last executing test programs:

1.279003132s ago: executing program 1 (id=8527):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@in6_addr=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1080}, 0x0)

1.200248432s ago: executing program 1 (id=8531):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

959.619827ms ago: executing program 1 (id=8534):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x18}, 0xfc00)

889.753626ms ago: executing program 1 (id=8535):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

889.537753ms ago: executing program 1 (id=8536):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x24002011}, 0x440a1)
recvmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000002f00)=""/4109, 0x100d}], 0x2}, 0x40000020)

810.457557ms ago: executing program 1 (id=8537):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000180)="e2", 0xb, 0x1, 0xc45, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'})

229.732593ms ago: executing program 0 (id=8551):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x20)

229.507102ms ago: executing program 0 (id=8553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

229.253014ms ago: executing program 0 (id=8555):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x20, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x7, 0xd99d}}]}]}}}]}, 0x68}}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0xc800, &(0x7f0000000440)={0x11, 0x18, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14)

169.247596ms ago: executing program 0 (id=8558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)

139.199237ms ago: executing program 0 (id=8560):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8", 0x31}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r1 = socket$inet(0xa, 0x801, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0xfffffffd)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$kcm(0x11, 0x200000000000002, 0x300)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x4)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

139.062724ms ago: executing program 2 (id=8561):
unshare(0x22020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10)

77.39214ms ago: executing program 2 (id=8562):
unshare(0x20000400)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x20, 0x0, 0x0)

77.25162ms ago: executing program 2 (id=8563):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0)

76.438799ms ago: executing program 0 (id=8564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000004080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}]}]}]}], {0x14}}, 0x80}}, 0x4000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

76.354749ms ago: executing program 2 (id=8565):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1b)

162.79µs ago: executing program 2 (id=8566):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e", 0x10}], 0x1}}], 0x1, 0x8810)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)

0s ago: executing program 2 (id=8567):
unshare(0x60600)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000100)=0xfffffffffffffefa)

kernel console output (not intermixed with test programs):

