.814098][ T8240] syzkaller0: entered promiscuous mode
[   92.816043][ T8240] syzkaller0: entered allmulticast mode
[   92.827978][ T8240] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[   92.832020][ T8240] tipc: Resetting bearer <eth:syzkaller0>
[   92.837888][ T8238] tipc: Resetting bearer <eth:syzkaller0>
[   92.838194][ T8242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1032'.
[   92.851104][ T8238] tipc: Disabling bearer <eth:syzkaller0>
[   92.915775][ T8248] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1034'.
[   93.407921][ T8287] sctp: [Deprecated]: syz.1.1051 (pid 8287) Use of int in maxseg socket option.
[   93.407921][ T8287] Use struct sctp_assoc_value instead
[   93.620954][ T8301] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1059'.
[   93.847528][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'.
[   93.874240][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'.
[   93.914294][ T8323] bridge_slave_0: entered promiscuous mode
[   94.872664][ T8360] Driver unsupported XDP return value 0 on prog  (id 168) dev N/A, expect packet loss!
[   95.378387][ T8403] sctp: [Deprecated]: syz.0.1105 (pid 8403) Use of int in max_burst socket option deprecated.
[   95.378387][ T8403] Use struct sctp_assoc_value instead
[   95.397064][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'.
[   95.878916][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'.
[   95.884080][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'.
[   96.080620][ T8464] netlink: 'syz.1.1134': attribute type 2 has an invalid length.
[   97.030373][ T8504] syz_tun: entered promiscuous mode
[   97.033163][ T8504] batadv_slave_0: entered promiscuous mode
[   97.036676][ T8504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.040080][ T8504] Cannot create hsr debugfs directory
[   97.042091][ T8504] hsr0: entered allmulticast mode
[   97.043768][ T8504] syz_tun: entered allmulticast mode
[   97.046334][ T8504] batadv_slave_0: entered allmulticast mode
[   97.107089][ T8509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.537861][ T8544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.541083][ T8544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.564804][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   97.635813][ T8544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.639979][ T8544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.702896][ T8544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.711841][ T8544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.765346][ T8544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.768809][ T8544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.831460][ T8544] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   97.834134][ T8544] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   97.844267][ T8544] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   97.847076][ T8544] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   97.860969][ T8544] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   97.867511][ T8544] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   97.880116][ T8544] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   97.882791][ T8544] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   98.042586][ T8570] tipc: New replicast peer: 255.255.255.255
[   98.066144][ T8570] tipc: Enabled bearer <udp:syz2>, priority 10
[   98.955467][ T8577] netlink: 'syz.2.1182': attribute type 10 has an invalid length.
[   98.957835][ T8577] netem: change failed
[   99.020403][ T8586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1186'.
[   99.156241][    T9] tipc: Node number set to 3833367788
[   99.197184][ T8605] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.199830][ T8605] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.202288][ T8605] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.205662][ T8605] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.213010][ T8605] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[   99.852339][ T8658] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   99.973580][ T8669] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1225'.
[  100.003598][ T8672] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  100.011251][ T8672] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  100.132647][ T8685] atomic_op ffff888125822998 conn xmit_atomic 0000000000000000
[  100.173760][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'.
[  100.178408][ T8689] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  100.181292][ T8689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.262822][ T8695] netlink: 'syz.1.1237': attribute type 3 has an invalid length.
[  100.420599][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1241'.
[  100.460754][ T8709] netlink: 'syz.2.1243': attribute type 7 has an invalid length.
[  100.463307][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'.
[  100.509844][ T8713] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1244'.
[  100.861322][   T57] block nbd0: Receive control failed (result -32)
[  100.868320][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1262'.
[  100.878686][ T8750] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1262'.
[  100.903791][ T8755] vxcan1: entered allmulticast mode
[  100.920084][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1265'.
[  100.931963][ T8759] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1266'.
[  101.054864][ T8773] netlink: 'syz.0.1272': attribute type 18 has an invalid length.
[  101.256391][ T8791] netlink: 'syz.1.1281': attribute type 12 has an invalid length.
[  101.827082][ T8843] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  101.921714][ T8853] netlink: 'syz.2.1311': attribute type 4 has an invalid length.
[  101.935670][   T47] lo speed is unknown, defaulting to 1000
[  101.938438][ T8853] netlink: 'syz.2.1311': attribute type 4 has an invalid length.
[  101.939913][   T47] syz0: Port: 1 Link DOWN
[  101.943581][ T5881] lo speed is unknown, defaulting to 1000
[  101.945550][ T5881] syz0: Port: 1 Link ACTIVE
[  101.945612][   T47] lo speed is unknown, defaulting to 1000
[  102.051986][ T8868] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.087127][ T8868] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.161538][ T8868] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.210166][ T8868] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.293468][ T8868] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.302776][ T8868] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.312779][ T8868] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.323144][ T8868] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.390379][ T8891] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.395864][ T8891] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  102.398966][ T8891] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  102.423794][ T8894] gretap1: entered promiscuous mode
[  102.425674][ T8894] gretap1: entered allmulticast mode
[  102.539929][ T8891] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.556503][ T8891] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  102.559843][ T8891] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  102.656916][ T8891] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.674885][ T8891] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  102.690019][ T8891] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  102.761951][ T8891] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.780312][ T8891] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  102.783183][ T8891] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  102.803972][ T8919] netlink: 'syz.1.1342': attribute type 10 has an invalid length.
[  102.822921][ T8919] team0: Port device geneve0 added
[  102.862077][ T8891] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.868482][ T8891] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  102.871814][ T8891] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  102.886813][ T8891] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.894759][ T8891] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  102.897513][ T8891] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  102.902078][ T8928] netlink: 'syz.1.1346': attribute type 6 has an invalid length.
[  102.905896][ T8928] netlink: 'syz.1.1346': attribute type 5 has an invalid length.
[  102.915165][ T8891] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.917672][ T8891] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  102.920140][ T8891] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  102.933795][ T8891] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.946014][ T8891] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  102.948496][ T8891] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  102.948744][ T8933] xt_l2tp: v2 doesn't support IP mode
[  103.192814][ T8951] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  103.195919][ T8951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.351701][ T8968] netlink: 'syz.1.1362': attribute type 41 has an invalid length.
