last executing test programs:

561.213565ms ago: executing program 2 (id=4556):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)

561.059071ms ago: executing program 2 (id=4557):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0xc}}], 0x1, 0x0)

500.827991ms ago: executing program 2 (id=4560):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)

436.634273ms ago: executing program 2 (id=4563):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800)

436.315955ms ago: executing program 2 (id=4565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4000084)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x4044)

377.01222ms ago: executing program 2 (id=4568):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
socket(0x22, 0x800000003, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)

321.172041ms ago: executing program 1 (id=4571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005fc0), 0xffffffffffffffff)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000068c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000006b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB='$\x00z'], 0x40}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000)

320.973102ms ago: executing program 1 (id=4573):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000037c0)=""/4050, 0xfd2}, {&(0x7f0000000ec0)=""/4045, 0xfcd}, {&(0x7f0000000700)=""/226, 0xe2}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000500)=""/30, 0x1e}], 0x6}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)

186.982208ms ago: executing program 1 (id=4574):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r1, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20)
recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
recvmsg$can_bcm(r3, 0x0, 0x10060)

186.783023ms ago: executing program 0 (id=4575):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0x0, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0)

119.153443ms ago: executing program 0 (id=4576):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000dc0)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)

118.988762ms ago: executing program 1 (id=4577):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @empty}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4)

118.922467ms ago: executing program 0 (id=4578):
syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0)

70.702876ms ago: executing program 1 (id=4579):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="1c4c", 0x2}], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
writev(r0, &(0x7f0000003680)=[{&(0x7f0000000280)="d259", 0x2}, {&(0x7f00000004c0)="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", 0xb41}], 0x2)

70.520756ms ago: executing program 0 (id=4580):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
readv(r1, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1)

70.316488ms ago: executing program 1 (id=4581):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x40)

198.953µs ago: executing program 0 (id=4582):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
close(0x4)

