last executing test programs:

1.234419833s ago: executing program 0 (id=5451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x501, 0x0, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40120}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x84000)

1.184084079s ago: executing program 0 (id=5453):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x28, 0x0, &(0x7f00000003c0)="e02742e8680d85cc970c2d2f86ddfd356fbefc38078b49f5e6bdbfc95f9a3dff8c1771865e1808c9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1.183892721s ago: executing program 2 (id=5454):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0xf, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0)

284.793267ms ago: executing program 0 (id=5457):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4)

281.606933ms ago: executing program 2 (id=5458):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9641, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, &(0x7f0000000000), 0x7fffffffffffffff, 0x0)

281.229894ms ago: executing program 1 (id=5459):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
listen(r0, 0x2)

225.357451ms ago: executing program 0 (id=5460):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040)

225.175397ms ago: executing program 1 (id=5461):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000004ac0)=0x36, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0x4)

225.071156ms ago: executing program 2 (id=5462):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

153.805257ms ago: executing program 1 (id=5463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)

153.563701ms ago: executing program 2 (id=5464):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054)

153.130378ms ago: executing program 0 (id=5465):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0)
shutdown(r0, 0x1)

85.428249ms ago: executing program 1 (id=5466):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0)

85.214183ms ago: executing program 1 (id=5467):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20)

84.852361ms ago: executing program 2 (id=5468):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)

434.807µs ago: executing program 1 (id=5469):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}})

140.41µs ago: executing program 0 (id=5470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x170, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x5}, 0x20000050)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x1c, r5, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x50, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d7df30e5dbc394220effef85aba6e951f484c8384e880ab4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004020}, 0x40090)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r4], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x0)

0s ago: executing program 2 (id=5471):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

