last executing test programs:

1.650712669s ago: executing program 0 (id=2847):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_opts(r0, 0x0, 0x12, 0x0, 0x0)

1.588725717s ago: executing program 0 (id=2848):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7d}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004845}, 0x0)

1.588612372s ago: executing program 0 (id=2849):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_dellink={0x24, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r2, 0x3000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

1.588362239s ago: executing program 0 (id=2850):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r1, 0x0, 0x0, 0x5}, 0x50)

1.530194146s ago: executing program 0 (id=2852):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x5}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, 0x0, 0x0, 0x4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000040), 0x0}, 0x20)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000340), 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
socket$kcm(0x10, 0x2, 0x0)

1.529656587s ago: executing program 1 (id=2854):
r0 = socket(0x2, 0x3, 0x40)
setsockopt(r0, 0xff, 0x1, 0x0, 0x0)

1.499612669s ago: executing program 1 (id=2855):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
r4 = socket(0x18, 0x0, 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), r4)
getpeername$netrom(r4, 0x0, &(0x7f0000000080)=0xffffffffffffff77)
r5 = getpid()
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f0000000bc0)=0x5, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], 0x3c}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40)

1.380985707s ago: executing program 1 (id=2856):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150601010000ffdbdf251000000005000f003100000008000100", @ANYRES32=0x0, @ANYBLOB="050010004b"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c)

1.380667393s ago: executing program 1 (id=2857):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
shutdown(r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1e, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
socket$inet(0x2, 0x2, 0x0)
write(r4, &(0x7f0000000040)="05000000010000", 0x7)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

1.149456621s ago: executing program 1 (id=2858):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @broadcast}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r3=>r2, 0xcf, 0x3, 0x7})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000001180)=ANY=[@ANYRES64=r1], 0x0, 0x32, 0x0, 0x0, 0x0, 0x10000, @value=r3}, 0x28)
socket$packet(0x11, 0x3, 0x300)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181)

780.047464ms ago: executing program 1 (id=2859):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r3)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0)
connect(r4, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r7], 0x20, 0x6044}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r10, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8010)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010007000000fcdbdf250200000008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20000084)
ioctl$FITHAW(r6, 0xc0045878)

708.557856ms ago: executing program 0 (id=2863):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

260.851521ms ago: executing program 2 (id=2869):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0)
close(r1)
readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

161.035042ms ago: executing program 2 (id=2870):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61}, {}, {0x2}, {0x6}]})

79.525722ms ago: executing program 2 (id=2871):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0x4, 0x4)

79.300128ms ago: executing program 2 (id=2872):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

350.269µs ago: executing program 2 (id=2873):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000700)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x8085)