[  103.571697][   T55] Bluetooth: hci2: link tx timeout
[  103.574104][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.577947][   T55] Bluetooth: hci2: link tx timeout
[  103.579913][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.602046][ T8982] bond0 (unregistering): Released all slaves
[  103.617667][ T8987] veth1_macvtap: left promiscuous mode
[  103.624955][ T8987] macsec0: entered promiscuous mode
[  103.862955][ T8984] lo speed is unknown, defaulting to 1000
[  103.955497][ T9012] netlink: 'syz.2.1379': attribute type 12 has an invalid length.
[  104.240115][ T9034] netlink: 'syz.0.1387': attribute type 3 has an invalid length.
[  104.242566][ T9034] __nla_validate_parse: 21 callbacks suppressed
[  104.242576][ T9034] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1387'.
[  104.294672][   T55] Bluetooth: hci2: link tx timeout
[  104.296404][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.302255][   T55] Bluetooth: hci2: link tx timeout
[  104.303941][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.461693][ T9055] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1396'.
[  104.624814][ T9065] netlink: ct family unspecified
[  104.626406][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.872763][   T55] Bluetooth: hci2: link tx timeout
[  104.878160][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.897292][   T55] Bluetooth: hci2: link tx timeout
[  104.898995][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.941910][ T9082] batman_adv: batadv0: Adding interface: ip6gretap1
[  104.943936][ T9082] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.953128][ T9082] batman_adv: batadv0: Interface activated: ip6gretap1
[  105.493180][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'.
[  105.565257][   T55] Bluetooth: hci2: link tx timeout
[  105.566881][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.625838][ T9134] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  105.646475][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  105.649244][   T55] Bluetooth: hci2: link tx timeout
[  105.796827][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1429'.
[  105.799594][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'.
[  105.802292][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1429'.
[  105.805954][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1429'.
[  106.007147][ T9178] netlink: 'syz.2.1443': attribute type 29 has an invalid length.
[  106.053002][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1442'.
[  106.630701][ T9257] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1478'.
[  107.467248][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'.
[  107.486888][ T9289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.182619][ T9356] bridge2: port 1(ip6gretap2) entered blocking state
[  108.189277][ T9356] bridge2: port 1(ip6gretap2) entered disabled state
[  108.191455][ T9356] ip6gretap2: entered allmulticast mode
[  108.194181][ T9356] ip6gretap2: entered promiscuous mode
[  108.210314][ T9363] validate_nla: 1 callbacks suppressed
[  108.210341][ T9363] netlink: 'syz.2.1530': attribute type 3 has an invalid length.
[  108.214339][ T9363] netlink: 'syz.2.1530': attribute type 6 has an invalid length.
[  108.228211][ T9356] veth3: entered promiscuous mode
[  108.229947][ T9356] bridge2: port 2(veth3) entered blocking state
[  108.231878][ T9356] bridge2: port 2(veth3) entered disabled state
[  108.233864][ T9356] veth3: entered allmulticast mode
[  108.492180][ T9396] 0: renamed from hsr0 (while UP)
[  108.499252][ T9396] 0: entered allmulticast mode
[  108.500765][ T9396] hsr_slave_0: entered allmulticast mode
[  108.502434][ T9396] hsr_slave_1: entered allmulticast mode
[  108.504433][ T9396] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  108.766809][ T9427] syzkaller1: entered promiscuous mode
[  108.768678][ T9427] syzkaller1: entered allmulticast mode
[  109.187164][ T9451] ipt_REJECT: TCP_RESET invalid for non-tcp
[  109.610784][ T9492] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  109.691719][ T9498] __nla_validate_parse: 6 callbacks suppressed
[  109.691732][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'.
[  109.772853][ T9504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1598'.
[  109.823331][ T9510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1601'.
[  109.911213][ T9522] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  109.911904][ T9518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.001946][ T9518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.017151][ T9532] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1612'.
[  110.019956][ T9532] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1612'.
[  110.086066][ T9518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.151202][ T9518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.247481][ T9518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.251074][ T9554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1623'.
[  110.260143][ T9518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.268388][ T9518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.279177][ T9518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.297524][ T9558] sctp: [Deprecated]: syz.0.1625 (pid 9558) Use of int in max_burst socket option.
[  110.297524][ T9558] Use struct sctp_assoc_value instead
[  110.305457][ T9559] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1624'.
[  110.315669][ T9556] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1624'.
[  110.674042][ T9599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.676992][ T9599] syzkaller0: entered promiscuous mode
[  110.678696][ T9599] syzkaller0: entered allmulticast mode
[  110.697386][ T9599] tipc: Resetting bearer <eth:syzkaller0>
[  110.701813][ T9598] tipc: Resetting bearer <eth:syzkaller0>
[  110.715005][ T9598] tipc: Disabling bearer <eth:syzkaller0>
[  110.824173][ T9607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.987946][ T9623] netlink: 'syz.0.1657': attribute type 2 has an invalid length.
[  111.020439][ T9623] k*]: entered promiscuous mode
[  111.331515][ T9652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.334163][ T9652] syzkaller0: entered promiscuous mode
[  111.335994][ T9652] syzkaller0: entered allmulticast mode
[  111.347363][ T9652] tipc: Resetting bearer <eth:syzkaller0>
[  111.350273][ T9651] tipc: Resetting bearer <eth:syzkaller0>
[  111.361977][ T9651] tipc: Disabling bearer <eth:syzkaller0>
[  111.511581][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'.
[  111.514418][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'.
[  112.009889][   T33] audit: type=1800 audit(1753169079.591:5): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1696" name="memory.events" dev="tmpfs" ino=2959 res=0 errno=0
[  112.082440][ T9718] netlink: 'syz.0.1697': attribute type 10 has an invalid length.
[  112.586241][ T9749] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  112.662197][ T9709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  112.671084][ T9709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  113.100044][ T9814] netlink: 'syz.1.1733': attribute type 10 has an invalid length.
