last executing test programs:

1m2.901108729s ago: executing program 0 (id=2548):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

1m2.877360347s ago: executing program 0 (id=2553):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r1}, 0x20)

1m2.818370431s ago: executing program 2 (id=2554):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1m2.818219951s ago: executing program 0 (id=2555):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x84, @mcast1, 0x7fff}, 0x1c)

1m2.817930443s ago: executing program 0 (id=2558):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m2.750207989s ago: executing program 2 (id=2559):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40800d4)

1m2.748644387s ago: executing program 2 (id=2562):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000}, 0x20)

1m2.689152758s ago: executing program 2 (id=2563):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18)
getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000100))

1m2.687260549s ago: executing program 0 (id=2565):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107c000000000007000000000000009500000000000000c2058b8a6c0bfceb46af027f03bc71e36d8061adc1ef9ded15420ba2e71c5f9c2a0262b002b919d30bf6e40582d9bf2d5297b68be76034a956a2206a6a32739799c21d54fbc5872c160c839bd301d913fb01c103f3b7bd1bfc0b33d8e797b4d1c0c708924d567015fc2e3d41cc5b569e15f4aa714a39ec98610166acc7dac98e463acf5b168653e3f52528e394eaf7786d17e76c6709c15da46117f58366a9b60947ea042a00b313a6dc82"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)

1m2.686481331s ago: executing program 2 (id=2566):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e24, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_rxfh={0x46, 0xfffffffc, 0x2, 0xfff, 0x8, "e4b657", 0xc1dc, [0x10001, 0x7, 0x4, 0xf, 0x0, 0x8, 0x0]}})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x2f8, r4, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c4, 0x11d, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x4, 0x34, 0x6, 0xfffb, 0x4, 0x7fff, 0xfff3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x8}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x3, 0x4}, {0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x6, 0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x2}, {}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x4, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0xfff7, 0x1, 0x3, 0xe, 0xb]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf0b9, 0x10, 0x3, 0x5, 0xfff7, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x4}, {0x2, 0x9}, {0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1779, 0x400, 0x3, 0x9, 0x6, 0x401, 0xc, 0x1ff]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x2, 0xfad8, 0x3, 0x5, 0x8, 0x21d]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x7}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x5, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0x1}, {0x7}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x65, 0x7, 0x731, 0x9, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff81, 0x5, 0x3, 0x9, 0x6, 0x9, 0xc, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x5, 0x18, 0x4, 0x6c, 0xc, 0x3, 0x1, 0x16, 0x4, 0x30, 0x0, 0x60, 0x24, 0x1, 0x30, 0x48, 0x1b]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0xc, 0x16, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf26, 0x348, 0x6, 0x1, 0x81, 0xfff6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x6, 0x6, 0xb, 0x2, 0x6c, 0x2b, 0x24, 0xc, 0x5, 0x2, 0xb, 0x0, 0x5, 0x36, 0x1, 0x5, 0xc, 0x21, 0x16, 0x6, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x4, 0xff, 0x6, 0x6000, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x5, 0xb, 0x18, 0x36, 0x5, 0x4, 0x1, 0x6, 0x5, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0xb, 0xb, 0x24, 0x4, 0x30, 0x1, 0x7e, 0x16, 0xc, 0x30, 0x24, 0xc, 0x16, 0x2, 0x6d, 0x6c, 0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x5, 0x48, 0x5, 0x4, 0x30, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x4, 0x60, 0xb, 0x24, 0x60, 0x60, 0x18, 0x4, 0x6c, 0x60, 0x36, 0x18, 0x6, 0x1b, 0x6, 0x5, 0x0, 0x2, 0x60, 0x3]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x58, 0x48, 0x51, 0x36, 0x24, 0x6, 0x48, 0x0, 0x6c, 0x2, 0x36, 0x36, 0x16, 0xb28cafaa7ae5dc58, 0x2, 0x5, 0x1b, 0x6, 0x36, 0x1b, 0x24, 0x36, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x7, 0x81, 0x4, 0x3, 0xfff4, 0x8]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x5, 0x5}, {0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0xa}, {0x7, 0x6}, {0x2, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}]}]}]}, 0x2f8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'nr0\x00', {0x2, 0x4e23, @local}})
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r7, 0x0, 0x100000}, 0x18)
r9 = socket$kcm(0x21, 0x2, 0x2)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
recvmsg$unix(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)}, 0x40010100)
sendto$unix(r11, &(0x7f0000000080), 0x0, 0xd1, 0x0, 0x0)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000025c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r10, @ANYRES32=r13, @ANYRESHEX=r8], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r10, 0x5, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
close(r9)
mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0)

1m2.561041813s ago: executing program 2 (id=2570):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48)

1m2.526450165s ago: executing program 32 (id=2570):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48)

1m2.471375077s ago: executing program 0 (id=2572):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90)

1m2.449341291s ago: executing program 33 (id=2572):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90)

279.026869ms ago: executing program 4 (id=4888):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

230.553511ms ago: executing program 4 (id=4891):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x1e)

230.423957ms ago: executing program 4 (id=4892):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)

168.810614ms ago: executing program 4 (id=4894):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x20000001, @mcast2, 0x5}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080))

168.432099ms ago: executing program 3 (id=4896):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x70, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x47, 0x1, {0x7, 0x537, 0x1, 0x8100}}, {0x14, 0x1, {0x7, 0xbbd, 0x4, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40)

168.19942ms ago: executing program 1 (id=4897):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

118.801422ms ago: executing program 4 (id=4898):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

118.623883ms ago: executing program 1 (id=4899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)

118.257873ms ago: executing program 3 (id=4900):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0)

117.902466ms ago: executing program 1 (id=4901):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000028000000811199000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000003000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa900000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0xbc, &(0x7f00000006c0)=""/188, 0x8eb2e000f2c28467, 0x7}, 0x94)

59.11192ms ago: executing program 3 (id=4902):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0)

58.903275ms ago: executing program 1 (id=4903):
unshare(0x24020400)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000001c0)=0x1, 0x4)

58.804038ms ago: executing program 3 (id=4904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000140))

58.34305ms ago: executing program 4 (id=4905):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0xfffffffffffffdaa)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000840)=0x5, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
writev(r7, &(0x7f0000001180)=[{&(0x7f0000001240)="06", 0x1}], 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'ip6erspan0\x00', 0x2})
ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36)
bind$bt_hci(r8, &(0x7f0000000280), 0x6)

58.200305ms ago: executing program 3 (id=4906):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@can_delroute={0x14c, 0x19, 0x1, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x42, 0x31, 0x1, 0xf, "04067cefb761bf4cd60b996dcfc2eda3bf5a8960f1c310db32340fb2601c902c030c37a83dee37d8dbe00b1f168cd993322ca68342cb8e0dcecd1e41c43358889f6a3723663c761a9023672f67ed73b6012cb6d13c9de527a0ec9b5f438d1a35d7189acf002dc141ddb8e4c1c29a7d93659c1d33a8a3f4db9156095f2724104cf24d69637fc86e75bfa14943b407f92f833500608a824e6f6ce79743f1515a19246d573952c150c87a49874e822aeabfa2373a4c01527befca2465f55548fdf9e7ba9db8023de596eca93fd4a6219443b1de38820a26b4b8009ce8d93ce1b75cd2e6a5638ad19cb5d44bcf26240891c0becf733b9fb399f588a02a81298c81ae", 0x0, "a74e026c5e1d7a19689c4c82eb773e0af793e89e"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "00004000003fd600"}, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

368.601µs ago: executing program 1 (id=4907):
r0 = socket(0x22, 0x2, 0x24)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0)

120.086µs ago: executing program 3 (id=4908):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x1, 0x70bd35, 0x25dfdbfd, {0x0, 0x0, 0x600, r1, 0x40810, 0x3}, [@IFLA_VF_PORTS={0x4}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
socketpair(0x1, 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=4909):
r0 = socket$inet6(0xa, 0x805, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)

kernel console output (not intermixed with test programs):