0s ago: executing program 2 (id=2874):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0xfffffff7, 0x100000, 0x10000}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52921' (ED25519) to the list of known hosts.
syzkaller login: [   49.603368][ T5807] cgroup: Unknown subsys name 'net'
[   49.739956][ T5807] cgroup: Unknown subsys name 'cpuset'
[   49.745087][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.345744][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.534525][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.537497][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.542239][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.545179][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.547892][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.576212][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.578800][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.581262][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.584593][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.595121][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.612885][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.616053][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.618844][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.626712][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.631314][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.754599][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.862076][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.865152][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.868485][ T5818] bridge_slave_0: entered allmulticast mode
[   55.872390][ T5818] bridge_slave_0: entered promiscuous mode
[   55.889776][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.892938][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.897401][ T5818] bridge_slave_1: entered allmulticast mode
[   55.901408][ T5818] bridge_slave_1: entered promiscuous mode
[   55.935180][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   55.942468][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.949686][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.033453][ T5818] team0: Port device team_slave_0 added
[   56.047564][ T5818] team0: Port device team_slave_1 added
[   56.071784][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.074723][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.078141][ T5822] bridge_slave_0: entered allmulticast mode
[   56.081741][ T5822] bridge_slave_0: entered promiscuous mode
[   56.085749][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   56.109166][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.112035][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.114918][ T5822] bridge_slave_1: entered allmulticast mode
[   56.119149][ T5822] bridge_slave_1: entered promiscuous mode
[   56.123462][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.126389][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.134932][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.141398][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.144204][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.153493][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.207334][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.221785][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.273237][ T5822] team0: Port device team_slave_0 added
[   56.279159][ T5822] team0: Port device team_slave_1 added
[   56.296396][ T5818] hsr_slave_0: entered promiscuous mode
[   56.299011][ T5818] hsr_slave_1: entered promiscuous mode
[   56.331585][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.334318][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.337772][ T5826] bridge_slave_0: entered allmulticast mode
[   56.340709][ T5826] bridge_slave_0: entered promiscuous mode
[   56.344229][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.347288][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.358552][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.363385][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.366253][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.374914][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.379261][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.382197][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.385026][ T5826] bridge_slave_1: entered allmulticast mode
[   56.388742][ T5826] bridge_slave_1: entered promiscuous mode
[   56.431867][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.442261][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.508959][ T5826] team0: Port device team_slave_0 added
[   56.514014][ T5822] hsr_slave_0: entered promiscuous mode
[   56.517962][ T5822] hsr_slave_1: entered promiscuous mode
[   56.520196][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   56.522156][ T5822] Cannot create hsr debugfs directory
[   56.529731][ T5826] team0: Port device team_slave_1 added
[   56.564553][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.566928][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.574898][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.595135][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.597909][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.607025][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.695945][ T5826] hsr_slave_0: entered promiscuous mode
[   56.698211][ T5826] hsr_slave_1: entered promiscuous mode
[   56.700304][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   56.702133][ T5826] Cannot create hsr debugfs directory
[   56.754478][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.774845][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.779932][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.787732][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.852721][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.867075][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.877866][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.896535][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.902358][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.910008][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.922483][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.928692][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.012533][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.037461][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   57.052936][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.055602][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.061040][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.063369][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.082555][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.093170][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.114136][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   57.122939][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   57.128614][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.130994][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.136647][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.150792][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.153083][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.157175][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.159483][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.171037][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.173426][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.310845][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.347733][ T5818] veth0_vlan: entered promiscuous mode
[   57.357217][ T5818] veth1_vlan: entered promiscuous mode
[   57.383331][ T5818] veth0_macvtap: entered promiscuous mode
[   57.397704][ T5818] veth1_macvtap: entered promiscuous mode
[   57.413939][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.423667][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.430443][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.440559][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.444183][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.447997][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.451445][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.456335][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.531472][ T5822] veth0_vlan: entered promiscuous mode
[   57.537661][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.546115][ T5826] veth0_vlan: entered promiscuous mode
[   57.548581][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.569239][ T5822] veth1_vlan: entered promiscuous mode
[   57.574193][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.579133][ T5826] veth1_vlan: entered promiscuous mode
[   57.583295][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.602612][ T5822] veth0_macvtap: entered promiscuous mode
[   57.612474][ T5822] veth1_macvtap: entered promiscuous mode
[   57.648891][   T54] Bluetooth: hci0: command tx timeout
[   57.651656][ T5820] Bluetooth: hci1: command tx timeout
[   57.652182][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.663630][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.672407][ T5826] veth0_macvtap: entered promiscuous mode
[   57.682265][ T5826] veth1_macvtap: entered promiscuous mode
[   57.705374][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.715657][ T5820] Bluetooth: hci2: command tx timeout
[   57.719967][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.723521][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.729755][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.732242][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.737273][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.804440][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.854324][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.863103][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.893764][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.930547][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.942660][ T5888] IPVS: stopping backup sync thread 5890 ...
[   57.945145][ T5890] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   57.950872][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.955185][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.000363][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.003129][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.011798][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.017871][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.036280][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.038897][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.140542][ T5898] netlink: del zone limit has 4 unknown bytes
[   58.189185][ T5905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.203737][ T5900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.237566][ T5910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.248406][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   58.251328][ T5910] bridge_slave_1: left allmulticast mode
[   58.253471][ T5910] bridge_slave_1: left promiscuous mode
[   58.280796][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.296600][ T5910] bridge_slave_0: left allmulticast mode
[   58.298881][ T5910] bridge_slave_0: left promiscuous mode
[   58.305088][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.470187][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   58.669425][ T5939] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.829358][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'.
[   58.934911][ T5960] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   58.954948][ T5960] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   59.717953][   T54] Bluetooth: hci0: command tx timeout
[   59.720429][ T5820] Bluetooth: hci1: command tx timeout
[   59.797429][ T5820] Bluetooth: hci2: command tx timeout
[   59.823357][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   59.862125][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'.
[   59.917360][ T6018] Bluetooth: MGMT ver 1.23