[  113.106070][ T9814] batman_adv: batadv0: Adding interface: team0
[  113.108116][ T9814] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.117504][ T9814] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  113.123198][ T9814] netlink: 'syz.1.1733': attribute type 10 has an invalid length.
[  113.126198][ T9814] team0: entered promiscuous mode
[  113.127954][ T9814] geneve0: entered promiscuous mode
[  113.131180][ T9814] 8021q: adding VLAN 0 to HW filter on device team0
[  113.133496][ T9814] batman_adv: batadv0: Interface activated: team0
[  113.137856][ T9814] batman_adv: batadv0: Interface deactivated: team0
[  113.140084][ T9814] batman_adv: batadv0: Removing interface: team0
[  113.143086][ T9814] bridge0: port 1(team0) entered blocking state
[  113.145631][ T9814] bridge0: port 1(team0) entered disabled state
[  113.147958][ T9814] team0: entered allmulticast mode
[  113.150204][ T9814] geneve0: entered allmulticast mode
[  113.155811][ T9814] bridge0: port 1(team0) entered blocking state
[  113.157979][ T9814] bridge0: port 1(team0) entered forwarding state
[  113.234865][ T9824] nbd: illegal input index -381222912
[  113.261232][ T9827] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  113.292616][ T9829] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  113.719564][ T9849] netlink: 'syz.2.1750': attribute type 6 has an invalid length.
[  113.723403][ T9849] netlink: 'syz.2.1750': attribute type 6 has an invalid length.
[  113.999137][ T9865] netlink: 'syz.2.1758': attribute type 21 has an invalid length.
[  114.067973][ T9869] tipc: New replicast peer: 255.255.255.83
[  114.070090][ T9869] tipc: Enabled bearer <udp:>, priority 10
[  114.214319][ T9879] ip6t_srh: unknown srh match flags  4000
[  114.244736][ T9880] netlink: 'syz.1.1763': attribute type 13 has an invalid length.
[  114.327815][ T9875] lo speed is unknown, defaulting to 1000
[  114.753089][ T9915] netlink: 'syz.0.1779': attribute type 10 has an invalid length.
[  114.787798][ T9915] batman_adv: batadv0: Adding interface: team0
[  114.789722][ T9915] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.811182][ T9915] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  114.815584][ T9920] netlink: 'syz.0.1779': attribute type 10 has an invalid length.
[  114.820760][ T9920] __nla_validate_parse: 17 callbacks suppressed
[  114.820801][ T9920] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1779'.
[  114.846456][ T9920] team0: entered promiscuous mode
[  114.848132][ T9920] team_slave_0: entered promiscuous mode
[  114.849924][ T9920] team_slave_1: entered promiscuous mode
[  114.856113][ T9920] 8021q: adding VLAN 0 to HW filter on device team0
[  114.859328][ T9920] batman_adv: batadv0: Interface activated: team0
[  114.861331][ T9920] batman_adv: batadv0: Interface deactivated: team0
[  114.863282][ T9920] batman_adv: batadv0: Removing interface: team0
[  114.882408][ T9920] bridge0: port 3(team0) entered blocking state
[  114.884521][ T9920] bridge0: port 3(team0) entered disabled state
[  114.896077][ T9920] team0: entered allmulticast mode
[  114.897791][ T9920] team_slave_0: entered allmulticast mode
[  114.900791][ T9920] team_slave_1: entered allmulticast mode
[  114.910182][ T9920] bridge0: port 3(team0) entered blocking state
[  114.912244][ T9920] bridge0: port 3(team0) entered forwarding state
[  114.940512][ T9924] IPv6: NLM_F_REPLACE set, but no existing node found!
[  115.169473][ T9947] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  116.039678][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'.
[  116.049901][ T9951] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  116.060124][ T9951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.140224][ T9964] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[  116.188075][ T9973] netlink: 'syz.2.1803': attribute type 1 has an invalid length.
[  116.201293][ T9973] bond3: entered promiscuous mode
[  116.203216][ T9973] bond3: entered allmulticast mode
[  116.217950][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'.
[  116.228849][ T9973] bridge4: the hash_elasticity option has been deprecated and is always 16
[  116.235769][ T9973] bond3: (slave bridge4): making interface the new active one
[  116.238209][ T9973] bridge4: entered promiscuous mode
[  116.239945][ T9973] bridge4: entered allmulticast mode
[  116.242198][ T9973] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  116.515111][T10009] --map-set only usable from mangle table
[  116.518663][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'.
[  116.546976][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'.
[  116.782570][T10038] xt_TCPMSS: Only works on TCP SYN packets
[  116.814110][T10041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.912187][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'.
[  116.915651][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  116.919437][T10048] netlink: 'syz.1.1833': attribute type 15 has an invalid length.
[  116.922266][T10048] netlink: 'syz.1.1833': attribute type 18 has an invalid length.
[  117.114298][T10056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1837'.
[  117.177759][T10060] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  117.751319][T10093] team0: left allmulticast mode
[  117.753298][T10093] geneve0: left allmulticast mode
[  117.757493][T10093] bridge0: port 1(team0) entered disabled state
[  117.759864][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'.
[  117.776794][T10093] geneve0: left promiscuous mode
[  117.786097][T10093] team0: Failed to send options change via netlink (err -105)
[  117.790584][T10093] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  117.801935][T10093] team0: Port device geneve0 removed
[  117.809735][T10093] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  117.812530][T10093] batman_adv: batadv0: Removing interface: ip6gretap1
[  117.820106][T10093] ip6gretap2: left allmulticast mode
[  117.821812][T10093] ip6gretap2: left promiscuous mode
[  117.823752][T10093] bridge2: port 1(ip6gretap2) entered disabled state
[  117.828786][T10093] veth3: left allmulticast mode
[  117.830507][T10093] bridge2: port 2(veth3) entered disabled state
[  117.955627][T10110] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  117.993266][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'.
[  118.137854][T10116] bridge0: entered promiscuous mode
[  118.140386][T10116] vlan0: entered promiscuous mode
[  118.206627][T10130] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.251686][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.468118][T10189] netlink: 'syz.1.1893': attribute type 11 has an invalid length.