value (18446744073709551607)
[   56.960064][ T6211] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   57.019709][ T6223] netlink: 'syz.2.135': attribute type 5 has an invalid length.
[   57.055690][ T6226] Illegal XDP return value 4294967282 on prog  (id 18) dev N/A, expect packet loss!
[   57.197318][ T6244] syzkaller1: entered promiscuous mode
[   57.201395][ T6244] syzkaller1: entered allmulticast mode
[   57.266508][ T6249] IPv6: addrconf: prefix option has invalid lifetime
[   57.273226][ T6250] sctp: [Deprecated]: syz.0.150 (pid 6250) Use of struct sctp_assoc_value in delayed_ack socket option.
[   57.273226][ T6250] Use struct sctp_sack_info instead
[   57.285748][ T6250] sctp: [Deprecated]: syz.0.150 (pid 6250) Use of struct sctp_assoc_value in delayed_ack socket option.
[   57.285748][ T6250] Use struct sctp_sack_info instead
[   57.393061][ T5770] IPVS: starting estimator thread 0...
[   57.479129][ T5854] Bluetooth: hci1: command tx timeout
[   57.479846][ T6264] IPVS: using max 61 ests per chain, 146400 per kthread
[   57.481469][ T5854] Bluetooth: hci0: command tx timeout
[   57.550962][ T6277] tipc: Started in network mode
[   57.553742][ T6277] tipc: Node identity 8e0dd31d989d, cluster identity 4711
[   57.559014][ T5854] Bluetooth: hci2: command tx timeout
[   57.563383][ T6277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.585856][ T6275] tipc: Resetting bearer <eth:syzkaller0>
[   57.633594][ T6275] tipc: Disabling bearer <eth:syzkaller0>
[   57.712753][ T6293] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   58.052632][ T6339] netlink: 'syz.1.185': attribute type 1 has an invalid length.
[   58.189684][ T6351] tipc: Started in network mode
[   58.191487][ T6351] tipc: Node identity 9a09e63af7a6, cluster identity 4711
[   58.194005][ T6351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.197553][ T6351] syzkaller0: entered promiscuous mode
[   58.200366][ T6351] syzkaller0: entered allmulticast mode
[   58.204681][ T6351] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   58.213584][ T6351] tipc: Resetting bearer <eth:syzkaller0>
[   58.217668][ T6350] tipc: Resetting bearer <eth:syzkaller0>
[   58.223085][ T6350] tipc: Disabling bearer <eth:syzkaller0>
[   58.385103][ T6366] tipc: MTU too low for tipc bearer
[   58.554387][ T6388] __nla_validate_parse: 2 callbacks suppressed
[   58.554398][ T6388] netlink: 3 bytes leftover after parsing attributes in process `syz.0.207'.
[   58.563672][ T6388] tipc: Can't bind to reserved service type 2
[   58.689446][ T6401] netlink: 'syz.2.215': attribute type 16 has an invalid length.
[   58.692724][ T6401] netlink: 'syz.2.215': attribute type 17 has an invalid length.
[   58.751173][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.754477][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.861258][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.872741][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.963601][ T5891] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.967451][ T5891] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.978277][ T5891] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.984820][ T5891] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.342609][ T6447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.352250][ T6447] syzkaller0: entered promiscuous mode
[   59.361327][ T6447] syzkaller0: entered allmulticast mode
[   59.377367][ T6447] tipc: Resetting bearer <eth:syzkaller0>
[   59.381966][ T6446] tipc: Resetting bearer <eth:syzkaller0>
[   59.392262][ T6446] tipc: Disabling bearer <eth:syzkaller0>
[   59.558656][ T5236] Bluetooth: hci1: command tx timeout
[   59.560589][ T5854] Bluetooth: hci0: command tx timeout
[   59.638931][ T5854] Bluetooth: hci2: command tx timeout
[   59.887583][ T6477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.084829][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'.
[   60.093671][ T6487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.096770][ T6487] syzkaller0: entered promiscuous mode
[   60.100074][ T6487] syzkaller0: entered allmulticast mode
[   60.105353][ T6486] tipc: Resetting bearer <eth:syzkaller0>
[   60.109550][ T6486] tipc: Disabling bearer <eth:syzkaller0>
[   60.277865][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'.
[   60.282564][ T6497] netlink: 108 bytes leftover after parsing attributes in process `syz.1.251'.
[   60.285844][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'.
[   60.618274][ T6525] netlink: 104 bytes leftover after parsing attributes in process `syz.2.266'.
[   60.635414][ T6527] netlink: 'syz.1.265': attribute type 7 has an invalid length.
[   60.648964][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[   60.687669][ T6527] bridge1: port 1(bond1) entered blocking state
[   60.694185][ T6527] bridge1: port 1(bond1) entered disabled state
[   60.696956][ T6527] bond1: entered allmulticast mode
[   60.990799][ T6563] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   60.993764][ T6563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   61.837095][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'.
[   61.842122][ T6588] vlan2: entered allmulticast mode
[   61.844018][ T6588] bridge0: entered allmulticast mode
[   61.925628][ T6597] netlink: 'syz.1.294': attribute type 12 has an invalid length.
[   61.929441][ T6597] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.294'.
[   62.007200][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[   62.071100][ T6612] geneve2: entered promiscuous mode
[   62.082579][ T6612] geneve2: entered allmulticast mode
[   62.327614][ T6628] lo speed is unknown, defaulting to 1000
[   62.333672][ T6628] lo speed is unknown, defaulting to 1000
[   62.338413][ T6628] lo speed is unknown, defaulting to 1000
[   62.343589][ T6628] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.353808][ T6628] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   62.370384][ T6628] lo speed is unknown, defaulting to 1000
[   62.378142][ T6628] lo speed is unknown, defaulting to 1000
[   62.381650][ T6628] lo speed is unknown, defaulting to 1000
[   62.412108][ T6635] netlink: 'syz.2.311': attribute type 29 has an invalid length.
[   62.416760][ T6635] netlink: 'syz.2.311': attribute type 29 has an invalid length.
[   62.421796][ T6635] unsupported nla_type 58
[   62.508511][ T6639] netlink: 'syz.0.313': attribute type 15 has an invalid length.
[   62.525397][ T6642] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.906808][ T6668] netlink: 'syz.2.326': attribute type 11 has an invalid length.
[   63.385175][ T6698] Bluetooth: MGMT ver 1.23
[   63.804912][ T6721] syzkaller0: entered promiscuous mode
[   63.807307][ T6721] syzkaller0: entered allmulticast mode
[   63.842765][ T6723] Bluetooth: MGMT ver 1.23
[   64.126149][ T6742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.175453][ T6746] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   64.602546][ T6764] __nla_validate_parse: 5 callbacks suppressed
[   64.602561][ T6764] netlink: 76 bytes leftover after parsing attributes in process `syz.1.364'.
[   64.913421][ T6772] lo speed is unknown, defaulting to 1000
[   64.950729][ T6773] netlink: 'syz.1.368': attribute type 13 has an invalid length.
[   64.962911][ T6773] netlink: 'syz.1.368': attribute type 17 has an invalid length.
[   65.084951][ T6773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.696661][ T6839] netlink: 'syz.2.400': attribute type 1 has an invalid length.
[   65.714605][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.727449][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.730693][ T6839] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   65.736242][ T6839] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   65.785025][ T6839] veth3: entered promiscuous mode
[   65.788175][ T6839] bond1: (slave veth3): Enslaving as an active interface with a down link
[   65.802113][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'.
[   65.806170][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.872351][ T6855] Bluetooth: MGMT ver 1.23
[   66.081522][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'.
[   66.085607][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[   66.092351][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'.
[   66.096100][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[   66.101426][ T6876] netlink: 5 bytes leftover after parsing attributes in process `syz.2.412'.
[   66.111401][ T6876] netlink: 'syz.2.412': attribute type 16 has an invalid length.
[   66.114959][ T6876] netlink: 'syz.2.412': attribute type 17 has an invalid length.
[   66.149828][ T6876] IPv6: NLM_F_REPLACE set, but no existing node found!
[   66.495923][ T6900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.424'.
[   66.562408][ T6901] lo speed is unknown, defaulting to 1000
[   66.911597][ T6906] veth0_to_bridge: entered promiscuous mode
[   66.914601][ T6905] veth0_to_bridge: left promiscuous mode
[   67.017362][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   67.243464][ T6935] vlan2: entered promiscuous mode
[   67.245648][ T6935] dummy0: entered promiscuous mode
[   67.612710][ T6967] netlink: 'syz.1.452': attribute type 5 has an invalid length.
[   67.693168][ T6963] lo speed is unknown, defaulting to 1000
[   67.878854][ T5236] Bluetooth: hci2: command 0x0401 tx timeout
[   67.878865][ T5854] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   67.889092][ T6997] netlink: 'syz.1.465': attribute type 21 has an invalid length.
[   67.892345][ T6997] netlink: 156 bytes leftover after parsing attributes in process `syz.1.465'.
[   67.929599][ T6999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.939001][ T6999] syzkaller0: entered promiscuous mode
[   67.948666][ T6999] syzkaller0: entered allmulticast mode
[   67.954968][ T6999] tipc: Resetting bearer <eth:syzkaller0>
[   67.970176][ T6998] tipc: Resetting bearer <eth:syzkaller0>
[   67.973477][ T6998] tipc: Disabling bearer <eth:syzkaller0>
[   68.645653][ T7063] lo speed is unknown, defaulting to 1000
[   68.746166][ T7073] team0: Device gtp1 is of different type
[   68.956987][ T7078] lo speed is unknown, defaulting to 1000
[   69.320123][ T7090] 8021q: adding VLAN 0 to HW filter on device bond3
[   69.323949][ T7090] bond2: (slave bond3): Enslaving as an active interface with an up link
[   69.340649][ T7090] bond2 (unregistering): (slave bond3): Releasing backup interface
[   69.348266][ T7090] bond2 (unregistering): Released all slaves
[   69.367170][ T7096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.370965][ T7096] syzkaller0: entered promiscuous mode
[   69.373108][ T7096] syzkaller0: entered allmulticast mode
[   69.378549][ T7096] tipc: Resetting bearer <eth:syzkaller0>
[   69.381869][ T7095] tipc: Resetting bearer <eth:syzkaller0>
[   69.384842][ T7095] tipc: Disabling bearer <eth:syzkaller0>
[   70.197177][ T7173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.200568][ T7173] syzkaller0: entered promiscuous mode
[   70.202785][ T7173] syzkaller0: entered allmulticast mode
[   70.211802][ T7173] tipc: Resetting bearer <eth:syzkaller0>
[   70.216564][ T7172] tipc: Resetting bearer <eth:syzkaller0>
[   70.223875][ T7172] tipc: Disabling bearer <eth:syzkaller0>
[   71.161571][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.258070][ T7203] syzkaller1: entered promiscuous mode
[   71.267949][ T7203] syzkaller1: entered allmulticast mode
[   71.424898][ T7220] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.497363][ T7230] netlink: 'syz.1.572': attribute type 1 has an invalid length.
[   71.622263][ T7252] __nla_validate_parse: 11 callbacks suppressed
[   71.622282][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.584'.
[   71.789232][ T5874] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   72.580438][ T7286] netlink: 'syz.0.596': attribute type 1 has an invalid length.
[   72.583403][ T7286] netlink: 172 bytes leftover after parsing attributes in process `syz.0.596'.
[   73.421070][ T7304] netlink: 224 bytes leftover after parsing attributes in process `syz.1.606'.
[   73.447634][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   73.453940][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   73.460791][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   73.461832][ T7292] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   73.466935][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   73.466954][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   73.499821][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   73.504542][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   73.561805][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.564338][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.693879][ T7335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.700243][ T7335] syzkaller0: entered promiscuous mode
[   73.702797][ T7335] syzkaller0: entered allmulticast mode
[   73.714044][ T7335] tipc: Resetting bearer <eth:syzkaller0>
[   73.748461][ T7334] tipc: Resetting bearer <eth:syzkaller0>
[   73.754447][ T7334] tipc: Disabling bearer <eth:syzkaller0>
[   73.841137][ T7352] ieee802154 phy0 wpan0: encryption failed: -90
[   74.488283][ T7436] tipc: New replicast peer: 255.255.255.255
[   74.491854][ T7436] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.679883][ T5236] Bluetooth: hci0: command 0x0c20 tx timeout
[   74.940833][ T7489] lo speed is unknown, defaulting to 1000
[   75.030965][ T7503] gretap0: entered promiscuous mode
[   75.064965][ T7507] netlink: 'syz.2.689': attribute type 2 has an invalid length.
[   75.152097][ T7520] netlink: 'syz.0.696': attribute type 1 has an invalid length.
[   75.508921][   T96] tipc: Node number set to 378589981
[   75.784644][    C0] Unknown status report in ack skb
[   75.944085][ T7585] syzkaller1: entered promiscuous mode
[   75.949176][ T7585] syzkaller1: entered allmulticast mode
[   75.975915][ T7592] tipc: Failed to remove unknown binding: 66,1,1/378589981:2590335268/2590335270
[   76.542515][ T7653] lo speed is unknown, defaulting to 1000
[   76.608784][ T7653] netlink: 'syz.2.757': attribute type 1 has an invalid length.
[   76.733240][ T7675] __nla_validate_parse: 32 callbacks suppressed
[   76.733254][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[   76.741023][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[   76.746848][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[   76.750995][ T7679] netlink: 'syz.2.767': attribute type 8 has an invalid length.
[   76.828340][ T7689] netlink: 232 bytes leftover after parsing attributes in process `syz.2.772'.
[   76.961970][ T7709] netlink: 41 bytes leftover after parsing attributes in process `syz.2.782'.
[   77.129245][ T7730] netlink: 'syz.0.792': attribute type 10 has an invalid length.
[   77.132656][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.145047][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.151460][ T7730] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   77.195349][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'.
[   77.200022][ T7744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.799'.
[   77.200954][ T7741] pim6reg: entered allmulticast mode
[   77.208380][ T7741] pim6reg: left allmulticast mode
[   77.230383][ T7746] netlink: 830 bytes leftover after parsing attributes in process `syz.1.800'.
[   77.300066][ T7758] netlink: 76 bytes leftover after parsing attributes in process `syz.2.806'.
[   77.303868][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'.
[   77.364476][ T7766] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[   77.511581][ T7788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.534429][ T7788] syzkaller0: entered promiscuous mode
[   77.536789][ T7788] syzkaller0: entered allmulticast mode
[   77.540380][ T7788] tipc: Resetting bearer <eth:syzkaller0>
[   77.571184][ T7787] tipc: Resetting bearer <eth:syzkaller0>
[   77.647008][ T7787] tipc: Disabling bearer <eth:syzkaller0>
[   77.785721][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.789142][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.883157][ T7808] netlink: 'syz.1.829': attribute type 1 has an invalid length.
[   78.011651][ T7822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.015291][ T7822] syzkaller0: entered promiscuous mode
[   78.017656][ T7822] syzkaller0: entered allmulticast mode
[   78.026545][ T7822] tipc: Resetting bearer <eth:syzkaller0>
[   78.027906][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.031361][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.034291][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.037170][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.040581][ T7821] tipc: Resetting bearer <eth:syzkaller0>
[   78.045303][ T7821] tipc: Disabling bearer <eth:syzkaller0>
[   78.250650][ T7832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.254007][ T7832] syzkaller0: entered promiscuous mode
[   78.256057][ T7832] syzkaller0: entered allmulticast mode
[   78.269605][ T7832] tipc: Resetting bearer <eth:syzkaller0>
[   78.273070][ T7831] tipc: Resetting bearer <eth:syzkaller0>
[   78.278328][ T7831] tipc: Disabling bearer <eth:syzkaller0>
[   79.565328][ T7901] netlink: 'syz.2.871': attribute type 13 has an invalid length.
[   79.690279][ T7923] netlink: 'syz.0.882': attribute type 13 has an invalid length.
[   79.693233][ T7923] netlink: 'syz.0.882': attribute type 12 has an invalid length.
[   79.797058][ T7936] gretap0: left promiscuous mode
[   79.874393][ T7936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.972122][ T5770] lo speed is unknown, defaulting to 1000
[   79.973403][ T7941] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   79.974826][ T5770] syz1: Port: 1 Link DOWN
[   79.986116][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.998726][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.005258][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.011627][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.176644][ T8020] geneve2: left promiscuous mode
[   81.178389][ T8020] geneve2: left allmulticast mode
[   81.182298][ T8020] veth3: left promiscuous mode
[   81.265420][ T8024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.271858][ T8024] syzkaller0: entered promiscuous mode
[   81.274357][ T8024] syzkaller0: entered allmulticast mode
[   81.287321][ T8024] tipc: Resetting bearer <eth:syzkaller0>
[   81.293519][ T8023] tipc: Resetting bearer <eth:syzkaller0>
[   81.304132][ T8023] tipc: Disabling bearer <eth:syzkaller0>