[   59.981018][ T6020] netlink: 'syz.0.54': attribute type 21 has an invalid length.
[   59.983824][ T6020] netlink: 128 bytes leftover after parsing attributes in process `syz.0.54'.
[   60.012988][ T6020] netlink: 'syz.0.54': attribute type 5 has an invalid length.
[   60.021162][ T6020] netlink: 3 bytes leftover after parsing attributes in process `syz.0.54'.
[   60.276159][ T6040] syz.1.64 uses obsolete (PF_INET,SOCK_PACKET)
[   60.412251][ T6054] batadv_slave_1: entered promiscuous mode
[   60.425311][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'.
[   60.431895][ T6053] batadv_slave_1: left promiscuous mode
[   60.539769][ T6063] trusted_key: syz.0.74 sent an empty control message without MSG_MORE.
[   61.131787][ T6110] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   61.134716][ T6110] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   61.796072][ T5820] Bluetooth: hci1: command tx timeout
[   61.798110][ T5820] Bluetooth: hci0: command tx timeout
[   61.876274][ T5820] Bluetooth: hci2: command tx timeout
[   62.653500][ T6179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.686918][ T6179] Illegal XDP return value 4294967282 on prog  (id 21) dev N/A, expect packet loss!
[   62.759852][ T6192] Zero length message leads to an empty skb
[   62.774290][ T6195] netlink: 'syz.0.134': attribute type 13 has an invalid length.
[   62.778424][ T6195] netlink: 'syz.0.134': attribute type 17 has an invalid length.
[   62.908586][ T6195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.146051][ T6188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.177786][ T6219] syzkaller1: entered promiscuous mode
[   63.179822][ T6219] syzkaller1: entered allmulticast mode
[   63.287823][ T6221] __nla_validate_parse: 4 callbacks suppressed
[   63.287832][ T6221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.144'.
[   63.875741][ T5820] Bluetooth: hci0: command tx timeout
[   63.875763][   T54] Bluetooth: hci1: command tx timeout
[   63.955643][   T54] Bluetooth: hci2: command tx timeout
[   64.559669][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'.
[   64.830610][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'.
[   64.834345][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.866463][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.895422][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   64.900064][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   64.919901][ T6281] IPv6: Can't replace route, no match found
[   65.004033][ T6291] netlink: 68 bytes leftover after parsing attributes in process `syz.2.174'.
[   65.337378][ T6319] syzkaller1: entered promiscuous mode
[   65.339892][ T6319] syzkaller1: entered allmulticast mode
[   65.412021][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'.
[   65.419113][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'.
[   65.660519][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'.
[   66.096870][ T6354] IPVS: Scheduler module ip_vs_sip not found
[   66.513371][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'.
[   66.622186][ T6396] tipc: Started in network mode
[   66.624414][ T6396] tipc: Node identity ce872714e364, cluster identity 4711
[   66.648158][ T6396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.666056][ T6396] syzkaller0: entered promiscuous mode
[   66.668440][ T6396] syzkaller0: entered allmulticast mode
[   66.724240][ T6396] tipc: Resetting bearer <eth:syzkaller0>
[   66.733582][ T6395] tipc: Resetting bearer <eth:syzkaller0>
[   66.746538][ T6395] tipc: Disabling bearer <eth:syzkaller0>
[   66.989287][ T6432] netlink: 'syz.2.238': attribute type 4 has an invalid length.
[   67.030538][ T6435] ieee802154 phy0 wpan0: encryption failed: -22
[   67.192047][ T6449] geneve2: entered promiscuous mode
[   68.022200][ T6515] syz.2.275 (6515) used greatest stack depth: 20440 bytes left
[   68.090645][ T6526] netlink: 'syz.0.281': attribute type 3 has an invalid length.
[   68.249720][ T6540] netlink: 'syz.2.288': attribute type 83 has an invalid length.
[   68.343252][ T6548] __nla_validate_parse: 7 callbacks suppressed
[   68.343263][ T6548] netlink: 536 bytes leftover after parsing attributes in process `syz.0.290'.
[   68.349585][ T6548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'.
[   68.392905][ T6552] netlink: 'syz.0.294': attribute type 9 has an invalid length.
[   68.399066][ T6552] netlink: 184 bytes leftover after parsing attributes in process `syz.0.294'.
[   68.431688][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.293'.
[   68.468622][ T6557] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   68.541016][ T6551] netlink: 'syz.1.293': attribute type 9 has an invalid length.
[   68.913266][ T6577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.977876][ T6577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.041279][ T6577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.120388][ T6577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.127615][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[   69.198498][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.216280][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.224781][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.242062][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.300071][ T6603] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[   69.671399][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.328'.
[   70.169396][ T6668] syzkaller1: entered promiscuous mode
[   70.171623][ T6668] syzkaller1: entered allmulticast mode
[   70.442143][ T6678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.350'.
[   70.491505][ T6680] netlink: 72 bytes leftover after parsing attributes in process `syz.2.351'.
[   70.538151][ T6682] syzkaller1: entered promiscuous mode
[   70.540562][ T6682] syzkaller1: entered allmulticast mode
[   70.659882][ T6694] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   70.845575][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.848351][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.039361][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[   71.042869][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'.
[   71.066665][ T6731] netlink: 'syz.0.369': attribute type 14 has an invalid length.
[   71.303689][ T6763] veth0_to_bond: entered allmulticast mode
[   71.814348][ T6802] syzkaller0: entered promiscuous mode
[   71.818747][ T6802] syzkaller0: entered allmulticast mode
[   73.378072][ T6874] Bluetooth: MGMT ver 1.23
[   73.599782][ T6890] netlink: 'syz.2.432': attribute type 1 has an invalid length.
[   73.615963][ T6854] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   73.647465][    T9] IPVS: starting estimator thread 0...
[   73.677518][ T6897] __nla_validate_parse: 6 callbacks suppressed
[   73.677526][ T6897] netlink: 300 bytes leftover after parsing attributes in process `syz.1.435'.
[   73.775622][ T6893] IPVS: using max 50 ests per chain, 120000 per kthread
[   73.808429][ T6907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.869716][ T6913] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.907615][ T6907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.962640][ T6907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.032952][ T6907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.106746][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.125225][ T5690] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.140832][ T5690] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.152107][ T5690] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.188736][ T6926] netlink: 56 bytes leftover after parsing attributes in process `syz.2.448'.
[   74.192150][ T6926] netlink: 56 bytes leftover after parsing attributes in process `syz.2.448'.
[   74.263723][ T6930] netlink: 248 bytes leftover after parsing attributes in process `syz.2.450'.
[   74.268894][ T6930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.450'.
[   74.278902][ T6930] lo speed is unknown, defaulting to 1000
[   74.282197][ T6930] lo speed is unknown, defaulting to 1000
[   74.284968][ T6930] lo speed is unknown, defaulting to 1000
[   74.380654][ T6931] 8021q: adding VLAN 0 to HW filter on device team0
[   74.439772][ T6931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.495053][ T6936] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.452'.
[   74.603974][ T6930] infiniband syz0: set active
[   74.606725][ T6930] infiniband syz0: added lo
[   74.619839][   T10] lo speed is unknown, defaulting to 1000
[   74.668229][ T6930] RDS/IB: syz0: added
[   74.670651][ T6930] smc: adding ib device syz0 with port count 1
[   74.673665][ T6930] smc:    ib device syz0 port 1 has pnetid 
[   74.678600][    T9] lo speed is unknown, defaulting to 1000
[   74.685337][ T6930] lo speed is unknown, defaulting to 1000
[   74.803822][ T6943] netlink: 'syz.1.455': attribute type 4 has an invalid length.
[   74.951871][ T6930] lo speed is unknown, defaulting to 1000
[   75.195177][ T6964] IPVS: Scheduler module ip_vs_sip not found
[   75.196816][ T6930] lo speed is unknown, defaulting to 1000
[   75.327937][ T6975] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[   75.352400][ T6975] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.376561][ T6975] bond1: (slave veth3): Enslaving as an active interface with a down link
[   75.381006][ T6930] lo speed is unknown, defaulting to 1000
[   75.406305][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv1
[   75.409247][ T6975] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   75.632199][ T6930] syz.2.450 (6930) used greatest stack depth: 20064 bytes left
[   75.801464][ T6995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.924973][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.481'.
[   75.929998][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.481'.
[   75.935593][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.481'.
[   75.939181][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.481'.
[   75.982785][ T7006] openvswitch: netlink: IP tunnel dst address not specified
[   76.804444][ T7025] bridge_slave_0: left allmulticast mode
[   76.806793][ T7025] bridge_slave_0: left promiscuous mode
[   76.809350][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.815294][ T7025] bridge_slave_1: left allmulticast mode
[   76.820415][ T7025] bridge_slave_1: left promiscuous mode
[   76.822958][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.837488][ T7025] bond0: (slave bond_slave_0): Releasing backup interface
[   76.844315][ T7025] bond0: (slave bond_slave_1): Releasing backup interface
[   76.856584][ T7025] team0: Port device team_slave_0 removed
[   76.864609][ T7025] team0: Port device team_slave_1 removed
[   76.876222][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.879135][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.883215][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.887368][ T7025] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.954301][ T7027] tipc: Started in network mode
[   76.960895][ T7027] tipc: Node identity b24b98fc34aa, cluster identity 4711
[   76.963785][ T7027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.975767][ T7027] syzkaller0: entered promiscuous mode
[   76.977950][ T7027] syzkaller0: entered allmulticast mode
[   77.017652][ T7027] tipc: Resetting bearer <eth:syzkaller0>
[   77.021524][ T7026] tipc: Resetting bearer <eth:syzkaller0>
[   77.032283][ T7026] tipc: Disabling bearer <eth:syzkaller0>
[   78.153278][ T7072] openvswitch: netlink: Multiple metadata blocks provided
[   78.450259][ T7098] veth1_to_team: entered allmulticast mode
[   78.456258][ T7098] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   78.718037][ T7123] __nla_validate_parse: 8 callbacks suppressed
[   78.718047][ T7123] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.534'.
[   78.859505][ T7134] netlink: 'syz.2.539': attribute type 1 has an invalid length.
[   78.873499][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[   78.999613][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'.
