last executing test programs:

1.339376409s ago: executing program 2 (id=2748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, r1, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0xff, 0x2a, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55dde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

1.325699174s ago: executing program 2 (id=2749):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc)
socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0xc0) (async)
r1 = socket$kcm(0x21, 0x2, 0x2) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x1}, @sadb_x_sec_ctx={0x1f, 0x18, 0x7, 0x7, 0xef, "d56015c6be61ccd173eb7b2a75efe19f151d46e9e97e99bc59b6ebbbde73cfcfb1f7f91006a83981d5fa24aa0547413cb6f15b90496a3561ed8d0af310ec6d1d8de76d846376fe01218baafd50051704d1510836b2019fc43a60de6a8c11902a2384de46092d21a2936bad12f5f0ec2620688c0a3910f19eac0f2770170ebd62ef86ea4ea593e7b985fd06125ad9b1e8a95c33e37a7badd2b346fe1fc86ef14a4c62abcec76267539da5fbfbd66060f1c1d9bc263276cf65424c8dd5531753ea2f44104928190894d96d3960ca293a5c3f20cce854d42d9f4e202b36eecef0eb8131e87dd0e0784f962625b6c80b85"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_x_policy={0x8, 0x12, 0x2, 0xd145bfd553fee0ef, 0x0, 0x6e6bb8, 0x9, {0x6, 0x32, 0xcb, 0x0, 0x0, 0x1981000, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback}}]}, 0x160}, 0x1, 0x7}, 0x0) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x3, 0xa333, 0x2]}, &(0x7f0000000080)=0x44)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001800000000000000100100000c0000004404000100000000"], 0x38}, 0x0) (async, rerun: 32)
r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
r5 = socket(0x2a, 0x2, 0x0) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x24004000) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64)
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f00000000c0)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) (async, rerun: 32)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) (async, rerun: 64)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

1.242284777s ago: executing program 2 (id=2750):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x1b00, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

1.241967481s ago: executing program 2 (id=2751):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x80108907, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x80000001, 0x4)
connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)

530.429775ms ago: executing program 0 (id=2773):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket(0x10, 0x800, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)

450.280097ms ago: executing program 0 (id=2775):
r0 = socket$inet6(0xa, 0x3, 0x2c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x5, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f00000007c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x200b0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66, 0x0, 0x0, 0x0, 0x1001}, @tail_call, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) (async)
bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000000)=0x9, 0x4) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1260}, 0x1c) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xe}, {}, {0xa, 0x8}}}, 0x24}, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001780)=ANY=[], 0x20}}, 0x40050) (async)
recvmmsg(r6, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/74, 0x4a}], 0x5}, 0x8}], 0x3, 0x42, 0x0) (async)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x4, 0x400002, 0x2, 0x6, 0x2, 0x0, [{0x6, 0x7, 0x7603, '\x00', 0x1000}, {0x50, 0x79, 0x10}]}) (async)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) (async, rerun: 32)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
r7 = socket$caif_seqpacket(0x25, 0x5, 0x5)
ppoll(&(0x7f0000000240)=[{r7, 0x4000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) (async)
r8 = socket(0x27, 0xa, 0x0)
sendmmsg$alg(r8, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)="ff010c3994e11ecc681d36271a3391b791c82161fbef779d83d1eab76d9238f0c06fcd7f0f131d1c25a0d2194a60912d62971900"/67, 0x43}, {&(0x7f00000006c0)="bdfff2a3acba4d10502f6d42", 0xc}, {&(0x7f0000000880)="b663948a5c608865c51871db5a4185385619b4ee91951b5b1ffafcf1b664f4bdfd1fc374a67e4f3f2e206d0c37b493df063533649184fdf8cb454e2a2b", 0x3d}, {&(0x7f0000000940)="bcf2a54007b224f797cff587256801a5d1e548fb668f59a9915629bff93501cc1bc3de075fb98182c83c231b15acaf865bceda2e970a1ce1541b256046e24c21c421646635f35aec5e93d78de8dccd7811f6e3c20f85833cae8b996a4ac3256cfadb536ecf24726f9ae3dc48283279a8466cac885b1dd56447de4d3a2989cc60082c875065cad9e2ad165be5", 0x8c}, {&(0x7f0000000b80)="43880bbbde34ab8e71f8eef8ffdad71f8c972d837c99c999e7700bd2e87d7d69115e363d4817c90c0dea9ae155e08602f92d973c72aa3c096a391e8f87b42a2966", 0x41}, {&(0x7f0000000a40)="07c0ab70a524f8b6483b434667f520f9dc62f9c099ec5739610ff6e1c76158d79c51e79256ea8835ea31e2d6f6aae9448e958be842a6a5cfa61c45c4128188ff871a19b2472685fab9628bb4b7b9be0c9fa3b1c928f3ab99ae8124934dc8f30f4e2d2d9e4a3683c45ae21e90073252edf6764ccf0ce626d44df7fe9afbb1b16e17d5d37a58608e68d7638d1517aceb8251eea32ca6b3118d58e0b9aa21c03e03f4211050f8c8ed282ac944cb2f3ff491fad86549304e3e3182888de1", 0xbc}], 0x6, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x7ff}], 0x18, 0x4}], 0x1, 0x8000804) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002001e140000c800000c0000"], 0x1c}}, 0x0)
r10 = socket(0x1e, 0x1, 0x0)
connect$tipc(r10, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x18}}, 0x10) (async)
shutdown(r10, 0x2)

401.072383ms ago: executing program 2 (id=2778):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x200, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x200, @empty}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)

330.181143ms ago: executing program 0 (id=2780):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4100, 0x1004}, {&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000140)=""/42, 0x2a}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x9, 0x0, 0x0)

329.705396ms ago: executing program 1 (id=2781):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffe16, &(0x7f0000000140)="06f7", 0x0}, 0xffffffffffffff3a) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYRES16=r0], &(0x7f0000000180)='GPL\x00'}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000006a0001002abd7000ffdbdf250081000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r6, 0x1, 0x0, 0x10}, 0x14}}, 0x0) (async)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) (async)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000001c0)={<r7=>r1, 0x8, 0x1})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x40, 0x8, 0xf, 0x7fffffff, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x68, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x27, 0x4, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast1, @remote, @rand_addr=0x64010100, @loopback, @local, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x63, 0x1, 0x9, [{@local, 0xff}, {@empty, 0x62b}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x10000}, {@local, 0xb}, {@remote, 0xb}, {@multicast2, 0xfffffffd}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) (async)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async, rerun: 64)
r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x40}}, 0x0) (async)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x200, 0x12, 0x10, 0x70bd25, 0x25dfdbfb, {0x5, 0x90, 0x5, 0x10, {0x4e22, 0x4e20, [0xbc, 0x9, 0x3000, 0x4], [0xfffffff4, 0x3, 0x6, 0x3], r9, [0x9, 0xfffffffa]}, 0x442f0e7e, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "b10332fc109fe01fa91fc30bffe48ec7b69f94fbc5a17850ab92aee567b5f1f606805c12cc138d794073cb4556f15f3eabaf4080c6dbd5019ebbd8b0fcb53f3cedbe1dd1d7cf4b45a55d3231f221cc726f59c724bfbe387bc77cf50f9ba6c76bbb25040c05341d9b6ed455f0e168caeae885303ed354076cbe2fafd631e23270df34ce1b40a0f6bc7eed4174bad70535182c2f62660db7c9c92c73b98c6570e5ebbbf2d610dc18370355c01c6d0fd21a203aa54547c57eef637ea8d5"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "c1f4349881d59e570a"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "70747755148dba85557b655494b948c3ea66568be7a7e2f1ee7fb1543b7c17e30929a38c8bd4bfb74b9a719847a0608028257277a9fc7d641f363e901e1b114443cf2900bdc550ddf6c2441aabcce2b62dd7f702ba81e8f50c0eef62b8b6c1b7838e09bd6f8a9fb259f863bfd0556116e0d46b8cac3b0c33b83055a76d8d9c41d5bd99490626b35dcc445f5e739eacf79797192ed13fe9ed892fc0bf9d3793d5d31f1659c7d193719ac3b7e1b7740ea900e3936818f823230eadabae21d64fff57db40105bc1473d870b5bb3981ce21c120db5947b2ea71bdbb85ad25fe371"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20048004}, 0xc801) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
socket(0x11, 0x2, 0x2) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)

249.674123ms ago: executing program 1 (id=2782):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$key(0xf, 0x3, 0x2)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x9c, 0x4)

248.744872ms ago: executing program 0 (id=2783):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, r1, 0x5, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0xff, 0x2a, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55dde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

248.281894ms ago: executing program 2 (id=2784):
r0 = socket(0x2f, 0x800, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=<r3=>r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x26, 0x3, 0x5) (async)
socket(0x26, 0x3, 0x5)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r4, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)="a9919f3394f27012aad03d6a8ab01f75a5f0c678f57464d5926f18932690c34e838dc82f689305865e9bc0e713ee0af6f38aed272b45a2292064ff2bca2cc50a8dc16d8396536341ff3bb97de7f155bed920bb836236252038ee1233428000535e2dc21fd628e0362c5a6d64f6029cbcdab16e708132ba4abf6c5173751d628cf1012f6aab9ba2fd5b84ef2f", 0x8c}, {&(0x7f00000007c0)="ac11aefa3a7c2bd375c7253c9e39a5cb308c46a4f6b55229dfabe02a117c4927fd5e6e1aa417d307b8375842e1da66a8488784e095dd30a0f3a08889576e639167a6bf4e4fdc4cb8af626188c10109b9db5148d5a6598f2ea3d51e", 0x5b}, {&(0x7f0000000f00)="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", 0x311}, {&(0x7f0000000840)='G', 0xff80}], 0x4}}], 0x1, 0x0)
socket(0x10, 0x803, 0x2) (async)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=<r10=>r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r11, @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r13, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000c40)=ANY=[@ANYRESDEC=r10, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRES64=r6], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2}, 0x94)

246.980062ms ago: executing program 0 (id=2785):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xa0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7116b4a6ff606895a38482df2ffe6284"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_PMKID={0x14, 0x55, "7dd0fb5348f741b917d08c9c5f7da7d1"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x24008052)
close(r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff3}, {0x9, 0xd}, {0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}, @TCA_CODEL_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048080}, 0x80)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x43, 0x3, 'ip_vti0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

183.740805ms ago: executing program 1 (id=2786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r5, 0xf341f7fc71d5897f, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000090)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r3, @ANYBLOB="800001000000000014001280090001007665080000000000060002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0xff, 0x2a, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55dde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

182.50899ms ago: executing program 0 (id=2787):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket(0x10, 0x803, 0x4)
r9 = socket(0x10, 0x803, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x10, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x202, 0x510, 0x3, 0x6}, {0x6783, 0x2, 0x8801, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'bridge0\x00'}]}}]}, 0x88}}, 0x24040084)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0)

121.794159ms ago: executing program 1 (id=2788):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES16=r1, @ANYRES16, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0xdea3e09a44941305}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4)

62.247339ms ago: executing program 1 (id=2789):
socket(0x40000000015, 0x805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x200000, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x101}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="0020000000000000200012800800010067726500140002"], 0x40}, 0x1, 0x0, 0x0, 0x404c894}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01120000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)

0s ago: executing program 1 (id=2790):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x4800)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
syz_80211_join_ibss(&(0x7f0000000540)='wlan0\x00', &(0x7f0000000580)=@random="0fc957666682a2d4e27f7e5ff5e01f717cd58b", 0x13, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20044055)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r10, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r11 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x7e)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

kernel console output (not intermixed with test programs):