0s ago: executing program 0 (id=4583):
unshare(0x20000400)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59996' (ED25519) to the list of known hosts.
syzkaller login: [   48.644047][ T5835] cgroup: Unknown subsys name 'net'
[   48.744920][ T5835] cgroup: Unknown subsys name 'cpuset'
[   48.749160][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.445626][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.497520][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.501729][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.505356][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.512575][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.515307][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.539245][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.542449][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.545084][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.548315][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.557185][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.590610][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.593868][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.596451][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.599613][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.603092][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.783065][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   54.876416][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.935250][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.938452][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.940824][ T5844] bridge_slave_0: entered allmulticast mode
[   54.944007][ T5844] bridge_slave_0: entered promiscuous mode
[   54.948152][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.950373][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.953625][ T5844] bridge_slave_1: entered allmulticast mode
[   54.956311][ T5844] bridge_slave_1: entered promiscuous mode
[   54.959313][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.029428][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.035631][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.046366][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.048517][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.050741][ T5849] bridge_slave_0: entered allmulticast mode
[   55.055417][ T5849] bridge_slave_0: entered promiscuous mode
[   55.078606][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.080868][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.085080][ T5849] bridge_slave_1: entered allmulticast mode
[   55.087777][ T5849] bridge_slave_1: entered promiscuous mode
[   55.100192][ T5844] team0: Port device team_slave_0 added
[   55.122221][ T5844] team0: Port device team_slave_1 added
[   55.124253][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.126507][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.128712][ T5851] bridge_slave_0: entered allmulticast mode
[   55.131355][ T5851] bridge_slave_0: entered promiscuous mode
[   55.158627][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.160872][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.164308][ T5851] bridge_slave_1: entered allmulticast mode
[   55.167041][ T5851] bridge_slave_1: entered promiscuous mode
[   55.171446][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.175112][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.177201][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.186250][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.200325][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.203841][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.206041][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.214050][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.260267][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.275430][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.291166][ T5849] team0: Port device team_slave_0 added
[   55.308029][ T5844] hsr_slave_0: entered promiscuous mode
[   55.310352][ T5844] hsr_slave_1: entered promiscuous mode
[   55.315683][ T5849] team0: Port device team_slave_1 added
[   55.328379][ T5851] team0: Port device team_slave_0 added
[   55.349617][ T5851] team0: Port device team_slave_1 added
[   55.360591][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.363311][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.371147][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.377154][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.379238][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.387237][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.426162][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.428321][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.436353][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.440732][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.443527][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.451082][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.487207][ T5849] hsr_slave_0: entered promiscuous mode
[   55.489643][ T5849] hsr_slave_1: entered promiscuous mode
[   55.492162][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   55.494037][ T5849] Cannot create hsr debugfs directory
[   55.594282][ T5851] hsr_slave_0: entered promiscuous mode
[   55.596534][ T5851] hsr_slave_1: entered promiscuous mode
[   55.598587][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   55.600327][ T5851] Cannot create hsr debugfs directory
[   55.725997][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.733210][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.745286][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.773139][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.854016][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.867884][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.886867][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.894754][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.922699][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.934738][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.945479][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.951172][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.028222][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.053038][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.070851][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.073674][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.087741][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.089986][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.124042][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.144283][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.174546][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.185937][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.206637][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.208779][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.214115][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.216408][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.220090][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.222383][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.228977][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.231187][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.338366][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.376530][ T5844] veth0_vlan: entered promiscuous mode
[   56.386599][ T5844] veth1_vlan: entered promiscuous mode
[   56.413438][ T5844] veth0_macvtap: entered promiscuous mode
[   56.418004][ T5844] veth1_macvtap: entered promiscuous mode
[   56.440695][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.450664][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.460046][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.475179][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.478069][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.480573][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.486284][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.488752][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.530630][ T5851] veth0_vlan: entered promiscuous mode
[   56.551062][ T5851] veth1_vlan: entered promiscuous mode
[   56.582821][ T5236] Bluetooth: hci1: command tx timeout
[   56.582827][   T54] Bluetooth: hci0: command tx timeout
[   56.587710][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.590194][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.595173][ T5849] veth0_vlan: entered promiscuous mode
[   56.618936][ T5849] veth1_vlan: entered promiscuous mode
[   56.635939][ T5851] veth0_macvtap: entered promiscuous mode
[   56.641283][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.643024][ T5851] veth1_macvtap: entered promiscuous mode
[   56.646022][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.672228][   T54] Bluetooth: hci2: command tx timeout
[   56.676161][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.678791][ T5849] veth0_macvtap: entered promiscuous mode
[   56.691367][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.705290][ T5849] veth1_macvtap: entered promiscuous mode
[   56.712957][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.720346][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.732482][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.736725][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.739871][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.743960][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.762897][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.773732][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.790042][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.794005][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.806703][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.893505][ T5911] tipc: Started in network mode
[   56.897307][ T5911] tipc: Node identity 4a2a548b3c68, cluster identity 4711
[   56.900599][ T5911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.907475][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.910418][ T5911] syzkaller0: entered promiscuous mode
[   56.912212][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.913144][ T5911] syzkaller0: entered allmulticast mode
[   56.953600][ T5911] tipc: Resetting bearer <eth:syzkaller0>
[   56.957550][ T5910] tipc: Resetting bearer <eth:syzkaller0>
[   56.966257][ T5910] tipc: Disabling bearer <eth:syzkaller0>
[   56.978554][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.982396][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.002276][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.011132][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.054031][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.057041][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.235767][ T5920] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8'.
[   57.344400][ T5937] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.380167][ T5941] sctp: [Deprecated]: syz.0.17 (pid 5941) Use of int in maxseg socket option.
[   57.380167][ T5941] Use struct sctp_assoc_value instead
[   57.454310][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'.
[   57.516494][ T5950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.565175][ T5952] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   57.574955][ T5952] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   57.696900][ T5964] netlink: 'syz.1.29': attribute type 10 has an invalid length.
[   57.730207][ T5966] netlink: 5 bytes leftover after parsing attributes in process `syz.1.30'.
[   57.734431][ T5966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.761742][ T5962] IPVS: Scheduler module ip_vs_sip not found
[   57.937821][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.940596][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.947795][ T5981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.958635][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.961378][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.964129][ T5981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.973048][ T5981] Zero length message leads to an empty skb
[   58.060311][ T5987] nbd: must specify a size in bytes for the device
[   58.134480][ T5716] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.142366][ T5716] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.145376][ T5716] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.156870][ T5716] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.266522][ T6007] netlink: 'syz.2.50': attribute type 1 has an invalid length.
[   58.272019][ T6007] netlink: 'syz.2.50': attribute type 2 has an invalid length.
[   58.278491][ T6007] netlink: 'syz.2.50': attribute type 8 has an invalid length.
[   58.279790][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   58.513960][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.663892][   T54] Bluetooth: hci0: command tx timeout
[   58.671859][   T54] Bluetooth: hci1: command tx timeout
[   58.742933][   T54] Bluetooth: hci2: command tx timeout
[   58.963072][ T6076] syz.0.80 uses obsolete (PF_INET,SOCK_PACKET)
[   59.229581][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.429411][ T6118] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   59.442808][ T6118] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   59.445332][ T6118] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   59.535118][ T6128] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   59.538924][ T6128] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   59.551937][ T6126] Illegal XDP return value 303566061 on prog  (id 18) dev N/A, expect packet loss!
[   59.707787][ T6144] sch_tbf: burst 1476 is lower than device veth0_macvtap mtu (1514) !
[   59.775698][ T6148] wg1 speed is unknown, defaulting to 1000
[   59.779639][ T6148] wg1 speed is unknown, defaulting to 1000
[   59.787335][ T6148] wg1 speed is unknown, defaulting to 1000
[   59.792925][ T6148] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   59.800571][ T6148] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   59.852534][ T6148] wg1 speed is unknown, defaulting to 1000
[   59.855384][ T6148] wg1 speed is unknown, defaulting to 1000
[   59.859330][ T6148] wg1 speed is unknown, defaulting to 1000
[   60.198253][ T6186] pim6reg1: entered promiscuous mode
[   60.200075][ T6186] pim6reg1: entered allmulticast mode
[   60.741699][   T54] Bluetooth: hci1: command tx timeout
[   60.741735][ T5236] Bluetooth: hci0: command tx timeout
[   60.822500][ T5236] Bluetooth: hci2: command tx timeout
[   60.930637][ T6235] trusted_key: syz.0.149 sent an empty control message without MSG_MORE.
[   61.037619][ T6247] netlink: 'syz.2.155': attribute type 3 has an invalid length.
[   61.913453][ T6324] netlink: 'syz.1.193': attribute type 4 has an invalid length.
[   62.161257][ T6347] netlink: 'syz.2.203': attribute type 18 has an invalid length.
[   62.177561][ T6347] netlink: 'syz.2.203': attribute type 18 has an invalid length.
[   62.177601][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.184516][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.187256][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.189907][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.484142][ T6373] netlink: 'syz.0.216': attribute type 12 has an invalid length.
[   62.486626][ T6373] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   62.489081][ T6373] __nla_validate_parse: 18 callbacks suppressed
[   62.489088][ T6373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.216'.
[   62.512802][ T6373] netlink: 23 bytes leftover after parsing attributes in process `syz.0.216'.
[   62.580456][ T6383] Bluetooth: MGMT ver 1.23
[   62.822064][ T5236] Bluetooth: hci1: command tx timeout
[   62.911720][ T5236] Bluetooth: hci2: command tx timeout