in delayed_ack socket option.
[  106.161266][ T8580] Use struct sctp_sack_info instead
[  106.168703][ T8580] sctp: [Deprecated]: syz.0.1149 (pid 8580) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.168703][ T8580] Use struct sctp_sack_info instead
[  106.357310][ T8602] __nla_validate_parse: 3 callbacks suppressed
[  106.357318][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1156'.
[  106.795055][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1171'.
[  106.802292][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1171'.
[  106.969320][ T8640] netlink: 'syz.1.1179': attribute type 3 has an invalid length.
[  106.997537][ T8642] vlan2: entered allmulticast mode
[  106.999700][ T8642] bridge_slave_0: entered allmulticast mode
[  107.145201][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'.
[  107.180665][ T8652] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  107.183985][ T8652] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1184'.
[  107.265902][ T8658] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  107.268660][ T8658] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  107.308377][ T8660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.311885][ T8660] syzkaller0: entered promiscuous mode
[  107.314259][ T8660] syzkaller0: entered allmulticast mode
[  107.343869][ T8660] tipc: Resetting bearer <eth:syzkaller0>
[  107.350579][ T8659] tipc: Resetting bearer <eth:syzkaller0>
[  107.366362][ T8659] tipc: Disabling bearer <eth:syzkaller0>
[  107.593478][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'.
[  107.618562][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1200'.
[  107.659729][ T8690] : renamed from batadv_slave_1 (while UP)
[  108.303877][ T8762] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1232'.
[  108.962036][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1266'.
[  108.965296][ T8832] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1266'.
[  109.363434][ T8864] xt_HMARK: proto mask must be zero with L3 mode
[  109.450333][ T8870] netlink: 'syz.1.1284': attribute type 1 has an invalid length.
[  109.911733][ T8892] netlink: 'syz.0.1293': attribute type 10 has an invalid length.
[  109.914608][ T8892] bridge0: port 3(team0) entered blocking state
[  109.918345][ T8892] bridge0: port 3(team0) entered disabled state
[  109.920639][ T8892] team0: entered allmulticast mode
[  109.922366][ T8892] team_slave_0: entered allmulticast mode
[  109.924392][ T8892] team_slave_1: entered allmulticast mode
[  109.929638][ T8892] team0: entered promiscuous mode
[  109.931781][ T8892] team_slave_0: entered promiscuous mode
[  109.934152][ T8892] team_slave_1: entered promiscuous mode
[  110.084971][ T8906] netlink: 'syz.0.1300': attribute type 3 has an invalid length.
[  110.088437][ T8906] netlink: 'syz.0.1300': attribute type 2 has an invalid length.
[  110.091386][ T8906] netlink: 'syz.0.1300': attribute type 2 has an invalid length.
[  110.701966][ T8969] syzkaller0: entered promiscuous mode
[  110.704301][ T8969] syzkaller0: entered allmulticast mode
[  110.802955][ T8982] xt_socket: unknown flags 0x50
[  110.867073][ T8980] nbd2: detected capacity change from 0 to 127
[  110.876166][ T8985] block nbd2: Receive control failed (result -32)
[  110.882487][ T8093] block nbd2: Dead connection, failed to find a fallback
[  110.886059][ T8093] block nbd2: shutting down sockets
[  110.894478][ T8093] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.906783][ T8093] Buffer I/O error on dev nbd2, logical block 0, async page read
[  110.913384][ T8093] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.919573][ T8093] Buffer I/O error on dev nbd2, logical block 1, async page read
[  110.922637][ T8093] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.926243][ T8093] Buffer I/O error on dev nbd2, logical block 2, async page read
[  110.929013][ T8093] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.935318][ T8093] Buffer I/O error on dev nbd2, logical block 3, async page read
[  110.940205][ T8093] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.943907][ T8093] Buffer I/O error on dev nbd2, logical block 0, async page read
[  110.951547][ T8093] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.954912][ T8093] Buffer I/O error on dev nbd2, logical block 1, async page read
[  110.960278][ T8093] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.963299][ T8093] Buffer I/O error on dev nbd2, logical block 2, async page read
[  110.966494][ T8093] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.970157][ T8093] Buffer I/O error on dev nbd2, logical block 3, async page read
[  110.981190][ T8093] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.984928][ T8093] Buffer I/O error on dev nbd2, logical block 0, async page read
[  110.988614][ T8093] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.991975][ T8093] Buffer I/O error on dev nbd2, logical block 1, async page read
[  110.999715][ T8093] ldm_validate_partition_table(): Disk read failed.
[  111.006380][ T8093] Dev nbd2: unable to read RDB block 0
[  111.010595][ T8093]  nbd2: unable to read partition table
[  111.023763][ T8093] ldm_validate_partition_table(): Disk read failed.
[  111.027506][ T8093] Dev nbd2: unable to read RDB block 0
[  111.031300][ T8093]  nbd2: unable to read partition table
[  111.733925][ T8997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.743298][ T8997] syzkaller0: entered promiscuous mode
[  111.746070][ T8997] syzkaller0: entered allmulticast mode
[  111.752394][ T8997] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  111.809391][ T9003] __nla_validate_parse: 10 callbacks suppressed
[  111.809406][ T9003] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1342'.
[  111.929685][ T9010] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1345'.
[  112.339129][ T9029] tipc: Resetting bearer <eth:syzkaller0>
[  112.533532][ T9034] bridge6: entered allmulticast mode
[  112.613985][ T8996] tipc: Resetting bearer <eth:syzkaller0>
[  112.636514][ T8996] tipc: Disabling bearer <eth:syzkaller0>
[  113.141766][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'.
[  113.228874][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'.
[  113.327248][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'.
[  113.330883][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'.
[  113.337281][ T9099] netlink: 'syz.2.1382': attribute type 4 has an invalid length.
[  113.396143][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1383'.
[  113.894983][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'.
[  114.492666][ T9187] netlink: 'syz.0.1406': attribute type 6 has an invalid length.
[  114.717768][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1407'.
[  115.088074][ T9204] syzkaller0: entered promiscuous mode
[  115.090422][ T9204] syzkaller0: entered allmulticast mode
[  115.291852][ T9220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1421'.
[  115.439183][ T9232] netlink: 'syz.1.1427': attribute type 11 has an invalid length.
[  116.089319][ T9274] vlan2: entered promiscuous mode
[  116.639381][ T9314] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  116.672708][ T9316] bridge_slave_0: left allmulticast mode
[  116.675280][ T9316] bridge_slave_0: left promiscuous mode
[  116.679184][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.683932][ T9316] bridge_slave_1: left allmulticast mode
[  116.688110][ T9316] bridge_slave_1: left promiscuous mode
[  116.691429][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.703099][ T9316] team0: Port device team_slave_0 removed
[  116.708651][ T9316] team0: Port device team_slave_1 removed
[  116.711424][ T9316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.714396][ T9316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.718830][ T9316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  116.748079][ T9316] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  117.000762][ T9341] __nla_validate_parse: 2 callbacks suppressed
[  117.000809][ T9341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'.
[  117.009687][ T9341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'.
[  117.414709][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1494'.
[  117.418842][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1494'.
[  117.501077][ T9384] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  117.614049][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'.
[  117.752293][ T9401] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  117.901477][ T9409] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1509'.
[  118.056946][ T9425] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  118.080893][ T9429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1518'.
[  118.094147][ T9429] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  118.098521][ T9429] netlink: 'syz.1.1518': attribute type 1 has an invalid length.
[  118.113574][ T9429] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.125981][ T9432] tipc: Started in network mode
[  118.128335][ T9432] tipc: Node identity c25a1024c374, cluster identity 4711
[  118.131659][ T9432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.136664][ T9432] syzkaller0: entered promiscuous mode
[  118.139799][ T9432] syzkaller0: entered allmulticast mode
[  118.153555][ T9432] tipc: Resetting bearer <eth:syzkaller0>
[  118.157229][ T9431] tipc: Resetting bearer <eth:syzkaller0>
[  118.167892][ T9431] tipc: Disabling bearer <eth:syzkaller0>
[  118.251554][ T9442] netlink: 'syz.1.1524': attribute type 7 has an invalid length.
[  118.254933][ T9442] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1524'.
[  118.504989][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1533'.
[  119.354492][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'.
[  119.861248][ T9530] vlan2: entered promiscuous mode
[  120.388310][ T9546] macvtap1: entered promiscuous mode
[  120.390109][ T9546] macvtap1: entered allmulticast mode
[  120.392581][ T9546] dummy0: entered allmulticast mode
[  120.395005][ T9546] dummy0: entered promiscuous mode
[  120.401413][ T9546] team0: Device macvtap1 failed to register rx_handler
[  120.404742][ T9546] dummy0: left allmulticast mode
[  120.407180][ T9546] dummy0: left promiscuous mode
[  120.662441][ T9556] netlink: 'syz.0.1578': attribute type 4 has an invalid length.
[  120.702429][ T9558] nbd: couldn't find device at index 1
[  120.910483][ T9581] tap0: tun_chr_ioctl cmd 1074812118
[  121.492928][ T9634] nftables ruleset with unbound chain
[  121.673819][ T9651] syz.0.1621 uses old SIOCAX25GETINFO
[  122.141618][ T9694] __nla_validate_parse: 5 callbacks suppressed
[  122.141632][ T9694] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1641'.
[  122.421031][ T9712] netlink: 'syz.2.1647': attribute type 1 has an invalid length.
[  122.463030][ T9712] bond0: (slave gretap1): making interface the new active one
[  122.467217][ T9712] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  122.484975][ T9712] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  122.493683][ T9712] syz.2.1647 (9712) used greatest stack depth: 19912 bytes left
[  122.884682][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1659'.
[  123.486444][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'.
[  123.986685][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1704'.
[  123.990289][ T9833] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1704'.
[  123.993606][ T9833] netlink: 'syz.2.1704': attribute type 5 has an invalid length.
[  123.997254][ T9833] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1704'.
[  124.041387][ T9838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1705'.
[  124.044611][ T9838] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1705'.
[  124.056288][ T9838] netlink: 'syz.0.1705': attribute type 6 has an invalid length.
[  124.059239][ T9838] netlink: 'syz.0.1705': attribute type 5 has an invalid length.
[  124.062080][ T9838] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1705'.
[  124.093405][ T9841] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1704'.
[  124.229417][ T9850] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  124.948427][ T9911] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  125.588584][ T5876] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  126.491533][ T9986] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  126.962044][T10026] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  127.046029][T10033] netlink: 'syz.1.1790': attribute type 4 has an invalid length.
[  127.284551][T10053] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  127.392973][T10061] netlink: 'syz.0.1799': attribute type 3 has an invalid length.
[  127.398759][T10061] __nla_validate_parse: 4 callbacks suppressed
[  127.398769][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'.
[  128.649051][T10119] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1807'.
[  128.698497][T10124] netlink: 'syz.0.1810': attribute type 12 has an invalid length.
[  128.941525][T10151] netlink: 'syz.1.1822': attribute type 1 has an invalid length.
[  128.944563][T10151] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1822'.
[  129.535091][T10187] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1840'.
[  129.648340][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'.
[  129.653343][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1845'.
[  129.872597][T10212] veth1_macvtap: left promiscuous mode
[  129.874789][T10212] macsec0: entered promiscuous mode
[  129.878133][T10212] macsec0: entered allmulticast mode
[  129.890139][T10212] veth1_macvtap: entered promiscuous mode
[  129.892611][T10212] veth1_macvtap: entered allmulticast mode
[  129.897050][T10212] macsec0: left promiscuous mode
[  129.899361][T10212] macsec0: left allmulticast mode
[  129.901470][T10212] veth1_macvtap: left allmulticast mode
[  129.924639][T10212] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  129.928955][T10212] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.326606][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'.
[  130.501128][T10231] netlink: 'syz.0.1857': attribute type 62 has an invalid length.
[  130.528451][T10233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1858'.
[  130.564194][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1859'.
[  130.631032][T10240] vlan2: entered promiscuous mode
[  130.632911][T10240] bond0: entered promiscuous mode
[  130.635021][T10240] bond_slave_0: entered promiscuous mode
[  130.640977][T10240] bond_slave_1: entered promiscuous mode
[  130.711019][T10249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  130.718610][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1859'.
[  130.731501][T10240] geneve2: entered promiscuous mode
[  130.733371][T10240] geneve2: entered allmulticast mode
[  130.940287][T10269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.943815][T10269] syzkaller0: entered promiscuous mode
[  130.947896][T10269] syzkaller0: entered allmulticast mode
[  130.964402][T10269] tipc: Resetting bearer <eth:syzkaller0>
[  130.971028][T10268] tipc: Resetting bearer <eth:syzkaller0>
[  130.979830][T10268] tipc: Disabling bearer <eth:syzkaller0>
[  131.445564][T10294] pimreg: entered allmulticast mode
[  131.615226][T10301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.832639][T10313] tipc: Invalid UDP bearer configuration
[  131.832665][T10313] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  131.970135][T10325] netlink: 'syz.0.1899': attribute type 3 has an invalid length.
[  131.973779][T10325] netlink: 'syz.0.1899': attribute type 3 has an invalid length.
[  132.134429][T10344] openvswitch: netlink: Message has 8 unknown bytes.
[  132.377658][T10364] bond0: Unable to set down delay as MII monitoring is disabled
[  132.508747][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.603520][T10380] team0: Device macvtap2 is already an upper device of the team interface
[  132.743363][T10405] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  132.878895][T10418] syzkaller1: entered promiscuous mode
[  132.880900][T10418] syzkaller1: entered allmulticast mode
[  133.135924][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  133.801615][T10464] syzkaller1: entered promiscuous mode
[  133.804233][T10464] syzkaller1: entered allmulticast mode
[  134.025906][T10476] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  134.277150][T10503] ieee802154 phy0 wpan0: encryption failed: -22
[  135.009951][T10542] netlink: 'syz.1.1999': attribute type 10 has an invalid length.
[  135.333907][   T47] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  135.338998][   T47] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  135.341750][   T47] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe
[  135.353853][   T47] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  135.529200][T10570] netlink: 'syz.2.2011': attribute type 11 has an invalid length.
[  135.532293][T10570] __nla_validate_parse: 12 callbacks suppressed
[  135.532300][T10570] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2011'.
[  135.683611][T10584] netlink: 'syz.0.2018': attribute type 1 has an invalid length.
[  135.687640][T10584] netlink: 'syz.0.2018': attribute type 3 has an invalid length.
[  135.690962][T10584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2018'.
[  135.694707][T10584] NCSI netlink: No device for ifindex 246
[  135.697615][T10588] vxlan0: entered promiscuous mode
[  135.699448][T10588] vxlan0: entered allmulticast mode
[  135.701494][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.704860][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.711922][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.727007][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.768236][T10595] macvtap1: entered allmulticast mode
[  135.770517][T10595] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  135.782284][T10595] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  135.993990][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'.
[  136.004029][T10622] 8021q: adding VLAN 0 to HW filter on device bond2
[  136.005944][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'.