>
[  125.057657][T12354] bond0 (unregistering): Released all slaves
[  125.946259][T12458] __nla_validate_parse: 9 callbacks suppressed
[  125.946269][T12458] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2823'.
[  126.107104][T12396] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  126.124490][T12464] netlink: 'syz.2.2826': attribute type 1 has an invalid length.
[  126.151924][T12464] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  126.171875][T12464] veth5: entered promiscuous mode
[  126.174962][T12464] bond0: (slave veth5): Enslaving as a backup interface with a down link
[  126.187733][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2826'.
[  126.204103][ T5827] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  126.209696][T12464] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.214149][T12471] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2828'.
[  126.321730][T12194] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  126.348833][T12487] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2835'.
[  126.376286][T12489] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  126.508259][T12507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.530610][T12507] syzkaller0: entered promiscuous mode
[  126.533729][T12507] syzkaller0: entered allmulticast mode
[  126.548935][T12507] tipc: Resetting bearer <eth:syzkaller0>
[  126.555102][T12505] tipc: Resetting bearer <eth:syzkaller0>
[  126.566307][T12505] tipc: Disabling bearer <eth:syzkaller0>
[  126.686218][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'.
[  126.751434][T12538] netlink: 'syz.0.2853': attribute type 9 has an invalid length.
[  126.753860][T12538] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2853'.
[  126.795167][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2856'.
[  126.811727][T12544] openvswitch: netlink: EtherType 0 is less than min 600
[  126.925166][T12562] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2862'.
[  127.345471][T12627] lo speed is unknown, defaulting to 1000
[  127.365107][T12631] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  127.390388][T12634] Bluetooth: MGMT ver 1.23
[  127.518139][T12650] netlink: 'syz.0.2900': attribute type 1 has an invalid length.
[  127.524001][T12650] netlink: 'syz.0.2900': attribute type 2 has an invalid length.
[  127.526615][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'.
[  127.612908][T12661] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.618278][T12661] bond0: (slave rose0): Enslaving as an active interface with an up link
[  127.861363][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2916'.
[  128.004186][T12716] netlink: 'syz.2.2924': attribute type 1 has an invalid length.
[  128.010914][T12716] netlink: 'syz.2.2924': attribute type 2 has an invalid length.
[  129.105906][T12815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  129.109447][T12815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.112923][T12815] hsr0: entered promiscuous mode
[  129.114625][T12815] hsr0: entered allmulticast mode
[  129.116388][T12815] hsr_slave_0: entered allmulticast mode
[  129.118326][T12815] hsr_slave_1: entered allmulticast mode
[  129.338609][T12827] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  129.615962][T12873] netlink: 'syz.2.2991': attribute type 1 has an invalid length.
[  129.628446][T12875] IPVS: stopping backup sync thread 9456 ...
[  130.018628][T12916] netlink: 'syz.2.3010': attribute type 1 has an invalid length.
[  130.031706][T12916] bond3: entered promiscuous mode
[  130.033734][T12916] 8021q: adding VLAN 0 to HW filter on device bond3
[  130.145508][T12936] netlink: 'syz.0.3018': attribute type 3 has an invalid length.
[  130.148886][T12936] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  130.153028][T12936] NCSI netlink: No device for ifindex 0
[  130.755611][T12997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.758396][T12997] syzkaller0: entered promiscuous mode
[  130.760973][T12997] syzkaller0: entered allmulticast mode
[  130.768206][T12997] tipc: Resetting bearer <eth:syzkaller0>
[  130.773023][T12996] tipc: Resetting bearer <eth:syzkaller0>
[  130.781836][T12996] tipc: Disabling bearer <eth:syzkaller0>
[  131.235583][T13006] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  131.311703][T13012] __nla_validate_parse: 15 callbacks suppressed
[  131.311715][T13012] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3054'.
[  131.582919][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3056'.
[  132.102511][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'.
[  132.245306][T13045] lo speed is unknown, defaulting to 1000
[  132.273906][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.580790][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'.
[  132.633325][T13075] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3079'.
[  132.700337][T13085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.821177][T13093] netlink: 'syz.0.3087': attribute type 1 has an invalid length.
[  132.823800][T13093] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3087'.
[  133.082939][T13117] netlink: 'syz.1.3099': attribute type 5 has an invalid length.
[  133.085661][T13117] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3099'.
[  133.119796][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3101'.
[  133.132944][T13121] bond6: entered promiscuous mode
[  133.134966][T13121] 8021q: adding VLAN 0 to HW filter on device bond6
[  133.192852][T13121] bond6 (unregistering): Released all slaves
[  133.551172][T13149] netlink: 'syz.0.3114': attribute type 2 has an invalid length.
[  133.553817][T13149] netlink: 'syz.0.3114': attribute type 1 has an invalid length.
[  133.556481][T13149] netlink: 'syz.0.3114': attribute type 1 has an invalid length.
[  133.579139][T13153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.584787][T13153] syzkaller0: entered promiscuous mode
[  133.587306][T13153] syzkaller0: entered allmulticast mode
[  133.602949][T13153] tipc: Resetting bearer <eth:syzkaller0>
[  133.607530][T13151] tipc: Resetting bearer <eth:syzkaller0>
[  133.617433][T13151] tipc: Disabling bearer <eth:syzkaller0>
[  133.640285][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3111'.
[  134.249539][T13202] tun0: tun_chr_ioctl cmd 1074025675
[  134.251358][T13202] tun0: persist enabled
[  134.259512][T13202] tun0: tun_chr_ioctl cmd 1074025675
[  134.261339][T13202] tun0: persist enabled
[  134.338556][T13206] lo speed is unknown, defaulting to 1000
[  134.945546][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3153'.
[  134.950092][T13239] netlink: 'syz.1.3153': attribute type 18 has an invalid length.
[  134.954049][T13239] netlink: 'syz.1.3153': attribute type 18 has an invalid length.
[  135.025144][T13247] lo speed is unknown, defaulting to 1000
[  135.098031][T13251] batadv_slave_1: entered promiscuous mode
[  135.102101][T13250] batadv_slave_1: left promiscuous mode
[  135.536229][T13275] bond0: (slave wlan1): Releasing backup interface
[  135.754085][T13301] netlink: 'syz.0.3179': attribute type 64 has an invalid length.
[  135.867447][T13309] syzkaller0: entered promiscuous mode
[  135.869458][T13309] syzkaller0: entered allmulticast mode
[  136.443018][T13314] netlink: 'syz.2.3186': attribute type 13 has an invalid length.
[  136.445926][T13314] netlink: 'syz.2.3186': attribute type 17 has an invalid length.
[  136.583662][T13300] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  136.661803][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.670045][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.708151][T13314] 8021q: adding VLAN 0 to HW filter on device team0
[  136.711223][T13314] tipc: Resetting bearer <eth:team0>
[  136.713305][T13314] tipc: Resetting bearer <eth:team0>
[  136.715861][T13314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.608046][T13342] __nla_validate_parse: 3 callbacks suppressed
[  137.608056][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'.
[  137.613590][T13342] netlink: 'syz.1.3193': attribute type 30 has an invalid length.
[  137.651073][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'.
[  137.654793][T13342] netlink: 'syz.1.3193': attribute type 30 has an invalid length.
[  137.827184][T13358] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3201'.
[  137.828835][T13357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3200'.
[  137.860955][T13363] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3204'.
[  137.864068][T13363] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3204'.
[  138.035192][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3216'.
[  138.127451][T13406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.163522][T13406] syzkaller0: entered promiscuous mode
[  138.165489][T13406] syzkaller0: entered allmulticast mode
[  138.168896][T13406] tipc: Resetting bearer <eth:syzkaller0>
[  138.177332][T13405] tipc: Resetting bearer <eth:syzkaller0>
[  139.008077][T13405] tipc: Disabling bearer <eth:syzkaller0>
[  139.430415][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'.
[  139.433429][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'.
[  139.439384][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'.
[  139.772206][T13499] syzkaller0: entered promiscuous mode
[  139.774177][T13499] syzkaller0: entered allmulticast mode
[  141.165237][T13601] rdma_op ffff8881112ca1f0 conn xmit_rdma 0000000000000000
[  141.274159][T13615] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  141.919923][T13646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.234559][T13665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.240385][T13665] syzkaller0: entered promiscuous mode
[  142.244617][T13665] syzkaller0: entered allmulticast mode
[  142.272331][T13665] tipc: Resetting bearer <eth:syzkaller0>
[  142.276579][T13664] tipc: Resetting bearer <eth:syzkaller0>
[  142.297442][T13664] tipc: Disabling bearer <eth:syzkaller0>
[  142.631830][T13705] netlink: 'syz.2.3359': attribute type 23 has an invalid length.
[  142.736008][T13711] __nla_validate_parse: 13 callbacks suppressed
[  142.736020][T13711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3362'.
[  143.114925][T13741] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3375'.
[  143.122413][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'.
[  143.279783][T13750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3380'.
[  143.282830][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3380'.
[  143.286503][T13750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3380'.
[  143.290754][T13750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3380'.
[  143.378377][T13765] netlink: 'syz.0.3386': attribute type 1 has an invalid length.
[  143.383264][T13765] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3386'.
[  143.386317][T13765] netlink: 'syz.0.3386': attribute type 1 has an invalid length.
[  143.482907][T13778] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3390'.
[  143.485939][T13778] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  143.488580][T13778] openvswitch: netlink: Duplicate key (type 0).
[  143.997951][T13813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3403'.
[  144.050701][T13817] gretap0: entered promiscuous mode
[  144.052583][T13817] vlan2: entered promiscuous mode
[  144.299225][   T10] IPVS: starting estimator thread 0...
[  144.308825][T13833] syzkaller1: entered promiscuous mode
[  144.311110][T13833] syzkaller1: entered allmulticast mode
[  144.391509][T13834] IPVS: using max 78 ests per chain, 187200 per kthread
[  144.617893][T13874] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  144.634597][T13878] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  144.826186][T13902] tipc: Resetting bearer <eth:team0>
[  144.828330][T13902] tipc: Resetting bearer <eth:team0>
[  144.831053][T13902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.838228][T13902] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  145.798447][T13932] netlink: 'syz.0.3460': attribute type 4 has an invalid length.
[  145.947272][ T5827] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  146.759842][T13979] netlink: 'syz.0.3479': attribute type 29 has an invalid length.
[  147.709135][T14047] ip6erspan0: entered promiscuous mode
[  148.266173][T14081] __nla_validate_parse: 6 callbacks suppressed
[  148.266184][T14081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3526'.
[  148.272977][T14081] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3526'.
[  148.277178][T14081] netlink: 'syz.2.3526': attribute type 6 has an invalid length.
[  148.287170][T14081] netlink: 'syz.2.3526': attribute type 5 has an invalid length.
[  148.290011][T14081] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3526'.
[  148.338355][T14093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3530'.
[  148.391006][T14091] nbd2: detected capacity change from 0 to 63
[  148.395320][   T56] block nbd2: Receive control failed (result -104)
[  148.437435][T14109] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3537'.
[  148.458828][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3538'.
[  148.462523][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'.
[  148.465414][T14111] netlink: 'syz.2.3538': attribute type 5 has an invalid length.
[  148.491929][T14117] netlink: 'syz.2.3540': attribute type 29 has an invalid length.
[  148.495626][T14117] netlink: 'syz.2.3540': attribute type 29 has an invalid length.
[  148.506043][T14117] netlink: 'syz.2.3540': attribute type 29 has an invalid length.
[  148.508807][T14117] netlink: 'syz.2.3540': attribute type 29 has an invalid length.
[  148.516653][T14117] netlink: 'syz.2.3540': attribute type 29 has an invalid length.
[  148.523085][T14117] netlink: 'syz.2.3540': attribute type 29 has an invalid length.
[  148.525796][T14117] netlink: 'syz.2.3540': attribute type 29 has an invalid length.
[  148.640071][T14137] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3550'.
[  149.006118][T14196] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3577'.
[  149.062247][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'.
[  150.152820][T14277] ip6gretap0: entered promiscuous mode
[  150.267422][T14291] lo speed is unknown, defaulting to 1000
[  150.283248][T14244] Bluetooth: hci0: Opcode 0x080f failed: -4
[  150.521471][T14314] syzkaller1: tun_chr_ioctl cmd 1074025672
[  150.523585][T14314] syzkaller1: ignored: set checksum disabled
[  151.031253][T14348] netpci0: tun_chr_ioctl cmd 1074025681
[  152.376447][T14472] sctp: [Deprecated]: syz.0.3701 (pid 14472) Use of int in max_burst socket option deprecated.
[  152.376447][T14472] Use struct sctp_assoc_value instead
[  153.392758][   T60] block nbd0: Possible stuck request ffff888021b18000: control (read@0,1024B). Runtime 60 seconds
[  153.396728][   T60] block nbd0: Possible stuck request ffff888021b18200: control (read@1024,1024B). Runtime 60 seconds
[  153.400466][   T60] block nbd0: Possible stuck request ffff888021b18400: control (read@2048,1024B). Runtime 60 seconds
[  153.403962][   T60] block nbd0: Possible stuck request ffff888021b18600: control (read@3072,1024B). Runtime 60 seconds
[  153.750005][T14584] bridge5: entered promiscuous mode
[  154.309749][ T5269] udevd[5269]: worker [5824] /devices/virtual/block/nbd0 is taking a long time
[  154.803600][T14620] validate_nla: 26 callbacks suppressed
[  154.803611][T14620] netlink: 'syz.0.3770': attribute type 7 has an invalid length.
[  154.809138][T14620] netlink: 'syz.0.3770': attribute type 3 has an invalid length.
[  154.812201][T14620] __nla_validate_parse: 10 callbacks suppressed
[  154.812208][T14620] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3770'.
[  154.913938][T14630] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3775'.
[  155.064817][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3781'.
[  155.068583][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3781'.
[  155.154349][T14656] netlink: 'syz.2.3787': attribute type 21 has an invalid length.
[  155.250805][T14659] netlink: 'syz.0.3788': attribute type 303 has an invalid length.
[  155.254187][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'.
[  155.260072][T14659] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.263167][T14659] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.466229][T14691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3804'.
[  155.996886][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'.
[  156.004970][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'.
[  156.557134][T14779] netlink: 'syz.1.3840': attribute type 3 has an invalid length.
[  156.561371][T14779] netlink: 'syz.1.3840': attribute type 3 has an invalid length.
[  156.625585][T14785] bridge_slave_0: invalid flags given to default FDB implementation
[  156.921270][T14810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.923635][T14810] IPv6: NLM_F_CREATE should be set when creating new route
[  156.926025][T14810] IPv6: NLM_F_CREATE should be set when creating new route
[  156.962537][T14815] netlink: 'syz.2.3856': attribute type 1 has an invalid length.
[  156.982756][T14815] bond6: entered promiscuous mode
[  156.984394][T14815] bond6: entered allmulticast mode
[  156.992642][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3856'.
[  157.002741][T14815] bridge7: the hash_elasticity option has been deprecated and is always 16
[  157.030988][T14815] bond6: (slave bridge7): making interface the new active one
[  157.033849][T14815] bridge7: entered promiscuous mode
[  157.036914][T14815] bridge7: entered allmulticast mode
[  157.041422][T14815] bond6: (slave bridge7): Enslaving as an active interface with an up link
[  157.044340][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'.
[  157.121992][T14832] netlink: 'syz.0.3863': attribute type 28 has an invalid length.
[  157.255166][T14852] netlink: 'syz.0.3872': attribute type 3 has an invalid length.
[  157.269598][T14850] only policy match revision 0 supported
[  157.269609][T14850] unable to load match
[  157.314952][ T5816] Bluetooth: hci2: link tx timeout
[  157.316988][ T5816] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.545392][T14879] macvlan1: entered promiscuous mode
[  157.549335][T14879] macvlan1: left promiscuous mode
[  157.869245][T14925] netlink: 'syz.1.3907': attribute type 3 has an invalid length.
[  157.924789][T14931] IPVS: Scheduler module ip_vs_sip not found
[  157.927248][T14931] IPVS: length: 8 != 446622349272
[  158.210295][T14964] geneve0: entered allmulticast mode