[  120.780449][T10212] netlink: 'syz.2.1899': attribute type 1 has an invalid length.
[  122.105354][T10267] netlink: 'syz.2.1926': attribute type 5 has an invalid length.
[  122.240974][T10283] __nla_validate_parse: 6 callbacks suppressed
[  122.240987][T10283] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1934'.
[  122.246968][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1934'.
[  122.372394][T10296] xt_socket: unknown flags 0x8
[  122.721108][T10332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  123.175922][T10375] sctp: [Deprecated]: syz.2.1974 (pid 10375) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.175922][T10375] Use struct sctp_sack_info instead
[  123.223350][T10381] netlink: 'syz.0.1976': attribute type 4 has an invalid length.
[  123.327998][T10384] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1978'.
[  123.330743][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'.
[  123.439253][T10399] netlink: 'syz.2.1986': attribute type 1 has an invalid length.
[  123.441983][T10399] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1986'.
[  124.115529][T10436] lo speed is unknown, defaulting to 1000
[  124.447588][T10450] netlink: 'syz.2.2008': attribute type 1 has an invalid length.
[  124.808174][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'.
[  124.927217][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'.
[  124.964515][T10497] netlink: 'syz.1.2031': attribute type 1 has an invalid length.
[  125.080558][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2038'.
[  125.085419][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  125.094730][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2038'.
[  125.131418][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2040'.
[  125.385289][T10525] lo speed is unknown, defaulting to 1000
[  125.778329][T10566] netlink: 'syz.2.2062': attribute type 1 has an invalid length.
[  126.384850][T10619] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  126.507041][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  126.738159][T10650] bridge4: entered promiscuous mode
[  126.739798][T10650] bridge4: entered allmulticast mode
[  126.746117][T10650] team0: Port device bridge4 added
[  126.850667][T10650] infiniband syz1: set active
[  126.852211][T10650] infiniband syz1: added macvlan1
[  126.871139][T10650] RDS/IB: syz1: added
[  126.872497][T10650] smc: adding ib device syz1 with port count 1
[  126.874521][T10650] smc:    ib device syz1 port 1 has pnetid 
[  127.448078][T10668] __nla_validate_parse: 2 callbacks suppressed
[  127.448092][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'.
[  127.468143][T10677] x_tables: ip_tables: udp match: only valid for protocol 17
[  127.754031][T10704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2118'.
[  127.816404][T10708] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2120'.
[  127.820588][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'.
[  128.216797][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2138'.
[  128.341830][T10764] netlink: 'syz.0.2148': attribute type 1 has an invalid length.
[  128.344278][T10764] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2148'.
[  128.407026][T10770] netlink: 'syz.2.2151': attribute type 62 has an invalid length.
[  128.432226][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'.
[  128.439189][T10774] vlan2: entered promiscuous mode
[  128.440790][T10774] bond0: entered promiscuous mode
[  128.445610][T10774] bond_slave_0: entered promiscuous mode
[  128.447854][T10774] bond_slave_1: entered promiscuous mode
[  128.592436][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2160'.
[  129.049299][T10831] netlink: 'syz.1.2169': attribute type 10 has an invalid length.
[  129.051732][T10831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2169'.
[  129.064783][T10831] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  129.079308][T10831] batman_adv: batadv0: Adding interface: virt_wifi0
[  129.081507][T10831] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  129.090617][T10831] batman_adv: batadv0: Interface activated: virt_wifi0
[  129.227814][T10849] xt_cgroup: xt_cgroup: no path or classid specified
[  129.454287][T10876] netlink: 'syz.0.2186': attribute type 3 has an invalid length.
[  129.457132][T10876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2186'.
[  129.820237][T10916] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  129.886465][T10926] xt_bpf: check failed: parse error
[  129.988500][T10938] 8021q: VLANs not supported on ip_vti0
[  130.200485][T10957] netlink: 'syz.0.2218': attribute type 83 has an invalid length.
[  130.439796][T10978] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:19999
[  131.430485][T11016] pim6reg1: entered promiscuous mode
[  131.432173][T11016] pim6reg1: entered allmulticast mode
[  131.454277][T11019] tipc: Enabled bearer <eth:team0>, priority 0
[  131.544268][T11025] xt_CT: You must specify a L4 protocol and not use inversions on it
[  131.840262][T11052] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  131.881350][T11043] lo speed is unknown, defaulting to 1000
[  132.179245][T11072] sctp: [Deprecated]: syz.1.2271 (pid 11072) Use of int in maxseg socket option.
[  132.179245][T11072] Use struct sctp_assoc_value instead
[  132.190721][T11074] IPv6: addrconf: prefix option has invalid lifetime
[  132.366277][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  132.571033][    T9] tipc: Node number set to 853808380
[  132.816649][T11139] __nla_validate_parse: 2 callbacks suppressed
[  132.816665][T11139] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2304'.
[  132.821825][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'.
[  133.103322][T11176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2322'.
[  133.108582][T11176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2322'.
[  133.236835][T11173] lo speed is unknown, defaulting to 1000
[  134.176761][T11239] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2349'.
[  134.202084][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'.
[  134.649777][   T33] audit: type=1800 audit(1753169102.231:6): pid=11270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2364" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=3745 res=0 errno=0
[  134.725444][T11275] netlink: 'syz.2.2366': attribute type 1 has an invalid length.
[  134.736727][T11278] netlink: 'syz.0.2368': attribute type 1 has an invalid length.
[  134.739147][T11278] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2368'.
[  135.100391][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'.
[  135.312762][T11356] lo: entered promiscuous mode
[  135.316548][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'.
[  135.327059][T11354] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  135.585932][T11355] lo: left promiscuous mode
[  135.774039][T11379] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  136.251448][T11406] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  136.314515][T11409] netlink: 'syz.1.2424': attribute type 2 has an invalid length.
[  136.317212][T11409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2424'.
[  136.577411][T11430] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.592371][T11432] SET target dimension over the limit!