[   81.407640][   T10] cfg80211: failed to load regulatory.db
[   81.483380][ T8032] netlink: 'syz.2.932': attribute type 12 has an invalid length.
[   81.712512][ T8045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.717228][ T8045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.723446][ T8045] bond0 (unregistering): Released all slaves
[   81.911743][ T8053] veth0_to_team: entered allmulticast mode
[   82.047144][ T8054] batman_adv: batadv0: Removing interface: netdevsim0
[   82.436220][ T8100] __nla_validate_parse: 14 callbacks suppressed
[   82.436231][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'.
[   82.556622][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'.
[   82.560318][ T8115] netlink: 'syz.0.967': attribute type 39 has an invalid length.
[   83.007916][ T8152] netlink: 'syz.2.985': attribute type 3 has an invalid length.
[   83.188482][ T8164] syzkaller1: entered promiscuous mode
[   83.190922][ T8164] syzkaller1: entered allmulticast mode
[   83.253278][ T8166] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   83.256591][ T8166] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   83.402625][ T8176] lo speed is unknown, defaulting to 1000
[   83.493781][ T8184] netlink: 'syz.0.999': attribute type 1 has an invalid length.
[   83.498772][ T8184] netlink: 236 bytes leftover after parsing attributes in process `syz.0.999'.
[   83.554145][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'.
[   83.600368][ T8196] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1005'.
[   83.756371][ T8206] pimreg: entered allmulticast mode
[   83.760271][ T8206] pimreg: left allmulticast mode
[   83.897064][ T8226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1018'.
[   84.002630][ T8244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.036793][ T8253] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1031'.
[   84.097863][ T8266] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   84.141434][ T8272] netlink: 'syz.2.1040': attribute type 4 has an invalid length.
[   84.146836][ T8272] netlink: 'syz.2.1040': attribute type 4 has an invalid length.
[   84.735780][ T8371] lo speed is unknown, defaulting to 1000
[   84.890567][ T8390] ip6gre2: entered promiscuous mode
[   84.940213][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'.
[   85.089662][ T5770] tipc: Node number set to 4106926458
[   85.098415][ T8422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1106'.
[   85.186864][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'.
[   85.214046][ T8436] 8021q: adding VLAN 0 to HW filter on device bond5
[   85.235152][ T8436] macvlan2: entered promiscuous mode
[   85.237344][ T8436] macvlan2: entered allmulticast mode
[   85.241347][ T8436] bond5: entered promiscuous mode
[   85.243652][ T8436] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.248485][ T8436] bond5: left promiscuous mode
[   85.269480][ T8443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.272465][ T8443] syzkaller0: entered promiscuous mode
[   85.274377][ T8443] syzkaller0: entered allmulticast mode
[   85.279644][ T8443] tipc: Resetting bearer <eth:syzkaller0>
[   85.282252][ T8442] tipc: Resetting bearer <eth:syzkaller0>
[   85.286831][ T8442] tipc: Disabling bearer <eth:syzkaller0>
[   85.337739][ T8451] syzkaller1: entered promiscuous mode
[   85.341214][ T8451] syzkaller1: entered allmulticast mode
[   85.564927][ T8484] lo speed is unknown, defaulting to 1000
[   85.626231][ T8484] lo speed is unknown, defaulting to 1000
[   85.960610][ T8516] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[   86.890570][ T8550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.894043][ T8550] syzkaller0: entered promiscuous mode
[   86.896151][ T8550] syzkaller0: entered allmulticast mode
[   86.915582][ T8550] tipc: Resetting bearer <eth:syzkaller0>
[   86.921256][ T8549] tipc: Resetting bearer <eth:syzkaller0>
[   86.926376][ T8549] tipc: Disabling bearer <eth:syzkaller0>
[   87.237325][ T8588] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.284569][ T8588] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.344172][ T8588] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.384195][ T8588] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.450133][ T5874] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.456212][ T5874] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.469340][ T5874] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.472286][ T5874] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.532196][ T8610] __nla_validate_parse: 3 callbacks suppressed
[   87.532213][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'.
[   87.572130][ T8618] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   87.596812][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[   87.646692][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1195'.
[   87.684454][ T8627] nbd: socks must be embedded in a SOCK_ITEM attr
[   88.113761][ T8666] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1211'.
[   88.459290][ T8700] dvmrp8: entered allmulticast mode
[   88.494412][ T8700] lo speed is unknown, defaulting to 1000
[   88.569782][   T47] tipc: Node number set to 1840244282
[   88.574072][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'.
[   88.578835][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'.
[   88.610842][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'.
[   88.634066][ T8719] netlink: 'syz.2.1237': attribute type 1 has an invalid length.
[   88.860126][ T8755] syzkaller0: entered promiscuous mode
[   88.862208][ T8755] syzkaller0: entered allmulticast mode
[   88.866117][ T8757] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[   89.704474][ T8776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1261'.
[   89.856887][ T8806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.861234][ T8806] syzkaller0: entered promiscuous mode
[   89.863505][ T8806] syzkaller0: entered allmulticast mode
[   89.866100][ T8810] netlink: 'syz.1.1277': attribute type 12 has an invalid length.
[   89.871168][ T8810] netlink: 'syz.1.1277': attribute type 29 has an invalid length.
[   89.874019][ T8810] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1277'.
[   89.877557][ T8810] netlink: 'syz.1.1277': attribute type 1 has an invalid length.
[   89.884431][ T8806] tipc: Resetting bearer <eth:syzkaller0>
[   89.887811][ T8805] tipc: Resetting bearer <eth:syzkaller0>
[   89.891990][ T8805] tipc: Disabling bearer <eth:syzkaller0>
[   89.896668][ T8810] netlink: 'syz.1.1277': attribute type 12 has an invalid length.
[   89.901095][ T8810] netlink: 'syz.1.1277': attribute type 29 has an invalid length.
[   89.904435][ T8810] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1277'.
[   89.908370][ T8810] netlink: 'syz.1.1277': attribute type 1 has an invalid length.
[   89.954892][ T8818] sctp: [Deprecated]: syz.0.1282 (pid 8818) Use of int in max_burst socket option.
[   89.954892][ T8818] Use struct sctp_assoc_value instead
[   90.036294][ T8825] syzkaller1: entered promiscuous mode
[   90.039856][ T8825] syzkaller1: entered allmulticast mode
[   90.402371][ T8862] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   90.405249][ T8862] openvswitch: netlink: Duplicate key (type 0).
[   90.838743][ T5236] Bluetooth: hci2: command 0x0401 tx timeout
[   90.905317][ T8899] pim6reg: entered allmulticast mode
[   91.003624][ T8903] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.007754][ T8903] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.803272][ T8903] syz.2.1319 (8903) used greatest stack depth: 20080 bytes left
[   91.880801][ T8935] bridge_slave_0: left allmulticast mode
[   91.883295][ T8935] bridge_slave_0: left promiscuous mode
[   91.885747][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.890778][ T8935] bridge_slave_1: left allmulticast mode
[   91.893221][ T8935] bridge_slave_1: left promiscuous mode
[   91.895340][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.899831][ T8935] team0: Port device team_slave_0 removed
[   91.902752][ T8935] team0: Port device team_slave_1 removed
[   91.904827][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.907522][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.910881][ T8935] bond1: (slave veth3): Releasing active interface
[   91.967626][ T8936] netlink: 'syz.2.1330': attribute type 10 has an invalid length.
[   91.971609][ T8936] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.974755][ T8936] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.495209][ T8971] netlink: 'syz.1.1340': attribute type 3 has an invalid length.
[   92.652531][ T8994] syzkaller1: entered promiscuous mode
[   92.654939][ T8994] syzkaller1: entered allmulticast mode
[   92.774099][ T9011] netlink: zone id is out of range
[   92.776313][ T9011] netlink: zone id is out of range
[   92.778475][ T9011] netlink: zone id is out of range
[   92.782995][ T9011] netlink: zone id is out of range
[   92.785012][ T9014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.785094][ T9011] netlink: zone id is out of range
[   92.788047][ T9014] syzkaller0: entered promiscuous mode
[   92.789531][ T9011] netlink: zone id is out of range
[   92.793578][ T9011] netlink: zone id is out of range
[   92.794435][ T9014] syzkaller0: entered allmulticast mode
[   92.796588][ T9011] netlink: zone id is out of range
[   92.812951][ T9014] tipc: Resetting bearer <eth:syzkaller0>
[   92.829618][ T9013] tipc: Resetting bearer <eth:syzkaller0>
[   92.845935][ T9013] tipc: Disabling bearer <eth:syzkaller0>
[   92.934119][ T9033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.940837][ T9033] syzkaller0: entered promiscuous mode
[   92.943212][ T9033] syzkaller0: entered allmulticast mode
[   92.956508][ T9033] tipc: Resetting bearer <eth:syzkaller0>
[   92.967083][ T9032] tipc: Resetting bearer <eth:syzkaller0>
[   92.979703][ T9032] tipc: Disabling bearer <eth:syzkaller0>
[   93.005386][ T9046] __nla_validate_parse: 4 callbacks suppressed
[   93.005396][ T9046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1376'.
[   93.196773][ T9084] netlink: 'syz.2.1395': attribute type 11 has an invalid length.
[   93.203115][ T9084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1395'.
[   93.330276][ T9102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.348163][ T9102] syzkaller0: entered promiscuous mode
[   93.350737][ T9102] syzkaller0: entered allmulticast mode
[   93.353586][ T9102] tipc: Resetting bearer <eth:syzkaller0>
[   93.365233][ T9101] tipc: Resetting bearer <eth:syzkaller0>
[   93.421257][ T9101] tipc: Disabling bearer <eth:syzkaller0>
[   93.493102][ T9114] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1409'.
[   93.569735][ T9122] lo speed is unknown, defaulting to 1000
[   93.696704][ T9122] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1413'.
[   93.989374][ T9171] validate_nla: 3 callbacks suppressed
[   93.989386][ T9171] netlink: 'syz.1.1427': attribute type 1 has an invalid length.
[   94.001386][ T9171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1427'.
[   94.225982][ T9196] netlink: 'syz.1.1438': attribute type 9 has an invalid length.
[   94.233661][ T9195] netlink: 'syz.0.1436': attribute type 1 has an invalid length.
[   94.236798][ T9195] netlink: 'syz.0.1436': attribute type 1 has an invalid length.
[   94.247155][ T9195] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1436'.
[   94.303498][ T9200] lo speed is unknown, defaulting to 1000
[   94.336475][ T9206] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1442'.
[   94.436356][ T9211] netlink: 'syz.1.1444': attribute type 13 has an invalid length.
[   94.442982][ T9222] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1446'.
[   94.449149][ T9211] netlink: 'syz.1.1444': attribute type 17 has an invalid length.
[   94.506331][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.509163][ T9211] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.511623][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.514246][ T9211] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.585775][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.621034][ T9211] lo speed is unknown, defaulting to 1000
[   94.748337][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.441163][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1470'.
[   95.445856][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'.
[   95.791082][ T9316] macvlan2: entered promiscuous mode
[   95.793481][ T9316] bond0: entered promiscuous mode
[   95.795969][ T9316] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.965140][ T9325] delete_channel: no stack
[   97.148838][ T9377] net_ratelimit: 3 callbacks suppressed
[   97.148849][ T9377] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   97.246087][ T9384] netlink: 'syz.1.1516': attribute type 10 has an invalid length.
[   97.262998][ T9384] team0: Port device dummy0 added
[   97.276576][ T9384] netlink: 'syz.1.1516': attribute type 10 has an invalid length.
[   97.288906][ T9384] team0: Port device dummy0 removed
[   97.294457][ T9384] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   97.541941][ T9403] !: renamed from dummy0
[   97.558756][ T5854] Bluetooth: hci0: command 0x0c20 tx timeout
[   97.559954][ T5236] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   97.716886][ T9410] lo speed is unknown, defaulting to 1000
[   97.886431][ T9420] netlink: 'syz.2.1530': attribute type 5 has an invalid length.
[   97.923231][ T9422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.196846][ T9438] syzkaller0: entered promiscuous mode
[   98.201028][ T9438] syzkaller0: entered allmulticast mode
[   98.612471][ T9497] __nla_validate_parse: 6 callbacks suppressed
[   98.612489][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'.
[   98.620511][ T9497] sctp: [Deprecated]: syz.0.1546 (pid 9497) Use of int in max_burst socket option deprecated.
[   98.620511][ T9497] Use struct sctp_assoc_value instead
[   98.633001][ T9494] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.635731][ T9494] bond2: entered promiscuous mode
[   98.637579][ T9494] bond0: (slave bond2): Enslaving as a backup interface with a down link
[   98.928535][ T9527] lo speed is unknown, defaulting to 1000
[   99.792513][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.795619][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.853415][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.861685][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.951658][ T9587] vlan2: left allmulticast mode
[   99.955041][ T9587] bridge0: left allmulticast mode
[   99.984016][ T9587] ip6gre2: left promiscuous mode
[   99.991915][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.996118][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.999948][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.003602][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.163887][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'.
[  100.364396][   T96] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  100.367847][   T96] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  100.371098][   T96] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[  100.385430][   T96] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  100.387830][ T9651] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  100.433729][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'.
[  100.437437][ T9653] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  100.445693][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.623297][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1593'.
[  100.673252][ T9680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.846689][ T9698] batadv_slave_0: entered promiscuous mode
[  100.859741][ T9698] batadv_slave_0: left promiscuous mode
[  100.887937][ T9704] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1606'.
[  101.004042][ T9720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.117538][ T9738] ip6tnl0: entered promiscuous mode
[  101.122807][ T9738] ip6tnl0: entered allmulticast mode
[  101.125127][ T9738] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  101.143859][ T9742] IPv6: NLM_F_CREATE should be specified when creating new route
[  101.161052][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'.
[  101.312829][ T9773] netlink: 'syz.1.1639': attribute type 1 has an invalid length.
[  101.315433][ T9773] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1639'.
[  101.321855][ T9773] netlink: 'syz.1.1639': attribute type 1 has an invalid length.
[  101.373621][ T9779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.376372][ T9779] syzkaller0: entered promiscuous mode
[  101.378272][ T9779] syzkaller0: entered allmulticast mode
[  101.385462][ T9779] tipc: Resetting bearer <eth:syzkaller0>
[  101.389767][ T9778] tipc: Resetting bearer <eth:syzkaller0>
[  101.401494][ T9778] tipc: Disabling bearer <eth:syzkaller0>
[  101.514405][ T9796] veth3: entered promiscuous mode
[  101.761696][ T9823] netlink: 'syz.0.1662': attribute type 26 has an invalid length.
[  101.924011][ T9839] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1670'.
[  102.209307][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1681'.
[  102.371107][ T9873] IPVS: persistence engine module ip_vs_pe_ not found
[  102.375126][ T5770] IPVS: starting estimator thread 0...
[  102.430596][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'.
[  102.434238][ T9879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.438209][ T9879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.479941][ T9875] IPVS: using max 137 ests per chain, 328800 per kthread
[  102.563316][ T9900] team0: entered allmulticast mode
[  102.565593][ T9900] team_slave_0: entered allmulticast mode
[  102.567451][ T9898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.568161][ T9900] team_slave_1: entered allmulticast mode
[  103.578989][ T9976] xt_l2tp: unknown flags: 51
[  103.843864][ T9996] ip6tnl0: left promiscuous mode
[  103.845658][ T9996] ip6tnl0: left allmulticast mode
[  103.851048][ T9996] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.854689][ T9996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  103.900027][ T9998] __nla_validate_parse: 1 callbacks suppressed
[  103.900037][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1741'.
[  104.515567][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1757'.
[  104.522025][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1757'.
[  104.525802][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1757'.