2 bytes leftover after parsing attributes in process `syz.0.123'.
[   65.302473][ T6300] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   65.362303][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   65.411397][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   65.441391][ T6315] netlink: 'syz.2.132': attribute type 4 has an invalid length.
[   65.499960][ T6320] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   65.768885][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   65.936274][ T6339] netlink: 'syz.0.140': attribute type 4 has an invalid length.
[   66.072514][ T6339] netlink: 'syz.0.140': attribute type 12 has an invalid length.
[   66.090578][ T6339] netlink: 'syz.0.140': attribute type 4 has an invalid length.
[   66.313275][ T6352] xt_CT: You must specify a L4 protocol and not use inversions on it
[   66.544178][ T6374] xt_CT: No such helper "syz0"
[   66.888137][ T6387] syzkaller1: entered promiscuous mode
[   66.890061][ T6387] syzkaller1: entered allmulticast mode
[   66.899895][ T6387] tipc: Started in network mode
[   66.901697][ T6387] tipc: Node identity 7f000001, cluster identity 4711
[   66.903887][ T6387] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   67.050409][ T6427] xt_CT: You must specify a L4 protocol and not use inversions on it
[   67.052654][ T6430] xt_CT: You must specify a L4 protocol and not use inversions on it
[   67.101859][   T12] tipc: Left network mode
[   67.289024][ T6452] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   67.326062][ T6452] syzkaller0: entered promiscuous mode
[   67.327931][ T6452] syzkaller0: entered allmulticast mode
[   68.252209][ T6459] netlink: 'syz.2.180': attribute type 4 has an invalid length.
[   68.263910][ T6459] netlink: 'syz.2.180': attribute type 4 has an invalid length.
[   68.272934][ T6461] netlink: 'syz.0.179': attribute type 11 has an invalid length.
[   68.626713][ T6490] netlink: 'syz.2.188': attribute type 2 has an invalid length.
[   68.629709][ T6492] __nla_validate_parse: 18 callbacks suppressed
[   68.629724][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'.
[   68.637432][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   68.642645][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   68.647531][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   68.698889][ T6490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.188'.
[   68.756587][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[   68.796573][ T6502] openvswitch: netlink: Flow key attr not present in new flow.
[   68.806923][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[   68.859898][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'.
[   68.903577][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'.
[   68.952933][ T6507] tipc: Started in network mode
[   68.955030][ T6507] tipc: Node identity 7f000001, cluster identity 4711
[   68.957599][ T6507] tipc: Enabled bearer <udp:syz2>, priority 10
[   69.181286][ T6527] trusted_key: syz.2.199 sent an empty control message without MSG_MORE.
[   69.314338][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[   69.895119][ T6568] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.090554][ T5891] tipc: Node number set to 2130706433
[   70.217133][ T6590] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   71.019279][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.022125][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.327818][ T6659] validate_nla: 3 callbacks suppressed
[   71.327828][ T6659] netlink: 'syz.1.239': attribute type 21 has an invalid length.
[   71.334030][ T6659] IPv6: NLM_F_CREATE should be specified when creating new route
[   71.429829][ T6664] veth0_to_team: entered allmulticast mode
[   71.584140][ T6679] 8021q: VLANs not supported on caif0
[   71.692420][ T6686] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   71.695473][ T6686] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   71.938034][ T6707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.945180][ T6704] smc: net device bond0 applied user defined pnetid SYZ2
[   72.100795][ T6720] tipc: Can't bind to reserved service type 1
[   72.105530][ T6720] netlink: 'syz.0.256': attribute type 4 has an invalid length.
[   72.129688][ T6720] netlink: 'syz.0.256': attribute type 4 has an invalid length.
[   72.473595][ T6744] bridge_slave_0: invalid flags given to default FDB implementation
[   72.635931][ T6750] xt_CT: You must specify a L4 protocol and not use inversions on it
[   72.727886][ T6761] ipt_REJECT: TCP_RESET invalid for non-tcp
[   72.960968][ T6771] xt_CT: You must specify a L4 protocol and not use inversions on it
[   73.102565][ T6784] netlink: 'syz.0.276': attribute type 2 has an invalid length.
[   73.185446][ T6793] xt_bpf: check failed: parse error
[   73.641079][ T6825] __nla_validate_parse: 44 callbacks suppressed
[   73.641093][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   73.704653][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[   73.729050][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[   73.855561][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[   73.917565][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   73.927241][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   73.938540][ T6850] IPVS: Error joining to the multicast group
[   73.948557][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   74.079884][ T6855] netlink: 'syz.0.297': attribute type 21 has an invalid length.
[   74.090054][ T6855] netlink: 128 bytes leftover after parsing attributes in process `syz.0.297'.
[   74.094602][ T6855] netlink: 'syz.0.297': attribute type 4 has an invalid length.
[   74.097762][ T6855] netlink: 3 bytes leftover after parsing attributes in process `syz.0.297'.
[   74.125526][ T6852] syzkaller1: entered allmulticast mode
[   74.132839][ T6852] netlink: 'syz.2.296': attribute type 7 has an invalid length.
[   74.210281][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'.
[   74.554206][ T6894] netlink: 'syz.1.307': attribute type 2 has an invalid length.
[   74.598755][ T6896] ieee802154 phy0 wpan0: encryption failed: -22
[   75.722008][ T6962] syzkaller0: entered promiscuous mode
[   75.724154][ T6962] syzkaller0: entered allmulticast mode
[   75.960390][ T6976] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[   75.998984][ T6976] lo speed is unknown, defaulting to 1000
[   76.003027][ T6976] lo speed is unknown, defaulting to 1000
[   76.006928][ T6976] lo speed is unknown, defaulting to 1000
[   76.101271][ T6983] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   76.252220][ T6976] infiniband syz0: set active
[   76.258630][ T5891] lo speed is unknown, defaulting to 1000
[   76.270605][ T6976] infiniband syz0: added lo
[   76.274613][ T6976] syz0: rxe_create_cq: returned err = -12
[   76.276761][ T6976] infiniband syz0: Couldn't create ib_mad CQ
[   76.279345][ T6976] infiniband syz0: Couldn't open port 1
[   76.309040][ T6976] RDS/IB: syz0: added
[   76.311513][ T6976] smc: adding ib device syz0 with port count 1
[   76.314193][ T6976] smc:    ib device syz0 port 1 has pnetid 
[   76.317239][ T5891] lo speed is unknown, defaulting to 1000
[   76.326130][ T6976] lo speed is unknown, defaulting to 1000
[   76.509868][ T6976] lo speed is unknown, defaulting to 1000
[   76.707142][ T6976] lo speed is unknown, defaulting to 1000
[   77.018551][ T7024] lo speed is unknown, defaulting to 1000
[   77.484744][ T7042] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   77.689891][ T7052] validate_nla: 5 callbacks suppressed
[   77.689901][ T7052] netlink: 'syz.1.358': attribute type 4 has an invalid length.
[   77.698037][ T7052] netlink: 'syz.1.358': attribute type 4 has an invalid length.
[   77.972701][ T7061] warning: `syz.0.361' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.255855][ T7070] xt_TPROXY: Can be used only with -p tcp or -p udp
[   78.515984][ T7089] bridge_slave_0: left allmulticast mode
[   78.518435][ T7089] bridge_slave_0: left promiscuous mode
[   78.522901][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.534637][ T7089] bridge_slave_1: left allmulticast mode
[   78.537396][ T7089] bridge_slave_1: left promiscuous mode
[   78.541054][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.553867][ T7089] bond0: (slave bond_slave_0): Releasing backup interface
[   78.561148][ T7089] bond0: (slave bond_slave_1): Releasing backup interface
[   78.582196][ T7089] team0: Port device team_slave_0 removed
[   78.601969][ T7089] team0: Port device team_slave_1 removed
[   78.608314][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.622467][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.635195][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.653507][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.677192][ T5891] lo speed is unknown, defaulting to 1000
[   78.725164][ T7104] __nla_validate_parse: 40 callbacks suppressed
[   78.725174][ T7104] netlink: 300 bytes leftover after parsing attributes in process `syz.0.371'.
[   78.730310][ T7104] netlink: 300 bytes leftover after parsing attributes in process `syz.0.371'.
[   78.733855][ T7104] netlink: 300 bytes leftover after parsing attributes in process `syz.0.371'.
[   78.741950][ T7104] netlink: 300 bytes leftover after parsing attributes in process `syz.0.371'.
[   78.770103][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'.
[   78.785043][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'.
[   78.791946][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'.
[   78.858214][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'.
[   78.913939][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[   78.986121][ T7132] netlink: 96 bytes leftover after parsing attributes in process `syz.0.378'.
[   79.146864][ T7151] netlink: 'syz.0.385': attribute type 4 has an invalid length.
[   79.163030][ T7151] netlink: 'syz.0.385': attribute type 4 has an invalid length.
[   79.194827][ T7145] "syz.2.384" (7145) uses obsolete ecb(arc4) skcipher
[   79.320826][ T7169] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[   79.330394][ T7169] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[   79.355892][ T7169] netlink: 'syz.0.393': attribute type 1 has an invalid length.
[   80.348832][   T55] block nbd0: Receive control failed (result -32)
[   80.724305][ T7242] netlink: 'syz.1.414': attribute type 4 has an invalid length.
[   80.775112][ T7245] netlink: 'syz.1.414': attribute type 4 has an invalid length.
[   81.049861][ T7279] netlink: 'syz.1.425': attribute type 4 has an invalid length.
[   81.253517][  T789] cfg80211: failed to load regulatory.db
[   81.667756][ T7337] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.671909][ T7337] bond0: (slave bond1): Enslaving as an active interface with an up link
[   81.695135][ T7336] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.699286][ T7336] bond0: (slave bond2): Enslaving as an active interface with an up link
[   82.601152][ T7345] syz.0.442 (7345) used greatest stack depth: 19976 bytes left
[   83.264975][ T7426] validate_nla: 7 callbacks suppressed
[   83.264986][ T7426] netlink: 'syz.1.464': attribute type 4 has an invalid length.
[   83.278148][ T7426] netlink: 'syz.1.464': attribute type 4 has an invalid length.
[   83.639977][ T7446] ipt_ECN: cannot use operation on non-tcp rule
[   83.748185][ T7455] __nla_validate_parse: 55 callbacks suppressed
[   83.748201][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.472'.
[   83.768838][ T7414] syz.2.461 (7414) used greatest stack depth: 19400 bytes left
[   83.788927][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'.
[   83.840853][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'.
[   84.000252][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[   84.008802][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[   84.139514][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'.
[   84.142720][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'.
[   84.151250][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'.
[   84.247487][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'.
[   84.633192][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'.
[   84.809457][ T7494] netlink: 'syz.0.484': attribute type 4 has an invalid length.
[   84.826960][ T7494] netlink: 'syz.0.484': attribute type 4 has an invalid length.
[   85.040230][ T7518] delete_channel: no stack
[   85.117056][ T7536] netlink: 'syz.1.496': attribute type 4 has an invalid length.
[   85.142334][ T7536] netlink: 'syz.1.496': attribute type 4 has an invalid length.
[   85.371909][ T7553] netlink: 'syz.1.502': attribute type 4 has an invalid length.
[   85.380372][ T7552] netlink: 'syz.1.502': attribute type 4 has an invalid length.
[   85.437869][ T7559] ieee802154 phy0 wpan0: encryption failed: -22
[   85.466929][ T7564] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[   85.505482][ T7564] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.515928][ T7568] netlink: 'syz.0.507': attribute type 1 has an invalid length.
[   85.529196][ T7564] bond1: (slave gretap1): making interface the new active one
[   85.534313][ T7564] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   86.292414][ T7621] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.294928][ T7620] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   87.430608][ T2208] tipc: Node number set to 2886997007
[   87.911827][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b3a9000: rx timeout, send abort
[   87.916661][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b3a9000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   88.159418][ T7729] sctp: [Deprecated]: syz.0.552 (pid 7729) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.159418][ T7729] Use struct sctp_sack_info instead
[   88.197726][ T7732] sctp: [Deprecated]: syz.0.552 (pid 7732) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.197726][ T7732] Use struct sctp_sack_info instead
[   88.284195][ T7740] validate_nla: 8 callbacks suppressed
[   88.284209][ T7740] netlink: 'syz.1.555': attribute type 4 has an invalid length.
[   88.304003][ T7740] netlink: 'syz.1.555': attribute type 4 has an invalid length.
[   88.377501][ T7749] netlink: 'syz.0.554': attribute type 4 has an invalid length.
[   88.535660][ T7762] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526
[   88.725906][ T7778] bond1: (slave gretap1): Releasing active interface
[   89.175741][ T7806] __nla_validate_parse: 34 callbacks suppressed
[   89.175755][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'.
[   89.192104][ T7806] netlink: 256 bytes leftover after parsing attributes in process `syz.1.573'.
[   89.315625][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[   89.373379][ T7827] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.578'.
[   89.417144][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'.
[   89.420354][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[   89.460277][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'.
[   89.496247][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[   89.509398][ T7839] Driver unsupported XDP return value 0 on prog  (id 113) dev N/A, expect packet loss!
[   89.601752][ T7847] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   89.601752][ T7846] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   89.678380][ T7857] netlink: 300 bytes leftover after parsing attributes in process `syz.1.589'.
[   89.684200][ T7842] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   89.696495][ T7857] netlink: 'syz.1.589': attribute type 11 has an invalid length.
[   89.751382][ T7857] lo speed is unknown, defaulting to 1000
[   89.820327][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[   90.226215][ T7878] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[   90.392712][ T7884] netlink: 'syz.0.599': attribute type 2 has an invalid length.
[   90.616281][ T7906] netlink: 'syz.2.604': attribute type 4 has an invalid length.
[   90.638235][ T7906] netlink: 'syz.2.604': attribute type 4 has an invalid length.
[   90.647302][ T5296] lo speed is unknown, defaulting to 1000
[   90.649061][ T5296] syz0: Port: 1 Link DOWN
[   90.656196][ T5296] lo speed is unknown, defaulting to 1000
[   90.706451][ T7903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.724065][   T47] lo speed is unknown, defaulting to 1000
[   90.727339][   T47] syz0: Port: 1 Link ACTIVE
[   90.782369][ T7903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.790112][ T7919] nbd: must specify at least one socket
[   90.873485][ T7903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.952669][ T7903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.096017][ T7903] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.123707][ T7903] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.148063][ T7903] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.160399][ T7903] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.294080][ T7949] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.438215][ T7958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.441812][ T7958] D: renamed from syzkaller0
[   91.445928][ T7958] tipc: Disabling bearer <eth:syzkaller0>
[   91.469974][ T7960] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.550793][ T7966] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   91.603489][ T7970] xt_limit: Overflow, try lower: 0/0
[   91.675882][ T7972] netlink: 'syz.0.625': attribute type 10 has an invalid length.
[   91.691368][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.703350][ T7972] team0: Port device bond0 added
[   91.946892][ T7990] netlink: 'syz.1.631': attribute type 4 has an invalid length.
