last executing test programs:

2.331130487s ago: executing program 2 (id=4033):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)

2.249853582s ago: executing program 2 (id=4035):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

2.249633811s ago: executing program 2 (id=4037):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000a0000009000000000000000002000100000004d60000000200001100030005000020000002004e1d7f000001"], 0x50}}, 0x0)

2.160869993s ago: executing program 2 (id=4039):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket(0x2a, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.081262406s ago: executing program 1 (id=4042):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000800}, 0x20000000)

2.000632445s ago: executing program 1 (id=4043):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

2.00034852s ago: executing program 1 (id=4044):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.921292055s ago: executing program 1 (id=4045):
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x88, &(0x7f0000000140)=""/136, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

1.28712341s ago: executing program 2 (id=4049):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)

1.220762878s ago: executing program 2 (id=4052):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
unshare(0x68040200)
r4 = socket(0x2a, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001800835e010000000000000002000000fd00fe030000000008000400", @ANYRES32=r9, @ANYBLOB="d0bf1d9bffffffbf329696ad6e02884fd1e60f6b1b5ad052d0f4a79efe9a2b71f1db282bc054d171a006285c38a5fc8041bcbd6f68770246d6b55e96370d5f7a4dae6c5556f93caac9d543d12dac58234c3ba80049672028d42cdf6311db4149d9cb91fa95746adeb1e3f3a90d3777b7b6ee34e610bbdd3da3"], 0x2c}, 0x1, 0xffffff7f}, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000140)="24000000010006", 0x7)

1.040188958s ago: executing program 0 (id=4055):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48)
close(r0)

981.550048ms ago: executing program 0 (id=4056):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)

981.04922ms ago: executing program 0 (id=4057):
syz_emit_ethernet(0x6f, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e61, 0x4d, 0x0, @gue={{0x2, 0x0, 0x2, 0xc0, 0x100, @val=0x80}, "e531fef68ef65213a36d5da5b5541294435828e2bdc751cf968e1758a21ccef7037009a1a138b77415b6a067899371cc473cb4a848b98a584d1c0198c4"}}}}}}, 0x0)

917.062542ms ago: executing program 0 (id=4058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x18, 0x13, 0xa, 0x801, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@generic="ebae17"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4)

916.881797ms ago: executing program 0 (id=4059):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001340)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="61030203f401060101b702"], 0xb)

50.576254ms ago: executing program 1 (id=4060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002029f02020200000800350006"], 0x30}}, 0x0)

401.659µs ago: executing program 1 (id=4061):
r0 = socket(0x10, 0x80002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000180001002abd7000fcdbdf270a800000ff02fe08"], 0x44}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0xc000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0)
close(0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x4, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0)