[   63.291332][ T6453] netlink: 240 bytes leftover after parsing attributes in process `syz.2.250'.
[   63.439409][ T6463] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.254'.
[   63.528870][ T6474] validate_nla: 1 callbacks suppressed
[   63.528899][ T6474] netlink: 'syz.0.260': attribute type 1 has an invalid length.
[   63.534020][ T6474] netlink: 224 bytes leftover after parsing attributes in process `syz.0.260'.
[   63.588151][ T6481] netlink: 168 bytes leftover after parsing attributes in process `syz.0.263'.
[   63.674027][ T6489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   63.676591][ T6489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   64.115783][ T6517] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   64.148010][ T6175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   64.324439][ T6175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   64.495083][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'.
[   64.605007][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'.
[   65.277272][ T6583] tap0: tun_chr_ioctl cmd 1074025677
[   65.279294][ T6583] tap0: linktype set to 776
[   65.511638][ T6599] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   65.588257][ T6605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.322'.
[   65.787321][ T6621] openvswitch: netlink: Actions may not be safe on all matching packets
[   65.864315][ T6631] ksmbd: Unknown IPC event: 3, ignore.
[   66.016073][ T6652] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.342'.
[   66.207147][ T6675] netlink: 'syz.2.352': attribute type 4 has an invalid length.
[   66.240277][ T6679] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   66.244007][ T6676] IPVS: stopping backup sync thread 6679 ...
[   66.312767][ T6685] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   66.452346][ T6685] bond1: (slave geneve2): making interface the new active one
[   66.455387][ T6685] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   66.464613][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   66.467495][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   66.470216][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   66.482371][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   66.500989][ T6699] netlink: 'syz.0.362': attribute type 11 has an invalid length.
[   66.509441][ T6699] netlink: 'syz.0.362': attribute type 11 has an invalid length.
[   66.718408][ T6726] vlan3: entered promiscuous mode
[   66.720032][ T6726] gretap0: entered promiscuous mode
[   66.848740][ T6743] wg1 speed is unknown, defaulting to 1000
[   66.872827][ T6745] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   66.875241][ T6745] netlink: 'syz.2.382': attribute type 2 has an invalid length.
[   67.180470][ T6784] openvswitch: netlink: Missing key (keys=40, expected=80)
[   67.260671][ T6789] syzkaller0: entered promiscuous mode
[   67.262773][ T6789] syzkaller0: entered allmulticast mode
[   67.345563][ T6796] openvswitch: netlink: IPv4 tun info is not correct
[   67.396471][ T6798] xt_limit: Overflow, try lower: 604147548/4200216962
[   67.519484][ T6805] netlink: 'syz.2.409': attribute type 10 has an invalid length.
[   68.028617][ T6805] 8021q: adding VLAN 0 to HW filter on device team0
[   68.044738][ T6805] bond0: (slave team0): Enslaving as an active interface with an up link
[   68.225388][ T6830] __nla_validate_parse: 6 callbacks suppressed
[   68.225399][ T6830] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.419'.
[   68.903087][ T6871] netlink: 'syz.2.435': attribute type 32 has an invalid length.
[   69.651353][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'.
[   69.677644][ T6954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.475'.
[   69.852030][ T6963] syzkaller0: entered promiscuous mode
[   69.853855][ T6963] syzkaller0: entered allmulticast mode
[   70.123674][ T6967] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   70.553492][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'.
[   70.640698][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'.
[   70.758111][ T6990] netlink: 'syz.0.491': attribute type 32 has an invalid length.
[   70.902860][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   70.908551][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.910644][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   70.930512][ T7012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.125285][ T7032] syz_tun: entered allmulticast mode
[   71.249353][ T7039] bond0: option mode: unable to set because the bond device has slaves
[   71.257668][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'.
[   71.288976][ T7043] netlink: 'syz.1.512': attribute type 1 has an invalid length.
[   71.309295][ T7043] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.325699][ T7043] bond1: (slave geneve2): making interface the new active one
[   71.329607][ T7043] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   71.489582][ T7061] vcan0: tx drop: invalid da for name 0x0000000000000001
[   71.559366][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[   71.738691][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.531'.
[   71.741455][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'.
[   71.744956][ T7085] netlink: 31 bytes leftover after parsing attributes in process `syz.1.531'.
[   71.747558][ T7085] netlink: 'syz.1.531': attribute type 3 has an invalid length.
[   71.750023][ T7085] netlink: 'syz.1.531': attribute type 2 has an invalid length.
[   71.754342][ T7085] netlink: 'syz.1.531': attribute type 2 has an invalid length.
[   72.229825][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.232705][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.300764][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.310862][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.393138][ T7135] vlan3: left promiscuous mode
[   72.394694][ T7135] gretap0: left promiscuous mode
[   72.397239][ T5716] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.399974][ T5716] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.404409][ T5716] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[   72.407410][ T5716] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.410218][ T5716] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.414416][ T5716] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[   72.417843][ T5716] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.428882][ T5716] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.432026][ T5716] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[   72.436071][ T5716] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.439425][ T5716] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.444612][ T5716] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[   72.453504][ T7145] netlink: 'syz.2.557': attribute type 1 has an invalid length.
[   72.483137][ T7148] tipc: Started in network mode
[   72.489387][ T7148] tipc: Node identity , cluster identity 4711
[   72.492849][ T7148] tipc: Failed to obtain node identity
[   72.494892][ T7148] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   72.544770][ T7155] netlink: 'syz.2.562': attribute type 2 has an invalid length.
[   72.843065][ T7189] netlink: 'syz.0.578': attribute type 1 has an invalid length.
[   73.238189][ T7227] __nla_validate_parse: 8 callbacks suppressed
[   73.238202][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'.
[   73.247959][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.250827][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.653162][ T7261] netlink: 'syz.0.607': attribute type 1 has an invalid length.
[   73.655552][ T7261] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.607'.
[   73.915506][ T7274] netlink: 276 bytes leftover after parsing attributes in process `syz.2.613'.
[   74.092922][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'.
[   74.187302][ T7283] netlink: 96 bytes leftover after parsing attributes in process `syz.2.616'.
[   74.357058][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[   74.360652][ T7292] validate_nla: 1 callbacks suppressed
[   74.360662][ T7292] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[   74.368261][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'.
[   74.429504][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'.
[   74.592787][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'.
[   74.729471][   T10] IPVS: starting estimator thread 0...
[   74.734958][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.634'.
[   74.825754][ T7335] wg1 speed is unknown, defaulting to 1000
[   74.842929][ T7326] IPVS: using max 62 ests per chain, 148800 per kthread
[   74.846015][ T7339] bond0: entered promiscuous mode
[   74.847681][ T7339] bond_slave_0: entered promiscuous mode
[   74.849546][ T7339] bond_slave_1: entered promiscuous mode
[   74.852715][ T7339] batadv0: entered promiscuous mode
[   74.855150][ T7339] hsr1: entered allmulticast mode
[   74.856770][ T7339] bond0: entered allmulticast mode
[   74.858327][ T7339] bond_slave_0: entered allmulticast mode
[   74.860075][ T7339] bond_slave_1: entered allmulticast mode
[   74.862160][ T7339] batadv0: entered allmulticast mode
[   74.863993][ T7339] 8021q: adding VLAN 0 to HW filter on device hsr1
[   74.867608][ T7339] bond0: left promiscuous mode
[   74.869132][ T7339] bond_slave_0: left promiscuous mode
[   74.870905][ T7339] bond_slave_1: left promiscuous mode
[   74.873589][ T7339] batadv0: left promiscuous mode
[   75.160476][ T7358] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   75.198921][ T7360] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   75.201204][ T7360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.318898][ T7365] block nbd0: not configured, cannot reconfigure
[   76.256191][ T7429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.260546][ T7429] syzkaller0: entered promiscuous mode
[   76.264267][ T7429] syzkaller0: entered allmulticast mode
[   76.279563][ T7429] tipc: Resetting bearer <eth:syzkaller0>
[   76.283690][ T7428] tipc: Resetting bearer <eth:syzkaller0>
[   76.296180][ T7428] tipc: Disabling bearer <eth:syzkaller0>
[   76.795958][ T7447] macvlan3: entered allmulticast mode
[   76.798070][ T7447] veth1_vlan: entered allmulticast mode
[   76.801355][ T7447] veth1_vlan: left allmulticast mode
[   77.457580][ T7482] netlink: 'syz.0.703': attribute type 29 has an invalid length.
[   77.820962][ T7518] syz_tun (unregistering): left allmulticast mode
[   77.838184][ T7520] tipc: Started in network mode
[   77.839782][ T7520] tipc: Node identity 6ec11289baa6, cluster identity 4711
[   77.851772][ T7520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.854343][ T7520] syzkaller0: entered promiscuous mode
[   77.856043][ T7520] syzkaller0: entered allmulticast mode
[   77.880315][ T7520] tipc: Resetting bearer <eth:syzkaller0>
[   77.885285][ T7516] tipc: Resetting bearer <eth:syzkaller0>
[   77.905023][ T7516] tipc: Disabling bearer <eth:syzkaller0>
[   78.806931][ T7564] __nla_validate_parse: 7 callbacks suppressed
[   78.806946][ T7564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.742'.
[   78.996256][ T7569] netlink: 'syz.0.744': attribute type 1 has an invalid length.
[   79.000197][ T7569] netlink: 'syz.0.744': attribute type 2 has an invalid length.
[   79.268919][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'.
[   79.290260][ T7590] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   79.346438][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'.
[   79.356362][ T7600] openvswitch: netlink: IPv4 tun info is not correct
[   79.414965][ T7608] netlink: 104 bytes leftover after parsing attributes in process `syz.2.763'.
[   79.515641][ T7616] netlink: 68 bytes leftover after parsing attributes in process `syz.0.767'.
[   79.627811][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.774'.
[   79.817678][ T7650] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[   79.834240][ T7655] ip6gre1: entered allmulticast mode
[   79.856689][ T7650] wg1 speed is unknown, defaulting to 1000
[   79.947218][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'.
[   79.978258][ T7668] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   80.070259][ T7679] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   81.064365][ T7711] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.811'.
[   81.144095][    T9] cfg80211: failed to load regulatory.db
[   81.288599][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'.
[   81.513116][ T7752] netlink: 'syz.2.831': attribute type 74 has an invalid length.
[   81.525661][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.832'.
[   82.577749][ T7845] wg1 speed is unknown, defaulting to 1000
[   83.248622][ T7904] macvlan3: entered allmulticast mode
[   83.250616][ T7904] veth1_vlan: entered allmulticast mode
[   83.254465][ T7904] veth1_vlan: left allmulticast mode
[   83.865469][ T7948] netlink: 'syz.1.918': attribute type 3 has an invalid length.
[   83.867756][ T7948] __nla_validate_parse: 5 callbacks suppressed
[   83.867762][ T7948] netlink: 156 bytes leftover after parsing attributes in process `syz.1.918'.
[   83.872633][ T7948] netlink: 'syz.1.918': attribute type 3 has an invalid length.
[   83.874966][ T7948] netlink: 156 bytes leftover after parsing attributes in process `syz.1.918'.
[   83.985133][ T7954] syzkaller0: entered promiscuous mode
[   83.987063][ T7954] syzkaller0: entered allmulticast mode
[   83.990817][ T7956] unknown channel width for channel at 909000KHz?
[   83.995311][ T7956] unknown channel width for channel at 909000KHz?
[   84.077139][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'.
[   84.878646][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'.
[   85.166350][ T8000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.222346][ T8004] netlink: 'syz.2.945': attribute type 4 has an invalid length.
[   85.359650][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'.
[   85.428374][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'.
[   85.869405][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[   86.234979][ T8078] netlink: 'syz.1.981': attribute type 10 has an invalid length.
[   86.252942][ T8098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.986'.
[   86.255792][ T8098] netlink: 48 bytes leftover after parsing attributes in process `syz.2.986'.
[   86.295700][ T8102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.347122][ T8108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.354598][ T8108] syzkaller0: entered promiscuous mode
[   86.356367][ T8108] syzkaller0: entered allmulticast mode
[   86.381964][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[   86.385087][ T8106] tipc: Resetting bearer <eth:syzkaller0>
[   86.397386][ T8106] tipc: Disabling bearer <eth:syzkaller0>
[   86.404767][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'.
[   87.232265][ T8164] netlink: 'syz.0.1019': attribute type 3 has an invalid length.
[   87.463067][ T8194] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   87.641374][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.644308][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.808758][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.823216][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.914856][   T47] wg1 speed is unknown, defaulting to 1000
[   87.917854][   T47] syz0: Port: 1 Link DOWN
[   87.922840][ T5871] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.926362][ T5871] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.929056][ T5871] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.936892][ T5871] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.952228][ T8230] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.955054][ T8230] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.134062][ T8251] bridge_slave_0: left allmulticast mode