[   91.971385][ T7992] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   92.193950][ T8018] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   92.234499][ T8020] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   92.589441][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.597720][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.603357][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.608946][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.618164][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.624487][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.629568][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.636532][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.643485][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.648718][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.656066][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.661602][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.666734][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.673940][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.679009][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.685146][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.690232][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.697236][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.703733][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.709059][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.716480][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.722252][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.727391][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.734413][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.739528][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.746926][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.753944][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.759150][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.764998][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.770136][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.778361][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.784096][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.789333][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.198923][ T8069] __nla_validate_parse: 33 callbacks suppressed
[   94.198938][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'.
[   94.323280][ T8076] validate_nla: 6 callbacks suppressed
[   94.323296][ T8076] netlink: 'syz.2.656': attribute type 4 has an invalid length.
[   94.333124][ T5890] lo speed is unknown, defaulting to 1000
[   94.334994][ T5890] syz0: Port: 1 Link DOWN
[   94.336613][ T5890] lo speed is unknown, defaulting to 1000
[   94.337458][ T8076] netlink: 'syz.2.656': attribute type 4 has an invalid length.
[   94.350417][   T47] lo speed is unknown, defaulting to 1000
[   94.360852][   T47] syz0: Port: 1 Link ACTIVE
[   94.362787][   T47] lo speed is unknown, defaulting to 1000
[   94.399252][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'.
[   94.419205][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'.
[   94.552262][ T8095] lo speed is unknown, defaulting to 1000
[   94.642257][ T8096] netlink: 'syz.2.661': attribute type 1 has an invalid length.
[   94.647545][ T8096] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   94.741745][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.662'.
[   94.748443][ T8095] syzkaller1: entered promiscuous mode
[   94.750245][ T8095] syzkaller1: entered allmulticast mode
[   94.991123][ T8106] netlink: 'syz.0.664': attribute type 39 has an invalid length.
[   95.047427][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'.
[   95.117556][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[   95.138330][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[   95.217069][ T8113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   95.311631][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'.
[   95.321801][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'.
[   95.422745][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'.
[   95.677969][ T8136] syz.1.673 uses old SIOCAX25GETINFO
[   95.752364][ T8144] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   95.856046][ T8155] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   95.939157][ T8160] netlink: 'syz.2.682': attribute type 2 has an invalid length.
[   96.776305][ T8178] netlink: 'syz.1.687': attribute type 1 has an invalid length.
[   96.855797][ T8185] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   97.866280][ T8241] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   98.168583][ T8250] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   98.175195][ T8252] netlink: 'syz.0.709': attribute type 4 has an invalid length.
[   98.190378][ T8252] netlink: 'syz.0.709': attribute type 4 has an invalid length.
[   98.249659][ T8254] xt_CT: You must specify a L4 protocol and not use inversions on it
[   99.762280][ T8264] syz.0.714: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   99.767833][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.0.714 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   99.767846][ T8264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.767852][ T8264] Call Trace:
[   99.767857][ T8264]  <TASK>
[   99.767862][ T8264]  dump_stack_lvl+0x189/0x250
[   99.767879][ T8264]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.767889][ T8264]  ? __pfx__printk+0x10/0x10
[   99.767901][ T8264]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   99.767921][ T8264]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   99.767933][ T8264]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   99.767945][ T8264]  warn_alloc+0x214/0x310
[   99.767959][ T8264]  ? __pfx_warn_alloc+0x10/0x10
[   99.767974][ T8264]  ? __get_vm_area_node+0x28f/0x300
[   99.767984][ T8264]  ? fq_pie_init+0x430/0x840
[   99.767994][ T8264]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   99.768014][ T8264]  ? up_write+0x1c4/0x420
[   99.768024][ T8264]  ? tcf_block_get_ext+0x8d4/0x17d0
[   99.768035][ T8264]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   99.768048][ T8264]  ? rcu_is_watching+0x15/0xb0
[   99.768058][ T8264]  ? fq_pie_init+0x430/0x840
[   99.768065][ T8264]  ? fq_pie_init+0x430/0x840
[   99.768071][ T8264]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   99.768081][ T8264]  ? fq_pie_init+0x430/0x840
[   99.768088][ T8264]  ? tcf_block_get+0x67/0xa0
[   99.768096][ T8264]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[   99.768107][ T8264]  fq_pie_init+0x430/0x840
[   99.768116][ T8264]  ? __pfx_fq_pie_init+0x10/0x10
[   99.768123][ T8264]  qdisc_create+0x7ac/0xea0
[   99.768135][ T8264]  tc_modify_qdisc+0x1538/0x20e0
[   99.768150][ T8264]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   99.768170][ T8264]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   99.768178][ T8264]  rtnetlink_rcv_msg+0x77c/0xb70
[   99.768188][ T8264]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   99.768196][ T8264]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.768203][ T8264]  ? ref_tracker_free+0x63a/0x7d0
[   99.768214][ T8264]  ? __copy_skb_header+0xa7/0x550
[   99.768225][ T8264]  ? __pfx_ref_tracker_free+0x10/0x10
[   99.768269][ T8264]  netlink_rcv_skb+0x208/0x470
[   99.768281][ T8264]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.768290][ T8264]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   99.768307][ T8264]  ? netlink_deliver_tap+0x2e/0x1b0
[   99.768317][ T8264]  ? netlink_deliver_tap+0x2e/0x1b0
[   99.768328][ T8264]  netlink_unicast+0x75c/0x8e0
[   99.768342][ T8264]  netlink_sendmsg+0x805/0xb30
[   99.768357][ T8264]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.768368][ T8264]  ? aa_sock_msg_perm+0x94/0x160
[   99.768380][ T8264]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   99.768391][ T8264]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.768401][ T8264]  __sock_sendmsg+0x21c/0x270
[   99.768410][ T8264]  ____sys_sendmsg+0x505/0x830
[   99.768423][ T8264]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.768437][ T8264]  ? import_iovec+0x74/0xa0
[   99.768448][ T8264]  ___sys_sendmsg+0x21f/0x2a0
[   99.768459][ T8264]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.768485][ T8264]  ? __fget_files+0x2a/0x420
[   99.768495][ T8264]  ? __fget_files+0x3a0/0x420
[   99.768509][ T8264]  __x64_sys_sendmsg+0x19b/0x260
[   99.768521][ T8264]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   99.768539][ T8264]  ? do_syscall_64+0xbe/0x3b0
[   99.768549][ T8264]  do_syscall_64+0xfa/0x3b0
[   99.768556][ T8264]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.768567][ T8264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.768575][ T8264]  ? exc_page_fault+0x9f/0xf0
[   99.768588][ T8264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.768596][ T8264] RIP: 0033:0x7f90efd8e929
[   99.768609][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.768618][ T8264] RSP: 002b:00007f90f0cba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.768627][ T8264] RAX: ffffffffffffffda RBX: 00007f90effb5fa0 RCX: 00007f90efd8e929
[   99.768633][ T8264] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 000000000000000b
[   99.768638][ T8264] RBP: 00007f90efe10b39 R08: 0000000000000000 R09: 0000000000000000
[   99.768643][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.768648][ T8264] R13: 0000000000000000 R14: 00007f90effb5fa0 R15: 00007ffed0d3f5b8
[   99.768661][ T8264]  </TASK>
[   99.768665][ T8264] Mem-Info:
[   99.915883][ T8264] active_anon:5618 inactive_anon:0 isolated_anon:0
[   99.915883][ T8264]  active_file:1008 inactive_file:38223 isolated_file:0
[   99.915883][ T8264]  unevictable:1768 dirty:93 writeback:0
[   99.915883][ T8264]  slab_reclaimable:9447 slab_unreclaimable:58537
[   99.915883][ T8264]  mapped:19407 shmem:2452 pagetables:927
[   99.915883][ T8264]  sec_pagetables:0 bounce:0
[   99.915883][ T8264]  kernel_misc_reclaimable:0
[   99.915883][ T8264]  free:300576 free_pcp:15591 free_cma:0
[   99.930263][ T8264] Node 0 active_anon:13884kB inactive_anon:0kB active_file:3188kB inactive_file:135920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36588kB dirty:192kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4984kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   99.942209][ T8264] Node 1 active_anon:8588kB inactive_anon:0kB active_file:844kB inactive_file:16972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41040kB dirty:180kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6640kB pagetables:1328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   99.953151][ T8264] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   99.964189][ T8264] lowmem_reserve[]: 0 812 812 812 812
[   99.966368][ T8264] Node 0 DMA32 free:319808kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13748kB inactive_anon:0kB active_file:3188kB inactive_file:135920kB unevictable:3536kB writepending:192kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:26040kB local_pcp:12948kB free_cma:0kB
[   99.978265][ T8264] lowmem_reserve[]: 0 0 0 0 0
[   99.980069][ T8264] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   99.990817][ T8264] lowmem_reserve[]: 0 0 854 854 854
[   99.992479][ T8264] Node 1 Normal free:416708kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8588kB inactive_anon:0kB active_file:844kB inactive_file:16972kB unevictable:3536kB writepending:180kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:29264kB local_pcp:22876kB free_cma:0kB
[  100.003856][ T8264] lowmem_reserve[]: 0 0 0 0 0
[  100.005547][ T8264] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  100.009952][ T8264] Node 0 DMA32: 223*4kB (UME) 371*8kB (UME) 219*16kB (UME) 281*32kB (UME) 51*64kB (UME) 41*128kB (UME) 14*256kB (UM) 13*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 67*4096kB (M) = 319780kB
[  100.019447][ T8264] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  100.025364][ T8264] Node 1 Normal: 610*4kB (UM) 469*8kB (UME) 374*16kB (UME) 78*32kB (UME) 37*64kB (UME) 32*128kB (UME) 15*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 1*2048kB (M) 93*4096kB (UM) = 416656kB
[  100.041149][ T8264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.044471][ T8264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.047408][ T8264] 41683 total pagecache pages
[  100.048904][ T8264] 0 pages in swap cache
[  100.052270][ T8264] Free swap  = 124996kB
[  100.053905][ T8264] Total swap = 124996kB
[  100.055703][ T8264] 786301 pages RAM
[  100.057197][ T8264] 0 pages HighMem/MovableOnly
[  100.059057][ T8264] 241085 pages reserved
[  100.060825][ T8264] 0 pages cma reserved
[  100.123537][ T8295] __nla_validate_parse: 23 callbacks suppressed
[  100.123548][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'.
[  100.135410][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'.
[  100.142513][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  100.249701][ T8313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.723'.
[  100.319006][ T8312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.723'.
[  100.433693][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[  100.444785][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[  100.475019][ T8331] netlink: 'syz.0.728': attribute type 21 has an invalid length.
[  100.482717][ T8332] netlink: 'syz.0.728': attribute type 4 has an invalid length.
[  100.485129][ T8331] netlink: 'syz.0.728': attribute type 4 has an invalid length.
[  100.632339][ T8343] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  100.642581][ T8343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.731'.
[  100.707836][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'.
[  100.737425][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'.
[  100.947659][ T8359] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  101.017941][ T8365] syz_tun: entered allmulticast mode
[  101.023470][ T8365] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[  101.083213][ T8365] syz_tun: left allmulticast mode
[  101.348699][ T8381] netlink: 'syz.1.744': attribute type 1 has an invalid length.
[  101.386148][ T8381] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.392956][ T8381] ipvlan2: entered allmulticast mode
[  101.394657][ T8381] bond2: entered allmulticast mode
[  101.403211][ T8382] ipvlan3: entered allmulticast mode
[  101.413351][ T8381] bond2: (slave gretap2): making interface the new active one
[  101.415779][ T8381] gretap2: entered allmulticast mode
[  101.419192][ T8381] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  101.497599][ T8381] syz.1.744 (8381) used greatest stack depth: 19176 bytes left
[  101.727858][ T8396] lo speed is unknown, defaulting to 1000
[  102.238406][ T8412] netlink: 'syz.2.753': attribute type 1 has an invalid length.
[  102.258791][ T8412] gretap1: entered allmulticast mode
[  102.596301][ T8442] netlink: 'syz.1.761': attribute type 2 has an invalid length.
[  102.795227][ T8452] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  103.276199][ T8482] netlink: 'syz.1.772': attribute type 4 has an invalid length.
[  103.287701][ T8483] netlink: 'syz.1.772': attribute type 4 has an invalid length.
[  103.418061][ T8497] pim6reg1: entered promiscuous mode
[  103.419988][ T8498] netlink: 'syz.1.777': attribute type 4 has an invalid length.
[  103.422698][ T8497] pim6reg1: entered allmulticast mode
[  103.443831][ T8498] netlink: 'syz.1.777': attribute type 4 has an invalid length.
[  103.794041][ T8525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.955756][ T8535] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.446943][ T8564] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.625038][ T8586] pim6reg1: entered allmulticast mode
[  104.791753][ T8600] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  104.919844][ T8606] lo speed is unknown, defaulting to 1000
[  105.279049][ T8635] __nla_validate_parse: 31 callbacks suppressed
[  105.279065][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'.
[  105.370761][ T8637] netlink: 224 bytes leftover after parsing attributes in process `syz.1.817'.
[  105.454854][ T8639] bond2: (slave gretap2): Releasing active interface
[  105.457313][ T8639] gretap2: left allmulticast mode
[  105.561388][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'.
[  105.585384][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.820'.
[  105.610064][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.820'.
[  105.693785][ T8655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.823'.
[  105.697184][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'.
[  105.779867][ T8667] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  105.835090][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'.
[  105.853737][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'.
[  105.856687][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'.
[  106.025454][ T8686] tipc: Enabled bearer <eth:team0>, priority 31
[  106.038557][ T8686] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.055858][ T8686] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.070512][ T8689] validate_nla: 11 callbacks suppressed
[  106.070523][ T8689] netlink: 'syz.2.832': attribute type 2 has an invalid length.
[  106.074927][ T8686] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.078322][ T8686] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.084481][ T8686] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.088174][ T8686] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.094161][ T8686] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  106.666640][ T8731] netlink: 'syz.1.840': attribute type 2 has an invalid length.
[  107.422601][ T8764] netlink: 'syz.2.848': attribute type 1 has an invalid length.
[  107.430967][ T8764] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  107.722432][ T8775] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  107.907902][ T8785] xt_CT: You must specify a L4 protocol and not use inversions on it
[  108.095403][ T8796] netlink: 'syz.2.858': attribute type 2 has an invalid length.
[  108.393466][ T8842] xt_CT: You must specify a L4 protocol and not use inversions on it
[  108.868870][ T8866] netlink: 'syz.2.876': attribute type 29 has an invalid length.
[  108.873793][ T8868] netlink: 'syz.1.877': attribute type 9 has an invalid length.
[  109.235373][ T8884] netlink: 'syz.1.882': attribute type 4 has an invalid length.
[  109.258180][ T8884] netlink: 'syz.1.882': attribute type 4 has an invalid length.
[  109.429838][ T8896] IPv6: syztnl1: Disabled Multicast RS
[  109.498921][ T8901] netlink: 'syz.0.888': attribute type 3 has an invalid length.
[  110.376325][ T8912] netlink: 'syz.0.891': attribute type 4 has an invalid length.