0s ago: executing program 0 (id=4062):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r7, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5951' (ED25519) to the list of known hosts.
syzkaller login: [   56.199000][ T5837] cgroup: Unknown subsys name 'net'
[   56.273761][ T5837] cgroup: Unknown subsys name 'cpuset'
[   56.279798][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.591815][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.948036][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.952203][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.955696][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.959542][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.963048][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.999699][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.003429][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.007851][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.012251][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.015757][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.039405][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.043146][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.047576][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.052485][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.055801][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.290353][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.401619][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   64.471578][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.474484][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.477106][ T5852] bridge_slave_0: entered allmulticast mode
[   64.480481][ T5852] bridge_slave_0: entered promiscuous mode
[   64.484842][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.487329][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.492538][ T5852] bridge_slave_1: entered allmulticast mode
[   64.496444][ T5852] bridge_slave_1: entered promiscuous mode
[   64.540795][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   64.559313][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.580696][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.625761][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.628568][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.631857][ T5856] bridge_slave_0: entered allmulticast mode
[   64.634862][ T5856] bridge_slave_0: entered promiscuous mode
[   64.644323][ T5852] team0: Port device team_slave_0 added
[   64.646461][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.650495][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.653175][ T5856] bridge_slave_1: entered allmulticast mode
[   64.656090][ T5856] bridge_slave_1: entered promiscuous mode
[   64.664528][ T5852] team0: Port device team_slave_1 added
[   64.716779][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.719371][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.727449][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.743016][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.748094][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.752680][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.755056][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.757796][ T5859] bridge_slave_0: entered allmulticast mode
[   64.761995][ T5859] bridge_slave_0: entered promiscuous mode
[   64.766151][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.768685][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.772430][ T5859] bridge_slave_1: entered allmulticast mode
[   64.775977][ T5859] bridge_slave_1: entered promiscuous mode
[   64.779009][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.781844][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.792848][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.845065][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.849861][ T5856] team0: Port device team_slave_0 added
[   64.854979][ T5856] team0: Port device team_slave_1 added
[   64.881561][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.906849][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.909051][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.917960][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.936649][ T5852] hsr_slave_0: entered promiscuous mode
[   64.940330][ T5852] hsr_slave_1: entered promiscuous mode
[   64.957200][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.959941][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.968514][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.992965][ T5859] team0: Port device team_slave_0 added
[   65.006856][ T5859] team0: Port device team_slave_1 added
[   65.056985][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.060891][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.071118][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.095429][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.098190][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.108809][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.139488][ T5856] hsr_slave_0: entered promiscuous mode
[   65.142631][ T5856] hsr_slave_1: entered promiscuous mode
[   65.145545][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.147833][ T5856] Cannot create hsr debugfs directory
[   65.227786][ T5859] hsr_slave_0: entered promiscuous mode
[   65.230784][ T5859] hsr_slave_1: entered promiscuous mode
[   65.232912][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   65.234805][ T5859] Cannot create hsr debugfs directory
[   65.535623][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.547834][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.561524][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.574728][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.620968][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.628145][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.638034][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.645888][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.722792][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.736554][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.742169][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.751893][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.842259][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.882125][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   65.894131][  T716] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.896973][  T716] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.914017][  T716] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.916429][  T716] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.954131][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.970550][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.982657][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.006020][  T716] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.008814][  T716] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.021432][ T5237] Bluetooth: hci0: command tx timeout
[   66.030825][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   66.039823][  T716] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.042681][  T716] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.074064][  T716] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.076733][  T716] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.082054][  T716] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.084894][  T716] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.100677][ T5237] Bluetooth: hci2: command tx timeout
[   66.103549][ T5237] Bluetooth: hci1: command tx timeout
[   66.242637][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.328096][ T5852] veth0_vlan: entered promiscuous mode
[   66.358748][ T5852] veth1_vlan: entered promiscuous mode
[   66.377551][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.395729][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.427726][ T5852] veth0_macvtap: entered promiscuous mode
[   66.446881][ T5852] veth1_macvtap: entered promiscuous mode
[   66.477418][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.487810][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.492507][ T5856] veth0_vlan: entered promiscuous mode
[   66.514158][ T5859] veth0_vlan: entered promiscuous mode
[   66.528776][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.533573][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.539768][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.547533][ T5856] veth1_vlan: entered promiscuous mode
[   66.552870][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.561054][ T5859] veth1_vlan: entered promiscuous mode
[   66.613049][ T5856] veth0_macvtap: entered promiscuous mode
[   66.646679][ T5859] veth0_macvtap: entered promiscuous mode
[   66.652912][ T5856] veth1_macvtap: entered promiscuous mode
[   66.658484][  T716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.659020][ T5859] veth1_macvtap: entered promiscuous mode
[   66.668737][  T716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.703841][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.719399][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.724045][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.736994][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.743037][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.747292][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.760864][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.768478][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.773590][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.776562][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.791486][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.824265][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.824714][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.827828][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.848876][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.957333][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.965386][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.034107][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.036727][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.086089][  T716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.090446][  T716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.145429][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.151220][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.401719][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.448010][ T5935] Illegal XDP return value 4294967294 on prog  (id 2) dev N/A, expect packet loss!
[   68.100354][ T5237] Bluetooth: hci0: command tx timeout
[   68.173104][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   68.180342][ T5237] Bluetooth: hci1: command tx timeout
[   68.182782][ T5237] Bluetooth: hci2: command tx timeout
[   68.321088][ T5974] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   68.782641][ T5988] netlink: 'syz.0.34': attribute type 15 has an invalid length.
[   68.785724][ T5988] netlink: 666 bytes leftover after parsing attributes in process `syz.0.34'.
[   69.157161][ T6012] Zero length message leads to an empty skb
[   69.507068][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   69.512435][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'.
[   69.729602][ T6031] netlink: 'syz.0.55': attribute type 1 has an invalid length.
[   69.732811][ T6031] netlink: 208 bytes leftover after parsing attributes in process `syz.0.55'.
[   70.181270][ T5853] Bluetooth: hci0: command tx timeout
[   70.259417][ T5853] Bluetooth: hci2: command tx timeout
[   70.261612][ T5853] Bluetooth: hci1: command tx timeout
[   70.446774][ T6067] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   70.564272][ T6073] netlink: 276 bytes leftover after parsing attributes in process `syz.1.73'.
[   70.643196][ T6077] netlink: 96 bytes leftover after parsing attributes in process `syz.1.74'.
[   70.721253][ T5900] IPVS: starting estimator thread 0...
[   70.787676][ T6087] netlink: 104 bytes leftover after parsing attributes in process `syz.1.79'.
[   70.817222][ T6083] IPVS: using max 41 ests per chain, 98400 per kthread
[   71.153163][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.156199][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.305199][ T6130] warning: `syz.0.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.355213][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[   71.358442][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'.
[   71.367620][ T6134] netlink: 'syz.0.102': attribute type 12 has an invalid length.
[   71.372037][ T6134] netlink: 'syz.0.102': attribute type 14 has an invalid length.
[   72.053969][ T6163] hsr_slave_0: left promiscuous mode
[   72.057070][ T6163] hsr_slave_1: left promiscuous mode
[   72.233516][ T6172] lo speed is unknown, defaulting to 1000
[   72.235672][ T6172] lo speed is unknown, defaulting to 1000
[   72.241275][ T6172] lo speed is unknown, defaulting to 1000
[   72.246496][ T6172] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.256740][ T6172] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.261364][ T5237] Bluetooth: hci0: command tx timeout
[   72.279750][ T6172] lo speed is unknown, defaulting to 1000
[   72.284436][ T6172] lo speed is unknown, defaulting to 1000
[   72.291257][ T6172] lo speed is unknown, defaulting to 1000
[   72.350453][ T5237] Bluetooth: hci1: command tx timeout
[   72.353043][ T5853] Bluetooth: hci2: command tx timeout
[   72.462002][ T6188] tipc: Started in network mode
[   72.464000][ T6188] tipc: Node identity cee9b0e9c1a1, cluster identity 4711
[   72.466980][ T6188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.473499][ T6188] syzkaller0: entered promiscuous mode
[   72.475738][ T6188] syzkaller0: entered allmulticast mode
[   72.493191][ T6188] tipc: Resetting bearer <eth:syzkaller0>
[   72.497323][ T6187] tipc: Resetting bearer <eth:syzkaller0>
[   72.511769][ T6187] tipc: Disabling bearer <eth:syzkaller0>
[   72.568679][ T6191] ieee802154 phy0 wpan0: encryption failed: -22
[   72.582779][ T6189] lo speed is unknown, defaulting to 1000
[   74.020394][ T6223] syzkaller1: entered promiscuous mode
[   74.022222][ T6223] syzkaller1: entered allmulticast mode
[   74.211842][ T6233] netlink: 'syz.2.143': attribute type 12 has an invalid length.
[   74.315587][ T6243] __nla_validate_parse: 2 callbacks suppressed
[   74.315603][ T6243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.148'.
[   74.364191][ T6244] syz.1.147 uses obsolete (PF_INET,SOCK_PACKET)
[   74.708182][ T6272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.160'.
[   74.807282][ T6278] macvlan2: entered allmulticast mode
[   74.811997][ T6278] veth1_vlan: entered allmulticast mode
[   74.817725][ T6278] veth1_vlan: left allmulticast mode
[   75.140733][ T6299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.623106][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   75.626834][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   75.631501][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   75.735048][ T6325] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   75.736510][ T6324] IPVS: stopping backup sync thread 6325 ...
[   75.747093][ T6324] netlink: 260 bytes leftover after parsing attributes in process `syz.1.184'.
[   75.754469][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'.
[   75.758126][ T6324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.184'.
[   76.135607][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   76.142933][ T6341] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   77.350781][ T6462] netlink: 56 bytes leftover after parsing attributes in process `syz.1.210'.
[   77.778818][ T6505] netlink: 'syz.0.226': attribute type 6 has an invalid length.
[   78.419335][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[   79.104772][ T6571] syz_tun: entered allmulticast mode
[   79.126051][ T6570] syz_tun: left allmulticast mode
[   79.348274][ T6585] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   80.285968][ T6617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   80.386560][ T6620] tipc: Started in network mode
[   80.388603][ T6620] tipc: Node identity 7acab3c1b7f3, cluster identity 4711
[   80.392367][ T6620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.396083][ T6620] syzkaller0: entered promiscuous mode
[   80.398303][ T6620] syzkaller0: entered allmulticast mode
[   80.414247][ T6620] tipc: Resetting bearer <eth:syzkaller0>
[   80.418968][ T6619] tipc: Resetting bearer <eth:syzkaller0>
[   80.431477][ T6619] tipc: Disabling bearer <eth:syzkaller0>
[   81.203334][ T6648] __nla_validate_parse: 3 callbacks suppressed
[   81.203350][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'.
[   81.210134][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'.
[   81.219030][ T6648] gretap0: entered promiscuous mode
[   81.222317][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'.
[   81.225680][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'.
[   81.233934][ T6648] gretap0: left promiscuous mode
[   81.387287][  T794] cfg80211: failed to load regulatory.db