[  104.530119][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1757'.
[  104.778359][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'.
[  104.782323][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'.
[  104.786169][T10054] netlink: 'syz.0.1767': attribute type 18 has an invalid length.
[  104.843247][T10057] netlink: 'syz.0.1768': attribute type 11 has an invalid length.
[  104.918199][T10063] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1771'.
[  105.012537][T10068] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  105.050248][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'.
[  105.161239][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'.
[  105.262479][T10090] lo speed is unknown, defaulting to 1000
[  105.963097][T10165] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  105.970058][T10166] netlink: 'syz.2.1820': attribute type 1 has an invalid length.
[  106.215186][T10193] netlink: 'syz.1.1832': attribute type 1 has an invalid length.
[  106.217959][T10193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.817022][T10199] netlink: 'syz.2.1835': attribute type 11 has an invalid length.
[  106.919075][T10203] nbd: illegal input index 65508
[  107.183731][T10245] netlink: 'syz.1.1855': attribute type 8 has an invalid length.
[  107.211268][T10253] bond0: (slave bond2): Releasing backup interface
[  107.216249][T10253] bond2: left promiscuous mode
[  107.293752][T10269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  107.336801][T10273] syzkaller1: entered promiscuous mode
[  107.347864][T10273] syzkaller1: entered allmulticast mode
[  107.361503][T10278] lo speed is unknown, defaulting to 1000
[  107.476328][T10293] netlink: 'syz.2.1878': attribute type 2 has an invalid length.
[  108.543486][T10328] netlink: 'syz.0.1893': attribute type 6 has an invalid length.
[  110.575835][T10339] netlink: 'syz.2.1895': attribute type 1 has an invalid length.
[  110.579654][T10339] __nla_validate_parse: 7 callbacks suppressed
[  110.579666][T10339] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1895'.
[  110.587486][T10339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1895'.
[  110.811350][T10372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.814404][T10372] syzkaller0: entered promiscuous mode
[  110.816336][T10372] syzkaller0: entered allmulticast mode
[  110.823808][T10372] tipc: Resetting bearer <eth:syzkaller0>
[  110.826459][T10371] tipc: Resetting bearer <eth:syzkaller0>
[  110.830271][T10371] tipc: Disabling bearer <eth:syzkaller0>
[  111.176504][T10411] veth0_to_team: left allmulticast mode
[  111.182345][T10411] bond0: left promiscuous mode
[  111.185413][T10411] macvlan2: left promiscuous mode
[  111.196646][T10413] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1931'.
[  111.554309][T10440] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1944'.
[  111.684419][T10443] hsr0 speed is unknown, defaulting to 1000
[  111.687054][T10443] hsr0 speed is unknown, defaulting to 1000
[  111.690716][T10443] hsr0 speed is unknown, defaulting to 1000
[  111.697802][T10443] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  111.710331][T10443] hsr0 speed is unknown, defaulting to 1000
[  111.714381][T10443] hsr0 speed is unknown, defaulting to 1000
[  111.717618][T10443] hsr0 speed is unknown, defaulting to 1000
[  111.935979][T10458] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1952'.
[  111.940039][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1952'.
[  111.943950][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1952'.
[  111.947757][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1952'.
[  112.053149][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1960'.
[  112.175885][T10489] IPv6: NLM_F_CREATE should be specified when creating new route
[  112.195116][T10493] netlink: 'syz.0.1969': attribute type 1 has an invalid length.
[  112.197656][T10495] netlink: 'syz.2.1970': attribute type 46 has an invalid length.
[  112.269293][T10493] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.272162][T10502] netlink: 'syz.2.1973': attribute type 5 has an invalid length.
[  112.276847][T10493] veth5: entered promiscuous mode
[  112.279556][T10493] bridge_slave_0: left allmulticast mode
[  112.281555][T10493] bridge_slave_0: left promiscuous mode
[  112.283686][T10493] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.287281][T10493] bridge_slave_1: left allmulticast mode
[  112.293024][T10493] bridge_slave_1: left promiscuous mode
[  112.295205][T10493] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.301018][T10493] bond0: (slave bond_slave_0): Releasing backup interface
[  112.304938][T10493] bond0: (slave bond_slave_1): Releasing backup interface
[  112.314415][T10493] team0: Port device team_slave_0 removed
[  112.317864][T10493] team0: Port device team_slave_1 removed
[  112.322455][T10493] bond0: (slave batadv_slave_0): Releasing backup interface
[  112.326438][T10493] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.370900][T10512] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1978'.
[  112.612606][T10527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.616970][T10527] syzkaller0: entered promiscuous mode
[  112.619437][T10527] syzkaller0: entered allmulticast mode
[  112.624886][T10527] tipc: Resetting bearer <eth:syzkaller0>
[  112.627589][T10526] tipc: Resetting bearer <eth:syzkaller0>
[  112.631406][T10526] tipc: Disabling bearer <eth:syzkaller0>
[  112.957346][T10561] sctp: [Deprecated]: syz.2.2000 (pid 10561) Use of int in max_burst socket option.
[  112.957346][T10561] Use struct sctp_assoc_value instead
[  112.982882][T10563] ip6gre3: entered allmulticast mode
[  113.079878][T10577] lo speed is unknown, defaulting to 1000
[  113.082956][T10577] hsr0 speed is unknown, defaulting to 1000
[  113.128345][T10584] netlink: 'syz.1.2010': attribute type 6 has an invalid length.
[  113.152402][T10586] netlink: 'syz.2.2011': attribute type 21 has an invalid length.
[  113.248038][T10600] netlink: 'syz.2.2018': attribute type 14 has an invalid length.
[  113.261120][T10602] rdma_rxe: rxe_newlink: failed to add vxcan1
[  113.264983][T10600] netlink: 'syz.2.2018': attribute type 11 has an invalid length.
[  113.295330][T10604] netlink: 'syz.0.2020': attribute type 4 has an invalid length.
[  113.335377][T10610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.340378][T10610] syzkaller0: entered promiscuous mode
[  113.342526][T10610] syzkaller0: entered allmulticast mode
[  113.353934][T10610] tipc: Resetting bearer <eth:syzkaller0>
[  113.361447][T10609] tipc: Resetting bearer <eth:syzkaller0>
[  113.366863][T10609] tipc: Disabling bearer <eth:syzkaller0>
[  113.386450][T10615] netlink: 'syz.0.2025': attribute type 2 has an invalid length.
[  113.587042][T10643] veth3: left promiscuous mode
[  113.590142][T10643] veth5: left promiscuous mode
[  113.740517][T10660] xt_policy: neither incoming nor outgoing policy selected
[  113.763322][T10662] netlink: 'syz.1.2047': attribute type 1 has an invalid length.
[  113.970848][T10671] bond6: entered promiscuous mode
[  113.972973][T10671] bond6: entered allmulticast mode
[  113.975513][T10671] 8021q: adding VLAN 0 to HW filter on device bond6
[  114.010727][T10674] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  114.611766][T10730] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  114.815855][T10754] bond2: entered promiscuous mode
[  114.818130][T10754] bond2: entered allmulticast mode
[  114.820960][T10754] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.829523][T10754] bridge2: entered promiscuous mode
[  114.831616][T10754] bridge2: entered allmulticast mode
[  114.833850][T10754] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  114.839303][T10738] nbd0: detected capacity change from 0 to 127
[  114.847188][T10756] block nbd0: Receive control failed (result -104)
[  114.850238][   T57] block nbd0: Receive control failed (result -32)
[  114.951362][T10771] bond2: (slave bridge2): Releasing backup interface
[  114.955061][T10771] bridge2: left promiscuous mode
[  114.957397][T10771] bridge2: left allmulticast mode
[  114.962611][T10771] team0: Mode changed to "broadcast"
[  114.964961][T10771] vlan0: entered promiscuous mode
[  114.967843][T10771] tipc: Enabled bearer <eth:team0>, priority 0
[  115.104198][T10783] wg1 speed is unknown, defaulting to 1000
[  115.106509][T10783] wg1 speed is unknown, defaulting to 1000
[  115.109366][T10783] wg1 speed is unknown, defaulting to 1000
[  115.113990][T10783] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  115.126115][T10783] wg1 speed is unknown, defaulting to 1000
[  115.130504][T10783] wg1 speed is unknown, defaulting to 1000
[  115.133630][T10783] wg1 speed is unknown, defaulting to 1000
[  115.239407][T10791] nbd1: detected capacity change from 0 to 127
[  115.244457][   T56] block nbd1: Receive control failed (result -104)
[  115.666136][T10859] __nla_validate_parse: 20 callbacks suppressed
[  115.666146][T10859] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2132'.
[  115.697063][   T33] audit: type=1800 audit(1756464339.305:2): pid=10857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2130" name="memory.events" dev="tmpfs" ino=3871 res=0 errno=0
[  115.957910][T10892] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2146'.
[  116.106868][T10818] Bluetooth: hci0: Opcode 0x080f failed: -4
[  116.551676][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2175'.
[  116.596326][T10947] block nbd2: server does not support multiple connections per device.
[  116.601894][T10947] block nbd2: shutting down sockets
[  116.643184][T10960] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2179'.
[  117.038810][T11015] trusted_key: syz.1.2205 sent an empty control message without MSG_MORE.
[  117.058328][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'.
[  117.074786][T11034] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  117.081218][ T5891] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  117.085542][ T5891] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  117.090821][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'.
[  117.098196][ T5891] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  117.102402][ T5891] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  117.217608][T11053] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2221'.
[  117.296942][T11063] veth0_to_bridge: entered promiscuous mode
[  117.300535][T11062] veth0_to_bridge: left promiscuous mode
[  117.356604][T11071] syzkaller1: entered promiscuous mode
[  117.360997][T11071] syzkaller1: entered allmulticast mode
[  117.398802][ T5236] Bluetooth: hci0: command 0x0c20 tx timeout
[  117.405167][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'.
[  117.821696][T11125] validate_nla: 4 callbacks suppressed
[  117.821707][T11125] netlink: 'syz.2.2255': attribute type 4 has an invalid length.
[  117.868340][T11127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.871605][T11127] syzkaller0: entered promiscuous mode
[  117.873860][T11127] syzkaller0: entered allmulticast mode
[  117.881439][T11130] lo speed is unknown, defaulting to 1000
[  117.886696][T11130] hsr0 speed is unknown, defaulting to 1000
[  117.896247][T11130] wg1 speed is unknown, defaulting to 1000
[  117.923899][T11127] tipc: Resetting bearer <eth:syzkaller0>
[  117.953008][T11126] tipc: Resetting bearer <eth:syzkaller0>
[  117.957248][T11126] tipc: Disabling bearer <eth:syzkaller0>
[  118.237341][T11154] lo speed is unknown, defaulting to 1000
[  118.247553][T11154] hsr0 speed is unknown, defaulting to 1000
[  118.253104][T11154] wg1 speed is unknown, defaulting to 1000
[  119.111805][T11216] tipc: New replicast peer: 255.255.255.255
[  119.118440][T11216] tipc: Enabled bearer <udp:syz2>, priority 10
[  120.043240][T11230] @: renamed from veth0_vlan
[  120.277165][T11272] netlink: 'syz.2.2323': attribute type 1 has an invalid length.
[  120.284869][T11272] netlink: 'syz.2.2323': attribute type 1 has an invalid length.
[  120.882392][T11320] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  120.894588][T11320] tipc: Bearer <udp:s>: trying with adjusted priority
[  120.903524][T11320] tipc: Invalid UDP bearer configuration
[  120.903657][T11320] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  120.939175][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'.
[  120.943012][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'.
[  120.947008][T11323] netlink: 'syz.2.2340': attribute type 1 has an invalid length.
[  120.952616][T11323] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2340'.
[  120.978821][T11323] nbd: socks must be embedded in a SOCK_ITEM attr
[  120.986305][T11323] block nbd2: shutting down sockets
[  121.130857][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2346'.
[  121.326073][T11367] bridge4: entered allmulticast mode
[  121.447551][T11379] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2365'.
[  121.506348][T11380] lo speed is unknown, defaulting to 1000
[  121.513232][T11380] hsr0 speed is unknown, defaulting to 1000
[  121.516623][T11380] wg1 speed is unknown, defaulting to 1000
[  121.525604][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'.
[  121.529644][T11385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2367'.
[  121.586083][T11389] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  121.606630][T11389] netlink: 'syz.0.2368': attribute type 4 has an invalid length.
[  121.609850][T11389] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2368'.
[  121.616748][T11389] : renamed from bond0
[  121.679414][T11393] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  121.815116][T11401] netlink: 'syz.0.2373': attribute type 1 has an invalid length.
[  122.068466][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2381'.
[  122.073128][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2381'.
[  122.220105][T11430] netlink: 'syz.2.2387': attribute type 1 has an invalid length.
[  122.235962][T11433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.341536][T11441] lo speed is unknown, defaulting to 1000
[  122.344224][T11441] hsr0 speed is unknown, defaulting to 1000
[  122.346587][T11441] wg1 speed is unknown, defaulting to 1000
[  122.356047][T11450] nbd: nbd1 already in use
[  122.361141][T11450] block nbd1: NBD_DISCONNECT
[  122.363036][T11450] block nbd1: Send disconnect failed -32
[  122.365618][T11450] block nbd1: shutting down sockets
[  122.399405][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.403185][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  122.415321][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.419277][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  122.422632][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.426589][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  122.429904][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.433682][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  122.445815][T10784] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.453502][T10784] Buffer I/O error on dev nbd1, logical block 0, async page read
[  122.465440][T10784] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.488662][T10784] Buffer I/O error on dev nbd1, logical block 1, async page read
[  122.492332][T10784] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.500799][T10784] Buffer I/O error on dev nbd1, logical block 2, async page read
[  122.505133][T10784] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.513864][T10784] Buffer I/O error on dev nbd1, logical block 3, async page read
[  122.516648][T10784] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.521188][T10784] Buffer I/O error on dev nbd1, logical block 0, async page read
[  122.524159][T10784] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.542178][T10784] Buffer I/O error on dev nbd1, logical block 1, async page read
[  122.549645][T10784] ldm_validate_partition_table(): Disk read failed.
[  122.553040][T10784] Dev nbd1: unable to read RDB block 0
[  122.555686][T10784]  nbd1: unable to read partition table
[  122.569501][T10784] ldm_validate_partition_table(): Disk read failed.
[  122.576609][T10784] Dev nbd1: unable to read RDB block 0
[  122.579183][T10784]  nbd1: unable to read partition table
[  122.730261][T11498] netlink: 'syz.0.2419': attribute type 1 has an invalid length.
[  122.754290][T11498] bond0: (slave vti1): The slave device specified does not support setting the MAC address
[  122.758534][T11498] bond0: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  122.762997][T11498] bond0: (slave vti1): making interface the new active one
[  122.766055][T11498] bond0: (slave vti1): Enslaving as an active interface with an up link
[  122.769927][T11503] bridge: RTM_NEWNEIGH with invalid ether address
[  123.943298][T11629] lo speed is unknown, defaulting to 1000
[  123.945748][T11629] hsr0 speed is unknown, defaulting to 1000
[  123.948264][T11629] wg1 speed is unknown, defaulting to 1000
[  124.051459][T11638] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  124.051593][   T96] IPVS: starting estimator thread 0...
[  124.148681][T11640] IPVS: using max 136 ests per chain, 326400 per kthread
[  124.317601][T11676] netlink: 'syz.1.2498': attribute type 2 has an invalid length.
[  124.323523][T11676] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  124.362212][T11684] netlink: 'syz.0.2504': attribute type 7 has an invalid length.
[  124.681108][T11729] netlink: 'syz.2.2525': attribute type 2 has an invalid length.
[  124.778491][T11740] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  125.423018][T11753] dvmrp8: entered allmulticast mode
[  125.614602][T11751] dvmrp8: left allmulticast mode
[  125.661961][T11755] lo speed is unknown, defaulting to 1000
[  125.665174][T11755] hsr0 speed is unknown, defaulting to 1000
[  125.668427][T11755] wg1 speed is unknown, defaulting to 1000
[  125.690415][T11762] netlink: 'syz.1.2537': attribute type 21 has an invalid length.
[  125.698068][T11762] netlink: 'syz.1.2537': attribute type 5 has an invalid length.
[  125.702813][T11762] netlink: 'syz.1.2537': attribute type 6 has an invalid length.
[  126.017190][T11815] dummy0: entered allmulticast mode
[  126.024607][T11814] dummy0: left allmulticast mode
[  126.333887][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.337212][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.340763][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.344036][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.347044][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.365587][T11833] lo speed is unknown, defaulting to 1000