[  158.308276][T14976] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.313671][T14976] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  158.317681][T14976] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  158.363340][T14976] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.366707][T14976] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  158.371650][T14976] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  158.402943][T14976] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.409275][T14976] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  158.412384][T14976] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  158.464856][T14976] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.470278][T14976] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  158.474748][T14976] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  158.551521][ T5827] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.554237][ T5827] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  158.557092][ T5827] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  158.566419][ T5827] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.571583][ T5827] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  158.574308][ T5827] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  158.583649][ T5827] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.587127][ T5827] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  158.591006][ T5827] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  158.598128][ T5827] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.601048][ T5827] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  158.603731][ T5827] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  158.679993][T15008] vlan0: entered promiscuous mode
[  158.681687][T15008] bond0: entered promiscuous mode
[  158.683288][T15008] bond_slave_0: entered promiscuous mode
[  158.685541][T15008] bond_slave_1: entered promiscuous mode
[  159.389263][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[  159.392660][T15079] pim6reg1: entered promiscuous mode
[  159.395974][T15079] pim6reg1: entered allmulticast mode
[  160.081717][T15084] validate_nla: 2 callbacks suppressed
[  160.081799][T15084] netlink: 'syz.2.3979': attribute type 21 has an invalid length.
[  160.086250][T15084] netlink: 'syz.2.3979': attribute type 1 has an invalid length.
[  160.158363][T15090] __nla_validate_parse: 12 callbacks suppressed
[  160.158374][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'.
[  160.987292][T15098] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3983'.
[  160.990690][T15098] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  161.113196][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3995'.
[  161.118866][T15116] xfrm1: entered promiscuous mode
[  161.129369][T15116] xfrm1: entered allmulticast mode
[  161.174293][ T5813] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  161.264204][T15129] netlink: 'syz.0.4001': attribute type 2 has an invalid length.
[  161.295971][T15131] netlink: 'syz.0.4002': attribute type 21 has an invalid length.
[  161.298648][T15131] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4002'.
[  161.302797][T15131] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4002'.
[  161.414616][T15146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.470962][T15154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.525681][T15146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.530592][T15146] macvlan0: entered allmulticast mode
[  161.532726][T15146] veth1_vlan: entered allmulticast mode
[  161.535576][T15146] macvlan0: entered promiscuous mode
[  161.537760][T15146] team0: Port device macvlan0 added
[  161.705774][   T33] audit: type=1800 audit(1754486617.349:3): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4015" name="cgroup.controllers" dev="tmpfs" ino=6566 res=0 errno=0
[  161.804582][T15161] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4016'.
[  162.027571][T15179] netlink: 'syz.2.4025': attribute type 1 has an invalid length.
[  162.049368][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4026'.
[  162.159743][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4030'.
[  162.169306][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4030'.
[  162.288946][T15201] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4035'.
[  162.422297][T15213] syzkaller1: entered promiscuous mode
[  162.424306][T15213] syzkaller1: entered allmulticast mode
[  162.802579][T15260] bridge0: port 3(dummy0) entered blocking state
[  162.803473][T15261] netlink: 'syz.1.4065': attribute type 2 has an invalid length.
[  162.804787][T15260] bridge0: port 3(dummy0) entered listening state
[  162.816496][T15260] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  163.160582][T15306] netlink: 'syz.0.4086': attribute type 3 has an invalid length.
[  163.164356][T15306] netlink: 'syz.0.4086': attribute type 3 has an invalid length.
[  163.168585][T15308] syz.1.4087: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  163.176220][T15308] CPU: 1 UID: 0 PID: 15308 Comm: syz.1.4087 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  163.176233][T15308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.176238][T15308] Call Trace:
[  163.176242][T15308]  <TASK>
[  163.176246][T15308]  dump_stack_lvl+0x189/0x250
[  163.176263][T15308]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.176271][T15308]  ? __pfx__printk+0x10/0x10
[  163.176282][T15308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  163.176292][T15308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  163.176301][T15308]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  163.176311][T15308]  warn_alloc+0x214/0x310
[  163.176320][T15308]  ? stack_depot_save_flags+0x40/0x900
[  163.176330][T15308]  ? __pfx_warn_alloc+0x10/0x10
[  163.176339][T15308]  ? kasan_save_track+0x4f/0x80
[  163.176350][T15308]  ? xskq_create+0x56/0x170
[  163.176360][T15308]  ? xsk_init_queue+0xb0/0x110
[  163.176368][T15308]  ? xsk_setsockopt+0x4dc/0x8d0
[  163.176376][T15308]  ? do_sock_setsockopt+0x17c/0x1b0
[  163.176383][T15308]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  163.176390][T15308]  ? do_syscall_64+0xfa/0x3b0
[  163.176400][T15308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.176410][T15308]  __vmalloc_node_range_noprof+0x125/0x12f0
[  163.176450][T15308]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  163.176464][T15308]  ? __kasan_kmalloc+0x93/0xb0
[  163.176476][T15308]  vmalloc_user_noprof+0xad/0xf0
[  163.176484][T15308]  ? xskq_create+0xbf/0x170
[  163.176494][T15308]  xskq_create+0xbf/0x170
[  163.176506][T15308]  xsk_init_queue+0xb0/0x110
[  163.176517][T15308]  xsk_setsockopt+0x4dc/0x8d0
[  163.176528][T15308]  ? __pfx_xsk_setsockopt+0x10/0x10
[  163.176537][T15308]  ? __pfx_aa_sk_perm+0x10/0x10
[  163.176550][T15308]  ? aa_sock_opt_perm+0x74/0x110
[  163.176561][T15308]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  163.176571][T15308]  ? __pfx_xsk_setsockopt+0x10/0x10
[  163.176581][T15308]  do_sock_setsockopt+0x17c/0x1b0
[  163.176590][T15308]  __x64_sys_setsockopt+0x13f/0x1b0
[  163.176599][T15308]  do_syscall_64+0xfa/0x3b0
[  163.176610][T15308]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.176620][T15308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.176626][T15308]  ? exc_page_fault+0x9f/0xf0
[  163.176637][T15308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.176644][T15308] RIP: 0033:0x7fc029d8ebe9
[  163.176652][T15308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.176658][T15308] RSP: 002b:00007fc02ac2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  163.176667][T15308] RAX: ffffffffffffffda RBX: 00007fc029fb5fa0 RCX: 00007fc029d8ebe9
[  163.176672][T15308] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  163.176676][T15308] RBP: 00007fc029e11e19 R08: 0000000000000004 R09: 0000000000000000
[  163.176681][T15308] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.176685][T15308] R13: 00007fc029fb6038 R14: 00007fc029fb5fa0 R15: 00007fff32f617a8
[  163.176696][T15308]  </TASK>
[  163.176705][T15308] Mem-Info:
[  163.288478][T15308] active_anon:5609 inactive_anon:0 isolated_anon:0
[  163.288478][T15308]  active_file:1051 inactive_file:38253 isolated_file:0
[  163.288478][T15308]  unevictable:1768 dirty:275 writeback:0
[  163.288478][T15308]  slab_reclaimable:10349 slab_unreclaimable:79123
[  163.288478][T15308]  mapped:18355 shmem:2462 pagetables:1122
[  163.288478][T15308]  sec_pagetables:0 bounce:0
[  163.288478][T15308]  kernel_misc_reclaimable:0
[  163.288478][T15308]  free:263021 free_pcp:26263 free_cma:0
[  163.303511][T15308] Node 0 active_anon:14352kB inactive_anon:0kB active_file:3360kB inactive_file:23704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30800kB dirty:960kB writeback:0kB shmem:4952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7712kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.319129][T15308] Node 1 active_anon:8056kB inactive_anon:0kB active_file:844kB inactive_file:129316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42620kB dirty:140kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4620kB pagetables:1956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.338304][T15308] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  163.347721][T15308] lowmem_reserve[]: 0 814 814 814 814
[  163.352058][T15308] Node 0 DMA32 free:294676kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14316kB inactive_anon:0kB active_file:3360kB inactive_file:23704kB unevictable:3536kB writepending:968kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:42136kB local_pcp:13476kB free_cma:0kB
[  163.362945][T15308] lowmem_reserve[]: 0 0 0 0 0
[  163.365375][T15308] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  163.375223][T15308] lowmem_reserve[]: 0 0 854 854 854
[  163.377085][T15308] Node 1 Normal free:283784kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8028kB inactive_anon:0kB active_file:844kB inactive_file:129316kB unevictable:3536kB writepending:140kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:63152kB local_pcp:41636kB free_cma:0kB
[  163.394083][T15308] lowmem_reserve[]: 0 0 0 0 0
[  163.395678][T15308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  163.399992][T15308] Node 0 DMA32: 1031*4kB (UE) 727*8kB (UME) 400*16kB (UM) 392*32kB (UM) 209*64kB (UME) 224*128kB (UME) 144*256kB (UME) 69*512kB (UM) 20*1024kB (UE) 14*2048kB (U) 25*4096kB (UM) = 294676kB
[  163.406225][T15308] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  163.411720][T15308] Node 1 Normal: 914*4kB (UM) 254*8kB (UME) 260*16kB (UM) 154*32kB (UME) 18*64kB (UME) 97*128kB (UE) 76*256kB (UM) 49*512kB (UME) 22*1024kB (UM) 20*2048kB (UM) 36*4096kB (UM) = 283832kB
[  163.417840][T15308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.421141][T15308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.424107][T15308] 41756 total pagecache pages
[  163.426163][T15308] 0 pages in swap cache
[  163.427598][T15308] Free swap  = 124996kB
[  163.429027][T15308] Total swap = 124996kB
[  163.430719][T15308] 786301 pages RAM
[  163.431987][T15308] 0 pages HighMem/MovableOnly
[  163.433572][T15308] 240546 pages reserved
[  163.434991][T15308] 0 pages cma reserved
[  163.456469][T15326] veth5: entered promiscuous mode
[  163.501344][T15328] lo speed is unknown, defaulting to 1000
[  163.567349][T15338] netlink: 'syz.2.4102': attribute type 15 has an invalid length.
[  163.570708][T15338] netlink: 'syz.2.4102': attribute type 15 has an invalid length.
[  163.746624][T15361] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  164.398726][T15438] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  164.454565][T15446] sctp: [Deprecated]: syz.0.4151 (pid 15446) Use of int in max_burst socket option.
[  164.454565][T15446] Use struct sctp_assoc_value instead
[  164.672993][T15470] bond6: (slave bridge6): making interface the new active one
[  164.676111][T15470] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  164.748247][T15484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.836798][T15497] 8021q: adding VLAN 0 to HW filter on device bond3
[  164.844609][T15497] bond0: (slave bond3): Enslaving as an active interface with a down link
[  164.917995][T15489] lo speed is unknown, defaulting to 1000
[  165.154287][T15532] pim6reg: entered allmulticast mode
[  165.490705][T15574] tipc: Resetting bearer <eth:gre0>
[  165.503439][T15574] team0: Device vlan0 failed to change mtu
[  165.556461][T15584] validate_nla: 4 callbacks suppressed
[  165.556472][T15584] netlink: 'syz.1.4197': attribute type 1 has an invalid length.
[  165.566768][T15584] netlink: 'syz.1.4197': attribute type 2 has an invalid length.
[  165.570868][T15584] netlink: 'syz.1.4197': attribute type 1 has an invalid length.
[  165.573474][T15584] netlink: 'syz.1.4197': attribute type 2 has an invalid length.
[  165.717354][T15601] __nla_validate_parse: 16 callbacks suppressed
[  165.717365][T15601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4203'.
[  165.763444][T15602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.818175][T15602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.894255][T15602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.901665][T15623] dvmrp1: entered allmulticast mode
[  165.906870][T15602] macvlan0: entered allmulticast mode
[  165.908786][T15602] veth1_vlan: entered allmulticast mode
[  165.914814][T15602] team0: Port device macvlan0 added
[  165.919872][T15623] dvmrp1: left allmulticast mode
[  166.120027][T15643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4221'.
[  166.254889][T15663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4230'.
[  166.292151][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4232'.
[  166.312819][T15671] netlink: 'syz.0.4234': attribute type 1 has an invalid length.
[  166.315348][T15671] netlink: 'syz.0.4234': attribute type 2 has an invalid length.
[  166.318667][T15671] netlink: 'syz.0.4234': attribute type 1 has an invalid length.
[  166.321787][T15671] netlink: 'syz.0.4234': attribute type 2 has an invalid length.
[  166.373115][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4236'.
[  166.728908][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'.
[  166.739265][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'.
[  166.765334][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4261'.
[  166.873115][T15754] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  167.055069][T15778] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  167.062322][T15781] nbd: couldn't find device at index 536870912
[  167.635729][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'.
[  167.733820][T15875] netlink: 410 bytes leftover after parsing attributes in process `syz.2.4320'.
[  168.102071][T15897] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  168.105584][T15897] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  169.002248][T15960] netlink: 'syz.0.4356': attribute type 9 has an invalid length.
[  169.013719][T15960] netlink: 'syz.0.4356': attribute type 9 has an invalid length.
[  169.987538][T16021] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  170.175145][T16034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.198056][T16034] syzkaller0: entered promiscuous mode
[  170.200104][ T5816] Bluetooth: hci1: command 0x0406 tx timeout
[  170.203527][T16034] syzkaller0: entered allmulticast mode
[  170.205654][T16034] tipc: Resetting bearer <eth:syzkaller0>
[  170.217562][T16033] tipc: Resetting bearer <eth:syzkaller0>
[  171.061746][T16033] tipc: Disabling bearer <eth:syzkaller0>
[  171.077983][T16040] __nla_validate_parse: 9 callbacks suppressed
[  171.077993][T16040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4393'.
[  171.125976][T16064] bridge0: entered allmulticast mode
[  171.722583][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4447'.
[  171.768222][T16168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4451'.
[  172.181106][T16229] ieee802154 phy1 wpan1: encryption failed: -22
[  172.222602][T16234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4478'.
[  172.253098][T16239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4479'.
[  172.498493][T16268] IPv4: Oversized IP packet from 127.202.26.0
[  172.577590][T16282] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  173.101771][T16332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4521'.
[  173.142472][T16339] validate_nla: 2 callbacks suppressed
[  173.142484][T16339] netlink: 'syz.2.4524': attribute type 11 has an invalid length.
[  173.332314][T16358] ieee802154 phy1 wpan1: encryption failed: -22
[  173.541725][T16381] lo speed is unknown, defaulting to 1000
[  173.556902][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4544'.
[  174.241840][T16469] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  174.344902][T16485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.347633][T16485] syzkaller0: entered promiscuous mode
[  174.351724][T16485] syzkaller0: entered allmulticast mode
[  174.355486][T16485] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  174.363399][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'.
[  174.368369][T16485] tipc: Resetting bearer <eth:syzkaller0>
[  174.372141][T16483] tipc: Resetting bearer <eth:syzkaller0>
[  174.378382][T16483] tipc: Disabling bearer <eth:syzkaller0>
[  174.431554][T16493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4588'.
[  174.452168][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4589'.
[  176.042875][T16649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.045653][T16649] syzkaller0: entered promiscuous mode
[  176.047446][T16649] syzkaller0: entered allmulticast mode
[  176.061620][T16649] tipc: Resetting bearer <eth:syzkaller0>
[  176.066726][T16648] tipc: Resetting bearer <eth:syzkaller0>
[  176.074750][T16648] tipc: Disabling bearer <eth:syzkaller0>
[  176.266906][T16656] syzkaller0: entered promiscuous mode
[  176.268847][T16656] syzkaller0: entered allmulticast mode
[  177.220047][T16688] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  177.222682][T16688] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  177.685172][T16721] syzkaller1: entered promiscuous mode
[  177.687188][T16721] syzkaller1: entered allmulticast mode
[  177.890568][T16747] ieee802154 phy1 wpan1: encryption failed: -22
[  177.918103][T16749] syzkaller1: entered promiscuous mode
[  177.922074][T16749] syzkaller1: entered allmulticast mode
[  178.191604][T16763] lo speed is unknown, defaulting to 1000
[  178.812392][T16784] __nla_validate_parse: 2 callbacks suppressed
[  178.812404][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4701'.
[  179.002066][   T25] block nbd2: Possible stuck request ffff888021bea800: control (read@0,1024B). Runtime 30 seconds
[  179.005604][   T25] block nbd2: Possible stuck request ffff888021beaa00: control (read@1024,1024B). Runtime 30 seconds
[  179.012676][   T25] block nbd2: Possible stuck request ffff888021beac00: control (read@2048,1024B). Runtime 30 seconds
[  179.016139][   T25] block nbd2: Possible stuck request ffff888021beae00: control (read@3072,1024B). Runtime 30 seconds
[  179.694085][T16854] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  179.789509][T16858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4736'.