[   81.645684][ T6673] IPVS: length: 141 != 8
[   82.104466][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[   82.723061][ T6695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.799612][ T6680] Bluetooth: hci0: Opcode 0x080f failed: -4
[   82.834151][ T6695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.152412][ T6695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.747680][ T6695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.972497][ T5715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.993723][ T5715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.047310][ T5715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.052272][ T5715] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.105687][ T5237] Bluetooth: hci0: command 0x080f tx timeout
[   84.433413][ T6726] netlink: 'syz.2.313': attribute type 3 has an invalid length.
[   85.025893][ T6717] syz.1.308: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   85.035878][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) 
[   85.035896][ T6717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.035905][ T6717] Call Trace:
[   85.035911][ T6717]  <TASK>
[   85.035918][ T6717]  dump_stack_lvl+0x189/0x250
[   85.035942][ T6717]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.035958][ T6717]  ? __pfx__printk+0x10/0x10
[   85.035976][ T6717]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.035993][ T6717]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.036008][ T6717]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   85.036024][ T6717]  warn_alloc+0x214/0x310
[   85.036049][ T6717]  ? __pfx_warn_alloc+0x10/0x10
[   85.036076][ T6717]  ? __get_vm_area_node+0x28f/0x300
[   85.036095][ T6717]  ? hash_netport4_resize+0x235/0x1b60
[   85.036114][ T6717]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   85.036155][ T6717]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   85.036180][ T6717]  ? rcu_is_watching+0x15/0xb0
[   85.036195][ T6717]  ? hash_netport4_resize+0x235/0x1b60
[   85.036210][ T6717]  ? hash_netport4_resize+0x235/0x1b60
[   85.036224][ T6717]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   85.036243][ T6717]  ? hash_netport4_resize+0x235/0x1b60
[   85.036265][ T6717]  hash_netport4_resize+0x235/0x1b60
[   85.036280][ T6717]  ? hash_netport4_uadt+0xc97/0xf30
[   85.036300][ T6717]  ? __pfx_hash_netport4_add+0x10/0x10
[   85.036316][ T6717]  ? __pfx_hash_netport4_uadt+0x10/0x10
[   85.036340][ T6717]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   85.036364][ T6717]  call_ad+0x44e/0xb00
[   85.036390][ T6717]  ? __pfx_call_ad+0x10/0x10
[   85.036450][ T6717]  ? __nla_parse+0x40/0x60
[   85.036475][ T6717]  ip_set_ad+0x791/0x930
[   85.036501][ T6717]  ? __pfx_ip_set_ad+0x10/0x10
[   85.036553][ T6717]  nfnetlink_rcv_msg+0xb4d/0x1130
[   85.036575][ T6717]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   85.036610][ T6717]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   85.036628][ T6717]  ? kasan_save_free_info+0x46/0x50
[   85.036683][ T6717]  netlink_rcv_skb+0x208/0x470
[   85.036698][ T6717]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   85.036725][ T6717]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   85.036748][ T6717]  ? bpf_lsm_capable+0x9/0x20
[   85.036766][ T6717]  ? security_capable+0x7e/0x2e0
[   85.036794][ T6717]  nfnetlink_rcv+0x26a/0x2520
[   85.036817][ T6717]  ? __dev_queue_xmit+0x1d79/0x3b50
[   85.036843][ T6717]  ? __dev_queue_xmit+0x27b/0x3b50
[   85.036872][ T6717]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   85.036891][ T6717]  ? __pfx___dev_queue_xmit+0x10/0x10
[   85.036921][ T6717]  ? ref_tracker_free+0x63a/0x7d0
[   85.036941][ T6717]  ? __asan_memcpy+0x40/0x70
[   85.036956][ T6717]  ? __pfx_ref_tracker_free+0x10/0x10
[   85.036974][ T6717]  ? __skb_clone+0x63/0x7a0
[   85.036994][ T6717]  ? __skb_clone+0x483/0x7a0
[   85.037016][ T6717]  ? skb_clone+0x246/0x3a0
[   85.037035][ T6717]  ? __netlink_deliver_tap+0x807/0x850
[   85.037048][ T6717]  ? netlink_deliver_tap+0x2e/0x1b0
[   85.037065][ T6717]  ? netlink_deliver_tap+0x2e/0x1b0
[   85.037085][ T6717]  netlink_unicast+0x82f/0x9e0
[   85.037109][ T6717]  ? __pfx_netlink_unicast+0x10/0x10
[   85.037130][ T6717]  ? netlink_sendmsg+0x642/0xb30
[   85.037142][ T6717]  ? skb_put+0x11b/0x210
[   85.037159][ T6717]  netlink_sendmsg+0x805/0xb30
[   85.037181][ T6717]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.037198][ T6717]  ? aa_sock_msg_perm+0xf1/0x1d0
[   85.037214][ T6717]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   85.037228][ T6717]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.037243][ T6717]  __sock_sendmsg+0x21c/0x270
[   85.037266][ T6717]  ____sys_sendmsg+0x505/0x830
[   85.037287][ T6717]  ? __pfx_____sys_sendmsg+0x10/0x10
[   85.037309][ T6717]  ? import_iovec+0x74/0xa0
[   85.037329][ T6717]  ___sys_sendmsg+0x21f/0x2a0
[   85.037346][ T6717]  ? __pfx____sys_sendmsg+0x10/0x10
[   85.037393][ T6717]  ? __fget_files+0x2a/0x420
[   85.037405][ T6717]  ? __fget_files+0x3a0/0x420
[   85.037450][ T6717]  __x64_sys_sendmsg+0x19b/0x260
[   85.037470][ T6717]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   85.037494][ T6717]  ? rcu_is_watching+0x15/0xb0
[   85.037514][ T6717]  ? do_syscall_64+0xbe/0x3b0
[   85.037533][ T6717]  do_syscall_64+0xfa/0x3b0
[   85.037547][ T6717]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.037560][ T6717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.037574][ T6717]  ? exc_page_fault+0x9f/0xf0
[   85.037589][ T6717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.037603][ T6717] RIP: 0033:0x7f4d4398ebe9
[   85.037618][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.037629][ T6717] RSP: 002b:00007f4d448e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.037646][ T6717] RAX: ffffffffffffffda RBX: 00007f4d43bc5fa0 RCX: 00007f4d4398ebe9
[   85.037656][ T6717] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005
[   85.037665][ T6717] RBP: 00007f4d43a11e19 R08: 0000000000000000 R09: 0000000000000000
[   85.037674][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.037681][ T6717] R13: 00007f4d43bc6038 R14: 00007f4d43bc5fa0 R15: 00007ffe8c054788
[   85.037706][ T6717]  </TASK>
[   85.037718][ T6717] Mem-Info:
[   85.234766][ T6717] active_anon:5638 inactive_anon:0 isolated_anon:0
[   85.234766][ T6717]  active_file:1253 inactive_file:38229 isolated_file:0
[   85.234766][ T6717]  unevictable:1768 dirty:1475 writeback:0
[   85.234766][ T6717]  slab_reclaimable:9573 slab_unreclaimable:53395
[   85.234766][ T6717]  mapped:18186 shmem:2432 pagetables:1083
[   85.234766][ T6717]  sec_pagetables:0 bounce:0
[   85.234766][ T6717]  kernel_misc_reclaimable:0
[   85.234766][ T6717]  free:293558 free_pcp:20184 free_cma:0
[   85.257273][ T6717] Node 0 active_anon:15064kB inactive_anon:0kB active_file:3436kB inactive_file:150152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34076kB dirty:5500kB writeback:0kB shmem:4764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6724kB pagetables:2844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   85.271993][ T6717] Node 1 active_anon:7420kB inactive_anon:0kB active_file:1576kB inactive_file:2764kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38668kB dirty:400kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5052kB pagetables:1488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   85.274606][ T6777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.284760][ T6717] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   85.300038][ T6717] lowmem_reserve[]: 0 811 811 811 811
[   85.303221][ T6717] Node 0 DMA32 free:251260kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15132kB inactive_anon:0kB active_file:3436kB inactive_file:150152kB unevictable:3536kB writepending:5500kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:35488kB local_pcp:15080kB free_cma:0kB
[   85.316478][ T6717] lowmem_reserve[]: 0 0 0 0 0
[   85.322429][ T6717] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   85.334202][ T6717] lowmem_reserve[]: 0 0 854 854 854
[   85.349249][ T6717] Node 1 Normal free:448736kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7352kB inactive_anon:0kB active_file:1576kB inactive_file:2764kB unevictable:3536kB writepending:400kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46056kB local_pcp:29236kB free_cma:0kB
[   85.363845][ T6717] lowmem_reserve[]: 0 0 0 0 0
[   85.365806][ T6717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   85.371208][ T6717] Node 0 DMA32: 357*4kB (UME) 155*8kB (UME) 91*16kB (UM) 62*32kB (M) 26*64kB (UME) 12*128kB (UME) 6*256kB (UM) 7*512kB (UM) 3*1024kB (M) 2*2048kB (M) 56*4096kB (M) = 250972kB
[   85.394707][ T6717] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   85.409183][ T6717] Node 1 Normal: 131*4kB (UME) 233*8kB (UME) 441*16kB (UME) 949*32kB (UM) 351*64kB (UME) 113*128kB (UM) 53*256kB (UME) 14*512kB (UE) 7*1024kB (U) 4*2048kB (UM) 82*4096kB (UM) = 448708kB
[   85.416328][ T6717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   85.426646][ T6717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   85.433016][ T6717] 41914 total pagecache pages
[   85.434934][ T6717] 0 pages in swap cache
[   85.436580][ T6717] Free swap  = 124996kB
[   85.438751][ T6717] Total swap = 124996kB
[   85.440563][ T6717] 786301 pages RAM
[   85.442036][ T6717] 0 pages HighMem/MovableOnly
[   85.443887][ T6717] 241344 pages reserved
[   85.445559][ T6717] 0 pages cma reserved
[   85.453667][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.338'.
[   85.819831][ T6819] netlink: 6 bytes leftover after parsing attributes in process `syz.2.354'.
[   86.268205][ T6843] netlink: 'syz.2.361': attribute type 10 has an invalid length.
[   86.279780][ T6843] team0: Device ipvlan1 failed to register rx_handler
[   86.366195][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'.
[   86.560696][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'.
[   86.737335][ T6861] lo speed is unknown, defaulting to 1000
[   87.199516][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'.
[   87.293714][ T6901] tipc: Started in network mode
[   87.296685][ T6901] tipc: Node identity 12541594f82a, cluster identity 4711
[   87.306546][ T6901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.310408][ T6901] syzkaller0: entered promiscuous mode
[   87.312696][ T6901] syzkaller0: entered allmulticast mode
[   87.321954][ T6901] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   87.359466][ T6901] tipc: Resetting bearer <eth:syzkaller0>
[   87.364261][ T6900] tipc: Resetting bearer <eth:syzkaller0>
[   87.382446][ T6900] tipc: Disabling bearer <eth:syzkaller0>
[   87.976385][   T24] IPVS: starting estimator thread 0...
[   88.059352][ T6946] IPVS: using max 47 ests per chain, 112800 per kthread
[   88.780262][ T7007] netlink: 'syz.2.422': attribute type 12 has an invalid length.
[   88.849001][ T7017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.913134][ T7017] syzkaller0: entered promiscuous mode
[   88.915516][ T7017] syzkaller0: entered allmulticast mode
[   88.918451][ T7017] tipc: Resetting bearer <eth:syzkaller0>
[   88.931919][ T7016] tipc: Resetting bearer <eth:syzkaller0>
[   89.917475][   T24] tipc: Node number set to 256422121
[   90.254598][ T7016] tipc: Disabling bearer <eth:syzkaller0>
[   90.508299][ T7075] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   90.592145][ T7077] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   91.390653][ T7117] netlink: 'syz.1.446': attribute type 1 has an invalid length.
[   91.897045][ T7158] lo speed is unknown, defaulting to 1000
[   92.062577][ T7172] lo speed is unknown, defaulting to 1000
[   92.236993][ T7180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'.
[   92.673549][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'.
[   92.677194][ T7210] netlink: 'syz.1.478': attribute type 4 has an invalid length.
[   92.816826][ T7215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.824276][ T7215] syzkaller0: entered promiscuous mode
[   92.826649][ T7215] syzkaller0: entered allmulticast mode
[   92.842745][ T7215] tipc: Resetting bearer <eth:syzkaller0>
[   92.847967][ T7214] tipc: Resetting bearer <eth:syzkaller0>
[   92.858164][ T7214] tipc: Disabling bearer <eth:syzkaller0>
[   93.174500][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.487'.
[   93.177472][ T7229] netlink: 64 bytes leftover after parsing attributes in process `syz.1.487'.
[   93.180666][ T7229] tipc: Invalid UDP bearer configuration
[   93.180697][ T7229] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   93.516476][ T7249] netlink: 96 bytes leftover after parsing attributes in process `syz.0.496'.
[   94.152442][ T7281] netlink: 'syz.2.510': attribute type 1 has an invalid length.
[   94.201866][ T7281] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   94.205993][ T7281] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   94.212990][ T7281] bond1: (slave vcan1): making interface the new active one
[   94.216950][ T7281] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   94.227807][ T7281] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[   94.241319][ T7281] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[   94.256144][ T7281] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.302022][ T7284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.511'.
[   94.748849][ T7312] bridge1: entered promiscuous mode
[   94.755981][ T7312] bridge1: entered allmulticast mode
[   94.760566][ T7312] team0: Port device bridge1 added
[   95.399017][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'.
[   95.426335][ T7348] pim6reg: entered allmulticast mode
[   95.432528][ T7348] pim6reg: left allmulticast mode
[   95.962082][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'.
[   96.018029][ T7405] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[   96.023078][ T7405] netlink: 244 bytes leftover after parsing attributes in process `syz.0.564'.
[   96.252907][ T7423] openvswitch: netlink: Message has 20 unknown bytes.
[   96.255194][ T7423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.435496][ T7434] netlink: 'syz.0.576': attribute type 13 has an invalid length.
[   96.440507][ T7434] netlink: 'syz.0.576': attribute type 17 has an invalid length.
[   96.545946][ T7434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.557895][  T794] lo speed is unknown, defaulting to 1000
[   96.607855][ T7429] lo speed is unknown, defaulting to 1000
[   98.784300][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'.
[   98.881656][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'.
[   99.015962][ T7525] lo speed is unknown, defaulting to 1000
[   99.281456][ T7538] netlink: 76 bytes leftover after parsing attributes in process `syz.0.620'.
[   99.314859][ T7540] dummy0: entered promiscuous mode
[   99.317413][ T7540] macsec1: entered promiscuous mode
[   99.324136][ T7540] dummy0: left promiscuous mode
[   99.836779][ T7575] netlink: 'syz.0.635': attribute type 10 has an invalid length.
[   99.885981][ T7575] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  100.712450][ T7618] netlink: 144 bytes leftover after parsing attributes in process `syz.2.651'.
[  100.757263][ T7622] netlink: 'syz.2.654': attribute type 1 has an invalid length.
[  100.760865][ T7622] netlink: 168 bytes leftover after parsing attributes in process `syz.2.654'.
[  100.950521][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  101.219045][ T7658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.260781][ T7658] syzkaller0: entered promiscuous mode
[  101.262505][ T7658] syzkaller0: entered allmulticast mode
[  101.264619][ T7658] tipc: Resetting bearer <eth:syzkaller0>
[  101.301887][ T1090] tipc: Resetting bearer <eth:syzkaller0>
[  101.309503][ T7657] tipc: Resetting bearer <eth:syzkaller0>
[  102.290291][   T10] tipc: Node number set to 3443110849
[  102.388529][ T7657] tipc: Disabling bearer <eth:syzkaller0>
[  102.755432][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'.
[  102.964379][ T7704] bridge_slave_1: left allmulticast mode
[  102.966712][ T7704] bridge_slave_1: left promiscuous mode
[  102.970191][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.982165][ T7717] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.699'.
[  103.078784][ T7704] bridge_slave_0: left allmulticast mode
[  103.096295][ T7704] bridge_slave_0: left promiscuous mode
[  103.098823][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.272590][ T7731] netlink: 'syz.1.706': attribute type 1 has an invalid length.
[  103.303101][ T7731] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.313790][ T7731] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  103.327914][ T7731] vlan2: entered allmulticast mode
[  103.330457][ T7731] veth1: entered allmulticast mode
[  103.333165][ T7731] veth1: entered promiscuous mode
[  103.335962][ T7731] veth1: left promiscuous mode
[  103.343328][ T7731] bond1: (slave vlan2): making interface the new active one
[  103.348576][ T7731] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  103.372007][ T7731] veth1: entered promiscuous mode
[  103.374873][ T7731] vlan2: entered promiscuous mode
