last executing test programs:

396.968144ms ago: executing program 2 (id=4425):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403f0000180100002020782500000000002020207b1a00fe000000007b0a0000000000000701b092f8ffffffb702000008000000b70300000f000000a500feff0600000095"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

341.350907ms ago: executing program 2 (id=4427):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)

341.262204ms ago: executing program 2 (id=4428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x94}}, 0x0)

341.133187ms ago: executing program 0 (id=4429):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000001180))

280.962013ms ago: executing program 0 (id=4431):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="560a4ce0b75aae475c717fdc6d1f124ba01389c6d3aed3996d2fc250f097cca776", 0x21)

280.69872ms ago: executing program 2 (id=4432):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000000f707000600000014"], 0xca)

280.516908ms ago: executing program 0 (id=4433):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

211.956859ms ago: executing program 1 (id=4435):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
close(0x3)

160.627637ms ago: executing program 1 (id=4436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040)

160.239395ms ago: executing program 0 (id=4437):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x60001}, 0x8)
bind$bt_sco(r0, &(0x7f0000000100), 0x8)
listen(r0, 0x0)
shutdown(r0, 0x0)

108.524947ms ago: executing program 1 (id=4438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4106, 0x100a}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x7}, 0x80000002}], 0x4, 0x0, 0x0)

108.271151ms ago: executing program 0 (id=4439):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
unshare(0x400)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x811)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCGNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x21})

107.796711ms ago: executing program 2 (id=4440):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0)

52.077623ms ago: executing program 2 (id=4441):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000)

51.777856ms ago: executing program 1 (id=4442):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

7.317358ms ago: executing program 0 (id=4443):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8001, 0x0, 0x1}, 0x50)

5.578795ms ago: executing program 1 (id=4444):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6)
write(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 1 (id=4445):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0xa00}]}}}], 0x38}, 0x0)

kernel console output (not intermixed with test programs):