[  180.116499][T16891] netlink: 'syz.1.4751': attribute type 2 has an invalid length.
[  180.126089][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'.
[  180.251168][T16910] syzkaller0: entered allmulticast mode
[  180.317901][T16916] netlink: 'syz.0.4764': attribute type 11 has an invalid length.
[  180.320788][T16916] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.4764'.
[  180.335520][T16915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.778586][T16976] lo speed is unknown, defaulting to 1000
[  181.547672][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'.
[  181.676313][T17013] delete_channel: no stack
[  182.716997][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4824'.
[  182.720992][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4824'.
[  183.469728][   T60] block nbd0: Possible stuck request ffff888021b18000: control (read@0,1024B). Runtime 90 seconds
[  183.473354][   T60] block nbd0: Possible stuck request ffff888021b18200: control (read@1024,1024B). Runtime 90 seconds
[  183.477116][   T60] block nbd0: Possible stuck request ffff888021b18400: control (read@2048,1024B). Runtime 90 seconds
[  183.481029][   T60] block nbd0: Possible stuck request ffff888021b18600: control (read@3072,1024B). Runtime 90 seconds
[  183.695970][T17100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4840'.
[  183.708119][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4840'.
[  183.712080][T17100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4840'.
[  183.914371][T17128] __nla_validate_parse: 1 callbacks suppressed
[  183.914383][T17128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4857'.
[  184.861084][T17197] netlink: 'syz.2.4885': attribute type 10 has an invalid length.
[  184.863628][T17197] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  184.868159][T17197] team0: Port device netdevsim0 added
[  184.905018][   T33] audit: type=1800 audit(1754486640.549:4): pid=17199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4886" name="@" dev="tmpfs" ino=7816 res=0 errno=0
[  185.801532][T17261] netlink: 'syz.2.4909': attribute type 3 has an invalid length.
[  186.005445][T17272] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4914'.
[  187.421869][T17352] syzkaller1: entered promiscuous mode
[  187.426661][T17352] syzkaller1: entered allmulticast mode
[  187.543666][T17362] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  188.330064][T17413] netlink: 'syz.0.4973': attribute type 3 has an invalid length.
[  188.434611][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4979'.
[  188.594630][T17450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4991'.
[  188.598490][T17450] netem: unknown loss type 13
[  188.600533][T17450] netem: change failed
[  188.658227][T17459] batadv_slave_1: entered promiscuous mode
[  188.662515][T17458] batadv_slave_1: left promiscuous mode
[  188.963261][T17474] netlink: 788 bytes leftover after parsing attributes in process `syz.1.5000'.
[  189.006908][T17476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5001'.
[  189.028790][T17476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5001'.
[  189.187736][T17489] syzkaller1: entered promiscuous mode
[  189.194031][T17489] syzkaller1: entered allmulticast mode
[  189.515402][T17518] vlan0: entered promiscuous mode
[  189.677926][T17545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5034'.
[  189.681357][T17545] tc_dump_action: action bad kind
[  189.746284][T17557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5039'.
[  189.783693][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5041'.
[  189.787858][T17564] veth1_vlan: left allmulticast mode
[  189.792382][T17564] netlink: 'syz.0.5041': attribute type 1 has an invalid length.
[  189.795000][T17564] netlink: 'syz.0.5041': attribute type 2 has an invalid length.
[  190.348239][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5064'.
[  190.352857][T17616] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5064'.
[  190.424405][T17628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5070'.
[  190.489708][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5075'.
[  190.674404][T17655] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  191.765461][T17715] gtp0: entered promiscuous mode
[  191.820828][T17725] ieee802154 phy1 wpan1: encryption failed: -22
[  192.106177][T17760] netlink: 'syz.1.5128': attribute type 1 has an invalid length.
[  192.108830][T17760] netlink: 'syz.1.5128': attribute type 2 has an invalid length.
[  192.118173][T17760] netlink: 'syz.1.5128': attribute type 1 has an invalid length.
[  192.146709][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.151403][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.164175][T17764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.664739][T17789] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  192.673512][T17789] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  193.070760][    C0] bridge0: port 3(dummy0) entered learning state
[  193.114605][T17848] netlink: 'syz.0.5167': attribute type 7 has an invalid length.
[  193.117348][T17848] netlink: 'syz.0.5167': attribute type 8 has an invalid length.
[  193.712454][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.213040][T17915] tipc: Resetting bearer <eth:team0>
[  194.223191][T17915] team0: Port device netdevsim0 removed
[  194.227085][T17915] bond0: (slave ip6gretap1): Removing an active aggregator
[  194.231784][T17915] bond0: (slave ip6gretap1): Releasing backup interface
[  194.234592][T17915] bond0: (slave ip6gretap1): the permanent HWaddr of slave - de:e1:18:2c:b4:4a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  194.247789][T17915] bond0: (slave veth5): Releasing backup interface
[  194.255228][T17915] bond6: (slave bridge7): Releasing active interface
[  194.257980][T17915] bridge7: left promiscuous mode
[  194.260280][T17915] bridge7: left allmulticast mode
[  194.277094][T17919] tipc: Resetting bearer <eth:team0>
[  194.291660][T17919] A link change request failed with some changes committed already. Interface bond6 may have been left with an inconsistent configuration, please check.
[  194.526873][T17942] netlink: 'syz.1.5209': attribute type 2 has an invalid length.
[  195.125914][T18002] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  195.164777][T18003] __nla_validate_parse: 14 callbacks suppressed
[  195.164788][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5224'.
[  195.170160][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5224'.
[  195.954914][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5232'.
[  195.958718][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'.
[  196.050068][ T8824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.052663][ T8824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.061077][T18024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.138182][T18026] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  197.440992][T18078] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5258'.
[  197.664413][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5266'.
[  197.667371][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5266'.
[  197.974300][T18112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.732841][T18215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5319'.
[  198.966877][T18253] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5335'.
[  199.280586][T18290] bridge0: port 1(erspan0) entered blocking state
[  199.282920][T18290] bridge0: port 1(erspan0) entered disabled state
[  199.285341][T18290] erspan0: entered allmulticast mode
[  199.287953][T18290] erspan0: entered promiscuous mode
[  199.292577][T18290] erspan0: left allmulticast mode
[  199.294318][T18290] erspan0: left promiscuous mode
[  199.296711][T18290] bridge0: port 1(erspan0) entered disabled state
[  199.612190][T18328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5369'.
[  199.620647][T18328] vlan0: entered promiscuous mode
[  199.622392][T18328] team0: entered promiscuous mode
[  199.864292][T18360] syzkaller0: entered promiscuous mode
[  199.866242][T18360] syzkaller0: entered allmulticast mode
[  200.266745][T18402] netlink: 'syz.1.5401': attribute type 1 has an invalid length.
[  200.271427][T18402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5401'.
[  200.479819][T18414] xfrm1: entered allmulticast mode
[  200.525202][T18416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5408'.
[  200.575852][T18422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5408'.
[  200.747759][T18446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5421'.
[  200.872036][T18458] lo speed is unknown, defaulting to 1000
[  201.510840][T18465] lo speed is unknown, defaulting to 1000
[  201.763079][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5435'.
[  201.895330][T18492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.898157][T18492] syzkaller0: entered promiscuous mode
[  201.901546][T18492] syzkaller0: entered allmulticast mode
[  201.917400][T18492] tipc: Resetting bearer <eth:syzkaller0>
[  201.923629][T18491] tipc: Resetting bearer <eth:syzkaller0>
[  201.934490][T18491] tipc: Disabling bearer <eth:syzkaller0>
[  202.067989][T18505] netlink: 'syz.0.5444': attribute type 21 has an invalid length.
[  204.233152][T18612] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  204.424320][T18631] netlink: 'syz.0.5497': attribute type 1 has an invalid length.
[  204.447084][T18631] 8021q: adding VLAN 0 to HW filter on device bond7
[  204.448473][T18635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5499'.
[  204.452511][T18635] netlink: 560 bytes leftover after parsing attributes in process `syz.1.5499'.
[  204.543641][T18643] netlink: 'syz.1.5503': attribute type 16 has an invalid length.
[  204.546358][T18643] netlink: 'syz.1.5503': attribute type 1 has an invalid length.
[  204.548885][T18643] netlink: 'syz.1.5503': attribute type 2 has an invalid length.
[  205.212996][T18697] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  205.509643][T18717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5537'.
[  205.657818][T18729] netlink: 'syz.1.5542': attribute type 1 has an invalid length.
[  205.661676][T18729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5542'.
[  205.674879][T18729] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5542'.
[  205.727495][T18735] netlink: 'syz.1.5546': attribute type 46 has an invalid length.
[  207.334639][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5565'.
[  207.715901][T18797] netlink: 'syz.1.5574': attribute type 1 has an invalid length.
[  207.948385][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5582'.
[  208.065799][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5586'.
[  208.393235][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5595'.
[  208.396378][T18843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5595'.
[  208.404557][T18843] gretap3: entered promiscuous mode
[  208.677607][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5605'.
[  208.682731][T18867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5605'.
[  208.998160][T18903] lo speed is unknown, defaulting to 1000
[  209.080615][   T25] block nbd2: Possible stuck request ffff888021bea800: control (read@0,1024B). Runtime 60 seconds
[  209.084701][   T25] block nbd2: Possible stuck request ffff888021beaa00: control (read@1024,1024B). Runtime 60 seconds
[  209.088227][   T25] block nbd2: Possible stuck request ffff888021beac00: control (read@2048,1024B). Runtime 60 seconds
[  209.092652][   T25] block nbd2: Possible stuck request ffff888021beae00: control (read@3072,1024B). Runtime 60 seconds
[  209.682518][T18968] 8021q: adding VLAN 0 to HW filter on device bond7
[  209.808041][T18989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.810587][T18989] IPv6: NLM_F_CREATE should be set when creating new route
[  209.818775][T18989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.363266][T19062] nbd: must specify a size in bytes for the device
[  210.414508][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  210.418650][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  210.427982][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  210.435195][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  210.964548][T19127] bridge0: port 3(dummy0) entered disabled state
[  210.971596][T19127] team0: left allmulticast mode
[  210.973333][T19127] team_slave_0: left allmulticast mode
[  210.975218][T19127] team_slave_1: left allmulticast mode
[  210.977200][T19127] macvlan0: left allmulticast mode
[  210.984048][T19127] hsr0: left promiscuous mode
[  210.985818][T19127] hsr0: left allmulticast mode
[  210.987647][T19127] hsr_slave_0: left allmulticast mode
[  210.991069][T19127] hsr_slave_1: left allmulticast mode
[  210.995570][T19127] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  211.006847][T19127] vlan3: left promiscuous mode
[  211.008669][T19127] bond1: left promiscuous mode
[  211.011909][T19127] gretap1: left promiscuous mode
[  211.013839][T19127] vlan3: left allmulticast mode
[  211.015572][T19127] bond1: left allmulticast mode
[  211.017281][T19127] gretap1: left allmulticast mode
[  211.027607][T19127] bond3: left promiscuous mode
[  211.030757][T19127] batadv0: left promiscuous mode
[  211.032528][T19127] batadv0: left allmulticast mode
[  211.037629][T19127] gretap2: left promiscuous mode
[  211.051097][T19127] xfrm1: left promiscuous mode
[  211.053048][T19127] xfrm1: left allmulticast mode
[  211.057139][ T5847] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.060210][T19128] @: renamed from veth0_vlan
[  211.070147][ T5847] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.072863][ T5847] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.075575][ T5847] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.134473][T19133] Bluetooth: MGMT ver 1.23
[  211.171091][T19135] __nla_validate_parse: 2 callbacks suppressed
[  211.171102][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5721'.
[  211.175980][T19135] netlink: 'syz.0.5721': attribute type 14 has an invalid length.
[  211.181652][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5721'.
[  211.184708][T19135] netlink: 'syz.0.5721': attribute type 14 has an invalid length.
[  211.210695][T19137] netlink: 'syz.0.5722': attribute type 1 has an invalid length.
[  211.213242][T19137] netlink: 'syz.0.5722': attribute type 1 has an invalid length.
[  211.395990][T19149] tipc: Resetting bearer <eth:team0>
[  211.400029][T19149] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  211.404098][T19149] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  211.406396][T19149] bond1: left promiscuous mode
[  211.408641][T19149] ip6tnl1: left promiscuous mode
[  211.412810][T19149] veth5: left promiscuous mode
[  211.414546][T19149] bond3: left promiscuous mode
[  211.416831][T19149] ip6erspan0: left promiscuous mode
[  211.418860][T19149] bridge5: left promiscuous mode
[  211.424227][T19149] bond6: left promiscuous mode
[  211.426297][T19149] gtp0: left promiscuous mode
[  211.428299][T19149] gretap3: left promiscuous mode
[  211.533727][T19165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  211.564815][T19167] lo speed is unknown, defaulting to 1000
[  211.618702][T19176] veth1_to_bond: entered allmulticast mode
[  211.782358][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5749'.
[  211.785575][T19195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5749'.
[  211.898794][T19209] netlink: 'syz.2.5755': attribute type 9 has an invalid length.
[  211.903762][T19209] netlink: 'syz.2.5755': attribute type 6 has an invalid length.
[  211.940443][T19212] netlink: 'syz.2.5756': attribute type 10 has an invalid length.
[  212.181855][T19226] bridge0: port 1(ipvlan0) entered blocking state
[  212.184025][T19226] bridge0: port 1(ipvlan0) entered disabled state
[  212.186406][T19226] ipvlan0: entered allmulticast mode
[  212.190122][T19226] ipvlan0: left allmulticast mode
[  212.546195][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5776'.
[  212.549857][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'.
[  212.617502][T19258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.621750][T19258] syzkaller0: entered promiscuous mode
[  212.623626][T19258] syzkaller0: entered allmulticast mode
[  212.637518][T19258] tipc: Resetting bearer <eth:syzkaller0>
[  212.643893][T19257] tipc: Resetting bearer <eth:syzkaller0>
[  212.652931][T19257] tipc: Disabling bearer <eth:syzkaller0>
[  212.678767][T19262] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5780'.
[  213.550949][   T60] block nbd0: Possible stuck request ffff888021b18000: control (read@0,1024B). Runtime 120 seconds
[  213.554360][   T60] block nbd0: Possible stuck request ffff888021b18200: control (read@1024,1024B). Runtime 120 seconds
[  213.558144][   T60] block nbd0: Possible stuck request ffff888021b18400: control (read@2048,1024B). Runtime 120 seconds
[  213.561795][   T60] block nbd0: Possible stuck request ffff888021b18600: control (read@3072,1024B). Runtime 120 seconds
[  213.608630][T19296] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5795'.
[  213.724615][T19306] tipc: Resetting bearer <eth:gre0>
[  213.805239][T19306] bridge0: left allmulticast mode
[  213.808507][T19325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5808'.
[  213.955990][T19306] veth1_to_bond: left allmulticast mode
[  214.076275][T19306] vlan0: left promiscuous mode
[  214.078373][T19306] veth1_vlan: left allmulticast mode
[  214.081913][T19306] macvlan0: left allmulticast mode
[  214.145065][T19306] geneve2: left promiscuous mode
[  214.149311][T19306] geneve2: left allmulticast mode
[  214.155325][T19306] gretap1: left promiscuous mode
[  214.173704][T19306] dummy0: left allmulticast mode
[  214.175815][T19306] macvtap1: left promiscuous mode
[  214.177609][T19306] macvtap1: left allmulticast mode
[  214.184648][T19306] bridge4: left promiscuous mode
[  214.186945][T19306] bridge4: left allmulticast mode
[  214.192180][T19306] vxlan0: left promiscuous mode
[  214.193913][T19306] vxlan0: left allmulticast mode
[  214.214002][T19319] @: renamed from veth0_vlan
[  214.222798][T12194] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.225683][T12194] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  214.236045][T12194] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  214.239527][ T5847] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.260400][ T5847] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  214.263243][ T5847] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  214.295316][ T5847] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.298901][ T5847] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  214.309245][ T5847] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  214.312100][ T5847] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.314900][ T5847] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  214.317649][ T5847] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  214.468126][T19361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5822'.