[  103.377589][ T7731] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  104.194058][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'.
[  104.303338][ T7771] netlink: 'syz.2.724': attribute type 3 has an invalid length.
[  104.876493][ T7811] veth5: entered promiscuous mode
[  105.099025][ T7826] bridge_slave_0: left allmulticast mode
[  105.105994][ T7826] bridge_slave_0: left promiscuous mode
[  105.112889][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.131334][ T7826] bridge_slave_1: left allmulticast mode
[  105.133729][ T7826] bridge_slave_1: left promiscuous mode
[  105.136137][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.147976][ T7831] rdma_op ffff8880396b11f0 conn xmit_rdma 0000000000000000
[  105.158008][ T7826] bond0: (slave bond_slave_0): Releasing backup interface
[  105.165998][ T7826] bond0: (slave bond_slave_1): Releasing backup interface
[  105.177435][ T7826] team0: Port device team_slave_0 removed
[  105.185826][ T7826] team0: Port device team_slave_1 removed
[  105.188539][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.192811][ T7826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.197296][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.201534][ T7826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.220420][ T7834] netlink: 'syz.1.748': attribute type 10 has an invalid length.
[  105.220690][ T7826] bond1: (slave wlan0): Releasing active interface
[  105.228486][ T7826] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  105.247307][ T7826] team0: Port device bridge1 removed
[  105.253119][ T7826] bond1: (slave vlan2): Releasing active interface
[  105.255363][ T7826] vlan2: left promiscuous mode
[  105.259047][ T7826] veth1: left promiscuous mode
[  105.288889][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.297963][ T7834] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.340652][ T7843] netlink: 272 bytes leftover after parsing attributes in process `syz.0.753'.
[  105.558814][ T7859] IPv6: Can't replace route, no match found
[  105.713971][ T7869] netlink: 'syz.0.767': attribute type 21 has an invalid length.
[  105.717266][ T7869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.767'.
[  105.776582][ T7867] lo speed is unknown, defaulting to 1000
[  106.099473][ T7891] netlink: 100 bytes leftover after parsing attributes in process `syz.0.776'.
[  106.379634][   T33] audit: type=1800 audit(1757347860.159:2): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name="memory.events" dev="tmpfs" ino=1213 res=0 errno=0
[  106.409248][   T33] audit: type=1804 audit(1757347860.159:3): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.784" name="/newroot/236/memory.events" dev="tmpfs" ino=1213 res=1 errno=0
[  106.536516][ T7925] netlink: 'syz.1.791': attribute type 12 has an invalid length.
[  106.542927][ T7925] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.791'.
[  106.693397][ T7939] netlink: 'syz.0.797': attribute type 25 has an invalid length.
[  106.840062][ T7948] tap0: tun_chr_ioctl cmd 1074025677
[  106.847597][ T7948] tap0: linktype set to 776
[  106.956846][ T7952] lo speed is unknown, defaulting to 1000
[  107.195600][ T7966] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  107.952189][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'.
[  108.132079][ T8000] netlink: 'syz.0.819': attribute type 21 has an invalid length.
[  108.139336][ T8000] netlink: 'syz.0.819': attribute type 1 has an invalid length.
[  108.141870][ T8000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.819'.
[  108.205618][ T8003] netlink: 108 bytes leftover after parsing attributes in process `syz.2.820'.
[  108.699865][ T8036] netlink: 96 bytes leftover after parsing attributes in process `syz.0.836'.
[  109.587993][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'.
[  111.112825][ T8178] netlink: 104 bytes leftover after parsing attributes in process `syz.0.889'.
[  111.154171][ T8182] netlink: 3 bytes leftover after parsing attributes in process `syz.2.891'.
[  111.171360][ T8182] batadv2: entered promiscuous mode
[  111.173348][ T8182] batadv2: entered allmulticast mode
[  111.480285][ T8197] lo speed is unknown, defaulting to 1000
[  112.227177][ T8225] netlink: 766 bytes leftover after parsing attributes in process `syz.0.907'.
[  113.727682][ T8266] lo speed is unknown, defaulting to 1000
[  114.680107][ T8276] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  114.700154][ T5901] lo speed is unknown, defaulting to 1000
[  114.702512][ T5901] syz1: Port: 1 Link DOWN
[  114.706318][ T8276] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  114.722512][   T10] lo speed is unknown, defaulting to 1000
[  114.724863][   T10] syz1: Port: 1 Link ACTIVE
[  114.801156][ T8278] netlink: 'syz.2.929': attribute type 4 has an invalid length.
[  115.436302][ T8318] lo speed is unknown, defaulting to 1000
[  115.711624][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  116.150104][ T8367] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  116.153148][ T8367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.526289][ T8397] tipc: Can't bind to reserved service type 2
[  116.998250][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'.
[  117.195061][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'.
[  117.205054][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'.
[  117.386489][ T8436] tc_dump_action: action bad kind
[  118.025682][ T8477] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1014'.
[  118.121917][ T8483] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1016'.
[  118.743549][ T8537] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  118.746461][ T8537] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1043'.
[  118.943789][ T8547] netlink: 'syz.0.1048': attribute type 9 has an invalid length.
[  118.946855][ T8547] netlink: 155628 bytes leftover after parsing attributes in process `syz.0.1048'.
[  119.265615][ T8573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1059'.
[  119.270062][ T8573] tc_dump_action: action bad kind
[  119.986760][ T8594] netlink: 'syz.0.1068': attribute type 1 has an invalid length.
[  119.994220][ T8594] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1068'.
[  120.205485][ T8613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.493573][ T8628] netlink: 'syz.0.1080': attribute type 2 has an invalid length.
[  120.622701][ T8630] netlink: 'syz.0.1081': attribute type 1 has an invalid length.
[  120.648356][ T8630] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.658111][ T8630] bond1: (slave wlan0): Opening slave failed
[  120.672067][ T8630] vlan2: entered allmulticast mode
[  120.674412][ T8630] veth1: entered allmulticast mode
[  120.682409][ T8630] bond1: (slave vlan2): making interface the new active one
[  120.687035][ T8630] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  121.122136][ T8654] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1091'.
[  121.126762][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1091'.
[  121.755226][ T8687] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.820304][ T8687] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.873045][ T8687] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.930728][ T8687] bond0: (slave netdevsim0): Releasing backup interface
[  121.936604][ T8687] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.981199][ T5715] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.991248][ T5715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.006460][ T5715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.023224][ T5715] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.293783][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'.
[  122.555621][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1118'.
[  122.627563][ T8717] nbd: socks must be embedded in a SOCK_ITEM attr
[  122.889550][ T8734] netlink: 'syz.1.1125': attribute type 15 has an invalid length.
[  123.533411][ T8768] geneve2: entered promiscuous mode
[  124.053784][ T8802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.068779][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'.
[  124.083605][ T8802] siw: device registration error -23
[  124.883515][ T8804] bridge: RTM_NEWNEIGH with invalid ether address
[  125.013375][ T8818] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000
[  125.076797][ T8825] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  125.127397][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'.
[  125.384223][ T8854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.706098][ T8875] syz_tun: entered allmulticast mode
[  125.739553][ T8875] dvmrp8: entered allmulticast mode
[  125.807633][ T8875] lo speed is unknown, defaulting to 1000
[  125.891227][ T8874] syz_tun: left allmulticast mode
[  125.893925][ T8874] dvmrp8: left allmulticast mode
[  126.003739][ T8892] netlink: 'syz.2.1199': attribute type 1 has an invalid length.
[  126.007255][ T8892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.224231][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'.
[  126.950856][ T8951] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1226'.
[  126.954335][ T8951] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1226'.
[  129.106518][ T9044] syzkaller1: entered promiscuous mode
[  129.108335][ T9044] syzkaller1: entered allmulticast mode
[  129.344492][ T9056] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  130.854764][ T9073] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1282'.
[  130.966186][ T9087] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1288'.
[  131.275159][ T9119] netlink: 'syz.0.1303': attribute type 13 has an invalid length.
[  131.278190][ T9119] netlink: 'syz.0.1303': attribute type 17 has an invalid length.
[  131.284761][ T9119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.462546][ T9131] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1308'.
[  131.517360][ T9135] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1311'.
[  131.725567][ T9152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.886305][ T9160] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1322'.
[  131.892367][ T9160] gretap0: entered promiscuous mode
[  131.908086][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.920779][ T9155] veth1_macvtap: left promiscuous mode
[  132.139862][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1330'.
[  132.355774][ T9199] lo speed is unknown, defaulting to 1000
[  132.386648][ T9202] netlink: 'syz.2.1336': attribute type 10 has an invalid length.
[  132.404759][ T9202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.411934][ T9202] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  132.415814][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'.
[  132.417830][ T9202] netlink: 'syz.2.1336': attribute type 10 has an invalid length.
[  132.431665][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1336'.
[  132.440943][ T9202] batadv0: entered promiscuous mode
[  132.443209][ T9202] batadv0: entered allmulticast mode
[  132.446715][ T9202] bond0: (slave batadv0): Releasing backup interface
[  132.454395][ T9202] bridge0: port 3(batadv0) entered blocking state
[  132.457232][ T9202] bridge0: port 3(batadv0) entered disabled state
[  132.467886][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'.
[  132.479964][ T9204] erspan0: entered promiscuous mode
[  132.482060][ T9204] macvtap1: entered promiscuous mode
[  132.490472][ T9204] macvtap1: entered allmulticast mode
[  132.492489][ T9204] erspan0: entered allmulticast mode
[  132.513022][ T9207] erspan0: left allmulticast mode
[  132.514943][ T9207] erspan0: left promiscuous mode
[  132.583972][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.643294][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  132.646716][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  132.753344][ T9223] openvswitch: netlink: IP tunnel dst address not specified
[  133.056147][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.588983][ T9257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1362'.
[  137.046376][ T9347] vlan2: entered promiscuous mode
[  137.132741][ T9358] __nla_validate_parse: 3 callbacks suppressed
[  137.132757][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1404'.
[  137.633904][ T9398] netlink: 'syz.0.1423': attribute type 1 has an invalid length.
[  137.737265][ T9407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1424'.
[  137.838800][ T9407] lo speed is unknown, defaulting to 1000
[  138.357157][ T9434] batadv_slave_1: entered promiscuous mode
[  138.361414][ T9433] batadv_slave_1: left promiscuous mode
[  138.548975][ T9444] Bluetooth: MGMT ver 1.23
[  138.563178][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1443'.
[  138.723634][ T9460] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1450'.
[  138.857960][ T9471] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1451'.
[  138.959570][   T33] audit: type=1800 audit(1757347892.739:4): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1452" name="memory.events" dev="tmpfs" ino=2321 res=0 errno=0
[  139.211400][ T9491] lo speed is unknown, defaulting to 1000
[  140.773484][ T9559] bridge0: entered promiscuous mode
[  140.775505][ T9559] vlan2: entered promiscuous mode
[  140.780027][ T9559] bridge0: port 4(vlan2) entered blocking state
[  140.786543][ T9559] bridge0: port 4(vlan2) entered disabled state
[  140.788917][ T9559] vlan2: entered allmulticast mode
[  140.793588][ T9559] bridge0: entered allmulticast mode
[  140.804524][ T9559] vlan2: left allmulticast mode
[  140.809557][ T9559] bridge0: left allmulticast mode
[  141.147363][ T9601] netlink: 'syz.2.1508': attribute type 4 has an invalid length.
[  142.512490][ T9672] netlink: 'syz.0.1538': attribute type 9 has an invalid length.
[  142.515530][ T9672] netlink: 'syz.0.1538': attribute type 11 has an invalid length.
[  142.518663][ T9672] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.1538'.
[  143.074144][ T9718] netlink: 'syz.1.1559': attribute type 1 has an invalid length.
[  143.556704][ T9770] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  143.644477][ T9773] lo speed is unknown, defaulting to 1000
[  143.757789][ T9784] lo speed is unknown, defaulting to 1000
[  143.893244][ T9799] openvswitch: netlink: Flow actions attr not present in new flow.
[  143.943086][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  144.043524][ T9784] netlink: 'syz.0.1589': attribute type 13 has an invalid length.
[  144.046689][ T9784] netlink: 'syz.0.1589': attribute type 17 has an invalid length.
[  144.060616][ T9784] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  144.082987][ T9814] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1601'.
[  144.168783][ T9816] IPVS: Error connecting to the multicast addr
[  144.287885][ T9820] lo speed is unknown, defaulting to 1000
[  144.322744][ T9826] netlink: 'syz.2.1604': attribute type 29 has an invalid length.
[  144.332912][ T9826] netlink: 'syz.2.1604': attribute type 29 has an invalid length.
[  144.400544][ T9830] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.404585][ T9830] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.608849][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1612'.
[  144.615530][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1612'.
[  144.618848][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'.
[  144.868272][ T9848] netlink: 'syz.2.1615': attribute type 99 has an invalid length.
[  144.924392][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'.
[  145.101325][ T9857] IPv6: addrconf: prefix option has invalid lifetime
[  145.441231][ T9879] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.444579][ T9879] syzkaller0: entered promiscuous mode
[  145.446907][ T9879] syzkaller0: entered allmulticast mode
[  145.474224][ T9879] tipc: Resetting bearer <eth:syzkaller0>
[  145.479038][ T9878] tipc: Resetting bearer <eth:syzkaller0>
[  145.495260][ T9878] tipc: Disabling bearer <eth:syzkaller0>
[  146.219000][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'.
[  146.310539][ T9924] lo speed is unknown, defaulting to 1000
[  146.425214][ T9924] lo speed is unknown, defaulting to 1000
[  146.908833][ T9946] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  147.031340][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1660'.
[  147.044028][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'.
[  147.055880][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  147.507337][ T9975] netlink: 'syz.1.1670': attribute type 3 has an invalid length.
[  147.513166][ T9975] netlink: 'syz.1.1670': attribute type 3 has an invalid length.
[  147.910335][T10007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.915176][T10007] syzkaller0: entered promiscuous mode
[  147.917087][T10007] syzkaller0: entered allmulticast mode
[  147.934880][T10007] tipc: Resetting bearer <eth:syzkaller0>
[  147.938768][T10006] tipc: Resetting bearer <eth:syzkaller0>
[  147.963945][T10006] tipc: Disabling bearer <eth:syzkaller0>
[  147.971112][T10008] wg1: entered promiscuous mode
[  147.973372][T10008] wg1: entered allmulticast mode
[  148.122077][T10012] netlink: 'syz.1.1686': attribute type 10 has an invalid length.