[  110.382310][ T2208] lo speed is unknown, defaulting to 1000
[  110.384119][ T2208] syz0: Port: 1 Link DOWN
[  110.390818][ T2208] lo speed is unknown, defaulting to 1000
[  110.397784][ T2208] lo speed is unknown, defaulting to 1000
[  110.399574][ T2208] syz0: Port: 1 Link ACTIVE
[  110.428110][ T8918] __nla_validate_parse: 36 callbacks suppressed
[  110.428121][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'.
[  110.438055][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'.
[  110.544721][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.896'.
[  110.627891][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'.
[  110.651064][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'.
[  110.929127][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  110.950985][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'.
[  110.972240][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  110.994334][ T8958] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  111.248701][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'.
[  111.312549][ T8977] lo speed is unknown, defaulting to 1000
[  111.576793][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'.
[  111.811032][ T9006] validate_nla: 14 callbacks suppressed
[  111.811068][ T9006] netlink: 'syz.2.922': attribute type 4 has an invalid length.
[  111.863670][ T9006] netlink: 'syz.2.922': attribute type 4 has an invalid length.
[  111.893021][ T5296] lo speed is unknown, defaulting to 1000
[  111.896843][ T2208] lo speed is unknown, defaulting to 1000
[  111.899348][ T5296] lo speed is unknown, defaulting to 1000
[  112.003132][ T9024] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  112.335571][ T9041] netlink: 'syz.2.932': attribute type 22 has an invalid length.
[  112.458252][ T9046] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  112.620928][ T9057] GUP no longer grows the stack in syz.1.937 (9057): 200000006000-20000000a000 (200000005000)
[  112.630746][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.1.937 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  112.630768][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.630777][ T9057] Call Trace:
[  112.630784][ T9057]  <TASK>
[  112.630791][ T9057]  dump_stack_lvl+0x189/0x250
[  112.630819][ T9057]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.630838][ T9057]  ? __pfx__printk+0x10/0x10
[  112.630855][ T9057]  ? find_vma+0xe7/0x160
[  112.630881][ T9057]  __get_user_pages+0x2a60/0x30b0
[  112.630925][ T9057]  ? __pfx___get_user_pages+0x10/0x10
[  112.630940][ T9057]  ? __gup_longterm_locked+0xbf7/0x15b0
[  112.630956][ T9057]  ? down_read_killable+0x1d1/0x350
[  112.630972][ T9057]  ? try_get_folio+0x633/0x660
[  112.631016][ T9057]  __gup_longterm_locked+0xd66/0x15b0
[  112.631037][ T9057]  ? try_grab_folio_fast+0x1be/0x4f0
[  112.631063][ T9057]  ? gup_fast_fallback+0x1afc/0x2260
[  112.631082][ T9057]  gup_fast_fallback+0x1cd4/0x2260
[  112.631125][ T9057]  ? __pfx_gup_fast_fallback+0x10/0x10
[  112.631139][ T9057]  ? trace_contention_end+0x39/0x120
[  112.631159][ T9057]  ? __mutex_lock+0x330/0xe80
[  112.631175][ T9057]  ? futex_unqueue+0x22/0x240
[  112.631192][ T9057]  ? futex_unqueue+0x22/0x240
[  112.631208][ T9057]  ? futex_unqueue+0x22/0x240
[  112.631225][ T9057]  ? is_valid_gup_args+0x11f/0x200
[  112.631241][ T9057]  ? get_user_pages_fast+0x4d/0xb0
[  112.631259][ T9057]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  112.631284][ T9057]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  112.631336][ T9057]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.631357][ T9057]  ? wait_for_space+0x24d/0x2d0
[  112.631376][ T9057]  iov_iter_get_pages2+0x5e/0xa0
[  112.631396][ T9057]  __se_sys_vmsplice+0x548/0x10d0
[  112.631430][ T9057]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  112.631449][ T9057]  ? __pfx_futex_wait+0x10/0x10
[  112.631473][ T9057]  ? __lock_acquire+0xab9/0xd20
[  112.631514][ T9057]  ? do_pipe2+0xf7/0x170
[  112.631537][ T9057]  ? rcu_is_watching+0x15/0xb0
[  112.631558][ T9057]  ? do_syscall_64+0xbe/0x3b0
[  112.631576][ T9057]  do_syscall_64+0xfa/0x3b0
[  112.631589][ T9057]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.631612][ T9057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.631626][ T9057]  ? exc_page_fault+0x9f/0xf0
[  112.631649][ T9057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.631663][ T9057] RIP: 0033:0x7fafba38e929
[  112.631678][ T9057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.631690][ T9057] RSP: 002b:00007fafbb288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  112.631707][ T9057] RAX: ffffffffffffffda RBX: 00007fafba5b5fa0 RCX: 00007fafba38e929
[  112.631718][ T9057] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  112.631728][ T9057] RBP: 00007fafba410b39 R08: 0000000000000000 R09: 0000000000000000
[  112.631737][ T9057] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  112.631747][ T9057] R13: 0000000000000000 R14: 00007fafba5b5fa0 R15: 00007fff5a3e6818
[  112.631770][ T9057]  </TASK>
[  112.938746][ T9077] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  112.942657][ T9076] IPVS: stopping backup sync thread 9077 ...
[  113.403734][ T9090] netlink: 'syz.0.947': attribute type 4 has an invalid length.
[  113.413912][ T9090] netlink: 'syz.0.947': attribute type 4 has an invalid length.
[  113.517816][ T9092] x_tables: duplicate underflow at hook 2
[  113.601193][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.939278][ T9134] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  113.980193][ T9136] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  114.033796][ T9143] x_tables: duplicate underflow at hook 1
[  114.464214][ T9172] netlink: 'syz.0.972': attribute type 1 has an invalid length.
[  114.532866][ T9174] delete_channel: no stack
[  114.625857][ T9188] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  114.736695][ T9203] netlink: 'syz.0.981': attribute type 4 has an invalid length.
[  114.751757][ T9203] netlink: 'syz.0.981': attribute type 4 has an invalid length.
[  115.034311][ T9223] netlink: 'syz.1.986': attribute type 4 has an invalid length.
[  115.053759][ T9223] IPv6: Can't replace route, no match found
[  115.060189][ T9223] netlink: 'syz.1.986': attribute type 4 has an invalid length.
[  115.404472][ T9252] lo speed is unknown, defaulting to 1000
[  115.614789][ T9277] __nla_validate_parse: 55 callbacks suppressed
[  115.614800][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'.
[  115.622817][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  115.659937][ T9281] C: renamed from team_slave_0 (while UP)
[  115.671307][ T9281] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1007'.
[  115.816798][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  115.872399][ T9295] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1012'.
[  115.875385][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  115.888703][ T9295] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1012'.
[  115.994915][ T9304] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  116.004014][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'.
[  116.041168][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'.
[  116.146746][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'.
[  116.207948][ T9319] xt_hashlimit: invalid rate
[  116.705147][ T2208] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1
[  116.709206][ T2208] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22
[  116.780307][ T9334] ip6erspan0: entered allmulticast mode
[  116.936247][ T9342] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  116.939307][ T9342] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  116.943020][ T9342] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  116.945972][ T9342] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  118.352684][ T9436] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  118.355420][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.369691][ T9436] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.374081][ T9436] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.377538][ T9436] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.380774][ T9436] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.687646][ T9443] validate_nla: 4 callbacks suppressed
[  118.687738][ T9443] netlink: 'syz.1.1054': attribute type 2 has an invalid length.
[  118.787082][ T9446] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  119.602589][ T9451] pimreg: entered allmulticast mode
[  119.605046][ T9451] pimreg: left allmulticast mode
[  119.706751][ T9459] netlink: 'syz.0.1059': attribute type 4 has an invalid length.
[  119.742092][ T9460] netlink: 'syz.0.1059': attribute type 4 has an invalid length.
[  119.749098][ T9459] netlink: 'syz.0.1059': attribute type 4 has an invalid length.
[  119.941351][ T9479] xt_CT: You must specify a L4 protocol and not use inversions on it
[  120.012839][ T9487] netlink: 'syz.0.1069': attribute type 10 has an invalid length.
[  120.021447][ T9487] openvswitch: netlink: Flow key attr not present in new flow.
[  120.293495][ T9510] ksmbd: Unknown IPC event: 3, ignore.
[  120.591390][ T9528] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  120.738668][ T9539] sctp: [Deprecated]: syz.2.1087 (pid 9539) Use of int in maxseg socket option.
[  120.738668][ T9539] Use struct sctp_assoc_value instead
[  120.744410][ T9539] __nla_validate_parse: 34 callbacks suppressed
[  120.744423][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'.
[  120.766867][ T9536] lo speed is unknown, defaulting to 1000
[  120.804203][ T9541] netlink: 'syz.0.1086': attribute type 13 has an invalid length.
[  120.807124][ T9541] netlink: 'syz.0.1086': attribute type 17 has an invalid length.
[  120.873796][ T9541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.899546][ T9548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.935993][ T9548] syzkaller0: entered promiscuous mode
[  120.937785][ T9548] syzkaller0: entered allmulticast mode
[  120.940020][ T9548] tipc: Resetting bearer <eth:syzkaller0>
[  121.033545][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'.
[  121.068491][ T9547] tipc: Resetting bearer <eth:syzkaller0>
[  121.805230][ T9563] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1092'.
[  122.179826][ T9547] tipc: Disabling bearer <eth:syzkaller0>
[  122.431323][ T9585] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  122.436767][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'.
[  122.469846][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'.
[  122.501109][ T9591] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  122.710834][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'.
[  122.717102][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'.
[  122.776872][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'.
[  122.776929][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'.
[  122.823446][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'.
[  122.986639][ T9626] netlink: 'syz.0.1110': attribute type 4 has an invalid length.
[  123.005420][ T9626] netlink: 'syz.0.1110': attribute type 4 has an invalid length.
[  123.189868][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.426342][ T9661] xt_recent: Unsupported userspace flags (00000048)
[  123.430914][ T9661] tipc: Resetting bearer <eth:team0>
[  123.510331][ T9661] tipc: Disabling bearer <eth:team0>
[  123.521799][ T9661] team0 (unregistering): Port device C removed
[  123.528388][ T9661] team0 (unregistering): Port device team_slave_1 removed
[  123.540367][ T9661] team0 (unregistering): Port device bond0 removed
[  123.557023][ T9673] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  123.925118][ T9708] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  124.156707][ T9719] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.184958][ T9721] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  124.377344][ T9736] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.034025][ T9774] SET target dimension over the limit!
[  125.557751][ T9833] bridge_slave_0: left allmulticast mode
[  125.560658][ T9833] bridge_slave_0: left promiscuous mode
[  125.563754][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.569808][ T9833] bridge_slave_1: left allmulticast mode
[  125.574423][ T9833] bridge_slave_1: left promiscuous mode
[  125.577600][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.586711][ T9833] bond0: (slave bond_slave_0): Releasing backup interface
[  125.593752][ T9833] bond0: (slave bond_slave_1): Releasing backup interface
[  125.596942][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.607396][ T9833] bond0: (slave bond1): Releasing backup interface
[  125.613017][ T9833] bond0: (slave bond2): Releasing backup interface
[  125.695496][ T9848] netlink: 'syz.0.1179': attribute type 3 has an invalid length.
[  125.756830][ T9856] __nla_validate_parse: 54 callbacks suppressed
[  125.756842][ T9856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1181'.
[  125.818941][ T9865] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.890780][ T9869]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  125.895313][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'.
[  125.996913][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'.
[  126.013467][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'.
[  126.019873][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'.
[  126.184188][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  126.205300][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  126.967949][ T9919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1202'.
[  126.968059][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'.
[  127.006013][ T9919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1202'.
[  127.336526][ T9950] netlink: 'syz.2.1212': attribute type 4 has an invalid length.
[  127.344111][ T5890] lo speed is unknown, defaulting to 1000
[  127.346021][ T5890] syz0: Port: 1 Link DOWN
[  127.347582][ T5890] lo speed is unknown, defaulting to 1000
[  127.350057][ T9950] netlink: 'syz.2.1212': attribute type 4 has an invalid length.
[  127.367135][ T2208] lo speed is unknown, defaulting to 1000
[  127.369582][ T2208] syz0: Port: 1 Link ACTIVE
[  127.372515][ T2208] lo speed is unknown, defaulting to 1000
[  128.069800][ T9970] netlink: 'syz.1.1219': attribute type 4 has an invalid length.
[  128.083908][ T9970] netlink: 'syz.1.1219': attribute type 4 has an invalid length.
[  128.084881][ T9971] netlink: 'syz.1.1219': attribute type 4 has an invalid length.
[  128.132235][ T9973] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  128.335289][ T9981] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  128.970265][T10010] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.975961][T10010] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.979631][T10010] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.987433][T10010] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.997615][T10010] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  129.011165][T10010] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  129.066908][T10010] gretap1: left allmulticast mode
[  129.097498][T10010] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.101154][T10010] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.104413][T10010] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.107618][T10010] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.125911][ T2208] lo speed is unknown, defaulting to 1000
[  129.128405][ T2208] syz0: Port: 1 Link DOWN
[  129.140603][ T2208] lo speed is unknown, defaulting to 1000
[  129.224029][T10018] Unsupported ieee802154 address type: 0
[  129.483913][T10027] netlink: 'syz.2.1241': attribute type 4 has an invalid length.
[  129.484647][T10031] netlink: 'syz.2.1241': attribute type 4 has an invalid length.
[  129.490014][ T5296] lo speed is unknown, defaulting to 1000
[  129.495946][ T5296] syz0: Port: 1 Link ACTIVE
[  129.499585][ T5890] lo speed is unknown, defaulting to 1000
[  129.505676][ T5296] lo speed is unknown, defaulting to 1000
[  129.507988][ T5296] syz0: Port: 1 Link DOWN
[  129.521167][ T5296] lo speed is unknown, defaulting to 1000
[  129.634203][T10037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.693092][T10037] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.696289][T10037] bond0: (slave bond4): Enslaving as an active interface with an up link
[  129.855091][T10045] netlink: 'syz.1.1246': attribute type 1 has an invalid length.
[  129.857490][T10045] netlink: 'syz.1.1246': attribute type 10 has an invalid length.
[  130.310752][T10055] nbd1: detected capacity change from 0 to 63
[  130.313461][T10057] block nbd1: NBD_DISCONNECT
[  130.315781][T10057] block nbd1: Disconnected due to user request.
[  130.319205][T10057] block nbd1: shutting down sockets
[  130.320838][T10058] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.324977][T10058] Buffer I/O error on dev nbd1, logical block 0, async page read
[  130.331062][   T60] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0
[  130.334642][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[  130.337358][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[  130.339865][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[  130.343855][T10058] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.347414][T10058] Buffer I/O error on dev nbd1, logical block 0, async page read
[  130.351673][T10058] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.355091][T10058] Buffer I/O error on dev nbd1, logical block 1, async page read
[  130.357803][T10058] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.361432][T10058] Buffer I/O error on dev nbd1, logical block 2, async page read
[  130.364431][T10058] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.368091][T10058] Buffer I/O error on dev nbd1, logical block 3, async page read
[  130.373097][T10058] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.377075][T10058] Buffer I/O error on dev nbd1, logical block 0, async page read
[  130.380900][T10058] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.384865][T10058] Buffer I/O error on dev nbd1, logical block 1, async page read