[  136.632771][T11436] bridge0: left promiscuous mode
[  136.643482][T11436] team0: left promiscuous mode
[  136.649809][T11436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.667865][T11430] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.694196][T11441] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  136.728848][T11430] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.737203][T11444] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  136.780141][T11430] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.795170][T11449] delete_channel: no stack
[  136.841128][T11430] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.852977][T11430] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.869425][T11430] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.880675][T11430] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.310736][T11476] netlink: 'syz.2.2453': attribute type 30 has an invalid length.
[  137.357489][T11479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.440630][T11485] veth0: entered promiscuous mode
[  137.459316][T11484] veth0: left promiscuous mode
[  137.890796][T11542] xt_TPROXY: Can be used only with -p tcp or -p udp
[  137.969590][T11547] wireguard1: entered promiscuous mode
[  137.971362][T11547] wireguard1: entered allmulticast mode
[  138.366887][T11559] lo speed is unknown, defaulting to 1000
[  138.503572][T11577] syz.1.2499 uses old SIOCAX25GETINFO
[  138.557563][T11579] wg2: entered promiscuous mode
[  138.559194][T11579] wg2: entered allmulticast mode
[  138.776530][   T33] audit: type=1800 audit(1753169106.351:7): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2503" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=4356 res=0 errno=0
[  138.802089][   T33] audit: type=1804 audit(1753169106.351:8): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2503" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=4356 res=1 errno=0
[  139.007489][T11607] netlink: 'syz.0.2511': attribute type 2 has an invalid length.
[  139.027960][T11607] : entered promiscuous mode
[  139.145418][T11620] netlink: 'syz.1.2517': attribute type 1 has an invalid length.
[  139.148019][T11620] __nla_validate_parse: 2 callbacks suppressed
[  139.148028][T11620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2517'.
[  139.198645][T11623] netlink: 'syz.1.2519': attribute type 1 has an invalid length.
[  139.326208][T11639] netlink: 'syz.2.2527': attribute type 4 has an invalid length.
[  139.348156][  T789] lo speed is unknown, defaulting to 1000
[  139.349986][  T789] syz0: Port: 1 Link DOWN
[  139.351494][  T789] lo speed is unknown, defaulting to 1000
[  139.354201][T11639] netlink: 'syz.2.2527': attribute type 4 has an invalid length.
[  139.361537][ T5881] lo speed is unknown, defaulting to 1000
[  139.363409][ T5881] syz0: Port: 1 Link ACTIVE
[  139.365752][ T5881] lo speed is unknown, defaulting to 1000
[  139.377963][T11645] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[  139.399320][T11647] netlink: 'syz.2.2531': attribute type 5 has an invalid length.
[  139.582686][T11643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.647646][T11643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.656007][T11666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2536'.
[  139.689897][T11650] lo speed is unknown, defaulting to 1000
[  139.702913][T11643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.809083][T11674] syzkaller0: entered promiscuous mode
[  139.813073][T11674] syzkaller0: entered allmulticast mode
[  139.928640][T11668] lo speed is unknown, defaulting to 1000
[  140.417851][T11679] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  140.635280][T11681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.664322][T11681] syzkaller0: entered promiscuous mode
[  140.674627][T11681] syzkaller0: entered allmulticast mode
[  140.701809][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2543'.
[  140.721836][T11681] tipc: Resetting bearer <eth:syzkaller0>
[  140.737177][T11680] tipc: Resetting bearer <eth:syzkaller0>
[  140.762640][T11680] tipc: Disabling bearer <eth:syzkaller0>
[  140.829452][T11695] netlink: 'syz.2.2546': attribute type 10 has an invalid length.
[  140.986376][T11709] pim6reg1: entered promiscuous mode
[  140.988043][T11709] pim6reg1: entered allmulticast mode
[  141.166563][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2559'.
[  141.525520][T11751] netlink: 'syz.0.2575': attribute type 39 has an invalid length.
[  141.701346][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'.
[  141.766128][T11776] syzkaller0: entered promiscuous mode
[  141.767883][T11776] syzkaller0: entered allmulticast mode
[  141.975328][T11784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.030677][T11784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.090041][T11785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.914305][T11789] sch_fq: defrate 0 ignored.
[  143.007325][T11797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2593'.
[  143.082597][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'.
[  143.086416][T11805] netlink: 'syz.2.2597': attribute type 15 has an invalid length.
[  143.089390][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'.
[  143.092318][T11805] netlink: 'syz.2.2597': attribute type 15 has an invalid length.
[  143.341817][T11830] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  143.403888][T11832] xt_hashlimit: size too large, truncated to 1048576
[  143.539225][T11850] netlink: 'syz.0.2617': attribute type 29 has an invalid length.
[  143.554767][T11850] netlink: 'syz.0.2617': attribute type 29 has an invalid length.
[  143.568620][T11850] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2617'.
[  143.571497][T11850] unsupported nla_type 58
[  143.575684][T11852] syzkaller1: entered promiscuous mode
[  143.576447][T11854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2619'.
[  143.577359][T11852] syzkaller1: entered allmulticast mode
[  143.699077][T11865] netlink: 'syz.2.2624': attribute type 6 has an invalid length.
[  143.844238][T11869] erspan0: left allmulticast mode
[  143.847938][T11869] macvtap1: left promiscuous mode
[  143.850648][T11869] macvtap2: left promiscuous mode
[  143.853162][T11869] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  143.855851][T11869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  143.858527][T11869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  143.861105][T11869] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  143.863792][T11869] geneve2: left promiscuous mode
[  143.872211][T11869] gretap1: left promiscuous mode
[  143.877568][T11869] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.880253][T11869] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.882862][T11869] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.885838][T11869] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.910458][T11869] bond3: left promiscuous mode
[  143.912090][T11869] bridge4: left promiscuous mode
[  143.915292][T11869] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  143.917877][T11869] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  143.920444][T11869] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  143.923031][T11869] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  143.934677][  T789] lo speed is unknown, defaulting to 1000
[  143.937251][  T789] syz0: Port: 1 Link DOWN
[  143.939734][  T789] lo speed is unknown, defaulting to 1000
[  144.868127][T11914] netlink: 'syz.0.2643': attribute type 303 has an invalid length.
[  144.977028][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'.
[  145.388861][T11975] netlink: 'syz.0.2666': attribute type 1 has an invalid length.