[  148.755916][T10026] __nla_validate_parse: 2 callbacks suppressed
[  148.755931][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'.
[  148.807797][T10032] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1694'.
[  149.518770][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'.
[  151.908311][T10179] lo speed is unknown, defaulting to 1000
[  152.801126][T10221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.806008][T10221] syzkaller0: entered promiscuous mode
[  152.808313][T10221] syzkaller0: entered allmulticast mode
[  152.828644][T10221] tipc: Resetting bearer <eth:syzkaller0>
[  152.837784][T10220] tipc: Resetting bearer <eth:syzkaller0>
[  152.872486][T10220] tipc: Disabling bearer <eth:syzkaller0>
[  153.335492][T10242] netlink: 'syz.0.1778': attribute type 1 has an invalid length.
[  153.338076][T10242] netlink: 'syz.0.1778': attribute type 3 has an invalid length.
[  153.341663][T10242] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1778'.
[  153.565125][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'.
[  153.568836][T10249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1780'.
[  154.714227][T10278] lo speed is unknown, defaulting to 1000
[  154.846140][T10281] lo speed is unknown, defaulting to 1000
[  155.136472][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1802'.
[  155.603517][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'.
[  155.607069][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1815'.
[  155.611302][T10323] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1815'.
[  155.624568][T10318] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.715290][T10318] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.786646][T10318] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.893147][T10318] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.026954][ T5715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.055529][ T5880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.077540][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.095530][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.712265][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'.
[  156.746545][T10374] netlink: 'syz.2.1839': attribute type 11 has an invalid length.
[  156.967919][T10393] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1848'.
[  157.123359][T10402] netlink: 'syz.2.1852': attribute type 2 has an invalid length.
[  157.126810][T10402] netlink: 'syz.2.1852': attribute type 1 has an invalid length.
[  157.144564][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'.
[  157.299645][T10415] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.319980][T10415] bond_slave_0: entered promiscuous mode
[  157.322809][T10415] bond_slave_1: entered promiscuous mode
[  157.331366][T10415] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  157.336704][T10415] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[  157.376170][T10415] bond0: (slave bond_slave_0): Releasing backup interface
[  157.385142][T10415] bond_slave_0: left promiscuous mode
[  157.398407][T10415] bond0: (slave bond_slave_1): Releasing backup interface
[  157.412386][T10415] bond_slave_1: left promiscuous mode
[  157.427820][T10415] team0: Port device team_slave_0 removed
[  157.437204][T10415] team0: Port device team_slave_1 removed
[  157.444178][T10415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.446796][T10415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.451505][T10415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.454413][T10415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.463399][T10415] bond1: (slave vlan2): Releasing active interface
[  157.476831][T10415] bond2: (slave macvlan2): Removing an active aggregator
[  157.481309][T10415] bond2: (slave macvlan2): Releasing backup interface
[  159.266902][T10501] 8021q: VLANs not supported on bond0
[  159.397928][T10513] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1896'.
[  159.502831][T10519] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  160.337766][T10553] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1913'.
[  160.341098][T10553] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  160.394619][T10555] lo speed is unknown, defaulting to 1000
[  160.515268][T10566] netlink: 'syz.2.1918': attribute type 49 has an invalid length.
[  161.268927][T10605] lo speed is unknown, defaulting to 1000
[  161.725813][T10638] IPv6: addrconf: prefix option has invalid lifetime
[  161.843938][T10646] lo speed is unknown, defaulting to 1000
[  161.860698][T10648] siw: device registration error -23
[  162.871894][T10705] netlink: 'syz.0.1981': attribute type 1 has an invalid length.
[  162.875932][T10705] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1981'.
[  162.881300][T10705] netlink: 'syz.0.1981': attribute type 1 has an invalid length.
[  163.317857][T10732] netlink: 'syz.0.1994': attribute type 2 has an invalid length.
[  163.366997][T10734] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1995'.
[  163.454802][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1997'.
[  163.566599][T10743] lo speed is unknown, defaulting to 1000
[  165.527075][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'.
[  165.533306][T10843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2045'.
[  165.536517][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'.
[  165.542136][T10843] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2045'.
[  165.545277][T10843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2045'.
[  165.767187][T10868] netlink: 'syz.0.2057': attribute type 9 has an invalid length.
[  165.770875][T10868] netlink: 'syz.0.2057': attribute type 7 has an invalid length.
[  165.773322][T10868] netlink: 'syz.0.2057': attribute type 8 has an invalid length.
[  166.304284][T10923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2081'.
[  166.560264][T10936] Bluetooth: MGMT ver 1.23
[  166.686825][T10944] netlink: 'syz.2.2090': attribute type 3 has an invalid length.
[  167.235674][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2103'.
[  167.238624][T10971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2103'.
[  167.244779][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2103'.
[  167.248231][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2103'.
[  167.965052][T10993] raw_sendmsg: syz.1.2113 forgot to set AF_INET. Fix it!
[  168.308149][T11010] lo speed is unknown, defaulting to 1000
[  168.579668][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  168.582062][ T5853] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  168.706518][T11023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.734549][T11023] syzkaller0: entered promiscuous mode
[  168.736290][T11023] syzkaller0: entered allmulticast mode
[  168.738843][T11023] tipc: Resetting bearer <eth:syzkaller0>
[  168.745118][T11022] tipc: Resetting bearer <eth:syzkaller0>
[  169.827189][T11022] tipc: Disabling bearer <eth:syzkaller0>
[  170.080442][   T96] IPVS: starting estimator thread 0...
[  170.092291][T11060] trusted_key: syz.1.2139 sent an empty control message without MSG_MORE.
[  170.102735][T11057] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  170.166628][T11069] netlink: 'syz.2.2143': attribute type 1 has an invalid length.
[  170.171323][T11062] IPVS: using max 64 ests per chain, 153600 per kthread
[  170.281488][T11075] netlink: 'syz.2.2146': attribute type 1 has an invalid length.
[  170.414620][T11083] lo speed is unknown, defaulting to 1000
[  170.479758][T11088] lo speed is unknown, defaulting to 1000
[  170.618626][T11098] IPVS: stopping master sync thread 11099 ...
[  170.619749][T11099] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  171.018309][T11112] __nla_validate_parse: 6 callbacks suppressed
[  171.018325][T11112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2160'.
[  172.524214][T11181] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2193'.
[  172.525301][T11185] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2195'.
[  172.542503][T11185] 0X: renamed from caif0
[  172.551057][T11185] 0X: entered allmulticast mode
[  172.553086][T11185] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  172.789441][T11205] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  174.203422][T11267] vxcan1 speed is unknown, defaulting to 1000
[  174.214954][T11267] vxcan1 speed is unknown, defaulting to 1000
[  174.218187][T11267] vxcan1 speed is unknown, defaulting to 1000
[  174.436302][T11267] infiniband syz2: set active
[  174.439236][   T24] vxcan1 speed is unknown, defaulting to 1000
[  174.445623][T11267] infiniband syz2: added vxcan1
[  174.487526][T11267] RDS/IB: syz2: added
[  174.490827][T11267] smc: adding ib device syz2 with port count 1
[  174.496722][T11267] smc:    ib device syz2 port 1 has pnetid 
[  174.499478][T11286] vlan2: entered promiscuous mode
[  174.508612][   T24] vxcan1 speed is unknown, defaulting to 1000
[  174.513633][T11267] vxcan1 speed is unknown, defaulting to 1000
[  174.670487][T11295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2245'.
[  174.683790][T11295] team0: Failed to send options change via netlink (err -105)
[  174.686986][T11295] team0: Mode changed to "loadbalance"
[  174.710525][T11267] vxcan1 speed is unknown, defaulting to 1000
[  174.845476][T11267] vxcan1 speed is unknown, defaulting to 1000
[  175.003818][T11307] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2251'.
[  175.322057][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'.
[  176.515272][T11398] 8021q: adding VLAN 0 to HW filter on device bond3
[  176.521791][T11398] team0: Port device bond3 added
[  178.475894][T11428] lo speed is unknown, defaulting to 1000
[  178.494658][T11428] vxcan1 speed is unknown, defaulting to 1000
[  178.718802][T11439] netlink: 'syz.0.2304': attribute type 1 has an invalid length.
[  178.977411][T11448] tipc: Enabled bearer <eth:gre0>, priority 10
[  179.165302][T11460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2314'.
[  179.189978][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2310'.
[  179.366815][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'.
[  179.453597][T11490] netlink: 'syz.2.2329': attribute type 1 has an invalid length.
[  179.456083][T11490] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2329'.
[  180.320383][T11538] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.404842][T11545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.411473][T11545] syzkaller0: entered promiscuous mode
[  180.413404][T11545] syzkaller0: entered allmulticast mode
[  180.445555][T11545] tipc: Resetting bearer <eth:syzkaller0>
[  180.448763][T11544] tipc: Resetting bearer <eth:syzkaller0>
[  180.465506][T11544] tipc: Disabling bearer <eth:syzkaller0>
[  180.547472][T11559] netlink: 'syz.2.2362': attribute type 1 has an invalid length.
[  180.592399][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'.
[  180.619448][T11563] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.623909][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'.
[  180.632920][T11563] macsec0: entered promiscuous mode
[  180.634874][T11563] bond3: entered promiscuous mode
[  180.636681][T11563] macsec0: entered allmulticast mode
[  180.638466][T11563] bond3: entered allmulticast mode
[  180.642494][T11563] bond3: left allmulticast mode
[  180.644235][T11563] bond3: left promiscuous mode
[  180.988745][T11583] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.036683][T11583] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.075659][T11583] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.127319][T11583] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.204295][ T5715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.228608][ T5715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.248294][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.264954][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.976739][T11652] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  182.016911][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'.
[  182.021507][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'.
[  182.025177][T11654] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2405'.
[  182.027275][T11656] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2404'.
[  183.076558][T11717] syz_tun: entered allmulticast mode
[  183.091351][T11717] tipc: Resetting bearer <eth:gre0>
[  183.192194][T11717] 0X: left allmulticast mode
[  183.484103][T11717] veth5: left promiscuous mode
[  183.494403][T11717] vlan2: left allmulticast mode
[  183.497584][T11717] veth1: left allmulticast mode
[  183.505867][   T10] lo speed is unknown, defaulting to 1000
[  183.515865][ T5715] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.519553][T11718] vxcan1 speed is unknown, defaulting to 1000
[  183.526249][   T10] syz1: Port: 1 Link DOWN
[  183.529936][ T5715] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.533192][ T5715] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.535230][T11718] syz2: Port: 1 Link DOWN
[  183.536434][ T5715] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.551183][T11718] vxcan1 speed is unknown, defaulting to 1000
[  183.686727][T11744] netlink: 'syz.1.2443': attribute type 3 has an invalid length.
[  183.746850][T11747] sctp: [Deprecated]: syz.2.2444 (pid 11747) Use of int in maxseg socket option.
[  183.746850][T11747] Use struct sctp_assoc_value instead
[  183.831472][T11754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.842183][T11754] netlink: 'syz.1.2448': attribute type 1 has an invalid length.
[  183.922717][T11756] lo speed is unknown, defaulting to 1000
[  183.926648][T11756] vxcan1 speed is unknown, defaulting to 1000
[  184.557165][T11793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.562525][T11793] syzkaller0: entered promiscuous mode
[  184.564380][T11793] syzkaller0: entered allmulticast mode
[  184.566421][T11791] lo speed is unknown, defaulting to 1000
[  184.571574][T11791] vxcan1 speed is unknown, defaulting to 1000
[  184.595202][T11793] tipc: Resetting bearer <eth:syzkaller0>
[  184.601384][T11792] tipc: Resetting bearer <eth:syzkaller0>
[  184.612497][T11792] tipc: Disabling bearer <eth:syzkaller0>
[  185.269040][T11810] netlink: 'syz.1.2471': attribute type 12 has an invalid length.
[  185.830155][T11822] __nla_validate_parse: 2 callbacks suppressed
[  185.830173][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'.
[  185.836451][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'.
[  185.845484][T11822] netlink: 'syz.0.2476': attribute type 12 has an invalid length.
[  185.965590][T11824] syzkaller0: entered promiscuous mode
[  185.967916][T11824] syzkaller0: entered allmulticast mode
[  187.297746][T11838] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2483'.
[  188.525289][T11885] netlink: 'syz.2.2502': attribute type 6 has an invalid length.
[  188.527869][T11885] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2502'.
[  188.680893][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2508'.
[  188.742550][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2512'.
[  188.927760][   T33] audit: type=1804 audit(1757347942.709:5): pid=11920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2518" name="/newroot/790/cgroup.controllers" dev="tmpfs" ino=4004 res=1 errno=0
[  188.944559][   T33] audit: type=1800 audit(1757347942.729:6): pid=11920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2518" name="cgroup.controllers" dev="tmpfs" ino=4004 res=0 errno=0
[  189.027166][T11918] lo speed is unknown, defaulting to 1000
[  189.035903][T11918] vxcan1 speed is unknown, defaulting to 1000
[  189.180965][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'.
[  190.644712][T11980] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2544'.
[  190.648502][T11980] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  190.655354][T11980] openvswitch: netlink: Message has 252 unknown bytes.
[  190.979849][T11917] Bluetooth: hci0: command 0x080f tx timeout
[  190.982415][T11917] Bluetooth: hci1: command 0x0406 tx timeout
[  191.258454][T12003] vlan3: entered promiscuous mode
[  191.462056][ T5237] Bluetooth: hci2: link tx timeout
[  191.464528][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.585373][T12035] netlink: 'syz.2.2565': attribute type 5 has an invalid length.
[  191.588528][T12035] netlink: 'syz.2.2565': attribute type 7 has an invalid length.
[  191.605460][T12035] : entered promiscuous mode
[  191.693629][T12045] netlink: 'syz.1.2569': attribute type 8 has an invalid length.
[  191.696978][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'.
[  192.015628][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'.
[  192.234247][T12081] batadv_slave_1: entered promiscuous mode
[  192.237651][T12080] batadv_slave_1: left promiscuous mode
[  193.511767][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2616'.
[  193.519580][T12148] bond0: invalid ARP target 0.0.0.0 specified for addition
[  193.522232][T12148] bond0: option arp_ip_target: invalid value (0)
[  193.539911][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  193.586611][T12156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.591792][T12156] syzkaller0: entered promiscuous mode