[  130.388381][T10058] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.394405][T10058] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.401808][T10058] ldm_validate_partition_table(): Disk read failed.
[  130.406265][T10058] Dev nbd1: unable to read RDB block 0
[  130.421000][T10058]  nbd1: unable to read partition table
[  130.438340][T10058] ldm_validate_partition_table(): Disk read failed.
[  130.444516][T10058] Dev nbd1: unable to read RDB block 0
[  130.448115][T10058]  nbd1: unable to read partition table
[  130.515056][T10062] lo speed is unknown, defaulting to 1000
[  130.517142][T10062] lo speed is unknown, defaulting to 1000
[  130.519687][T10062] lo speed is unknown, defaulting to 1000
[  130.524941][T10062] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  130.539518][T10062] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  130.561722][T10062] lo speed is unknown, defaulting to 1000
[  130.564696][T10062] lo speed is unknown, defaulting to 1000
[  130.567405][T10062] lo speed is unknown, defaulting to 1000
[  130.727358][T10072] bridge0: port 1(syz_tun) entered blocking state
[  130.730830][T10072] bridge0: port 1(syz_tun) entered disabled state
[  130.733384][T10072] syz_tun: entered allmulticast mode
[  130.737110][T10072] syz_tun: entered promiscuous mode
[  130.785852][T10074] __nla_validate_parse: 17 callbacks suppressed
[  130.785867][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'.
[  130.959415][T10079] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  131.116871][T10083] batadv_slave_0: entered promiscuous mode
[  131.202095][T10082] batadv_slave_0: left promiscuous mode
[  131.433700][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'.
[  131.459986][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1264'.
[  131.465723][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'.
[  131.695763][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1267'.
[  131.718778][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1267'.
[  131.748069][T10115] x_tables: duplicate underflow at hook 2
[  131.880033][T10126] unsupported nlmsg_type 40
[  131.924399][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1272'.
[  131.990240][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1274'.
[  132.126523][T10139] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1275'.
[  132.161811][T10145] 8021q: VLANs not supported on lo
[  132.191007][T10142] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.1277'.
[  132.283333][T10154] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  132.377260][T10159] syzkaller1: entered promiscuous mode
[  132.379328][T10159] syzkaller1: entered allmulticast mode
[  132.432775][T10163] ipvlan0: entered promiscuous mode
[  132.465746][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.467617][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.787501][T10171] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  133.029139][T10181] netlink: 'syz.1.1292': attribute type 4 has an invalid length.
[  133.040546][ T5890] lo speed is unknown, defaulting to 1000
[  133.042455][ T5890] syz2: Port: 1 Link DOWN
[  133.045349][T10181] netlink: 'syz.1.1292': attribute type 4 has an invalid length.
[  133.052938][ T5890] lo speed is unknown, defaulting to 1000
[  133.055608][ T5890] syz2: Port: 1 Link ACTIVE
[  133.123038][T10184] netlink: 'syz.0.1291': attribute type 4 has an invalid length.
[  133.178043][T10186] netlink: 'syz.0.1291': attribute type 4 has an invalid length.
[  133.202972][T10185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.205942][T10185] IPv6: NLM_F_CREATE should be set when creating new route
[  133.208858][T10185] IPv6: NLM_F_CREATE should be set when creating new route
[  134.119312][T10210] lo speed is unknown, defaulting to 1000
[  134.489350][T10216] x_tables: duplicate underflow at hook 1
[  134.506092][T10210] lo speed is unknown, defaulting to 1000
[  134.693056][T10228] netlink: 'syz.1.1310': attribute type 13 has an invalid length.
[  134.704005][T10228] netlink: 'syz.1.1310': attribute type 17 has an invalid length.
[  134.843250][T10228] bridge0: port 1(syz_tun) entered blocking state
[  134.845881][T10228] bridge0: port 1(syz_tun) entered forwarding state
[  134.861794][T10228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.942599][T10230] lo speed is unknown, defaulting to 1000
[  135.212327][T10230] lo speed is unknown, defaulting to 1000
[  135.565494][T10270] x_tables: duplicate entry at hook 1
[  135.763539][T10281] nbd: couldn't find device at index 536870912
[  136.492715][T10315] __nla_validate_parse: 30 callbacks suppressed
[  136.492735][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1339'.
[  136.498591][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'.
[  136.648670][T10327] netlink: 'syz.0.1341': attribute type 4 has an invalid length.
[  136.659149][T10327] netlink: 'syz.0.1341': attribute type 4 has an invalid length.
[  136.672305][T10327] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  136.734875][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'.
[  136.791915][T10329] netlink: 'syz.0.1342': attribute type 11 has an invalid length.
[  137.039130][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'.
[  137.079285][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'.
[  137.249113][T10352] netlink: 'syz.2.1348': attribute type 4 has an invalid length.
[  137.275060][ T5890] lo speed is unknown, defaulting to 1000
[  137.280018][ T5890] syz0: Port: 1 Link ACTIVE
[  137.289575][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1348'.
[  137.309056][ T5890] lo speed is unknown, defaulting to 1000
[  137.326463][T10362] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1350'.
[  137.329985][T10362] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1350'.
[  137.352708][T10362] xt_ecn: cannot match TCP bits for non-tcp packets
[  137.357797][T10364] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  137.371851][T10362] sctp: [Deprecated]: syz.1.1350 (pid 10362) Use of int in maxseg socket option.
[  137.371851][T10362] Use struct sctp_assoc_value instead
[  137.423792][T10368] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1353'.
[  137.519190][T10381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1357'.
[  137.998429][T10408] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  138.278019][T10430] validate_nla: 6 callbacks suppressed
[  138.278035][T10430] netlink: 'syz.0.1374': attribute type 10 has an invalid length.
[  138.389654][T10430] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  138.466706][T10444] netlink: 'syz.0.1378': attribute type 4 has an invalid length.
[  138.474852][T10444] netlink: 'syz.0.1378': attribute type 4 has an invalid length.
[  138.519503][T10447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.523973][T10447] syzkaller0: entered promiscuous mode
[  138.526118][T10447] syzkaller0: entered allmulticast mode
[  138.563607][T10447] tipc: Resetting bearer <eth:syzkaller0>
[  138.570980][T10453] netlink: 'syz.2.1381': attribute type 1 has an invalid length.
[  138.597567][T10445] tipc: Resetting bearer <eth:syzkaller0>
[  138.618238][T10445] tipc: Disabling bearer <eth:syzkaller0>
[  138.645961][T10459] netlink: 'syz.2.1383': attribute type 4 has an invalid length.
[  138.656891][ T5296] lo speed is unknown, defaulting to 1000
[  138.658983][ T5296] syz0: Port: 1 Link DOWN
[  138.660341][ T5296] lo speed is unknown, defaulting to 1000
[  138.664379][T10459] netlink: 'syz.2.1383': attribute type 4 has an invalid length.
[  138.669902][ T5296] lo speed is unknown, defaulting to 1000
[  138.673368][ T5296] syz0: Port: 1 Link ACTIVE
[  138.674919][ T5296] lo speed is unknown, defaulting to 1000
[  138.693049][T10461] nft_compat: unsupported protocol 0
[  138.716947][T10465] netlink: 'syz.2.1386': attribute type 4 has an invalid length.
[  139.048118][T10484] netlink: 'syz.2.1391': attribute type 4 has an invalid length.
[  139.085175][T10486] netlink: 'syz.0.1392': attribute type 1 has an invalid length.
[  139.112793][T10486] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.139167][T10486] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.146638][T10486] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  139.152474][T10486] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  139.197504][T10492] veth3: entered promiscuous mode
[  139.638208][T10518] lo speed is unknown, defaulting to 1000
[  139.965071][T10518] lo speed is unknown, defaulting to 1000
[  140.717823][T10563] bridge: RTM_NEWNEIGH with invalid ether address
[  140.833764][T10575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.843454][T10577] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  140.854186][T10575] netlink: 'syz.0.1417': attribute type 5 has an invalid length.
[  141.003845][T10590] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  141.718369][T10609] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  141.781244][T10611] __nla_validate_parse: 35 callbacks suppressed
[  141.781256][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'.
[  141.828454][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'.
[  141.959137][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'.
[  141.963688][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'.
[  142.088852][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'.
[  142.089330][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'.
[  142.116976][T10633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1433'.
[  142.123897][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'.
[  142.123897][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'.
[  142.277870][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'.
[  142.793247][T10646] smc: net device bridge0 applied user defined pnetid SYZ1
[  142.955746][   T47] lo speed is unknown, defaulting to 1000
[  142.958064][   T47] syz0: Port: 1 Link DOWN
[  142.959911][   T47] lo speed is unknown, defaulting to 1000
[  142.966908][   T47] lo speed is unknown, defaulting to 1000
[  142.969400][   T47] syz0: Port: 1 Link ACTIVE
[  143.986236][   T47] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1
[  144.003808][   T47] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[  144.265935][T10712] validate_nla: 2 callbacks suppressed
[  144.265954][T10712] netlink: 'syz.0.1460': attribute type 4 has an invalid length.
[  144.277985][T10712] netlink: 'syz.0.1460': attribute type 4 has an invalid length.
[  144.435728][T10729] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  144.705643][T10741] gtp0: entered promiscuous mode
[  144.707361][T10741] gtp0: entered allmulticast mode
[  144.747315][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023baf800: rx timeout, send abort
[  145.247410][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880269c1000: rx timeout, send abort
[  145.250120][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023baf800: abort rx timeout. Force session deactivation
[  145.643772][T10788] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  145.644356][T10789] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  145.750084][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880269c1000: abort rx timeout. Force session deactivation
[  145.941481][ T5829] Bluetooth: hci2: link tx timeout
[  145.944526][ T5829] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  145.948189][ T5829] Bluetooth: hci2: link tx timeout
[  145.949780][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  146.264940][T10821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.567630][T10838] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  146.817093][T10856] __nla_validate_parse: 37 callbacks suppressed
[  146.817109][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'.
[  146.902488][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'.
[  147.186470][T10885] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  147.239833][T10883] netlink: 'syz.0.1506': attribute type 10 has an invalid length.
[  147.250893][T10883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'.
[  147.271545][T10883] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  147.273120][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'.
[  147.482162][T10896] syzkaller0: entered promiscuous mode
[  147.485091][T10896] syzkaller0: entered allmulticast mode
[  147.492118][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'.
[  147.496753][T10907] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  147.499126][T10907] netlink: 'syz.0.1509': attribute type 2 has an invalid length.
[  147.629185][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'.
[  147.636661][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'.
[  147.699818][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'.
[  147.764688][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'.
[  147.948428][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'.
[  148.005632][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  149.565175][T10951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.572798][T10952] syzkaller0: entered promiscuous mode
[  149.575452][T10952] syzkaller0: entered allmulticast mode
[  149.653318][T10953] tipc: Resetting bearer <eth:syzkaller0>
[  149.684794][T10961] xt_CT: No such helper "snmp"
[  149.685999][T10953] tipc: Disabling bearer <eth:syzkaller0>
[  149.807447][T10970] batadv1: entered promiscuous mode
[  149.809953][T10970] batadv1: entered allmulticast mode
[  149.896054][T10975] netlink: 'syz.0.1533': attribute type 2 has an invalid length.
[  150.050927][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  150.476734][T11016] netlink: 'syz.0.1548': attribute type 8 has an invalid length.
[  150.577277][T11015] netlink: 'syz.2.1545': attribute type 1 has an invalid length.
[  150.676479][T11032] ieee802154 phy0 wpan0: encryption failed: -22
[  150.753306][T11040] syzkaller1: entered promiscuous mode
[  150.755012][T11040] syzkaller1: entered allmulticast mode
[  150.825870][T11046] syzkaller1: left promiscuous mode
[  150.827953][T11046] syzkaller1: left allmulticast mode
[  151.641325][T11042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.814920][T11066] netlink: 'syz.2.1563': attribute type 2 has an invalid length.
[  151.829988][T11066] netlink: 'syz.2.1563': attribute type 1 has an invalid length.
[  151.845203][   T33] audit: type=1800 audit(1752309694.574:3): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1563" name="memory.events" dev="tmpfs" ino=2587 res=0 errno=0
[  151.865740][T11074] __nla_validate_parse: 21 callbacks suppressed
[  151.865756][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1564'.
[  151.874019][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1563'.
[  151.874580][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1561'.
[  151.932601][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'.
[  151.943870][T11080] vlan2: entered promiscuous mode
[  151.945567][T11080] bridge0: entered promiscuous mode
[  151.986832][T11077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1561'.
[  151.997605][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'.
[  152.086184][T11095] xt_cluster: node mask cannot exceed total number of nodes
[  152.123040][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'.
[  152.173175][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'.
[  152.194229][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'.
[  152.334017][T11117] netlink: 410 bytes leftover after parsing attributes in process `syz.1.1576'.
[  152.423855][T11126] netlink: 'syz.0.1581': attribute type 4 has an invalid length.
[  152.440182][T11126] netlink: 'syz.0.1581': attribute type 4 has an invalid length.
[  152.679858][T11144] netlink: 'syz.1.1587': attribute type 2 has an invalid length.
[  152.686005][T11145] netlink: 'syz.1.1587': attribute type 2 has an invalid length.
[  152.755490][T11153] netlink: 'syz.0.1590': attribute type 7 has an invalid length.
[  153.007904][T11178] @: renamed from veth0_vlan (while UP)
[  154.040323][T11245] xt_hashlimit: max too large, truncated to 1048576
[  154.048240][T11245] Cannot find add_set index 3 as target
[  154.427102][   T47] lo speed is unknown, defaulting to 1000
[  154.429032][   T47] syz1: Port: 1 Link DOWN
[  154.430811][   T47] lo speed is unknown, defaulting to 1000
[  154.434422][T11277] IPv6: NLM_F_REPLACE set, but no existing node found!
[  154.444052][T11277] xt_l2tp: invalid flags combination: 4
[  154.446034][T11280] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  154.454928][ T5891] lo speed is unknown, defaulting to 1000
[  154.456761][ T5891] syz1: Port: 1 Link ACTIVE
[  154.458392][   T47] lo speed is unknown, defaulting to 1000
[  154.524838][ T5296] lo speed is unknown, defaulting to 1000
[  154.526665][ T5296] syz1: Port: 1 Link DOWN
[  154.528184][ T5296] lo speed is unknown, defaulting to 1000
[  154.532885][ T5296] lo speed is unknown, defaulting to 1000
[  154.535556][ T5296] syz1: Port: 1 Link ACTIVE
[  154.536991][ T5296] lo speed is unknown, defaulting to 1000
[  154.562595][T11280] geneve2: entered promiscuous mode
[  154.668636][ T5891] lo speed is unknown, defaulting to 1000
[  154.672423][ T5891] syz1: Port: 1 Link DOWN
[  154.674189][ T5891] lo speed is unknown, defaulting to 1000
[  154.924552][T11327] validate_nla: 7 callbacks suppressed
[  154.924564][T11327] netlink: 'syz.2.1648': attribute type 2 has an invalid length.
[  155.319443][T11361] netlink: 'syz.1.1659': attribute type 4 has an invalid length.
[  155.334003][ T5296] lo speed is unknown, defaulting to 1000
[  155.335742][ T5296] syz2: Port: 1 Link DOWN
[  155.337682][T11361] netlink: 'syz.1.1659': attribute type 4 has an invalid length.
[  155.344946][ T5296] lo speed is unknown, defaulting to 1000
[  155.346666][ T5296] syz2: Port: 1 Link ACTIVE
[  155.394034][T11370] netlink: 'syz.1.1660': attribute type 4 has an invalid length.
[  155.404525][ T2208] lo speed is unknown, defaulting to 1000
[  155.406771][ T2208] syz2: Port: 1 Link DOWN
[  155.414078][T11370] netlink: 'syz.1.1660': attribute type 4 has an invalid length.
[  155.425566][ T5890] lo speed is unknown, defaulting to 1000