[   88.140418][ T8251] bridge_slave_0: left promiscuous mode
[   88.145990][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.154913][ T8251] bridge_slave_1: left allmulticast mode
[   88.158414][ T8251] bridge_slave_1: left promiscuous mode
[   88.162535][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.170311][ T8251] bond0: (slave bond_slave_0): Releasing backup interface
[   88.175030][ T8251] bond_slave_0: left allmulticast mode
[   88.179107][ T8251] bond0: (slave bond_slave_1): Releasing backup interface
[   88.183439][ T8251] bond_slave_1: left allmulticast mode
[   88.189774][ T8251] team0: Port device team_slave_0 removed
[   88.198001][ T8251] team0: Port device team_slave_1 removed
[   88.200384][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.202923][ T8251] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.206388][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.208741][ T8251] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.224381][ T8255] team0: Mode changed to "broadcast"
[   88.251921][ T8251] vlan0: entered promiscuous mode
[   88.268809][ T8251] team0: Port device vlan0 added
[   88.274765][ T8251] tipc: Started in network mode
[   88.276327][ T8251] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   88.278857][ T8251] tipc: Enabled bearer <eth:team0>, priority 0
[   88.283701][ T8251] syz.0.1058 (8251) used greatest stack depth: 19408 bytes left
[   88.924848][ T8282] __nla_validate_parse: 8 callbacks suppressed
[   88.924860][ T8282] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1072'.
[   88.929454][ T8282] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   89.123261][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1078'.
[   89.129002][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1078'.
[   89.214704][ T8304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1083'.
[   89.272865][    T9] tipc: Node number set to 11578026
[   89.572782][ T8335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   89.596620][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'.
[   89.599446][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'.
[   89.715911][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'.
[   89.729828][ T8353] batman_adv: batadv0: Adding interface: ipvlan2
[   89.732413][ T8353] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.740071][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.745248][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.748180][ T8353] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   90.421749][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   90.785526][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'.
[   90.788330][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'.
[   90.935510][ T8418] netlink: 'syz.1.1136': attribute type 1 has an invalid length.
[   91.019894][ T8428] vlan2: entered promiscuous mode
[   91.022644][ T8428] bond0: entered promiscuous mode
[   91.024327][ T8428] vlan2: entered allmulticast mode
[   91.106578][ T8436] netlink: 'syz.0.1143': attribute type 2 has an invalid length.
[   91.109127][ T8436] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1143'.
[   92.017786][ T8518] geneve2: entered promiscuous mode
[   92.829151][ T8598] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   92.831351][ T8598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.856442][ T8600] netlink: 'syz.0.1218': attribute type 8 has an invalid length.
[   92.941238][ T3563] tipc: Resetting bearer <eth:team0>
[   92.968781][ T8604] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   93.093159][ T8627] netlink: 'syz.1.1231': attribute type 1 has an invalid length.
[   93.738587][ T8695] netlink: 'syz.1.1262': attribute type 1 has an invalid length.
[   93.828341][ T8705] netlink: 'syz.0.1267': attribute type 4 has an invalid length.
[   93.948674][ T8722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.161080][ T8749] __nla_validate_parse: 16 callbacks suppressed
[   94.161097][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[   94.514862][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'.
[   94.541075][ T8783] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1296'.
[   94.650382][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'.
[   94.676336][ T8799] netlink: 'syz.1.1304': attribute type 26 has an invalid length.
[   95.789570][ T8829] wg1 speed is unknown, defaulting to 1000
[   96.499183][ T8887] netlink: 'syz.1.1344': attribute type 83 has an invalid length.
[   96.713264][ T8904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1351'.
[   96.717141][ T8904] IPVS: length: 148 != 24
[   97.643350][ T8909] infiniband syz1: set down
[   97.644969][ T8909] infiniband syz1: added macvlan1
[   97.666372][ T8909] RDS/IB: syz1: added
[   97.668071][ T8909] smc: adding ib device syz1 with port count 1
[   97.670077][ T8909] smc:    ib device syz1 port 1 has pnetid SYZ1 (user defined)
[   97.736295][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'.
[   97.740506][ T8914] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   98.064313][ T8931] block nbd0: not configured, cannot reconfigure
[   98.190958][ T8949] netlink: 'syz.1.1373': attribute type 1 has an invalid length.
[   98.311691][  T792] IPVS: starting estimator thread 0...
[   98.418371][ T8964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'.
[   98.421670][ T8961] IPVS: using max 61 ests per chain, 146400 per kthread
[   98.461882][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.464418][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.466767][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.469089][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.472345][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.474753][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.477078][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.479401][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.481922][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.484336][ T8967] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   98.617927][ T8973] GUP no longer grows the stack in syz.0.1382 (8973): 200000003000-20000000a000 (200000001000)
[   98.623038][ T8973] CPU: 0 UID: 0 PID: 8973 Comm: syz.0.1382 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   98.623055][ T8973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.623062][ T8973] Call Trace:
[   98.623067][ T8973]  <TASK>
[   98.623073][ T8973]  dump_stack_lvl+0x189/0x250
[   98.623094][ T8973]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.623106][ T8973]  ? __pfx__printk+0x10/0x10
[   98.623120][ T8973]  ? find_vma+0xe7/0x160
[   98.623135][ T8973]  ? __lock_acquire+0xab9/0xd20
[   98.623153][ T8973]  __get_user_pages+0x24d0/0x2ce0
[   98.623166][ T8973]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[   98.623193][ T8973]  ? rcu_is_watching+0x15/0xb0
[   98.623205][ T8973]  __gup_longterm_locked+0xde9/0x1660
[   98.623222][ T8973]  ? sanity_check_pinned_pages+0x123a/0x1300
[   98.623236][ T8973]  gup_fast_fallback+0x1e6a/0x2010
[   98.623262][ T8973]  ? __pfx_gup_fast_fallback+0x10/0x10
[   98.623272][ T8973]  ? stack_trace_save+0x9c/0xe0
[   98.623281][ T8973]  ? __pfx_stack_trace_save+0x10/0x10
[   98.623296][ T8973]  ? pin_user_pages_fast+0x4d/0xb0
[   98.623307][ T8973]  iov_iter_extract_pages+0x35a/0x5e0
[   98.623322][ T8973]  extract_iter_to_sg+0xe46/0x24e0
[   98.623341][ T8973]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   98.623366][ T8973]  ? __asan_memset+0x22/0x50
[   98.623379][ T8973]  af_alg_get_rsgl+0x436/0x810
[   98.623414][ T8973]  aead_recvmsg+0x4cc/0x13f0
[   98.623434][ T8973]  ? rcu_is_watching+0x15/0xb0
[   98.623446][ T8973]  ? __pfx_aead_recvmsg+0x10/0x10
[   98.623459][ T8973]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   98.623471][ T8973]  ? __pfx_aead_recvmsg+0x10/0x10
[   98.623484][ T8973]  sock_recvmsg_nosec+0x186/0x1c0
[   98.623498][ T8973]  ____sys_recvmsg+0x3aa/0x460
[   98.623515][ T8973]  ? __pfx_____sys_recvmsg+0x10/0x10
[   98.623535][ T8973]  ? import_iovec+0x74/0xa0
[   98.623544][ T8973]  ___sys_recvmsg+0x1b5/0x510
[   98.623560][ T8973]  ? __pfx____sys_recvmsg+0x10/0x10
[   98.623588][ T8973]  ? __might_fault+0xb0/0x130
[   98.623604][ T8973]  do_recvmmsg+0x307/0x770
[   98.623621][ T8973]  ? __pfx_do_recvmmsg+0x10/0x10
[   98.623632][ T8973]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[   98.623653][ T8973]  ? __pfx_do_futex+0x10/0x10
[   98.623671][ T8973]  __x64_sys_recvmmsg+0x190/0x240
[   98.623685][ T8973]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   98.623697][ T8973]  ? rcu_is_watching+0x15/0xb0
[   98.623707][ T8973]  ? do_syscall_64+0xbe/0x3b0
[   98.623720][ T8973]  do_syscall_64+0xfa/0x3b0
[   98.623730][ T8973]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.623740][ T8973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.623749][ T8973]  ? exc_page_fault+0x9f/0xf0
[   98.623760][ T8973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.623769][ T8973] RIP: 0033:0x7fd75538ebe9
[   98.623793][ T8973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.623802][ T8973] RSP: 002b:00007fd756175038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   98.623813][ T8973] RAX: ffffffffffffffda RBX: 00007fd7555b5fa0 RCX: 00007fd75538ebe9
[   98.623819][ T8973] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[   98.623825][ T8973] RBP: 00007fd755411e19 R08: 0000000000000000 R09: 0000000000000000
[   98.623855][ T8973] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   98.623862][ T8973] R13: 00007fd7555b6038 R14: 00007fd7555b5fa0 R15: 00007ffd23d3a638
[   98.623876][ T8973]  </TASK>
[   98.774597][ T8977] syzkaller1: entered promiscuous mode
[   98.776411][ T8977] syzkaller1: entered allmulticast mode
[   98.956373][ T8990] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1390'.
[   99.236090][ T9021] syzkaller0: entered promiscuous mode
[   99.237934][ T9021] syzkaller0: entered allmulticast mode
[   99.245716][ T9022] netlink: 'syz.1.1399': attribute type 16 has an invalid length.
[   99.248244][ T9022] netlink: 'syz.1.1399': attribute type 17 has an invalid length.
[   99.280548][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.286990][ T9022] 8021q: adding VLAN 0 to HW filter on device team0
[  100.117793][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.209360][ T9040] bridge0: entered promiscuous mode
[  100.249293][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'.
[  100.261092][ T9048] geneve3: entered allmulticast mode
[  100.276020][ T5716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  100.281826][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.283376][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  100.287130][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  100.294416][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  100.337215][ T9056] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1421'.
[  100.496641][ T9071] netlink: 'syz.2.1428': attribute type 9 has an invalid length.
[  100.499170][ T9071] netlink: 'syz.2.1428': attribute type 6 has an invalid length.
[  100.877666][ T9108] netlink: 'syz.0.1442': attribute type 83 has an invalid length.
[  100.911907][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.969110][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'.
[  101.751089][ T9183] tipc: Failed to remove unknown binding: 66,1,1/11578026:237066797/237066799
[  101.757858][ T9183] tipc: Failed to remove unknown binding: 66,1,1/11578026:237066797/237066799
[  101.764358][ T9183] tipc: Failed to remove unknown binding: 66,1,1/11578026:237066797/237066799
[  101.797480][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'.
[  101.841014][ T9192] netlink: 'syz.0.1482': attribute type 1 has an invalid length.
[  101.851684][ T9192] netlink: 'syz.0.1482': attribute type 4 has an invalid length.
[  101.854101][ T9192] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1482'.
[  101.947138][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  101.949915][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  102.005256][ T9212] tipc: Resetting bearer <eth:team0>
[  102.120623][ T9233] netlink: 'syz.2.1500': attribute type 13 has an invalid length.
[  102.203567][ T5906] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.206695][ T5906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.212476][ T5906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.215227][ T5906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.302740][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1510'.
[  102.453399][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[  102.456130][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'.
[  102.458874][ T9271] netlink: 'syz.0.1520': attribute type 13 has an invalid length.
[  102.823627][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.209043][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'.
[  103.389938][ T9354] validate_nla: 1 callbacks suppressed
[  103.389951][ T9354] netlink: 'syz.0.1558': attribute type 1 has an invalid length.
[  103.395001][ T9354] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1558'.
[  103.630937][ T9370] netlink: 'syz.0.1566': attribute type 10 has an invalid length.
[  103.661299][ T9374] netlink: 'syz.0.1568': attribute type 10 has an invalid length.
[  103.689800][ T9376] net_ratelimit: 49 callbacks suppressed
[  103.689830][ T9376] openvswitch: netlink: Message has 4 unknown bytes.
[  104.111383][ T9423] wg1 speed is unknown, defaulting to 1000
[  104.535181][ T9464] netlink: 'syz.2.1609': attribute type 1 has an invalid length.
[  104.602338][ T9464] bond0: (slave bond_slave_1): Releasing backup interface
[  104.831898][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  104.843601][ T9484] openvswitch: netlink: IP tunnel dst address not specified
[  104.901409][ T9488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.390396][ T9511] __nla_validate_parse: 7 callbacks suppressed
[  105.390407][ T9511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1627'.
[  105.559435][ T9527] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1635'.
[  105.951636][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  106.074230][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'.
[  106.288300][ T9605] pim6reg9: entered allmulticast mode
[  106.613926][ T9628] netlink: 'syz.0.1683': attribute type 2 has an invalid length.
[  106.662369][ T9634] bond0: Unable to set down delay as MII monitoring is disabled
[  106.705953][ T9637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1688'.
[  106.713529][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'.
[  107.060958][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'.
[  107.072652][ T9680] team0: Device is already in use.
[  107.771282][ T9746] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  107.835707][ T9754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1744'.
[  107.886531][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'.
[  107.930879][ T9760] wg1 speed is unknown, defaulting to 1000
[  107.970125][ T9768] netlink: 'syz.2.1747': attribute type 13 has an invalid length.
[  107.980643][ T9768] netlink: 'syz.2.1747': attribute type 17 has an invalid length.
[  108.054968][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.062641][ T9768] 8021q: adding VLAN 0 to HW filter on device team0
[  108.069338][ T9768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.154895][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'.
[  108.157578][ T9777] netlink: 'syz.2.1754': attribute type 5 has an invalid length.
[  108.161203][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  108.268046][ T9787] openvswitch: netlink: Flow key attribute not present in set flow.
[  108.343186][ T3563] wlan1: Trigger new scan to find an IBSS to join
[  109.488675][ T9843] netlink: 'syz.0.1782': attribute type 29 has an invalid length.