[  136.009970][T10619] netlink: 58 bytes leftover after parsing attributes in process `syz.0.2034'.
[  136.020730][T10622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  136.062838][T10626] veth6: entered promiscuous mode
[  136.064684][T10626] veth6: entered allmulticast mode
[  136.263042][T10657] netlink: 'syz.2.2052': attribute type 1 has an invalid length.
[  136.474733][T10675] netlink: 'syz.1.2060': attribute type 21 has an invalid length.
[  136.831322][T10701] netlink: 'syz.1.2071': attribute type 3 has an invalid length.
[  137.331855][T10734] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2087'.
[  137.397852][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'.
[  137.578622][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'.
[  137.582333][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'.
[  137.666561][T10750] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.2091'.
[  137.670040][T10750] netlink: zone id is out of range
[  137.672819][T10750] netlink: zone id is out of range
[  137.674847][T10750] netlink: get zone limit has 8 unknown bytes
[  138.118623][T10806] netem: incorrect ge model size
[  138.120589][T10806] netem: change failed
[  138.208581][T10800] bond0: entered promiscuous mode
[  138.210713][T10800] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.229884][T10807] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.232075][T10807] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  138.239323][T10807] bond0: (slave wireguard0): Error -95 calling set_mac_address
[  138.441983][T10837] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  138.444490][T10837] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  138.479881][ T5877] bond0 (unregistering): Released all slaves
[  138.529780][T10837] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  138.585332][T10837] 8021q: adding VLAN 0 to HW filter on device bond1
[  138.603208][T10845] bond1: (slave wlan0): Opening slave failed
[  138.667438][T10837] vlan2: entered allmulticast mode
[  138.669798][T10837] veth1: entered allmulticast mode
[  138.682797][T10837] bond1: (slave vlan2): Opening slave failed
[  138.969139][T10870] gtp0: entered promiscuous mode
[  138.971335][T10870] gtp0: entered allmulticast mode
[  139.065836][T10876] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  139.114729][T10868] netlink: 'syz.2.2141': attribute type 10 has an invalid length.
[  139.197433][T10881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.260654][T10881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.266026][T10878] netlink: 'syz.0.2144': attribute type 1 has an invalid length.
[  139.311962][T10881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.385254][T10881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.410690][T10889] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.460018][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.480972][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.495664][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.504957][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.038499][T10911] tipc: Failed to remove unknown binding: 66,1,1/0:2969762199/2969762201
[  140.049936][T10911] tipc: Failed to remove unknown binding: 66,1,1/0:2969762199/2969762201
[  140.053710][T10911] tipc: Failed to remove unknown binding: 66,1,1/0:2969762199/2969762201
[  141.101024][T10949] __nla_validate_parse: 17 callbacks suppressed
[  141.101039][T10949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'.
[  141.295765][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'.
[  141.736976][T11002] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  141.765198][T11002] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  141.772678][T11002] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  141.907923][T11020] openvswitch: netlink: Message has 8 unknown bytes.
[  142.948987][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  142.952110][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  142.955232][   T10] hid-generic 0005:16BF:5505.0002: reserved main item tag 0xe
[  142.967869][   T10] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  143.531348][T11121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2252'.
[  144.404228][T11174] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  144.457560][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2279'.
[  145.088424][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2289'.
[  145.410413][T11210] validate_nla: 4 callbacks suppressed
[  145.410422][T11210] netlink: 'syz.1.2293': attribute type 1 has an invalid length.
[  145.482096][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2296'.
[  145.485827][T11216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2296'.
[  145.503200][T11216] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  145.508329][T11216] gretap3: entered promiscuous mode
[  145.510419][T11216] gretap3: entered allmulticast mode
[  145.922771][T11265] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2319'.
[  145.928143][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2319'.
[  145.931105][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2319'.
[  146.029299][T11275] team0: entered promiscuous mode
[  146.031209][T11275] team0: entered allmulticast mode
[  146.033870][T11275] 8021q: adding VLAN 0 to HW filter on device team0
[  146.190175][T11290] netlink: 'syz.1.2332': attribute type 21 has an invalid length.
[  146.199112][T11290] netlink: 'syz.1.2332': attribute type 1 has an invalid length.
[  146.202638][T11290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2332'.
[  146.735955][T11307] dvmrp1: entered allmulticast mode
[  147.200372][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'.
[  147.203449][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'.
[  147.220755][T11337] netlink: 'syz.2.2353': attribute type 18 has an invalid length.
[  147.311618][T11348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2358'.
[  147.414872][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'.
[  147.657407][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2370'.
[  147.724339][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'.
[  147.967634][T11393] netlink: 'syz.1.2378': attribute type 3 has an invalid length.
[  148.074896][ T5847] cgroup: fork rejected by pids controller in /syz1
[  148.482047][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.486950][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.490503][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.494280][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.498465][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  148.669450][T11419] chnl_net:caif_netlink_parms(): no params data found
[  148.767358][T11419] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.767797][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2401'.
[  148.773431][T11419] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.787760][T11419] bridge_slave_0: entered allmulticast mode
[  148.791685][T11419] bridge_slave_0: entered promiscuous mode
[  148.816643][T11419] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.819735][T11419] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.826548][T11419] bridge_slave_1: entered allmulticast mode
[  148.834289][T11419] bridge_slave_1: entered promiscuous mode
[  148.872055][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2401'.
[  148.879454][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.893005][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.919053][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2403'.
[  148.920962][T11452] netlink: 'syz.2.2404': attribute type 1 has an invalid length.
[  148.951253][T11419] team0: Port device team_slave_0 added
[  148.956681][T11419] team0: Port device team_slave_1 added
[  149.013754][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.025317][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.036748][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.043250][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.047042][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.058287][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.112880][T11419] hsr_slave_0: entered promiscuous mode
[  149.118710][T11419] hsr_slave_1: entered promiscuous mode
[  149.121028][T11419] debugfs: 'hsr0' already exists in 'hsr'
[  149.123132][T11419] Cannot create hsr debugfs directory
[  149.301785][T11419] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.373957][T11419] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.417895][T11419] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.460887][T11419] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.588943][T11419] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  149.594990][T11419] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  149.601523][T11419] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  149.607975][T11419] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  149.667818][T11419] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.682247][T11419] 8021q: adding VLAN 0 to HW filter on device team0
[  149.689343][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.691838][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.698641][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.701052][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.837415][T11419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.859085][T11419] veth0_vlan: entered promiscuous mode
[  149.864886][T11419] veth1_vlan: entered promiscuous mode
[  149.886363][T11419] veth0_macvtap: entered promiscuous mode
[  149.891175][T11419] veth1_macvtap: entered promiscuous mode
[  149.903026][T11419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.910089][T11419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.918003][ T5695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.921409][ T5695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.924865][ T5695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.928644][ T5695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.969508][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.972129][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.001262][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.004863][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.281265][T11518] batadv1: entered promiscuous mode
[  150.283716][T11518] batadv1: entered allmulticast mode
[  150.586685][ T5853] Bluetooth: hci0: command tx timeout
[  150.754403][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.761586][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.975098][T11580] Bluetooth: MGMT ver 1.23
[  151.193857][T11602] netlink: 'syz.1.2467': attribute type 1 has an invalid length.
[  151.198687][T11602] netlink: 'syz.1.2467': attribute type 1 has an invalid length.
[  151.280015][T11610] __nla_validate_parse: 6 callbacks suppressed
[  151.280024][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2471'.
[  151.532925][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'.
[  151.542366][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2481'.
[  151.634922][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2483'.
[  151.640661][T11634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2483'.
[  152.237977][T11682] netlink: 'syz.0.2502': attribute type 96 has an invalid length.
[  152.627496][T11706] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2511'.
[  152.823564][T11713] IPv6: Can't replace route, no match found
[  153.136830][T11729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2522'.
[  153.143723][T11727] bridge_slave_0: left allmulticast mode
[  153.148735][T11727] bridge_slave_0: left promiscuous mode
[  153.151305][T11727] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.160156][T11727] bridge_slave_1: left allmulticast mode
[  153.162073][T11727] bridge_slave_1: left promiscuous mode
[  153.164102][T11727] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.244414][T11727] bond0: (slave bond_slave_0): Releasing backup interface
[  153.256555][T11727] bond0: (slave bond_slave_1): Releasing backup interface
[  153.269342][T11727] team0: Port device team_slave_0 removed
[  153.277393][T11727] team0: Port device team_slave_1 removed
[  153.280780][T11727] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.283959][T11727] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.301803][T11727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.305021][T11727] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.324953][T11727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  153.343947][T11737] netlink: 'syz.1.2519': attribute type 10 has an invalid length.
[  153.387795][T11737] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  153.478009][T11727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.481817][T11727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.199425][T11775] team0: left allmulticast mode
[  154.201741][T11775] team_slave_0: left allmulticast mode
[  154.204082][T11775] team_slave_1: left allmulticast mode
[  154.207719][T11775] bridge0: port 3(team0) entered disabled state
[  154.213886][T11775] bridge_slave_1: left allmulticast mode
[  154.217918][T11775] bridge_slave_1: left promiscuous mode
[  154.220436][T11775] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.236283][T11775] bridge_slave_0: left allmulticast mode
[  154.238223][T11775] bridge_slave_0: left promiscuous mode
[  154.240261][T11775] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.390964][T11787] netlink: 'syz.0.2548': attribute type 10 has an invalid length.
[  155.517144][T11818] tipc: Started in network mode
[  155.519093][T11818] tipc: Node identity a68cc28f3a3e, cluster identity 4711
[  155.521533][T11818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.550053][T11818] syzkaller0: entered promiscuous mode
[  155.552179][T11818] syzkaller0: entered allmulticast mode
[  155.568804][T11818] tipc: Resetting bearer <eth:syzkaller0>
[  155.571839][T11817] tipc: Resetting bearer <eth:syzkaller0>
[  155.587824][T11817] tipc: Disabling bearer <eth:syzkaller0>
[  155.860132][T11843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.863141][T11843] syzkaller0: entered promiscuous mode
[  155.867397][T11843] syzkaller0: entered allmulticast mode
[  155.879956][T11843] tipc: Resetting bearer <eth:syzkaller0>
[  155.883437][T11842] tipc: Resetting bearer <eth:syzkaller0>
[  155.897494][T11842] tipc: Disabling bearer <eth:syzkaller0>
[  156.960647][T11889] delete_channel: no stack
[  157.049709][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'.
[  157.141746][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'.
[  157.147892][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'.
[  157.252678][T11914] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2602'.
[  158.333599][T11943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.348724][T11943] syzkaller0: entered promiscuous mode
[  158.351201][T11943] syzkaller0: entered allmulticast mode
[  158.373588][T11943] tipc: Resetting bearer <eth:syzkaller0>
[  158.384318][T11942] tipc: Resetting bearer <eth:syzkaller0>
[  158.393713][T11942] tipc: Disabling bearer <eth:syzkaller0>
[  158.398181][T11953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2620'.
[  159.005018][T12017] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2651'.
[  159.040340][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'.
[  159.562635][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'.
[  159.703574][T12058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.712928][T12058] syzkaller0: entered promiscuous mode
[  159.714924][T12058] syzkaller0: entered allmulticast mode
[  159.747460][T12058] tipc: Resetting bearer <eth:syzkaller0>
[  159.751144][T12057] tipc: Resetting bearer <eth:syzkaller0>
[  159.761188][T12057] tipc: Disabling bearer <eth:syzkaller0>
[  160.112746][T12075] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2676'.
[  160.135170][T12075] tipc: Cannot configure node identity twice
[  160.296596][T12089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2678'.
[  160.313202][T12092] syz_tun: entered allmulticast mode
[  160.327298][T12090] syz_tun: left allmulticast mode
[  160.482156][T12110] netlink: 'syz.2.2692': attribute type 1 has an invalid length.
[  160.680010][T12131] netlink: 'syz.1.2701': attribute type 3 has an invalid length.
[  160.717779][T12134] netlink: 'syz.1.2703': attribute type 4 has an invalid length.
[  160.958458][T12148] nbd: socks must be embedded in a SOCK_ITEM attr
[  160.964699][T12148] block nbd3: shutting down sockets
[  161.017188][T12150] syzkaller0: entered promiscuous mode
[  161.019877][T12150] syzkaller0: entered allmulticast mode
[  161.464056][T12166] netlink: 'syz.2.2716': attribute type 28 has an invalid length.
[  162.093765][T12182] __nla_validate_parse: 2 callbacks suppressed
[  162.093775][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'.
[  162.110569][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.114846][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.123086][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'.
[  162.129926][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.140515][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.146582][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2726'.
[  162.223566][T12199] team0: left promiscuous mode
[  162.225214][T12199] team0: left allmulticast mode
[  162.231993][T12199] nicvf0: left promiscuous mode
[  162.238995][T12199] bond1: left promiscuous mode
[  162.240642][T12199] bond1: left allmulticast mode
[  162.264212][T12199] vxlan0: left promiscuous mode
[  162.266002][T12199] vxlan0: left allmulticast mode
[  162.268419][T12199] veth6: left promiscuous mode
[  162.270065][T12199] veth6: left allmulticast mode
[  162.271899][T12199] gretap3: left promiscuous mode
[  162.273895][T12199] gretap3: left allmulticast mode