[  214.504748][T19358] netlink: 'syz.2.5822': attribute type 3 has an invalid length.
[  214.836485][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[  215.264715][T19326] Set syz1 is full, maxelem 65536 reached
[  215.521095][T19411] tipc: Resetting bearer <eth:team0>
[  215.554359][T19411] geneve0: left allmulticast mode
[  215.559510][T19411] bridge0: left allmulticast mode
[  215.561339][T19411] ip6tnl1: left allmulticast mode
[  215.581849][T19411] bond6: left allmulticast mode
[  215.600526][T19411] xfrm1: left allmulticast mode
[  215.621324][ T5847] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  215.624399][ T5847] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  215.627388][ T5847] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  215.646369][ T5847] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  216.243735][T19487] __nla_validate_parse: 3 callbacks suppressed
[  216.243745][T19487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5875'.
[  216.524865][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5883'.
[  216.715638][T19520] GUP no longer grows the stack in syz.1.5890 (19520): 200000006000-20000000a000 (200000005000)
[  216.719702][T19520] CPU: 1 UID: 0 PID: 19520 Comm: syz.1.5890 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  216.719716][T19520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.719722][T19520] Call Trace:
[  216.719726][T19520]  <TASK>
[  216.719730][T19520]  dump_stack_lvl+0x189/0x250
[  216.719745][T19520]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.719754][T19520]  ? __pfx__printk+0x10/0x10
[  216.719764][T19520]  ? find_vma+0xe7/0x160
[  216.719781][T19520]  __get_user_pages+0x2a60/0x30b0
[  216.719807][T19520]  ? __pfx___get_user_pages+0x10/0x10
[  216.719817][T19520]  ? __gup_longterm_locked+0xbf7/0x15b0
[  216.719827][T19520]  ? down_read_killable+0x1d1/0x350
[  216.719835][T19520]  ? try_get_folio+0x633/0x660
[  216.719847][T19520]  __gup_longterm_locked+0xd66/0x15b0
[  216.719859][T19520]  ? try_grab_folio_fast+0x1be/0x4f0
[  216.719873][T19520]  ? gup_fast_fallback+0x1afc/0x2260
[  216.719884][T19520]  gup_fast_fallback+0x1cd4/0x2260
[  216.719932][T19520]  ? __pfx_gup_fast_fallback+0x10/0x10
[  216.719949][T19520]  ? __mutex_lock+0x335/0x1340
[  216.719963][T19520]  ? futex_unqueue+0x22/0x240
[  216.719972][T19520]  ? futex_unqueue+0x22/0x240
[  216.719979][T19520]  ? futex_unqueue+0x22/0x240
[  216.719986][T19520]  ? is_valid_gup_args+0x11f/0x200
[  216.719998][T19520]  ? get_user_pages_fast+0x4d/0xb0
[  216.720010][T19520]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  216.720025][T19520]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  216.720033][T19520]  ? wait_for_space+0x24d/0x2d0
[  216.720045][T19520]  iov_iter_get_pages2+0x5e/0xa0
[  216.720056][T19520]  __se_sys_vmsplice+0x548/0x10d0
[  216.720072][T19520]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  216.720084][T19520]  ? __pfx_futex_wait+0x10/0x10
[  216.720100][T19520]  ? __lock_acquire+0xab9/0xd20
[  216.720124][T19520]  ? do_pipe2+0xf7/0x170
[  216.720134][T19520]  ? rcu_is_watching+0x15/0xb0
[  216.720149][T19520]  ? do_syscall_64+0xbe/0x3b0
[  216.720161][T19520]  do_syscall_64+0xfa/0x3b0
[  216.720171][T19520]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.720181][T19520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.720188][T19520]  ? exc_page_fault+0x9f/0xf0
[  216.720199][T19520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.720206][T19520] RIP: 0033:0x7fc029d8ebe9
[  216.720214][T19520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.720221][T19520] RSP: 002b:00007fc02ac2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  216.720230][T19520] RAX: ffffffffffffffda RBX: 00007fc029fb5fa0 RCX: 00007fc029d8ebe9
[  216.720235][T19520] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  216.720240][T19520] RBP: 00007fc029e11e19 R08: 0000000000000000 R09: 0000000000000000
[  216.720244][T19520] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  216.720249][T19520] R13: 00007fc029fb6038 R14: 00007fc029fb5fa0 R15: 00007fff32f617a8
[  216.720261][T19520]  </TASK>
[  216.877005][T19530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.900629][T19530] syzkaller0: entered promiscuous mode
[  216.902673][T19530] syzkaller0: entered allmulticast mode
[  216.904967][T19530] tipc: Resetting bearer <eth:syzkaller0>
[  216.909659][T19527] tipc: Resetting bearer <eth:syzkaller0>
[  217.757562][T19527] tipc: Disabling bearer <eth:syzkaller0>
[  217.807248][ T5269] udevd[5269]: worker [5825] /devices/virtual/block/nbd2 is taking a long time
[  217.896388][T19548] syzkaller0: entered promiscuous mode
[  217.898290][T19548] syzkaller0: entered allmulticast mode
[  219.764160][T19579] macsec2: entered allmulticast mode
[  219.766017][T19579] ip6gretap0: entered allmulticast mode
[  219.773366][T19579] ip6gretap0: left allmulticast mode
[  220.218368][T19632] netlink: 'syz.0.5938': attribute type 10 has an invalid length.
[  220.224103][T19632] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  220.669839][T19665] gretap3: entered promiscuous mode
[  220.671686][T19665] gretap3: entered allmulticast mode
[  220.993800][T19692] netlink: 'syz.1.5966': attribute type 11 has an invalid length.
[  220.996549][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5966'.
[  221.014329][T19692] netlink: 'syz.1.5966': attribute type 11 has an invalid length.
[  221.017485][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5966'.
[  221.146951][T19714] netlink: 'syz.2.5976': attribute type 1 has an invalid length.
[  221.150090][T19712] tun0: tun_chr_ioctl cmd 2147767507
[  221.356692][T19741] netlink: 'syz.2.5987': attribute type 1 has an invalid length.
[  221.417592][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5990'.
[  221.475144][T19752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.477908][T19752] syzkaller0: entered promiscuous mode
[  221.481889][T19752] syzkaller0: entered allmulticast mode
[  221.485176][T19752] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  221.498965][T19752] tipc: Resetting bearer <eth:syzkaller0>
[  221.503458][T19751] tipc: Resetting bearer <eth:syzkaller0>
[  221.510600][T19751] tipc: Disabling bearer <eth:syzkaller0>
[  222.140954][T19800] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6014'.
[  222.153418][T19800] batadv1: entered promiscuous mode
[  222.155338][T19800] batadv1: entered allmulticast mode
[  222.626288][T19839] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6032'.
[  223.044077][T19851] bridge: RTM_NEWNEIGH with invalid ether address
[  223.264528][T19867] netlink: 4608 bytes leftover after parsing attributes in process `syz.1.6046'.
[  223.272556][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6046'.
[  223.275711][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6046'.
[  223.283015][T19867] team0: entered promiscuous mode
[  223.284900][T19867] vlan0: entered promiscuous mode
[  223.286945][T19867] macvlan0: entered promiscuous mode
[  223.289677][T19867] bond0: entered promiscuous mode
[  223.291516][T19867] bond3: entered promiscuous mode
[  223.293926][T19867] bond0: left promiscuous mode
[  223.295669][T19867] bond3: left promiscuous mode
[  223.297557][T19867] team0: left promiscuous mode
[  223.299525][T19867] vlan0: left promiscuous mode
[  223.301504][T19867] macvlan0: left promiscuous mode
[  223.396454][T19871] netlink: 'syz.1.6048': attribute type 1 has an invalid length.
[  223.481312][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6051'.
[  224.269392][ T5816] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  224.883370][T19906] pimreg: entered allmulticast mode
[  224.935469][T19912] netlink: 'syz.1.6066': attribute type 31 has an invalid length.
[  224.963808][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'.
[  226.472715][T20034] lo speed is unknown, defaulting to 1000
[  226.605620][T20023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6114'.
[  226.678580][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6114'.
[  226.755599][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'.
[  226.758618][T20061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6127'.
[  226.952279][T20081] netlink: 'syz.1.6128': attribute type 5 has an invalid length.
[  227.128016][T20088] netlink: 'syz.0.6131': attribute type 5 has an invalid length.
[  227.130938][T20088] netlink: 'syz.0.6131': attribute type 5 has an invalid length.
[  227.659982][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6147'.
[  227.668026][T20121] macvtap2: entered promiscuous mode
[  227.671305][T20121] macvtap2: entered allmulticast mode
[  227.673291][T20121] dummy0: entered allmulticast mode
[  227.780014][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6149'.
[  227.806188][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.809512][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.236703][T20161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6161'.
[  228.241964][T20161] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  228.374650][T20174] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6168'.
[  228.717448][T20204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6182'.
[  228.733982][T20204] macvlan3: entered promiscuous mode
[  228.736171][T20204] bond0: entered promiscuous mode
[  228.737877][T20204] bond3: entered promiscuous mode
[  228.759674][T20204] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  228.798323][T20214] netlink: 'syz.1.6187': attribute type 2 has an invalid length.
[  228.881545][T20222] netlink: 'syz.2.6191': attribute type 1 has an invalid length.
[  228.923163][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'.
[  228.964549][T20230] netlink: 'syz.2.6195': attribute type 1 has an invalid length.
[  229.503014][T20266] netlink: 'syz.0.6212': attribute type 13 has an invalid length.
[  229.505680][T20266] netlink: 'syz.0.6212': attribute type 17 has an invalid length.
[  229.518069][T20266] gretap0: refused to change device tx_queue_len
[  229.520740][T20266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  229.525956][   T24] lo speed is unknown, defaulting to 1000
[  229.528038][   T24] syz0: Port: 1 Link ACTIVE
[  229.530450][   T24] lo speed is unknown, defaulting to 1000
[  229.635963][T20277] netlink: 'syz.2.6216': attribute type 9 has an invalid length.
[  229.648207][T20277] macvlan0: entered promiscuous mode
[  229.658542][T20277] hsr0: entered promiscuous mode
[  229.666862][T20277] macvlan0: entered allmulticast mode
[  229.671680][T20277] hsr0: entered allmulticast mode
[  229.673417][T20277] hsr_slave_0: entered allmulticast mode
[  229.675356][T20277] hsr_slave_1: entered allmulticast mode
[  230.804617][T20327] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  231.791799][T20375] team0: Device vlan0 failed to change mtu
[  231.798550][T20377] __nla_validate_parse: 4 callbacks suppressed
[  231.798560][T20377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6260'.
[  231.829572][T20377] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  231.884191][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6266'.
[  232.003503][T20406] pimreg: entered allmulticast mode
[  232.044300][T20412] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  232.047117][T20412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  232.178163][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6278'.
[  232.491865][T20426] netlink: 'syz.2.6282': attribute type 1 has an invalid length.
[  232.570860][T20434] netlink: 'syz.2.6283': attribute type 1 has an invalid length.
[  232.620258][T20438] netlink: 'syz.2.6285': attribute type 10 has an invalid length.
[  232.694930][T20444] bond0: up delay (65536) is not a multiple of miimon (33271), value rounded to 33271 ms
[  232.832475][T20457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6294'.
[  233.026326][T20481] lo speed is unknown, defaulting to 1000
[  233.533366][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6307'.
[  233.821181][T20512] netlink: 'syz.2.6318': attribute type 1 has an invalid length.
[  233.941276][T20522] netlink: 'syz.0.6323': attribute type 2 has an invalid length.
[  234.283659][T20571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.286394][T20571] syzkaller0: entered promiscuous mode
[  234.288639][T20571] syzkaller0: entered allmulticast mode
[  234.303464][T20571] tipc: Resetting bearer <eth:syzkaller0>
[  234.308397][T20570] tipc: Resetting bearer <eth:syzkaller0>
[  234.315572][T20570] tipc: Disabling bearer <eth:syzkaller0>
[  234.321118][T20575] netlink: 'syz.0.6348': attribute type 1 has an invalid length.
[  234.836391][T20622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.839235][T20622] syzkaller0: entered promiscuous mode
[  234.841101][T20622] syzkaller0: entered allmulticast mode
[  234.856898][T20622] tipc: Resetting bearer <eth:syzkaller0>
[  234.861284][T20621] tipc: Resetting bearer <eth:syzkaller0>
[  234.870188][T20621] tipc: Disabling bearer <eth:syzkaller0>
[  235.134926][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6377'.
[  235.708055][T20679] netlink: 'syz.0.6394': attribute type 2 has an invalid length.
[  235.713468][T20679] netlink: 'syz.0.6394': attribute type 1 has an invalid length.
[  235.716919][T20679] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6394'.
[  235.723633][T20679] nbd: couldn't find device at index 16
[  235.892312][T20684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6396'.
[  235.898401][T20684] sctp: [Deprecated]: syz.0.6396 (pid 20684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.898401][T20684] Use struct sctp_sack_info instead
[  236.231760][T20712] netlink: 'syz.1.6409': attribute type 21 has an invalid length.
[  236.234525][T20712] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6409'.
[  236.237622][T20712] netlink: 'syz.1.6409': attribute type 5 has an invalid length.
[  236.240372][T20712] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6409'.
[  237.231289][T20780] ieee802154 phy1 wpan1: encryption failed: -90
[  237.445117][T20809] IPv6: Can't replace route, no match found
[  237.495152][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6459'.
[  237.615037][T20839] validate_nla: 1 callbacks suppressed
[  237.615048][T20839] netlink: 'syz.2.6467': attribute type 1 has an invalid length.
[  237.640296][T20839] bond8: entered promiscuous mode
[  237.642330][T20839] 8021q: adding VLAN 0 to HW filter on device bond8
[  237.668653][T20839] 8021q: adding VLAN 0 to HW filter on device bond9
[  237.674767][T20839] bond8: (slave bond9): making interface the new active one
[  237.677465][T20839] bond9: entered promiscuous mode
[  237.682034][T20839] bond8: (slave bond9): Enslaving as an active interface with an up link
[  237.724451][T20847] lo speed is unknown, defaulting to 1000
[  237.865849][T20864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.875628][T20864] syzkaller0: entered promiscuous mode
[  237.877542][T20864] syzkaller0: entered allmulticast mode
[  237.895767][T20864] tipc: Resetting bearer <eth:syzkaller0>
[  237.900726][T20863] tipc: Resetting bearer <eth:syzkaller0>
[  237.913721][T20863] tipc: Disabling bearer <eth:syzkaller0>
[  239.010799][T20940] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  239.161199][   T25] block nbd2: Possible stuck request ffff888021bea800: control (read@0,1024B). Runtime 90 seconds
[  239.165399][   T25] block nbd2: Possible stuck request ffff888021beaa00: control (read@1024,1024B). Runtime 90 seconds
[  239.169281][   T25] block nbd2: Possible stuck request ffff888021beac00: control (read@2048,1024B). Runtime 90 seconds
[  239.173337][   T25] block nbd2: Possible stuck request ffff888021beae00: control (read@3072,1024B). Runtime 90 seconds
[  239.491810][T20992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.502112][T20992] syzkaller0: entered promiscuous mode
[  239.503967][T20992] syzkaller0: entered allmulticast mode
[  239.532298][T20992] tipc: Resetting bearer <eth:syzkaller0>
[  239.537637][T20991] tipc: Resetting bearer <eth:syzkaller0>
[  239.546854][T20991] tipc: Disabling bearer <eth:syzkaller0>
[  239.563487][T20994] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6536'.
[  240.754999][T21048] netlink: 'syz.1.6552': attribute type 39 has an invalid length.
[  241.309976][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[  241.431574][T21133] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6589'.
[  241.476308][T21143] nbd: must specify at least one socket
[  241.631424][T21169] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6605'.
[  241.826411][T21194] netlink: 'syz.0.6614': attribute type 13 has an invalid length.
[  241.829065][T21194] netlink: 'syz.0.6614': attribute type 17 has an invalid length.
[  241.836557][T21194] erspan0: left promiscuous mode
[  241.850688][T21194] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.853801][T21194] 8021q: adding VLAN 0 to HW filter on device team0
[  241.861628][T21194] bridge0: port 3(dummy0) entered blocking state
[  241.864340][T21194] bridge0: port 3(dummy0) entered listening state
[  241.868153][T21194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.914089][T21194] lo speed is unknown, defaulting to 1000
[  241.967580][T21207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.034237][T21209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.293794][T21214] netlink: 'syz.2.6624': attribute type 3 has an invalid length.
[  242.807793][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6627'.
[  243.386841][T21245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6639'.
[  243.631092][   T60] block nbd0: Possible stuck request ffff888021b18000: control (read@0,1024B). Runtime 150 seconds
[  243.634551][   T60] block nbd0: Possible stuck request ffff888021b18200: control (read@1024,1024B). Runtime 150 seconds
[  243.638287][   T60] block nbd0: Possible stuck request ffff888021b18400: control (read@2048,1024B). Runtime 150 seconds
[  243.642103][   T60] block nbd0: Possible stuck request ffff888021b18600: control (read@3072,1024B). Runtime 150 seconds
[  244.092765][T21293] lo speed is unknown, defaulting to 1000
[  244.217035][T21299] lo speed is unknown, defaulting to 1000
[  244.628035][T21344] netlink: 'syz.2.6673': attribute type 64 has an invalid length.
[  245.425348][T21363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.429989][T21363] syzkaller0: entered promiscuous mode
[  245.432420][T21363] syzkaller0: entered allmulticast mode
[  245.445997][T21363] tipc: Resetting bearer <eth:syzkaller0>