[  109.524560][ T9829] netlink: zone id is out of range
[  109.526748][ T9829] netlink: zone id is out of range
[  109.528381][ T9829] netlink: zone id is out of range
[  109.530126][ T9829] netlink: zone id is out of range
[  109.542833][ T9829] netlink: zone id is out of range
[  109.563649][ T9829] netlink: zone id is out of range
[  109.565205][ T9829] netlink: zone id is out of range
[  109.566806][ T9829] netlink: zone id is out of range
[  109.568309][ T9829] netlink: zone id is out of range
[  109.569929][ T9829] netlink: zone id is out of range
[  109.658834][ T9860] block nbd0: not configured, cannot reconfigure
[  109.762416][ T9863] nbd0: detected capacity change from 0 to 127
[  109.766298][ T9869] block nbd0: Receive control failed (result -32)
[  109.766630][ T5848] block nbd0: Send control failed (result -32)
[  109.780264][ T5848] block nbd0: Request send failed, requeueing
[  109.798021][ T5848] block nbd0: Dead connection, failed to find a fallback
[  109.800657][   T99] block nbd0: Dead connection, failed to find a fallback
[  109.803040][   T99] block nbd0: shutting down sockets
[  109.804887][   T99] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.807757][   T99] Buffer I/O error on dev nbd0, logical block 0, async page read
[  109.810374][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.816661][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[  109.822199][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.824857][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read
[  109.827313][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.839684][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read
[  109.845115][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.847865][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[  109.850298][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.859666][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[  109.864548][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.867323][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read
[  109.870215][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.873180][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read
[  109.876019][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.878939][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[  109.881468][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.886098][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[  109.890890][ T5848] ldm_validate_partition_table(): Disk read failed.
[  109.902069][ T5848] Dev nbd0: unable to read RDB block 0
[  109.905158][ T5848]  nbd0: unable to read partition table
[  109.916591][ T5848] ldm_validate_partition_table(): Disk read failed.
[  109.919589][ T5848] Dev nbd0: unable to read RDB block 0
[  109.928420][ T5848]  nbd0: unable to read partition table
[  110.909938][ T9942] wg1 speed is unknown, defaulting to 1000
[  111.347579][ T9972] tipc: Can't bind to reserved service type 2
[  111.381669][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  111.596977][T10000] netlink: 'syz.1.1855': attribute type 12 has an invalid length.
[  111.787298][T10011] __nla_validate_parse: 6 callbacks suppressed
[  111.787309][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'.
[  111.839284][T10009] syzkaller0: entered promiscuous mode
[  111.841129][T10009] syzkaller0: entered allmulticast mode
[  112.807645][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'.
[  112.810577][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'.
[  112.815353][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'.
[  112.818195][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'.
[  112.821024][T10021] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1861'.
[  113.111048][T10063] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1882'.
[  113.547739][T10095] netlink: 'syz.2.1895': attribute type 3 has an invalid length.
[  113.737792][T10108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.758044][T10097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.194429][T10084] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  114.196456][T10084] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  114.208072][T10084] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  114.210070][T10084] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  114.269862][T10097] syz.2.1896 (10097) used greatest stack depth: 18456 bytes left
[  114.357076][T10142] netlink: 'syz.0.1911': attribute type 4 has an invalid length.
[  114.407786][T10146] sctp: [Deprecated]: syz.0.1914 (pid 10146) Use of int in maxseg socket option.
[  114.407786][T10146] Use struct sctp_assoc_value instead
[  114.421680][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.542471][T10166] syzkaller1: entered promiscuous mode
[  114.544217][T10166] syzkaller1: entered allmulticast mode
[  114.717635][T10185] syzkaller0: entered promiscuous mode
[  114.719488][T10185] syzkaller0: entered allmulticast mode
[  115.631707][T10229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.634445][T10229] syzkaller0: entered promiscuous mode
[  115.636145][T10229] syzkaller0: entered allmulticast mode
[  115.647435][T10229] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  115.658746][T10229] tipc: Resetting bearer <eth:syzkaller0>
[  115.660691][T10229] net_ratelimit: 307 callbacks suppressed
[  115.660699][T10229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.666546][T10228] tipc: Resetting bearer <eth:syzkaller0>
[  115.676407][T10228] tipc: Disabling bearer <eth:syzkaller0>
[  115.960768][T10260] Bluetooth: MGMT ver 1.23
[  116.064215][T10271] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  116.168850][T10283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1975'.
[  116.198562][T10290] netlink: 'syz.2.1977': attribute type 11 has an invalid length.
[  116.231383][T10294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1979'.
[  117.587987][T10371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2015'.
[  117.603485][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'.
[  117.677860][T10379] netlink: 'syz.0.2018': attribute type 1 has an invalid length.
[  117.680302][T10379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2018'.
[  117.777726][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  117.787587][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2027'.
[  117.790380][T10395] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2027'.
[  117.794933][T10394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2026'.
[  117.850407][T10400] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  117.969080][T10416] atomic_op ffff88801fee9998 conn xmit_atomic 0000000000000000
[  117.998934][T10419] netlink: 'syz.0.2038': attribute type 12 has an invalid length.
[  118.416892][T10458] netlink: 'syz.0.2057': attribute type 21 has an invalid length.
[  118.530437][T10469] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2060'.
[  118.558054][T10473] dummy0: mtu less than device minimum
[  118.761090][T10484] tipc: Enabled bearer <udp:syz2>, priority 10
[  119.069909][T10522] netlink: 'syz.1.2087': attribute type 1 has an invalid length.
[  119.073931][T10522] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2087'.
[  119.127249][T10526] net veth1_virt_wifi : renamed from virt_wifi0
[  119.387677][T10544] unsupported nla_type 52263
[  119.754178][T10567] wg1 speed is unknown, defaulting to 1000
[  119.863020][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'.
[  120.116408][T10581] sctp: [Deprecated]: syz.0.2112 (pid 10581) Use of int in max_burst socket option.
[  120.116408][T10581] Use struct sctp_assoc_value instead
[  120.216850][T10605] rdma_rxe: rxe_newlink: failed to add lo
[  120.265644][T10605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.277549][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  120.648973][T10638] wg1 speed is unknown, defaulting to 1000
[  121.145756][ T6175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.255917][T10691] openvswitch: netlink: Message has 5 unknown bytes.
[  121.925165][T10730] ip6tnl1: entered promiscuous mode
[  121.926860][T10730] ip6tnl1: entered allmulticast mode
[  121.929218][T10730] team0: Device ip6tnl1 is of different type
[  122.380485][T10755] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  122.676467][T10777] __nla_validate_parse: 5 callbacks suppressed
[  122.676480][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2204'.
[  122.831639][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  123.394526][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2225'.
[  123.832486][T10841] ip6tnl1: entered promiscuous mode
[  123.861690][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  124.035573][T10867] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2243'.
[  124.050133][T10867] gretap0: entered promiscuous mode
[  124.067743][T10867] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2243'.
[  124.077120][T10867] 0{X: renamed from gretap0
[  124.080951][T10867] 0{X: left promiscuous mode
[  124.092310][T10867] 0{X: entered allmulticast mode
[  124.095256][T10867] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  124.183020][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2250'.
[  124.186362][T10883] unsupported nlmsg_type 40
[  124.318301][T10901] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  124.331297][T10901] bond0: (slave team0): Releasing backup interface
[  124.351711][T10901] bridge_slave_0: left allmulticast mode
[  124.354861][T10901] bridge_slave_0: left promiscuous mode
[  124.356688][T10901] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.360597][T10901] bridge_slave_1: left allmulticast mode
[  124.362919][T10901] bridge_slave_1: left promiscuous mode
[  124.364763][T10901] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.371128][T10901] bond0: (slave bond_slave_0): Releasing backup interface
[  124.388935][T10901] team0: Port device team_slave_0 removed
[  124.396574][T10901] team0: Port device team_slave_1 removed
[  124.410107][T10901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.415045][T10901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.419766][T10901] bond1: (slave geneve2): Releasing active interface
[  124.424981][T10901] batman_adv: batadv0: Removing interface: ipvlan2
[  124.471724][T10901] netlink: 'syz.2.2259': attribute type 10 has an invalid length.
[  124.474372][T10901] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  124.477055][T10901] bond0: (slave wlan1): Opening slave failed
[  124.485306][T10901] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.488187][T10901] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.577983][T10922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2268'.
[  124.694849][T10929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.702491][T10929] syzkaller0: entered promiscuous mode
[  124.704327][T10929] syzkaller0: entered allmulticast mode
[  124.708600][T10929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  124.722282][T10929] tipc: Resetting bearer <eth:syzkaller0>
[  124.725956][T10928] tipc: Resetting bearer <eth:syzkaller0>
[  124.733852][T10928] tipc: Disabling bearer <eth:syzkaller0>
[  124.857937][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2279'.
[  124.861413][T10945] netlink: 'syz.1.2279': attribute type 29 has an invalid length.
[  124.911668][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  125.248571][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'.
[  125.251335][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'.
[  125.814504][T11019] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2310'.
[  125.941661][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  125.956517][T11035] syzkaller1: entered promiscuous mode
[  125.958364][T11035] syzkaller1: entered allmulticast mode
[  126.199035][T11061] netlink: 'syz.1.2328': attribute type 1 has an invalid length.
[  126.227124][T11064] syzkaller1: entered promiscuous mode
[  126.229318][T11064] syzkaller1: entered allmulticast mode
[  126.427145][T11078] wg1 speed is unknown, defaulting to 1000
[  126.981796][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  127.177089][T11122] netlink: 'syz.2.2356': attribute type 20 has an invalid length.
[  127.179730][T11122] netlink: 'syz.2.2356': attribute type 20 has an invalid length.
[  127.245597][T11130] netlink: 'syz.1.2360': attribute type 1 has an invalid length.
[  127.283571][T11130] bond2: (slave gretap1): making interface the new active one
[  127.286328][T11130] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  127.769201][T11175] netlink: 'syz.2.2381': attribute type 1 has an invalid length.
[  127.774587][T11175] __nla_validate_parse: 6 callbacks suppressed
[  127.774596][T11175] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2381'.
[  127.944562][T11183] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2385'.
[  128.031685][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  128.089569][T11195] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2391'.
[  128.249687][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'.
[  128.339726][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'.
[  128.346270][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'.
[  128.354877][T11225] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  128.358165][T11225] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  128.543066][T11246] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2415'.
[  128.545856][T11246] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  128.595334][T11251] netlink: 'syz.1.2418': attribute type 3 has an invalid length.
[  128.726792][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'.
[  128.818670][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'.
[  129.061602][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  129.645191][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2465'.
[  129.733874][T11354] netlink: 'syz.1.2468': attribute type 1 has an invalid length.
[  129.736386][T11354] netlink: 'syz.1.2468': attribute type 2 has an invalid length.
[  129.803746][T11360] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  130.070499][T11386] netlink: 'syz.1.2482': attribute type 21 has an invalid length.
[  130.077267][T11386] netlink: 'syz.1.2482': attribute type 22 has an invalid length.
[  130.079679][T11386] netlink: 'syz.1.2482': attribute type 23 has an invalid length.
[  130.084135][T11386] netlink: 'syz.1.2482': attribute type 25 has an invalid length.
[  130.101559][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  130.554277][T11422] bond0 (unregistering): Released all slaves
[  130.749044][T11440] netlink: 'syz.0.2506': attribute type 1 has an invalid length.
[  130.813854][T11448] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  130.904946][T11460] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  130.961124][T11468] netlink: 'syz.0.2520': attribute type 6 has an invalid length.
[  131.141641][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  131.218845][T11488] batman_adv: batadv0: Adding interface: dummy0
[  131.220889][T11488] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.244566][T11488] batman_adv: batadv0: Interface activated: dummy0
[  131.512665][T11504] ieee802154 phy0 wpan0: encryption failed: -22
[  131.569901][T11504] bridge0: left promiscuous mode
[  131.718359][T11504] vlan0: left promiscuous mode
[  131.783170][T11504] geneve2: left promiscuous mode
[  131.796641][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.799432][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.802676][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.805389][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.808088][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.810799][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.818336][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.821091][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.876224][T11519] netlink: 'syz.0.2540': attribute type 5 has an invalid length.