[  126.368122][T11833] hsr0 speed is unknown, defaulting to 1000
[  126.382739][T11833] wg1 speed is unknown, defaulting to 1000
[  126.445657][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.449793][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.452816][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.469142][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.472194][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.690847][ T5891] tipc: Disabling bearer <ib:ip6gre0>
[  126.776420][ T5891] bond0 (unregistering): (slave vti1): Releasing backup interface
[  127.103607][ T5891]  (unregistering): Released all slaves
[  127.109283][ T5891] bond1 (unregistering): Released all slaves
[  127.114606][ T5891] bond2 (unregistering): Released all slaves
[  127.120020][ T5891] bond0 (unregistering): Released all slaves
[  127.129169][T11833] chnl_net:caif_netlink_parms(): no params data found
[  127.133657][T11840] lo speed is unknown, defaulting to 1000
[  127.138514][T11840] hsr0 speed is unknown, defaulting to 1000
[  127.199790][T11840] wg1 speed is unknown, defaulting to 1000
[  127.216793][ T5891] tipc: Disabling bearer <eth:team0>
[  127.220239][ T5891] tipc: Left network mode
[  127.275826][T11833] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.284100][T11833] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.288500][T11833] bridge_slave_0: entered allmulticast mode
[  127.293684][T11833] bridge_slave_0: entered promiscuous mode
[  127.300258][T11833] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.303271][T11833] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.306211][T11833] bridge_slave_1: entered allmulticast mode
[  127.309318][T11833] bridge_slave_1: entered promiscuous mode
[  127.367514][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.376830][ T5891] hsr_slave_0: left promiscuous mode
[  127.379438][ T5891] hsr_slave_1: left promiscuous mode
[  127.452440][T11862] __nla_validate_parse: 16 callbacks suppressed
[  127.452453][T11862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2577'.
[  127.558473][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.617277][T11865] wg1 speed is unknown, defaulting to 1000
[  127.618986][T11833] team0: Port device team_slave_0 added
[  127.631108][T11833] team0: Port device team_slave_1 added
[  127.760876][T11840] chnl_net:caif_netlink_parms(): no params data found
[  127.781800][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.784976][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.796237][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.801932][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.805764][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.816724][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.854419][ T5891] IPVS: stop unused estimator thread 0...
[  127.872773][T11833] hsr_slave_0: entered promiscuous mode
[  127.875818][T11833] hsr_slave_1: entered promiscuous mode
[  127.880635][T11833] debugfs: 'hsr0' already exists in 'hsr'
[  127.882769][T11833] Cannot create hsr debugfs directory
[  127.893279][T11840] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.895944][T11840] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.898779][T11840] bridge_slave_0: entered allmulticast mode
[  127.901324][T11840] bridge_slave_0: entered promiscuous mode
[  127.904163][T11840] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.906656][T11840] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.909561][T11840] bridge_slave_1: entered allmulticast mode
[  127.912116][T11840] bridge_slave_1: entered promiscuous mode
[  127.931552][T11840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.945783][T11840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.968274][T11840] team0: Port device team_slave_0 added
[  127.974613][T11840] team0: Port device team_slave_1 added
[  127.994107][T11840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.997187][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.009305][T11840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.014675][T11840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.017764][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.029247][T11840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.059687][T11840] hsr_slave_0: entered promiscuous mode
[  128.062638][T11840] hsr_slave_1: entered promiscuous mode
[  128.065489][T11840] debugfs: 'hsr0' already exists in 'hsr'
[  128.067956][T11840] Cannot create hsr debugfs directory
[  128.110494][T11833] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  128.120162][T11833] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  128.123945][T11833] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  128.134498][T11833] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  128.162895][T11833] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.165289][T11833] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.167986][T11833] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.170545][T11833] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.188007][T11840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  128.192177][T11840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  128.196484][T11840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  128.200756][T11840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  128.213890][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.216887][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.248226][T11833] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.256855][T11833] 8021q: adding VLAN 0 to HW filter on device team0
[  128.266656][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.269049][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.280260][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.283226][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.291499][T11840] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.317941][T11840] 8021q: adding VLAN 0 to HW filter on device team0
[  128.329619][T11833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.346054][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.348714][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.359165][ T5854] Bluetooth: hci1: command tx timeout
[  128.388513][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.391482][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.412517][T11908] netlink: 'syz.1.2580': attribute type 1 has an invalid length.
[  128.420658][T11840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.424447][T11840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.440694][T11908] bond7: entered promiscuous mode
[  128.442591][T11908] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.450800][T11908] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2580'.
[  128.464925][T11908] batadv0: entered promiscuous mode
[  128.467477][T11908] batadv0: entered allmulticast mode
[  128.478402][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.483424][T11908] bond7: (slave batadv0): making interface the new active one
[  128.487189][T11908] bond7: (slave batadv0): Enslaving as an active interface with an up link
[  128.509983][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.522802][ T5854] Bluetooth: hci2: command tx timeout
[  128.538184][T11833] veth0_vlan: entered promiscuous mode
[  128.547986][T11833] veth1_vlan: entered promiscuous mode
[  128.562952][T11833] veth0_macvtap: entered promiscuous mode
[  128.566319][T11833] veth1_macvtap: entered promiscuous mode
[  128.579669][T11833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.596818][T11840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.604929][T11833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.626276][T11924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2580'.
[  128.630405][ T5874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.634801][ T5874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.638241][ T5874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.651923][ T5874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.699352][ T9472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.709195][ T9472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.731203][ T4866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.734229][ T4866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.748376][T11840] veth0_vlan: entered promiscuous mode
[  128.751811][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'.
[  128.753483][T11840] veth1_vlan: entered promiscuous mode
[  128.763543][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.765770][T11840] veth0_macvtap: entered promiscuous mode
[  128.773623][T11840] veth1_macvtap: entered promiscuous mode
[  128.782275][T11840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.791797][T11840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.803076][ T5891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.806615][ T5891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.813715][ T5891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.817487][ T5891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.830897][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'.
[  128.884901][ T4866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.888972][ T4866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.903142][ T9472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.905856][ T9472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.075908][T11976] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2599'.
[  130.037894][T12008] openvswitch: netlink: IP tunnel dst address not specified
[  130.160047][T12019] veth1_to_bond: entered allmulticast mode
[  130.162785][T12019] bond_slave_1: entered promiscuous mode
[  130.166170][T12019] bond_slave_1: left promiscuous mode
[  130.168142][T12019] veth1_to_bond: left allmulticast mode
[  130.313345][T12043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.341827][T12049] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2630'.
[  130.345715][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2630'.
[  130.439863][ T5854] Bluetooth: hci1: command tx timeout
[  130.456781][T12060] GUP no longer grows the stack in syz.1.2635 (12060): 200000003000-20000000a000 (200000001000)
[  130.464236][T12060] CPU: 0 UID: 0 PID: 12060 Comm: syz.1.2635 Not tainted syzkaller #0 PREEMPT(full) 
[  130.464256][T12060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.464264][T12060] Call Trace:
[  130.464269][T12060]  <TASK>
[  130.464274][T12060]  dump_stack_lvl+0x189/0x250
[  130.464326][T12060]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.464340][T12060]  ? __pfx__printk+0x10/0x10
[  130.464354][T12060]  ? find_vma+0xe7/0x160
[  130.464369][T12060]  ? unwind_next_frame+0xa5/0x2390
[  130.464383][T12060]  __get_user_pages+0x24d0/0x2ce0
[  130.464395][T12060]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  130.464413][T12060]  ? __gup_longterm_locked+0xc68/0x1660
[  130.464429][T12060]  ? rcu_is_watching+0x15/0xb0
[  130.464442][T12060]  __gup_longterm_locked+0xde9/0x1660
[  130.464458][T12060]  ? sanity_check_pinned_pages+0x123a/0x1300
[  130.464470][T12060]  gup_fast_fallback+0x1e6a/0x2010
[  130.464489][T12060]  ? __pfx_gup_fast_fallback+0x10/0x10
[  130.464500][T12060]  ? stack_trace_save+0x9c/0xe0
[  130.464512][T12060]  ? __pfx_stack_trace_save+0x10/0x10
[  130.464525][T12060]  ? pin_user_pages_fast+0x4d/0xb0
[  130.464537][T12060]  iov_iter_extract_pages+0x35a/0x5e0
[  130.464550][T12060]  extract_iter_to_sg+0xe46/0x24e0
[  130.464569][T12060]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  130.464589][T12060]  ? __asan_memset+0x22/0x50
[  130.464601][T12060]  af_alg_get_rsgl+0x436/0x810
[  130.464616][T12060]  aead_recvmsg+0x4cc/0x13f0
[  130.464631][T12060]  ? rcu_is_watching+0x15/0xb0
[  130.464642][T12060]  ? __pfx_aead_recvmsg+0x10/0x10
[  130.464658][T12060]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  130.464671][T12060]  ? security_socket_recvmsg+0x7e/0x2e0
[  130.464684][T12060]  ? __pfx_aead_recvmsg+0x10/0x10
[  130.464698][T12060]  sock_recvmsg_nosec+0x186/0x1c0
[  130.464714][T12060]  ____sys_recvmsg+0x3aa/0x460
[  130.464731][T12060]  ? __pfx_____sys_recvmsg+0x10/0x10
[  130.464748][T12060]  ? import_iovec+0x74/0xa0
[  130.464763][T12060]  ___sys_recvmsg+0x1b5/0x510
[  130.464778][T12060]  ? __pfx____sys_recvmsg+0x10/0x10
[  130.464789][T12060]  ? futex_private_hash_get+0x43/0x290
[  130.464804][T12060]  ? __fget_files+0x2a/0x420
[  130.464818][T12060]  ? rcu_is_watching+0x15/0xb0
[  130.464830][T12060]  ? lock_release+0x4b/0x3e0
[  130.464845][T12060]  ? __might_fault+0xcc/0x130
[  130.464860][T12060]  do_recvmmsg+0x307/0x770
[  130.464874][T12060]  ? __pfx_do_recvmmsg+0x10/0x10
[  130.464884][T12060]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  130.464904][T12060]  ? __pfx_do_futex+0x10/0x10
[  130.464923][T12060]  __x64_sys_recvmmsg+0x190/0x240
[  130.464937][T12060]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  130.464949][T12060]  ? rcu_is_watching+0x15/0xb0
[  130.464969][T12060]  ? rcu_is_watching+0x15/0xb0
[  130.464981][T12060]  do_syscall_64+0xfa/0x3b0
[  130.464994][T12060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.465007][T12060]  ? exc_page_fault+0x9f/0xf0
[  130.465025][T12060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.465036][T12060] RIP: 0033:0x7fe39758ebe9
[  130.465048][T12060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.465058][T12060] RSP: 002b:00007fe398398038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  130.465074][T12060] RAX: ffffffffffffffda RBX: 00007fe3977b5fa0 RCX: 00007fe39758ebe9
[  130.465083][T12060] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  130.465093][T12060] RBP: 00007fe397611e19 R08: 0000000000000000 R09: 0000000000000000
[  130.465101][T12060] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  130.465110][T12060] R13: 00007fe3977b6038 R14: 00007fe3977b5fa0 R15: 00007fff91e97bf8
[  130.465123][T12060]  </TASK>
[  130.609936][ T5854] Bluetooth: hci2: command tx timeout
[  130.626111][T12068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2639'.
[  130.631243][T12068] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.634878][T12068] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.919875][T12098] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2653'.
[  131.378623][T12123] netlink: 'syz.1.2665': attribute type 4 has an invalid length.
[  132.332739][T12147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.364837][T12140] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.367844][T12140] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.474850][T12140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.492134][T12140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.519380][ T5854] Bluetooth: hci1: command tx timeout
[  132.656041][T12148] hsr_slave_0: left promiscuous mode
[  132.667012][T12148] hsr_slave_1: left promiscuous mode
[  132.674986][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.680089][ T5854] Bluetooth: hci2: command tx timeout
[  132.682539][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.685924][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.691801][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.962448][T12180] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  133.007499][T12185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.838131][T12214] syzkaller1: entered promiscuous mode
[  133.840393][T12214] syzkaller1: entered allmulticast mode
[  134.066355][T12237] __nla_validate_parse: 4 callbacks suppressed
[  134.066370][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2714'.
[  134.075639][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2714'.
[  134.104975][T12237] bond8: entered promiscuous mode
[  134.108069][T12237] bond8: entered allmulticast mode
[  134.110752][T12237] 8021q: adding VLAN 0 to HW filter on device bond8
[  134.150205][T12237] wg1 speed is unknown, defaulting to 1000
[  134.242496][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2719'.
[  134.357730][T12265] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2725'.
[  134.361292][T12265] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  134.569331][T12278] netlink: 'syz.1.2730': attribute type 1 has an invalid length.
[  134.596613][T12278] 8021q: adding VLAN 0 to HW filter on device bond10
[  134.599785][ T5854] Bluetooth: hci1: command tx timeout
[  134.603719][T12278] bond9: (slave bond10): making interface the new active one
[  134.607290][T12278] bond9: (slave bond10): Enslaving as an active interface with an up link
[  134.617831][T12278] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  134.624124][T12278] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  134.741494][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'.
[  134.759549][ T5854] Bluetooth: hci2: command tx timeout
[  134.976188][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'.
[  134.982993][T12312] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.986222][T12312] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.115826][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2748'.
[  135.206898][T12334] syz_tun: entered allmulticast mode
[  135.328082][T12333] syz_tun: left allmulticast mode
[  135.473269][T12365] pim6reg1: entered promiscuous mode
[  135.478263][T12365] pim6reg1: entered allmulticast mode
[  135.480839][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  135.506520][T12367] wg1 speed is unknown, defaulting to 1000
[  135.852140][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2774'.
[  135.855645][T12389] openvswitch: netlink: Unknown nsh attribute 0
[  135.857844][T12389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.270348][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'.
[  136.348989][T12428] tap0: tun_chr_ioctl cmd 35108
[  136.540424][T12449] netlink: 732 bytes leftover after parsing attributes in process `syz.1.2800'.
[  136.574229][T12451] netlink: 'syz.1.2801': attribute type 9 has an invalid length.
[  136.577598][T12451] netlink: 'syz.1.2801': attribute type 11 has an invalid length.
[  136.806773][T12477] netlink: 'syz.1.2813': attribute type 6 has an invalid length.
[  137.077577][T12508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.604605][T12562] openvswitch: netlink: Message has 16 unknown bytes.
[  137.830164][T12600] sctp: [Deprecated]: syz.1.2869 (pid 12600) Use of int in max_burst socket option deprecated.