[  155.427315][ T5890] syz2: Port: 1 Link ACTIVE
[  155.458113][T11378] netlink: 'syz.1.1663': attribute type 4 has an invalid length.
[  155.460591][T11377] netlink: 'syz.1.1663': attribute type 4 has an invalid length.
[  155.493419][T11377] netlink: 'syz.1.1663': attribute type 4 has an invalid length.
[  155.508671][ T5296] lo speed is unknown, defaulting to 1000
[  155.511814][ T5296] lo speed is unknown, defaulting to 1000
[  155.756400][T11400] netlink: zone id is out of range
[  155.757971][T11400] netlink: zone id is out of range
[  155.762156][T11400] netlink: zone id is out of range
[  155.763719][T11400] netlink: zone id is out of range
[  155.765249][T11400] netlink: zone id is out of range
[  155.766774][T11400] netlink: zone id is out of range
[  155.768297][T11400] netlink: zone id is out of range
[  155.769843][T11400] netlink: zone id is out of range
[  155.775200][T11400] netlink: zone id is out of range
[  156.027397][T11430] netlink: 'syz.0.1676': attribute type 1 has an invalid length.
[  156.285118][T11439] netlink: 'syz.0.1679': attribute type 4 has an invalid length.
[  156.321418][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.887453][T11481] __nla_validate_parse: 50 callbacks suppressed
[  156.887470][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'.
[  156.930710][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'.
[  156.994551][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'.
[  157.130301][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'.
[  157.172275][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.491907][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1709'.
[  157.517064][T11537] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1709'.
[  158.238747][T11564] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1717'.
[  158.247650][T11564] 0X: renamed from caif0
[  158.252128][T11564] 0X: entered allmulticast mode
[  158.367054][T11567] xt_CT: You must specify a L4 protocol and not use inversions on it
[  158.467301][T11571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1720'.
[  158.507596][T11571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1720'.
[  158.639780][T11583] tipc: Enabled bearer <udp:sy{2>, priority 10
[  158.716729][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'.
[  160.283137][T11644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.291251][T11644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.348394][T11644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.608560][T11648] net_ratelimit: 14 callbacks suppressed
[  160.608573][T11648] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  160.947523][T11664] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  161.382823][T11670] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  161.594221][T11684] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  161.647204][T11686] lo speed is unknown, defaulting to 1000
[  161.765782][T11686] lo speed is unknown, defaulting to 1000
[  161.908262][T11691] bond0: (slave netdevsim0): Releasing backup interface
[  161.922854][ T2208] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.121182][ T2208] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.123751][T11703] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  162.237229][T11705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.240181][T11705] IPv6: NLM_F_CREATE should be set when creating new route
[  162.262403][T11705] __nla_validate_parse: 20 callbacks suppressed
[  162.262421][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1761'.
[  162.353554][T11712] veth1_to_hsr: entered allmulticast mode
[  162.372436][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'.
[  162.408786][T11712] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1763'.
[  162.423045][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1764'.
[  162.487734][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'.
[  162.615550][T11723] validate_nla: 4 callbacks suppressed
[  162.615571][T11723] netlink: 'syz.2.1767': attribute type 4 has an invalid length.
[  162.626161][ T2208] lo speed is unknown, defaulting to 1000
[  162.628443][ T2208] syz1: Port: 1 Link ACTIVE
[  162.632945][ T2208] lo speed is unknown, defaulting to 1000
[  162.673857][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'.
[  162.849960][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'.
[  162.919034][T11738] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1772'.
[  162.969404][T11743] sctp: [Deprecated]: syz.2.1773 (pid 11743) Use of int in max_burst socket option deprecated.
[  162.969404][T11743] Use struct sctp_assoc_value instead
[  163.052510][ T2208] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  163.151763][T11749] xt_CT: You must specify a L4 protocol and not use inversions on it
[  163.160176][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'.
[  163.195307][T11751] netlink: 'syz.0.1777': attribute type 2 has an invalid length.
[  163.322138][ T2208] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  163.352449][  T789] lo speed is unknown, defaulting to 1000
[  163.354951][  T789] syz1: Port: 1 Link DOWN
[  163.356661][  T789] lo speed is unknown, defaulting to 1000
[  163.406921][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'.
[  163.513949][T11777] vxcan1: tx address claim with different name
[  164.025688][T11811] netlink: 'syz.1.1795': attribute type 6 has an invalid length.
[  164.128384][T11816] netlink: 'syz.1.1796': attribute type 4 has an invalid length.
[  164.145283][T11816] netlink: 'syz.1.1796': attribute type 4 has an invalid length.
[  164.148517][ T2208] lo speed is unknown, defaulting to 1000
[  164.152775][ T2208] syz2: Port: 1 Link DOWN
[  164.158906][ T2208] lo speed is unknown, defaulting to 1000
[  164.161639][ T2208] syz2: Port: 1 Link ACTIVE
[  164.637846][T11854] netlink: 'syz.0.1804': attribute type 4 has an invalid length.
[  164.689397][T11856] netlink: 'syz.0.1804': attribute type 4 has an invalid length.
[  164.710554][T11846] netlink: 'syz.1.1802': attribute type 2 has an invalid length.
[  164.787410][T11861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.205184][T11903] netlink: 'syz.0.1819': attribute type 4 has an invalid length.
[  165.216187][T11903] netlink: 'syz.0.1819': attribute type 4 has an invalid length.
[  165.919218][T11946] syzkaller0: entered promiscuous mode
[  165.921481][T11946] syzkaller0: entered allmulticast mode
[  166.720367][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  167.521361][T11987] __nla_validate_parse: 31 callbacks suppressed
[  167.521390][T11987] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1841'.
[  167.551493][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1841'.
[  167.616669][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'.
[  167.686918][T11998] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  167.695140][T11998] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  167.702207][T12003] validate_nla: 2 callbacks suppressed
[  167.702222][T12003] netlink: 'syz.1.1846': attribute type 4 has an invalid length.
[  167.731714][T12001] netlink: 'syz.1.1846': attribute type 4 has an invalid length.
[  167.732265][  T789] lo speed is unknown, defaulting to 1000
[  167.737123][  T789] syz2: Port: 1 Link DOWN
[  167.748058][T12005] netlink: 'syz.2.1848': attribute type 9 has an invalid length.
[  167.766043][ T5891] lo speed is unknown, defaulting to 1000
[  167.768426][ T5891] syz2: Port: 1 Link ACTIVE
[  168.001446][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'.
[  168.078228][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'.
[  168.113623][T12039] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  168.155837][T12041] xt_TPROXY: Can be used only with -p tcp or -p udp
[  168.167137][T12043] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1858'.
[  168.249925][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'.
[  168.278095][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.368746][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'.
[  168.386159][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'.
[  168.407527][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'.
[  168.586969][ T5296] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  168.780896][ T5296] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  168.814012][T12074] lo speed is unknown, defaulting to 1000
[  168.972093][T12074] lo speed is unknown, defaulting to 1000
[  169.378434][T12095] netlink: 'syz.2.1875': attribute type 4 has an invalid length.
[  169.393620][T12095] netlink: 'syz.2.1875': attribute type 4 has an invalid length.
[  169.398066][ T5296] lo speed is unknown, defaulting to 1000
[  169.399942][ T5296] syz1: Port: 1 Link ACTIVE
[  169.403296][  T789] lo speed is unknown, defaulting to 1000
[  169.444646][T12101] netlink: 'syz.1.1876': attribute type 4 has an invalid length.
[  169.463320][ T5891] lo speed is unknown, defaulting to 1000
[  169.465616][ T5891] syz2: Port: 1 Link DOWN
[  169.474117][T12101] netlink: 'syz.1.1876': attribute type 4 has an invalid length.
[  169.479348][  T789] lo speed is unknown, defaulting to 1000
[  169.481692][  T789] syz2: Port: 1 Link ACTIVE
[  170.218049][T12140] netlink: 'syz.0.1890': attribute type 4 has an invalid length.
[  170.734759][T12168] netlink: 'syz.1.1898': attribute type 4 has an invalid length.
[  170.742326][T12168] netlink: 'syz.1.1898': attribute type 4 has an invalid length.
[  170.747557][ T2208] lo speed is unknown, defaulting to 1000
[  170.761167][ T5891] lo speed is unknown, defaulting to 1000
[  170.834698][  T789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.349558][T12206] ipvlan2: entered promiscuous mode
[  171.352968][T12206] bridge0: port 1(ipvlan2) entered blocking state
[  171.355570][T12206] bridge0: port 1(ipvlan2) entered disabled state
[  171.358323][T12206] ipvlan2: entered allmulticast mode
[  171.361028][T12206] bridge0: entered allmulticast mode
[  171.365344][T12206] ipvlan2: left allmulticast mode
[  171.367109][T12206] bridge0: left allmulticast mode
[  171.504591][T12209] xt_l2tp: invalid flags combination: 4
[  171.821729][ T5296] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  172.536375][T12249] @: renamed from bond_slave_0
[  172.593004][T12256] __nla_validate_parse: 22 callbacks suppressed
[  172.593018][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'.
[  172.624554][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'.
[  172.629186][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'.
[  172.774429][T12265] validate_nla: 5 callbacks suppressed
[  172.774448][T12265] netlink: 'syz.2.1929': attribute type 4 has an invalid length.
[  172.786863][ T5296] lo speed is unknown, defaulting to 1000
[  172.789273][ T5296] syz1: Port: 1 Link DOWN
[  172.792096][T12265] netlink: 'syz.2.1929': attribute type 4 has an invalid length.
[  172.795184][ T5296] lo speed is unknown, defaulting to 1000
[  172.800848][ T5296] lo speed is unknown, defaulting to 1000
[  172.803214][ T5296] syz1: Port: 1 Link ACTIVE
[  172.805308][ T5296] lo speed is unknown, defaulting to 1000
[  173.385056][T12274] netlink: 'syz.0.1933': attribute type 4 has an invalid length.
[  173.399254][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'.
[  173.402178][T12274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.405360][T12274] netlink: 'syz.0.1933': attribute type 4 has an invalid length.
[  173.415286][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'.
[  173.619548][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1937'.
[  173.624927][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'.
[  173.634744][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'.
[  173.758526][T12290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1940'.
[  173.768482][T12294] netlink: 'syz.1.1939': attribute type 4 has an invalid length.
[  173.781803][  T789] lo speed is unknown, defaulting to 1000
[  173.784335][  T789] syz2: Port: 1 Link DOWN
[  173.786309][T12294] netlink: 'syz.1.1939': attribute type 4 has an invalid length.
[  173.794615][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'.
[  173.795199][  T789] lo speed is unknown, defaulting to 1000
[  173.804832][  T789] syz2: Port: 1 Link ACTIVE
[  174.078950][T12314] netlink: 'syz.1.1945': attribute type 4 has an invalid length.
[  174.079460][T12315] netlink: 'syz.1.1945': attribute type 4 has an invalid length.
[  174.096972][  T789] lo speed is unknown, defaulting to 1000
[  174.098942][  T789] syz2: Port: 1 Link DOWN
[  174.110947][  T789] lo speed is unknown, defaulting to 1000
[  174.113388][  T789] syz2: Port: 1 Link ACTIVE
[  174.145434][T12321] netlink: 'syz.1.1948': attribute type 1 has an invalid length.
[  174.215173][T12325] xt_CT: You must specify a L4 protocol and not use inversions on it
[  174.274396][T12329] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  174.280734][T12329] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  174.345986][T12333] netlink: 'syz.1.1952': attribute type 1 has an invalid length.
[  175.236898][T12333] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  175.666579][T12374] lo speed is unknown, defaulting to 1000
[  175.843167][T12374] lo speed is unknown, defaulting to 1000
[  175.863370][T12395] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  176.394644][T12420] delete_channel: no stack
[  176.450946][   T54] Bluetooth: hci1: command 0x0401 tx timeout
[  177.664316][T12492] __nla_validate_parse: 38 callbacks suppressed
[  177.664329][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2009'.
[  177.672522][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'.
[  177.806740][   T33] audit: type=1800 audit(1752309720.534:4): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2012" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=3530 res=0 errno=0
[  177.820537][   T33] audit: type=1804 audit(1752309720.544:5): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2012" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=3530 res=1 errno=0
[  177.839294][T12505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2013'.
[  177.845616][T12505] validate_nla: 3 callbacks suppressed
[  177.845628][T12505] netlink: 'syz.1.2013': attribute type 1 has an invalid length.
[  177.849907][T12505] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2013'.
[  178.286430][T12530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2022'.
[  178.310056][T12530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2022'.
[  178.358093][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'.
[  178.382103][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'.
[  178.530834][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.557714][T12539] xt_CT: You must specify a L4 protocol and not use inversions on it
[  178.794744][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'.
[  178.900131][T12558] xt_policy: neither incoming nor outgoing policy selected
[  178.973412][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2033'.
[  179.199038][T12575] x_tables: duplicate underflow at hook 3
[  179.453987][T12602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.487984][T12608] xt_CT: You must specify a L4 protocol and not use inversions on it
[  180.396123][T12649] netlink: 'syz.1.2062': attribute type 2 has an invalid length.
[  180.476538][T12660] netlink: 'syz.2.2067': attribute type 4 has an invalid length.
[  180.484575][ T5891] lo speed is unknown, defaulting to 1000
[  180.486357][ T5891] syz1: Port: 1 Link DOWN
[  180.487720][ T5891] lo speed is unknown, defaulting to 1000
[  180.490165][T12660] netlink: 'syz.2.2067': attribute type 4 has an invalid length.
[  180.497048][ T5891] lo speed is unknown, defaulting to 1000
[  180.498809][ T5891] syz1: Port: 1 Link ACTIVE
[  180.501906][ T5891] lo speed is unknown, defaulting to 1000
[  180.596487][T12668] sctp: [Deprecated]: syz.2.2069 (pid 12668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  180.596487][T12668] Use struct sctp_sack_info instead
[  180.620745][ T5829] Bluetooth: hci1: command 0x0401 tx timeout
[  180.855483][T12692] netlink: 'syz.0.2075': attribute type 4 has an invalid length.
[  180.862633][T12692] netlink: 'syz.0.2075': attribute type 4 has an invalid length.
[  180.946478][T12696] xt_CT: You must specify a L4 protocol and not use inversions on it
[  181.209598][T12711] SET target dimension over the limit!
[  181.230082][T12711] netlink: 'syz.0.2079': attribute type 21 has an invalid length.
[  181.235862][T12711] netlink: 'syz.0.2079': attribute type 5 has an invalid length.
[  182.181060][T12770] netlink: 'syz.0.2094': attribute type 4 has an invalid length.
[  182.190295][T12770] netlink: 'syz.0.2094': attribute type 4 has an invalid length.
[  182.207370][T12770] x_tables: duplicate underflow at hook 1
[  182.687060][T12799] __nla_validate_parse: 42 callbacks suppressed
[  182.687074][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'.
[  182.742981][T12801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2104'.
[  182.748444][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'.
[  182.868992][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'.
[  182.883568][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'.
[  183.002728][T12819] lo speed is unknown, defaulting to 1000
[  183.152367][T12819] lo speed is unknown, defaulting to 1000
[  183.376787][T12824] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  183.380390][T12824] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  183.395702][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'.
[  183.701543][ T5890] lo speed is unknown, defaulting to 1000
[  183.703435][ T5890] syz1: Port: 1 Link DOWN
[  183.707423][ T5890] lo speed is unknown, defaulting to 1000
[  183.715925][T12836] ip6tnl3: entered promiscuous mode
[  183.723698][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2117'.
[  183.771316][T12846] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2118'.
[  183.774700][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'.
[  183.816456][T12851] netlink: 'syz.1.2120': attribute type 4 has an invalid length.
[  183.836911][ T5890] lo speed is unknown, defaulting to 1000