 openvswitch: netlink: IP tunnel TTL not specified.
[   60.405627][ T5990] syzkaller0: tun_chr_ioctl cmd 1074025677
[   60.412519][ T5990] syzkaller0: linktype set to 1
[   60.566914][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.43'.
[   60.572374][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.43'.
[   60.578043][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.43'.
[   60.585967][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.43'.
[   60.699747][ T6012] tipc: Started in network mode
[   60.703679][ T6012] tipc: Node identity a216103352ea, cluster identity 4711
[   60.714042][ T6012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.730116][ T6012] syzkaller0: entered promiscuous mode
[   60.732514][ T6012] syzkaller0: entered allmulticast mode
[   60.763408][ T6015] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET)
[   60.792281][ T6012] tipc: Resetting bearer <eth:syzkaller0>
[   60.802229][ T6010] tipc: Resetting bearer <eth:syzkaller0>
[   60.819194][ T6010] tipc: Disabling bearer <eth:syzkaller0>
[   60.838599][ T6021] openvswitch: netlink: IP tunnel dst address not specified
[   60.911524][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'.
[   61.189794][   T12] nci: nci_rx_work: unknown MT 0x1
[   61.386740][ T6053] syzkaller1: entered promiscuous mode
[   61.394780][ T6053] syzkaller1: entered allmulticast mode
[   61.590135][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.704128][ T5238] Bluetooth: hci0: command tx timeout
[   61.785923][ T5238] Bluetooth: hci1: command tx timeout
[   61.873473][ T5238] Bluetooth: hci2: command tx timeout
[   63.783758][ T5238] Bluetooth: hci0: command tx timeout
[   63.864258][ T5238] Bluetooth: hci1: command tx timeout
[   63.944999][ T5238] Bluetooth: hci2: command 0x0419 tx timeout
[   65.312862][ T6125] netlink: 'syz.0.91': attribute type 6 has an invalid length.
[   65.317693][ T6125] netlink: 'syz.0.91': attribute type 6 has an invalid length.
[   65.320445][ T6125] Zero length message leads to an empty skb
[   65.417879][ T6129] tap0: tun_chr_ioctl cmd 1074025680
[   65.422257][ T6129] tipc: Started in network mode
[   65.424915][ T6129] tipc: Node identity 6215ad1a15c1, cluster identity 4711
[   65.428472][ T6129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.432878][ T6129] D: renamed from syzkaller0
[   65.438646][ T6129] tipc: Disabling bearer <eth:syzkaller0>
[   65.549854][ T6142] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   65.757689][   T33] audit: type=1800 audit(1756437399.000:2): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.101" name="memory.events" dev="tmpfs" ino=128 res=0 errno=0
[   66.027205][ T6165] warning: `syz.0.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.036376][ T5238] Bluetooth: hci2: command 0x0419 tx timeout
[   66.050846][ T6165] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   66.114055][ T6173] __nla_validate_parse: 2 callbacks suppressed
[   66.114070][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   66.204600][ T6180] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.241220][ T6182] delete_channel: no stack
[   66.410327][ T6191] geneve2: entered promiscuous mode
[   66.432106][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[   67.549845][ T6225] netlink: 96 bytes leftover after parsing attributes in process `syz.0.135'.
[   68.030635][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'.
[   68.103274][ T5238] Bluetooth: hci2: command 0x0419 tx timeout
[   68.192560][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'.
[   68.237919][ T6279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.161'.
[   68.356502][  T793] cfg80211: failed to load regulatory.db
[   68.375272][ T6289] netlink: 84 bytes leftover after parsing attributes in process `syz.0.166'.
[   68.379185][ T6289] netlink: 84 bytes leftover after parsing attributes in process `syz.0.166'.
[   68.459190][ T6292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.534215][ T6297] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   68.650646][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.171'.
[   68.665916][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.2.171'.
[   68.744598][ T1399] wlan1: Trigger new scan to find an IBSS to join
[   68.780963][ T6313] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   68.785109][ T6313] netlink: 'syz.2.173': attribute type 4 has an invalid length.
[   69.865018][ T6358] lo speed is unknown, defaulting to 1000
[   69.869092][ T6358] lo speed is unknown, defaulting to 1000
[   69.872646][ T6358] lo speed is unknown, defaulting to 1000
[   69.926901][ T6359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.067613][ T6358] infiniband syz0: set active
[   70.069942][ T6358] infiniband syz0: added lo
[   70.092704][  T793] lo speed is unknown, defaulting to 1000
[   70.109612][ T6358] RDS/IB: syz0: added
[   70.111514][ T6358] smc: adding ib device syz0 with port count 1
[   70.114320][ T6358] smc:    ib device syz0 port 1 has pnetid 
[   70.117235][  T793] lo speed is unknown, defaulting to 1000
[   70.121227][ T6358] lo speed is unknown, defaulting to 1000
[   70.238861][ T6358] lo speed is unknown, defaulting to 1000
[   70.347576][ T6363] lo speed is unknown, defaulting to 1000
[   70.442634][ T6358] lo speed is unknown, defaulting to 1000
[   70.919003][ T6404] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.923697][ T6404] bond1: (slave bond2): Enslaving as an active interface with an up link
[   70.938156][ T6408] bridge_slave_0: left allmulticast mode
[   70.940361][ T6408] bridge_slave_0: left promiscuous mode
[   70.943033][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.949131][ T6408] bridge_slave_1: left allmulticast mode
[   70.951199][ T6408] bridge_slave_1: left promiscuous mode