[  137.830164][T12600] Use struct sctp_assoc_value instead
[  139.375862][T12655] netlink: 'syz.1.2890': attribute type 4 has an invalid length.
[  139.451271][T12655] __nla_validate_parse: 9 callbacks suppressed
[  139.451282][T12655] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2890'.
[  139.517135][T12667] syzkaller1: entered promiscuous mode
[  139.519087][T12667] syzkaller1: entered allmulticast mode
[  139.533077][T12669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2890'.
[  139.570657][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2895'.
[  139.590336][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'.
[  139.603523][ T4866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.606147][ T4866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.814494][T12703] netlink: 'syz.3.2906': attribute type 11 has an invalid length.
[  139.817718][T12703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2906'.
[  139.925071][T12722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2914'.
[  139.940326][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2914'.
[  139.969291][T12729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2911'.
[  140.036037][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'.
[  140.340790][T12772] netlink: 'syz.1.2937': attribute type 1 has an invalid length.
[  140.343664][T12772] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2937'.
[  140.745843][T12803] netlink: 'syz.4.2950': attribute type 10 has an invalid length.
[  140.756223][T12803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.763056][T12803] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  140.837217][T12803] syz.4.2950 (12803) used greatest stack depth: 18000 bytes left
[  141.114671][T12820] netlink: 'syz.4.2958': attribute type 22 has an invalid length.
[  141.118105][T12820] bond0: option ad_select: unable to set because the bond device is up
[  141.152119][T12822] tipc: Started in network mode
[  141.154518][T12822] tipc: Node identity ce213e9b0584, cluster identity 4711
[  141.157633][T12822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.161736][T12822] syzkaller0: entered promiscuous mode
[  141.164194][T12822] syzkaller0: entered allmulticast mode
[  141.170319][T12822] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  141.177258][T12822] tipc: Resetting bearer <eth:syzkaller0>
[  141.182477][T12821] tipc: Resetting bearer <eth:syzkaller0>
[  141.186406][T12821] tipc: Disabling bearer <eth:syzkaller0>
[  141.274831][T12826] netlink: 'syz.4.2961': attribute type 83 has an invalid length.
[  141.331106][T12832] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  142.296805][T12909] bridge0: port 3(veth0_to_team) entered blocking state
[  142.300251][T12909] bridge0: port 3(veth0_to_team) entered disabled state
[  142.303559][T12909] veth0_to_team: entered allmulticast mode
[  142.306802][T12909] veth0_to_team: entered promiscuous mode
[  142.310914][T12909] veth0_to_team: left allmulticast mode
[  142.312857][T12909] veth0_to_team: left promiscuous mode
[  142.314854][T12909] bridge0: port 3(veth0_to_team) entered disabled state
[  142.535471][T12939] syzkaller0: entered promiscuous mode
[  142.537931][T12939] syzkaller0: entered allmulticast mode
[  142.672918][T12954] netlink: 'syz.1.3021': attribute type 1 has an invalid length.
[  143.501063][T12979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.504455][T12979] syzkaller0: entered promiscuous mode
[  143.506942][T12979] syzkaller0: entered allmulticast mode
[  143.525872][T12979] tipc: Resetting bearer <eth:syzkaller0>
[  143.540849][T12978] tipc: Resetting bearer <eth:syzkaller0>
[  143.558266][T12978] tipc: Disabling bearer <eth:syzkaller0>
[  143.764997][T13006] dummy0: entered allmulticast mode
[  143.767532][T13006] dummy0: left allmulticast mode
[  144.212519][T13049] netlink: 'syz.3.3064': attribute type 37 has an invalid length.
[  144.249558][T13054] tipc: Started in network mode
[  144.251798][T13054] tipc: Node identity 76f3fde712bc, cluster identity 4711
[  144.254960][T13054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.258375][T13054] syzkaller0: entered promiscuous mode
[  144.262460][T13054] syzkaller0: entered allmulticast mode
[  144.272838][T13054] tipc: Resetting bearer <eth:syzkaller0>
[  144.276704][T13052] tipc: Resetting bearer <eth:syzkaller0>
[  144.287219][T13052] tipc: Disabling bearer <eth:syzkaller0>
[  144.399836][T13074] netlink: 'syz.1.3071': attribute type 3 has an invalid length.
[  144.464478][T13081] team0: left allmulticast mode
[  144.466687][T13081] team_slave_0: left allmulticast mode
[  144.470249][T13081] team_slave_1: left allmulticast mode
[  144.472690][T13081] dvmrp8: left allmulticast mode
[  144.514054][T13081] siw: device registration error -23
[  144.571657][T13081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  144.589413][T13092] __nla_validate_parse: 13 callbacks suppressed
[  144.589425][T13092] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3078'.
[  144.749069][T13117] bridge6: entered promiscuous mode
[  144.750959][T13117] bridge6: entered allmulticast mode
[  144.760128][T13117] team0: Port device bridge6 added
[  144.965704][T13152] batadv1: entered promiscuous mode
[  145.121166][T13168] netlink: 'syz.4.3113': attribute type 4 has an invalid length.
[  145.130395][T13168] netlink: 'syz.4.3113': attribute type 4 has an invalid length.
[  145.263384][T13181] netlink: 'syz.4.3116': attribute type 3 has an invalid length.
[  145.269732][T13181] syz_tun: entered allmulticast mode
[  145.326736][T13182] siw: device registration error -23
[  145.411879][   T62] block nbd0: Connection timed out, retrying (0/2 alive)
[  145.414747][   T62] block nbd0: Connection timed out, retrying (0/2 alive)
[  145.417566][   T62] block nbd0: Connection timed out, retrying (0/2 alive)
[  145.420762][   T62] block nbd0: Connection timed out, retrying (0/2 alive)
[  145.423479][   T62] block nbd0: Dead connection, failed to find a fallback
[  145.426335][   T62] block nbd0: shutting down sockets
[  145.428495][   T62] blk_print_req_error: 138 callbacks suppressed
[  145.428504][   T62] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.434228][   T62] buffer_io_error: 138 callbacks suppressed
[  145.434234][   T62] Buffer I/O error on dev nbd0, logical block 3, async page read
[  145.441413][   T62] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.444461][   T62] Buffer I/O error on dev nbd0, logical block 2, async page read
[  145.447144][   T62] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.450128][   T62] Buffer I/O error on dev nbd0, logical block 1, async page read
[  145.453038][   T62] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.454145][T13182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.456133][   T62] Buffer I/O error on dev nbd0, logical block 0, async page read
[  145.456323][T10333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.464939][T10333] Buffer I/O error on dev nbd0, logical block 0, async page read
[  145.467819][T10333] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.471780][T10333] Buffer I/O error on dev nbd0, logical block 1, async page read
[  145.472502][T13182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.474793][T10333] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.481103][T10333] Buffer I/O error on dev nbd0, logical block 2, async page read
[  145.483972][T10333] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.487260][T10333] Buffer I/O error on dev nbd0, logical block 3, async page read
[  145.491885][T10333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.495510][T10333] Buffer I/O error on dev nbd0, logical block 0, async page read
[  145.498920][T10333] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.502686][T10333] Buffer I/O error on dev nbd0, logical block 1, async page read
[  145.506884][T10333] ldm_validate_partition_table(): Disk read failed.
[  145.510507][T10333] Dev nbd0: unable to read RDB block 0
[  145.513484][T10333]  nbd0: unable to read partition table
[  145.521278][T10333] ldm_validate_partition_table(): Disk read failed.
[  145.524752][T10333] Dev nbd0: unable to read RDB block 0
[  145.527925][T10333]  nbd0: unable to read partition table
[  145.533043][T10333] block nbd0: NBD_DISCONNECT
[  145.534953][T10333] block nbd0: Send disconnect failed -32
[  145.537187][T10333] block nbd0: Send disconnect failed -32
[  145.626600][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.632700][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.639881][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.645548][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.649617][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.657507][T13180] syz_tun: left allmulticast mode
[  145.691343][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.721023][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.763971][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.852791][   T13] tipc: Disabling bearer <ib:ip6gre0>
[  145.885988][   T13] bond3 (unregistering): (slave geneve3): Releasing backup interface
[  145.963015][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'.
[  146.024428][   T13] bond1 (unregistering): Released all slaves
[  146.032651][   T13] bond0 (unregistering): Released all slaves
[  146.043527][   T13] bond2 (unregistering): Released all slaves
[  146.062648][   T13] bond3 (unregistering): Released all slaves
[  146.111497][T13222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3134'.
[  146.114482][T13222] netlink: 'syz.3.3134': attribute type 1 has an invalid length.
[  146.126404][   T13] tipc: Disabling bearer <udp:syz2>
[  146.135837][   T13] tipc: Left network mode
[  146.153132][T13228] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  146.557960][   T13] hsr_slave_0: left promiscuous mode
[  146.560496][   T13] hsr_slave_1: left promiscuous mode
[  146.573591][   T13] pim6reg (unregistering): left allmulticast mode
[  146.861620][T13271] raw_sendmsg: syz.4.3151 forgot to set AF_INET. Fix it!
[  146.996255][   T13] IPVS: stop unused estimator thread 0...
[  147.470496][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'.
[  147.474317][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3160'.
[  147.941910][T13335] netlink: 'syz.3.3171': attribute type 1 has an invalid length.
[  147.945232][T13335] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3171'.
[  147.953266][T13335] netlink: 'syz.3.3171': attribute type 1 has an invalid length.
[  147.964088][T13335] netlink: 'syz.3.3171': attribute type 2 has an invalid length.
[  148.323838][T13369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3185'.
[  148.385677][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3187'.
[  148.470440][T13381] xt_limit: Overflow, try lower: 271964/0
[  148.551613][T13389] netlink: 'syz.1.3194': attribute type 3 has an invalid length.
[  149.322913][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'.
[  149.376658][T13451] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3217'.
[  149.444950][T13463] 0: renamed from hsr0
[  149.452227][T13463] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.456617][T13463] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.464823][T13463] 0: entered allmulticast mode
[  149.466954][T13463] hsr_slave_0: entered allmulticast mode
[  149.470080][T13463] hsr_slave_1: entered allmulticast mode
[  149.474479][T13463] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  149.508308][T13467] macsec1: entered promiscuous mode
[  149.518478][T13467] team0: entered promiscuous mode
[  149.522909][T13467] team_slave_0: entered promiscuous mode
[  149.524996][T13467] team_slave_1: entered promiscuous mode
[  149.680502][T13486] __nla_validate_parse: 3 callbacks suppressed
[  149.680518][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3231'.
[  149.767148][T13492] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.771569][T13481] netlink: 'syz.4.3231': attribute type 4 has an invalid length.
[  149.790975][T13481] netlink: 'syz.4.3231': attribute type 4 has an invalid length.
[  150.171582][T13520] netlink: 'syz.4.3247': attribute type 1 has an invalid length.
[  150.174966][T13520] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3247'.
[  150.178231][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'.
[  150.484053][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3256'.
[  150.487648][T13539] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  150.515334][T13545] netlink: 724 bytes leftover after parsing attributes in process `syz.1.3259'.
[  150.521808][T13545] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3259'.
[  150.740764][T13571] netlink: 'syz.3.3272': attribute type 2 has an invalid length.
[  150.743770][T13571] netlink: 'syz.3.3272': attribute type 5 has an invalid length.
[  150.948753][T13595] IPVS: Scheduler module ip_vs_sip not found
[  151.730775][T13613] Bluetooth: MGMT ver 1.23
[  152.322282][T13670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3315'.
[  152.325995][T13670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3315'.
[  152.366042][   T33] audit: type=1800 audit(1756464375.975:3): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3317" name="memory.events" dev="tmpfs" ino=1140 res=0 errno=0
[  152.375725][   T33] audit: type=1804 audit(1756464375.985:4): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3317" name="memory.events" dev="tmpfs" ino=1140 res=1 errno=0
[  152.414509][T13679] netlink: 'syz.3.3319': attribute type 1 has an invalid length.
[  152.616123][T13703] nbd: must specify at least one socket
[  153.162107][T13754] validate_nla: 2 callbacks suppressed
[  153.162125][T13754] netlink: 'syz.4.3354': attribute type 1 has an invalid length.
[  153.239814][T13760] bridge0: port 3(erspan0) entered blocking state
[  153.243058][T13760] bridge0: port 3(erspan0) entered disabled state
[  153.246923][T13760] erspan0: entered allmulticast mode
[  153.251219][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3359'.
[  153.251384][T13760] erspan0: entered promiscuous mode
[  153.269709][T13762] netlink: 23932 bytes leftover after parsing attributes in process `syz.4.3359'.
[  153.279222][T13760] erspan0: left allmulticast mode
[  153.281421][T13760] erspan0: left promiscuous mode
[  153.283722][T13760] bridge0: port 3(erspan0) entered disabled state
[  153.349073][T13769] bridge7: entered promiscuous mode
[  153.351389][T13769] bridge7: entered allmulticast mode
[  153.640314][T13792] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  153.650867][T13792] bridge3: entered promiscuous mode
[  153.653130][T13792] bridge3: entered allmulticast mode
[  153.656563][T13792] team0: Port device bridge3 added
[  153.830552][T13812] netlink: 'syz.4.3381': attribute type 1 has an invalid length.
[  153.833523][T13812] netlink: 'syz.4.3381': attribute type 1 has an invalid length.
[  153.892583][T13822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.199912][T13866] netlink: 'syz.4.3405': attribute type 2 has an invalid length.
[  154.204265][T13866] : entered promiscuous mode
[  154.276044][T13874] netlink: 'syz.4.3409': attribute type 3 has an invalid length.
[  154.279734][T13874] netlink: 'syz.4.3409': attribute type 2 has an invalid length.
[  154.282989][T13874] netlink: 'syz.4.3409': attribute type 2 has an invalid length.
[  154.366433][T13886] netlink: 'syz.4.3415': attribute type 10 has an invalid length.
[  155.356400][T13931] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.370499][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  155.374938][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  155.379542][   T12] bond0: (slave batadv0): link status definitely down, disabling slave
[  155.388431][   T12] bond0: now running without any active interface!
[  155.444707][T13945] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  155.448047][T13945] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.459426][T13945] netlink: 'syz.4.3441': attribute type 12 has an invalid length.
[  155.532329][T13953] netlink: 'syz.1.3445': attribute type 25 has an invalid length.
[  155.567073][T13960] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  155.571777][T13961] __nla_validate_parse: 15 callbacks suppressed
[  155.571793][T13961] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3446'.
[  155.579750][T13960] bond0: (slave dummy0): Releasing backup interface
[  155.582465][T13960] bridge_slave_0: left allmulticast mode
[  155.584796][T13960] bridge_slave_0: left promiscuous mode
[  155.587350][T13960] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.591044][T13960] bridge_slave_1: left allmulticast mode
[  155.593118][T13960] bridge_slave_1: left promiscuous mode
[  155.595508][T13960] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.607048][T13960] bond0: (slave bond_slave_0): Releasing backup interface
[  155.611583][T13960] bond0: (slave bond_slave_1): Releasing backup interface
[  155.616574][T13960] team0: Port device team_slave_0 removed
[  155.623122][T13960] team0: Port device team_slave_1 removed
[  155.625786][T13960] bond1: left allmulticast mode
[  155.627979][T13960] bridge1: port 1(bond1) entered disabled state
[  155.640705][T13960] bond7: (slave batadv0): Releasing active interface
[  155.644742][T13960] bond9: (slave bond10): Releasing backup interface
[  155.650650][T13960] team0: Port device bridge6 removed
[  155.690366][T13960] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  155.694254][T13960] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  155.702462][T13960] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.705541][T13960] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.763591][T13987] vlan2: entered promiscuous mode
[  155.769112][T13987] batadv0: entered promiscuous mode
[  155.887487][T13999] pim6reg1: entered promiscuous mode
[  155.893007][T13999] pim6reg1: entered allmulticast mode
[  156.537093][T14033] v: renamed from ip6_vti0
[  157.010941][T14044] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3482'.
[  157.076726][T14050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3485'.
[  157.449681][T14071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.456586][T14071] syzkaller0: entered promiscuous mode
[  157.458852][T14071] syzkaller0: entered allmulticast mode
[  157.471523][T14071] tipc: Resetting bearer <eth:syzkaller0>
[  157.476565][T14069] tipc: Resetting bearer <eth:syzkaller0>
[  157.499147][T14069] tipc: Disabling bearer <eth:syzkaller0>