[   79.049822][ T7156] tipc: Started in network mode
[   79.051573][ T7156] tipc: Node identity c2d65c88b367, cluster identity 4711
[   79.054182][ T7156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.061966][ T7156] syzkaller0: entered promiscuous mode
[   79.063894][ T7156] syzkaller0: entered allmulticast mode
[   79.070246][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[   79.072450][ T7156] syzkaller0: tun_net_xmit 90
[   79.075741][ T7155] tipc: Resetting bearer <eth:syzkaller0>
[   79.084699][ T7155] tipc: Disabling bearer <eth:syzkaller0>
[   79.381078][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'.
[   79.383890][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'.
[   79.574313][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[   79.577680][ T7195] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   79.580720][ T7195] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   79.729105][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[   79.733027][ T7208] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   79.736334][ T7208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.927637][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.581'.
[   80.080161][ T7229] netlink: 47 bytes leftover after parsing attributes in process `syz.1.585'.
[   80.666816][ T7279] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   80.669794][ T7279] netlink: 204 bytes leftover after parsing attributes in process `syz.2.603'.
[   80.673002][ T7279] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   80.701802][ T7281] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[   80.859255][ T7293] syzkaller1: entered promiscuous mode
[   80.861258][ T7293] syzkaller1: entered allmulticast mode
[   80.959542][ T7300] sctp: [Deprecated]: syz.2.611 (pid 7300) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.959542][ T7300] Use struct sctp_sack_info instead
[   80.964759][ T7302] batman_adv: batadv0: Adding interface: dummy0
[   80.970846][ T7302] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.983365][ T7302] batman_adv: batadv0: Interface activated: dummy0
[   80.998134][ T7302] batadv0: mtu less than device minimum
[   81.002134][ T7302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.006463][ T7302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.010277][ T7302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.014033][ T7302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.017939][ T7302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.022760][ T7302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.027618][ T7302] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.087360][  T790] cfg80211: failed to load regulatory.db
[   81.703864][ T7344] syzkaller0: entered promiscuous mode
[   81.708672][ T7344] syzkaller0: entered allmulticast mode
[   82.248808][ T7392] netlink: 'syz.0.656': attribute type 13 has an invalid length.
[   82.252812][ T7392] netlink: 'syz.0.656': attribute type 13 has an invalid length.
[   82.686775][ T7429] netlink: 'syz.2.673': attribute type 1 has an invalid length.
[   82.689730][ T7429] netlink: 'syz.2.673': attribute type 1 has an invalid length.
[   82.692617][ T7429] netlink: 'syz.2.673': attribute type 2 has an invalid length.
[   83.377797][ T7475] netlink: 'syz.0.691': attribute type 30 has an invalid length.
[   83.639213][   T33] audit: type=1107 audit(1754656472.059:2): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   83.951972][  T791] hid-generic 0005:0C45:FFF9.0001: item fetching failed at offset 0/1
[   84.001329][  T791] hid-generic 0005:0C45:FFF9.0001: probe with driver hid-generic failed with error -22
[   84.116451][ T7542] __nla_validate_parse: 9 callbacks suppressed
[   84.116461][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'.
[   84.121365][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'.
[   84.268564][ T7565] syzkaller1: entered promiscuous mode
[   84.270415][ T7565] syzkaller1: entered allmulticast mode
[   84.287981][ T7568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.736'.
[   84.384751][ T7576] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   84.418801][ T7576] bond1: entered promiscuous mode
[   84.420936][ T7576] bond1: entered allmulticast mode
[   84.423321][ T7576] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.554240][ T7598] netlink: 165 bytes leftover after parsing attributes in process `syz.0.749'.
[   84.764384][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.768043][ T7618] net_ratelimit: 14 callbacks suppressed
[   84.768055][ T7618] batadv0: mtu less than device minimum
[   84.773927][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.779527][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.784855][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.790109][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.795366][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.800950][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.806345][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.811618][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.816880][ T7618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.829214][ T7618] batadv_slave_0: entered promiscuous mode
[   84.990104][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.765'.
[   85.038372][ T7646] bridge0: port 1(erspan0) entered blocking state
[   85.040902][ T7646] bridge0: port 1(erspan0) entered disabled state
[   85.043138][ T7646] erspan0: entered allmulticast mode
[   85.046566][ T7646] erspan0: entered promiscuous mode
[   85.049686][ T7646] bridge0: port 1(erspan0) entered blocking state
[   85.052312][ T7646] bridge0: port 1(erspan0) entered forwarding state
[   85.059670][ T7646] erspan0: left allmulticast mode
[   85.061357][ T7646] erspan0: left promiscuous mode
[   85.063369][ T7646] bridge0: port 1(erspan0) entered disabled state
[   85.199985][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'.
[   85.392768][ T7693] netlink: 'syz.0.791': attribute type 3 has an invalid length.
[   85.829666][ T7721] syz.2.805 (7721) used greatest stack depth: 20056 bytes left
[   85.959655][ T7727] netlink: 84 bytes leftover after parsing attributes in process `syz.2.808'.
[   85.962592][ T7727] netem: invalid attributes len -16
[   85.964302][ T7727] netem: change failed
[   86.200857][ T7688] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   86.431076][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'.
[   86.564513][ T7776] netlink: 'syz.1.831': attribute type 3 has an invalid length.
[   86.657864][ T7781] lo speed is unknown, defaulting to 1000
[   86.696687][ T7783] netlink: 'syz.1.833': attribute type 21 has an invalid length.
[   86.699964][ T7783] netlink: 'syz.1.833': attribute type 6 has an invalid length.
[   86.703804][ T7783] netlink: 64 bytes leftover after parsing attributes in process `syz.1.833'.
[   86.711223][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[   87.417779][ T7826] netlink: 'syz.0.852': attribute type 14 has an invalid length.
[   87.715346][ T7856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.719553][ T7856] syzkaller0: entered promiscuous mode
[   87.721540][ T7856] syzkaller0: entered allmulticast mode
[   87.736411][ T7858] netlink: 'syz.0.868': attribute type 4 has an invalid length.
[   87.740983][ T7856] tipc: Resetting bearer <eth:syzkaller0>
[   87.747495][ T7855] tipc: Resetting bearer <eth:syzkaller0>
[   87.769104][ T7855] tipc: Disabling bearer <eth:syzkaller0>
[   87.999560][ T7874] netlink: 'syz.0.876': attribute type 11 has an invalid length.
[   88.591366][ T7911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.594220][ T7911] syzkaller0: entered promiscuous mode
[   88.596689][ T7911] syzkaller0: entered allmulticast mode
[   88.609697][ T7911] tipc: Resetting bearer <eth:syzkaller0>
[   88.612054][ T7913] netlink: 'syz.1.893': attribute type 15 has an invalid length.
[   88.618830][ T7909] tipc: Resetting bearer <eth:syzkaller0>
[   88.632074][ T7909] tipc: Disabling bearer <eth:syzkaller0>
[   89.252667][ T7942] bridge0: port 3(erspan0) entered blocking state
[   89.255220][ T7942] bridge0: port 3(erspan0) entered disabled state
[   89.258040][ T7942] erspan0: entered allmulticast mode
[   89.260840][ T7942] erspan0: entered promiscuous mode
[   89.264547][ T7942] bridge0: port 3(erspan0) entered blocking state
[   89.266781][ T7942] bridge0: port 3(erspan0) entered forwarding state
[   89.271197][ T7942] erspan0: left allmulticast mode
[   89.272924][ T7942] erspan0: left promiscuous mode
[   89.274668][ T7942] bridge0: port 3(erspan0) entered disabled state
[   89.781617][ T7955] __nla_validate_parse: 3 callbacks suppressed
[   89.781633][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.909'.
[   90.180227][ T7998] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[   90.257547][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.932'.
[   90.428184][ T8032] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.946'.
[   90.432315][ T8031] netlink: 'syz.2.947': attribute type 1 has an invalid length.
[   90.434714][ T8032] net_ratelimit: 12 callbacks suppressed
[   90.434722][ T8032] netlink: zone id is out of range
[   90.436422][ T8031] netlink: 'syz.2.947': attribute type 3 has an invalid length.
[   90.438102][ T8032] netlink: get zone limit has 8 unknown bytes
[   90.440235][ T8031] netlink: 224 bytes leftover after parsing attributes in process `syz.2.947'.
[   90.739517][ T8062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.861697][ T8080] tap0: tun_chr_ioctl cmd 1074025676
[   90.863420][ T8080] tap0: owner set to 0
[   91.052205][ T8099] geneve2: entered promiscuous mode
[   91.055072][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   91.061084][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   91.068693][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   91.072936][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   91.339630][ T8128] block nbd0: NBD_DISCONNECT
[   91.538115][ T8145] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[   91.541866][ T8145] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[   91.642922][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1005'.
[   91.646185][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1005'.
[   91.763718][ T8176] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1012'.
[   91.795874][ T8180] openvswitch: netlink: IPv4 tun info is not correct
[   91.798606][ T8179] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.904703][ T8192] netlink: 'syz.1.1020': attribute type 11 has an invalid length.
[   91.909266][ T8192] netlink: 'syz.1.1020': attribute type 4 has an invalid length.
[   91.912157][ T8192] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1020'.
[   92.072581][ T8210] tipc: Cannot configure node identity twice
[   92.075412][ T8208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.080144][ T8208] syzkaller0: entered promiscuous mode
[   92.082398][ T8208] syzkaller0: entered allmulticast mode
[   92.098263][ T8208] tipc: Resetting bearer <eth:syzkaller0>
[   92.102457][ T8207] tipc: Resetting bearer <eth:syzkaller0>
[   92.117359][ T8207] tipc: Disabling bearer <eth:syzkaller0>
[   92.401339][ T8243] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   92.478534][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'.
[   92.507128][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'.
[   92.653651][ T8269] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   92.726879][ T8271] IPv6: Can't replace route, no match found
[   94.171107][ T8345] sctp: [Deprecated]: syz.2.1090 (pid 8345) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.171107][ T8345] Use struct sctp_sack_info instead
[   94.423485][ T8372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.431300][ T8446] __nla_validate_parse: 6 callbacks suppressed
[   95.431310][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[   95.589471][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1138'.