[  145.391295][T11975] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2666'.
[  145.439830][T11981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2669'.
[  145.707789][T12004] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2680'.
[  145.710717][T12004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2680'.
[  145.988006][T12022] netlink: zone id is out of range
[  145.990079][T12022] netlink: zone id is out of range
[  145.992150][T12022] netlink: zone id is out of range
[  146.025122][T12022] netlink: zone id is out of range
[  146.027832][T12022] netlink: zone id is out of range
[  146.030397][T12022] netlink: zone id is out of range
[  146.054185][T12022] netlink: zone id is out of range
[  146.058423][T12022] netlink: zone id is out of range
[  146.067774][T12022] netlink: zone id is out of range
[  146.077559][T12022] netlink: zone id is out of range
[  146.139940][T12028] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2690'.
[  146.158018][T12028] netlink: 'syz.1.2690': attribute type 1 has an invalid length.
[  146.269732][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2693'.
[  146.276629][T12035] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.279270][T12035] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.281704][T12035] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.284184][T12035] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.290948][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2693'.
[  146.508210][T12054] netlink: 'syz.0.2703': attribute type 1 has an invalid length.
[  146.510728][T12054] netlink: 'syz.0.2703': attribute type 4 has an invalid length.
[  146.513270][T12054] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2703'.
[  146.546697][T12063] Cannot find del_set index 2 as target
[  146.611477][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'.
[  146.622665][T12056] siw: device registration error -23
[  148.064987][T12136] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  148.366855][T12166] netlink: 'syz.1.2750': attribute type 4 has an invalid length.
[  148.595068][T12183] netlink: 'syz.2.2756': attribute type 3 has an invalid length.
[  148.759843][T12199] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  149.725304][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  150.729393][T12259] xt_l2tp: v2 sid > 0xffff: 262144
[  150.967100][T12280] __nla_validate_parse: 10 callbacks suppressed
[  150.967114][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2800'.
[  150.977733][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2800'.
[  151.431380][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2820'.
[  151.653731][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'.
[  152.180675][T12367] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  152.184400][T12367] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2837'.
[  152.335582][T12376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.338195][T12376] syzkaller0: entered promiscuous mode
[  152.339863][T12376] syzkaller0: entered allmulticast mode
[  152.351231][T12376] tipc: Resetting bearer <eth:syzkaller0>
[  152.354988][T12374] tipc: Resetting bearer <eth:syzkaller0>
[  152.363702][T12374] tipc: Disabling bearer <eth:syzkaller0>
[  152.382511][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'.
[  152.386490][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2844'.
[  152.390570][T12381] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2844'.
[  152.621312][T12397] xt_ecn: cannot match TCP bits for non-tcp packets
[  152.675743][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2852'.
[  153.335884][T12459] pim6reg1: entered promiscuous mode
[  153.337691][T12459] pim6reg1: entered allmulticast mode
[  153.469555][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'.
[  153.520709][T12402] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  153.611215][T12479] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  153.623413][T12479] bond3: entered promiscuous mode
[  153.626172][T12479] bridge2: entered promiscuous mode
[  153.632190][T12479] macvlan0: entered promiscuous mode
[  153.634022][T12479] macvlan0: entered allmulticast mode
[  153.637597][T12479] bond3: entered allmulticast mode
[  153.639171][T12479] bridge2: entered allmulticast mode
[  153.645400][T12479] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  153.648632][T12479] bond3: left promiscuous mode
[  153.650142][T12479] bridge2: left promiscuous mode
[  153.713522][T12494] sctp: [Deprecated]: syz.2.2898 (pid 12494) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.713522][T12494] Use struct sctp_sack_info instead
[  153.956645][T12526] netlink: 'syz.0.2913': attribute type 1 has an invalid length.
[  154.022088][T12534] netlink: 'syz.0.2917': attribute type 18 has an invalid length.
[  154.193927][T12540] wireguard0: entered promiscuous mode
[  154.197297][T12540] wireguard0: entered allmulticast mode
[  154.398662][T12568] netlink: 'syz.0.2932': attribute type 12 has an invalid length.
[  154.405624][T12568] netlink: 'syz.0.2932': attribute type 14 has an invalid length.
[  154.789665][T12601] netlink: 'syz.2.2946': attribute type 58 has an invalid length.
[  155.972630][T12733] netlink: 'syz.2.3001': attribute type 11 has an invalid length.
[  156.027780][T12739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.030340][T12739] syzkaller0: entered promiscuous mode
[  156.032178][T12739] syzkaller0: entered allmulticast mode
[  156.046694][T12739] tipc: Resetting bearer <eth:syzkaller0>
[  156.049471][T12738] tipc: Resetting bearer <eth:syzkaller0>
[  156.060798][T12738] tipc: Disabling bearer <eth:syzkaller0>
[  156.211698][T12760] __nla_validate_parse: 18 callbacks suppressed
[  156.211712][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3014'.
[  156.218352][T12760] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3014'.
[  156.283263][T12767] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3016'.
[  156.514427][T12791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.534744][T12789] tipc: Resetting bearer <eth:syzkaller0>
[  156.549768][T12789] tipc: Disabling bearer <eth:syzkaller0>
[  156.664409][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'.
[  157.277397][T12829] sctp: [Deprecated]: syz.2.3035 (pid 12829) Use of int in maxseg socket option.
[  157.277397][T12829] Use struct sctp_assoc_value instead
[  159.012973][T12944] net_ratelimit: 8 callbacks suppressed
[  159.012986][T12944] openvswitch: netlink: IP tunnel TTL not specified.
[  159.048263][T12946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3085'.
[  159.107628][T12946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3085'.
[  159.202451][T12946] hsr_slave_1 (unregistering): left promiscuous mode
[  159.902185][T13005] netlink: 550 bytes leftover after parsing attributes in process `syz.0.3111'.
[  160.198860][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.516342][T13031] lo speed is unknown, defaulting to 1000
[  160.650449][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'.