[  193.593755][T12156] syzkaller0: entered allmulticast mode
[  193.611686][T12156] tipc: Resetting bearer <eth:syzkaller0>
[  193.615653][T12155] tipc: Resetting bearer <eth:syzkaller0>
[  193.640748][T12155] tipc: Disabling bearer <eth:syzkaller0>
[  193.716110][T12159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.718894][T12159] syzkaller0: entered promiscuous mode
[  193.723583][T12159] syzkaller0: entered allmulticast mode
[  193.736194][T12159] tipc: Resetting bearer <eth:syzkaller0>
[  193.742812][T12158] tipc: Resetting bearer <eth:syzkaller0>
[  193.752704][T12158] tipc: Disabling bearer <eth:syzkaller0>
[  194.023731][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.125931][T12166] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.212083][T12166] wg1: left promiscuous mode
[  194.214210][T12166] wg1: left allmulticast mode
[  194.312625][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.331514][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.407504][T12157] Bluetooth: hci0: Opcode 0x080f failed: -4
[  194.454504][T12166] geneve2: left promiscuous mode
[  194.467421][T12166] vlan2: left promiscuous mode
[  194.499752][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.505235][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.508609][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.513771][T12175] netlink: 'syz.1.2628': attribute type 13 has an invalid length.
[  194.517026][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.520965][T12175] netlink: 'syz.1.2628': attribute type 17 has an invalid length.
[  194.535432][T12175] gretap0: left promiscuous mode
[  194.652032][T12175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.717054][T12184] netlink: 'syz.0.2631': attribute type 3 has an invalid length.
[  194.826893][T12191] smc: net device bond0 applied user defined pnetid SYZ0
[  194.832536][T12191] smc: net device bond0 erased user defined pnetid SYZ0
[  195.148447][T12216] netlink: 'syz.2.2643': attribute type 13 has an invalid length.
[  195.158565][T12216] netlink: 'syz.2.2643': attribute type 17 has an invalid length.
[  195.261676][T12216] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.266013][T12216] 8021q: adding VLAN 0 to HW filter on device team0
[  195.293251][T12224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.350503][T12224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.505942][T12216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.552087][T12219] lo speed is unknown, defaulting to 1000
[  195.555683][T12219] vxcan1 speed is unknown, defaulting to 1000
[  195.562810][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.703888][ T5237] Bluetooth: hci0: command 0x080f tx timeout
[  195.876953][T12237] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2653'.
[  195.982095][T12243] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  195.986506][T12243] batadv_slave_0: entered promiscuous mode
[  195.989809][T12243] debugfs: 'hsr0' already exists in 'hsr'
[  195.993305][T12243] Cannot create hsr debugfs directory
[  195.996334][T12243] hsr0: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  196.000847][T12243] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  196.005016][T12243] hsr0: entered promiscuous mode
[  196.085490][T12255] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2662'.
[  196.252767][T12265] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  197.033345][T12320] team0: Port device bond3 removed
[  197.057380][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2690'.
[  197.585730][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'.
[  197.611926][T12359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2709'.
[  198.255677][T12417] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2736'.
[  198.271023][T12417] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2736'.
[  198.336393][T12421] lo speed is unknown, defaulting to 1000
[  198.342753][T12421] vxcan1 speed is unknown, defaulting to 1000
[  198.656311][T12438] sctp: [Deprecated]: syz.2.2747 (pid 12438) Use of int in max_burst socket option deprecated.
[  198.656311][T12438] Use struct sctp_assoc_value instead
[  198.832196][T12446] ieee802154 phy1 wpan1: encryption failed: -22
[  198.942853][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'.
[  198.965831][T12452] 8021q: adding VLAN 0 to HW filter on device bond4
[  198.990088][ T5237] Bluetooth: hci0: command 0x080f tx timeout
[  199.001489][T12452] 8021q: adding VLAN 0 to HW filter on device bond4
[  199.004546][T12452] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  199.011032][T12452] bond4: (slave wireguard0): Error -95 calling set_mac_address
[  199.225794][T12470] geneve2: entered promiscuous mode
[  199.779265][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  199.783158][T12521] netlink: 'syz.2.2785': attribute type 1 has an invalid length.
[  199.786102][T12521] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2785'.
[  200.095618][T12540] netlink: 'syz.2.2794': attribute type 12 has an invalid length.
[  200.242921][T12548] netlink: 'syz.2.2797': attribute type 1 has an invalid length.
[  200.381977][T12558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.384943][T12558] syzkaller0: entered promiscuous mode
[  200.386924][T12558] syzkaller0: entered allmulticast mode
[  200.401377][T12558] tipc: Resetting bearer <eth:syzkaller0>
[  200.406475][T12557] tipc: Resetting bearer <eth:syzkaller0>
[  200.416608][T12557] tipc: Disabling bearer <eth:syzkaller0>
[  201.021280][T12608] syzkaller1: entered promiscuous mode
[  201.023580][T12608] syzkaller1: entered allmulticast mode
[  201.128812][T12608] lo speed is unknown, defaulting to 1000
[  201.136543][T12608] vxcan1 speed is unknown, defaulting to 1000
[  201.457598][T12630] tipc: New replicast peer: 255.255.255.255
[  201.463416][T12630] tipc: Enabled bearer <udp:syz2>, priority 10
[  201.474975][T12628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2832'.
[  201.964171][T12649] ieee802154 phy1 wpan1: encryption failed: -90
[  202.423407][T12675] vlan0: entered promiscuous mode
[  202.425337][T12675] macvtap0: entered promiscuous mode
[  202.470257][T12676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2855'.
[  202.742043][ T5715] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.745286][ T5715] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  202.759740][ T5715] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  202.766706][ T5715] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.826588][T12700] netlink: 'syz.0.2864': attribute type 303 has an invalid length.
[  202.897161][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'.
[  203.396296][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'.
[  203.460277][T12771] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2899'.
[  203.763302][T12787] netlink: 'syz.2.2907': attribute type 1 has an invalid length.
[  203.912047][T12794] lo speed is unknown, defaulting to 1000
[  203.915538][T12794] vxcan1 speed is unknown, defaulting to 1000
[  204.457165][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'.
[  204.512556][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2918'.
[  204.765379][T12834] lo speed is unknown, defaulting to 1000
[  204.768745][T12834] vxcan1 speed is unknown, defaulting to 1000
[  204.986621][T12851] sctp: [Deprecated]: syz.0.2936 (pid 12851) Use of int in max_burst socket option deprecated.
[  204.986621][T12851] Use struct sctp_assoc_value instead
[  205.016264][T12848] lo speed is unknown, defaulting to 1000
[  205.022382][T12848] vxcan1 speed is unknown, defaulting to 1000
[  205.151990][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'.
[  205.903491][T12880] netlink: 'syz.1.2947': attribute type 5 has an invalid length.
[  205.934205][T12884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2948'.
[  205.961726][T12886] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  206.295131][T12915] bridge3: entered promiscuous mode
[  206.297254][T12915] bridge3: entered allmulticast mode
[  206.314115][T12915] team0: Port device bridge3 added
[  206.517745][T12935] netlink: 'syz.0.2970': attribute type 1 has an invalid length.
[  206.695118][T12953] netlink: 'syz.0.2979': attribute type 1 has an invalid length.
[  206.698145][T12953] netlink: 'syz.0.2979': attribute type 3 has an invalid length.
[  206.702347][T12953] netlink: 'syz.0.2979': attribute type 1 has an invalid length.
[  206.705414][T12953] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2979'.
[  206.708936][T12953] NCSI netlink: No device for ifindex 0
[  207.093704][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'.
[  207.464369][T13000] syzkaller1: entered allmulticast mode
[  207.903041][T13009] __nla_validate_parse: 1 callbacks suppressed
[  207.903053][T13009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3001'.
[  207.912065][T13009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.099732][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  208.109350][T13029] netlink: 'syz.1.3011': attribute type 1 has an invalid length.
[  208.112443][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3011'.
[  208.115984][T13029] netlink: 'syz.1.3011': attribute type 1 has an invalid length.
[  208.324032][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3021'.
[  208.533440][T13063] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  208.538021][T13063] tipc: Enabled bearer <udp:syz0>, priority 10
[  209.341896][T13080] netlink: 'syz.2.3033': attribute type 10 has an invalid length.
[  209.427016][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'.
[  209.506299][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'.
[  209.509937][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'.
[  209.649226][   T47] tipc: Node number set to 3934131604
[  211.174646][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'.
[  211.492928][T13140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3062'.
[  211.496358][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3062'.
[  211.715968][T13153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.917740][T13163] netlink: 'syz.2.3073': attribute type 8 has an invalid length.
[  212.266826][T13182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.503582][T13198] netlink: 'syz.0.3090': attribute type 2 has an invalid length.
[  212.648576][T13210] netlink: 'syz.1.3096': attribute type 10 has an invalid length.
[  212.652233][T13210] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  212.977217][T13234] netlink: 'syz.1.3108': attribute type 2 has an invalid length.
[  212.986060][T13235] syzkaller0: entered promiscuous mode
[  212.988191][T13235] syzkaller0: entered allmulticast mode
[  213.094474][T13243] netlink: 'syz.1.3112': attribute type 1 has an invalid length.
[  213.097612][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'.
[  213.146513][T13245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3113'.
[  213.383057][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'.
[  213.482932][T13273] bond5: entered promiscuous mode
[  213.595770][T13283] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  213.813625][T13302] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3139'.
[  213.870329][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'.
[  214.432883][T13331] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3150'.
[  214.465693][T13331] bond0 (unregistering): Released all slaves
[  214.507536][T13338] netlink: 'syz.1.3153': attribute type 4 has an invalid length.
[  214.523307][T13338] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3153'.
[  214.527101][T13338] nbd: must specify a device to reconfigure
[  214.595580][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3153'.
[  214.621422][T13340] lo speed is unknown, defaulting to 1000
[  214.625699][T13340] vxcan1 speed is unknown, defaulting to 1000
[  215.006249][T13362] netlink: 'syz.0.3162': attribute type 13 has an invalid length.
[  215.008840][T13365] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  215.023141][T13362] netlink: 'syz.0.3162': attribute type 17 has an invalid length.
[  215.058966][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3165'.
[  215.158422][T13362] 8021q: adding VLAN 0 to HW filter on device team0
[  215.170713][T13362] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  215.176999][   T10] lo speed is unknown, defaulting to 1000
[  215.179914][   T10] syz1: Port: 1 Link ACTIVE
[  215.257736][T13372] lo speed is unknown, defaulting to 1000
[  215.258215][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'.
[  215.265729][T13362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.267494][T13372] vxcan1 speed is unknown, defaulting to 1000
[  215.691922][T13393] lo speed is unknown, defaulting to 1000
[  215.694294][T13393] lo speed is unknown, defaulting to 1000
[  215.698926][T13393] lo speed is unknown, defaulting to 1000
[  215.802779][T13393] infiniband syz0: set active
[  215.804425][ T5901] lo speed is unknown, defaulting to 1000
[  215.806314][T13393] infiniband syz0: added lo
[  215.837605][T13393] RDS/IB: syz0: added
[  215.842142][T13393] smc: adding ib device syz0 with port count 1
[  215.846319][T13393] smc:    ib device syz0 port 1 has pnetid 
[  215.848961][ T5901] lo speed is unknown, defaulting to 1000
[  215.852626][T13393] lo speed is unknown, defaulting to 1000
[  215.989016][T13393] lo speed is unknown, defaulting to 1000
[  216.110315][T13393] lo speed is unknown, defaulting to 1000
[  216.296082][T13393] lo speed is unknown, defaulting to 1000
[  216.487640][T13411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.509581][T13411] syzkaller0: entered promiscuous mode
[  216.511798][T13411] syzkaller0: entered allmulticast mode
[  216.523296][T13411] tipc: Resetting bearer <eth:syzkaller0>
[  216.535615][T13410] tipc: Resetting bearer <eth:syzkaller0>
[  216.586157][T13410] tipc: Disabling bearer <eth:syzkaller0>
[  217.739818][T13468] lo speed is unknown, defaulting to 1000
[  217.743691][T13468] vxcan1 speed is unknown, defaulting to 1000
[  217.917213][T13468] lo speed is unknown, defaulting to 1000
[  218.718342][T13497] __nla_validate_parse: 2 callbacks suppressed
[  218.718360][T13497] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3219'.
[  218.881011][T13504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3221'.
[  218.931619][T13508] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3222'.
[  218.935426][T13508] tipc: Enabled bearer <ib:wlan0>, priority 10
[  219.390099][T13541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.968367][T13590] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3252'.
[  220.123538][   T33] audit: type=1800 audit(1757347973.909:7): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3256" name="memory.events" dev="tmpfs" ino=5375 res=0 errno=0
[  220.221014][   T33] audit: type=1804 audit(1757347973.909:8): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3256" name="/newroot/1063/memory.events" dev="tmpfs" ino=5375 res=1 errno=0
[  220.224340][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3258'.
[  220.787929][T13631] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  221.000111][T13642] netlink: 'syz.0.3267': attribute type 11 has an invalid length.
[  221.198853][T13655] netlink: 'syz.1.3275': attribute type 2 has an invalid length.
[  221.216482][T13655] netlink: 'syz.1.3275': attribute type 8 has an invalid length.
[  221.224643][T13655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3275'.
[  221.432335][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3281'.
[  221.443473][   T56] block nbd0: Receive control failed (result -107)
[  221.499617][T13669] nbd0: detected capacity change from 0 to 32
[  221.531196][T13288] block nbd0: Dead connection, failed to find a fallback
[  221.534226][T13288] block nbd0: shutting down sockets
[  221.536736][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.558483][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.571407][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.579386][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.582680][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.586172][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.616994][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.622413][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.627068][T13695] batadv1: entered promiscuous mode
[  221.641818][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.645455][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.648504][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.658902][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.663266][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.666882][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.678274][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.683610][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.686801][T13288] ldm_validate_partition_table(): Disk read failed.
[  221.692346][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.695951][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.698904][T13288] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.714364][T13288] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.719432][T13288] Dev nbd0: unable to read RDB block 0