[  162.303130][ T5695] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.311016][ T5695] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  162.314682][ T5695] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  162.321954][ T5695] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.331254][ T5695] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  162.335011][ T5695] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  162.339713][ T5695] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.343380][ T5695] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  162.350958][ T5695] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  162.354690][T12206] tipc: Cannot configure node identity twice
[  162.358515][ T5695] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.362166][ T5695] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  162.368591][ T5695] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  162.602916][T12227] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  162.716934][T12234] vlan3: entered promiscuous mode
[  162.719211][T12234] vlan3: entered allmulticast mode
[  162.721313][T12234] hsr_slave_1: entered allmulticast mode
[  162.803811][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'.
[  163.209181][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'.
[  163.212645][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'.
[  163.446536][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2764'.
[  163.475158][T12283] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2766'.
[  163.496331][T12276] nbd1: detected capacity change from 0 to 63
[  163.500340][T12280] block nbd1: NBD_DISCONNECT
[  163.505551][T12280] block nbd1: Disconnected due to user request.
[  163.509567][T12280] block nbd1: shutting down sockets
[  163.523204][    C1] blk_print_req_error: 138 callbacks suppressed
[  163.523217][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.528507][    C1] buffer_io_error: 138 callbacks suppressed
[  163.528514][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  163.533055][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.537331][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  163.540083][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.542633][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'.
[  163.543068][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  163.546539][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'.
[  163.549170][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.553086][T12290] netlink: 'syz.2.2769': attribute type 13 has an invalid length.
[  163.556745][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  163.563599][T12290] netlink: 'syz.2.2769': attribute type 11 has an invalid length.
[  163.571420][T12288] tap0: tun_chr_ioctl cmd 1074025680
[  163.575140][T12288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.579147][T12288] D: renamed from syzkaller0
[  163.583532][T12019] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.586659][T12019] Buffer I/O error on dev nbd1, logical block 0, async page read
[  163.589201][T12019] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.592108][T12019] Buffer I/O error on dev nbd1, logical block 1, async page read
[  163.595247][T12019] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.599639][T12019] Buffer I/O error on dev nbd1, logical block 2, async page read
[  163.603123][T12288] tipc: Disabling bearer <eth:syzkaller0>
[  163.605268][T12019] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.609390][T12019] Buffer I/O error on dev nbd1, logical block 3, async page read
[  163.613252][T12019] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.616818][T12019] Buffer I/O error on dev nbd1, logical block 0, async page read
[  163.619694][T12019] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.622956][T12019] Buffer I/O error on dev nbd1, logical block 1, async page read
[  163.629691][T12019] ldm_validate_partition_table(): Disk read failed.
[  163.640283][T12019] Dev nbd1: unable to read RDB block 0
[  163.644399][T12019]  nbd1: unable to read partition table
[  163.653668][T12019] ldm_validate_partition_table(): Disk read failed.
[  163.662016][T12019] Dev nbd1: unable to read RDB block 0
[  163.664865][T12019]  nbd1: unable to read partition table
[  163.881483][T12302] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  164.568199][T12298] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  165.251688][T12393] syzkaller1: entered promiscuous mode
[  165.253552][T12393] syzkaller1: entered allmulticast mode
[  166.051865][T12414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.228881][T12423] syzkaller1: entered promiscuous mode
[  166.231588][T12423] syzkaller1: entered allmulticast mode
[  166.277114][T12427] netlink: 'syz.1.2830': attribute type 1 has an invalid length.
[  166.281476][T12427] netlink: 'syz.1.2830': attribute type 2 has an invalid length.
[  166.352930][T12431] netlink: 'syz.0.2831': attribute type 19 has an invalid length.
[  167.190890][T12457] __nla_validate_parse: 8 callbacks suppressed
[  167.190901][T12457] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2842'.
[  168.161600][T12496] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2858'.
[  168.257085][ T5877] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  168.442753][T12510] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2863'.
[  168.449212][T12510] netlink: zone id is out of range
[  168.451239][T12510] netlink: zone id is out of range
[  168.453548][T12510] netlink: get zone limit has 8 unknown bytes
[  168.593606][T12527] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  168.660523][T12533] netlink: 'syz.2.2873': attribute type 4 has an invalid length.
[  168.778694][T12541] pimreg: entered allmulticast mode
[  168.907290][T12549] netlink: 'syz.1.2877': attribute type 1 has an invalid length.
[  168.920372][T12559] delete_channel: no stack
[  169.365311][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'.
[  169.431834][T12595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.434979][T12595] syzkaller0: entered promiscuous mode
[  169.438817][T12595] syzkaller0: entered allmulticast mode
[  169.450375][T12595] tipc: Resetting bearer <eth:syzkaller0>
[  169.453864][T12594] tipc: Resetting bearer <eth:syzkaller0>
[  169.466749][T12594] tipc: Disabling bearer <eth:syzkaller0>
[  169.555670][T12597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2902'.
[  169.922237][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'.
[  169.989297][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'.
[  170.137700][T12645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2921'.
[  170.141551][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2921'.
[  170.145362][T12645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2921'.
[  170.493999][T12682] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  170.662049][T12696] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  170.862486][T12709] netlink: 'syz.0.2953': attribute type 11 has an invalid length.
[  170.866594][T12709] netlink: 'syz.0.2953': attribute type 11 has an invalid length.
[  171.103209][T12729] netlink: 'syz.1.2963': attribute type 1 has an invalid length.
[  171.338317][T12751] netlink: 'syz.1.2974': attribute type 2 has an invalid length.
[  171.473519][T12762] netlink: 'syz.1.2979': attribute type 8 has an invalid length.
[  171.727371][T12787] vlan3: entered allmulticast mode
[  171.729050][T12787] bridge0: entered allmulticast mode
[  171.738352][T12787] bridge4: port 1(vlan3) entered blocking state
[  171.740635][T12787] bridge4: port 1(vlan3) entered disabled state
[  171.743833][T12787] vlan3: entered promiscuous mode
[  171.746081][T12787] bridge0: entered promiscuous mode
[  171.754792][T12787] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  171.921134][T12803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  172.028729][T12810] team0: Mode changed to "activebackup"
[  172.244808][T12832] __nla_validate_parse: 7 callbacks suppressed
[  172.244818][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'.
[  172.361740][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'.
[  172.371288][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'.
[  172.375038][T12843] netlink: 'syz.1.3017': attribute type 15 has an invalid length.
[  172.398279][ T5876] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.402115][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'.
[  172.406311][ T5695] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.410168][ T5695] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.410702][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'.
[  172.415762][ T5695] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.421273][T12843] netlink: 'syz.1.3017': attribute type 15 has an invalid length.
[  172.568663][T12861] : renamed from team_slave_1
[  172.582543][T12863] netlink: 'syz.2.3027': attribute type 2 has an invalid length.
[  172.588997][T12863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'.
[  172.718908][T12881] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3035'.
[  172.724284][T12881] unsupported nlmsg_type 40
[  172.815358][T12889] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3040'.
[  172.824038][T12889] netlink: zone id is out of range
[  172.828803][T12889] netlink: zone id is out of range
[  172.831006][T12889] netlink: zone id is out of range
[  172.833187][T12889] netlink: get zone limit has 8 unknown bytes
[  172.939815][T12900] tipc: Failed to remove unknown binding: 66,1,1/0:1653059908/1653059910
[  172.944217][T12900] tipc: Failed to remove unknown binding: 66,1,1/0:1653059908/1653059910
[  174.412879][T12926] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3057'.
[  174.584013][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'.
[  174.642271][T12944] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  175.333985][T13012] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  175.373348][T13014] netlink: 'syz.1.3098': attribute type 2 has an invalid length.
[  175.494218][T13020] nbd: device at index 1 is going down
[  176.460732][T13110] syzkaller1: entered promiscuous mode
[  176.462950][T13110] syzkaller1: entered allmulticast mode
[  176.765262][T13144] netlink: 'syz.1.3159': attribute type 1 has an invalid length.
[  176.768944][T13144] netlink: 'syz.1.3159': attribute type 2 has an invalid length.
[  177.260948][T13165] __nla_validate_parse: 11 callbacks suppressed
[  177.260959][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3169'.
[  177.266896][T13165] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  177.547865][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3176'.
[  177.880443][T13207] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3189'.
[  178.061108][T13217] netlink: 'syz.0.3193': attribute type 30 has an invalid length.
[  178.564169][T13239] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  178.570701][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'.
[  178.624108][T13239] bridge5: entered promiscuous mode
[  178.629011][T13239] bridge5: entered allmulticast mode
[  178.634627][T13239] team0: Port device bridge5 added
[  178.824518][T13245] netlink: 'syz.2.3206': attribute type 1 has an invalid length.
[  178.975069][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'.
[  178.980616][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'.
[  179.302236][T13280] netlink: 'syz.0.3221': attribute type 21 has an invalid length.
[  179.304964][T13280] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3221'.
[  179.312732][T13280] netlink: 'syz.0.3221': attribute type 4 has an invalid length.
[  179.316704][T13280] netlink: 'syz.0.3221': attribute type 5 has an invalid length.
[  179.320108][T13280] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3221'.
[  179.618823][ T5695] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  180.378601][T13307] netlink: 'syz.2.3233': attribute type 9 has an invalid length.
[  180.388087][T13307] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3233'.
[  180.394969][T13310] netlink: 'syz.1.3234': attribute type 3 has an invalid length.
[  180.402592][T13310] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3234'.
[  180.513098][T13321] xt_l2tp: invalid flags combination: 8
[  180.648293][T13333] xt_HMARK: spi-set and port-set can't be combined
[  181.081515][T13386] tipc: Enabled bearer <udp:syz2>, priority 10
[  181.537170][T13409] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  181.873283][ T5695] syzkaller0: tun_net_xmit 76
[  181.875907][ T5695] syzkaller0: tun_net_xmit 48
[  181.897931][   T47] syzkaller0: tun_net_xmit 76
[  181.904716][T13429] syzkaller0: tun_net_xmit 120
[  181.909794][T13429] syzkaller0: tun_net_xmit 120
[  181.912454][T13429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.919407][T13428] tipc: Resetting bearer <eth:syzkaller0>
[  182.206787][   T47] tipc: Node number set to 2628960911
[  182.851207][T13447] netlink: 'syz.1.3300': attribute type 13 has an invalid length.
[  182.854229][T13447] netlink: 'syz.1.3300': attribute type 17 has an invalid length.
[  182.882495][T13428] tipc: Disabling bearer <eth:syzkaller0>
[  182.919992][T13447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.252873][T13491] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3320'.
[  184.331402][T13496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.335204][T13496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.360591][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'.
[  184.364405][T13501] netlink: 'syz.1.3323': attribute type 5 has an invalid length.
[  184.373142][T13501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3323'.
[  184.387787][T13501] geneve0: entered promiscuous mode
[  184.390034][T13501] geneve0: entered allmulticast mode
[  184.395951][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  184.399386][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  184.403195][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  184.424297][T13504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3322'.
[  184.432980][T13504] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3322'.
[  184.433694][T13506] netlink: 'syz.2.3326': attribute type 1 has an invalid length.
[  184.441613][T13504] netlink: 'syz.0.3322': attribute type 5 has an invalid length.
[  184.447112][T13504] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3322'.
[  184.477728][T13496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.481987][T13496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.486682][T13496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  184.501939][T13506] gretap4: entered promiscuous mode
[  184.506529][T13506] bond5: (slave gretap4): making interface the new active one
[  184.510555][T13506] bond5: (slave gretap4): Enslaving as an active interface with an up link
[  184.516484][T13506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3326'.
[  184.523370][T13506] 8021q: adding VLAN 0 to HW filter on device bond5
[  184.561822][T13496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.567083][T13496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.571450][T13496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  184.634597][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3329'.
[  184.638289][T13513] netlink: 'syz.2.3329': attribute type 15 has an invalid length.
[  184.645684][T13496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.650204][T13496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.654536][T13496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  184.667406][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3329'.
[  184.671381][T13513] netlink: 'syz.2.3329': attribute type 15 has an invalid length.
[  184.759300][ T5877] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.764399][ T5877] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  184.768366][ T5877] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  184.780372][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.783340][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  184.786355][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  184.808112][ T5877] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.810981][ T5877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  184.813690][ T5877] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  184.824443][ T5877] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.827913][ T5877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  184.830815][ T5877] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  184.836418][T13514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.776275][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  185.879524][T13586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3360'.
[  186.014006][T13609] netlink: 'syz.1.3371': attribute type 15 has an invalid length.
[  186.271803][T13635] pim6reg: entered allmulticast mode
[  186.275029][T13635] pim6reg: left allmulticast mode
[  187.191078][T13678] vxcan1 speed is unknown, defaulting to 1000
[  187.195247][T13678] vxcan1 speed is unknown, defaulting to 1000
[  187.198776][T13678] vxcan1 speed is unknown, defaulting to 1000
[  187.319771][T13678] infiniband syz2: set down
[  187.322433][   T10] vxcan1 speed is unknown, defaulting to 1000
[  187.324527][T13678] infiniband syz2: added vxcan1
[  187.374772][T13678] RDS/IB: syz2: added
[  187.379823][T13678] vxcan1 speed is unknown, defaulting to 1000
[  187.567646][T13678] vxcan1 speed is unknown, defaulting to 1000
[  188.742505][T13678] vxcan1 speed is unknown, defaulting to 1000
[  188.962890][T13678] vxcan1 speed is unknown, defaulting to 1000
[  189.418881][T13765] sit2: entered promiscuous mode
[  189.452712][T13762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.533135][T13773] vxcan1 speed is unknown, defaulting to 1000
[  190.010507][T13805] __nla_validate_parse: 4 callbacks suppressed
[  190.010520][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'.
[  190.271077][T13829] batadv0: entered promiscuous mode
[  190.273481][T13829] debugfs: 'hsr0' already exists in 'hsr'
[  190.275733][T13829] Cannot create hsr debugfs directory
[  190.277955][T13829] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  190.281346][T13829] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  190.285138][T13829] hsr0: entered allmulticast mode
[  190.289721][T13829] bond0: entered allmulticast mode