[  183.839363][T12851] netlink: 'syz.1.2120': attribute type 4 has an invalid length.
[  183.842504][ T5890] syz2: Port: 1 Link DOWN
[  183.847703][ T5890] lo speed is unknown, defaulting to 1000
[  183.850026][ T5890] syz2: Port: 1 Link ACTIVE
[  183.860221][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'.
[  183.864085][T12854] ieee802154 phy0 wpan0: encryption failed: -22
[  183.989866][T12864] netlink: 'syz.1.2124': attribute type 4 has an invalid length.
[  184.000894][ T2208] lo speed is unknown, defaulting to 1000
[  184.002994][ T2208] syz2: Port: 1 Link DOWN
[  184.005367][T12864] netlink: 'syz.1.2124': attribute type 4 has an invalid length.
[  184.011691][ T2208] lo speed is unknown, defaulting to 1000
[  184.014162][ T2208] syz2: Port: 1 Link ACTIVE
[  184.293655][ T5891] lo speed is unknown, defaulting to 1000
[  184.298386][ T5891] syz2: Port: 1 Link DOWN
[  184.302629][T12883] netlink: 'syz.1.2131': attribute type 4 has an invalid length.
[  184.307726][ T5891] lo speed is unknown, defaulting to 1000
[  184.309863][ T5891] syz2: Port: 1 Link ACTIVE
[  184.643224][T12900] ieee802154 phy0 wpan0: encryption failed: -22
[  184.674404][T12902] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  184.740132][T12905] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.848929][T12909] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  184.959921][T12911] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  185.349238][T12949] netlink: 'syz.2.2151': attribute type 4 has an invalid length.
[  185.370183][T12949] netlink: 'syz.2.2151': attribute type 4 has an invalid length.
[  185.384350][ T5890] lo speed is unknown, defaulting to 1000
[  185.386590][ T5890] syz1: Port: 1 Link ACTIVE
[  185.388387][ T5890] lo speed is unknown, defaulting to 1000
[  187.186065][T13057] netlink: 'syz.0.2182': attribute type 1 has an invalid length.
[  187.326400][T13064] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  187.329531][T13065] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  187.497021][T13073] netlink: 'syz.1.2187': attribute type 4 has an invalid length.
[  187.580384][T13076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.641190][T13079] "syz.1.2188" (13079) uses obsolete ecb(arc4) skcipher
[  187.786704][T13088] __nla_validate_parse: 26 callbacks suppressed
[  187.786723][T13088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2191'.
[  187.802500][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2191'.
[  187.869992][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'.
[  187.935206][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2192'.
[  187.939993][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'.
[  188.106978][T13096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.116159][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'.
[  188.268901][T13116] lo speed is unknown, defaulting to 1000
[  188.371313][T13123] openvswitch: netlink: IPv4 tunnel dst address is zero
[  188.427523][T13116] lo speed is unknown, defaulting to 1000
[  188.433546][T13127] xt_CT: You must specify a L4 protocol and not use inversions on it
[  188.654515][T13149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2208'.
[  188.688320][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'.
[  189.147407][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'.
[  189.324719][T13166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2215'.
[  189.736017][T13192] netlink: 'syz.1.2222': attribute type 32 has an invalid length.
[  189.739321][T13192] (unnamed net_device) (uninitialized): option coupled_control: invalid value (249)
[  190.264489][T13221] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  190.267457][T13221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  190.524804][T13226] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  190.700574][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  190.873228][T13228] xt_TCPMSS: Only works on TCP SYN packets
[  191.513401][T13275] netlink: 'syz.0.2254': attribute type 4 has an invalid length.
[  191.521802][T13275] netlink: 'syz.0.2254': attribute type 4 has an invalid length.
[  191.549357][T13275] pim6reg1: entered promiscuous mode
[  191.552782][T13275] pim6reg1: entered allmulticast mode
[  191.775226][T13288] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  192.470296][T13332] netlink: 'syz.1.2273': attribute type 1 has an invalid length.
[  192.910238][T13344] __nla_validate_parse: 29 callbacks suppressed
[  192.910251][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2278'.
[  192.922877][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'.
[  193.321345][T13363] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  193.559845][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'.
[  193.600185][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'.
[  193.847057][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2283'.
[  193.898493][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.922892][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'.
[  193.955908][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'.
[  194.123666][T13400] netlink: 'syz.1.2294': attribute type 4 has an invalid length.
[  194.131106][ T5890] lo speed is unknown, defaulting to 1000
[  194.132981][ T5890] syz2: Port: 1 Link DOWN
[  194.134566][T13400] netlink: 'syz.1.2294': attribute type 4 has an invalid length.
[  194.143437][ T5890] lo speed is unknown, defaulting to 1000
[  194.145633][ T5890] syz2: Port: 1 Link ACTIVE
[  194.263028][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2296'.
[  194.266562][T13407] netlink: 'syz.1.2297': attribute type 4 has an invalid length.
[  194.267229][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2296'.
[  194.275756][T13407] netlink: 'syz.1.2297': attribute type 4 has an invalid length.
[  194.280078][  T789] lo speed is unknown, defaulting to 1000
[  194.283141][  T789] syz2: Port: 1 Link DOWN
[  194.288018][  T789] lo speed is unknown, defaulting to 1000
[  194.290282][  T789] syz2: Port: 1 Link ACTIVE
[  194.370839][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  194.510994][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'.
[  194.747833][T13430] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  194.794585][T13430] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  195.194419][T13438] netlink: 'syz.0.2310': attribute type 4 has an invalid length.
[  195.198150][T13439] netlink: 'syz.0.2310': attribute type 4 has an invalid length.
[  195.295501][T13445] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  195.426351][T13455] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  195.450826][T13460] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  195.654214][T13476] netlink: 'syz.2.2325': attribute type 4 has an invalid length.
[  195.666736][  T789] lo speed is unknown, defaulting to 1000
[  195.673575][  T789] syz1: Port: 1 Link DOWN
[  195.676054][  T789] lo speed is unknown, defaulting to 1000
[  195.678819][T13476] netlink: 'syz.2.2325': attribute type 4 has an invalid length.
[  195.694249][  T789] lo speed is unknown, defaulting to 1000
[  195.702556][  T789] syz1: Port: 1 Link ACTIVE
[  195.706630][  T789] lo speed is unknown, defaulting to 1000
[  196.088521][T13498] netlink: 'syz.0.2333': attribute type 4 has an invalid length.
[  196.095510][T13498] netlink: 'syz.0.2333': attribute type 4 has an invalid length.
[  196.689538][T13514] netlink: 'syz.1.2339': attribute type 4 has an invalid length.
[  196.699224][  T789] lo speed is unknown, defaulting to 1000
[  196.706553][  T789] syz2: Port: 1 Link DOWN
[  196.708027][T13514] netlink: 'syz.1.2339': attribute type 4 has an invalid length.
[  196.712986][  T789] lo speed is unknown, defaulting to 1000
[  196.714773][  T789] syz2: Port: 1 Link ACTIVE
[  197.005267][T13530] netlink: 'syz.1.2345': attribute type 1 has an invalid length.
[  197.114336][T13536] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  197.274975][T13546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.282472][T13544] xt_CT: You must specify a L4 protocol and not use inversions on it
[  197.929184][T13572] __nla_validate_parse: 27 callbacks suppressed
[  197.929196][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'.
[  197.964735][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'.
[  197.988649][T13574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.139269][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'.
[  198.142526][T13589] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  198.151842][T13589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.161469][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'.
[  198.225850][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'.
[  198.304853][T13600] netlink: 'syz.0.2371': attribute type 4 has an invalid length.
[  198.455607][T13617] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2376'.
[  198.546830][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'.
[  198.641974][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'.
[  198.753587][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'.
[  198.932767][ T2208] lo speed is unknown, defaulting to 1000
[  198.934877][ T2208] syz2: Port: 1 Link DOWN
[  198.939918][ T2208] lo speed is unknown, defaulting to 1000
[  198.943426][ T2208] syz2: Port: 1 Link ACTIVE
[  199.152602][T13652] lo speed is unknown, defaulting to 1000
[  199.304276][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  199.430679][T13652] lo speed is unknown, defaulting to 1000
[  199.843284][T13684] tipc: Bearer <eth:vxcan1>: already 2 bearers with priority 10
[  199.845765][T13684] tipc: Bearer <eth:vxcan1>: trying with adjusted priority
[  199.848119][T13684] vxcan1: MTU too low for tipc bearer
[  199.870625][T13684] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  199.994564][T13694] xt_CT: You must specify a L4 protocol and not use inversions on it
[  200.392884][T13734] validate_nla: 5 callbacks suppressed
[  200.392903][T13734] netlink: 'syz.0.2414': attribute type 4 has an invalid length.
[  200.393020][T13733] netlink: 'syz.0.2414': attribute type 4 has an invalid length.
[  201.641319][T13810] dummy0: entered allmulticast mode
[  201.846161][T13836] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  201.978691][T13846] netlink: 'syz.2.2448': attribute type 13 has an invalid length.
[  202.418960][T13880] netlink: 'syz.0.2457': attribute type 4 has an invalid length.
[  202.422325][T13880] netlink: 'syz.0.2457': attribute type 4 has an invalid length.
[  202.512626][T13884] netlink: 'syz.1.2459': attribute type 1 has an invalid length.
[  202.742960][T13900] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.747865][T13900] xt_CT: You must specify a L4 protocol and not use inversions on it
[  202.936136][T13916] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  203.048227][T13924] __nla_validate_parse: 48 callbacks suppressed
[  203.048243][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2475'.
[  203.114000][T13933] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  203.117526][T13933] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  203.124149][T13926] bond0: (slave bond4): Releasing backup interface
[  203.227404][T13942] netlink: 'syz.2.2480': attribute type 4 has an invalid length.
[  203.235303][  T789] lo speed is unknown, defaulting to 1000
[  203.237151][  T789] syz1: Port: 1 Link DOWN
[  203.241027][  T789] lo speed is unknown, defaulting to 1000
[  203.245212][T13942] netlink: 'syz.2.2480': attribute type 4 has an invalid length.
[  203.254977][  T789] lo speed is unknown, defaulting to 1000
[  203.260544][  T789] syz1: Port: 1 Link ACTIVE
[  203.496085][   T27] wlan0: Trigger new scan to find an IBSS to join
[  203.696358][T13963] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  203.869597][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2490'.
[  203.877702][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2490'.
[  204.024379][T13983] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2493'.
[  204.097027][T13985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2494'.
[  204.100149][T13985] netlink: 'syz.2.2494': attribute type 1 has an invalid length.
[  204.106598][T13985] xt_l2tp: wrong L2TP version: 0
[  204.413059][T14003] netlink: 'syz.2.2503': attribute type 4 has an invalid length.
[  204.423781][  T789] lo speed is unknown, defaulting to 1000
[  204.425824][  T789] syz1: Port: 1 Link DOWN
[  204.432136][  T789] lo speed is unknown, defaulting to 1000
[  204.434628][ T5890] lo speed is unknown, defaulting to 1000
[  204.436719][  T789] syz1: Port: 1 Link ACTIVE
[  204.489159][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'.
[  204.544975][T14010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2506'.
[  204.654075][T14017] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  204.717884][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'.
[  204.829328][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'.
[  205.078066][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'.
[  205.189355][T14046] ieee802154 phy0 wpan0: encryption failed: -90
[  205.497162][T14072] validate_nla: 3 callbacks suppressed
[  205.497181][T14072] netlink: 'syz.2.2521': attribute type 4 has an invalid length.
[  205.508409][ T5296] lo speed is unknown, defaulting to 1000
[  205.510382][ T5296] syz1: Port: 1 Link DOWN
[  205.512538][ T5296] lo speed is unknown, defaulting to 1000
[  205.514444][T14072] netlink: 'syz.2.2521': attribute type 4 has an invalid length.
[  205.519080][ T5296] lo speed is unknown, defaulting to 1000
[  205.523965][ T5296] syz1: Port: 1 Link ACTIVE
[  205.525856][ T5296] lo speed is unknown, defaulting to 1000
[  205.704487][T14090] netlink: 'syz.2.2525': attribute type 1 has an invalid length.
[  205.725286][T14090] 8021q: adding VLAN 0 to HW filter on device bond5
[  206.452108][ T1957] wlan0: Trigger new scan to find an IBSS to join
[  206.903748][T14192] lo speed is unknown, defaulting to 1000
[  207.056318][T14192] lo speed is unknown, defaulting to 1000
[  207.132099][  T789] IPVS: starting estimator thread 0...
[  207.171748][T14192] netlink: 'syz.0.2544': attribute type 4 has an invalid length.
[  207.175407][T14192] netlink: 'syz.0.2544': attribute type 4 has an invalid length.
[  207.231529][T14204] IPVS: using max 62 ests per chain, 148800 per kthread
[  207.663092][T14228] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  207.671820][   T13] IPVS: stop unused estimator thread 0...
[  208.534081][T14246] __nla_validate_parse: 16 callbacks suppressed
[  208.534103][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'.
[  208.645774][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2562'.
[  208.883001][T14259] netlink: zone id is out of range
[  208.919714][T14265] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2569'.
[  209.115711][T14286] netlink: 'syz.1.2579': attribute type 4 has an invalid length.
[  209.123694][  T789] lo speed is unknown, defaulting to 1000
[  209.125758][  T789] syz2: Port: 1 Link DOWN
[  209.127854][T14286] netlink: 'syz.1.2579': attribute type 4 has an invalid length.
[  209.144012][  T789] lo speed is unknown, defaulting to 1000
[  209.144506][T14284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2578'.
[  209.148754][  T789] syz2: Port: 1 Link ACTIVE
[  209.181877][T14284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2578'.
[  209.193328][T14291] netlink: 'syz.1.2581': attribute type 4 has an invalid length.
[  209.207068][   T47] lo speed is unknown, defaulting to 1000
[  209.208860][   T47] syz2: Port: 1 Link DOWN
[  209.220661][T14291] netlink: 'syz.1.2581': attribute type 4 has an invalid length.
[  209.236338][ T5296] lo speed is unknown, defaulting to 1000
[  209.238263][ T5296] syz2: Port: 1 Link ACTIVE
[  209.346637][T14309] netlink: 'syz.2.2588': attribute type 2 has an invalid length.
[  209.352126][T14311] xt_socket: unknown flags 0x8
[  209.382892][T14317] sctp: [Deprecated]: syz.1.2589 (pid 14317) Use of int in max_burst socket option.
[  209.382892][T14317] Use struct sctp_assoc_value instead
[  209.492425][ T1088] wlan0: Trigger new scan to find an IBSS to join
[  209.564312][T14329] xt_CT: You must specify a L4 protocol and not use inversions on it
[  209.682055][T14333] netlink: 'syz.2.2596': attribute type 11 has an invalid length.
[  209.684727][T14333] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2596'.
[  210.233034][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  210.391625][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.412167][T14347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2600'.
[  210.538924][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'.
[  210.541873][T14351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2603'.
[  210.553592][T14351] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  210.690126][T14358] validate_nla: 3 callbacks suppressed
[  210.690150][T14358] netlink: 'syz.1.2605': attribute type 2 has an invalid length.
[  210.713302][T14358] k*]: entered promiscuous mode
[  211.143895][T14379] netlink: 'syz.1.2616': attribute type 4 has an invalid length.
[  211.267257][T14394] netlink: 'syz.1.2620': attribute type 1 has an invalid length.
[  211.344223][T14400] netlink: 'syz.2.2621': attribute type 4 has an invalid length.
[  211.362380][  T789] lo speed is unknown, defaulting to 1000
[  211.368791][  T789] syz1: Port: 1 Link DOWN
[  211.370387][T14400] netlink: 'syz.2.2621': attribute type 4 has an invalid length.
[  211.373741][T14403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.379197][  T789] lo speed is unknown, defaulting to 1000
[  211.387249][ T5296] lo speed is unknown, defaulting to 1000
[  211.389317][ T5296] syz1: Port: 1 Link ACTIVE
[  211.392862][T14403] netlink: 'syz.0.2622': attribute type 4 has an invalid length.
[  211.404171][T14403] netlink: 'syz.0.2622': attribute type 4 has an invalid length.
[  211.578907][T14419] xt_CT: You must specify a L4 protocol and not use inversions on it
[  211.651624][T14432] netlink: 'syz.1.2631': attribute type 4 has an invalid length.
[  212.226052][T14486] sctp: [Deprecated]: syz.1.2648 (pid 14486) Use of int in max_burst socket option.