[  160.777936][T13066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.781115][T13066] syzkaller0: entered promiscuous mode
[  160.782852][T13066] syzkaller0: entered allmulticast mode
[  160.808796][T13066] tipc: Resetting bearer <eth:syzkaller0>
[  160.813198][T13065] tipc: Resetting bearer <eth:syzkaller0>
[  160.823563][T13065] tipc: Disabling bearer <eth:syzkaller0>
[  160.913355][T13074] netlink: 'syz.0.3143': attribute type 1 has an invalid length.
[  161.209374][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3158'.
[  161.341398][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'.
[  161.497838][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3172'.
[  161.616543][T13146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3177'.
[  162.152422][T13196] syzkaller1: entered promiscuous mode
[  162.157096][T13196] syzkaller1: entered allmulticast mode
[  162.301310][T13207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3206'.
[  162.304167][T13207] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3206'.
[  162.413502][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'.
[  162.474071][T13219] veth0_to_bond: entered allmulticast mode
[  162.663013][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3221'.
[  162.701505][T13237] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  162.715565][T13237] macvlan0: entered promiscuous mode
[  162.717230][T13237] macvlan0: entered allmulticast mode
[  162.719071][T13237] bond5: (slave macvlan0): Error -98 calling set_mac_address
[  163.066350][T13271] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3235'.
[  163.549433][T13323] xt_hashlimit: size too large, truncated to 1048576
[  163.627840][T13313] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3257'.
[  163.727294][T13313] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  163.730791][T13313] bond0 (unregistering): Released all slaves
[  164.161194][T13332] lo speed is unknown, defaulting to 1000
[  164.427665][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'.
[  164.619179][T13352] openvswitch: netlink: Key type 30 is not supported
[  164.748159][T13360] netlink: 'syz.1.3272': attribute type 9 has an invalid length.
[  164.750825][T13360] netlink: 'syz.1.3272': attribute type 7 has an invalid length.
[  164.753144][T13360] netlink: 'syz.1.3272': attribute type 8 has an invalid length.
[  165.368726][T13392] netlink: 'syz.2.3289': attribute type 7 has an invalid length.
[  166.100970][T13424] vlan3: entered promiscuous mode
[  166.230413][T13428] @: renamed from bond_slave_0 (while UP)
[  166.263027][T13430] sctp: [Deprecated]: syz.0.3304 (pid 13430) Use of int in maxseg socket option.
[  166.263027][T13430] Use struct sctp_assoc_value instead
[  166.367466][T13438] netlink: 'syz.2.3308': attribute type 21 has an invalid length.
[  166.370142][T13438] __nla_validate_parse: 4 callbacks suppressed
[  166.370152][T13438] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3308'.
[  166.375789][T13438] netlink: 'syz.2.3308': attribute type 4 has an invalid length.
[  166.378304][T13438] netlink: 'syz.2.3308': attribute type 5 has an invalid length.
[  166.380948][T13438] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3308'.
[  166.839552][   T27] 
[  166.840397][   T27] ======================================================
[  166.842578][   T27] WARNING: possible circular locking dependency detected
[  166.844707][   T27] 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 Not tainted
[  166.847228][   T27] ------------------------------------------------------
[  166.850062][   T27] kworker/u10:0/27 is trying to acquire lock:
[  166.851952][   T27] ffff88802210c358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  166.854741][   T27] 
[  166.854741][   T27] but task is already holding lock:
[  166.856951][   T27] ffff888022103988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  166.859843][   T27] 
[  166.859843][   T27] which lock already depends on the new lock.
[  166.859843][   T27] 
[  166.862957][   T27] 
[  166.862957][   T27] the existing dependency chain (in reverse order) is:
[  166.865686][   T27] 
[  166.865686][   T27] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  166.868262][   T27]        lock_acquire+0x120/0x360
[  166.869786][   T27]        down_write+0x96/0x1f0
[  166.871286][   T27]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  166.873214][   T27]        nbd_start_device+0x16c/0xac0
[  166.874881][   T27]        nbd_genl_connect+0x135b/0x18f0
[  166.876674][   T27]        genl_family_rcv_msg_doit+0x215/0x300
[  166.878938][   T27]        genl_rcv_msg+0x60e/0x790
[  166.880497][   T27]        netlink_rcv_skb+0x208/0x470
[  166.882145][   T27]        genl_rcv+0x28/0x40
[  166.883552][   T27]        netlink_unicast+0x75c/0x8e0
[  166.885176][   T27]        netlink_sendmsg+0x805/0xb30
[  166.886877][   T27]        __sock_sendmsg+0x21c/0x270
[  166.888472][   T27]        ____sys_sendmsg+0x505/0x830
[  166.890117][   T27]        ___sys_sendmsg+0x21f/0x2a0
[  166.891696][   T27]        __x64_sys_sendmsg+0x19b/0x260
[  166.893349][   T27]        do_syscall_64+0xfa/0x3b0
[  166.894907][   T27]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.896878][   T27] 
[  166.896878][   T27] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  166.899254][   T27]        lock_acquire+0x120/0x360
[  166.900842][   T27]        __mutex_lock+0x182/0xe80
[  166.902398][   T27]        refcount_dec_and_mutex_lock+0x30/0xa0
[  166.904306][   T27]        nbd_config_put+0x2c/0x790
[  166.905959][   T27]        nbd_release+0xfe/0x140
[  166.907475][   T27]        bdev_release+0x536/0x650
[  166.909052][   T27]        blkdev_release+0x15/0x20
[  166.910591][   T27]        __fput+0x44c/0xa70
[  166.911974][   T27]        fput_close_sync+0x119/0x200
[  166.913733][   T27]        __x64_sys_close+0x7f/0x110
[  166.915383][   T27]        do_syscall_64+0xfa/0x3b0
[  166.916921][   T27]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.918815][   T27] 