[  190.291613][T13829] bond_slave_0: entered allmulticast mode
[  190.293612][T13829] bond_slave_1: entered allmulticast mode
[  190.295869][T13829] batadv0: entered allmulticast mode
[  190.298264][T13829] 8021q: adding VLAN 0 to HW filter on device hsr0
[  190.302163][T13829] batadv0: left promiscuous mode
[  190.551407][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'.
[  190.693908][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'.
[  190.698922][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'.
[  190.703703][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'.
[  190.711686][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'.
[  190.813879][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'.
[  190.971617][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3496'.
[  191.082902][T13886] syzkaller1: entered promiscuous mode
[  191.084982][T13886] syzkaller1: entered allmulticast mode
[  191.219449][T13888] vxcan1 speed is unknown, defaulting to 1000
[  191.224382][T13890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3502'.
[  191.752242][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'.
[  191.825256][T13918] IPVS: Scheduler module ip_vs_sip not found
[  191.926555][T13926] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  191.930516][T13926] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  192.168085][T13934] IPVS: Scheduler module ip_vs_sip not found
[  192.173141][T13934] IPVS: length: 141 != 8
[  193.076324][T13961] netlink: 'syz.2.3531': attribute type 10 has an invalid length.
[  193.109889][T13967] sctp: [Deprecated]: syz.2.3534 (pid 13967) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.109889][T13967] Use struct sctp_sack_info instead
[  193.543008][T14010] netlink: 'syz.1.3553': attribute type 1 has an invalid length.
[  193.946536][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.197946][T14068] block nbd2: NBD_DISCONNECT
[  194.200043][T14068] block nbd2: Send disconnect failed -32
[  195.270758][T14130] geneve0: left promiscuous mode
[  195.272641][T14130] geneve0: left allmulticast mode
[  195.277574][T14130] sit2: left promiscuous mode
[  195.282869][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.298590][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  195.303376][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  195.307434][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.310989][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  195.314499][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  195.318526][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.327657][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  195.331474][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  195.336150][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.360029][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  195.362675][T14139] __nla_validate_parse: 8 callbacks suppressed
[  195.362687][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'.
[  195.363475][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  195.373673][T14139] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  195.487800][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3615'.
[  195.497394][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3615'.
[  195.521191][T14151] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  195.566361][T14157] netlink: 'syz.1.3618': attribute type 3 has an invalid length.
[  195.802113][T14181] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3631'.
[  195.808362][T14181] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3631'.
[  195.812197][T14181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3631'.
[  195.983165][T14201] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3641'.
[  196.119976][T14207] ip6gre1: entered allmulticast mode
[  196.403628][T14222] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3650'.
[  196.449695][T14228] syz.1.3652: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  196.454807][T14228] CPU: 1 UID: 0 PID: 14228 Comm: syz.1.3652 Not tainted syzkaller #0 PREEMPT(full) 
[  196.454817][T14228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.454822][T14228] Call Trace:
[  196.454826][T14228]  <TASK>
[  196.454830][T14228]  dump_stack_lvl+0x189/0x250
[  196.454843][T14228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.454851][T14228]  ? __pfx__printk+0x10/0x10
[  196.454861][T14228]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  196.454870][T14228]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  196.454878][T14228]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  196.454887][T14228]  warn_alloc+0x214/0x310
[  196.454898][T14228]  ? stack_depot_save_flags+0x40/0x860
[  196.454909][T14228]  ? __pfx_warn_alloc+0x10/0x10
[  196.454919][T14228]  ? kasan_save_track+0x4f/0x80
[  196.454927][T14228]  ? xskq_create+0x56/0x170
[  196.454936][T14228]  ? xsk_init_queue+0xb0/0x110
[  196.454945][T14228]  ? xsk_setsockopt+0x4dc/0x8d0
[  196.454953][T14228]  ? do_sock_setsockopt+0x17c/0x1b0
[  196.454960][T14228]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  196.454966][T14228]  ? do_syscall_64+0xfa/0x3b0
[  196.454972][T14228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.454981][T14228]  __vmalloc_node_range_noprof+0x125/0x12f0
[  196.455003][T14228]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  196.455014][T14228]  ? __kasan_kmalloc+0x93/0xb0
[  196.455023][T14228]  vmalloc_user_noprof+0xad/0xf0
[  196.455032][T14228]  ? xskq_create+0xbf/0x170
[  196.455041][T14228]  xskq_create+0xbf/0x170
[  196.455052][T14228]  xsk_init_queue+0xb0/0x110
[  196.455061][T14228]  xsk_setsockopt+0x4dc/0x8d0
[  196.455071][T14228]  ? __pfx_xsk_setsockopt+0x10/0x10
[  196.455079][T14228]  ? __pfx_aa_sk_perm+0x10/0x10
[  196.455097][T14228]  ? aa_sock_opt_perm+0xff/0x1b0
[  196.455107][T14228]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  196.455114][T14228]  ? __pfx_xsk_setsockopt+0x10/0x10
[  196.455123][T14228]  do_sock_setsockopt+0x17c/0x1b0
[  196.455133][T14228]  __x64_sys_setsockopt+0x13f/0x1b0
[  196.455142][T14228]  do_syscall_64+0xfa/0x3b0
[  196.455149][T14228]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.455158][T14228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.455165][T14228]  ? exc_page_fault+0x9f/0xf0
[  196.455176][T14228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.455183][T14228] RIP: 0033:0x7f15a638eba9
[  196.455191][T14228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.455197][T14228] RSP: 002b:00007f15a719c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  196.455205][T14228] RAX: ffffffffffffffda RBX: 00007f15a65d5fa0 RCX: 00007f15a638eba9
[  196.455210][T14228] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  196.455214][T14228] RBP: 00007f15a6411e19 R08: 0000000000000004 R09: 0000000000000000
[  196.455217][T14228] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.455221][T14228] R13: 00007f15a65d6038 R14: 00007f15a65d5fa0 R15: 00007ffddeb3b528
[  196.455255][T14228]  </TASK>
[  196.455260][T14228] Mem-Info:
[  196.571818][T14228] active_anon:15684 inactive_anon:0 isolated_anon:0
[  196.571818][T14228]  active_file:1394 inactive_file:38294 isolated_file:0
[  196.571818][T14228]  unevictable:1768 dirty:258 writeback:0
[  196.571818][T14228]  slab_reclaimable:10371 slab_unreclaimable:77155
[  196.571818][T14228]  mapped:19181 shmem:6519 pagetables:1041
[  196.571818][T14228]  sec_pagetables:0 bounce:0
[  196.571818][T14228]  kernel_misc_reclaimable:0
[  196.571818][T14228]  free:260719 free_pcp:18810 free_cma:0
[  196.595099][T14228] Node 0 active_anon:34568kB inactive_anon:0kB active_file:3908kB inactive_file:144420kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22800kB dirty:744kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7984kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  196.610001][T14228] Node 1 active_anon:28108kB inactive_anon:0kB active_file:1668kB inactive_file:8756kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:53904kB dirty:288kB writeback:0kB shmem:21248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4580kB pagetables:1916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  196.623091][T14228] Node 0 DMA free:14980kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:0kB free_cma:0kB
[  196.658550][T14228] lowmem_reserve[]: 0 814 814 814 814
[  196.660809][T14228] Node 0 DMA32 free:158032kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34568kB inactive_anon:0kB active_file:3908kB inactive_file:144420kB unevictable:3536kB writepending:744kB present:1556484kB managed:833672kB mlocked:0kB bounce:0kB free_pcp:39976kB local_pcp:18768kB free_cma:0kB
[  196.671314][T14232] netlink: 'syz.2.3655': attribute type 1 has an invalid length.
[  196.674126][T14228] lowmem_reserve[]: 0 0 0 0 0
[  196.678917][T14228] Node 1 DMA32 free:458616kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  196.705472][T14228] lowmem_reserve[]: 0 0 854 854 854
[  196.707292][T14228] Node 1 Normal free:410180kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28176kB inactive_anon:0kB active_file:1668kB inactive_file:8756kB unevictable:3536kB writepending:288kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35956kB local_pcp:16876kB free_cma:0kB
[  196.726097][T14232] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3655'.
[  196.730604][T14228] lowmem_reserve[]: 0 0 0 0 0
[  196.735900][T14228] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (U) = 14980kB
[  196.749222][T14228] Node 0 DMA32: 586*4kB (ME) 101*8kB (UME) 34*16kB (UME) 42*32kB (ME) 275*64kB (UME) 180*128kB (UM) 61*256kB (UM) 25*512kB (UM) 21*1024kB (UM) 6*2048kB (UM) 11*4096kB (UM) = 152944kB
[  196.759192][T14228] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  196.769672][T14228] Node 1 Normal: 253*4kB (UME) 264*8kB (UME) 290*16kB (UM) 88*32kB (UM) 61*64kB (UME) 25*128kB (UME) 5*256kB (UME) 14*512kB (UME) 7*1024kB (UME) 4*2048kB (UM) 90*4096kB (UM) = 410132kB
[  196.776826][T14228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  196.780354][T14228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  196.784473][T14228] 46217 total pagecache pages
[  196.789551][T14228] 0 pages in swap cache
[  196.791302][T14228] Free swap  = 124996kB
[  196.793011][T14228] Total swap = 124996kB
[  196.794918][T14228] 786301 pages RAM
[  196.796777][T14228] 0 pages HighMem/MovableOnly
[  196.798527][T14228] 240651 pages reserved
[  196.800048][T14228] 0 pages cma reserved
[  196.951202][T14240] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.955773][T14240] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.009951][T14246] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3660'.
[  197.032372][T14242] vxcan1 speed is unknown, defaulting to 1000
[  197.205010][T14253] netlink: 'syz.0.3661': attribute type 1 has an invalid length.
[  197.208662][T14253] netlink: 'syz.0.3661': attribute type 1 has an invalid length.
[  197.293807][T14253] netlink: 'syz.0.3661': attribute type 1 has an invalid length.
[  197.299574][T14253] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  197.709472][T14268] syzkaller1: entered promiscuous mode
[  197.711844][T14268] syzkaller1: entered allmulticast mode
[  198.067873][T14299] netlink: 'syz.1.3679': attribute type 11 has an invalid length.
[  198.157422][T14305] macvlan2: entered promiscuous mode
[  198.159536][T14305] bond0: entered promiscuous mode
[  198.161678][T14305] gretap1: entered promiscuous mode
[  198.164894][T14305] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  198.433963][T14341] netlink: 'syz.1.3700': attribute type 5 has an invalid length.
[  198.748117][T14373] netlink: 'syz.1.3715': attribute type 29 has an invalid length.
[  198.757979][T14373] netlink: 'syz.1.3715': attribute type 29 has an invalid length.
[  198.765238][T14374] vxcan1 speed is unknown, defaulting to 1000
[  198.802452][T14375] raw_sendmsg: syz.2.3714 forgot to set AF_INET. Fix it!
[  199.197766][T14396] vxcan1 speed is unknown, defaulting to 1000
[  199.268936][T14402] atomic_op ffff888117bfd998 conn xmit_atomic 0000000000000000
[  199.291584][T14404] netlink: 'syz.1.3728': attribute type 1 has an invalid length.
[  199.294020][T14404] netlink: 'syz.1.3728': attribute type 2 has an invalid length.
[  199.298278][T14404] netlink: 'syz.1.3728': attribute type 1 has an invalid length.
[  199.301015][T14404] netlink: 'syz.1.3728': attribute type 2 has an invalid length.
[  199.443480][T14417] blkio.reset_stats is deprecated
[  200.303262][ T5876] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.306333][ T5876] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.310022][ T5876] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.314614][ T5876] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  200.787171][   T33] audit: type=1800 audit(1757623667.334:3): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3756" name="memory.events" dev="tmpfs" ino=5883 res=0 errno=0
[  200.910279][T14501] netlink: 'syz.0.3766': attribute type 7 has an invalid length.
[  201.177988][T14531] __nla_validate_parse: 7 callbacks suppressed
[  201.177997][T14531] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3779'.
[  201.253791][T14539] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  201.265967][T14539] bridge5: left promiscuous mode
[  201.268612][T14539] bridge5: left allmulticast mode
[  201.291706][T14539] gretap4: left promiscuous mode
[  201.295222][T14539] bond0: left promiscuous mode
[  201.297975][T14539] gretap1: left promiscuous mode
[  201.300479][T14539] macvlan2: left promiscuous mode
[  201.467491][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'.
[  201.708496][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'.
[  201.745916][T14592] netlink: 'syz.0.3809': attribute type 1 has an invalid length.
[  201.749227][T14592] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3809'.
[  201.774345][T14593] netlink: 'syz.1.3808': attribute type 13 has an invalid length.
[  201.799074][T14593] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.802285][T14593] 8021q: adding VLAN 0 to HW filter on device team0
[  201.810051][T14593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.852444][T14590] vxcan1 speed is unknown, defaulting to 1000
[  201.855684][T14601] tipc: Cannot configure node identity twice
[  201.900375][T14593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3808'.
[  201.909385][T14593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.970299][T14593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.330588][T14628] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3826'.
[  202.557243][T14640] tipc: Enabled bearer <udp:syz2>, priority 10
[  202.595299][T14593] syz.1.3808 (14593) used greatest stack depth: 19648 bytes left
[  202.665076][T14646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3834'.
[  202.669257][T14646] veth0_vlan: left promiscuous mode
[  202.677580][T14646] veth0_vlan: entered promiscuous mode
[  202.679451][T14646] veth0_vlan: entered allmulticast mode
[  202.683308][T14646] bridge0: port 1(veth0_vlan) entered blocking state
[  202.686818][T14646] bridge0: port 1(veth0_vlan) entered disabled state
[  202.687437][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3835'.
[  202.690286][T14646] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  202.745258][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'.
[  203.571847][T14694] syzkaller0: entered promiscuous mode
[  203.574416][T14694] syzkaller0: entered allmulticast mode
[  203.811582][T14696] vxcan1 speed is unknown, defaulting to 1000
[  203.847692][T14698] validate_nla: 2 callbacks suppressed
[  203.847705][T14698] netlink: 'syz.0.3858': attribute type 4 has an invalid length.
[  203.900851][T14699] netlink: 'syz.0.3858': attribute type 4 has an invalid length.
[  204.105540][T14701] vxcan1 speed is unknown, defaulting to 1000
[  205.134742][T14734] infiniband syz!: set down
[  205.143633][T14734] infiniband syz!: added team_slave_0
[  205.201255][T14734] RDS/IB: syz!: added
[  205.238457][T14748] syzkaller1: entered promiscuous mode
[  205.240952][T14748] syzkaller1: entered allmulticast mode
[  205.822615][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3890'.
[  205.861159][T14774] delete_channel: no stack
[  206.246626][T14757] delete_channel: no stack
[  206.314885][T14793] netlink: 'syz.0.3898': attribute type 1 has an invalid length.
[  206.324350][T14796] unsupported nla_type 52263
[  206.341432][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3898'.
[  206.504618][T14809] vxcan1 speed is unknown, defaulting to 1000
[  206.925208][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3909'.
[  206.973284][T14822] batadv0: entered promiscuous mode
[  206.974805][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3911'.
[  206.983808][T14822] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  206.988624][T14822] batadv0: left promiscuous mode
[  207.078363][T14830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3913'.
[  207.183743][T14834] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3915'.
[  207.271439][T14840] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3916'.
[  207.366427][T14846] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.3920'.
[  207.369967][T14846] netlink: get zone limit has 4 unknown bytes
[  207.464044][T14840] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  207.471213][T14840] bond0 (unregistering): Released all slaves
[  207.491930][T14849] vlan4: entered promiscuous mode
[  207.612732][T14854] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3924'.
[  207.617673][T14854] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3924'.
[  207.621840][T14854] netlink: 'syz.1.3924': attribute type 5 has an invalid length.
[  207.627951][T14854] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3924'.
[  207.631994][T14856] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  207.672503][T14856] netlink: get zone limit has 4 unknown bytes
[  207.827807][T14873] vxcan1 speed is unknown, defaulting to 1000
[  207.833629][T14875] netlink: 'syz.0.3934': attribute type 1 has an invalid length.
[  208.098135][T14880] vxcan1 speed is unknown, defaulting to 1000