[  221.721529][T13288]  nbd0: unable to read partition table
[  221.737416][T13704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3293'.
[  221.747400][T13288] ldm_validate_partition_table(): Disk read failed.
[  221.752419][T13288] Dev nbd0: unable to read RDB block 0
[  221.755451][T13288]  nbd0: unable to read partition table
[  221.833556][T13718] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3300'.
[  221.924561][T13730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.929006][T13730] syzkaller0: entered promiscuous mode
[  221.937636][T13730] syzkaller0: entered allmulticast mode
[  221.959788][T13730] tipc: Resetting bearer <eth:syzkaller0>
[  221.963013][T13728] tipc: Resetting bearer <eth:syzkaller0>
[  221.986112][T13728] tipc: Disabling bearer <eth:syzkaller0>
[  222.064519][T13743] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  222.202847][T13755] netlink: 'syz.0.3317': attribute type 9 has an invalid length.
[  222.208295][T13755] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3317'.
[  222.432823][T13778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.786250][T13817] netlink: 'syz.0.3344': attribute type 8 has an invalid length.
[  222.917506][ T5880] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.923146][ T5880] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.926732][ T5880] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.930715][ T5880] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.131032][T13856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.134081][T13856] syzkaller0: entered promiscuous mode
[  223.136017][T13856] syzkaller0: entered allmulticast mode
[  223.159697][T13856] tipc: Resetting bearer <eth:syzkaller0>
[  223.163012][T13853] tipc: Resetting bearer <eth:syzkaller0>
[  223.173977][T13853] tipc: Disabling bearer <eth:syzkaller0>
[  223.385750][T13871] vlan0: entered allmulticast mode
[  223.387765][T13871] dummy0: entered allmulticast mode
[  224.402637][T13915] __nla_validate_parse: 9 callbacks suppressed
[  224.402652][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'.
[  224.451117][T13915] syz_tun (unregistering): left allmulticast mode
[  224.785281][T13931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  225.256400][T13979] netlink: 'syz.1.3414': attribute type 4 has an invalid length.
[  225.262210][T13979] netlink: 'syz.1.3414': attribute type 4 has an invalid length.
[  225.379273][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  225.390310][T13995] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3418'.
[  225.717912][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'.
[  225.727252][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'.
[  225.812624][T14023] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3424'.
[  225.821215][T14023] batadv1: entered promiscuous mode
[  225.823178][T14023] batadv1: entered allmulticast mode
[  225.847376][T14025] batadv_slave_0: entered promiscuous mode
[  225.851778][T14024] batadv_slave_0: left promiscuous mode
[  226.154340][T14051] lo speed is unknown, defaulting to 1000
[  226.158650][T14051] vxcan1 speed is unknown, defaulting to 1000
[  226.386177][T14051] lo speed is unknown, defaulting to 1000
[  226.536710][T14058] netlink: 'syz.2.3438': attribute type 1 has an invalid length.
[  226.542185][T14058] netlink: 'syz.2.3438': attribute type 4 has an invalid length.
[  226.553972][T14058] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3438'.
[  226.563356][T14058] netlink: 'syz.2.3438': attribute type 1 has an invalid length.
[  226.569714][T14058] netlink: 'syz.2.3438': attribute type 4 has an invalid length.
[  226.572715][T14058] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3438'.
[  226.765547][T14077] syzkaller0: entered promiscuous mode
[  226.767809][T14077] syzkaller0: entered allmulticast mode
[  227.617411][T14114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.621835][T14114] syzkaller0: entered promiscuous mode
[  227.623532][T14114] syzkaller0: entered allmulticast mode
[  227.636612][T14114] tipc: Resetting bearer <eth:syzkaller0>
[  227.641534][T14111] tipc: Resetting bearer <eth:syzkaller0>
[  227.657610][T14111] tipc: Disabling bearer <eth:syzkaller0>
[  227.761927][T14120] lo speed is unknown, defaulting to 1000
[  227.765927][T14120] vxcan1 speed is unknown, defaulting to 1000
[  227.952314][T14120] lo speed is unknown, defaulting to 1000
[  228.164951][T14140] lo speed is unknown, defaulting to 1000
[  228.268902][T14140] vxcan1 speed is unknown, defaulting to 1000
[  228.371252][T14145] lo speed is unknown, defaulting to 1000
[  228.610928][T14160] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3474'.
[  228.760897][T14172] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3477'.
[  228.822282][T14145] vxcan1 speed is unknown, defaulting to 1000
[  229.182052][T14197] 8021q: adding VLAN 0 to HW filter on device bond3
[  229.186703][T14145] lo speed is unknown, defaulting to 1000
[  229.266120][T14197] bond0: (slave wlan1): Releasing backup interface
[  229.302273][T14197] team0: Port device bridge3 removed
[  229.379668][T14140] lo speed is unknown, defaulting to 1000
[  230.701612][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'.
[  231.686035][T14276] netlink: 'syz.0.3521': attribute type 4 has an invalid length.
[  231.877735][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'.
[  232.292264][T14307] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3534'.
[  232.325659][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'.
[  232.493679][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3538'.
[  233.379431][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  233.988039][T14387] bridge0: port 1(erspan0) entered blocking state
[  234.010224][T14387] bridge0: port 1(erspan0) entered disabled state
[  234.024572][T14387] erspan0: entered allmulticast mode
[  234.051001][T14387] erspan0: left allmulticast mode
[  234.503961][T14405] netlink: 'syz.2.3578': attribute type 1 has an invalid length.
[  234.506575][T14405] netlink: 'syz.2.3578': attribute type 1 has an invalid length.
[  234.518206][T14404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.537364][T14407] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  234.541107][T14404] tipc: Failed to remove unknown binding: 66,1,1/256422121:1137507123/1137507125
[  234.547549][T14404] tipc: Failed to remove unknown binding: 66,1,1/256422121:1137507123/1137507125
[  234.551616][T14404] tipc: Failed to remove unknown binding: 66,1,1/256422121:1137507123/1137507125
[  234.555931][T14409] netlink: 'syz.2.3580': attribute type 10 has an invalid length.
[  234.560816][T14409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3580'.
[  234.563954][T14409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  234.572654][T14404] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3577'.
[  234.642377][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'.
[  234.813169][T14438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3593'.
[  235.041054][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'.
[  235.224967][T14450] netlink: 'syz.1.3599': attribute type 1 has an invalid length.
[  235.766272][T14468] __nla_validate_parse: 2 callbacks suppressed
[  235.766287][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3607'.
[  235.911950][T14478] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  235.927989][T14480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3613'.
[  236.076454][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'.
[  236.089676][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'.
[  236.242384][T14501] nicvf0: entered promiscuous mode
[  236.245862][ T5880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  236.252163][ T5880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  236.257470][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  236.265298][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  236.439456][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'.
[  236.478794][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3628'.
[  236.584618][T14524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  236.595486][T14527] netlink: 'syz.1.3633': attribute type 30 has an invalid length.
[  236.837064][T14544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.053226][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3646'.
[  237.057169][T14558] netlink: 'syz.1.3646': attribute type 2 has an invalid length.
[  237.617905][T14575] TCP: TCP_TX_DELAY enabled
[  237.700817][T14581] netlink: 'syz.1.3656': attribute type 5 has an invalid length.
[  237.891722][T14595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.436382][T14630] netlink: 'syz.1.3679': attribute type 1 has an invalid length.
[  238.438976][T14630] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3679'.
[  238.462327][T14631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.465787][T14631] syzkaller0: entered promiscuous mode
[  238.468020][T14631] syzkaller0: entered allmulticast mode
[  238.918969][T14634] tipc: Resetting bearer <eth:syzkaller0>
[  238.944069][T14628] tipc: Resetting bearer <eth:syzkaller0>
[  238.964922][T14628] tipc: Disabling bearer <eth:syzkaller0>
[  239.077307][T14646] netlink: 'syz.0.3683': attribute type 1 has an invalid length.
[  239.080883][T14646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3683'.
[  239.282936][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3693'.
[  239.400477][T14675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.414574][   T47] lo speed is unknown, defaulting to 1000
[  239.417022][   T47] syz1: Port: 1 Link DOWN
[  239.433468][T14677] netlink: 'syz.2.3699': attribute type 64 has an invalid length.
[  239.485303][T14681] lo speed is unknown, defaulting to 1000
[  239.488118][T14681] vxcan1 speed is unknown, defaulting to 1000
[  239.500195][T14685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.549838][T14687] netlink: 'syz.0.3701': attribute type 1 has an invalid length.
[  239.723445][T14681] lo speed is unknown, defaulting to 1000
[  239.763353][T14696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.835570][T14696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.915537][T14696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.987332][T14696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.148663][ T5880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.198605][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.233422][ T5880] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.277590][ T5880] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.730485][T14734] tc_dump_action: action bad kind
[  240.741972][T14736] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  241.686604][T14777] __nla_validate_parse: 5 callbacks suppressed
[  241.686617][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'.
[  241.994126][T14789] sctp: [Deprecated]: syz.0.3744 (pid 14789) Use of struct sctp_assoc_value in delayed_ack socket option.
[  241.994126][T14789] Use struct sctp_sack_info instead
[  242.201039][T14799] netlink: 'syz.0.3749': attribute type 28 has an invalid length.
[  242.571590][T14824] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  242.676384][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'.
[  242.702936][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'.
[  242.824450][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'.
[  243.036146][T14843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3769'.
[  243.045129][T14843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3769'.
[  243.048698][T14843] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3769'.
[  243.734782][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'.
[  244.084587][T14915] netlink: zone id is out of range
[  244.086220][T14915] netlink: zone id is out of range
[  244.087986][T14915] netlink: set zone limit has 4 unknown bytes
[  244.100854][T14917] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000
[  244.257775][T14931] lo speed is unknown, defaulting to 1000
[  244.261332][T14931] vxcan1 speed is unknown, defaulting to 1000
[  244.373629][T14931] lo speed is unknown, defaulting to 1000
[  244.385710][T14944] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3817'.
[  244.590604][T14955] smc: removing ib device syz2
[  244.979915][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  245.434755][T14982] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3831'.
[  245.808527][T15000] sctp: [Deprecated]: syz.2.3840 (pid 15000) Use of int in max_burst socket option.
[  245.808527][T15000] Use struct sctp_assoc_value instead
[  246.708251][T15086] netlink: 'syz.2.3877': attribute type 13 has an invalid length.
[  246.714932][T15086] netlink: 'syz.2.3877': attribute type 17 has an invalid length.
[  246.725109][T15086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.731047][T11718] lo speed is unknown, defaulting to 1000
[  246.762713][T15086] lo speed is unknown, defaulting to 1000
[  246.771383][T15086] lo speed is unknown, defaulting to 1000
[  246.801759][T15089] __nla_validate_parse: 2 callbacks suppressed
[  246.801779][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'.
[  247.400450][T15118] netlink: 'syz.1.3894': attribute type 1 has an invalid length.
[  247.404307][T15118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3894'.
[  247.606763][T15132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.610809][T15132] syzkaller0: entered promiscuous mode
[  247.612933][T15132] syzkaller0: entered allmulticast mode
[  247.627458][T15132] tipc: Resetting bearer <eth:syzkaller0>
[  247.633368][T15131] tipc: Resetting bearer <eth:syzkaller0>
[  247.645118][T15131] tipc: Disabling bearer <eth:syzkaller0>
[  247.730055][T15135] netlink: 'syz.0.3901': attribute type 2 has an invalid length.
[  247.744164][T15135] k*]: entered promiscuous mode
[  247.757978][T15135] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  247.763440][   T47] lo speed is unknown, defaulting to 1000
[  247.765630][   T47] syz1: Port: 1 Link ACTIVE
[  247.769518][T15135] veth0_to_team: entered promiscuous mode
[  247.771870][T15135] veth0_to_team: entered allmulticast mode
[  247.775227][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3901'.
[  247.942587][T15141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.946340][T15141] syzkaller0: entered promiscuous mode
[  247.948910][T15141] syzkaller0: entered allmulticast mode
[  247.969820][T15141] tipc: Resetting bearer <eth:syzkaller0>
[  247.973082][T15140] tipc: Resetting bearer <eth:syzkaller0>
[  247.986572][T15140] tipc: Disabling bearer <eth:syzkaller0>
[  248.034347][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'.
[  248.532094][T15172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.535543][T15172] syzkaller0: entered promiscuous mode
[  248.537678][T15172] syzkaller0: entered allmulticast mode
[  248.558123][T15172] tipc: Resetting bearer <eth:syzkaller0>
[  248.562216][T15171] tipc: Resetting bearer <eth:syzkaller0>
[  248.575883][T15171] tipc: Disabling bearer <eth:syzkaller0>
[  248.804074][T15196] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3930'.
[  248.938407][T15210] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.005530][T15210] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.056939][T15210] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.113278][T15210] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.173261][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.185119][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.199879][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.211453][ T5715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.058802][T15261] lo speed is unknown, defaulting to 1000
[  250.066559][T15261] lo speed is unknown, defaulting to 1000
[  250.483979][T15284] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3966'.
[  250.534514][T15284] lo speed is unknown, defaulting to 1000
[  250.548270][T15284] lo speed is unknown, defaulting to 1000
[  250.775098][T15295] lo speed is unknown, defaulting to 1000
[  250.778905][T15295] lo speed is unknown, defaulting to 1000
[  251.614116][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'.
[  251.711244][T15337] ieee802154 phy1 wpan1: encryption failed: -22
[  251.852085][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3996'.
[  251.906063][T15357] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3998'.
[  251.949061][T15359] syzkaller0: entered promiscuous mode
[  251.951346][T15359] syzkaller0: entered allmulticast mode
[  253.523929][T15375] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  253.657769][T15390] netlink: 'syz.2.4009': attribute type 1 has an invalid length.
[  253.661578][T15388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4008'.
[  253.701111][T15388] batman_adv: batadv0: Adding interface: ip6gretap2
[  253.703732][T15388] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.715240][T15388] batman_adv: batadv0: Interface activated: ip6gretap2
[  253.730173][T15394] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  254.653857][T15465] syzkaller0: entered promiscuous mode