[   70.956977][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.965455][ T6408] bond0: (slave bond_slave_0): Releasing backup interface
[   70.971912][ T6408] bond0: (slave bond_slave_1): Releasing backup interface
[   70.982865][ T6408] team0: Port device team_slave_0 removed
[   70.991628][ T6408] team0: Port device team_slave_1 removed
[   70.996556][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.999866][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.005646][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.010430][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.022462][ T5909] lo speed is unknown, defaulting to 1000
[   71.030469][ T6402] bond1 (unregistering): (slave bond2): Releasing backup interface
[   71.041030][ T6402] bond1 (unregistering): Released all slaves
[   71.069085][ T6411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.073554][ T6406] syzkaller0: entered promiscuous mode
[   71.075914][ T6406] syzkaller0: entered allmulticast mode
[   71.092675][ T6406] tipc: Resetting bearer <eth:syzkaller0>
[   71.100298][ T6405] tipc: Resetting bearer <eth:syzkaller0>
[   71.112855][ T6405] tipc: Disabling bearer <eth:syzkaller0>
[   71.146245][ T6408] ieee802154 phy0 wpan0: encryption failed: -90
[   71.162280][ T6408] team0: Mode changed to "loadbalance"
[   71.207814][ T6416] __nla_validate_parse: 11 callbacks suppressed
[   71.207823][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   71.243042][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.245831][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.252523][ T6416] team0: No ports can be present during mode change
[   71.261625][ T6416] vlan0: entered promiscuous mode
[   71.267409][ T6420] Bluetooth: MGMT ver 1.23
[   71.269634][ T6416] team0: Port device vlan0 added
[   71.279974][ T6416] tipc: Started in network mode
[   71.281604][ T6416] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   71.287114][ T6416] tipc: Enabled bearer <eth:team0>, priority 0
[   71.591126][ T6448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.595997][ T6448] syzkaller0: entered promiscuous mode
[   71.598267][ T6448] syzkaller0: entered allmulticast mode
[   71.611035][ T6448] tipc: Resetting bearer <eth:syzkaller0>
[   71.621906][ T6447] tipc: Resetting bearer <eth:syzkaller0>
[   71.633886][ T6447] tipc: Disabling bearer <eth:syzkaller0>
[   71.823580][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[   71.855018][ T6465] Illegal XDP return value 4294967283 on prog  (id 41) dev N/A, expect packet loss!
[   71.992812][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'.
[   72.397245][ T6524] netlink: 'syz.2.262': attribute type 10 has an invalid length.
[   72.400602][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.262'.
[   72.404122][ T5909] tipc: Node number set to 11578026
[   72.417328][ T6524] team0: Port device geneve0 added
[   72.426175][ T6524] syz.2.262 (6524) used greatest stack depth: 17728 bytes left
[   72.580250][ T6539] netlink: 'syz.2.269': attribute type 1 has an invalid length.
[   72.586422][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[   72.597598][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.269'.
[   72.808685][ T6558] netlink: 'syz.0.277': attribute type 29 has an invalid length.
[   73.281215][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[   73.327497][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[   73.338281][ T6612] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   73.340868][ T6612] team0: Device ipvlan2 is already an upper device of the team interface
[   73.599894][ T6638] ip6gre1: entered allmulticast mode
[   73.706035][   T32] wlan1: Trigger new scan to find an IBSS to join
[   74.525875][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[   74.630678][ T6729] atomic_op ffff88803506c998 conn xmit_atomic 0000000000000000
[   74.637487][   T32] wlan1: Creating new IBSS network, BSSID b2:56:a4:10:7c:8f
[   75.164386][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'.
[   75.287511][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.292016][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.298457][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.304221][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.937464][ T6750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.940058][ T6750] syzkaller0: entered promiscuous mode
[   75.941919][ T6750] syzkaller0: entered allmulticast mode
[   75.951742][ T6750] tipc: Resetting bearer <eth:syzkaller0>
[   75.955986][ T6749] tipc: Resetting bearer <eth:syzkaller0>
[   75.962486][ T6749] tipc: Disabling bearer <eth:syzkaller0>
[   76.010596][ T6758] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[   76.284950][ T6786] netlink: 'syz.0.382': attribute type 3 has an invalid length.
[   76.390758][ T6800] sctp: [Deprecated]: syz.0.390 (pid 6800) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.390758][ T6800] Use struct sctp_sack_info instead
[   76.652544][ T6828] __nla_validate_parse: 4 callbacks suppressed
[   76.652554][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'.
[   77.008444][ T6866] netlink: 'syz.1.422': attribute type 6 has an invalid length.
[   77.012403][ T6866] netlink: 'syz.1.422': attribute type 6 has an invalid length.
[   77.237492][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'.
[   77.952199][ T6898] netem: change failed
[   78.127422][ T6908] netlink: 176 bytes leftover after parsing attributes in process `syz.2.441'.
[   78.257806][ T6921] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.446'.
[   78.420692][ T6933] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[   78.423787][ T6933] netlink: 'syz.1.453': attribute type 4 has an invalid length.
[   78.426782][ T6933] netlink: 204 bytes leftover after parsing attributes in process `syz.1.453'.