[   95.633846][ T8457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.637598][ T8457] syzkaller0: entered promiscuous mode
[   95.639973][ T8457] syzkaller0: entered allmulticast mode
[   95.658477][ T8457] tipc: Resetting bearer <eth:syzkaller0>
[   95.663134][ T8456] tipc: Resetting bearer <eth:syzkaller0>
[   95.672562][ T8456] tipc: Disabling bearer <eth:syzkaller0>
[   96.347296][ T8513] batman_adv: batadv0: Interface deactivated: dummy0
[   96.469000][ T8513] batadv_slave_0: left promiscuous mode
[   96.475209][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.598986][ T5690] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.606244][ T5690] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.608890][ T5690] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.611497][ T5690] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.770696][ T8555] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1177'.
[   96.838874][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'.
[   96.870187][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'.
[   96.988025][ T8587] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1191'.
[   97.031277][ T8592] netlink: 'syz.0.1193': attribute type 12 has an invalid length.
[   97.034004][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'.
[   97.039248][ T8592] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   97.111549][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'.
[   97.116255][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'.
[   97.209154][ T8612] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   97.219317][ T8610] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.227705][ T8610] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.307695][ T8625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.343216][ T8629] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.347571][ T8629] syzkaller0: entered promiscuous mode
[   97.352417][ T8629] syzkaller0: entered allmulticast mode
[   97.366596][ T8629] tipc: Resetting bearer <eth:syzkaller0>
[   97.370253][ T8627] tipc: Resetting bearer <eth:syzkaller0>
[   97.380639][ T8627] tipc: Disabling bearer <eth:syzkaller0>
[   97.439317][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'.
[   97.632408][ T8653] netlink: 'syz.2.1218': attribute type 7 has an invalid length.
[   97.635087][ T8653] netlink: 'syz.2.1218': attribute type 8 has an invalid length.
[   97.901300][ T8675] netlink: 'syz.2.1229': attribute type 33 has an invalid length.
[   97.904044][ T8675] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   98.334401][ T8713] netlink: 'syz.1.1247': attribute type 21 has an invalid length.
[   98.338571][ T8713] netlink: 'syz.1.1247': attribute type 22 has an invalid length.
[   98.341160][ T8713] netlink: 'syz.1.1247': attribute type 23 has an invalid length.
[   98.361043][ T8717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.482899][ T8730] syz_tun: entered allmulticast mode
[   98.782024][ T8748] lo speed is unknown, defaulting to 1000
[   99.064247][ T8748] netlink: 'syz.1.1265': attribute type 13 has an invalid length.
[   99.073360][ T8748] netlink: 'syz.1.1265': attribute type 17 has an invalid length.
[   99.082707][ T8748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   99.192114][ T8767] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   99.192976][ T8518] IPVS: starting estimator thread 0...
[   99.305712][ T8771] IPVS: using max 79 ests per chain, 189600 per kthread
[  101.201481][ T8854] syzkaller0: entered promiscuous mode
[  101.213645][ T8854] syzkaller0: entered allmulticast mode
[  101.662192][ T8859] __nla_validate_parse: 14 callbacks suppressed
[  101.662202][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1312'.
[  101.775725][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1312'.
[  101.930273][ T8865] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  102.533289][ T8877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1320'.
[  102.770558][ T8904] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1333'.
[  103.052153][ T8928] lo speed is unknown, defaulting to 1000
[  103.079511][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1344'.
[  103.088274][ T8933] ip6_vti0: entered promiscuous mode
[  103.091282][ T8933] ip6_vti0: entered allmulticast mode
[  104.058978][ T8963] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  104.062007][ T8963] tipc: Enabled bearer <udp:syz2>, priority 10
[  104.195985][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  104.335641][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  104.475694][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  104.615626][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  104.755949][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  104.905593][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  105.056751][ T8520] tipc: Node number set to 769861396
[  105.192506][ T9040] netlink: 'syz.2.1392': attribute type 6 has an invalid length.
[  105.200373][ T9040] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1392'.
[  105.205595][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  105.280631][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'.
[  105.298486][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'.
[  105.343448][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'.
[  105.447810][ T9054] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  105.485715][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  105.651281][ T9072] lo speed is unknown, defaulting to 1000
[  105.682043][ T9076] netlink: 'syz.2.1409': attribute type 6 has an invalid length.
[  106.625786][ T9141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1433'.
[  106.720372][ T8520] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1
[  106.724774][ T8520] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22
[  107.501478][ T9189] netlink: 'syz.2.1453': attribute type 30 has an invalid length.
[  107.592846][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'.
[  108.006471][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'.
[  108.500013][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'.
[  108.508181][ T9274] team_slave_0: entered promiscuous mode
[  108.510291][ T9274] team_slave_1: entered promiscuous mode
[  108.513062][ T9274] macsec1: entered promiscuous mode
[  108.515100][ T9274] team0: entered promiscuous mode
[  108.522857][ T9274] macsec1: entered allmulticast mode
[  108.524714][ T9274] team0: entered allmulticast mode
[  108.536796][ T9274] team_slave_0: entered allmulticast mode
[  108.538898][ T9274] team_slave_1: entered allmulticast mode
[  108.544133][ T9274] team0: Device macsec1 is already an upper device of the team interface
[  108.551135][ T9274] team0: left allmulticast mode
[  108.552973][ T9274] team_slave_0: left allmulticast mode
[  108.554998][ T9274] team_slave_1: left allmulticast mode
[  108.557918][ T9274] team0: left promiscuous mode
[  108.560207][ T9274] team_slave_0: left promiscuous mode
[  108.562262][ T9274] team_slave_1: left promiscuous mode
[  108.910212][ T9298] vlan2: entered allmulticast mode
[  108.912354][ T9298] syz_tun: entered allmulticast mode
[  108.979789][   T54] Bluetooth: hci2: link tx timeout
[  108.981808][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.024089][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'.
[  109.029564][ T9316] veth1_macvtap: default FDB implementation only supports local addresses
[  109.130500][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'.
[  109.140154][ T9325] erspan0: entered promiscuous mode
[  109.148503][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'.
[  109.155723][    C0] net_ratelimit: 6 callbacks suppressed
[  109.155737][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  110.005875][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'.
[  110.179180][ T9370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1534'.
[  110.205573][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  110.430264][ T9402] netlink: 'syz.1.1552': attribute type 1 has an invalid length.
[  110.438785][ T9402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1552'.
[  110.489859][ T9410] netlink: 'syz.0.1556': attribute type 83 has an invalid length.
[  110.996070][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  111.235679][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  111.516668][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'.
[  111.698608][ T9461] netlink: 'syz.0.1576': attribute type 1 has an invalid length.
[  111.840333][ T9477] netlink: 'syz.0.1584': attribute type 46 has an invalid length.
[  111.844606][ T9479] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[  111.861192][ T9479] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[  112.053670][ T9488] !: renamed from dummy0 (while UP)
[  112.275804][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  112.509782][ T9496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.694073][ T9502] __nla_validate_parse: 5 callbacks suppressed
[  112.694090][ T9502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'.
[  112.744390][ T9508] netlink: 'syz.2.1598': attribute type 11 has an invalid length.
[  112.811409][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1601'.
[  112.843844][ T9514] ip6_vti0: left promiscuous mode
[  112.851483][ T9514] ip6_vti0: left allmulticast mode
[  112.933675][ T9514] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  113.043096][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'.
[  113.089138][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'.
[  113.251561][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'.
[  113.255139][ T9543] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1610'.
[  113.315678][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  113.354883][ T9554] netlink: 'syz.0.1616': attribute type 10 has an invalid length.
[  113.359714][ T9554] batman_adv: batadv0: Removing interface: dummy0
[  113.378500][ T9554] team0: Port device dummy0 added
[  113.384384][ T9554] netlink: 'syz.0.1616': attribute type 10 has an invalid length.
[  113.388525][ T9554] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  113.394987][ T9554] team0: Failed to send options change via netlink (err -105)
[  113.398974][ T9554] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  113.403623][ T9554] team0: Port device dummy0 removed
[  113.411379][ T9554] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  113.422827][ T9558] netlink: 'syz.1.1618': attribute type 22 has an invalid length.
[  113.426489][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'.
[  113.447591][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.451396][ T9558] netlink: 'syz.1.1618': attribute type 22 has an invalid length.
[  113.453934][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'.
[  113.454438][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.461203][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.466372][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.652828][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'.
[  113.794693][ T9604] batadv_slave_0: entered promiscuous mode
[  113.799642][ T9602] batadv_slave_0: left promiscuous mode
[  113.868124][ T9611] netlink: del zone limit has 4 unknown bytes
[  114.056456][ T9633] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1654'.
[  114.356012][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  114.589430][ T9703] lo speed is unknown, defaulting to 1000
[  114.654918][ T9715] netlink: 'syz.0.1692': attribute type 11 has an invalid length.
[  114.890768][ T9724] veth5: entered promiscuous mode
[  115.405612][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  116.423396][ T9843] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  116.445653][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  116.489985][ T9847] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  116.927507][ T9868] syzkaller0: entered promiscuous mode