[  208.200543][T14876] netlink: 'syz.1.3933': attribute type 13 has an invalid length.
[  208.211218][T14876] netlink: 'syz.1.3933': attribute type 17 has an invalid length.
[  208.281405][T14876] 8021q: adding VLAN 0 to HW filter on device team0
[  208.293627][T14876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.311866][T14890] netlink: 'syz.0.3939': attribute type 2 has an invalid length.
[  208.899683][T14916] netlink: 'syz.2.3951': attribute type 4 has an invalid length.
[  209.254443][T14951] vxcan1 speed is unknown, defaulting to 1000
[  209.392467][T14959] netlink: 'syz.2.3971': attribute type 8 has an invalid length.
[  209.706469][   T33] audit: type=1800 audit(1757623676.244:4): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3975" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6309 res=0 errno=0
[  209.725552][   T33] audit: type=1800 audit(1757623676.244:5): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3975" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6309 res=0 errno=0
[  209.873195][T14976] netlink: 'syz.0.3978': attribute type 1 has an invalid length.
[  209.984711][T14978] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  210.549987][T14992] batman_adv: batadv0: Adding interface: dummy0
[  210.559936][T14992] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.596647][T14992] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  210.651496][T14992] batman_adv: batadv0: Adding interface: ip6gretap4
[  210.667064][T14992] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.695834][T14992] batman_adv: batadv0: Interface activated: ip6gretap4
[  210.701804][ T5853] Bluetooth: hci2: link tx timeout
[  210.704810][ T5853] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.709918][ T5238] Bluetooth: hci2: link tx timeout
[  210.711730][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.714608][ T5238] Bluetooth: hci2: link tx timeout
[  210.716720][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.835873][T14995] vxcan1 speed is unknown, defaulting to 1000
[  211.095586][   T24] tipc: Node number set to 19796004
[  211.482714][T15029] __nla_validate_parse: 7 callbacks suppressed
[  211.482728][T15029] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4001'.
[  211.498308][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4001'.
[  211.504461][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4001'.
[  211.513269][T15029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4001'.
[  211.895158][T15054] netlink: 'syz.2.4013': attribute type 1 has an invalid length.
[  211.900975][T15054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4013'.
[  212.035026][T15066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4019'.
[  212.040548][T15066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4019'.
[  212.071906][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'.
[  212.078584][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'.
[  212.324612][T15098] vxcan1 speed is unknown, defaulting to 1000
[  212.560312][T15101] vxcan1 speed is unknown, defaulting to 1000
[  212.666633][T15111] ipvlan2: entered allmulticast mode
[  212.668908][T15111] dummy0: entered allmulticast mode
[  212.736003][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  212.943391][T15131] sctp: [Deprecated]: syz.1.4047 (pid 15131) Use of int in max_burst socket option deprecated.
[  212.943391][T15131] Use struct sctp_assoc_value instead
[  213.052692][T15135] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  213.142920][T15136] bond0: (slave gretap0): Opening slave failed
[  214.365999][T15173] batman_adv: batadv0: Adding interface: dummy0
[  214.368729][T15173] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.396329][T15173] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  214.720571][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4078'.
[  214.999651][T15214] netlink: zone id is out of range
[  215.001874][T15214] netlink: zone id is out of range
[  215.709034][T15257] netlink: 'syz.2.4104': attribute type 15 has an invalid length.
[  215.911654][T15273] netlink: 'syz.1.4112': attribute type 2 has an invalid length.
[  215.978853][T15279] vxcan1 speed is unknown, defaulting to 1000
[  216.163213][T15285] vxcan1 speed is unknown, defaulting to 1000
[  216.237579][T15293] batadv_slave_1: entered promiscuous mode
[  216.251840][T15292] batadv_slave_1: left promiscuous mode
[  217.463280][T15349] __nla_validate_parse: 5 callbacks suppressed
[  217.463290][T15349] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4136'.
[  217.470413][T15349] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4136'.
[  217.473982][T15349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4136'.
[  217.534539][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4141'.
[  217.807907][T15377] netlink: 'syz.1.4148': attribute type 1 has an invalid length.
[  217.990116][   T33] audit: type=1107 audit(1757623684.534:6): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  218.684927][T15433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4172'.
[  218.869879][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  219.049745][T15444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4174'.
[  219.072317][T15444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4174'.
[  219.762770][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  219.821662][T15472] netlink: 'syz.2.4185': attribute type 1 has an invalid length.
[  219.824973][T15472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4185'.
[  219.837001][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4185'.
[  219.909013][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4185'.
[  220.629925][T15490] netlink: 'syz.0.4193': attribute type 29 has an invalid length.
[  220.650038][T15490] netlink: 'syz.0.4193': attribute type 29 has an invalid length.
[  220.846531][T15513] netlink: 'syz.1.4205': attribute type 29 has an invalid length.
[  220.854720][T15513] netlink: 'syz.1.4205': attribute type 29 has an invalid length.
[  221.507425][T15558] netlink: 'syz.0.4223': attribute type 6 has an invalid length.
[  221.518786][T15558] netlink: 'syz.0.4223': attribute type 6 has an invalid length.
[  222.029333][T15601] tipc: New replicast peer: 0.0.0.0
[  222.032450][T15601] tipc: Enabled bearer <udp:syz2>, priority 10
[  222.036629][T15601] tipc: New replicast peer: 255.255.255.255
[  222.083159][T15605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.091114][T15605] syzkaller0: entered promiscuous mode
[  222.093985][T15605] syzkaller0: entered allmulticast mode
[  222.117653][T15605] tipc: Resetting bearer <eth:syzkaller0>
[  222.122715][T15603] tipc: Resetting bearer <eth:syzkaller0>
[  222.136397][T15603] tipc: Disabling bearer <eth:syzkaller0>
[  222.467210][T15637] __nla_validate_parse: 7 callbacks suppressed
[  222.467226][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'.
[  222.473825][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4260'.
[  222.569962][T15648] netlink: 'syz.1.4266': attribute type 1 has an invalid length.
[  222.573294][T15648] netlink: 'syz.1.4266': attribute type 1 has an invalid length.
[  222.711407][T15664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4272'.
[  222.811453][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4276'.
[  224.649442][T15719] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4298'.
[  224.953562][T15749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4312'.
[  224.957330][T15749] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4312'.
[  225.583165][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4323'.
[  225.591085][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4323'.
[  225.791690][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'.
[  225.889707][T15784] team0 (unregistering): Port device bridge5 removed
[  226.606973][T15845] netlink: 'syz.2.4352': attribute type 1 has an invalid length.
[  226.709195][T15851] delete_channel: no stack
[  227.477342][T15849] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  227.717340][T15896] __nla_validate_parse: 4 callbacks suppressed
[  227.717350][T15896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4372'.
[  227.734303][T15896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4372'.
[  227.849699][T15905] netem: change failed
[  228.071247][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4384'.
[  228.075097][T15921] netlink: 'syz.2.4384': attribute type 14 has an invalid length.
[  228.096072][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4384'.
[  228.105658][T15921] netlink: 'syz.2.4384': attribute type 14 has an invalid length.
[  228.333348][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4392'.
[  228.379864][T15939] netlink: 'syz.0.4393': attribute type 1 has an invalid length.
[  228.626577][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'.
[  228.635563][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4399'.
[  228.650347][T15952] netlink: 'syz.1.4399': attribute type 11 has an invalid length.
[  228.973989][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4411'.
[  229.269402][T15993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4417'.
[  229.313932][T16000] netlink: 'syz.1.4420': attribute type 1 has an invalid length.
[  229.347130][T16000] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.358910][T16000] vlan2: entered promiscuous mode
[  229.361308][T16000] bond0: entered promiscuous mode
[  229.365253][T16000] vlan2: entered allmulticast mode
[  229.367898][T16000] bond0: entered allmulticast mode
[  229.381368][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'.
[  229.383423][T16000] bond0: (slave gretap1): making interface the new active one
[  229.388025][T16000] gretap1: entered promiscuous mode
[  229.390287][T16000] gretap1: entered allmulticast mode
[  229.394276][T16000] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  229.416265][T16000] syz.1.4420 (16000) used greatest stack depth: 19400 bytes left
[  229.667548][T16027] ipvlan2: entered promiscuous mode
[  229.671134][T16027] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  230.139025][T16050] bond0 (unregistering): (slave gretap1): Releasing active interface
[  230.142541][T16050] gretap1: left promiscuous mode
[  230.144898][T16050] gretap1: left allmulticast mode
[  230.150522][T16050] bond0 (unregistering): Released all slaves
[  230.375562][T16077] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  230.423259][T16083] netlink: 'syz.2.4458': attribute type 1 has an invalid length.
[  230.425840][T16083] netlink: 'syz.2.4458': attribute type 2 has an invalid length.
[  230.917883][T16145] batadv1: entered promiscuous mode
[  230.919924][T16145] batadv1: entered allmulticast mode
[  230.949275][T16149] netlink: 'syz.1.4491': attribute type 1 has an invalid length.
[  231.749062][T16209] siw: device registration error -23
[  231.817883][T16212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.833526][T16212] veth0_to_bridge: entered promiscuous mode
[  231.840530][T16212] veth0_to_bridge: entered allmulticast mode
[  232.220610][T16233] batman_adv: batadv0: Adding interface: ip6gretap5
[  232.223420][T16233] batman_adv: batadv0: The MTU of interface ip6gretap5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.282229][T16233] batman_adv: batadv0: Not using interface ip6gretap5 (retrying later): interface not active
[  232.483653][T16208] tipc: Disabling bearer <eth:syzkaller0>
[  233.127737][T16289] __nla_validate_parse: 7 callbacks suppressed
[  233.127750][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4555'.
[  233.508189][T16300] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4559'.
[  233.741318][T16310] netlink: 'syz.2.4564': attribute type 21 has an invalid length.
[  233.886460][ T5896] IPVS: starting estimator thread 0...
[  233.987628][T16319] IPVS: using max 47 ests per chain, 112800 per kthread
[  234.111548][T16330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.115197][T16330] syzkaller0: entered promiscuous mode
[  234.117937][T16330] syzkaller0: entered allmulticast mode
[  234.123210][T16330] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  234.141125][T16330] tipc: Resetting bearer <eth:syzkaller0>
[  234.149945][T16329] tipc: Resetting bearer <eth:syzkaller0>
[  234.169921][T16329] tipc: Disabling bearer <eth:syzkaller0>
[  234.440609][T16348] syzkaller1: entered promiscuous mode
[  234.442925][T16348] syzkaller1: entered allmulticast mode
[  234.627418][T16356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4585'.
[  234.973520][T16385] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  235.132355][T16400] sctp: [Deprecated]: syz.0.4603 (pid 16400) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.132355][T16400] Use struct sctp_sack_info instead
[  235.211917][T16406] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  235.357329][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4612'.
[  235.395909][T16418] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4612'.
[  236.545877][T16430] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4616'.
[  236.614778][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'.
[  236.625248][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4619'.
[  236.641044][T16434] netlink: 'syz.0.4618': attribute type 1 has an invalid length.
[  236.682186][T16436] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4619'.
[  237.313552][ T5852] IPVS: starting estimator thread 0...
[  237.415087][T16478] IPVS: using max 80 ests per chain, 192000 per kthread
[  237.819407][T16497] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4640'.
[  237.851493][ T5877] IPVS: stop unused estimator thread 0...
[  238.019637][T16507] dvmrp8: entered allmulticast mode
[  238.025303][T16507] dvmrp8: left allmulticast mode
[  238.108472][T16507] netlink: 'syz.0.4646': attribute type 23 has an invalid length.
[  238.199573][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4652'.
[  238.268155][T16527] netlink: 'syz.1.4654': attribute type 1 has an invalid length.
[  238.270565][T16527] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4654'.
[  238.319201][T16538] netlink: 'syz.0.4659': attribute type 1 has an invalid length.
[  238.322237][T16538] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4659'.
[  238.418875][T16543] netlink: 'syz.1.4661': attribute type 11 has an invalid length.
[  238.426554][T16544] netlink: 'syz.2.4657': attribute type 6 has an invalid length.
[  238.487381][T16546] pim6reg: entered allmulticast mode
[  238.632235][T16560] netlink: 'syz.1.4667': attribute type 9 has an invalid length.
[  238.670314][T16559] syzkaller0: entered promiscuous mode
[  238.672759][T16559] syzkaller0: entered allmulticast mode
[  239.980248][T16573] tc_dump_action: action bad kind
[  240.066763][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4676'.
[  240.228251][T16592] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  240.398907][T16610] syzkaller1: entered promiscuous mode
[  240.401687][T16610] syzkaller1: entered allmulticast mode
[  241.804478][T16717] netlink: 'syz.0.4739': attribute type 8 has an invalid length.
[  241.894370][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4741'.
[  242.510772][T16759] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4761'.
[  242.514111][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4761'.
[  242.520067][T16759] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4761'.
[  242.523102][T16759] netlink: 'syz.0.4761': attribute type 3 has an invalid length.
[  242.526980][T16759] netlink: 'syz.0.4761': attribute type 2 has an invalid length.
[  242.529894][T16759] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4761'.
[  242.558164][T16764] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4763'.
[  243.023826][T16811] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  243.224356][T16826] pim6reg1: entered promiscuous mode
[  243.230279][T16826] pim6reg1: entered allmulticast mode
[  243.349403][T16840] __nla_validate_parse: 1 callbacks suppressed
[  243.349413][T16840] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.4799'.
[  243.355631][T16840] netlink: zone id is out of range
[  243.357772][T16840] netlink: zone id is out of range
[  243.359856][T16840] netlink: zone id is out of range
[  243.361961][T16840] netlink: get zone limit has 8 unknown bytes
[  243.521962][T16862] Unsupported ieee802154 address type: 0
[  243.738631][T16876] veth2: entered allmulticast mode
[  244.137621][T16908] ieee802154 phy0 wpan0: encryption failed: -22
[  244.254496][T16919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4833'.
[  245.473484][T16959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4851'.
[  245.674582][T16987] tipc: Failed to remove unknown binding: 66,1,1/2628960911:1107171892/1107171894
[  245.897293][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4876'.
[  246.216722][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4885'.
[  246.293185][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4888'.
[  246.570515][T17063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4898'.
[  246.642877][T17067] nbd: must specify a device to reconfigure
[  246.844456][T17081] netlink: 'syz.0.4905': attribute type 32 has an invalid length.
[  246.867907][T17083] nft_compat: unsupported protocol 0
[  246.883419][T17085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4907'.
[  247.084318][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4915'.
[  247.093756][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4915'.
[  247.251439][T17112] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  248.230325][T17169] delete_channel: no stack
[  248.253526][T17173] netlink: 'syz.0.4946': attribute type 1 has an invalid length.
[  248.346812][T17178] nbd2: detected capacity change from 0 to 549764202496
[  248.356638][   T56] block nbd2: Receive control failed (result -32)
[  248.358006][T16883] block nbd2: Send control failed (result -32)
[  248.362143][T16883] block nbd2: Request send failed, requeueing
[  248.379999][ T1117] block nbd2: Dead connection, failed to find a fallback
[  248.383082][ T1117] block nbd2: shutting down sockets