[  254.656253][T15465] syzkaller0: entered allmulticast mode
[  255.107816][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4046'.
[  255.444407][T15483] netlink: 'syz.2.4052': attribute type 4 has an invalid length.
[  255.470066][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.491260][T15487] netlink: 'syz.2.4052': attribute type 4 has an invalid length.
[  255.592948][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'.
[  255.696347][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'.
[  255.720765][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  256.411340][ T5901] lo speed is unknown, defaulting to 1000
[  256.413671][ T5901] syz0: Port: 1 Link DOWN
[  256.413841][  T794] lo speed is unknown, defaulting to 1000
[  256.420913][T11719] lo speed is unknown, defaulting to 1000
[  256.426272][ T5901] lo speed is unknown, defaulting to 1000
[  256.437812][T15496] lo speed is unknown, defaulting to 1000
[  256.442219][T15496] lo speed is unknown, defaulting to 1000
[  256.554357][T15511] ==================================================================
[  256.557031][T15511] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  256.557941][T15508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4061'.
[  256.560126][T15511] Read of size 2 at addr ffff88802ac96e42 by task syz.0.4062/15511
[  256.560146][T15511] 
[  256.560157][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.0.4062 Not tainted syzkaller #0 PREEMPT(full) 
[  256.560172][T15511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.560182][T15511] Call Trace:
[  256.560189][T15511]  <TASK>
[  256.560197][T15511]  dump_stack_lvl+0x189/0x250
[  256.560218][T15511]  ? __kasan_check_byte+0x12/0x40
[  256.560238][T15511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.560253][T15511]  ? lock_release+0x4b/0x3e0
[  256.560270][T15511]  ? __virt_addr_valid+0x4a5/0x5c0
[  256.560284][T15511]  print_report+0xca/0x240
[  256.560297][T15511]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  256.560311][T15511]  kasan_report+0x118/0x150
[  256.560352][T15511]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  256.560367][T15511]  __xfrm_state_lookup+0x6ad/0x8d0
[  256.560384][T15511]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  256.560405][T15511]  xfrm_state_add+0x27d/0xc40
[  256.560425][T15511]  xfrm_add_sa+0x35a1/0x4070
[  256.560447][T15511]  ? __pfx_xfrm_add_sa+0x10/0x10
[  256.560462][T15511]  ? apparmor_capable+0x137/0x1b0
[  256.560480][T15511]  ? __nla_parse+0x40/0x60
[  256.560502][T15511]  xfrm_user_rcv_msg+0x7a3/0xab0
[  256.560522][T15511]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  256.560545][T15511]  ? __pfx___mutex_trylock_common+0x10/0x10
[  256.560555][T15511]  ? rcu_is_watching+0x15/0xb0
[  256.560564][T15511]  ? trace_contention_end+0x39/0x120
[  256.560573][T15511]  ? __mutex_lock+0x335/0x1350
[  256.560583][T15511]  netlink_rcv_skb+0x208/0x470
[  256.560591][T15511]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  256.560602][T15511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  256.560611][T15511]  ? netlink_deliver_tap+0x2e/0x1b0
[  256.560619][T15511]  ? netlink_deliver_tap+0x2e/0x1b0
[  256.560626][T15511]  xfrm_netlink_rcv+0x79/0x90
[  256.560637][T15511]  netlink_unicast+0x82f/0x9e0
[  256.560650][T15511]  ? __pfx_netlink_unicast+0x10/0x10
[  256.560662][T15511]  ? netlink_sendmsg+0x642/0xb30
[  256.560669][T15511]  ? skb_put+0x11b/0x210
[  256.560679][T15511]  netlink_sendmsg+0x805/0xb30
[  256.560688][T15511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.560696][T15511]  ? aa_sock_msg_perm+0xf1/0x1d0
[  256.560703][T15511]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  256.560711][T15511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.560718][T15511]  __sock_sendmsg+0x21c/0x270
[  256.560731][T15511]  ____sys_sendmsg+0x505/0x830
[  256.560746][T15511]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.560762][T15511]  ? import_iovec+0x74/0xa0
[  256.560773][T15511]  ___sys_sendmsg+0x21f/0x2a0
[  256.560787][T15511]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.560814][T15511]  ? __fget_files+0x2a/0x420
[  256.560822][T15511]  ? __fget_files+0x3a0/0x420
[  256.560829][T15511]  __x64_sys_sendmsg+0x19b/0x260
[  256.560838][T15511]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  256.560850][T15511]  ? do_syscall_64+0xbe/0x3b0
[  256.560859][T15511]  do_syscall_64+0xfa/0x3b0
[  256.560893][T15511]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.560901][T15511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.560910][T15511]  ? exc_page_fault+0x9f/0xf0
[  256.560917][T15511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.560926][T15511] RIP: 0033:0x7f7f1d78ebe9
[  256.560936][T15511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.560943][T15511] RSP: 002b:00007f7f1e550038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.560953][T15511] RAX: ffffffffffffffda RBX: 00007f7f1d9c5fa0 RCX: 00007f7f1d78ebe9
[  256.560960][T15511] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000004
[  256.560965][T15511] RBP: 00007f7f1d811e19 R08: 0000000000000000 R09: 0000000000000000
[  256.560970][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.560975][T15511] R13: 00007f7f1d9c6038 R14: 00007f7f1d9c5fa0 R15: 00007ffd6d35cad8
[  256.560984][T15511]  </TASK>
[  256.560988][T15511] 
[  256.566330][T15508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.567442][T15511] Allocated by task 13993:
[  256.567451][T15511]  kasan_save_track+0x3e/0x80
[  256.568413][T15508] IPv6: NLM_F_CREATE should be set when creating new route
[  256.572192][T15511]  __kasan_slab_alloc+0x6c/0x80
[  256.572218][T15511]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  256.572237][T15511]  xfrm_state_alloc+0x24/0x2f0
[  256.572250][T15511]  xfrm_state_find+0x37d4/0x5400
[  256.572259][T15511]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  256.572270][T15511]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  256.572281][T15511]  xfrm_lookup_route+0x3c/0x1c0
[  256.572290][T15511]  udp_sendmsg+0x142e/0x2170
[  256.572301][T15511]  __sock_sendmsg+0x19c/0x270
[  256.572311][T15511]  ____sys_sendmsg+0x52d/0x830
[  256.572318][T15511]  ___sys_sendmsg+0x21f/0x2a0
[  256.576377][T15508] IPv6: NLM_F_CREATE should be set when creating new route
[  256.577290][T15511]  __sys_sendmmsg+0x227/0x430
[  256.730316][T15511]  __x64_sys_sendmmsg+0xa0/0xc0
[  256.732081][T15511]  do_syscall_64+0xfa/0x3b0
[  256.733586][T15511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.735261][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'.
[  256.735444][T15511] 
[  256.735449][T15511] Freed by task 11718:
[  256.740467][T15511]  kasan_save_track+0x3e/0x80
[  256.741976][T15511]  kasan_save_free_info+0x46/0x50
[  256.743503][T15511]  __kasan_slab_free+0x5b/0x80
[  256.745023][T15511]  kmem_cache_free+0x18f/0x400
[  256.746663][T15511]  xfrm_state_gc_task+0x52d/0x6b0
[  256.748224][T15511]  process_scheduled_works+0xae1/0x17b0
[  256.750076][T15511]  worker_thread+0x8a0/0xda0
[  256.751976][T15511]  kthread+0x711/0x8a0
[  256.753356][T15511]  ret_from_fork+0x3fc/0x770
[  256.754982][T15511]  ret_from_fork_asm+0x1a/0x30
[  256.756618][T15511] 
[  256.757490][T15511] The buggy address belongs to the object at ffff88802ac96d00
[  256.757490][T15511]  which belongs to the cache xfrm_state of size 928
[  256.762253][T15511] The buggy address is located 322 bytes inside of
[  256.762253][T15511]  freed 928-byte region [ffff88802ac96d00, ffff88802ac970a0)
[  256.766806][T15511] 
[  256.767595][T15511] The buggy address belongs to the physical page:
[  256.769909][T15511] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ac94
[  256.773344][T15511] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  256.776320][T15511] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  256.778815][T15511] page_type: f5(slab)
[  256.780321][T15511] raw: 00fff00000000040 ffff88801d74d000 ffffea000489b400 0000000000000002
[  256.783100][T15511] raw: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  256.785786][T15511] head: 00fff00000000040 ffff88801d74d000 ffffea000489b400 0000000000000002
[  256.788673][T15511] head: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  256.791599][T15511] head: 00fff00000000002 ffffea0000ab2501 00000000ffffffff 00000000ffffffff
[  256.794399][T15511] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  256.797253][T15511] page dumped because: kasan: bad access detected
[  256.799308][T15511] page_owner tracks the page as allocated
[  256.801429][T15511] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8335, tgid 8334 (syz.1.950), ts 115949726246, free_ts 109791696412
[  256.807658][T15511]  post_alloc_hook+0x240/0x2a0
[  256.809241][T15511]  get_page_from_freelist+0x21e4/0x22c0
[  256.811097][T15511]  __alloc_frozen_pages_noprof+0x181/0x370
[  256.812984][T15511]  alloc_pages_mpol+0x232/0x4a0
[  256.814582][T15511]  allocate_slab+0x8a/0x370
[  256.816082][T15511]  ___slab_alloc+0xbeb/0x1410
[  256.817649][T15511]  kmem_cache_alloc_noprof+0x283/0x3c0
[  256.819481][T15511]  xfrm_state_alloc+0x24/0x2f0
[  256.821104][T15511]  xfrm_state_find+0x37d4/0x5400
[  256.822713][T15511]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  256.824748][T15511]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  256.826780][T15511]  xfrm_lookup_route+0x3c/0x1c0
[  256.828687][T15511]  rawv6_sendmsg+0xdab/0x1820
[  256.830541][T15511]  __sock_sendmsg+0x19c/0x270
[  256.832390][T15511]  ____sys_sendmsg+0x52d/0x830
[  256.834274][T15511]  ___sys_sendmsg+0x21f/0x2a0
[  256.836118][T15511] page last free pid 5852 tgid 5852 stack trace:
[  256.838577][T15511]  __free_frozen_pages+0xbc4/0xd30
[  256.840578][T15511]  __put_partials+0x156/0x1a0
[  256.842434][T15511]  put_cpu_partial+0x17c/0x250
[  256.844277][T15511]  __slab_free+0x2d5/0x3c0
[  256.845994][T15511]  qlist_free_all+0x97/0x140
[  256.847786][T15511]  kasan_quarantine_reduce+0x148/0x160
[  256.849944][T15511]  __kasan_slab_alloc+0x22/0x80
[  256.851875][T15511]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  256.854024][T15511]  getname_flags+0xb8/0x540
[  256.855875][T15511]  __x64_sys_unlink+0x3a/0x50
[  256.857697][T15511]  do_syscall_64+0xfa/0x3b0
[  256.859488][T15511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.861860][T15511] 
[  256.862814][T15511] Memory state around the buggy address:
[  256.865046][T15511]  ffff88802ac96d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.868278][T15511]  ffff88802ac96d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.871495][T15511] >ffff88802ac96e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.874619][T15511]                                            ^
[  256.877041][T15511]  ffff88802ac96e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.880127][T15511]  ffff88802ac96f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.883235][T15511] ==================================================================
[  256.886665][T15511] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  256.889507][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.0.4062 Not tainted syzkaller #0 PREEMPT(full) 
[  256.893239][T15511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.897077][T15511] Call Trace:
[  256.898388][T15511]  <TASK>
[  256.899280][T15511]  dump_stack_lvl+0x99/0x250
[  256.900721][T15511]  ? __asan_memcpy+0x40/0x70
[  256.902370][T15511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.904128][T15511]  ? __pfx__printk+0x10/0x10
[  256.905699][T15511]  vpanic+0x281/0x750
[  256.906955][T15511]  ? __pfx_vpanic+0x10/0x10
[  256.908524][T15511]  ? irqentry_exit+0x74/0x90
[  256.910141][T15511]  panic+0xb9/0xc0
[  256.911391][T15511]  ? __pfx_panic+0x10/0x10
[  256.912851][T15511]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  256.914900][T15511]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  256.917235][T15511]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  256.919387][T15511]  check_panic_on_warn+0x89/0xb0
[  256.921349][T15511]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  256.923112][T15511]  end_report+0x78/0x160
[  256.924398][T15511]  kasan_report+0x129/0x150
[  256.925775][T15511]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  256.927418][T15511]  __xfrm_state_lookup+0x6ad/0x8d0
[  256.929011][T15511]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  256.930712][T15511]  xfrm_state_add+0x27d/0xc40
[  256.932262][T15511]  xfrm_add_sa+0x35a1/0x4070
[  256.933916][T15511]  ? __pfx_xfrm_add_sa+0x10/0x10
[  256.935478][T15511]  ? apparmor_capable+0x137/0x1b0
[  256.937020][T15511]  ? __nla_parse+0x40/0x60
[  256.938376][T15511]  xfrm_user_rcv_msg+0x7a3/0xab0
[  256.939888][T15511]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  256.941799][T15511]  ? __pfx___mutex_trylock_common+0x10/0x10
[  256.943618][T15511]  ? rcu_is_watching+0x15/0xb0
[  256.945279][T15511]  ? trace_contention_end+0x39/0x120
[  256.946988][T15511]  ? __mutex_lock+0x335/0x1350
[  256.948444][T15511]  netlink_rcv_skb+0x208/0x470
[  256.949973][T15511]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  256.951934][T15511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  256.953772][T15511]  ? netlink_deliver_tap+0x2e/0x1b0
[  256.955459][T15511]  ? netlink_deliver_tap+0x2e/0x1b0
[  256.957156][T15511]  xfrm_netlink_rcv+0x79/0x90
[  256.958729][T15511]  netlink_unicast+0x82f/0x9e0
[  256.960344][T15511]  ? __pfx_netlink_unicast+0x10/0x10
[  256.962080][T15511]  ? netlink_sendmsg+0x642/0xb30
[  256.963657][T15511]  ? skb_put+0x11b/0x210
[  256.965049][T15511]  netlink_sendmsg+0x805/0xb30
[  256.966587][T15511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.968375][T15511]  ? aa_sock_msg_perm+0xf1/0x1d0
[  256.969988][T15511]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  256.971696][T15511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.973571][T15511]  __sock_sendmsg+0x21c/0x270
[  256.975243][T15511]  ____sys_sendmsg+0x505/0x830
[  256.976910][T15511]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.978856][T15511]  ? import_iovec+0x74/0xa0
[  256.980626][T15511]  ___sys_sendmsg+0x21f/0x2a0
[  256.982510][T15511]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.984607][T15511]  ? __fget_files+0x2a/0x420
[  256.986447][T15511]  ? __fget_files+0x3a0/0x420
[  256.988330][T15511]  __x64_sys_sendmsg+0x19b/0x260
[  256.990301][T15511]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  256.992453][T15511]  ? do_syscall_64+0xbe/0x3b0
[  256.994397][T15511]  do_syscall_64+0xfa/0x3b0
[  256.996298][T15511]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.998385][T15511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.000816][T15511]  ? exc_page_fault+0x9f/0xf0
[  257.002718][T15511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.005072][T15511] RIP: 0033:0x7f7f1d78ebe9
[  257.006900][T15511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.014639][T15511] RSP: 002b:00007f7f1e550038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.018018][T15511] RAX: ffffffffffffffda RBX: 00007f7f1d9c5fa0 RCX: 00007f7f1d78ebe9
[  257.021284][T15511] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000004
[  257.024503][T15511] RBP: 00007f7f1d811e19 R08: 0000000000000000 R09: 0000000000000000
[  257.027559][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.030684][T15511] R13: 00007f7f1d9c6038 R14: 00007f7f1d9c5fa0 R15: 00007ffd6d35cad8
[  257.033855][T15511]  </TASK>
[  257.035909][T15511] Kernel Offset: disabled
[  257.037663][T15511] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:13:30  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000017775 RDI=0000000000017776 RBP=00000000000003f8 RSP=ffffc900032fe6d0
R8 =ffff8881065f0237 R9 =1ffff11020cbe046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018fb R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4d448e76c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=00000000450ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4d43b97498 00007f4d43b97470 XMM03=00007f4d43b974a8 00007f4d43b974a0
XMM04=00007f4d446fd100 00007f4d43b97460 XMM05=00007f4d43b97478 00007f4d43b974c0
XMM06=00007f4d43b974b8 00007f4d43b974b0 XMM07=00007f4d43b974a8 00007f4d43b974a0
XMM08=0000000000000000 00007f4d43a12ee7 XMM09=0000000000000000 00007f4d43a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a02395 RBX=ffffffff81a02354 RCX=ffff888041428000 RDX=0000000000000002
RSI=000000000003486f RDI=0000000000034870 RBP=ffffc90002f5eef0 RSP=ffffc90002f5edd8
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff920005ebdc0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81bfabc7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7f1e5506c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7f1e54ffc8 CR3=0000000109ea6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7f1d997498 00007f7f1d997470 XMM03=00007f7f1d9974a8 00007f7f1d9974a0
XMM04=00007f7f1e4fd100 00007f7f1d997460 XMM05=00007f7f1d997478 00007f7f1d9974c0
XMM06=00007f7f1d9974b8 00007f7f1d9974b0 XMM07=00007f7f1d9974a8 00007f7f1d9974a0
XMM08=0000000000000000 00007f7f1d812ee7 XMM09=0000000000000000 00007f7f1d812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