[  212.226052][T14486] Use struct sctp_assoc_value instead
[  212.449276][T14502] xt_CT: No such helper "snmp_trap"
[  212.665421][T14522] syz_tun: left allmulticast mode
[  212.667316][T14522] syz_tun: left promiscuous mode
[  212.668981][T14522] bridge0: port 1(syz_tun) entered disabled state
[  212.893946][T14539] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  212.949628][T14543] Unsupported ieee802154 address type: 0
[  213.133855][T14566] netlink: 'syz.2.2675': attribute type 1 has an invalid length.
[  213.149907][T14566] IPVS: Error connecting to the multicast addr
[  213.170308][T14566] netlink: 'syz.2.2675': attribute type 1 has an invalid length.
[  213.578763][T14594] __nla_validate_parse: 23 callbacks suppressed
[  213.578778][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2685'.
[  213.641783][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'.
[  213.655008][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'.
[  213.743113][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'.
[  213.774086][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'.
[  213.865151][T14610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'.
[  213.878493][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'.
[  213.882187][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'.
[  214.170400][   T47] lo speed is unknown, defaulting to 1000
[  214.170850][T14629] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  214.172583][   T47] syz1: Port: 1 Link DOWN
[  214.178681][   T47] lo speed is unknown, defaulting to 1000
[  214.189225][T14626] wg1: entered promiscuous mode
[  214.193475][T14626] wg1: entered allmulticast mode
[  214.197868][   T47] lo speed is unknown, defaulting to 1000
[  214.200042][   T47] syz1: Port: 1 Link ACTIVE
[  214.253913][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'.
[  214.335868][T14641] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.340720][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2701'.
[  214.354375][T14641] ipvlan2: entered allmulticast mode
[  214.356526][T14641] bond4: entered allmulticast mode
[  214.366107][T14644] lo speed is unknown, defaulting to 1000
[  214.403478][T14641] bond4: (slave gretap1): making interface the new active one
[  214.428634][T14641] gretap1: entered allmulticast mode
[  214.439065][T14641] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  214.503518][T14641] syz.0.2702 (14641) used greatest stack depth: 18992 bytes left
[  214.638968][T14644] lo speed is unknown, defaulting to 1000
[  214.718741][T14660] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  215.128569][T14678] 8021q: VLANs not supported on ip6gre0
[  215.144214][T14678] Cannot find map_set index 0 as target
[  215.207387][T14687] Unsupported ieee802154 address type: 0
[  215.229056][T14690] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.336386][T14696] syz_tun: entered allmulticast mode
[  215.349251][T14696] syz_tun: left allmulticast mode
[  215.514059][T14714] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.873931][T14749] validate_nla: 6 callbacks suppressed
[  215.874014][T14749] netlink: 'syz.1.2741': attribute type 4 has an invalid length.
[  215.886874][ T5296] lo speed is unknown, defaulting to 1000
[  215.888750][ T5296] syz2: Port: 1 Link DOWN
[  215.893447][T14749] netlink: 'syz.1.2741': attribute type 4 has an invalid length.
[  215.902222][ T5296] lo speed is unknown, defaulting to 1000
[  215.904170][ T5296] syz2: Port: 1 Link ACTIVE
[  215.980039][T14752] vlan3: entered promiscuous mode
[  215.982143][T14752] bond0: entered promiscuous mode
[  215.983933][T14752] vlan3: entered allmulticast mode
[  215.990509][T14752] bond0: entered allmulticast mode
[  216.777150][T14817] netlink: 'syz.0.2765': attribute type 21 has an invalid length.
[  217.099639][T14843] xt_CT: You must specify a L4 protocol and not use inversions on it
[  217.154186][T14848] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[  217.337017][T14873] bridge_slave_0: entered allmulticast mode
[  217.349289][T14871] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  217.349314][T14877] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  217.366310][T14871] 8021q: adding VLAN 0 to HW filter on device bond6
[  217.543386][T11833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.546507][T11833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.571984][    C1] ------------[ cut here ]------------
[  217.574245][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  217.578827][    C1] WARNING: CPU: 1 PID: 14886 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  217.582833][    C1] Modules linked in:
[  217.584564][    C1] CPU: 1 UID: 0 PID: 14886 Comm: syz.1.2790 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  217.590150][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.594030][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  217.596442][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 c2 c2 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  217.604062][    C1] RSP: 0018:ffffc900001e07f8 EFLAGS: 00010246
[  217.606481][    C1] RAX: f12d76e251064e00 RBX: 000000000000000c RCX: ffff8880396fd640
[  217.609643][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  217.612869][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  217.616006][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88810c399b28
[  217.617276][T14887] netlink: 'syz.1.2790': attribute type 4 has an invalid length.
[  217.619052][    C1] R13: 0000000000000000 R14: ffff88810a220e40 R15: ffff88810a2230d8
[  217.619068][    C1] FS:  00007fafbb2886c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  217.619082][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.619094][    C1] CR2: 0000000000000000 CR3: 00000000288e6000 CR4: 00000000000006f0
[  217.619127][    C1] Call Trace:
[  217.619137][    C1]  <IRQ>
[  217.636778][    C1]  rate_control_send_low+0x194/0x7a0
[  217.638783][    C1]  rate_control_get_rate+0x20b/0x5d0
[  217.640946][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  217.643245][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  217.645723][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  217.647790][    C1]  ? netif_receive_skb_list_internal+0xa4f/0xcc0
[  217.650235][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  217.652532][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  217.654643][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  217.656781][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  217.658860][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  217.661029][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  217.663081][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  217.665394][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  217.667518][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  217.669028][T14888] netlink: 'syz.1.2790': attribute type 4 has an invalid length.
[  217.670327][    C1]  __iterate_interfaces+0x2ab/0x590
[  217.670357][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  217.670376][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  217.670399][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  217.670416][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  217.670516][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  217.670540][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  217.670559][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  217.670598][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  217.694764][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  217.696800][    C1]  handle_softirqs+0x286/0x870
[  217.698649][    C1]  ? do_softirq+0xec/0x180
[  217.700360][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  217.702427][    C1]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  217.704537][    C1]  do_softirq+0xec/0x180
[  217.706160][    C1]  </IRQ>
[  217.707328][    C1]  <TASK>
[  217.708544][    C1]  ? __pfx_do_softirq+0x10/0x10
[  217.710554][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  217.713034][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  217.715089][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  217.717149][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  217.719397][    C1]  ? rcu_is_watching+0x15/0xb0
[  217.721372][    C1]  ? netif_receive_skb_list+0xc0/0x450
[  217.723526][    C1]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  217.725729][    C1]  bpf_test_run_xdp_live+0x1868/0x1b10
[  217.727894][    C1]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  217.730050][    C1]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  217.732390][    C1]  ? 0xffffffffa0003b00
[  217.734052][    C1]  ? 0xffffffffa0003b00
[  217.735744][    C1]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  217.738069][    C1]  ? _copy_from_user+0x94/0xb0
[  217.739987][    C1]  ? bpf_test_init+0x133/0x170
[  217.741901][    C1]  ? xdp_convert_md_to_buff+0x5b/0x330
[  217.744011][    C1]  bpf_prog_test_run_xdp+0x713/0x1000
[  217.746147][    C1]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  217.748448][    C1]  ? __fget_files+0x2a/0x420
[  217.750308][    C1]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  217.752746][    C1]  bpf_prog_test_run+0x2c7/0x340
[  217.754736][    C1]  __sys_bpf+0x4a4/0x860
[  217.756395][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  217.758239][    C1]  ? ksys_write+0x11e/0x250
[  217.760063][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  217.762252][    C1]  ? __pfx_ksys_write+0x10/0x10
[  217.764292][    C1]  __x64_sys_bpf+0x7c/0x90
[  217.766104][    C1]  do_syscall_64+0xfa/0x3b0
[  217.767961][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.770314][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  217.772792][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.775031][    C1] RIP: 0033:0x7fafba38e929
[  217.776814][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.784411][    C1] RSP: 002b:00007fafbb288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  217.787692][    C1] RAX: ffffffffffffffda RBX: 00007fafba5b5fa0 RCX: 00007fafba38e929
[  217.790903][    C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  217.793983][    C1] RBP: 00007fafba410b39 R08: 0000000000000000 R09: 0000000000000000
[  217.797030][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.800124][    C1] R13: 0000000000000000 R14: 00007fafba5b5fa0 R15: 00007fff5a3e6818
[  217.803275][    C1]  </TASK>
[  217.804539][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  217.807408][    C1] CPU: 1 UID: 0 PID: 14886 Comm: syz.1.2790 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  217.812183][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.816107][    C1] Call Trace:
[  217.817423][    C1]  <IRQ>
[  217.818541][    C1]  dump_stack_lvl+0x99/0x250
[  217.820413][    C1]  ? __asan_memcpy+0x40/0x70
[  217.822275][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.824352][    C1]  ? __pfx__printk+0x10/0x10
[  217.826209][    C1]  panic+0x2db/0x790
[  217.827792][    C1]  ? __pfx_panic+0x10/0x10
[  217.829559][    C1]  __warn+0x31b/0x4b0
[  217.831120][    C1]  ? __rate_control_send_low+0x5df/0x820
[  217.833286][    C1]  ? __rate_control_send_low+0x5df/0x820
[  217.835462][    C1]  report_bug+0x2be/0x4f0
[  217.837129][    C1]  ? __rate_control_send_low+0x5df/0x820
[  217.839261][    C1]  ? __rate_control_send_low+0x5df/0x820
[  217.841577][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  217.843826][    C1]  handle_bug+0x84/0x160
[  217.845427][    C1]  exc_invalid_op+0x1a/0x50
[  217.847209][    C1]  asm_exc_invalid_op+0x1a/0x20
[  217.849104][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  217.851519][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 c2 c2 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  217.858933][    C1] RSP: 0018:ffffc900001e07f8 EFLAGS: 00010246
[  217.861310][    C1] RAX: f12d76e251064e00 RBX: 000000000000000c RCX: ffff8880396fd640
[  217.864329][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  217.867414][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  217.870526][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88810c399b28
[  217.873512][    C1] R13: 0000000000000000 R14: ffff88810a220e40 R15: ffff88810a2230d8
[  217.876634][    C1]  ? __rate_control_send_low+0x5de/0x820
[  217.878897][    C1]  rate_control_send_low+0x194/0x7a0
[  217.880993][    C1]  rate_control_get_rate+0x20b/0x5d0
[  217.883090][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  217.885357][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  217.887878][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  217.890074][    C1]  ? netif_receive_skb_list_internal+0xa4f/0xcc0
[  217.892558][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  217.894773][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  217.896947][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  217.899110][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  217.901275][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  217.903476][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  217.905619][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  217.908037][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  217.910216][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  217.913043][    C1]  __iterate_interfaces+0x2ab/0x590
[  217.915004][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  217.917289][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  217.920109][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  217.922478][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  217.925232][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  217.927287][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  217.929579][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  217.931687][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  217.933954][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  217.935985][    C1]  handle_softirqs+0x286/0x870
[  217.937830][    C1]  ? do_softirq+0xec/0x180
[  217.939579][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  217.941698][    C1]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  217.943883][    C1]  do_softirq+0xec/0x180
[  217.945547][    C1]  </IRQ>
[  217.946728][    C1]  <TASK>
[  217.947842][    C1]  ? __pfx_do_softirq+0x10/0x10
[  217.949720][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  217.952339][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  217.954424][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  217.956462][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  217.958713][    C1]  ? rcu_is_watching+0x15/0xb0
[  217.960523][    C1]  ? netif_receive_skb_list+0xc0/0x450
[  217.962597][    C1]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  217.964747][    C1]  bpf_test_run_xdp_live+0x1868/0x1b10
[  217.966904][    C1]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  217.969083][    C1]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  217.971382][    C1]  ? 0xffffffffa0003b00
[  217.973047][    C1]  ? 0xffffffffa0003b00
[  217.974723][    C1]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  217.977071][    C1]  ? _copy_from_user+0x94/0xb0
[  217.978881][    C1]  ? bpf_test_init+0x133/0x170
[  217.980738][    C1]  ? xdp_convert_md_to_buff+0x5b/0x330
[  217.982891][    C1]  bpf_prog_test_run_xdp+0x713/0x1000
[  217.985035][    C1]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  217.987275][    C1]  ? __fget_files+0x2a/0x420
[  217.989120][    C1]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  217.991420][    C1]  bpf_prog_test_run+0x2c7/0x340
[  217.993332][    C1]  __sys_bpf+0x4a4/0x860
[  217.995042][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  217.996985][    C1]  ? ksys_write+0x11e/0x250
[  217.998916][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  218.000595][    C1]  ? __pfx_ksys_write+0x10/0x10
[  218.002174][    C1]  __x64_sys_bpf+0x7c/0x90
[  218.003702][    C1]  do_syscall_64+0xfa/0x3b0
[  218.005182][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.007149][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.009142][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.011021][    C1] RIP: 0033:0x7fafba38e929
[  218.012430][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.018618][    C1] RSP: 002b:00007fafbb288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  218.021285][    C1] RAX: ffffffffffffffda RBX: 00007fafba5b5fa0 RCX: 00007fafba38e929
[  218.023786][    C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  218.026287][    C1] RBP: 00007fafba410b39 R08: 0000000000000000 R09: 0000000000000000
[  218.028869][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.031535][    C1] R13: 0000000000000000 R14: 00007fafba5b5fa0 R15: 00007fff5a3e6818
[  218.033991][    C1]  </TASK>
[  218.035543][    C1] Kernel Offset: disabled
[  218.036858][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:42:40  Registers:
info registers vcpu 0

CPU#0
RAX=a7eb399418868c00 RBX=ffffffff81976c78 RCX=a7eb399418868c00 RDX=0000000000000001
RSI=ffffffff8d998b3a RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c39beca CR3=000000003f69c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=000a000800120004 8002000800007061 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=096cffc14d3ee096 9dc1bd188aaa1d01
XMM06=2968d52b148679d5 d428e5d033993ba0 XMM07=5582b591009642b2 e6f8f256ee8fc4bc
XMM08=2fdeb51e87ca882a 2cf4264aa759111e XMM09=0000000000000000 00007f9d01011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dff90
R8 =ffff888108880237 R9 =1ffff11021110046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98af R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fafbb2886c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000288e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffff000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=ffffffffffffffff ffffff0000000000 XMM05=00007fafba585458 00007fafba5854a0
XMM06=00007fafba585498 00007fafba585490 XMM07=00007fafba585488 00007fafba585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fafba411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