[  248.385277][ T1117] blk_print_req_error: 138 callbacks suppressed
[  248.385287][ T1117] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.392405][ T1117] buffer_io_error: 138 callbacks suppressed
[  248.392415][ T1117] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.404181][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.428159][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.431785][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.434673][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.437648][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.440838][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.443830][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.448030][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.455632][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.459381][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.462694][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.480490][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.483280][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.489726][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.492965][T16883] ldm_validate_partition_table(): Disk read failed.
[  248.495241][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.499750][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.502346][T16883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.506304][T16883] Buffer I/O error on dev nbd2, logical block 0, async page read
[  248.509720][T16883] Dev nbd2: unable to read RDB block 0
[  248.512605][T16883]  nbd2: unable to read partition table
[  248.522352][T17193] __nla_validate_parse: 4 callbacks suppressed
[  248.522361][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'.
[  248.530025][T16883] ldm_validate_partition_table(): Disk read failed.
[  248.543196][T16883] Dev nbd2: unable to read RDB block 0
[  248.545291][T16883]  nbd2: unable to read partition table
[  248.592779][T17199] netlink: 'syz.0.4959': attribute type 4 has an invalid length.
[  248.610030][T17199] netlink: 'syz.0.4959': attribute type 4 has an invalid length.
[  248.665226][T17200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.698545][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'.
[  249.819369][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4991'.
[  250.041817][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4997'.
[  250.301655][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5010'.
[  250.428474][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5011'.
[  251.149305][T17362] netlink: 'syz.2.5025': attribute type 1 has an invalid length.
[  251.223812][T17370] netlink: 'syz.1.5029': attribute type 83 has an invalid length.
[  251.261262][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5031'.
[  251.265529][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5031'.
[  251.275790][T17375] netlink: 'syz.1.5031': attribute type 18 has an invalid length.
[  251.316170][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5034'.
[  251.320086][T17384] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5036'.
[  252.552902][T17439] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  252.938956][T17474] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  252.950531][T17474] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  253.410017][T17501] lo: entered allmulticast mode
[  253.426069][T17501] tunl0: entered allmulticast mode
[  253.429947][T17501] gre0: entered allmulticast mode
[  253.432304][T17501] gretap0: entered allmulticast mode
[  253.434861][T17501] erspan0: entered allmulticast mode
[  253.438754][T17501] ip_vti0: entered allmulticast mode
[  253.441831][T17501] ip6_vti0: entered allmulticast mode
[  253.450109][T17501] sit0: entered allmulticast mode
[  253.453553][T17501] ip6tnl0: entered allmulticast mode
[  253.461239][T17501] ip6gre0: entered allmulticast mode
[  253.468233][T17501] syz_tun: entered allmulticast mode
[  253.474261][T17501] ip6gretap0: entered allmulticast mode
[  253.479441][T17501] vcan0: entered allmulticast mode
[  253.484429][T17501] team0: entered allmulticast mode
[  253.492039][T17501] team_slave_0: entered allmulticast mode
[  253.498146][T17501] : entered allmulticast mode
[  253.500542][T17501] dummy0: entered allmulticast mode
[  253.503348][T17501] nlmon0: entered allmulticast mode
[  253.506062][T17501] caif0: entered allmulticast mode
[  253.508545][T17501] vxcan0: entered allmulticast mode
[  253.510734][T17501] vxcan1: entered allmulticast mode
[  253.513088][T17501] veth0: entered allmulticast mode
[  253.515627][T17501] wg0: entered allmulticast mode
[  253.518173][T17501] wg1: entered allmulticast mode
[  253.520539][T17501] wg2: entered allmulticast mode
[  253.522741][T17501] veth0_to_bridge: entered allmulticast mode
[  253.525527][T17501] bridge_slave_0: entered allmulticast mode
[  253.528381][T17501] veth1_to_bridge: entered allmulticast mode
[  253.531084][T17501] bridge_slave_1: entered allmulticast mode
[  253.533732][T17501] veth0_to_bond: entered allmulticast mode
[  253.537018][T17501] veth1_to_bond: entered allmulticast mode
[  253.540331][T17501] veth0_to_team: entered allmulticast mode
[  253.543175][T17501] veth1_to_team: entered allmulticast mode
[  253.546181][T17501] veth0_to_batadv: entered allmulticast mode
[  253.548954][T17501] batadv_slave_0: entered allmulticast mode
[  253.551571][T17501] veth1_to_batadv: entered allmulticast mode
[  253.554338][T17501] batadv_slave_1: entered allmulticast mode
[  253.557389][T17501] xfrm0: entered allmulticast mode
[  253.559743][T17501] veth0_to_hsr: entered allmulticast mode
[  253.562337][T17501] hsr_slave_0: entered allmulticast mode
[  253.564992][T17501] veth1_to_hsr: entered allmulticast mode
[  253.567666][T17501] hsr_slave_1: entered allmulticast mode
[  253.570432][T17501] veth1_virt_wifi: entered allmulticast mode
[  253.573174][T17501] veth0_virt_wifi: entered allmulticast mode
[  253.576166][T17501] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  253.579454][T17501] veth1_vlan: entered allmulticast mode
[  253.582239][T17501] veth0_vlan: entered allmulticast mode
[  253.584732][T17501] vlan0: left promiscuous mode
[  253.587286][T17501] vlan0: entered allmulticast mode
[  253.589564][T17501] vlan1: entered allmulticast mode
[  253.591858][T17501] macvlan0: entered allmulticast mode
[  253.594299][T17501] macvlan1: entered allmulticast mode
[  253.597263][T17501] ipvlan0: entered allmulticast mode
[  253.599713][T17501] ipvlan1: entered allmulticast mode
[  253.602105][T17501] veth1_macvtap: entered allmulticast mode
[  253.604654][T17501] veth0_macvtap: entered allmulticast mode
[  253.607573][T17501] macvtap0: entered allmulticast mode
[  253.609954][T17501] macsec0: entered allmulticast mode
[  253.612658][T17501] geneve0: entered allmulticast mode
[  253.615128][T17501] geneve1: entered allmulticast mode
[  253.619937][T17501] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  253.623006][T17501] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  253.626380][T17501] gre1: entered allmulticast mode
[  253.628864][T17501] bridge1: entered allmulticast mode
[  253.631465][T17501] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode
[  253.634613][T17501] ip6erspan0: entered allmulticast mode
[  253.637263][T17501] sit1: entered allmulticast mode
[  253.639700][T17501] bridge2: entered allmulticast mode
[  253.642201][T17501] gre3: entered allmulticast mode
[  253.644589][T17501] bridge3: entered allmulticast mode
[  253.653751][T17501] ip6tnl1: entered allmulticast mode
[  253.656326][T17501] sit2: entered allmulticast mode
[  253.658739][T17501] gre4: entered allmulticast mode
[  253.661090][T17501] ip6gretap1: entered allmulticast mode
[  253.663575][T17501] bond1: entered allmulticast mode
[  253.666028][T17501] gtp0: left promiscuous mode
[  253.668313][T17501] netdevsim netdevsim0 eth0: entered allmulticast mode
[  253.671511][T17501] netdevsim netdevsim0 eth1: entered allmulticast mode
[  253.674597][T17501] netdevsim netdevsim0 eth2: entered allmulticast mode
[  253.677645][T17501] netdevsim netdevsim0 eth3: entered allmulticast mode
[  253.680715][T17501] syztnl2: entered allmulticast mode
[  253.683179][T17501] @: entered allmulticast mode
[  253.685325][T17501] bond2: entered allmulticast mode
[  253.687898][T17501] vxlan0: entered allmulticast mode
[  253.690371][T17501] ip6gretap2: entered allmulticast mode
[  253.692931][T17501] bridge0: entered allmulticast mode
[  253.695355][T17501] ip6gretap3: entered allmulticast mode
[  253.697982][T17501] gre5: entered allmulticast mode
[  253.700212][T17501] syztnl0: entered allmulticast mode
[  253.702535][T17501] ip6tnl2: entered allmulticast mode
[  253.705017][T17501] syztnl1: entered allmulticast mode
[  253.707637][T17501] gre6: entered allmulticast mode
[  253.714926][T17501] bridge4: entered allmulticast mode
[  253.721437][T17501] vlan2: entered allmulticast mode
[  253.723774][T17501] batadv0.5: entered allmulticast mode
[  253.726435][T17501] batman_adv: batadv0: Interface deactivated: ip6gretap4
[  253.729632][T17501] ip6gretap4: entered allmulticast mode
[  253.735707][T17501] gre7: entered allmulticast mode
[  253.741935][T17501] bridge5: entered allmulticast mode
[  253.748187][T17501] vlan3: entered allmulticast mode
[  253.750380][T17501] ip6gretap5: entered allmulticast mode
[  253.752787][T17501] batadv1: entered allmulticast mode
[  253.755144][T17501] vti60: entered allmulticast mode
[  253.760743][T17501] bridge6: entered allmulticast mode
[  253.763124][T17501] vti0: entered allmulticast mode
[  253.765611][T17501] gtp1: entered allmulticast mode
[  253.768312][T17501] gre8: entered allmulticast mode
[  254.172974][T17539] netlink: 'syz.1.5102': attribute type 4 has an invalid length.
[  254.176420][ T5852] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec
[  254.292006][T17546] IPVS: lc: FWM 3 0x00000003 - no destination available
[  254.421203][T17551] __nla_validate_parse: 2 callbacks suppressed
[  254.421213][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5107'.
[  254.559188][T17560] netlink: 'syz.2.5111': attribute type 1 has an invalid length.
[  254.602967][T17564] IPVS: lc: FWM 3 0x00000003 - no destination available
[  254.653974][T17566] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5114'.
[  254.668704][T17566] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5114'.
[  254.673242][T17566] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5114'.
[  254.829396][T17580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  254.951657][T17592] netlink: 'syz.0.5127': attribute type 3 has an invalid length.
[  255.380183][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.545947][T17644] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  255.823686][T17673] !: renamed from dummy0
[  256.210191][T17697] netlink: 'syz.1.5172': attribute type 4 has an invalid length.
[  256.502934][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5184'.
[  257.312008][T17791] netlink: 'syz.0.5216': attribute type 3 has an invalid length.
[  257.350213][T17793] netlink: 'syz.2.5218': attribute type 3 has an invalid length.
[  257.353267][T17793] netlink: 'syz.2.5218': attribute type 1 has an invalid length.
[  257.358548][T17793] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5218'.
[  257.543586][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5226'.
[  257.828773][T17830] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  258.035320][T17853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5247'.
[  258.601390][T17886] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  258.981617][T17909] delete_channel: no stack
[  259.122214][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5276'.
[  259.162830][T17921] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  259.209025][T17927] netlink: 'syz.2.5281': attribute type 1 has an invalid length.
[  259.224411][T17927] 8021q: adding VLAN 0 to HW filter on device bond6
[  259.244855][T17930] netlink: 'syz.0.5282': attribute type 1 has an invalid length.
[  259.480775][T17954] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.5293'.
[  259.484146][T17954] netlink: zone id is out of range
[  259.487577][T17954] netlink: zone id is out of range
[  259.495729][T17954] netlink: zone id is out of range
[  259.497933][T17954] netlink: zone id is out of range
[  259.499717][T17954] netlink: get zone limit has 8 unknown bytes
[  259.567431][T17955] wg1 speed is unknown, defaulting to 1000
[  259.569926][T17955] wg1 speed is unknown, defaulting to 1000
[  259.584331][T17955] wg1 speed is unknown, defaulting to 1000
[  259.591511][T17955] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  259.620962][T17955] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  259.643284][T17955] wg1 speed is unknown, defaulting to 1000
[  259.646508][T17955] wg1 speed is unknown, defaulting to 1000
[  259.650955][T17955] wg1 speed is unknown, defaulting to 1000
[  259.654102][T17955] wg1 speed is unknown, defaulting to 1000
[  259.964987][T17985] netlink: 'syz.0.5307': attribute type 12 has an invalid length.
[  260.229653][T18007] netlink: 'syz.1.5319': attribute type 1 has an invalid length.
[  260.317174][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5322'.
[  260.371857][T18019] netlink: 'syz.2.5325': attribute type 1 has an invalid length.
[  260.375032][T18019] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5325'.
[  260.719022][T18041] wg1 speed is unknown, defaulting to 1000
[  261.178730][T18071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5342'.
[  262.300881][T18092] netlink: 'syz.0.5357': attribute type 1 has an invalid length.
[  262.303587][T18092] netlink: 'syz.0.5357': attribute type 4 has an invalid length.
[  262.309209][T18092] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5357'.
[  262.423626][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5365'.
[  262.444037][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5363'.
[  262.544449][T18103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.558010][T18110] syzkaller0: entered promiscuous mode
[  262.559998][T18110] syzkaller0: entered allmulticast mode
[  262.593313][T18103] tipc: Resetting bearer <eth:syzkaller0>
[  262.600808][T18102] tipc: Resetting bearer <eth:syzkaller0>
[  262.623381][T18102] tipc: Disabling bearer <eth:syzkaller0>
[  262.642689][T18115] netlink: 'syz.0.5367': attribute type 4 has an invalid length.
[  262.947746][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5384'.
[  262.960352][T13994] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  262.963945][T13994] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.975764][T13994] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.979070][T13994] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.232171][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5396'.
[  263.236936][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5396'.
[  263.387400][T18190] GUP no longer grows the stack in syz.2.5403 (18190): 200000003000-20000000a000 (200000001000)
[  263.399252][T18190] CPU: 1 UID: 0 PID: 18190 Comm: syz.2.5403 Not tainted syzkaller #0 PREEMPT(full) 
[  263.399272][T18190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.399280][T18190] Call Trace:
[  263.399285][T18190]  <TASK>
[  263.399291][T18190]  dump_stack_lvl+0x189/0x250
[  263.399314][T18190]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.399328][T18190]  ? __pfx__printk+0x10/0x10
[  263.399343][T18190]  ? find_vma+0xe7/0x160
[  263.399359][T18190]  ? __lock_acquire+0xab9/0xd20
[  263.399385][T18190]  __get_user_pages+0x24d0/0x2ce0
[  263.399400][T18190]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  263.399433][T18190]  ? rcu_is_watching+0x15/0xb0
[  263.399448][T18190]  __gup_longterm_locked+0xde9/0x1660
[  263.399471][T18190]  ? sanity_check_pinned_pages+0x123a/0x1300
[  263.399511][T18190]  gup_fast_fallback+0x1e6a/0x2010
[  263.399553][T18190]  ? __pfx_gup_fast_fallback+0x10/0x10
[  263.399566][T18190]  ? stack_trace_save+0x9c/0xe0
[  263.399580][T18190]  ? __pfx_stack_trace_save+0x10/0x10
[  263.399600][T18190]  ? pin_user_pages_fast+0x4d/0xb0
[  263.399616][T18190]  iov_iter_extract_pages+0x35a/0x5e0
[  263.399634][T18190]  extract_iter_to_sg+0xe46/0x24e0
[  263.399662][T18190]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  263.399701][T18190]  ? __asan_memset+0x22/0x50
[  263.399718][T18190]  af_alg_get_rsgl+0x436/0x810
[  263.399747][T18190]  aead_recvmsg+0x4cc/0x13f0
[  263.399810][T18190]  ? rcu_is_watching+0x15/0xb0
[  263.399830][T18190]  ? __pfx_aead_recvmsg+0x10/0x10
[  263.399849][T18190]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  263.399863][T18190]  ? __pfx_aead_recvmsg+0x10/0x10
[  263.399880][T18190]  sock_recvmsg_nosec+0x186/0x1c0
[  263.399901][T18190]  ____sys_recvmsg+0x3aa/0x460
[  263.399923][T18190]  ? __pfx_____sys_recvmsg+0x10/0x10
[  263.399948][T18190]  ? import_iovec+0x74/0xa0
[  263.399964][T18190]  ___sys_recvmsg+0x1b5/0x510
[  263.399982][T18190]  ? __pfx____sys_recvmsg+0x10/0x10
[  263.400019][T18190]  ? __might_fault+0xb0/0x130
[  263.400037][T18190]  do_recvmmsg+0x307/0x770
[  263.400059][T18190]  ? __pfx_do_recvmmsg+0x10/0x10
[  263.400071][T18190]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  263.400098][T18190]  ? __pfx_do_futex+0x10/0x10
[  263.400125][T18190]  __x64_sys_recvmmsg+0x190/0x240
[  263.400142][T18190]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  263.400155][T18190]  ? rcu_is_watching+0x15/0xb0
[  263.400170][T18190]  ? do_syscall_64+0xbe/0x3b0
[  263.400186][T18190]  do_syscall_64+0xfa/0x3b0
[  263.400196][T18190]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.400213][T18190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.400225][T18190]  ? exc_page_fault+0x9f/0xf0
[  263.400244][T18190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.400255][T18190] RIP: 0033:0x7f396918eba9
[  263.400268][T18190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.400278][T18190] RSP: 002b:00007f396a01a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  263.400292][T18190] RAX: ffffffffffffffda RBX: 00007f39693d5fa0 RCX: 00007f396918eba9