[  116.929944][ T9868] syzkaller0: entered allmulticast mode
[  117.215073][ T9895] netlink: 'syz.1.1762': attribute type 1 has an invalid length.
[  117.218234][ T9895] netlink: 'syz.1.1762': attribute type 2 has an invalid length.
[  117.476627][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  117.881934][ T9899] syzkaller0: entered promiscuous mode
[  117.884245][ T9899] syzkaller0: entered allmulticast mode
[  118.090414][ T9922] __nla_validate_parse: 10 callbacks suppressed
[  118.090424][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'.
[  118.098113][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'.
[  118.139474][ T9925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.142951][ T9925] syzkaller0: entered promiscuous mode
[  118.146165][ T9925] syzkaller0: entered allmulticast mode
[  118.150810][ T9929] netlink: 'syz.0.1775': attribute type 10 has an invalid length.
[  118.168690][ T9925] tipc: Resetting bearer <eth:syzkaller0>
[  118.177697][ T9924] tipc: Resetting bearer <eth:syzkaller0>
[  118.189663][ T9924] tipc: Disabling bearer <eth:syzkaller0>
[  118.210238][ T9929] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1775'.
[  118.509100][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1789'.
[  118.515673][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  119.565568][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  119.639728][T10018] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1818'.
[  119.850847][T10038] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  120.155251][T10053] netlink: 'syz.0.1832': attribute type 1 has an invalid length.
[  120.160223][T10053] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1832'.
[  120.193402][T10055] netlink: 'syz.0.1833': attribute type 64 has an invalid length.
[  120.197689][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'.
[  120.320979][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'.
[  120.578060][T10074] syzkaller1: entered promiscuous mode
[  120.581173][T10074] syzkaller1: entered allmulticast mode
[  120.605628][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  120.681675][T10076] netlink: 'syz.1.1842': attribute type 1 has an invalid length.
[  120.684720][T10076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1842'.
[  120.688762][T10076] netlink: 'syz.1.1842': attribute type 2 has an invalid length.
[  120.691594][T10076] netlink: 'syz.1.1842': attribute type 1 has an invalid length.
[  120.694187][T10076] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1842'.
[  120.943536][T10088] netlink: 'syz.1.1848': attribute type 1 has an invalid length.
[  120.947367][T10088] netlink: 'syz.1.1848': attribute type 1 has an invalid length.
[  121.030798][T10094] bond_slave_0: entered promiscuous mode
[  121.032886][T10094] bond_slave_1: entered promiscuous mode
[  121.034825][T10094] macvlan2: entered promiscuous mode
[  121.038971][T10094] bond0: entered promiscuous mode
[  121.047634][T10094] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  121.645538][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  121.819039][T10162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.824704][T10162] syzkaller0: entered promiscuous mode
[  121.829003][T10162] syzkaller0: entered allmulticast mode
[  121.843491][T10162] tipc: Resetting bearer <eth:syzkaller0>
[  121.849957][T10161] tipc: Resetting bearer <eth:syzkaller0>
[  121.860903][T10161] tipc: Disabling bearer <eth:syzkaller0>
[  122.048585][T10181] bridge0: port 3(syz_tun) entered blocking state
[  122.050893][T10181] bridge0: port 3(syz_tun) entered disabled state
[  122.057738][T10181] syz_tun: entered promiscuous mode
[  122.060640][T10181] bridge0: port 3(syz_tun) entered blocking state
[  122.062964][T10181] bridge0: port 3(syz_tun) entered forwarding state
[  122.450789][T10213] tipc: Cannot configure node identity twice
[  122.685871][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  122.720085][T10222] validate_nla: 1 callbacks suppressed
[  122.720099][T10222] netlink: 'syz.0.1911': attribute type 1 has an invalid length.
[  122.820319][T10232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.014652][ T8520] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  123.038927][ T8520] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  123.057067][T10250] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  123.060520][T10250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.159548][T10266] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  123.194715][T10270] netlink: 'syz.2.1933': attribute type 1 has an invalid length.
[  123.199232][T10270] __nla_validate_parse: 14 callbacks suppressed
[  123.199241][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'.
[  123.715568][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  124.424496][T10327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1957'.
[  124.496738][T10327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  124.729375][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'.
[  124.765590][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  124.830550][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'.
[  125.270305][T10371] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  125.459596][T10392] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  125.539542][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'.
[  125.541916][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  125.795655][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  126.089338][T10371] Bluetooth: hci0: Opcode 0x080f failed: -4
[  126.482510][T10409] unsupported nlmsg_type 40
[  126.498926][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'.
[  126.502817][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'.
[  126.835643][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  126.933264][T10441] netlink: 'syz.0.2003': attribute type 13 has an invalid length.
[  126.941710][T10441] netlink: 'syz.0.2003': attribute type 17 has an invalid length.
[  126.982087][T10441] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.990291][T10441] 8021q: adding VLAN 0 to HW filter on device team0
[  127.000899][T10441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.161993][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2012'.
[  127.214873][T10459] netlink: 'syz.1.2013': attribute type 142 has an invalid length.
[  127.885776][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  128.129950][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'.
[  128.497087][T10536] __nla_validate_parse: 1 callbacks suppressed
[  128.497100][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2048'.
[  128.607535][T10551] netlink: 'syz.1.2055': attribute type 3 has an invalid length.
[  128.699259][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'.
[  128.703397][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'.
[  128.709547][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'.
[  128.837118][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'.
[  128.925627][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  128.929894][T10598] netlink: 'syz.1.2077': attribute type 12 has an invalid length.
[  129.160696][T10623] pim6reg1: entered allmulticast mode
[  129.193341][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'.
[  129.249774][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'.
[  129.285836][T10640] netlink: 'syz.1.2096': attribute type 1 has an invalid length.
[  129.288533][T10640] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2096'.
[  129.291622][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'.
[  129.370326][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'.
[  129.388692][T10654] syz.2.2101 uses old SIOCAX25GETINFO
[  129.389339][T10649] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.428892][T10649] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.432072][T10649] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  129.438542][T10649] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  129.483206][T10661] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  129.511852][T10665] veth0_to_bond: entered allmulticast mode
[  129.748340][T10687] lo speed is unknown, defaulting to 1000
[  129.772062][T10689] wireguard0: entered promiscuous mode
[  129.774382][T10689] wireguard0: entered allmulticast mode
[  129.796728][T10691] syzkaller0: entered promiscuous mode
[  129.798996][T10691] syzkaller0: entered allmulticast mode
[  129.955604][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  129.988717][T10698] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  130.132337][T10707] mac80211_hwsim hwsim2 ": renamed from wlan0
[  130.385317][T10727] team0: entered promiscuous mode
[  130.389047][T10727] team_slave_0: entered promiscuous mode
[  130.391157][T10727] team_slave_1: entered promiscuous mode
[  130.448494][T10727] team0 (unregistering): left promiscuous mode
[  130.450597][T10727] team_slave_0: left promiscuous mode
[  130.452480][T10727] team_slave_1: left promiscuous mode
[  130.455397][T10727] team0 (unregistering): Port device team_slave_0 removed
[  130.460034][T10727] team0 (unregistering): Port device team_slave_1 removed
[  130.650210][T10736] lo speed is unknown, defaulting to 1000
[  130.995632][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  131.047937][T10762] delete_channel: no stack
[  131.120804][T10765] vlan2: entered allmulticast mode
[  131.123658][T10765] veth1: entered allmulticast mode
[  131.127785][T10765] batman_adv: batadv0: Adding interface: vlan2
[  131.130679][T10765] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  131.143541][T10765] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  131.226531][T10770] netlink: 'syz.2.2152': attribute type 1 has an invalid length.
[  131.394438][T10779] netlink: 'syz.2.2156': attribute type 7 has an invalid length.
[  131.620193][T10796] lo speed is unknown, defaulting to 1000
[  131.639589][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  132.045616][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  132.072300][T10811] lo speed is unknown, defaulting to 1000
[  132.279153][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.281363][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.308479][T10867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.947332][T10931] netlink: 'syz.2.2205': attribute type 2 has an invalid length.
[  132.950087][T10931] netlink: 'syz.2.2205': attribute type 1 has an invalid length.
[  133.075653][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  133.392585][T10960] netlink: 'syz.2.2217': attribute type 7 has an invalid length.
[  133.397762][T10960] netlink: 'syz.2.2217': attribute type 8 has an invalid length.
[  133.846714][T11002] syz.1.2239 (11002) used obsolete PPPIOCDETACH ioctl
[  134.115588][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.213066][T11035] __nla_validate_parse: 15 callbacks suppressed
[  134.213077][T11035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2254'.
[  134.220056][T11035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2254'.
[  134.608879][T11068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.614465][ T8520] lo speed is unknown, defaulting to 1000
[  134.619770][ T8520] syz0: Port: 1 Link DOWN
[  134.624114][ T8520] lo speed is unknown, defaulting to 1000
[  134.672073][T11072] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  134.682070][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2275'.
[  135.028690][   T33] audit: type=1800 audit(1754656523.449:3): pid=11089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2279" name="cgroup.controllers" dev="tmpfs" ino=4361 res=0 errno=0
[  135.155522][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  135.201570][T11126] validate_nla: 1 callbacks suppressed
[  135.201580][T11126] netlink: 'syz.2.2296': attribute type 10 has an invalid length.
[  135.224756][T11126] veth0_vlan: left promiscuous mode
[  135.227697][T11126] veth0_vlan: entered promiscuous mode