[  166.918815][   T27] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  166.921194][   T27]        validate_chain+0xb9b/0x2140
[  166.922785][   T27]        __lock_acquire+0xab9/0xd20
[  166.924387][   T27]        lock_acquire+0x120/0x360
[  166.925938][   T27]        __mutex_lock+0x182/0xe80
[  166.927493][   T27]        __del_gendisk+0x129/0x9e0
[  166.929099][   T27]        del_gendisk+0xe8/0x160
[  166.930598][   T27]        nbd_dev_remove_work+0x47/0xe0
[  166.932251][   T27]        process_scheduled_works+0xae1/0x17b0
[  166.934166][   T27]        worker_thread+0x8a0/0xda0
[  166.935738][   T27]        kthread+0x711/0x8a0
[  166.937181][   T27]        ret_from_fork+0x3fc/0x770
[  166.938753][   T27]        ret_from_fork_asm+0x1a/0x30
[  166.940383][   T27] 
[  166.940383][   T27] other info that might help us debug this:
[  166.940383][   T27] 
[  166.943459][   T27] Chain exists of:
[  166.943459][   T27]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  166.943459][   T27] 
[  166.947720][   T27]  Possible unsafe locking scenario:
[  166.947720][   T27] 
[  166.950134][   T27]        CPU0                    CPU1
[  166.951834][   T27]        ----                    ----
[  166.953502][   T27]   rlock(&set->update_nr_hwq_lock);
[  166.955244][   T27]                                lock(&nbd->config_lock);
[  166.957448][   T27]                                lock(&set->update_nr_hwq_lock);
[  166.959879][   T27]   lock(&disk->open_mutex);
[  166.961333][   T27] 
[  166.961333][   T27]  *** DEADLOCK ***
[  166.961333][   T27] 
[  166.963820][   T27] 3 locks held by kworker/u10:0/27:
[  166.965444][   T27]  #0: ffff8880220ec948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  166.968847][   T27]  #1: ffffc9000060fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  166.972649][   T27]  #2: ffff888022103988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  166.975714][   T27] 
[  166.975714][   T27] stack backtrace:
[  166.977530][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  166.977541][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.977548][   T27] Workqueue: nbd-del nbd_dev_remove_work
[  166.977561][   T27] Call Trace:
[  166.977566][   T27]  <TASK>
[  166.977571][   T27]  dump_stack_lvl+0x189/0x250
[  166.977582][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.977590][   T27]  ? __pfx__printk+0x10/0x10
[  166.977601][   T27]  ? print_lock_name+0xde/0x100
[  166.977610][   T27]  print_circular_bug+0x2ee/0x310
[  166.977621][   T27]  check_noncircular+0x134/0x160
[  166.977631][   T27]  validate_chain+0xb9b/0x2140
[  166.977641][   T27]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  166.977653][   T27]  ? arch_stack_walk+0x11c/0x150
[  166.977665][   T27]  __lock_acquire+0xab9/0xd20
[  166.977674][   T27]  ? __del_gendisk+0x129/0x9e0
[  166.977682][   T27]  lock_acquire+0x120/0x360
[  166.977689][   T27]  ? __del_gendisk+0x129/0x9e0
[  166.977698][   T27]  ? check_path+0x21/0x40
[  166.977707][   T27]  __mutex_lock+0x182/0xe80
[  166.977716][   T27]  ? __del_gendisk+0x129/0x9e0
[  166.977726][   T27]  ? __del_gendisk+0x129/0x9e0
[  166.977735][   T27]  ? __pfx___mutex_lock+0x10/0x10
[  166.977742][   T27]  ? __pfx___might_resched+0x10/0x10
[  166.977753][   T27]  ? __lock_acquire+0xab9/0xd20
[  166.977760][   T27]  ? disk_del_events+0xb5/0x210
[  166.977771][   T27]  ? __del_gendisk+0xc1/0x9e0
[  166.977780][   T27]  __del_gendisk+0x129/0x9e0
[  166.977788][   T27]  ? del_gendisk+0xe0/0x160
[  166.977818][   T27]  ? __pfx___del_gendisk+0x10/0x10
[  166.977827][   T27]  ? down_read+0x1ad/0x2e0
[  166.977836][   T27]  del_gendisk+0xe8/0x160
[  166.977845][   T27]  nbd_dev_remove_work+0x47/0xe0
[  166.977854][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  166.977862][   T27]  process_scheduled_works+0xae1/0x17b0
[  166.977875][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  166.977886][   T27]  worker_thread+0x8a0/0xda0
[  166.977899][   T27]  kthread+0x711/0x8a0
[  166.977909][   T27]  ? __pfx_worker_thread+0x10/0x10
[  166.977917][   T27]  ? __pfx_kthread+0x10/0x10
[  166.977926][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.977938][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.977945][   T27]  ? __pfx_kthread+0x10/0x10
[  166.977954][   T27]  ret_from_fork+0x3fc/0x770
[  166.977964][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  166.977976][   T27]  ? __switch_to_asm+0x39/0x70
[  166.977990][   T27]  ? __switch_to_asm+0x33/0x70
[  166.978003][   T27]  ? __pfx_kthread+0x10/0x10
[  166.978017][   T27]  ret_from_fork_asm+0x1a/0x30
[  166.978037][   T27]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  167.247791][ T5833] syz_tun (unregistering): left promiscuous mode

VM DIAGNOSIS:
07:25:34  Registers:
info registers vcpu 0

CPU#0
RAX=f8b243414c2b9500 RBX=ffffffff81976a48 RCX=f8b243414c2b9500 RDX=0000000000000001
RSI=ffffffff8be28be0 RDI=ffffffff81976a48 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3b67cd CR3=000000012089c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00010006000c0000 0000000000020004
XMM02=0000000000070002 000c000000000000 XMM03=001c000000000000 00010008000c0000
XMM04=07001c0000000000 0000010008000c00 XMM05=0000000000000700 02000c0000000000
XMM06=0000010006000c00 0000000000000200 XMM07=04000c0000000125 dfdbff0000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f70a2411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000060ee10
R8 =ffff888020c78237 R9 =1ffff1100418f046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af189f R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b15516a4f8 CR3=000000012588c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff82326912 ffffffff81686f4f
XMM02=ffffffff823b60ad ffffffff82326b1d XMM03=ffffffff823b569d ffffffff823b5402
XMM04=00007fb01caed100 00007fb01bf86440 XMM05=00007fb01bf86458 00007fb01bf864a0
XMM06=00007fb01bf86498 00007fb01bf86490 XMM07=00007fb01bf86488 00007fb01bf86480
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fb01be11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