[  132.181660][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  132.354685][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  133.130623][T11613] netlink: 'syz.0.2583': attribute type 4 has an invalid length.
[  133.137674][T11613] __nla_validate_parse: 12 callbacks suppressed
[  133.137686][T11613] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.2583'.
[  133.221568][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  133.564791][T11617] lo: entered allmulticast mode
[  133.566802][T11617] lo: left allmulticast mode
[  134.235235][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'.
[  134.238958][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'.
[  134.247704][T11666] ip6tnl2: entered promiscuous mode
[  134.249371][T11666] ip6tnl2: entered allmulticast mode
[  134.254261][T11668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.261857][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.267813][T11668] syzkaller0: entered promiscuous mode
[  134.269542][T11668] syzkaller0: entered allmulticast mode
[  134.314946][T11668] tipc: Resetting bearer <eth:syzkaller0>
[  134.435007][T11692] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2619'.
[  134.465472][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2621'.
[  134.550360][T11699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.702245][T11718] nbd: nbd1 already in use
[  134.769874][T11728] validate_nla: 2 callbacks suppressed
[  134.769887][T11728] netlink: 'syz.1.2637': attribute type 2 has an invalid length.
[  134.778236][T11728] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2637'.
[  134.878392][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'.
[  134.949495][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'.
[  134.956220][T11747] erspan0: entered promiscuous mode
[  134.960346][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'.
[  135.137677][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2648'.
[  135.301612][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  135.314299][  T792] tipc: Node number set to 3563524745
[  136.127662][T11784] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  136.306336][T11805] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  136.313585][T11805] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  136.341592][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  136.395500][T11820] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.471408][T11828] netlink: 'syz.0.2682': attribute type 12 has an invalid length.
[  137.381571][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  137.592678][T11959] netlink: 'syz.1.2743': attribute type 1 has an invalid length.
[  137.630473][T11959] 8021q: adding VLAN 0 to HW filter on device bond3
[  137.649152][T11959] bond3: (slave ip6gretap1): making interface the new active one
[  137.652412][T11959] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  137.678866][T11959] veth5: entered promiscuous mode
[  137.682969][T11959] bond3: (slave veth5): Enslaving as an active interface with a down link
[  137.696729][T11959] erspan0: entered allmulticast mode
[  137.876182][T11991] netlink: 'syz.0.2759': attribute type 3 has an invalid length.
[  138.008528][T12013] netlink: 'syz.2.2768': attribute type 2 has an invalid length.
[  138.010993][T12013] netlink: 'syz.2.2768': attribute type 1 has an invalid length.
[  138.016507][T12010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.023558][T12010] syzkaller0: entered promiscuous mode
[  138.025283][T12010] syzkaller0: entered allmulticast mode
[  138.048128][T12010] tipc: Resetting bearer <eth:syzkaller0>
[  138.051976][T12008] tipc: Resetting bearer <eth:syzkaller0>
[  138.065042][T12008] tipc: Disabling bearer <eth:syzkaller0>
[  138.227403][T12038] netlink: 'syz.0.2782': attribute type 1 has an invalid length.
[  138.229869][T12038] __nla_validate_parse: 6 callbacks suppressed
[  138.229877][T12038] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2782'.
[  138.398107][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2788'.
[  138.421735][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  138.625159][T12070] nbd1: detected capacity change from 0 to 63
[  138.627330][T12078] block nbd1: NBD_DISCONNECT
[  138.630463][T12078] block nbd1: Disconnected due to user request.
[  138.635723][T12078] block nbd1: shutting down sockets
[  138.642189][    C0] blk_print_req_error: 138 callbacks suppressed
[  138.642198][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.647062][    C0] buffer_io_error: 138 callbacks suppressed
[  138.647069][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.651535][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.654379][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.656861][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.659643][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  138.662136][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.664920][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  138.672032][T10511] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.674796][T10511] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.677199][T10511] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.679945][T10511] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.683324][T10511] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.686107][T10511] Buffer I/O error on dev nbd1, logical block 2, async page read
[  138.688521][T10511] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.691287][T10511] Buffer I/O error on dev nbd1, logical block 3, async page read
[  138.693755][T10511] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.696527][T10511] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.699008][T10511] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.701960][T10511] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.705903][T10511] ldm_validate_partition_table(): Disk read failed.
[  138.708751][T10511] Dev nbd1: unable to read RDB block 0
[  138.714059][T10511]  nbd1: unable to read partition table
[  138.720566][T12094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2806'.
[  138.724439][T10511] ldm_validate_partition_table(): Disk read failed.
[  138.727325][T10511] Dev nbd1: unable to read RDB block 0
[  138.729976][T10511]  nbd1: unable to read partition table
[  138.891298][T12114] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2816'.
[  138.894752][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2816'.
[  139.314906][T12148] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2831'.
[  139.462369][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  139.528076][T12159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2836'.
[  140.250580][T12182] tap0: tun_chr_ioctl cmd 1074025678
[  140.252936][T12182] tap0: group set to 0
[  140.432743][T12206] tun0: tun_chr_ioctl cmd 1074025675
[  140.434566][T12206] tun0: persist enabled
[  140.441137][T12206] tun0: tun_chr_ioctl cmd 1074025675
[  140.448432][T12206] tun0: persist enabled
[  140.466294][T12211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2856'.
[  140.486421][T12213] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  140.501620][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  140.567304][T12223] netlink: 'syz.1.2862': attribute type 2 has an invalid length.
[  140.572238][T12223] netlink: 'syz.1.2862': attribute type 1 has an invalid length.
[  140.574644][T12223] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2862'.
[  140.609311][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2866'.
[  140.619788][T12231] bridge_slave_0: left allmulticast mode
[  140.622025][T12231] bridge_slave_0: left promiscuous mode
[  140.624214][T12231] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.631001][T12231] bridge_slave_1: left allmulticast mode
[  140.636465][T12231] bridge_slave_1: left promiscuous mode
[  140.638546][T12231] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.652204][T12231] bond0: (slave bond_slave_0): Releasing backup interface
[  140.656035][T12231] bond0: (slave bond_slave_1): Releasing backup interface
[  140.661212][T12231] team0: Port device team_slave_0 removed
[  140.664582][T12231] team0: Port device team_slave_1 removed
[  140.666639][T12231] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.670561][T12231] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.676961][T12231] bond1: (slave geneve2): Releasing active interface
[  140.684208][T12231] bond2: (slave gretap1): Releasing active interface
[  140.691073][T12231] bond3: (slave ip6gretap1): Releasing active interface
[  140.693959][T12231] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 5e:88:f8:d6:a5:b5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  140.707171][T12231] bond3: (slave veth5): Releasing active interface
[  140.713001][T12238] team0: Mode changed to "broadcast"
[  140.792445][T12250] syz.2.2875 uses old SIOCAX25GETINFO
[  140.849997][T12256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.854104][T12256] syzkaller0: entered promiscuous mode
[  140.855814][T12256] syzkaller0: entered allmulticast mode
[  140.870776][T12256] tipc: Resetting bearer <eth:syzkaller0>
[  140.879133][T12255] tipc: Resetting bearer <eth:syzkaller0>
[  140.895137][T12255] tipc: Disabling bearer <eth:syzkaller0>
[  141.541629][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  142.040929][T12305] netlink: 'syz.0.2902': attribute type 2 has an invalid length.
[  142.581916][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  143.377354][T12435] __nla_validate_parse: 5 callbacks suppressed
[  143.377365][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  143.390598][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  143.483146][T12443] syzkaller1: entered promiscuous mode
[  143.484855][T12443] syzkaller1: entered allmulticast mode
[  143.621687][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  143.639040][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'.
[  143.722666][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'.
[  143.850853][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'.
[  143.954804][T12494] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.981920][T12494] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  143.989133][T12494] bond4: (slave macvlan0): Enslaving as a backup interface with a down link
[  144.010656][T12494] bond4: (slave macvlan0): Releasing backup interface
[  144.028674][T12502] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2991'.
[  144.086325][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2994'.
[  144.225032][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3002'.
[  144.276498][T12535] delete_channel: no stack
[  144.391083][T12548] delete_channel: no stack
[  144.440992][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'.
[  144.489707][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3015'.
[  144.556829][T12559] !: renamed from dummy0
[  144.634743][T12562] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  144.657846][T12562] wg1 speed is unknown, defaulting to 1000
[  144.671614][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.701565][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.774055][T12661] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.807515][T12661] bond0: (slave rose0): Enslaving as an active interface with an up link
[  146.696116][T12684] netlink: 'syz.2.3044': attribute type 1 has an invalid length.
[  146.741575][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  146.901973][T12714] syzkaller1: entered promiscuous mode
[  146.903939][T12714] syzkaller1: entered allmulticast mode
[  147.005290][T12724] netlink: 'syz.0.3064': attribute type 2 has an invalid length.
[  147.007855][T12724] netlink: 'syz.0.3064': attribute type 1 has an invalid length.
[  147.120001][T12741] netlink: 'syz.1.3071': attribute type 4 has an invalid length.
[  147.186164][T12751] netlink: 'syz.0.3075': attribute type 1 has an invalid length.
[  147.695563][T12792] openvswitch: netlink: IPv4 tun info is not correct
[  147.781626][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  148.144559][T12833] syzkaller1: entered promiscuous mode
[  148.146291][T12833] syzkaller1: entered allmulticast mode
[  148.367228][T12858] tun0: tun_chr_ioctl cmd 1074025675
[  148.368852][T12858] tun0: persist enabled
[  148.373159][T12858] tun0: tun_chr_ioctl cmd 1074025675
[  148.374828][T12858] tun0: persist disabled
[  148.471781][T12866] syzkaller0: entered promiscuous mode
[  148.473565][T12866] syzkaller0: entered allmulticast mode
[  148.530405][T12874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.824286][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  149.353605][T12872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.609915][T12909] gretap0: entered promiscuous mode
[  149.612286][T12909] vlan4: entered promiscuous mode
[  149.659033][T12914] delete_channel: no stack
[  149.861605][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  149.894303][T12947] __nla_validate_parse: 4 callbacks suppressed
[  149.894313][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3173'.
[  149.955053][ T6175] IPVS: starting estimator thread 0...
[  149.988501][T12957] wg1 speed is unknown, defaulting to 1000
[  150.029233][T12969] syz_tun: entered promiscuous mode
[  150.031210][T12969] vlan4: entered promiscuous mode
[  150.052107][T12958] IPVS: using max 61 ests per chain, 146400 per kthread
[  150.077127][T12971] team0: Mode changed to "activebackup"
[  150.089936][T12966] wg1 speed is unknown, defaulting to 1000
[  150.097362][T12971] tipc: Enabled bearer <eth:team0>, priority 0
[  150.114681][T12973] netlink: 'syz.0.3182': attribute type 9 has an invalid length.
[  150.116970][T12973] netlink: 'syz.0.3182': attribute type 6 has an invalid length.
[  150.265576][T12983] netlink: 'syz.2.3189': attribute type 1 has an invalid length.
[  150.268172][T12983] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3189'.
[  150.317914][T12986] netlink: 'syz.2.3191': attribute type 4 has an invalid length.
[  150.764142][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'.
[  150.901631][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  151.101763][    T9] tipc: Node number set to 1984058507
[  151.147219][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3226'.
[  151.189411][T13063] wg1 speed is unknown, defaulting to 1000
[  151.635598][T13105] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.640267][T13105] bond0: (slave bond2): Enslaving as an active interface with an up link
[  151.691930][T13110] !: renamed from dummy0 (while UP)
[  151.725258][T13110] wg1 speed is unknown, defaulting to 1000
[  151.873822][T13117] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  151.883379][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'.
[  151.886222][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3250'.
[  151.941567][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  152.039865][T13123] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  152.043067][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3252'.
[  152.045870][T13123] tipc: Disabling bearer <udp:syz2>
[  152.190359][T13134] syzkaller1: entered promiscuous mode
[  152.192837][T13134] syzkaller1: entered allmulticast mode
[  153.295588][T13214] macvtap0: entered promiscuous mode
[  153.297276][T13214] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  153.307753][T13214] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  153.571348][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'.
[  153.677588][T13249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3309'.
[  153.775097][T13249] smc: net device bond0 applied user defined pnetid SYZ2