[  135.234496][T11129] netlink: 'syz.0.2299': attribute type 1 has an invalid length.
[  135.235046][T11126] team0: Device veth0_vlan failed to register rx_handler
[  135.479321][T11158] IPVS: persistence engine module ip_vs_pe_ not found
[  135.486164][   T47] IPVS: starting estimator thread 0...
[  135.612106][T11164] IPVS: using max 79 ests per chain, 189600 per kthread
[  135.628955][T11187] ieee802154 phy0 wpan0: encryption failed: -90
[  135.642110][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2323'.
[  135.671246][T11193] netlink: 508 bytes leftover after parsing attributes in process `syz.0.2325'.
[  135.768124][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  135.771106][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  136.195656][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  136.468153][T11229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.472623][T11228] tipc: Resetting bearer <eth:syzkaller0>
[  137.245544][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  137.368840][T11228] tipc: Disabling bearer <eth:syzkaller0>
[  137.421088][T11241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.428434][T11241] syzkaller0: entered promiscuous mode
[  137.431631][T11241] syzkaller0: entered allmulticast mode
[  137.455557][T11241] tipc: Resetting bearer <eth:syzkaller0>
[  137.460640][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2346'.
[  137.464787][T11238] tipc: Resetting bearer <eth:syzkaller0>
[  137.491035][T11238] tipc: Disabling bearer <eth:syzkaller0>
[  137.550431][T11250] vlan2: entered promiscuous mode
[  137.685767][T11266] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2357'.
[  137.726613][T11269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2359'.
[  137.796089][ T5820] Bluetooth: hci2: command 0x0406 tx timeout
[  137.886717][T11283] lo speed is unknown, defaulting to 1000
[  138.275695][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  138.333602][T11326] IPv6: Can't replace route, no match found
[  138.559470][T11347] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  138.563645][T11347] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  138.989998][T11403] netlink: 'syz.0.2419': attribute type 39 has an invalid length.
[  139.128672][T11415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.131707][T11415] syzkaller0: entered promiscuous mode
[  139.133613][T11415] syzkaller0: entered allmulticast mode
[  139.148826][T11415] tipc: Resetting bearer <eth:syzkaller0>
[  139.161645][T11419] netlink: 'syz.0.2427': attribute type 1 has an invalid length.
[  139.203775][T11425] netlink: 'syz.2.2430': attribute type 74 has an invalid length.
[  139.245722][T11429] __nla_validate_parse: 7 callbacks suppressed
[  139.245731][T11429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2432'.
[  139.315720][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  139.531492][T11443] netlink: 'syz.0.2438': attribute type 9 has an invalid length.
[  139.535012][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'.
[  139.550722][T11443] macvlan0: entered promiscuous mode
[  139.553209][T11443] hsr0: entered promiscuous mode
[  139.557869][T11443] macvlan0: entered allmulticast mode
[  139.560254][T11443] hsr0: entered allmulticast mode
[  139.562577][T11443] hsr_slave_0: entered allmulticast mode
[  139.565006][T11443] hsr_slave_1: entered allmulticast mode
[  140.136264][  T790] tipc: Node number set to 2262931708
[  140.158018][T11476] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  140.235930][T11484] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  140.268815][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'.
[  141.315625][ T5820] Bluetooth: hci2: command 0x0406 tx timeout
[  141.747821][T11538] syz_tun: left promiscuous mode
[  141.750368][T11538] bridge0: port 3(syz_tun) entered disabled state
[  141.762427][T11538] bridge_slave_0: left allmulticast mode
[  141.764790][T11538] bridge_slave_0: left promiscuous mode
[  141.770006][T11538] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.782464][T11538] bridge_slave_1: left allmulticast mode
[  141.784537][T11538] bridge_slave_1: left promiscuous mode
[  141.789631][T11538] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.829324][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2476'.
[  141.841940][T11538] bond0: (slave bond_slave_0): Releasing backup interface
[  141.854962][T11538] bond_slave_0: left promiscuous mode
[  141.862416][T11538] bond0: (slave bond_slave_1): Releasing backup interface
[  141.870856][T11538] bond_slave_1: left promiscuous mode
[  141.893944][T11538] team0: Port device team_slave_0 removed
[  141.913167][T11538] team0: Port device team_slave_1 removed
[  141.918106][T11538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.921873][T11538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.952307][T11552] syzkaller1: entered promiscuous mode
[  141.954168][T11552] syzkaller1: entered allmulticast mode
[  142.242458][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  142.418595][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2499'.
[  142.548835][T11593] sctp: [Deprecated]: syz.2.2505 (pid 11593) Use of int in max_burst socket option deprecated.
[  142.548835][T11593] Use struct sctp_assoc_value instead
[  143.158352][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2532'.
[  143.161457][T11651] gretap0: entered promiscuous mode
[  143.163214][T11651] gretap0: entered allmulticast mode
[  144.033787][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'.
[  144.271723][T11750] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2572'.
[  144.468091][T11772] netlink: 'syz.0.2582': attribute type 5 has an invalid length.
[  144.472509][T11772] netlink: 'syz.0.2582': attribute type 7 has an invalid length.
[  144.490620][T11772] : entered promiscuous mode
[  145.311394][T11830] netlink: 'syz.2.2610': attribute type 12 has an invalid length.
[  145.316621][ T1088] wlan1: Trigger new scan to find an IBSS to join
[  145.486842][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2615'.
[  145.516829][T11844] lo speed is unknown, defaulting to 1000
[  146.261797][T11871] lo speed is unknown, defaulting to 1000
[  146.300863][T11873] IPv6: Can't replace route, no match found
[  146.559744][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2631'.
[  146.698462][T11897] bridge2: entered allmulticast mode
[  146.753244][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2638'.
[  146.788714][T11901] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  146.891910][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'.
[  146.895354][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'.
[  147.262634][T11946] lo speed is unknown, defaulting to 1000
[  147.475073][T11954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  147.968649][T11997] v: renamed from dummy0 (while UP)
[  148.038472][T12006] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2687'.
[  148.385940][   T29] wlan1: Trigger new scan to find an IBSS to join
[  148.983340][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'.
[  149.093238][T12064] netlink: 'syz.1.2712': attribute type 10 has an invalid length.
[  149.269738][T12078] netlink: 'syz.1.2717': attribute type 2 has an invalid length.
[  149.459033][T12086] raw_sendmsg: syz.1.2721 forgot to set AF_INET. Fix it!
[  149.613901][T12098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2727'.
[  149.780210][T12108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.780297][T12110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2733'.
[  149.903039][T12116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  150.219786][T12150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2752'.
[  151.163377][T12213] lo speed is unknown, defaulting to 1000
[  151.315861][   T64] wlan1: Trigger new scan to find an IBSS to join
[  151.630994][T12255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2799'.
[  151.711322][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'.
[  151.714925][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'.
[  151.791171][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2803'.
[  152.108223][T12274] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2807'.
[  152.219863][T12276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2808'.
[  152.223257][T12276] netlink: 'syz.2.2808': attribute type 1 has an invalid length.
[  152.224828][   T64] wlan1: Creating new IBSS network, BSSID ea:59:cc:24:a4:71
[  152.234085][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'.
[  152.369327][T12296] netlink: 'syz.1.2818': attribute type 1 has an invalid length.
[  152.691682][T12323] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.365022][T12386] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  153.953707][T12402] netlink: 'syz.2.2862': attribute type 13 has an invalid length.
[  153.957918][T12402] netlink: 'syz.2.2862': attribute type 17 has an invalid length.
[  154.002896][T12402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.010927][   T47] lo speed is unknown, defaulting to 1000
[  154.012785][   T47] syz0: Port: 1 Link ACTIVE
[  154.014328][   T47] lo speed is unknown, defaulting to 1000
[  154.049499][T12399] lo speed is unknown, defaulting to 1000
[  154.265315][T12411] sctp: [Deprecated]: syz.2.2867 (pid 12411) Use of int in max_burst socket option.
[  154.265315][T12411] Use struct sctp_assoc_value instead
[  154.302022][T12413] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc
[  154.664410][T12428] ==================================================================
[  154.667072][T12428] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  154.669672][T12428] Read of size 1 at addr ffff888122c9d0b0 by task syz.2.2875/12428
[  154.673271][T12428] 
[  154.674066][T12428] CPU: 0 UID: 0 PID: 12428 Comm: syz.2.2875 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  154.674077][T12428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.674082][T12428] Call Trace:
[  154.674087][T12428]  <TASK>
[  154.674090][T12428]  dump_stack_lvl+0x189/0x250
[  154.674101][T12428]  ? __kasan_check_byte+0x12/0x40
[  154.674113][T12428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.674121][T12428]  ? lock_release+0x4b/0x3e0
[  154.674154][T12428]  ? __virt_addr_valid+0x4a5/0x5c0
[  154.674163][T12428]  print_report+0xca/0x240
[  154.674173][T12428]  ? xfrm_state_find+0x2cf2/0x5400
[  154.674180][T12428]  kasan_report+0x118/0x150
[  154.674190][T12428]  ? xfrm_state_find+0x2cf2/0x5400
[  154.674198][T12428]  xfrm_state_find+0x2cf2/0x5400
[  154.674208][T12428]  ? xfrm_state_find+0x1da/0x5400
[  154.674215][T12428]  ? __pfx_xfrm_state_find+0x10/0x10
[  154.674222][T12428]  ? xfrm4_get_saddr+0xd5/0x140
[  154.674230][T12428]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  154.674240][T12428]  ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80
[  154.674250][T12428]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  154.674263][T12428]  ? fib_rules_lookup+0xc55/0xe90
[  154.674271][T12428]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  154.674280][T12428]  ? __lock_acquire+0xab9/0xd20
[  154.674292][T12428]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  154.674302][T12428]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  154.674312][T12428]  ? xfrm_expand_policies+0x41f/0x6a0
[  154.674321][T12428]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  154.674330][T12428]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  154.674338][T12428]  ? rcuref_put+0x1b7/0x210
[  154.674346][T12428]  ? __pfx_rcuref_put+0x10/0x10
[  154.674354][T12428]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  154.674364][T12428]  xfrm_lookup_route+0x3c/0x1c0
[  154.674373][T12428]  __ip4_datagram_connect+0x9a5/0x1270
[  154.674384][T12428]  __ip6_datagram_connect+0x9f0/0x1150
[  154.674395][T12428]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  154.674404][T12428]  ? __local_bh_enable_ip+0x12d/0x1c0
[  154.674414][T12428]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  154.674426][T12428]  ip6_datagram_connect_v6_only+0x63/0xa0