[  263.400300][T18190] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  263.400308][T18190] RBP: 00007f3969211e19 R08: 0000000000000000 R09: 0000000000000000
[  263.400315][T18190] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  263.400322][T18190] R13: 00007f39693d6038 R14: 00007f39693d5fa0 R15: 00007ffeaed76d98
[  263.400344][T18190]  </TASK>
[  263.786626][T18213] netlink: 'syz.0.5413': attribute type 1 has an invalid length.
[  263.967178][T18233] netlink: 'syz.2.5424': attribute type 10 has an invalid length.
[  264.221726][T18256] validate_nla: 1 callbacks suppressed
[  264.221741][T18256] netlink: 'syz.2.5435': attribute type 12 has an invalid length.
[  264.473265][T18262] wg1 speed is unknown, defaulting to 1000
[  264.608284][T18267] syzkaller1: entered promiscuous mode
[  264.610657][T18267] syzkaller1: entered allmulticast mode
[  264.728448][T18269] netlink: 'syz.0.5440': attribute type 4 has an invalid length.
[  265.024887][T18283] __nla_validate_parse: 7 callbacks suppressed
[  265.024901][T18283] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5447'.
[  265.173733][T18297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5454'.
[  265.196006][T18297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5454'.
[  265.974610][T18301] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5456'.
[  265.980779][T18302] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5454'.
[  266.167429][T18316] netlink: 'syz.2.5464': attribute type 1 has an invalid length.
[  266.220461][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'.
[  266.312777][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5471'.
[  266.319955][T18330] netlink: 'syz.2.5471': attribute type 30 has an invalid length.
[  266.324243][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5471'.
[  266.333117][T18330] netlink: 'syz.2.5471': attribute type 30 has an invalid length.
[  266.373105][T18335] ==================================================================
[  266.376584][T18335] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  266.380020][T18335] Read of size 2 at addr ffff8881179b6e42 by task syz.1.5472/18335
[  266.385996][T18335] 
[  266.387097][T18335] CPU: 1 UID: 0 PID: 18335 Comm: syz.1.5472 Not tainted syzkaller #0 PREEMPT(full) 
[  266.387113][T18335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.387121][T18335] Call Trace:
[  266.387127][T18335]  <TASK>
[  266.387133][T18335]  dump_stack_lvl+0x189/0x250
[  266.387150][T18335]  ? __kasan_check_byte+0x12/0x40
[  266.387168][T18335]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.387182][T18335]  ? lock_release+0x4b/0x3e0
[  266.387201][T18335]  ? __virt_addr_valid+0x4a5/0x5c0
[  266.387217][T18335]  print_report+0xca/0x240
[  266.387234][T18335]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.387247][T18335]  kasan_report+0x118/0x150
[  266.387261][T18335]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.387277][T18335]  __xfrm_state_lookup+0x6ad/0x8d0
[  266.387293][T18335]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  266.387309][T18335]  ? xfrm_state_lookup+0x45/0x1e0
[  266.387323][T18335]  xfrm_state_lookup+0x11e/0x1e0
[  266.387340][T18335]  xfrm_user_state_lookup+0x231/0x370
[  266.387358][T18335]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  266.387377][T18335]  xfrm_del_sa+0xf1/0x3e0
[  266.387392][T18335]  ? __pfx_xfrm_del_sa+0x10/0x10
[  266.387406][T18335]  ? apparmor_capable+0x137/0x1b0
[  266.387420][T18335]  ? __nla_parse+0x40/0x60
[  266.387437][T18335]  xfrm_user_rcv_msg+0x7a3/0xab0
[  266.387454][T18335]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  266.387478][T18335]  ? __pfx___mutex_trylock_common+0x10/0x10
[  266.387490][T18335]  ? rcu_is_watching+0x15/0xb0
[  266.387502][T18335]  ? trace_contention_end+0x39/0x120
[  266.387513][T18335]  ? __mutex_lock+0x335/0x1350
[  266.387527][T18335]  netlink_rcv_skb+0x208/0x470
[  266.387539][T18335]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  266.387553][T18335]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  266.387578][T18335]  ? netlink_deliver_tap+0x2e/0x1b0
[  266.387589][T18335]  ? netlink_deliver_tap+0x2e/0x1b0
[  266.387601][T18335]  xfrm_netlink_rcv+0x79/0x90
[  266.387616][T18335]  netlink_unicast+0x82f/0x9e0
[  266.387635][T18335]  ? __pfx_netlink_unicast+0x10/0x10
[  266.387652][T18335]  ? netlink_sendmsg+0x642/0xb30
[  266.387662][T18335]  ? skb_put+0x11b/0x210
[  266.387677][T18335]  netlink_sendmsg+0x805/0xb30
[  266.387691][T18335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.387704][T18335]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.387721][T18335]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.387733][T18335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.387744][T18335]  __sock_sendmsg+0x21c/0x270
[  266.387789][T18335]  ____sys_sendmsg+0x505/0x830
[  266.387805][T18335]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.387820][T18335]  ? import_iovec+0x74/0xa0
[  266.387833][T18335]  ___sys_sendmsg+0x21f/0x2a0
[  266.387846][T18335]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.387869][T18335]  ? __fget_files+0x2a/0x420
[  266.387883][T18335]  ? __fget_files+0x3a0/0x420
[  266.387900][T18335]  __x64_sys_sendmsg+0x19b/0x260
[  266.387914][T18335]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.387929][T18335]  ? rcu_is_watching+0x15/0xb0
[  266.387941][T18335]  ? do_syscall_64+0xbe/0x3b0
[  266.387953][T18335]  do_syscall_64+0xfa/0x3b0
[  266.387964][T18335]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.387980][T18335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.387992][T18335]  ? exc_page_fault+0x9f/0xf0
[  266.388007][T18335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.388019][T18335] RIP: 0033:0x7f15a638eba9
[  266.388031][T18335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.388040][T18335] RSP: 002b:00007f15a719c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.388053][T18335] RAX: ffffffffffffffda RBX: 00007f15a65d5fa0 RCX: 00007f15a638eba9
[  266.388063][T18335] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  266.388070][T18335] RBP: 00007f15a6411e19 R08: 0000000000000000 R09: 0000000000000000
[  266.388077][T18335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.388084][T18335] R13: 00007f15a65d6038 R14: 00007f15a65d5fa0 R15: 00007ffddeb3b528
[  266.388099][T18335]  </TASK>
[  266.388104][T18335] 
[  266.552811][T18335] Allocated by task 15735:
[  266.554622][T18335]  kasan_save_track+0x3e/0x80
[  266.556632][T18335]  __kasan_slab_alloc+0x6c/0x80
[  266.558777][T18335]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  266.561159][T18335]  xfrm_state_alloc+0x24/0x2f0
[  266.563246][T18335]  __find_acq_core+0x8a7/0x1c00
[  266.565315][T18335]  xfrm_find_acq+0x78/0xa0
[  266.567157][T18335]  xfrm_alloc_userspi+0x6b3/0xc90
[  266.569235][T18335]  xfrm_user_rcv_msg+0x7a3/0xab0
[  266.571372][T18335]  netlink_rcv_skb+0x208/0x470
[  266.573376][T18335]  xfrm_netlink_rcv+0x79/0x90
[  266.575421][T18335]  netlink_unicast+0x82f/0x9e0
[  266.577427][T18335]  netlink_sendmsg+0x805/0xb30
[  266.579297][T18335]  __sock_sendmsg+0x21c/0x270
[  266.581293][T18335]  ____sys_sendmsg+0x505/0x830
[  266.583345][T18335]  ___sys_sendmsg+0x21f/0x2a0
[  266.585362][T18335]  __x64_sys_sendmsg+0x19b/0x260
[  266.587537][T18335]  do_syscall_64+0xfa/0x3b0
[  266.589491][T18335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.592033][T18335] 
[  266.593095][T18335] Freed by task 5852:
[  266.594860][T18335]  kasan_save_track+0x3e/0x80
[  266.596897][T18335]  kasan_save_free_info+0x46/0x50
[  266.599009][T18335]  __kasan_slab_free+0x5b/0x80
[  266.601041][T18335]  kmem_cache_free+0x18f/0x400
[  266.603090][T18335]  xfrm_state_gc_task+0x52d/0x6b0
[  266.605270][T18335]  process_scheduled_works+0xae1/0x17b0
[  266.607664][T18335]  worker_thread+0x8a0/0xda0
[  266.609647][T18335]  kthread+0x711/0x8a0
[  266.611412][T18335]  ret_from_fork+0x3fc/0x770
[  266.613429][T18335]  ret_from_fork_asm+0x1a/0x30
[  266.615513][T18335] 
[  266.616579][T18335] The buggy address belongs to the object at ffff8881179b6d00
[  266.616579][T18335]  which belongs to the cache xfrm_state of size 928
[  266.622392][T18335] The buggy address is located 322 bytes inside of
[  266.622392][T18335]  freed 928-byte region [ffff8881179b6d00, ffff8881179b70a0)
[  266.628210][T18335] 
[  266.629282][T18335] The buggy address belongs to the physical page:
[  266.632028][T18335] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881179b5f80 pfn:0x1179b4
[  266.636227][T18335] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  266.639727][T18335] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  266.642999][T18335] page_type: f5(slab)
[  266.644731][T18335] raw: 057ff00000000040 ffff88801d3df3c0 dead000000000122 0000000000000000
[  266.648439][T18335] raw: ffff8881179b5f80 00000000800e000b 00000000f5000000 0000000000000000
[  266.652064][T18335] head: 057ff00000000040 ffff88801d3df3c0 dead000000000122 0000000000000000
[  266.655731][T18335] head: ffff8881179b5f80 00000000800e000b 00000000f5000000 0000000000000000
[  266.659426][T18335] head: 057ff00000000002 ffffea00045e6d01 00000000ffffffff 00000000ffffffff
[  266.663095][T18335] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  266.666739][T18335] page dumped because: kasan: bad access detected
[  266.669512][T18335] page_owner tracks the page as allocated
[  266.671969][T18335] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6283, tgid 6282 (syz.0.163), ts 72481916939, free_ts 72429906114
[  266.679350][T18335]  post_alloc_hook+0x240/0x2a0
[  266.680826][T18335]  get_page_from_freelist+0x21e4/0x22c0
[  266.683109][T18335]  __alloc_frozen_pages_noprof+0x181/0x370
[  266.685170][T18335]  alloc_pages_mpol+0x232/0x4a0
[  266.686927][T18335]  allocate_slab+0x8a/0x370
[  266.688486][T18335]  ___slab_alloc+0xbeb/0x1420
[  266.690166][T18335]  kmem_cache_alloc_noprof+0x283/0x3c0
[  266.692311][T18335]  xfrm_state_alloc+0x24/0x2f0
[  266.694117][T18335]  pfkey_add+0x6e4/0x2e00
[  266.695518][T18335]  pfkey_sendmsg+0xbfe/0x1090
[  266.697143][T18335]  __sock_sendmsg+0x21c/0x270
[  266.699084][T18335]  ____sys_sendmsg+0x505/0x830
[  266.701069][T18335]  ___sys_sendmsg+0x21f/0x2a0
[  266.703005][T18335]  __x64_sys_sendmsg+0x19b/0x260
[  266.704919][T18335]  do_syscall_64+0xfa/0x3b0
[  266.706449][T18335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.708451][T18335] page last free pid 4691 tgid 4691 stack trace:
[  266.710553][T18335]  __free_frozen_pages+0xbc4/0xd30
[  266.712276][T18335]  free_large_kmalloc+0x13a/0x1f0
[  266.714253][T18335]  htab_map_free+0x7b2/0x980
[  266.715985][T18335]  bpf_map_free_deferred+0x113/0x140
[  266.717853][T18335]  process_scheduled_works+0xae1/0x17b0
[  266.719913][T18335]  worker_thread+0x8a0/0xda0
[  266.721603][T18335]  kthread+0x711/0x8a0
[  266.723057][T18335]  ret_from_fork+0x3fc/0x770
[  266.724608][T18335]  ret_from_fork_asm+0x1a/0x30
[  266.726367][T18335] 
[  266.727293][T18335] Memory state around the buggy address:
[  266.729161][T18335]  ffff8881179b6d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.731818][T18335]  ffff8881179b6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.734449][T18335] >ffff8881179b6e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.737107][T18335]                                            ^
[  266.739259][T18335]  ffff8881179b6e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.741952][T18335]  ffff8881179b6f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.744591][T18335] ==================================================================
[  266.764510][T18335] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  266.767338][T18335] CPU: 1 UID: 0 PID: 18335 Comm: syz.1.5472 Not tainted syzkaller #0 PREEMPT(full) 
[  266.770944][T18335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.774315][T18335] Call Trace:
[  266.775551][T18335]  <TASK>
[  266.776612][T18335]  dump_stack_lvl+0x99/0x250
[  266.778211][T18335]  ? __asan_memcpy+0x40/0x70
[  266.779813][T18335]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.781467][T18335]  ? __pfx__printk+0x10/0x10
[  266.783060][T18335]  vpanic+0x281/0x750
[  266.784520][T18335]  ? preempt_schedule+0xae/0xc0
[  266.786258][T18335]  ? __pfx_vpanic+0x10/0x10
[  266.788010][T18335]  ? preempt_schedule_common+0x83/0xd0
[  266.789968][T18335]  ? preempt_schedule+0xae/0xc0
[  266.791655][T18335]  ? __pfx_preempt_schedule+0x10/0x10
[  266.793487][T18335]  panic+0xb9/0xc0
[  266.794779][T18335]  ? __pfx_panic+0x10/0x10
[  266.796270][T18335]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  266.798234][T18335]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.799998][T18335]  check_panic_on_warn+0x89/0xb0
[  266.801651][T18335]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.803486][T18335]  end_report+0x78/0x160
[  266.805089][T18335]  kasan_report+0x129/0x150
[  266.806713][T18335]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.808666][T18335]  __xfrm_state_lookup+0x6ad/0x8d0
[  266.810770][T18335]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  266.812855][T18335]  ? xfrm_state_lookup+0x45/0x1e0
[  266.814834][T18335]  xfrm_state_lookup+0x11e/0x1e0
[  266.816385][T18335]  xfrm_user_state_lookup+0x231/0x370
[  266.818074][T18335]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  266.820045][T18335]  xfrm_del_sa+0xf1/0x3e0
[  266.821409][T18335]  ? __pfx_xfrm_del_sa+0x10/0x10
[  266.822987][T18335]  ? apparmor_capable+0x137/0x1b0
[  266.824859][T18335]  ? __nla_parse+0x40/0x60
[  266.826442][T18335]  xfrm_user_rcv_msg+0x7a3/0xab0
[  266.828313][T18335]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  266.830253][T18335]  ? __pfx___mutex_trylock_common+0x10/0x10
[  266.832233][T18335]  ? rcu_is_watching+0x15/0xb0
[  266.833937][T18335]  ? trace_contention_end+0x39/0x120
[  266.835654][T18335]  ? __mutex_lock+0x335/0x1350
[  266.837160][T18335]  netlink_rcv_skb+0x208/0x470
[  266.838848][T18335]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  266.840877][T18335]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  266.842929][T18335]  ? netlink_deliver_tap+0x2e/0x1b0
[  266.844936][T18335]  ? netlink_deliver_tap+0x2e/0x1b0
[  266.847055][T18335]  xfrm_netlink_rcv+0x79/0x90
[  266.848993][T18335]  netlink_unicast+0x82f/0x9e0
[  266.850908][T18335]  ? __pfx_netlink_unicast+0x10/0x10
[  266.853015][T18335]  ? netlink_sendmsg+0x642/0xb30
[  266.854974][T18335]  ? skb_put+0x11b/0x210
[  266.856671][T18335]  netlink_sendmsg+0x805/0xb30
[  266.858637][T18335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.860656][T18335]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.862422][T18335]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.864540][T18335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.866648][T18335]  __sock_sendmsg+0x21c/0x270
[  266.868571][T18335]  ____sys_sendmsg+0x505/0x830
[  266.870421][T18335]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.872466][T18335]  ? import_iovec+0x74/0xa0
[  266.874493][T18335]  ___sys_sendmsg+0x21f/0x2a0
[  266.876410][T18335]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.878350][T18335]  ? __fget_files+0x2a/0x420
[  266.880204][T18335]  ? __fget_files+0x3a0/0x420
[  266.882020][T18335]  __x64_sys_sendmsg+0x19b/0x260
[  266.884093][T18335]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.886412][T18335]  ? rcu_is_watching+0x15/0xb0
[  266.888362][T18335]  ? do_syscall_64+0xbe/0x3b0
[  266.890371][T18335]  do_syscall_64+0xfa/0x3b0
[  266.892294][T18335]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.894445][T18335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.897056][T18335]  ? exc_page_fault+0x9f/0xf0
[  266.899092][T18335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.901647][T18335] RIP: 0033:0x7f15a638eba9
[  266.903527][T18335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.911529][T18335] RSP: 002b:00007f15a719c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.915048][T18335] RAX: ffffffffffffffda RBX: 00007f15a65d5fa0 RCX: 00007f15a638eba9
[  266.918399][T18335] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  266.921781][T18335] RBP: 00007f15a6411e19 R08: 0000000000000000 R09: 0000000000000000
[  266.925165][T18335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.928533][T18335] R13: 00007f15a65d6038 R14: 00007f15a65d5fa0 R15: 00007ffddeb3b528
[  266.931929][T18335]  </TASK>
[  266.934088][T18335] Kernel Offset: disabled
[  266.935969][T18335] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:48:53  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e51a3 RBX=000000000010de46 RCX=0000000000000000 RDX=ffff888107678000
RSI=0000000000000002 RDI=0000000000000000 RBP=ffff8881015d75e0 RSP=ffffc9000a3af350
R8 =ffff8881015d762f R9 =1ffff110202baec5 R10=dffffc0000000000 R11=ffffed10202baec6
R12=0000000000000000 R13=0000000000000001 R14=0000000000000003 R15=ffff8881015d7628
RIP=ffffffff822e51a3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa03b7f66c0 ffffffff 00c00000
GS =0000 ffff8880b8640000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555876c4588 CR3=000000002b5d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f39693a7498 00007f39693a7470 XMM03=00007f39693a74a8 00007f39693a74a0
XMM04=00007f3969f0d100 00007f39693a7460 XMM05=00007f39693a7478 00007f39693a74c0
XMM06=00007f39693a74b8 00007f39693a74b0 XMM07=00007f39693a74a8 00007f39693a74a0
XMM08=0000000000000000 00007f3969212ee7 XMM09=0000000000000000 00007f3969212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000104a RDI=000000000000104b RBP=00000000000003f8 RSP=ffffc90009df6970
R8 =ffff8880219e0237 R9 =1ffff1100433c046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99ad48f2 R14=ffffffff99dc9420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f15a719c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=000000011b102000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f15a65a7498 00007f15a65a7470 XMM03=00007f15a65a74a8 00007f15a65a74a0
XMM04=00007f15a710d100 00007f15a65a7460 XMM05=00007f15a65a7478 00007f15a65a74c0
XMM06=00007f15a65a74b8 00007f15a65a74b0 XMM07=00007f15a65a74a8 00007f15a65a74a0
XMM08=0000000000000000 00007f15a6412ee7 XMM09=0000000000000000 00007f15a6412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