[  153.792094][T13249] smc: net device bond0 erased user defined pnetid SYZ2
[  153.798243][T13249] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1
[  153.843524][T13269] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3317'.
[  153.855303][T13271] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  153.858990][T13271] bond0: (slave lo): Error: Device can not be enslaved while up
[  153.946396][T13283] netlink: 'syz.1.3324': attribute type 1 has an invalid length.
[  154.050593][T13294] bridge0: port 1(ipvlan0) entered blocking state
[  154.055485][T13294] bridge0: port 1(ipvlan0) entered disabled state
[  154.058018][T13294] ipvlan0: entered allmulticast mode
[  154.059720][T13294] bridge0: entered allmulticast mode
[  154.062968][T13294] ipvlan0: left allmulticast mode
[  154.064670][T13294] bridge0: left allmulticast mode
[  154.263740][T13306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.267220][T13306] syzkaller0: entered promiscuous mode
[  154.268938][T13306] syzkaller0: entered allmulticast mode
[  154.280427][T13306] tipc: Resetting bearer <eth:syzkaller0>
[  154.283979][T13305] tipc: Resetting bearer <eth:syzkaller0>
[  154.293394][T13305] tipc: Disabling bearer <eth:syzkaller0>
[  154.681014][T13334] xt_socket: unknown flags 0xd0
[  154.894687][T13360] netlink: 'syz.0.3358': attribute type 13 has an invalid length.
[  155.126287][T13387] __nla_validate_parse: 2 callbacks suppressed
[  155.126299][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'.
[  155.133225][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'.
[  155.146916][T13389] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3373'.
[  155.176799][T13387] team0: Port device vlan0 removed
[  155.207956][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030f0e000: rx timeout, send abort
[  155.418371][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3380'.
[  155.711072][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030f0e000: abort rx timeout. Force session deactivation
[  156.021009][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'.
[  156.109174][T13440] netlink: 'syz.0.3395': attribute type 10 has an invalid length.
[  156.116747][T13440] netlink: 'syz.0.3395': attribute type 10 has an invalid length.
[  156.434688][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3409'.
[  156.804726][T13505] netlink: 'syz.1.3420': attribute type 1 has an invalid length.
[  157.040669][T13518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.087523][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3430'.
[  157.145625][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'.
[  157.177761][ T1029] smc: removing ib device syz1
[  157.698951][T13570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.451206][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'.
[  159.886368][T13721] tipc: Resetting bearer <eth:syzkaller0>
[  159.888364][T13721] tipc: Resetting bearer <eth:syzkaller0>
[  160.046779][T13728] wg1 speed is unknown, defaulting to 1000
[  160.303942][T13747] netlink: 'syz.1.3527': attribute type 1 has an invalid length.
[  160.306418][T13747] netlink: 'syz.1.3527': attribute type 1 has an invalid length.
[  161.034396][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'.
[  161.869002][T13847] lo: entered allmulticast mode
[  161.870962][T13847] lo: left allmulticast mode
[  161.966306][T13855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  162.176147][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'.
[  162.178910][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'.
[  162.235642][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3595'.
[  162.375075][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'.
[  162.449936][T13921] wg1 speed is unknown, defaulting to 1000
[  162.510279][T13918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.532256][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3615'.
[  162.565977][T13937] netlink: 'syz.2.3618': attribute type 2 has an invalid length.
[  163.376558][T13951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3623'.
[  163.379422][T13951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3623'.
[  163.750002][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3630'.
[  164.387381][T13995] syz_tun: entered allmulticast mode
[  164.395122][T13995] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  164.577434][T14008] netlink: 'syz.1.3649': attribute type 10 has an invalid length.
[  164.600736][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'.
[  166.333076][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802da23000: rx timeout, send abort
[  166.336880][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802da21c00: rx timeout, send abort
[  166.339617][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802da23000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  166.344761][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802da21c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  166.708277][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3687'.
[  168.043575][T14134] netlink: 'syz.0.3706': attribute type 5 has an invalid length.
[  168.281960][T14168] netlink: 'syz.2.3722': attribute type 30 has an invalid length.
[  168.610784][T14205] wg1 speed is unknown, defaulting to 1000
[  168.660913][T14215] netlink: 'syz.1.3737': attribute type 10 has an invalid length.
[  168.671862][T14215] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  168.944872][T14255] !: renamed from dummy0 (while UP)
[  169.048418][T14266] tipc: Resetting bearer <eth:syzkaller0>
[  169.175696][T14277] batadv_slave_0: entered promiscuous mode
[  169.728698][T14333] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  169.776901][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'.
[  169.831631][T14346] batadv_slave_1: entered promiscuous mode
[  169.837176][T14345] batadv_slave_1: left promiscuous mode
[  169.984669][T14370] sctp: [Deprecated]: syz.1.3806 (pid 14370) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.984669][T14370] Use struct sctp_sack_info instead
[  170.126316][T14386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3812'.
[  170.129821][T14386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3812'.
[  170.189359][T14400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3817'.
[  170.314671][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3825'.
[  170.317344][T14412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3825'.
[  170.344261][T14412] gretap1: entered promiscuous mode
[  170.947826][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'.
[  170.952838][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  170.954744][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  170.956840][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.959235][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.961676][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.964094][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.966481][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.968893][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.971365][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.974036][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.976485][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.978923][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.981413][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.983726][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.986151][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.988679][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.991116][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.993586][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  170.996066][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  170.998375][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.000786][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  171.003285][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.005698][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  171.008045][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.010433][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  171.012987][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.015420][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  171.017759][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.020185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  171.022660][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.025087][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  171.027471][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.029911][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  171.032372][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  171.356959][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3867'.
[  171.657134][T14523] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  171.897909][T14545] bridge2: entered promiscuous mode
[  171.936462][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3890'.
[  172.057484][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3897'.
[  172.206571][T14588] syzkaller0: Caught tx_queue_len zero misconfig
[  172.860249][T14627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3925'.
[  173.318718][T14673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3946'.
[  173.483200][T14680] netlink: 'syz.1.3948': attribute type 1 has an invalid length.
[  173.574701][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3954'.
[  173.951031][T14706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.400316][T14720] wg1 speed is unknown, defaulting to 1000
[  175.065835][T14749] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.371374][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'.
[  176.606255][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'.
[  177.137411][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'.
[  177.185900][T14872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4032'.
[  177.315648][T14885] wg1 speed is unknown, defaulting to 1000
[  177.947528][T14928] netlink: 'syz.1.4057': attribute type 10 has an invalid length.
[  177.951172][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.957886][T14928] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  177.961846][T14928] netlink: 'syz.1.4057': attribute type 10 has an invalid length.
[  177.964312][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4057'.
[  177.967072][T14928] batadv0: entered promiscuous mode
[  177.968801][T14928] batadv0: entered allmulticast mode
[  177.971196][T14928] bond0: (slave batadv0): Releasing backup interface
[  177.977112][T14928] bridge0: port 1(batadv0) entered blocking state
[  177.979357][T14928] bridge0: port 1(batadv0) entered disabled state
[  178.029385][T14931] wg1 speed is unknown, defaulting to 1000
[  178.070035][T14936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4058'.
[  178.175817][T14951] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4066'.
[  178.226911][T14959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4069'.
[  178.229780][T14959] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4069'.
[  178.254152][ T5716] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  178.257412][ T5716] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  178.454327][T14983] netlink: 'syz.1.4081': attribute type 142 has an invalid length.
[  178.544463][T14987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  178.547208][T14987] IPv6: NLM_F_CREATE should be set when creating new route
[  178.686100][T15003] erspan0: entered promiscuous mode
[  179.114063][T15047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4110'.
[  179.379835][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4123'.
[  179.485352][T15085] openvswitch: netlink: Missing valid actions attribute.
[  179.487590][T15085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.627788][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'.
[  180.398309][T15148] netem: unknown loss type 13
[  180.400134][T15148] netem: change failed
[  180.710619][T15182] 8021q: adding VLAN 0 to HW filter on device bond5
[  180.731473][T15182] team0: Port device bond5 added
[  180.747286][ T1092] tipc: Resetting bearer <eth:team0>
[  182.140711][T15214] netlink: 'syz.1.4181': attribute type 10 has an invalid length.
[  182.384981][T15266] tls_set_device_offload: netdev not found
[  182.513172][T15281] __nla_validate_parse: 6 callbacks suppressed
[  182.513191][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4209'.
[  182.589671][T15293] netlink: 'syz.0.4215': attribute type 18 has an invalid length.
[  182.662341][T15300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4218'.
[  182.667320][T15303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.711078][T15306] syzkaller1: entered promiscuous mode
[  182.713533][T15306] syzkaller1: entered allmulticast mode
[  182.804008][T15315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.807810][T15315] syzkaller0: entered promiscuous mode
[  182.809517][T15315] syzkaller0: entered allmulticast mode
[  182.827047][T15319] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  182.837107][T15315] tipc: Resetting bearer <eth:syzkaller0>
[  182.840048][T15314] tipc: Resetting bearer <eth:syzkaller0>
[  182.851346][T15314] tipc: Disabling bearer <eth:syzkaller0>
[  182.867144][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4229'.
[  183.007451][T15328] batadv0: entered promiscuous mode
[  183.014523][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.226760][T15356] IPVS: length: 148 != 24
[  183.263813][T15358] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  183.371669][T15362] wg1 speed is unknown, defaulting to 1000
[  183.757132][T15387] netlink: 'syz.2.4254': attribute type 39 has an invalid length.
[  184.221371][T15422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4270'.
[  184.227121][T15422] netlink: 560 bytes leftover after parsing attributes in process `syz.2.4270'.
[  184.309141][T15432] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4275'.
[  184.586569][T15454] netlink: 'syz.1.4286': attribute type 3 has an invalid length.
[  184.676566][T15460] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  184.744408][T15466] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4292'.
[  184.981361][T15496] syzkaller1: entered promiscuous mode
[  184.986956][T15496] syzkaller1: entered allmulticast mode
[  185.065826][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4309'.
[  185.069826][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4309'.
[  185.145305][T15512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.183206][T15516] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4315'.
[  185.183463][T15515] vti0: entered promiscuous mode
[  185.187477][T15515] vti0: entered allmulticast mode
[  185.815642][T15589] netlink: 'syz.1.4350': attribute type 4 has an invalid length.
[  185.833767][T15589] netlink: 'syz.1.4350': attribute type 4 has an invalid length.
[  186.009553][T15614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.065374][T15622] gretap2: entered promiscuous mode
[  186.067055][T15622] gretap2: entered allmulticast mode
[  186.258167][T15640] netlink: 'syz.2.4373': attribute type 17 has an invalid length.
[  187.989768][T15738] __nla_validate_parse: 2 callbacks suppressed
[  187.989781][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'.
[  188.085930][T15742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4414'.
[  189.066055][T15786] nftables ruleset with unbound chain
[  189.288226][T15808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4442'.
[  189.618436][T15845] netlink: 'syz.0.4459': attribute type 6 has an invalid length.
[  190.177385][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'.
[  190.374734][T15923] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4494'.