[  157.512153][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'.
[  157.520597][T14076] ip6gre0: Master is either lo or non-ether device
[  157.679278][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3503'.
[  157.751703][T14094] 8021q: adding VLAN 0 to HW filter on device bond11
[  157.780553][T14094] 8021q: adding VLAN 0 to HW filter on device bond11
[  157.783181][T14094] bond11: (slave vcan1): The slave device specified does not support setting the MAC address
[  157.792202][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3506'.
[  157.797922][T14094] bond11: (slave vcan1): Error -95 calling set_mac_address
[  157.832696][T14103] gretap1: entered promiscuous mode
[  157.836365][T14103] bond11: (slave gretap1): making interface the new active one
[  157.869249][T14103] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  157.887821][T14101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3506'.
[  157.903761][T14094] macvlan2: entered promiscuous mode
[  157.905643][T14094] macvlan2: entered allmulticast mode
[  157.916580][T14094] bond11: entered promiscuous mode
[  157.922459][T14094] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  157.926788][T14094] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  157.943668][T14094] bond11: left promiscuous mode
[  158.101445][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3509'.
[  158.141160][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  158.162733][T14129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  158.214161][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'.
[  158.217363][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'.
[  158.947609][T14220] openvswitch: netlink: Multiple metadata blocks provided
[  159.951373][T14313] dvmrp0: entered allmulticast mode
[  160.362274][T14354] geneve2: entered promiscuous mode
[  160.364998][ T5748] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  160.370643][ T5748] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  160.373698][ T5748] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  160.377458][ T5748] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  160.430681][T14373] openvswitch: netlink: Message has 4 unknown bytes.
[  160.677209][T14406] __nla_validate_parse: 9 callbacks suppressed
[  160.677225][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'.
[  160.686800][T14406] IPVS: Error joining to the multicast group
[  160.779771][ T5770] IPVS: starting estimator thread 0...
[  160.838075][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3653'.
[  160.873825][T14439] validate_nla: 3 callbacks suppressed
[  160.873869][T14439] netlink: 'syz.4.3657': attribute type 21 has an invalid length.
[  160.880061][T14439] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3657'.
[  160.888689][T14421] IPVS: using max 60 ests per chain, 144000 per kthread
[  160.913679][T14445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3660'.
[  160.992183][T14459] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3667'.
[  161.117356][T14473] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3674'.
[  161.351274][T14497] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3686'.
[  161.913718][T14523] netlink: 'syz.4.3697': attribute type 1 has an invalid length.
[  161.917287][T14523] netlink: 'syz.4.3697': attribute type 1 has an invalid length.
[  161.922375][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3697'.
[  161.927751][T14523] block nbd0: shutting down sockets
[  162.027500][T14534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3702'.
[  162.070983][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'.
[  162.402524][T14575] netlink: 'syz.1.3720': attribute type 1 has an invalid length.
[  162.563557][T14596] netlink: 'syz.3.3725': attribute type 11 has an invalid length.
[  162.691077][T14612] dummy0: entered promiscuous mode
[  162.695524][T14612] team0: entered promiscuous mode
[  162.698245][T14612] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  162.702397][T14612] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  162.723414][T14618] smc: net device bond0 applied user defined pnetid SYZ2
[  162.733173][T14618] smc: removing net device bond0 with user defined pnetid SYZ2
[  162.744080][T14618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.757983][T14618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.777908][T14618] bond0 (unregistering): Released all slaves
[  163.178504][T14680] openvswitch: netlink: Actions may not be safe on all matching packets
[  163.215592][T14688] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  163.332955][T14698] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  163.338166][T14698] netlink: 'syz.4.3758': attribute type 4 has an invalid length.
[  163.675306][T14742] netlink: 'syz.3.3779': attribute type 21 has an invalid length.
[  163.681579][T14742] netlink: 'syz.3.3779': attribute type 22 has an invalid length.
[  163.684997][T14742] netlink: 'syz.3.3779': attribute type 23 has an invalid length.
[  163.688398][T14742] netlink: 'syz.3.3779': attribute type 25 has an invalid length.
[  163.692435][T14742] netlink: 'syz.3.3779': attribute type 26 has an invalid length.
[  163.904401][T14773] syzkaller0: entered promiscuous mode
[  163.906779][T14773] syzkaller0: entered allmulticast mode
[  164.336355][T14813] syzkaller1: entered promiscuous mode
[  164.338180][T14813] syzkaller1: entered allmulticast mode
[  164.637548][T14845] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  164.783693][T14858] bridge_slave_0: left allmulticast mode
[  164.785722][T14858] bridge_slave_0: left promiscuous mode
[  164.787622][T14858] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.791048][T14858] bridge_slave_1: left allmulticast mode
[  164.792939][T14858] bridge_slave_1: left promiscuous mode
[  164.794846][T14858] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.798102][T14858] team_slave_0: left promiscuous mode
[  164.807412][T14858] team0: Port device team_slave_0 removed
[  164.810278][T14858] team_slave_1: left promiscuous mode
[  164.814282][T14858] team0: Port device team_slave_1 removed
[  164.816483][T14858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.819951][T14858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.837810][T14858] vlan0: entered promiscuous mode
[  165.004396][T14879] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  166.221249][T14935] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  166.434962][T14951] __nla_validate_parse: 11 callbacks suppressed
[  166.434972][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3870'.
[  166.483256][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3873'.
[  166.487820][T14957] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.918538][T15003] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3895'.
[  166.989233][T15011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.992327][T15011] syzkaller0: entered promiscuous mode
[  166.994294][T15011] syzkaller0: entered allmulticast mode
[  167.002352][T15011] tipc: Resetting bearer <eth:syzkaller0>
[  167.006181][T15010] tipc: Resetting bearer <eth:syzkaller0>
[  167.010635][T15010] tipc: Disabling bearer <eth:syzkaller0>
[  167.131289][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'.
[  167.237280][T15030] netlink: 'syz.1.3908': attribute type 42 has an invalid length.
[  167.259770][T15032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.406801][T15043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3914'.
[  167.412373][T15043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3914'.
[  167.416442][T15043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3914'.
[  167.421561][T15043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3914'.
[  167.459057][T15050] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3918'.
[  167.540139][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3924'.
[  167.806327][T15090] netlink: 'syz.3.3938': attribute type 1 has an invalid length.
[  167.809691][T15090] netlink: 'syz.3.3938': attribute type 4 has an invalid length.
[  167.812924][T15090] netlink: 'syz.3.3938': attribute type 1 has an invalid length.
[  167.815491][T15090] netlink: 'syz.3.3938': attribute type 4 has an invalid length.
[  167.895290][T15099] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  168.147851][T15146] block nbd0: not configured, cannot reconfigure
[  168.365294][T15187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.517686][T15210] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.522850][T15210] 8021q: adding VLAN 0 to HW filter on device team0
[  168.536949][T15210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.598343][T15224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.655308][T15235] tun0: tun_chr_ioctl cmd 2148553947
[  169.208114][T15299] netlink: 'syz.1.4036': attribute type 2 has an invalid length.
[  169.284498][T15318] netlink: 'syz.1.4044': attribute type 1 has an invalid length.
[  169.381284][T15331] netlink: 'syz.1.4050': attribute type 12 has an invalid length.
[  169.384266][T15331] netlink: 'syz.1.4050': attribute type 18 has an invalid length.
[  169.386966][T15331] netlink: 'syz.1.4050': attribute type 21 has an invalid length.
[  169.429804][ T6410] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.001234][T15422] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  170.025203][T15424] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  170.078880][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.122360][T15442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.171165][T15449] tipc: Failed to remove unknown binding: 66,1,1/0:3185958271/3185958273
[  170.174925][T15449] tipc: Failed to remove unknown binding: 66,1,1/0:3185958271/3185958273
[  170.279836][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.446784][T15491] bond0: (slave wlan1): Releasing backup interface
[  170.487247][T15497] openvswitch: netlink: Message has 1 unknown bytes.
[  170.490277][T15497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.172645][T15574] netlink: ct family unspecified
[  171.174676][T15574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.299754][T15598] gretap1: entered promiscuous mode
[  171.319840][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.322651][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.452064][T15622] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  171.457657][T15622] Bluetooth: MGMT ver 1.23
[  171.460479][T15622] __nla_validate_parse: 38 callbacks suppressed
[  171.460489][T15622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4186'.
[  171.466075][T15622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4186'.
[  171.481091][T15626] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4188'.
[  171.553602][T15634] veth0_vlan: left promiscuous mode
[  171.556709][T15634] veth0_vlan: entered promiscuous mode
[  171.578938][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.586699][T15643] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4196'.
[  171.808483][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4210'.
[  171.814146][T15674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4210'.
[  171.859498][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4212'.
[  172.013853][T15703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.027193][T15703] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  172.039066][T15703] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  172.188266][T15723] bond0: default FDB implementation only supports local addresses
[  172.360144][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4242'.
[  172.364099][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4242'.
[  172.884242][T15786] validate_nla: 10 callbacks suppressed
[  172.884259][T15786] netlink: 'syz.4.4262': attribute type 10 has an invalid length.
[  172.903523][T15786] bond0: (slave wlan1): Opening slave failed
[  173.479451][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  173.479783][ T5854] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  173.854058][T15829] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  173.985505][T15846] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4291'.
[  174.099129][T15858] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  174.998752][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  176.014793][T16014] netlink: 'syz.4.4368': attribute type 2 has an invalid length.
[  176.464682][T16069] netlink: 'syz.4.4390': attribute type 13 has an invalid length.
[  176.467383][T16069] netlink: 'syz.4.4390': attribute type 17 has an invalid length.
[  176.503840][T16069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.519110][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  176.571028][T16062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.606202][T16078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.627936][T16062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.695431][T16091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.868081][T16104] __nla_validate_parse: 6 callbacks suppressed
[  176.868093][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'.
[  176.950334][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'.
[  177.043824][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'.
[  177.046873][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4413'.
[  177.060682][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.072843][T16117] netlink: 'syz.1.4414': attribute type 1 has an invalid length.
[  177.075540][T16117] netlink: 'syz.1.4414': attribute type 2 has an invalid length.
[  177.202688][T16131] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4420'.
[  177.244234][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.247584][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.327023][T16140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.386805][T16157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4430'.
[  177.464746][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4434'.
[  177.552778][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4438'.
[  177.590913][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4439'.
[  177.594210][T16174] netlink: 'syz.1.4439': attribute type 7 has an invalid length.
[  177.596960][T16174] netlink: 'syz.1.4439': attribute type 8 has an invalid length.
[  177.600076][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4439'.
[  177.897717][T16195] syzkaller1: tun_chr_ioctl cmd 1074025677
[  177.900984][T16195] syzkaller1: linktype set to 823
[  178.048820][ T6410] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.063840][T16214] netlink: 'syz.3.4455': attribute type 1 has an invalid length.
[  179.347037][T16342] netlink: 'syz.1.4519': attribute type 1 has an invalid length.
[  179.350026][T16342] netlink: 'syz.1.4519': attribute type 1 has an invalid length.
[  179.594842][T16380] netlink: 'syz.3.4537': attribute type 5 has an invalid length.
[  179.857110][T16407] netlink: 'syz.3.4547': attribute type 10 has an invalid length.
[  179.861519][T16407] syz_tun: entered promiscuous mode
[  179.992148][T16416] sctp: [Deprecated]: syz.3.4551 (pid 16416) Use of int in max_burst socket option deprecated.
[  179.992148][T16416] Use struct sctp_assoc_value instead
[  181.158720][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.172762][T16496] netlink: 'syz.4.4591': attribute type 1 has an invalid length.
[  181.194386][T16496] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  181.206404][T16496] veth11: entered promiscuous mode
[  181.210502][T16496] bond1: (slave veth11): Enslaving as a backup interface with a down link
[  181.217883][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  181.218237][T16496] 8021q: adding VLAN 0 to HW filter on device bond1
[  181.342708][ T5748] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  181.426815][T16512] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  181.433013][T16512] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  181.905850][T16552] __nla_validate_parse: 9 callbacks suppressed
[  181.905861][T16552] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4616'.
[  182.277932][T16584] pim6reg1: entered promiscuous mode
[  182.281096][T16584] pim6reg1: entered allmulticast mode
[  182.861877][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4651'.
[  182.889845][T16625] netlink: 'syz.3.4650': attribute type 11 has an invalid length.
[  182.893843][T16625] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4650'.
[  183.041813][ T5854] Bluetooth: hci2: link tx timeout
[  183.043597][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.337820][T16670] netlink: 'syz.4.4670': attribute type 1 has an invalid length.
[  183.679963][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4683'.
[  183.859907][T16708] netlink: 'syz.4.4689': attribute type 1 has an invalid length.
[  184.094406][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4698'.
[  184.117591][T16733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.128716][T16733] tipc: Resetting bearer <eth:syzkaller0>
[  184.231520][T16740] netlink: 'syz.4.4697': attribute type 83 has an invalid length.
[  184.567999][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4708'.
[  184.572046][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4708'.
[  184.620382][T16755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4708'.
[  184.767156][T16767] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4712'.
[  184.898999][T16775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.993445][T16781] tipc: New replicast peer: 255.255.255.255
[  184.995758][T16781] tipc: Enabled bearer <udp:syz2>, priority 10
[  185.083067][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  185.109249][T16791] netlink: 'syz.3.4723': attribute type 2 has an invalid length.
[  185.112581][T16791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4723'.
[  185.318429][T16823] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.603424][T16863] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  185.607131][T16863] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  185.771088][T16883] netlink: 'syz.1.4767': attribute type 17 has an invalid length.
[  185.783573][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  185.789191][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  185.794030][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  185.801809][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  185.849607][T16890] syzkaller1: entered promiscuous mode