[  154.674437][T12428]  __sys_connect+0x316/0x440
[  154.674447][T12428]  ? __pfx___sys_connect+0x10/0x10
[  154.674459][T12428]  ? rcu_is_watching+0x15/0xb0
[  154.674477][T12428]  __x64_sys_connect+0x7a/0x90
[  154.674487][T12428]  do_syscall_64+0xfa/0x3b0
[  154.674498][T12428]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.674507][T12428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.674514][T12428]  ? exc_page_fault+0x9f/0xf0
[  154.674524][T12428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.674531][T12428] RIP: 0033:0x7f21d338ebe9
[  154.674539][T12428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.674546][T12428] RSP: 002b:00007f21d41d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  154.674554][T12428] RAX: ffffffffffffffda RBX: 00007f21d35b5fa0 RCX: 00007f21d338ebe9
[  154.674560][T12428] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004
[  154.674564][T12428] RBP: 00007f21d3411e19 R08: 0000000000000000 R09: 0000000000000000
[  154.674569][T12428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.674573][T12428] R13: 00007f21d35b6038 R14: 00007f21d35b5fa0 R15: 00007ffc2192f778
[  154.674581][T12428]  </TASK>
[  154.674583][T12428] 
[  154.797550][T12428] Allocated by task 11764:
[  154.799387][T12428]  kasan_save_track+0x3e/0x80
[  154.801343][T12428]  __kasan_slab_alloc+0x6c/0x80
[  154.803341][T12428]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  154.805586][T12428]  xfrm_state_alloc+0x24/0x2f0
[  154.807728][T12428]  xfrm_add_sa+0x17d1/0x4070
[  154.809654][T12428]  xfrm_user_rcv_msg+0x7a3/0xab0
[  154.811683][T12428]  netlink_rcv_skb+0x208/0x470
[  154.813671][T12428]  xfrm_netlink_rcv+0x79/0x90
[  154.815613][T12428]  netlink_unicast+0x82f/0x9e0
[  154.817603][T12428]  netlink_sendmsg+0x805/0xb30
[  154.819630][T12428]  __sock_sendmsg+0x21c/0x270
[  154.821602][T12428]  ____sys_sendmsg+0x505/0x830
[  154.823616][T12428]  ___sys_sendmsg+0x21f/0x2a0
[  154.825636][T12428]  __x64_sys_sendmsg+0x19b/0x260
[  154.827684][T12428]  do_syscall_64+0xfa/0x3b0
[  154.829581][T12428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.832041][T12428] 
[  154.833073][T12428] Freed by task 790:
[  154.834568][T12428]  kasan_save_track+0x3e/0x80
[  154.836152][T12428]  kasan_save_free_info+0x46/0x50
[  154.838207][T12428]  __kasan_slab_free+0x62/0x70
[  154.840229][T12428]  kmem_cache_free+0x18f/0x400
[  154.842281][T12428]  xfrm_state_gc_task+0x518/0x6a0
[  154.844366][T12428]  process_scheduled_works+0xae1/0x17b0
[  154.846649][T12428]  worker_thread+0x8a0/0xda0
[  154.848550][T12428]  kthread+0x711/0x8a0
[  154.850242][T12428]  ret_from_fork+0x3fc/0x770
[  154.852244][T12428]  ret_from_fork_asm+0x1a/0x30
[  154.854238][T12428] 
[  154.855264][T12428] The buggy address belongs to the object at ffff888122c9cd80
[  154.855264][T12428]  which belongs to the cache xfrm_state of size 928
[  154.861041][T12428] The buggy address is located 816 bytes inside of
[  154.861041][T12428]  freed 928-byte region [ffff888122c9cd80, ffff888122c9d120)
[  154.866721][T12428] 
[  154.867761][T12428] The buggy address belongs to the physical page:
[  154.870412][T12428] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888122c9db00 pfn:0x122c9c
[  154.874497][T12428] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  154.877455][T12428] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  154.880487][T12428] page_type: f5(slab)
[  154.881932][T12428] raw: 057ff00000000040 ffff88801af56780 dead000000000122 0000000000000000
[  154.884731][T12428] raw: ffff888122c9db00 00000000800e000c 00000000f5000000 0000000000000000
[  154.887463][T12428] head: 057ff00000000040 ffff88801af56780 dead000000000122 0000000000000000
[  154.890866][T12428] head: ffff888122c9db00 00000000800e000c 00000000f5000000 0000000000000000
[  154.894429][T12428] head: 057ff00000000002 ffffea00048b2701 00000000ffffffff 00000000ffffffff
[  154.897939][T12428] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  154.901498][T12428] page dumped because: kasan: bad access detected
[  154.904053][T12428] page_owner tracks the page as allocated
[  154.905939][T12428] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6897, tgid 6896 (syz.1.435), ts 73682681731, free_ts 73597059574
[  154.912112][T12428]  post_alloc_hook+0x240/0x2a0
[  154.913652][T12428]  get_page_from_freelist+0x21e4/0x22c0
[  154.915384][T12428]  __alloc_frozen_pages_noprof+0x181/0x370
[  154.917214][T12428]  alloc_pages_mpol+0x232/0x4a0
[  154.918865][T12428]  allocate_slab+0x8a/0x3b0
[  154.920367][T12428]  ___slab_alloc+0xbfc/0x1480
[  154.921864][T12428]  kmem_cache_alloc_noprof+0x283/0x3c0
[  154.923591][T12428]  xfrm_state_alloc+0x24/0x2f0
[  154.925172][T12428]  xfrm_add_acquire+0xf7/0xb20
[  154.926699][T12428]  xfrm_user_rcv_msg+0x7a3/0xab0
[  154.928333][T12428]  netlink_rcv_skb+0x208/0x470
[  154.929902][T12428]  xfrm_netlink_rcv+0x79/0x90
[  154.931424][T12428]  netlink_unicast+0x82f/0x9e0
[  154.932977][T12428]  netlink_sendmsg+0x805/0xb30
[  154.934552][T12428]  __sock_sendmsg+0x21c/0x270
[  154.936076][T12428]  ____sys_sendmsg+0x505/0x830
[  154.937613][T12428] page last free pid 6889 tgid 6889 stack trace:
[  154.939784][T12428]  __free_frozen_pages+0xc71/0xe70
[  154.941437][T12428]  __slab_free+0x326/0x400
[  154.942873][T12428]  qlist_free_all+0x97/0x140
[  154.944489][T12428]  kasan_quarantine_reduce+0x148/0x160
[  154.946574][T12428]  __kasan_slab_alloc+0x22/0x80
[  154.948336][T12428]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  154.950295][T12428]  getname_flags+0xb8/0x540
[  154.951731][T12428]  __x64_sys_symlinkat+0x7a/0xb0
[  154.953337][T12428]  do_syscall_64+0xfa/0x3b0
[  154.954732][T12428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.956778][T12428] 
[  154.957696][T12428] Memory state around the buggy address:
[  154.959798][T12428]  ffff888122c9cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.962707][T12428]  ffff888122c9d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.965611][T12428] >ffff888122c9d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.968404][T12428]                                      ^
[  154.970382][T12428]  ffff888122c9d100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  154.973147][T12428]  ffff888122c9d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  154.975860][T12428] ==================================================================
[  154.983964][T12428] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  154.986331][T12428] CPU: 0 UID: 0 PID: 12428 Comm: syz.2.2875 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  154.990506][T12428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.993713][T12428] Call Trace:
[  154.994823][T12428]  <TASK>
[  154.995766][T12428]  dump_stack_lvl+0x99/0x250
[  154.997240][T12428]  ? __asan_memcpy+0x40/0x70
[  154.998718][T12428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.000372][T12428]  ? __pfx__printk+0x10/0x10
[  155.001866][T12428]  panic+0x2db/0x790
[  155.003096][T12428]  ? __pfx_panic+0x10/0x10
[  155.004544][T12428]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  155.006379][T12428]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.008339][T12428]  ? print_memory_metadata+0x314/0x400
[  155.010039][T12428]  ? xfrm_state_find+0x2cf2/0x5400
[  155.011699][T12428]  check_panic_on_warn+0x89/0xb0
[  155.013324][T12428]  ? xfrm_state_find+0x2cf2/0x5400
[  155.014995][T12428]  end_report+0x78/0x160
[  155.016421][T12428]  kasan_report+0x129/0x150
[  155.017918][T12428]  ? xfrm_state_find+0x2cf2/0x5400
[  155.019589][T12428]  xfrm_state_find+0x2cf2/0x5400
[  155.021225][T12428]  ? xfrm_state_find+0x1da/0x5400
[  155.022859][T12428]  ? __pfx_xfrm_state_find+0x10/0x10
[  155.024555][T12428]  ? xfrm4_get_saddr+0xd5/0x140
[  155.026150][T12428]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  155.027820][T12428]  ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80
[  155.029820][T12428]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  155.031778][T12428]  ? fib_rules_lookup+0xc55/0xe90
[  155.033378][T12428]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  155.035382][T12428]  ? __lock_acquire+0xab9/0xd20
[  155.036915][T12428]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  155.038599][T12428]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  155.040361][T12428]  ? xfrm_expand_policies+0x41f/0x6a0
[  155.042081][T12428]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  155.043819][T12428]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  155.045785][T12428]  ? rcuref_put+0x1b7/0x210
[  155.047280][T12428]  ? __pfx_rcuref_put+0x10/0x10
[  155.048837][T12428]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  155.050627][T12428]  xfrm_lookup_route+0x3c/0x1c0
[  155.052178][T12428]  __ip4_datagram_connect+0x9a5/0x1270
[  155.054116][T12428]  __ip6_datagram_connect+0x9f0/0x1150
[  155.056014][T12428]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  155.058117][T12428]  ? __local_bh_enable_ip+0x12d/0x1c0
[  155.059885][T12428]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  155.061757][T12428]  ip6_datagram_connect_v6_only+0x63/0xa0
[  155.063591][T12428]  __sys_connect+0x316/0x440
[  155.065121][T12428]  ? __pfx___sys_connect+0x10/0x10
[  155.066803][T12428]  ? rcu_is_watching+0x15/0xb0
[  155.068422][T12428]  __x64_sys_connect+0x7a/0x90
[  155.069955][T12428]  do_syscall_64+0xfa/0x3b0
[  155.071402][T12428]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.073147][T12428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.075255][T12428]  ? exc_page_fault+0x9f/0xf0
[  155.077118][T12428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.079263][T12428] RIP: 0033:0x7f21d338ebe9
[  155.080977][T12428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.087690][T12428] RSP: 002b:00007f21d41d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  155.090338][T12428] RAX: ffffffffffffffda RBX: 00007f21d35b5fa0 RCX: 00007f21d338ebe9
[  155.092918][T12428] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004
[  155.095474][T12428] RBP: 00007f21d3411e19 R08: 0000000000000000 R09: 0000000000000000
[  155.098024][T12428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.100552][T12428] R13: 00007f21d35b6038 R14: 00007f21d35b5fa0 R15: 00007ffc2192f778
[  155.103228][T12428]  </TASK>
[  155.104947][T12428] Kernel Offset: disabled
[  155.106552][T12428] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:35:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013d2 RDI=00000000000013d3 RBP=00000000000003f8 RSP=ffffc900065e6d10
R8 =ffff8881078b8237 R9 =1ffff11020f17046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95910 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f21d41d96c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30b22ff8 CR3=0000000026b66000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f21d3587498 00007f21d3587470 XMM03=00007f21d35874a8 00007f21d35874a0
XMM04=00007f21d40ed100 00007f21d3587460 XMM05=00007f21d3587478 00007f21d35874c0
XMM06=00007f21d35874b8 00007f21d35874b0 XMM07=00007f21d35874a8 00007f21d35874a0
XMM08=0000000000000000 00007f21d3412ee7 XMM09=0000000000000000 00007f21d3412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4451b RBX=1ffff11009608385 RCX=ffff8881098fd640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900072f77e0 RSP=ffffc900072f7660
R8 =ffffffff8fa07af7 R9 =1ffffffff1f40f5e R10=dffffc0000000000 R11=fffffbfff1f40f5f
R12=ffff88804b041c28 R13=dffffc0000000000 R14=ffff88813663b180 R15=0000000000000000
RIP=ffffffff81b44503 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30b22ff8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fca95f87498 00007fca95f87470 XMM03=00007fca95f874a8 00007fca95f874a0
XMM04=00007fca96aed100 00007fca95f87460 XMM05=00007fca95f87478 00007fca95f874c0
XMM06=00007fca95f874b8 00007fca95f874b0 XMM07=00007fca95f874a8 00007fca95f874a0
XMM08=0000000000000000 00007fca95e12ee7 XMM09=0000000000000000 00007fca95e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