[  190.462125][T15936] syzkaller1: entered promiscuous mode
[  190.465366][T15936] syzkaller1: entered allmulticast mode
[  190.559062][T15949] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4508'.
[  190.625500][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4511'.
[  191.840365][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4545'.
[  192.045529][T16058] netlink: 'syz.0.4559': attribute type 1 has an invalid length.
[  192.048172][T16058] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4559'.
[  192.056104][T16059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4558'.
[  192.613666][T16137] ==================================================================
[  192.616107][T16137] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x44cd/0x5400
[  192.618530][T16137] Read of size 1 at addr ffff8881255d34b0 by task syz.1.4584/16137
[  192.621752][T16137] 
[  192.622495][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.1.4584 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  192.622508][T16137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.622515][T16137] Call Trace:
[  192.622521][T16137]  <TASK>
[  192.622525][T16137]  dump_stack_lvl+0x189/0x250
[  192.622541][T16137]  ? __kasan_check_byte+0x12/0x40
[  192.622557][T16137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.622567][T16137]  ? lock_release+0x4b/0x3e0
[  192.622581][T16137]  ? __virt_addr_valid+0x4a5/0x5c0
[  192.622593][T16137]  print_report+0xca/0x240
[  192.622602][T16137]  ? xfrm_state_find+0x44cd/0x5400
[  192.622613][T16137]  kasan_report+0x118/0x150
[  192.622625][T16137]  ? xfrm_state_find+0x44cd/0x5400
[  192.622637][T16137]  xfrm_state_find+0x44cd/0x5400
[  192.622650][T16137]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.622663][T16137]  ? xfrm_state_find+0x1da/0x5400
[  192.622674][T16137]  ? __pfx_xfrm_state_find+0x10/0x10
[  192.622684][T16137]  ? ip6_pol_route+0x547/0x1180
[  192.622697][T16137]  ? fib6_rule_saddr+0xc0/0x420
[  192.622706][T16137]  ? __pfx_ip6_pol_route+0x10/0x10
[  192.622720][T16137]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  192.622736][T16137]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  192.622745][T16137]  ? __lock_acquire+0xab9/0xd20
[  192.622760][T16137]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  192.622770][T16137]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  192.622779][T16137]  ? xfrm_expand_policies+0x41f/0x6a0
[  192.622788][T16137]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  192.622797][T16137]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  192.622807][T16137]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  192.622818][T16137]  xfrm_lookup_route+0x3c/0x1c0
[  192.622850][T16137]  ? ip6_datagram_dst_update+0x511/0xcb0
[  192.622861][T16137]  ip6_datagram_dst_update+0x75c/0xcb0
[  192.622873][T16137]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  192.622883][T16137]  ? futex_private_hash_put+0x4b/0x280
[  192.622896][T16137]  ? __lock_acquire+0xab9/0xd20
[  192.622907][T16137]  ? __ip6_datagram_connect+0xb92/0x1150
[  192.622917][T16137]  __ip6_datagram_connect+0xbd1/0x1150
[  192.622928][T16137]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  192.622937][T16137]  ? __local_bh_enable_ip+0x12d/0x1c0
[  192.622946][T16137]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  192.622956][T16137]  ip6_datagram_connect_v6_only+0x63/0xa0
[  192.622966][T16137]  __sys_connect+0x316/0x440
[  192.622978][T16137]  ? __pfx___sys_connect+0x10/0x10
[  192.622992][T16137]  __x64_sys_connect+0x7a/0x90
[  192.623002][T16137]  do_syscall_64+0xfa/0x3b0
[  192.623013][T16137]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.623022][T16137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.623031][T16137]  ? exc_page_fault+0x9f/0xf0
[  192.623040][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.623049][T16137] RIP: 0033:0x7fdfd958ebe9
[  192.623058][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.623068][T16137] RSP: 002b:00007fdfda46e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  192.623078][T16137] RAX: ffffffffffffffda RBX: 00007fdfd97b5fa0 RCX: 00007fdfd958ebe9
[  192.623084][T16137] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003
[  192.623089][T16137] RBP: 00007fdfd9611e19 R08: 0000000000000000 R09: 0000000000000000
[  192.623094][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.623099][T16137] R13: 00007fdfd97b6038 R14: 00007fdfd97b5fa0 R15: 00007fff7097e1e8
[  192.623109][T16137]  </TASK>
[  192.623112][T16137] 
[  192.725392][T16137] Allocated by task 12433:
[  192.726704][T16137]  kasan_save_track+0x3e/0x80
[  192.728122][T16137]  __kasan_slab_alloc+0x6c/0x80
[  192.729606][T16137]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  192.731263][T16137]  xfrm_state_alloc+0x24/0x2f0
[  192.732693][T16137]  __find_acq_core+0x8a7/0x1c00
[  192.734189][T16137]  xfrm_find_acq+0x78/0xa0
[  192.735530][T16137]  xfrm_alloc_userspi+0x6b3/0xc90
[  192.737063][T16137]  xfrm_user_rcv_msg+0x7a3/0xab0
[  192.738535][T16137]  netlink_rcv_skb+0x208/0x470
[  192.739965][T16137]  xfrm_netlink_rcv+0x79/0x90
[  192.741343][T16137]  netlink_unicast+0x82f/0x9e0
[  192.742753][T16137]  netlink_sendmsg+0x805/0xb30
[  192.744300][T16137]  __sock_sendmsg+0x21c/0x270
[  192.745758][T16137]  ____sys_sendmsg+0x505/0x830
[  192.747198][T16137]  ___sys_sendmsg+0x21f/0x2a0
[  192.748595][T16137]  __x64_sys_sendmsg+0x19b/0x260
[  192.750115][T16137]  do_syscall_64+0xfa/0x3b0
[  192.751524][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.753358][T16137] 
[  192.754116][T16137] Freed by task 24:
[  192.755314][T16137]  kasan_save_track+0x3e/0x80
[  192.756769][T16137]  kasan_save_free_info+0x46/0x50
[  192.758347][T16137]  __kasan_slab_free+0x5b/0x80
[  192.759829][T16137]  kmem_cache_free+0x18f/0x400
[  192.761320][T16137]  xfrm_state_gc_task+0x52d/0x6b0
[  192.762880][T16137]  process_scheduled_works+0xae1/0x17b0
[  192.764561][T16137]  worker_thread+0x8a0/0xda0
[  192.766005][T16137]  kthread+0x711/0x8a0
[  192.767218][T16137]  ret_from_fork+0x3fc/0x770
[  192.768592][T16137]  ret_from_fork_asm+0x1a/0x30
[  192.770048][T16137] 
[  192.770782][T16137] The buggy address belongs to the object at ffff8881255d3180
[  192.770782][T16137]  which belongs to the cache xfrm_state of size 928
[  192.774788][T16137] The buggy address is located 816 bytes inside of
[  192.774788][T16137]  freed 928-byte region [ffff8881255d3180, ffff8881255d3520)
[  192.778712][T16137] 
[  192.779454][T16137] The buggy address belongs to the physical page:
[  192.781369][T16137] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881255d1680 pfn:0x1255d0
[  192.784297][T16137] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  192.786746][T16137] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  192.788945][T16137] page_type: f5(slab)
[  192.790126][T16137] raw: 057ff00000000040 ffff88801b302780 dead000000000122 0000000000000000
[  192.792624][T16137] raw: ffff8881255d1680 00000000800e0009 00000000f5000000 0000000000000000
[  192.795114][T16137] head: 057ff00000000040 ffff88801b302780 dead000000000122 0000000000000000
[  192.797639][T16137] head: ffff8881255d1680 00000000800e0009 00000000f5000000 0000000000000000
[  192.800123][T16137] head: 057ff00000000002 ffffea0004957401 00000000ffffffff 00000000ffffffff
[  192.802682][T16137] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  192.805169][T16137] page dumped because: kasan: bad access detected
[  192.807071][T16137] page_owner tracks the page as allocated
[  192.808710][T16137] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6138, tgid 6135 (syz.2.108), ts 59644275635, free_ts 59568410544
[  192.814114][T16137]  post_alloc_hook+0x240/0x2a0
[  192.815553][T16137]  get_page_from_freelist+0x21e4/0x22c0
[  192.817200][T16137]  __alloc_frozen_pages_noprof+0x181/0x370
[  192.819017][T16137]  alloc_pages_mpol+0x232/0x4a0
[  192.820510][T16137]  allocate_slab+0x8a/0x370
[  192.821870][T16137]  ___slab_alloc+0xbeb/0x1410
[  192.823270][T16137]  kmem_cache_alloc_noprof+0x283/0x3c0
[  192.824900][T16137]  xfrm_state_alloc+0x24/0x2f0
[  192.826336][T16137]  xfrm_add_sa+0x17d1/0x4070
[  192.827712][T16137]  xfrm_user_rcv_msg+0x7a3/0xab0
[  192.829207][T16137]  netlink_rcv_skb+0x208/0x470
[  192.830678][T16137]  xfrm_netlink_rcv+0x79/0x90
[  192.832103][T16137]  netlink_unicast+0x82f/0x9e0
[  192.833545][T16137]  netlink_sendmsg+0x805/0xb30
[  192.835027][T16137]  __sock_sendmsg+0x21c/0x270
[  192.836457][T16137]  ____sys_sendmsg+0x505/0x830
[  192.837975][T16137] page last free pid 5851 tgid 5851 stack trace:
[  192.839936][T16137]  __free_frozen_pages+0xbc4/0xd30
[  192.841532][T16137]  __slab_free+0x303/0x3c0
[  192.842946][T16137]  qlist_free_all+0x97/0x140
[  192.844391][T16137]  kasan_quarantine_reduce+0x148/0x160
[  192.846078][T16137]  __kasan_slab_alloc+0x22/0x80
[  192.847596][T16137]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  192.849233][T16137]  vm_area_dup+0x2b/0x680
[  192.850515][T16137]  dup_mmap+0x90c/0x1ac0
[  192.851766][T16137]  copy_mm+0x13c/0x4b0
[  192.852998][T16137]  copy_process+0x1706/0x3c00
[  192.854390][T16137]  kernel_clone+0x21e/0x840
[  192.855736][T16137]  __x64_sys_clone+0x18b/0x1e0
[  192.857169][T16137]  do_syscall_64+0xfa/0x3b0
[  192.858521][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.860286][T16137] 
[  192.861011][T16137] Memory state around the buggy address:
[  192.862654][T16137]  ffff8881255d3380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  192.865013][T16137]  ffff8881255d3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  192.867361][T16137] >ffff8881255d3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  192.869731][T16137]                                      ^
[  192.871408][T16137]  ffff8881255d3500: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  192.873746][T16137]  ffff8881255d3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  192.876084][T16137] ==================================================================
[  192.878600][T16137] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  192.880717][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.1.4584 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  192.884306][T16137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.887261][T16137] Call Trace:
[  192.888276][T16137]  <TASK>
[  192.889202][T16137]  dump_stack_lvl+0x99/0x250
[  192.890602][T16137]  ? __asan_memcpy+0x40/0x70
[  192.891977][T16137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.893514][T16137]  ? __pfx__printk+0x10/0x10
[  192.894928][T16137]  vpanic+0x281/0x750
[  192.896133][T16137]  ? __pfx_vpanic+0x10/0x10
[  192.897657][T16137]  ? irqentry_exit+0x74/0x90
[  192.899091][T16137]  panic+0xb9/0xc0
[  192.900234][T16137]  ? __pfx_panic+0x10/0x10
[  192.901559][T16137]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  192.903279][T16137]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.905073][T16137]  ? xfrm_state_find+0x44cd/0x5400
[  192.906576][T16137]  check_panic_on_warn+0x89/0xb0
[  192.908055][T16137]  ? xfrm_state_find+0x44cd/0x5400
[  192.909650][T16137]  end_report+0x78/0x160
[  192.910937][T16137]  kasan_report+0x129/0x150
[  192.912313][T16137]  ? xfrm_state_find+0x44cd/0x5400
[  192.913849][T16137]  xfrm_state_find+0x44cd/0x5400
[  192.915322][T16137]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.916864][T16137]  ? xfrm_state_find+0x1da/0x5400
[  192.918355][T16137]  ? __pfx_xfrm_state_find+0x10/0x10
[  192.919945][T16137]  ? ip6_pol_route+0x547/0x1180
[  192.921394][T16137]  ? fib6_rule_saddr+0xc0/0x420
[  192.922899][T16137]  ? __pfx_ip6_pol_route+0x10/0x10
[  192.924478][T16137]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  192.926378][T16137]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  192.928391][T16137]  ? __lock_acquire+0xab9/0xd20
[  192.929867][T16137]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  192.931444][T16137]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  192.933094][T16137]  ? xfrm_expand_policies+0x41f/0x6a0
[  192.934705][T16137]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  192.936305][T16137]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  192.938013][T16137]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  192.939727][T16137]  xfrm_lookup_route+0x3c/0x1c0
[  192.941165][T16137]  ? ip6_datagram_dst_update+0x511/0xcb0
[  192.942834][T16137]  ip6_datagram_dst_update+0x75c/0xcb0
[  192.944443][T16137]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  192.946209][T16137]  ? futex_private_hash_put+0x4b/0x280
[  192.947814][T16137]  ? __lock_acquire+0xab9/0xd20
[  192.949247][T16137]  ? __ip6_datagram_connect+0xb92/0x1150
[  192.950886][T16137]  __ip6_datagram_connect+0xbd1/0x1150
[  192.952496][T16137]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  192.954228][T16137]  ? __local_bh_enable_ip+0x12d/0x1c0
[  192.955777][T16137]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  192.957505][T16137]  ip6_datagram_connect_v6_only+0x63/0xa0
[  192.959192][T16137]  __sys_connect+0x316/0x440
[  192.960576][T16137]  ? __pfx___sys_connect+0x10/0x10
[  192.962122][T16137]  __x64_sys_connect+0x7a/0x90
[  192.963527][T16137]  do_syscall_64+0xfa/0x3b0
[  192.964892][T16137]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.966446][T16137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.968226][T16137]  ? exc_page_fault+0x9f/0xf0
[  192.969603][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.971360][T16137] RIP: 0033:0x7fdfd958ebe9
[  192.972685][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.978326][T16137] RSP: 002b:00007fdfda46e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  192.980771][T16137] RAX: ffffffffffffffda RBX: 00007fdfd97b5fa0 RCX: 00007fdfd958ebe9
[  192.983091][T16137] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003
[  192.985418][T16137] RBP: 00007fdfd9611e19 R08: 0000000000000000 R09: 0000000000000000
[  192.987721][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.990100][T16137] R13: 00007fdfd97b6038 R14: 00007fdfd97b5fa0 R15: 00007fff7097e1e8
[  192.992467][T16137]  </TASK>
[  192.994010][T16137] Kernel Offset: disabled
[  192.995300][T16137] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:29:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000017db RDI=00000000000017dc RBP=00000000000003f8 RSP=ffffc90006556cb0
R8 =ffff888107ef0237 R9 =1ffff11020fde046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4901 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdfda46e6c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff16d92f8e5 CR3=00000000320b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdfd9787498 00007fdfd9787470 XMM03=00007fdfd97874a8 00007fdfd97874a0
XMM04=00007fdfda2ed100 00007fdfd9787460 XMM05=00007fdfd9787478 00007fdfd97874c0
XMM06=00007fdfd97874b8 00007fdfd97874b0 XMM07=00007fdfd97874a8 00007fdfd97874a0
XMM08=0000000000000000 00007fdfd9612ee7 XMM09=0000000000000000 00007fdfd9612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000202 RCX=4df209a99d892500 RDX=0000000000000000
RSI=ffffffff8d9c8440 RDI=ffffffff8be32680 RBP=ffff8881014e9480 RSP=ffffc90006587500
R8 =ffff8881014e947f R9 =1ffff1102029d28f R10=dffffc0000000000 R11=ffffed102029d290
R12=0000000000000000 R13=ffffffff822e4207 R14=ffffffff8e139ee0 R15=ffff888030d63980
RIP=ffffffff8b78d156 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555593496500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32322ff8 CR3=000000012b402000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f19f4b87498 00007f19f4b87470 XMM03=00007f19f4b874a8 00007f19f4b874a0
XMM04=00007f19f56ed100 00007f19f4b87460 XMM05=00007f19f4b87478 00007f19f4b874c0
XMM06=00007f19f4b874b8 00007f19f4b874b0 XMM07=00007f19f4b874a8 00007f19f4b874a0
XMM08=0000000000000000 00007f19f4a12ee7 XMM09=0000000000000000 00007f19f4a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