[  245.451493][T21361] tipc: Resetting bearer <eth:syzkaller0>
[  245.459923][T21361] tipc: Disabling bearer <eth:syzkaller0>
[  245.550486][T21375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.557037][T21375] syzkaller0: entered promiscuous mode
[  245.558839][T21375] syzkaller0: entered allmulticast mode
[  245.580031][T21375] tipc: Resetting bearer <eth:syzkaller0>
[  245.582700][T21374] tipc: Resetting bearer <eth:syzkaller0>
[  245.601447][T21374] tipc: Disabling bearer <eth:syzkaller0>
[  245.857408][T21410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6705'.
[  245.957573][T21419] netlink: 'syz.1.6709': attribute type 32 has an invalid length.
[  246.090041][T21431] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  246.667966][T21456] netlink: 'syz.0.6726': attribute type 1 has an invalid length.
[  247.295133][T21508] bridge0: port 3(dummy0) entered disabled state
[  247.676429][T21551] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6758'.
[  247.681528][T21551] 0: renamed from hsr0
[  247.684711][T21551] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  247.688247][T21551] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  247.692228][T21551] 0: entered allmulticast mode
[  247.694017][T21551] hsr_slave_0: entered allmulticast mode
[  247.695984][T21551] hsr_slave_1: entered allmulticast mode
[  247.698891][T21551] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  248.206892][T21571] lo speed is unknown, defaulting to 1000
[  248.393260][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6768'.
[  248.400563][T21578] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6768'.
[  248.406438][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6768'.
[  248.494834][T21582] netlink: 'syz.1.6770': attribute type 10 has an invalid length.
[  248.497370][T21582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6770'.
[  248.518514][T21582] bridge0: port 1(dummy0) entered blocking state
[  248.525361][T21582] bridge0: port 1(dummy0) entered disabled state
[  248.528725][T21582] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  248.841274][T21597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6774'.
[  248.873261][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6775'.
[  248.876471][T21601] netlink: 'syz.1.6775': attribute type 19 has an invalid length.
[  248.879894][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6775'.
[  248.883006][T21601] netlink: 'syz.1.6775': attribute type 19 has an invalid length.
[  249.074228][T21617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6783'.
[  249.273328][T21639] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6793'.
[  249.502494][ T5847] syzkaller0: tun_net_xmit 76
[  249.504424][ T5847] syzkaller0: tun_net_xmit 48
[  249.507368][T21668] syzkaller0: tun_net_xmit 120
[  249.510042][T21668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.514433][T21668] tipc: Resetting bearer <eth:syzkaller0>
[  249.516538][T21668] syzkaller0: tun_net_xmit 120
[  249.538152][T21666] tipc: Resetting bearer <eth:syzkaller0>
[  250.285701][T21692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6817'.
[  250.411106][T21666] tipc: Disabling bearer <eth:syzkaller0>
[  250.422327][ T5847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.427689][ T5847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.438777][ T5847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.442661][ T5847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.451539][T21695] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  251.401616][T21712] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  252.663166][T21861] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  253.029745][T21916] netlink: 'syz.0.6911': attribute type 2 has an invalid length.
[  253.580259][T21957] team_slave_0: left promiscuous mode
[  253.583996][T21957] team0 (unregistering): Port device team_slave_0 removed
[  253.586507][T21957] team_slave_1: left promiscuous mode
[  253.590483][T21957] team0 (unregistering): Port device team_slave_1 removed
[  253.592941][T21957] macvlan0: left promiscuous mode
[  253.597338][T21957] team0 (unregistering): Port device macvlan0 removed
[  253.761634][T21988] __nla_validate_parse: 4 callbacks suppressed
[  253.761644][T21988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6942'.
[  253.820881][T21998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6947'.
[  254.231746][T22067] netlink: 'syz.2.6981': attribute type 3 has an invalid length.
[  254.234375][T22067] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6981'.
[  254.237298][T22067] netlink: 'syz.2.6981': attribute type 3 has an invalid length.
[  254.240975][T22067] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6981'.
[  254.276678][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6984'.
[  254.442919][T22105] netlink: 'syz.0.6992': attribute type 13 has an invalid length.
[  254.445445][T22105] netlink: 'syz.0.6992': attribute type 17 has an invalid length.
[  254.451696][T22105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.482967][T22094] lo speed is unknown, defaulting to 1000
[  254.584225][T22120] unsupported nlmsg_type 40
[  254.768699][T22141] netlink: 'syz.1.7009': attribute type 1 has an invalid length.
[  254.774449][T22141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7009'.
[  254.932923][T22150] netlink: 280 bytes leftover after parsing attributes in process `syz.2.7016'.
[  255.236741][T22171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.361811][T22179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7029'.
[  255.365924][T22179] netlink: 428 bytes leftover after parsing attributes in process `syz.0.7029'.
[  255.368908][T22179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7029'.
[  255.642883][T22209] netlink: 'syz.0.7041': attribute type 1 has an invalid length.
[  255.709885][ T5816] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  255.731184][T22221] netlink: 'syz.1.7047': attribute type 13 has an invalid length.
[  255.734350][T22221] netlink: 'syz.1.7047': attribute type 13 has an invalid length.
[  255.764982][T22223] netlink: 'syz.1.7048': attribute type 8 has an invalid length.
[  255.821443][T22226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.423086][T22254] syzkaller1: entered promiscuous mode
[  256.429595][T22254] syzkaller1: entered allmulticast mode
[  257.895274][T22376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.245014][T22430] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  258.630930][T22485] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  258.737144][T22499] openvswitch: netlink: IP tunnel dst address not specified
[  258.806010][T22513] __nla_validate_parse: 14 callbacks suppressed
[  258.806025][T22513] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7167'.
[  258.843681][T22519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7171'.
[  258.846657][T22519] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7171'.
[  258.852267][T22519] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7171'.
[  258.932755][T22534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7176'.
[  258.986378][T22542] validate_nla: 2 callbacks suppressed
[  258.986389][T22542] netlink: 'syz.1.7181': attribute type 1 has an invalid length.
[  259.018305][T22549] @: renamed from bond_slave_0
[  259.057132][T22554] netlink: 268 bytes leftover after parsing attributes in process `syz.1.7186'.
[  259.250411][T22580] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7197'.
[  260.050928][T22594] openvswitch: netlink: Flow key attr not present in new flow.
[  260.184855][T22613] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7210'.
[  260.188244][T22606] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7210'.
[  260.225790][T22616] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7214'.
[  260.269848][   T24] lo speed is unknown, defaulting to 1000
[  260.271814][   T24] syz0: Port: 1 Link DOWN
[  260.273054][T22618] team0: Device vti0 is of different type
[  260.292323][   T24] lo speed is unknown, defaulting to 1000
[  260.398747][T22632] hsr0: left allmulticast mode
[  260.402040][T22632] hsr_slave_0: left allmulticast mode
[  260.403864][T22632] hsr_slave_1: left allmulticast mode
[  260.405712][T22632] hsr0: left promiscuous mode
[  260.433770][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  260.437272][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  260.444998][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  260.447974][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  261.851418][T22745] netlink: 'syz.0.7276': attribute type 30 has an invalid length.
[  261.867080][T22742] syzkaller0: entered promiscuous mode
[  261.868948][T22742] syzkaller0: entered allmulticast mode
[  261.999614][T22762] lo speed is unknown, defaulting to 1000
[  263.870768][T22849] syz_tun: entered allmulticast mode
[  263.944098][T22864] __nla_validate_parse: 6 callbacks suppressed
[  263.944109][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7327'.
[  264.073006][T22882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7330'.
[  264.155934][T22887] lo speed is unknown, defaulting to 1000
[  264.171291][T22890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.305601][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7341'.
[  264.309118][T22896] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  264.313948][T22896] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.865098][T22902] lo speed is unknown, defaulting to 1000
[  264.874126][T22902] lo speed is unknown, defaulting to 1000
[  264.877165][T22902] lo speed is unknown, defaulting to 1000
[  264.887707][T22902] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  264.903444][T22902] lo speed is unknown, defaulting to 1000
[  264.918402][T22902] lo speed is unknown, defaulting to 1000
[  264.968345][T22902] lo speed is unknown, defaulting to 1000
[  265.547483][T22946] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7364'.
[  265.552047][T22946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7364'.
[  265.657808][T22951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.661893][T22951] syzkaller0: entered promiscuous mode
[  265.663892][T22951] syzkaller0: entered allmulticast mode
[  265.677759][T22951] tipc: Resetting bearer <eth:syzkaller0>
[  265.682610][T22950] tipc: Resetting bearer <eth:syzkaller0>
[  265.691875][T22950] tipc: Disabling bearer <eth:syzkaller0>
[  265.853956][T22961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.856544][T22961] IPv6: NLM_F_CREATE should be set when creating new route
[  265.859040][T22961] IPv6: NLM_F_CREATE should be set when creating new route
[  266.047733][T22975] vlan0: entered promiscuous mode
[  266.051472][T22975] bridge0: entered promiscuous mode
[  266.053460][T22975] vlan0: entered allmulticast mode
[  266.060194][T22975] bridge0: entered allmulticast mode
[  266.278688][T22996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7384'.
[  266.362426][T23006] bridge9: entered allmulticast mode
[  266.371228][T23009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7389'.
[  266.417798][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7393'.
[  266.472907][T23023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.475463][T23023] syzkaller0: entered promiscuous mode
[  266.477303][T23023] syzkaller0: entered allmulticast mode
[  266.497299][T23023] tipc: Resetting bearer <eth:syzkaller0>
[  266.500776][T23022] tipc: Resetting bearer <eth:syzkaller0>
[  266.510678][T23022] tipc: Disabling bearer <eth:syzkaller0>
[  266.819354][T23069] netlink: 'syz.1.7417': attribute type 1 has an invalid length.
[  267.013858][T23104] netlink: 844 bytes leftover after parsing attributes in process `syz.2.7434'.
[  267.033865][T23106] rdma_rxe: rxe_newlink: failed to add lo
[  267.060539][T23105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.072463][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7436'.
[  267.075512][T23108] netlink: 'syz.2.7436': attribute type 1 has an invalid length.
[  267.099926][T23108] nbd: socks must be embedded in a SOCK_ITEM attr
[  267.102600][T23108] block nbd1: shutting down sockets
[  267.444923][T23152] netlink: 'syz.2.7457': attribute type 10 has an invalid length.
[  268.425325][T23178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.232387][   T25] block nbd2: Possible stuck request ffff888021bea800: control (read@0,1024B). Runtime 120 seconds
[  269.236083][   T25] block nbd2: Possible stuck request ffff888021beaa00: control (read@1024,1024B). Runtime 120 seconds
[  269.240006][   T25] block nbd2: Possible stuck request ffff888021beac00: control (read@2048,1024B). Runtime 120 seconds
[  269.243477][   T25] block nbd2: Possible stuck request ffff888021beae00: control (read@3072,1024B). Runtime 120 seconds
[  269.798395][T23271] netlink: 'syz.2.7513': attribute type 1 has an invalid length.
[  269.801358][T23271] __nla_validate_parse: 4 callbacks suppressed
[  269.801386][T23271] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7513'.
[  269.806589][T23271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7513'.
[  270.890470][T23301] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7527'.
[  271.022340][T23301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.035725][T23301] bond_slave_0: left promiscuous mode
[  271.038466][T23301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.047203][T23301] bond_slave_1: left promiscuous mode
[  271.053312][T23301] bond0 (unregistering): Released all slaves
[  271.084053][T23321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7536'.
[  271.087164][T23321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7536'.
[  271.188834][T23334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.191594][T23334] syzkaller0: entered promiscuous mode
[  271.193469][T23334] syzkaller0: entered allmulticast mode
[  271.206139][T23334] tipc: Resetting bearer <eth:syzkaller0>
[  271.208885][T23332] tipc: Resetting bearer <eth:syzkaller0>
[  271.217622][T23332] tipc: Disabling bearer <eth:syzkaller0>
[  271.319926][T23345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.409740][T23358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.414925][   T10] lo speed is unknown, defaulting to 1000
[  271.416950][   T10] syz0: Port: 1 Link ACTIVE
[  271.418595][   T10] lo speed is unknown, defaulting to 1000
[  271.423726][T23358] veth0_to_team: entered promiscuous mode
[  271.425769][T23358] veth0_to_team: entered allmulticast mode
[  271.456185][T23360] netlink: 'syz.0.7556': attribute type 5 has an invalid length.
[  271.526106][T23364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7558'.
[  271.529058][T23364] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7558'.
[  271.654063][T23376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7563'.
[  271.658041][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7563'.
[  272.932913][T23417] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  273.024185][T23427] vlan2: entered promiscuous mode
[  273.027408][T23427] batadv0: entered promiscuous mode
[  273.237873][T23464] netlink: zone id is out of range
[  273.241221][T23464] netlink: zone id is out of range
[  273.246794][T23464] netlink: set zone limit has 4 unknown bytes
[  273.315478][T23478] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7611'.
[  273.381147][T23490] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  273.462944][T23502] netlink: 'syz.2.7620': attribute type 25 has an invalid length.
[  273.709363][   T60] block nbd0: Possible stuck request ffff888021b18000: control (read@0,1024B). Runtime 180 seconds
[  273.712991][   T60] block nbd0: Possible stuck request ffff888021b18200: control (read@1024,1024B). Runtime 180 seconds
[  273.716757][   T60] block nbd0: Possible stuck request ffff888021b18400: control (read@2048,1024B). Runtime 180 seconds
[  273.720741][   T60] block nbd0: Possible stuck request ffff888021b18600: control (read@3072,1024B). Runtime 180 seconds
[  275.250376][T23542] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  275.390374][T23559] netlink: 'syz.0.7640': attribute type 13 has an invalid length.
[  275.393055][T23559] netlink: 'syz.0.7640': attribute type 17 has an invalid length.
[  275.402867][T23560] __nla_validate_parse: 1 callbacks suppressed
[  275.402877][T23560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7641'.
[  275.412025][T23559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.422845][T23558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.426277][T23558] syzkaller0: entered promiscuous mode
[  275.428227][T23558] syzkaller0: entered allmulticast mode
[  275.442596][T23558] tipc: Resetting bearer <eth:syzkaller0>
[  275.447301][T23557] tipc: Resetting bearer <eth:syzkaller0>
[  275.447465][T23559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.459649][T23557] tipc: Disabling bearer <eth:syzkaller0>
[  275.633762][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7650'.
[  275.743290][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7654'.
[  275.746277][T23580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7654'.
[  275.750335][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7654'.
[  275.753722][T23580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7654'.
[  275.758342][T23580] openvswitch: netlink: Multiple metadata blocks provided
[  276.168192][T23549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.313734][ T5269] udevd[5269]: worker [5824] /devices/virtual/block/nbd0 timeout; kill it
[  276.316685][ T5269] udevd[5269]: seq 11934 '/devices/virtual/block/nbd0' killed
[  276.802124][T23602] netlink: 440 bytes leftover after parsing attributes in process `syz.1.7664'.
[  276.838125][T23610] bond8: (slave bond9): Releasing backup interface
[  276.842900][T23610] bond9: left promiscuous mode
[  276.979518][T23630] netlink: 'syz.1.7677': attribute type 6 has an invalid length.
[  277.375161][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7691'.
[  277.378107][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7691'.
[  277.693958][T23689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7705'.
[  277.946107][T23713] netem: unknown loss type 0
[  277.948121][T23713] netem: change failed
[  278.099824][T23726] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  278.111250][T23726] dummy0: left allmulticast mode
[  278.112982][T23726] dummy0: left promiscuous mode
[  278.114710][T23726] bridge0: port 3(dummy0) entered disabled state
[  278.223074][T23729] netlink: 'syz.0.7722': attribute type 10 has an invalid length.
[  278.323855][T23726] bridge_slave_0: left allmulticast mode
[  278.325916][T23726] bridge_slave_0: left promiscuous mode
[  278.330625][T23726] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.334994][T23726] bridge_slave_1: left allmulticast mode
[  278.337006][T23726] bridge_slave_1: left promiscuous mode