[  185.852021][T16890] syzkaller1: entered allmulticast mode
[  185.974340][T16899] netlink: 'syz.3.4774': attribute type 30 has an invalid length.
[  186.010215][ T6410] tipc: Node number set to 1682963943
[  186.191860][T16906] macvlan3: entered allmulticast mode
[  186.194188][T16906] veth1_vlan: entered allmulticast mode
[  186.197285][T16906] veth1_vlan: left allmulticast mode
[  186.830826][T16949] netlink: 'syz.1.4797': attribute type 10 has an invalid length.
[  186.851372][T16952] netlink: 'syz.3.4798': attribute type 10 has an invalid length.
[  186.855262][T16952] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  186.866792][T16949] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  186.870435][T16949] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  186.909258][T16959] netlink: 'syz.3.4801': attribute type 5 has an invalid length.
[  187.133926][T16979] netlink: 'syz.1.4809': attribute type 1 has an invalid length.
[  187.137257][T16979] __nla_validate_parse: 7 callbacks suppressed
[  187.137269][T16979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4809'.
[  187.533745][   T33] audit: type=1800 audit(1756464411.145:5): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4821" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3576 res=0 errno=0
[  187.542338][   T33] audit: type=1804 audit(1756464411.155:6): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4821" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3576 res=1 errno=0
[  187.674817][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4828'.
[  187.939598][T17059] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4844'.
[  188.216020][T17111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4869'.
[  188.518371][T17154] validate_nla: 1 callbacks suppressed
[  188.518388][T17154] netlink: 'syz.3.4890': attribute type 1 has an invalid length.
[  188.526081][T17154] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4890'.
[  188.602683][T17170] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  188.606378][T17170] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  188.628314][T17174] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4899'.
[  188.632284][T17174] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4899'.
[  188.640645][T17176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4900'.
[  188.711295][T17187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.736233][T17190] delete_channel: no stack
[  188.755187][T17193] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  188.820562][T17201] ==================================================================
[  188.823843][T17201] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  188.827153][T17201] Read of size 2 at addr ffff888106e55c42 by task syz.3.4912/17201
[  188.831479][T17201] 
[  188.832493][T17201] CPU: 1 UID: 0 PID: 17201 Comm: syz.3.4912 Not tainted syzkaller #0 PREEMPT(full) 
[  188.832511][T17201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.832521][T17201] Call Trace:
[  188.832526][T17201]  <TASK>
[  188.832533][T17201]  dump_stack_lvl+0x189/0x250
[  188.832557][T17201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.832571][T17201]  ? lock_release+0x4b/0x3e0
[  188.832593][T17201]  ? __virt_addr_valid+0x4a5/0x5c0
[  188.832611][T17201]  print_report+0xca/0x240
[  188.832623][T17201]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  188.832635][T17201]  kasan_report+0x118/0x150
[  188.832653][T17201]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  188.832669][T17201]  __xfrm_state_lookup+0x6ad/0x8d0
[  188.832685][T17201]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  188.832702][T17201]  xfrm_state_update+0x20a/0x1270
[  188.832718][T17201]  ? xfrm_set_type_offload+0x181/0x430
[  188.832740][T17201]  xfrm_add_sa+0x35b2/0x4070
[  188.832760][T17201]  ? __pfx_xfrm_add_sa+0x10/0x10
[  188.832773][T17201]  ? apparmor_capable+0x137/0x1b0
[  188.832789][T17201]  ? __nla_parse+0x40/0x60
[  188.832809][T17201]  xfrm_user_rcv_msg+0x7a3/0xab0
[  188.832825][T17201]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.832849][T17201]  ? __pfx___mutex_trylock_common+0x10/0x10
[  188.832862][T17201]  ? kasan_save_track+0x4f/0x80
[  188.832877][T17201]  ? rcu_is_watching+0x15/0xb0
[  188.832889][T17201]  ? trace_contention_end+0x39/0x120
[  188.832900][T17201]  ? __mutex_lock+0x335/0x1350
[  188.832914][T17201]  netlink_rcv_skb+0x208/0x470
[  188.832933][T17201]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.832948][T17201]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.832968][T17201]  ? lock_release+0x4b/0x3e0
[  188.832982][T17201]  ? net_generic+0x1e/0x240
[  188.832994][T17201]  ? net_generic+0x1e/0x240
[  188.833007][T17201]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.833025][T17201]  xfrm_netlink_rcv+0x79/0x90
[  188.833038][T17201]  netlink_unicast+0x82f/0x9e0
[  188.833054][T17201]  ? __pfx_netlink_unicast+0x10/0x10
[  188.833068][T17201]  ? netlink_sendmsg+0x642/0xb30
[  188.833077][T17201]  ? skb_put+0x11b/0x210
[  188.833087][T17201]  netlink_sendmsg+0x805/0xb30
[  188.833098][T17201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.833107][T17201]  ? futex_unqueue+0x22/0x240
[  188.833118][T17201]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.833128][T17201]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.833140][T17201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.833150][T17201]  __sock_sendmsg+0x21c/0x270
[  188.833164][T17201]  ____sys_sendmsg+0x505/0x830
[  188.833175][T17201]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.833188][T17201]  ? import_iovec+0x74/0xa0
[  188.833201][T17201]  ___sys_sendmsg+0x21f/0x2a0
[  188.833212][T17201]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.833234][T17201]  ? futex_wait+0x285/0x360
[  188.833259][T17201]  ? __fget_files+0x2a/0x420
[  188.833271][T17201]  ? __fget_files+0x3a0/0x420
[  188.833283][T17201]  __x64_sys_sendmsg+0x19b/0x260
[  188.833296][T17201]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.833312][T17201]  ? rcu_is_watching+0x15/0xb0
[  188.833325][T17201]  ? rcu_is_watching+0x15/0xb0
[  188.833338][T17201]  do_syscall_64+0xfa/0x3b0
[  188.833351][T17201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.833363][T17201]  ? exc_page_fault+0x9f/0xf0
[  188.833380][T17201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.833393][T17201] RIP: 0033:0x7f181dd8ebe9
[  188.833406][T17201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.833450][T17201] RSP: 002b:00007f181bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.833466][T17201] RAX: ffffffffffffffda RBX: 00007f181dfb5fa0 RCX: 00007f181dd8ebe9
[  188.833476][T17201] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  188.833485][T17201] RBP: 00007f181de11e19 R08: 0000000000000000 R09: 0000000000000000
[  188.833493][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.833501][T17201] R13: 00007f181dfb6038 R14: 00007f181dfb5fa0 R15: 00007ffc5ab8a218
[  188.833517][T17201]  </TASK>
[  188.833522][T17201] 
[  188.989948][T17201] Allocated by task 12409:
[  188.991827][T17201]  kasan_save_track+0x3e/0x80
[  188.993779][T17201]  __kasan_slab_alloc+0x6c/0x80
[  188.995783][T17201]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  188.998015][T17201]  xfrm_state_alloc+0x24/0x2f0
[  189.000011][T17201]  __find_acq_core+0x8a7/0x1c00
[  189.002014][T17201]  xfrm_find_acq+0x78/0xa0
[  189.003862][T17201]  xfrm_alloc_userspi+0x6b3/0xc90
[  189.005905][T17201]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.008115][T17201]  netlink_rcv_skb+0x208/0x470
[  189.010167][T17201]  xfrm_netlink_rcv+0x79/0x90
[  189.012101][T17201]  netlink_unicast+0x82f/0x9e0
[  189.014058][T17201]  netlink_sendmsg+0x805/0xb30
[  189.016043][T17201]  __sock_sendmsg+0x21c/0x270
[  189.017949][T17201]  ____sys_sendmsg+0x505/0x830
[  189.019909][T17201]  ___sys_sendmsg+0x21f/0x2a0
[  189.021882][T17201]  __x64_sys_sendmsg+0x19b/0x260
[  189.023868][T17201]  do_syscall_64+0xfa/0x3b0
[  189.025702][T17201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.028121][T17201] 
[  189.029115][T17201] Freed by task 47:
[  189.030720][T17201]  kasan_save_track+0x3e/0x80
[  189.032677][T17201]  kasan_save_free_info+0x46/0x50
[  189.034717][T17201]  __kasan_slab_free+0x5b/0x80
[  189.036705][T17201]  kmem_cache_free+0x18f/0x400
[  189.038685][T17201]  xfrm_state_gc_task+0x52d/0x6b0
[  189.040761][T17201]  process_scheduled_works+0xae1/0x17b0
[  189.042931][T17201]  worker_thread+0x8a0/0xda0
[  189.044835][T17201]  kthread+0x711/0x8a0
[  189.046529][T17201]  ret_from_fork+0x3fc/0x770
[  189.048449][T17201]  ret_from_fork_asm+0x1a/0x30
[  189.050404][T17201] 
[  189.051452][T17201] The buggy address belongs to the object at ffff888106e55b00
[  189.051452][T17201]  which belongs to the cache xfrm_state of size 928
[  189.056969][T17201] The buggy address is located 322 bytes inside of
[  189.056969][T17201]  freed 928-byte region [ffff888106e55b00, ffff888106e55ea0)
[  189.062321][T17201] 
[  189.063333][T17201] The buggy address belongs to the physical page:
[  189.065927][T17201] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888106e55f80 pfn:0x106e54
[  189.069950][T17201] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  189.073392][T17201] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  189.076539][T17201] page_type: f5(slab)
[  189.078243][T17201] raw: 057ff00000000040 ffff88801af85640 ffffea0000aa3200 0000000000000002
[  189.081851][T17201] raw: ffff888106e55f80 00000000000e000c 00000000f5000000 0000000000000000
[  189.085261][T17201] head: 057ff00000000040 ffff88801af85640 ffffea0000aa3200 0000000000000002
[  189.088795][T17201] head: ffff888106e55f80 00000000000e000c 00000000f5000000 0000000000000000
[  189.092263][T17201] head: 057ff00000000002 ffffea00041b9501 00000000ffffffff 00000000ffffffff
[  189.095884][T17201] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  189.099469][T17201] page dumped because: kasan: bad access detected
[  189.102095][T17201] page_owner tracks the page as allocated
[  189.104363][T17201] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9407, tgid 9402 (syz.0.1527), ts 98166913769, free_ts 77379440738
[  189.112170][T17201]  post_alloc_hook+0x240/0x2a0
[  189.114242][T17201]  get_page_from_freelist+0x21e4/0x22c0
[  189.116567][T17201]  __alloc_frozen_pages_noprof+0x181/0x370
[  189.119058][T17201]  alloc_pages_mpol+0x232/0x4a0
[  189.121132][T17201]  allocate_slab+0x8a/0x370
[  189.123019][T17201]  ___slab_alloc+0xbeb/0x1410
[  189.125044][T17201]  kmem_cache_alloc_noprof+0x283/0x3c0
[  189.127390][T17201]  xfrm_state_alloc+0x24/0x2f0
[  189.129394][T17201]  xfrm_state_find+0x37d4/0x5400
[  189.131493][T17201]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  189.133915][T17201]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  189.135997][T17201]  xfrm_lookup_route+0x3c/0x1c0
[  189.137926][T17201]  udp_sendmsg+0x142e/0x2170
[  189.139883][T17201]  __sock_sendmsg+0x19c/0x270
[  189.141894][T17201]  ____sys_sendmsg+0x52d/0x830
[  189.143869][T17201]  ___sys_sendmsg+0x21f/0x2a0
[  189.145840][T17201] page last free pid 5284 tgid 5284 stack trace:
[  189.148450][T17201]  __free_frozen_pages+0xbc4/0xd30
[  189.150569][T17201]  __tlb_remove_table+0x2d2/0x3b0
[  189.152573][T17201]  tlb_remove_table_rcu+0x85/0x100
[  189.154640][T17201]  rcu_core+0xcab/0x1770
[  189.156305][T17201]  handle_softirqs+0x286/0x870
[  189.158235][T17201]  __irq_exit_rcu+0xca/0x1f0
[  189.160055][T17201]  irq_exit_rcu+0x9/0x30
[  189.161794][T17201]  sysvec_call_function_single+0x54/0xc0
[  189.164068][T17201]  asm_sysvec_call_function_single+0x1a/0x20
[  189.166578][T17201] 
[  189.167592][T17201] Memory state around the buggy address:
[  189.169873][T17201]  ffff888106e55b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.173153][T17201]  ffff888106e55b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.176312][T17201] >ffff888106e55c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.179530][T17201]                                            ^
[  189.182018][T17201]  ffff888106e55c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.185260][T17201]  ffff888106e55d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.188665][T17201] ==================================================================
[  189.192621][T17201] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  189.196774][T17201] CPU: 1 UID: 0 PID: 17201 Comm: syz.3.4912 Not tainted syzkaller #0 PREEMPT(full) 
[  189.200955][T17201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.205324][T17201] Call Trace:
[  189.206861][T17201]  <TASK>
[  189.208150][T17201]  dump_stack_lvl+0x99/0x250
[  189.210142][T17201]  ? __asan_memcpy+0x40/0x70
[  189.212195][T17201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.214562][T17201]  ? __pfx__printk+0x10/0x10
[  189.216555][T17201]  vpanic+0x281/0x750
[  189.218230][T17201]  ? __pfx_vpanic+0x10/0x10
[  189.220120][T17201]  ? rcu_is_watching+0x15/0xb0
[  189.222061][T17201]  panic+0xb9/0xc0
[  189.223586][T17201]  ? __pfx_panic+0x10/0x10
[  189.225454][T17201]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  189.227902][T17201]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.230279][T17201]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  189.232434][T17201]  check_panic_on_warn+0x89/0xb0
[  189.234594][T17201]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  189.236869][T17201]  end_report+0x78/0x160
[  189.238716][T17201]  kasan_report+0x129/0x150
[  189.240610][T17201]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  189.242856][T17201]  __xfrm_state_lookup+0x6ad/0x8d0
[  189.245017][T17201]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  189.247445][T17201]  xfrm_state_update+0x20a/0x1270
[  189.249602][T17201]  ? xfrm_set_type_offload+0x181/0x430
[  189.251937][T17201]  xfrm_add_sa+0x35b2/0x4070
[  189.253870][T17201]  ? __pfx_xfrm_add_sa+0x10/0x10
[  189.255907][T17201]  ? apparmor_capable+0x137/0x1b0
[  189.257985][T17201]  ? __nla_parse+0x40/0x60
[  189.259837][T17201]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.261905][T17201]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  189.264114][T17201]  ? __pfx___mutex_trylock_common+0x10/0x10
[  189.266523][T17201]  ? kasan_save_track+0x4f/0x80
[  189.268494][T17201]  ? rcu_is_watching+0x15/0xb0
[  189.270443][T17201]  ? trace_contention_end+0x39/0x120
[  189.272584][T17201]  ? __mutex_lock+0x335/0x1350
[  189.274547][T17201]  netlink_rcv_skb+0x208/0x470
[  189.276554][T17201]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  189.278742][T17201]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  189.281032][T17201]  ? lock_release+0x4b/0x3e0
[  189.282916][T17201]  ? net_generic+0x1e/0x240
[  189.284793][T17201]  ? net_generic+0x1e/0x240
[  189.286696][T17201]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.288822][T17201]  xfrm_netlink_rcv+0x79/0x90
[  189.290759][T17201]  netlink_unicast+0x82f/0x9e0
[  189.292730][T17201]  ? __pfx_netlink_unicast+0x10/0x10
[  189.294884][T17201]  ? netlink_sendmsg+0x642/0xb30
[  189.296907][T17201]  ? skb_put+0x11b/0x210
[  189.298683][T17201]  netlink_sendmsg+0x805/0xb30
[  189.300710][T17201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.302952][T17201]  ? futex_unqueue+0x22/0x240
[  189.304898][T17201]  ? aa_sock_msg_perm+0xf1/0x1d0
[  189.306923][T17201]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.309000][T17201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.311315][T17201]  __sock_sendmsg+0x21c/0x270
[  189.313294][T17201]  ____sys_sendmsg+0x505/0x830
[  189.315299][T17201]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.317552][T17201]  ? import_iovec+0x74/0xa0
[  189.319503][T17201]  ___sys_sendmsg+0x21f/0x2a0
[  189.321446][T17201]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.323610][T17201]  ? futex_wait+0x285/0x360
[  189.325439][T17201]  ? __fget_files+0x2a/0x420
[  189.327354][T17201]  ? __fget_files+0x3a0/0x420
[  189.329287][T17201]  __x64_sys_sendmsg+0x19b/0x260
[  189.331140][T17201]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.333511][T17201]  ? rcu_is_watching+0x15/0xb0
[  189.335532][T17201]  ? rcu_is_watching+0x15/0xb0
[  189.337502][T17201]  do_syscall_64+0xfa/0x3b0
[  189.339338][T17201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.341794][T17201]  ? exc_page_fault+0x9f/0xf0
[  189.343695][T17201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.346024][T17201] RIP: 0033:0x7f181dd8ebe9
[  189.347854][T17201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.355704][T17201] RSP: 002b:00007f181bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.359109][T17201] RAX: ffffffffffffffda RBX: 00007f181dfb5fa0 RCX: 00007f181dd8ebe9
[  189.362299][T17201] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  189.365529][T17201] RBP: 00007f181de11e19 R08: 0000000000000000 R09: 0000000000000000
[  189.368637][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.371831][T17201] R13: 00007f181dfb6038 R14: 00007f181dfb5fa0 R15: 00007ffc5ab8a218
[  189.375016][T17201]  </TASK>
[  189.377132][T17201] Kernel Offset: disabled
[  189.378923][T17201] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:46:52  Registers:
info registers vcpu 0

CPU#0
RAX=8c11170197090900 RBX=ffffffff819683b8 RCX=8c11170197090900 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000000c0 CR3=0000000119386000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=7acbc738c5000000 00a2b90d14aa4785
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f181eaed100 00007f181df87460 XMM05=00007f181df87478 00007f181df874c0
XMM06=00007f181df874b8 00007f181df874b0 XMM07=00007f181df874a8 00007f181df874a0
XMM08=0000000000000000 00007f181de12ee7 XMM09=0000000000000000 00007f181de12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001990 RDI=0000000000001991 RBP=00000000000003f8 RSP=ffffc90003bb69d0
R8 =ffff888020ce8237 R9 =1ffff1100419d046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb908 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f181bff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000119386000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f181df87498 00007f181df87470 XMM03=00007f181df874a8 00007f181df874a0
XMM04=00007f181eaed100 00007f181df87460 XMM05=00007f181df87478 00007f181df874c0
XMM06=00007f181df874b8 00007f181df874b0 XMM07=00007f181df874a8 00007f181df874a0
XMM08=0000000000000000 00007f181de12ee7 XMM09=0000000000000000 00007f181de12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