[  278.339025][T23726] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.352733][T23726] bond1: (slave gretap1): Releasing active interface
[  278.358141][T23726] bond3: (slave batadv0): Releasing active interface
[  278.365082][T23726] bond5: (slave gretap2): Releasing active interface
[  278.372346][T23726] bond6: (slave bridge6): Releasing active interface
[  278.376119][T23729] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  278.378892][T23730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  278.383927][T23730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  278.421611][T23734] netlink: 'syz.2.7723': attribute type 10 has an invalid length.
[  278.807580][T23745] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  279.191833][T23794] syzkaller1: entered promiscuous mode
[  279.193764][T23794] syzkaller1: entered allmulticast mode
[  279.336632][T23815] netlink: 'syz.2.7759': attribute type 11 has an invalid length.
[  279.556232][T23851] netlink: 'syz.2.7776': attribute type 4 has an invalid length.
[  279.615363][T23865] netlink: 'syz.1.7783': attribute type 2 has an invalid length.
[  279.640898][T23867] DL<Y: renamed from lo
[  279.745183][T23889] netlink: 'syz.2.7795': attribute type 1 has an invalid length.
[  279.777736][T23889] bond10: (slave gretap5): making interface the new active one
[  279.786175][T23889] bond10: (slave gretap5): Enslaving as an active interface with an up link
[  280.082058][T23947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.114165][T23951] veth0: entered promiscuous mode
[  280.134243][T23951] veth0 (unregistering): left promiscuous mode
[  280.337034][T23981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.343131][T23981] syzkaller0: entered promiscuous mode
[  280.344999][T23981] syzkaller0: entered allmulticast mode
[  280.357463][T23981] tipc: Resetting bearer <eth:syzkaller0>
[  280.360820][T23980] tipc: Resetting bearer <eth:syzkaller0>
[  280.367069][T23980] tipc: Disabling bearer <eth:syzkaller0>
[  280.491379][T23993] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.498151][T23993] __nla_validate_parse: 17 callbacks suppressed
[  280.498161][T23993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7844'.
[  280.568824][T23998] sctp: [Deprecated]: syz.1.7845 (pid 23998) Use of int in max_burst socket option deprecated.
[  280.568824][T23998] Use struct sctp_assoc_value instead
[  280.821831][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7849'.
[  281.764370][T24072] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  281.871313][T24082] sctp: [Deprecated]: syz.2.7881 (pid 24082) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.871313][T24082] Use struct sctp_sack_info instead
[  282.204055][T24106] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  282.382876][T24126] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.7896'.
[  282.631385][T24150] netlink: 'syz.0.7911': attribute type 1 has an invalid length.
[  282.633951][T24150] netlink: 'syz.0.7911': attribute type 4 has an invalid length.
[  282.636592][T24150] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7911'.
[  282.640350][T24150] netlink: 'syz.0.7911': attribute type 1 has an invalid length.
[  282.642909][T24150] netlink: 'syz.0.7911': attribute type 4 has an invalid length.
[  282.645418][T24150] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7911'.
[  282.771603][T24159] netlink: set zone limit has 8 unknown bytes
[  282.878535][T24167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7919'.
[  283.385667][T24190] netlink: 'syz.2.7927': attribute type 1 has an invalid length.
[  283.404685][T24190] 8021q: adding VLAN 0 to HW filter on device bond11
[  283.416776][T24190] vlan0: entered allmulticast mode
[  283.418607][T24190] veth1: entered allmulticast mode
[  283.421483][T24190] bond11: (slave vlan0): Opening slave failed
[  283.564095][T24204] netlink: 'syz.2.7933': attribute type 29 has an invalid length.
[  283.567700][T24204] netlink: 'syz.2.7933': attribute type 29 has an invalid length.
[  283.676911][T24215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7938'.
[  283.851007][T24231] syzkaller1: entered promiscuous mode
[  283.853002][T24231] syzkaller1: entered allmulticast mode
[  285.372006][T24327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.428969][T24327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.486263][T24327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.134020][T24333] IPVS: Error connecting to the multicast addr
[  286.163520][T24337] syz.2.7989 (24337) used obsolete PPPIOCDETACH ioctl
[  286.327387][T24358] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  287.428161][T24416] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8023'.
[  287.431848][T24415] netlink: 'syz.2.8022': attribute type 13 has an invalid length.
[  287.560606][T24428] netlink: 'syz.1.8028': attribute type 6 has an invalid length.
[  287.765227][T24450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8039'.
[  287.770394][T24450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.773230][T24450] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode
[  287.775867][T24450] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode
[  287.782269][T24450] tipc: Resetting bearer <eth:syzkaller0>
[  287.784955][ T1170] tipc: Resetting bearer <eth:syzkaller0>
[  287.810963][T24455] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8041'.
[  287.848425][T24461] netlink: 'syz.0.8044': attribute type 1 has an invalid length.
[  287.852301][T24461] netlink: 'syz.0.8044': attribute type 3 has an invalid length.
[  287.854946][T24461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8044'.
[  287.858089][T24461] NCSI netlink: No device for ifindex 246
[  288.004898][T24483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8055'.
[  288.203156][T24499] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  288.205812][T24499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8062'.
[  288.228485][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8063'.
[  288.231668][T24501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8063'.
[  288.234603][T24501] netlink: 'syz.1.8063': attribute type 15 has an invalid length.
[  288.237317][T24501] netlink: 'syz.1.8063': attribute type 18 has an invalid length.
[  288.678335][   T33] audit: type=1800 audit(1754486744.319:5): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8077" name="blkio.bfq.time_recursive" dev="tmpfs" ino=12800 res=0 errno=0
[  288.784026][T24538] lo speed is unknown, defaulting to 1000
[  288.881345][T24538] DL<Y speed is unknown, defaulting to 1000
[  289.068405][T24568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8088'.
[  289.102685][T24572] netlink: 'syz.0.8093': attribute type 99 has an invalid length.
[  289.188296][T24578] netlink: 420 bytes leftover after parsing attributes in process `syz.0.8096'.
[  290.189368][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[  290.657315][T24631] netlink: 'syz.1.8119': attribute type 3 has an invalid length.
[  290.705424][T24633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.711400][T24633] syzkaller0: entered promiscuous mode
[  290.713283][T24633] syzkaller0: entered allmulticast mode
[  290.730108][T24633] tipc: Resetting bearer <eth:syzkaller0>
[  290.733264][T24632] tipc: Resetting bearer <eth:syzkaller0>
[  290.741804][T24632] tipc: Disabling bearer <eth:syzkaller0>
[  290.966212][T24662] netlink: zone id is out of range
[  290.967998][T24662] netlink: zone id is out of range
[  290.970036][T24662] netlink: zone id is out of range
[  290.971801][T24662] netlink: zone id is out of range
[  290.973492][T24662] netlink: zone id is out of range
[  290.975631][T24662] netlink: zone id is out of range
[  290.977325][T24662] netlink: zone id is out of range
[  290.979074][T24662] netlink: zone id is out of range
[  290.982399][T24662] netlink: zone id is out of range
[  290.984127][T24662] netlink: zone id is out of range
[  291.148934][T24672] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  291.152442][T24672] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  292.849639][T24727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.397859][T24755] __nla_validate_parse: 45 callbacks suppressed
[  293.397872][T24755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8173'.
[  293.537030][T24767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8179'.
[  293.616333][T24775] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8183'.
[  294.511262][T24849] netlink: 388 bytes leftover after parsing attributes in process `syz.1.8209'.
[  294.515958][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8209'.
[  294.526526][T24849] syz_tun (unregistering): left allmulticast mode
[  294.593803][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8210'.
[  294.642257][T24855] lo speed is unknown, defaulting to 1000
[  294.753265][T24855] DL<Y speed is unknown, defaulting to 1000
[  294.892190][T24882] netlink: 'syz.1.8224': attribute type 64 has an invalid length.
[  294.923581][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8224'.
[  294.930993][T24882] pimreg: left allmulticast mode
[  295.353779][T24914] nbd: nbd0 already in use
[  295.355668][T24914] block nbd0: NBD_DISCONNECT
[  295.357192][T24914] block nbd0: Send disconnect failed -32
[  295.359035][T24914] block nbd0: shutting down sockets
[  295.362750][    C0] blk_print_req_error: 138 callbacks suppressed
[  295.362767][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.364190][T24914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8238'.
[  295.365158][    C0] buffer_io_error: 138 callbacks suppressed
[  295.365165][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  295.376144][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.379738][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  295.382558][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.385826][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  295.388550][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.391654][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  295.397348][ T5824] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.404587][ T5824] Buffer I/O error on dev nbd0, logical block 0, async page read
[  295.408506][ T5824] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.413639][ T5824] Buffer I/O error on dev nbd0, logical block 1, async page read
[  295.417290][ T5824] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.421425][ T5824] Buffer I/O error on dev nbd0, logical block 2, async page read
[  295.427818][ T5824] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.432690][ T5824] Buffer I/O error on dev nbd0, logical block 3, async page read
[  295.436760][ T5824] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.440416][ T5824] Buffer I/O error on dev nbd0, logical block 0, async page read
[  295.443178][ T5824] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.446095][ T5824] Buffer I/O error on dev nbd0, logical block 1, async page read
[  295.451712][ T5824] ldm_validate_partition_table(): Disk read failed.
[  295.466606][ T5824] Dev nbd0: unable to read RDB block 0
[  295.476089][ T5824]  nbd0: unable to read partition table
[  295.553245][ T5269] udevd[5269]: worker [5824] terminated by signal 9 (Killed)
[  295.555994][ T5269] udevd[5269]: worker [5824] failed while handling '/devices/virtual/block/nbd0'
[  295.678354][T24922] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  296.167140][T24959] netlink: 'syz.2.8257': attribute type 7 has an invalid length.
[  296.171336][T24959] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8257'.
[  296.193187][T24961] netlink: 'syz.2.8258': attribute type 15 has an invalid length.
[  296.290206][T24976] netlink: 564 bytes leftover after parsing attributes in process `syz.0.8265'.
[  296.382267][T24985] lo speed is unknown, defaulting to 1000
[  296.439441][ T5816] Bluetooth: hci2: link tx timeout
[  296.441471][ T5816] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  296.444264][ T5820] Bluetooth: hci2: link tx timeout
[  296.446002][ T5820] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  296.497262][T24985] DL<Y speed is unknown, defaulting to 1000
[  296.501963][T24998] block nbd0: server does not support multiple connections per device.
[  296.505417][T24998] block nbd0: shutting down sockets
[  296.617127][T25017] @: renamed from bond_slave_0
[  296.629668][T25013] block nbd0: server does not support multiple connections per device.
[  296.641331][T25013] block nbd0: shutting down sockets
[  296.761581][T25035] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  296.866758][T25050] dvmrp1: tun_chr_ioctl cmd 1074025677
[  296.868805][T25050] dvmrp1: linktype set to 773
[  297.216647][T25093] netlink: 'syz.1.8318': attribute type 13 has an invalid length.
[  297.694306][T25119] bridge10: entered promiscuous mode
[  297.696322][T25119] bridge10: entered allmulticast mode
[  297.948561][T25146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.509477][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[  298.791817][T25168] DL<Y: entered allmulticast mode
[  298.832196][T25168] DL<Y: left allmulticast mode
[  298.976534][T25186] netlink: 'syz.1.8353': attribute type 11 has an invalid length.
[  298.998720][T25186] __nla_validate_parse: 13 callbacks suppressed
[  298.998731][T25186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8353'.
[  299.176706][T25210] netlink: 'syz.1.8359': attribute type 10 has an invalid length.
[  299.316436][   T25] block nbd2: Possible stuck request ffff888021bea800: control (read@0,1024B). Runtime 150 seconds
[  299.320335][   T25] block nbd2: Possible stuck request ffff888021beaa00: control (read@1024,1024B). Runtime 150 seconds
[  299.323913][   T25] block nbd2: Possible stuck request ffff888021beac00: control (read@2048,1024B). Runtime 150 seconds
[  299.328196][   T25] block nbd2: Possible stuck request ffff888021beae00: control (read@3072,1024B). Runtime 150 seconds
[  300.181000][T25269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8385'.
[  300.184634][T25268] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8385'.
[  300.333305][T25285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8393'.
[  300.411119][T25290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8394'.
[  300.500034][T25296] bond0: (slave bond3): Error -95 calling ndo_bpf
[  300.549606][T25296] bond0: (slave bond3): Error -95 calling ndo_bpf
[  300.551963][T25296] net_ratelimit: 94 callbacks suppressed
[  300.551970][T25296] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  300.609660][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  300.699659][T25306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8403'.
[  300.933120][T25333] veth0_to_bridge: entered promiscuous mode
[  300.936731][T25332] veth0_to_bridge: left promiscuous mode
[  300.969666][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  301.068835][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8422'.
[  301.234500][T25379] netlink: 47 bytes leftover after parsing attributes in process `syz.1.8433'.
[  301.469683][T12194] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.510341][T12194] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.517154][T12194] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.678528][T25431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.683119][T25431] syzkaller0: entered promiscuous mode
[  302.684926][T25431] syzkaller0: entered allmulticast mode
[  302.695791][T25431] tipc: Resetting bearer <eth:syzkaller0>
[  302.719489][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.724029][T25433] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.734624][T25431] tipc: Resetting bearer <eth:syzkaller0>
[  302.742469][T25431] tipc: Disabling bearer <eth:syzkaller0>
[  302.762312][T25433] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.771403][T25438] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.8455'.
[  302.834390][T25433] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.895478][T25433] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.972081][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.997222][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.019010][T25449] netdevsim netdevsim2 : renamed from netdevsim0
[  303.024306][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.028598][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.336785][T25466] tap0: tun_chr_ioctl cmd 1074025675
[  303.339626][T25466] tap0: persist disabled
[  303.495825][T25477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8473'.
[  303.823110][T25515] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  303.936970][T25530] netdevsim netdevsim2 : left promiscuous mode
[  303.946915][T25530] macvlan0: left promiscuous mode
[  303.948588][T25530] macvlan0: left allmulticast mode
[  303.954437][T25530] bond8: left promiscuous mode
[  303.967201][ T5847] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 20000 - 0
[  303.980342][ T5847] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  303.983222][ T5847] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  303.989607][ T5847] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  304.003199][T25537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8499'.
[  304.112412][T25550] netlink: 'syz.1.8499': attribute type 8 has an invalid length.
[  304.902789][T25623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8521'.
[  304.905771][T25623] netlink: 'syz.1.8521': attribute type 2 has an invalid length.
[  304.960075][T25630] delete_channel: no stack
[  305.007374][   T33] audit: type=1804 audit(1754486760.649:6): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8526" name="/newroot/3062/cgroup.controllers" dev="tmpfs" ino=15444 res=1 errno=0
[  305.034539][   T33] audit: type=1800 audit(1754486760.649:7): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8526" name="cgroup.controllers" dev="tmpfs" ino=15444 res=0 errno=0
[  305.056453][   T33] audit: type=1800 audit(1754486760.649:8): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8526" name="cgroup.controllers" dev="tmpfs" ino=15444 res=0 errno=0
[  305.098317][T25647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8532'.
[  305.121045][T25650] tipc: Resetting bearer <eth:gre0>
[  305.170922][T25650] 0: left allmulticast mode
[  305.173000][T25650] hsr_slave_0: left allmulticast mode
[  305.176606][T25650] hsr_slave_1: left allmulticast mode
[  305.201762][T25650] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  305.209618][T25650] gretap3: left promiscuous mode
[  305.211325][T25650] gretap3: left allmulticast mode
[  305.222040][T25650] dummy0: left allmulticast mode
[  305.226080][T25650] macvtap2: left promiscuous mode
[  305.228095][T25650] macvtap2: left allmulticast mode
[  305.237175][T25650] bond0: left promiscuous mode
[  305.238749][T25650] bond3: left promiscuous mode
[  305.251264][T25650] macvlan3: left promiscuous mode
[  305.266727][T25650] bridge9: left allmulticast mode
[  305.275113][T25650] tipc: Resetting bearer <eth:syzkaller0>
[  305.301659][T25650] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode
[  305.304617][T25650] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode
[  305.321592][T25650] bridge10: left promiscuous mode
[  305.323310][T25650] bridge10: left allmulticast mode
[  305.325524][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.329668][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.332621][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.344326][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.358029][T25647] lo speed is unknown, defaulting to 1000
[  305.475535][T25647] DL<Y speed is unknown, defaulting to 1000
[  305.869339][ T5820] Bluetooth: hci0: command tx timeout
[  305.901311][T25692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.904052][T25692] syzkaller0: entered promiscuous mode
[  305.905862][T25692] syzkaller0: entered allmulticast mode
[  305.917640][T25692] tipc: Resetting bearer <eth:syzkaller0>
[  305.926392][T25691] tipc: Resetting bearer <eth:syzkaller0>
[  305.936849][T25691] tipc: Disabling bearer <eth:syzkaller0>
[  305.965353][T25696] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  305.968979][T25695] IPVS: stopping backup sync thread 25696 ...
[  306.107606][T25714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8555'.
[  306.173186][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8559'.
[  306.349611][    C1] ==================================================================
[  306.352307][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  306.354817][    C1] Read of size 2 at addr ffff88812167b82a by task syz-executor/5821
[  306.357857][    C1] 
[  306.358955][    C1] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  306.358965][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.358970][    C1] Call Trace:
[  306.358974][    C1]  <IRQ>
[  306.358977][    C1]  dump_stack_lvl+0x189/0x250
[  306.358987][    C1]  ? rcu_is_watching+0x15/0xb0
[  306.359020][    C1]  ? __kasan_check_byte+0x12/0x40
[  306.359033][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.359039][    C1]  ? rcu_is_watching+0x15/0xb0
[  306.359049][    C1]  ? lock_release+0x4b/0x3e0
[  306.359059][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  306.359068][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  306.359075][    C1]  print_report+0xca/0x240
[  306.359085][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  306.359094][    C1]  kasan_report+0x118/0x150
[  306.359104][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  306.359113][    C1]  rose_timer_expiry+0x471/0x4b0
[  306.359122][    C1]  call_timer_fn+0x17e/0x5f0
[  306.359132][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  306.359140][    C1]  ? call_timer_fn+0xbe/0x5f0
[  306.359165][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  306.359176][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  306.359191][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.359200][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  306.359209][    C1]  __run_timer_base+0x61a/0x860
[  306.359216][    C1]  ? ktime_get+0x3e/0x1f0
[  306.359225][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  306.359232][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  306.359242][    C1]  run_timer_softirq+0xb7/0x180
[  306.359251][    C1]  handle_softirqs+0x286/0x870
[  306.359262][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  306.359272][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  306.359282][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  306.359291][    C1]  __irq_exit_rcu+0xca/0x1f0
[  306.359300][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  306.359311][    C1]  irq_exit_rcu+0x9/0x30
[  306.359320][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  306.359328][    C1]  </IRQ>
[  306.359330][    C1]  <TASK>
[  306.359333][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  306.359341][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  306.359350][    C1] Code: 89 fb e8 23 00 00 00 48 8b 3d e4 43 fa 0b 48 89 de 5b e9 63 5c 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 00 9a 92 65 8b 15 68 4f
[  306.359356][    C1] RSP: 0018:ffffc90003f8f3b8 EFLAGS: 00000246
[  306.359363][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 5c51d594ed8b8d00
[  306.359368][    C1] RDX: 0000000000000007 RSI: ffffffff8db65e93 RDI: ffff888105965640
[  306.359373][    C1] RBP: ffffc90003f8f630 R08: ffff88810192470f R09: 1ffff110203248e1
[  306.359377][    C1] R10: dffffc0000000000 R11: ffffed10203248e2 R12: dffffc0000000000
[  306.359382][    C1] R13: ffff88810eecde20 R14: ffff88812152ff20 R15: ffff888133944f20
[  306.359390][    C1]  copy_pmd_range+0x1f01/0x7000
[  306.359401][    C1]  ? arch_stack_walk+0xfc/0x150
[  306.359414][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  306.359427][    C1]  copy_page_range+0xc46/0x1270
[  306.359434][    C1]  ? __lock_acquire+0xab9/0xd20
[  306.359446][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  306.359454][    C1]  ? up_write+0x1c4/0x420
[  306.359461][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  306.359469][    C1]  dup_mmap+0xf57/0x1ac0
[  306.359479][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  306.359486][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  306.359492][    C1]  ? mm_init+0xcc3/0xef0
[  306.359504][    C1]  copy_mm+0x13c/0x4b0
[  306.359510][    C1]  copy_process+0x1706/0x3c00
[  306.359519][    C1]  ? copy_process+0x97f/0x3c00
[  306.359526][    C1]  ? __pfx_copy_process+0x10/0x10
[  306.359534][    C1]  kernel_clone+0x21e/0x840
[  306.359542][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  306.359551][    C1]  __x64_sys_clone+0x18b/0x1e0
[  306.359558][    C1]  ? count_memcg_event_mm+0x21/0x260
[  306.359566][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  306.359576][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  306.359585][    C1]  ? do_syscall_64+0xbe/0x3b0
[  306.359596][    C1]  do_syscall_64+0xfa/0x3b0
[  306.359605][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.359613][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.359620][    C1]  ? exc_page_fault+0x9f/0xf0
[  306.359628][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.359634][    C1] RIP: 0033:0x7f4f32d85453
[  306.359641][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  306.359646][    C1] RSP: 002b:00007ffc7be07e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  306.359653][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f32d85453
[  306.359658][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  306.359662][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  306.359666][    C1] R10: 00005555601d57d0 R11: 0000000000000246 R12: 0000000000000000
[  306.359670][    C1] R13: 00000000000927c0 R14: 000000000004ac26 R15: 00007ffc7be07fb0
[  306.359678][    C1]  </TASK>
[  306.359680][    C1] 
[  306.517783][    C1] Allocated by task 25133:
[  306.519206][    C1]  kasan_save_track+0x3e/0x80
[  306.520747][    C1]  __kasan_kmalloc+0x93/0xb0
[  306.522229][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  306.523912][    C1]  __genradix_ptr_alloc+0x352/0x4a0
[  306.525567][    C1]  __genradix_prealloc+0x44/0x90
[  306.527150][    C1]  sctp_stream_init+0x14b/0x440
[  306.528723][    C1]  sctp_association_new+0x10dd/0x25f0
[  306.530445][    C1]  sctp_connect_new_asoc+0x2c5/0x690
[  306.532117][    C1]  sctp_sendmsg+0x155c/0x2810
[  306.533637][    C1]  __sock_sendmsg+0x19c/0x270
[  306.535179][    C1]  __sys_sendto+0x3bd/0x520
[  306.536612][    C1]  __x64_sys_sendto+0xde/0x100
[  306.538160][    C1]  do_syscall_64+0xfa/0x3b0
[  306.539640][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.541519][    C1] 
[  306.542324][    C1] Freed by task 25133:
[  306.543612][    C1]  kasan_save_track+0x3e/0x80
[  306.545117][    C1]  kasan_save_free_info+0x46/0x50
[  306.546738][    C1]  __kasan_slab_free+0x62/0x70
[  306.548299][    C1]  kfree+0x18e/0x440
[  306.549582][    C1]  genradix_free_recurse+0x5d/0xa0
[  306.551234][    C1]  genradix_free_recurse+0x5d/0xa0
[  306.552827][    C1]  sctp_stream_free+0xd5/0x110
[  306.554352][    C1]  sctp_association_free+0x26d/0x7f0
[  306.556039][    C1]  sctp_do_sm+0x3eba/0x5a20
[  306.557478][    C1]  sctp_primitive_SHUTDOWN+0x98/0xc0
[  306.559136][    C1]  sctp_close+0x409/0x900
[  306.560583][    C1]  inet_release+0x144/0x190
[  306.562079][    C1]  sock_close+0xc3/0x240
[  306.563434][    C1]  __fput+0x44c/0xa70
[  306.564704][    C1]  task_work_run+0x1d4/0x260
[  306.566235][    C1]  get_signal+0x11ed/0x1340
[  306.567699][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  306.569478][    C1]  exit_to_user_mode_loop+0x75/0x110
[  306.571156][    C1]  do_syscall_64+0x2bd/0x3b0
[  306.572618][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.574504][    C1] 
[  306.575278][    C1] The buggy address belongs to the object at ffff88812167b800
[  306.575278][    C1]  which belongs to the cache kmalloc-512 of size 512
[  306.579665][    C1] The buggy address is located 42 bytes inside of
[  306.579665][    C1]  freed 512-byte region [ffff88812167b800, ffff88812167ba00)
[  306.583908][    C1] 
[  306.584690][    C1] The buggy address belongs to the physical page:
[  306.586753][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888121678c00 pfn:0x121678
[  306.589953][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  306.592695][    C1] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  306.595467][    C1] page_type: f5(slab)
[  306.596752][    C1] raw: 057ff00000000240 ffff88801a441c80 ffffea0004153c10 ffffea000439ce10
[  306.599474][    C1] raw: ffff888121678c00 0000000000100008 00000000f5000000 0000000000000000
[  306.602206][    C1] head: 057ff00000000240 ffff88801a441c80 ffffea0004153c10 ffffea000439ce10
[  306.605081][    C1] head: ffff888121678c00 0000000000100008 00000000f5000000 0000000000000000
[  306.607924][    C1] head: 057ff00000000002 ffffea0004859e01 00000000ffffffff 00000000ffffffff
[  306.610731][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  306.613533][    C1] page dumped because: kasan: bad access detected
[  306.615586][    C1] page_owner tracks the page as allocated
[  306.617412][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 45507492149, free_ts 0
[  306.623665][    C1]  post_alloc_hook+0x240/0x2a0
[  306.625280][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  306.627064][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  306.629015][    C1]  alloc_pages_mpol+0x232/0x4a0
[  306.630599][    C1]  allocate_slab+0x8a/0x3b0
[  306.632085][    C1]  ___slab_alloc+0xbfc/0x1480
[  306.633650][    C1]  __kmalloc_cache_noprof+0x296/0x3d0
[  306.635391][    C1]  set_kthread_struct+0xbb/0x340
[  306.637023][    C1]  copy_process+0x10c4/0x3c00
[  306.638611][    C1]  kernel_clone+0x21e/0x840
[  306.640084][    C1]  kernel_thread+0x10c/0x160
[  306.641561][    C1]  kthreadd+0x575/0x770
[  306.642947][    C1]  ret_from_fork+0x3fc/0x770
[  306.644471][    C1]  ret_from_fork_asm+0x1a/0x30
[  306.646024][    C1] page_owner free stack trace missing
[  306.647758][    C1] 
[  306.648575][    C1] Memory state around the buggy address:
[  306.650396][    C1]  ffff88812167b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  306.652943][    C1]  ffff88812167b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  306.655508][    C1] >ffff88812167b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  306.658026][    C1]                                   ^
[  306.659789][    C1]  ffff88812167b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  306.662409][    C1]  ffff88812167b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  306.665012][    C1] ==================================================================
[  306.667984][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  306.670367][    C1] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  306.674132][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.677319][    C1] Call Trace:
[  306.678417][    C1]  <IRQ>
[  306.679376][    C1]  dump_stack_lvl+0x99/0x250
[  306.680914][    C1]  ? __asan_memcpy+0x40/0x70
[  306.682418][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.684057][    C1]  ? __pfx__printk+0x10/0x10
[  306.685558][    C1]  panic+0x2db/0x790
[  306.686825][    C1]  ? __pfx_panic+0x10/0x10
[  306.688271][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  306.690153][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  306.692059][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  306.694133][    C1]  ? print_memory_metadata+0x314/0x400
[  306.695915][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  306.697537][    C1]  check_panic_on_warn+0x89/0xb0
[  306.699109][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  306.700716][    C1]  end_report+0x78/0x160
[  306.702099][    C1]  kasan_report+0x129/0x150
[  306.703569][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  306.705238][    C1]  rose_timer_expiry+0x471/0x4b0
[  306.706859][    C1]  call_timer_fn+0x17e/0x5f0
[  306.708386][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  306.710193][    C1]  ? call_timer_fn+0xbe/0x5f0
[  306.711736][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  306.713429][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  306.715151][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.716787][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  306.718539][    C1]  __run_timer_base+0x61a/0x860
[  306.720160][    C1]  ? ktime_get+0x3e/0x1f0
[  306.721578][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  306.723314][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  306.725313][    C1]  run_timer_softirq+0xb7/0x180
[  306.726899][    C1]  handle_softirqs+0x286/0x870
[  306.728454][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  306.730009][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  306.731696][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  306.733340][    C1]  __irq_exit_rcu+0xca/0x1f0
[  306.734818][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  306.736476][    C1]  irq_exit_rcu+0x9/0x30
[  306.737834][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  306.739649][    C1]  </IRQ>
[  306.740605][    C1]  <TASK>
[  306.741558][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  306.743485][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  306.745404][    C1] Code: 89 fb e8 23 00 00 00 48 8b 3d e4 43 fa 0b 48 89 de 5b e9 63 5c 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 00 9a 92 65 8b 15 68 4f
[  306.751508][    C1] RSP: 0018:ffffc90003f8f3b8 EFLAGS: 00000246
[  306.753439][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 5c51d594ed8b8d00
[  306.755947][    C1] RDX: 0000000000000007 RSI: ffffffff8db65e93 RDI: ffff888105965640
[  306.758457][    C1] RBP: ffffc90003f8f630 R08: ffff88810192470f R09: 1ffff110203248e1
[  306.760982][    C1] R10: dffffc0000000000 R11: ffffed10203248e2 R12: dffffc0000000000
[  306.763568][    C1] R13: ffff88810eecde20 R14: ffff88812152ff20 R15: ffff888133944f20
[  306.766136][    C1]  copy_pmd_range+0x1f01/0x7000
[  306.767760][    C1]  ? arch_stack_walk+0xfc/0x150
[  306.769354][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  306.771015][    C1]  copy_page_range+0xc46/0x1270
[  306.772623][    C1]  ? __lock_acquire+0xab9/0xd20
[  306.774213][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  306.775899][    C1]  ? up_write+0x1c4/0x420
[  306.777313][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  306.779568][    C1]  dup_mmap+0xf57/0x1ac0
[  306.781109][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  306.782689][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  306.784588][    C1]  ? mm_init+0xcc3/0xef0
[  306.785979][    C1]  copy_mm+0x13c/0x4b0
[  306.787351][    C1]  copy_process+0x1706/0x3c00
[  306.788903][    C1]  ? copy_process+0x97f/0x3c00
[  306.790538][    C1]  ? __pfx_copy_process+0x10/0x10
[  306.792213][    C1]  kernel_clone+0x21e/0x840
[  306.793715][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  306.795392][    C1]  __x64_sys_clone+0x18b/0x1e0
[  306.797016][    C1]  ? count_memcg_event_mm+0x21/0x260
[  306.798736][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  306.800439][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  306.802173][    C1]  ? do_syscall_64+0xbe/0x3b0
[  306.803709][    C1]  do_syscall_64+0xfa/0x3b0
[  306.805271][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.806959][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.808966][    C1]  ? exc_page_fault+0x9f/0xf0
[  306.810525][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.812466][    C1] RIP: 0033:0x7f4f32d85453
[  306.813926][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  306.820182][    C1] RSP: 002b:00007ffc7be07e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  306.822865][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f32d85453
[  306.825479][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  306.828056][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  306.830626][    C1] R10: 00005555601d57d0 R11: 0000000000000246 R12: 0000000000000000
[  306.833255][    C1] R13: 00000000000927c0 R14: 000000000004ac26 R15: 00007ffc7be07fb0
[  306.835818][    C1]  </TASK>
[  306.837535][    C1] Kernel Offset: disabled
[  306.838956][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:26:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000001 RCX=8ea32ea4bf6b8c00 RDX=0000000000000000
RSI=ffffffff8db65e93 RDI=ffffffff8be30a00 RBP=00000000ffffffff RSP=ffffc90003f3f2b0
R8 =0000000000000000 R9 =ffffffff822dfced R10=dffffc0000000000 R11=fffff940009031b1
R12=0000000000000246 R13=ffff8881063c1cc0 R14=ffffffff8e13c4e0 R15=0000000000000003
RIP=ffffffff8b6fe290 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555565cac500 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc02aae56c0 CR3=000000010ded6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc029e12e53
XMM06=0000000000000000 00007fc029e12e4d XMM07=0000000000000000 00007fc029e12e61
XMM08=0000000000000000 00007fc029e12ee7 XMM09=0000000000000000 00007fc029e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0470
R8 =ffff888107a20237 R9 =1ffff11020f44046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958e4 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555601d5500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4f33ae56c0 CR3=00000001113b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4f32e12e53
XMM06=0000000000000000 00007f4f32e12e4d XMM07=0000000000000000 00007f4f32e12e61
XMM08=0000000000000000 00007f4f32e12ee7 XMM09=0000000000000000 00007f4f32e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