[   78.427478][ T6934] netlink: 128 bytes leftover after parsing attributes in process `syz.2.452'.
[   78.655744][ T6894] Bluetooth: hci0: Opcode 0x080f failed: -4
[   78.996394][ T6953] lo speed is unknown, defaulting to 1000
[   79.105860][ T6963] netlink: 268 bytes leftover after parsing attributes in process `syz.2.465'.
[   79.391306][ T6978] netlink: 'syz.2.472': attribute type 1 has an invalid length.
[   79.407852][ T6974] syzkaller0: entered promiscuous mode
[   79.410257][ T6974] syzkaller0: entered allmulticast mode
[   79.943995][ T5238] Bluetooth: hci0: command 0x080f tx timeout
[   80.475480][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'.
[   80.779086][ T7045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.504'.
[   81.204418][ T7099] netlink: 'syz.2.524': attribute type 1 has an invalid length.
[   81.207102][ T7099] netlink: 208 bytes leftover after parsing attributes in process `syz.2.524'.
[   81.210031][ T7099] netlink: 'syz.2.524': attribute type 1 has an invalid length.
[   81.212649][ T7099] netlink: 'syz.2.524': attribute type 2 has an invalid length.
[   81.240593][ T7103] netlink: 'syz.2.525': attribute type 13 has an invalid length.
[   81.244116][ T7103] netlink: 'syz.2.525': attribute type 17 has an invalid length.
[   81.258895][ T7104] netlink: 'syz.1.526': attribute type 1 has an invalid length.
[   81.290913][ T7103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.331871][ T7106] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   81.336915][ T7106] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   81.377829][ T7104] gretap1: entered promiscuous mode
[   81.382710][ T7104] bond1: (slave gretap1): making interface the new active one
[   81.387966][ T7104] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   81.455739][ T7114] vcan0: tx drop: invalid da for name 0x0000000000000003
[   81.711575][ T7130] netlink: 'syz.1.537': attribute type 1 has an invalid length.
[   81.716178][ T7130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.537'.
[   82.126098][ T7172] syzkaller1: entered promiscuous mode
[   82.128493][ T7172] syzkaller1: entered allmulticast mode
[   82.316743][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.325650][ T7184] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   82.626925][ T7204] lo speed is unknown, defaulting to 1000
[   82.695806][ T7215] netlink: 224 bytes leftover after parsing attributes in process `syz.0.574'.
[   82.757635][ T7215] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.775334][ T7215] bond1: (slave gretap1): making interface the new active one
[   82.780956][ T7215] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   83.084177][ T7240] netlink: 204 bytes leftover after parsing attributes in process `syz.0.585'.
[   83.087791][ T7240] NCSI netlink: No device for ifindex 0
[   83.115180][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.235242][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'.
[   83.471948][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'.
[   83.479412][ T7293] nbd: couldn't find a device at index 65546
[   84.405191][ T7357] validate_nla: 6 callbacks suppressed
[   84.405199][ T7357] netlink: 'syz.0.637': attribute type 64 has an invalid length.
[   84.599756][ T7368] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   84.606453][ T7368] macvtap1: entered allmulticast mode
[   84.608374][ T7368] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   84.620223][ T7368] batman_adv: batadv0: Adding interface: macvtap1
[   84.622899][ T7368] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.643131][ T7368] batman_adv: batadv0: Interface activated: macvtap1
[   84.733951][ T7376] tipc: New replicast peer: 255.255.255.255
[   84.736701][ T7376] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.795789][ T7380] vlan2: entered promiscuous mode
[   84.797981][ T7380] bond0: entered promiscuous mode
[   84.799874][ T7380] bond_slave_0: entered promiscuous mode
[   84.802370][ T7380] bond_slave_1: entered promiscuous mode
[   84.957682][ T7390] netlink: 'syz.1.651': attribute type 1 has an invalid length.
[   84.996427][ T7396] veth0: entered promiscuous mode
[   84.999928][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'.
[   85.329244][ T7422] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[   85.332473][ T7422] netlink: 228 bytes leftover after parsing attributes in process `syz.2.666'.
[   85.355530][ T7424] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   85.359343][ T7424] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   85.456597][ T7430] netlink: 'syz.1.670': attribute type 1 has an invalid length.
[   85.460719][ T7430] netlink: 76 bytes leftover after parsing attributes in process `syz.1.670'.
[   85.678193][ T7453] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.681'.
[   85.853289][  T792] tipc: Node number set to 2010426650
[   86.035144][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.696'.
[   86.201114][ T7494] netlink: 'syz.0.701': attribute type 10 has an invalid length.
[   86.209756][ T7494] bridge0: port 3(macsec0) entered blocking state
[   86.212836][ T7494] bridge0: port 3(macsec0) entered disabled state
[   86.216615][ T7494] macsec0: entered allmulticast mode
[   86.219059][ T7494] veth1_macvtap: entered allmulticast mode
[   86.225404][ T7494] macsec0: entered promiscuous mode
[   86.228753][ T7494] bridge0: port 3(macsec0) entered blocking state
[   86.232140][ T7494] bridge0: port 3(macsec0) entered forwarding state
[   89.527795][ T7524] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.531610][ T7524] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.604086][ T7531] sch_fq: defrate 0 ignored.
[   89.837272][ T7543] __nla_validate_parse: 1 callbacks suppressed
[   89.837284][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'.
[   89.952939][ T7541] netlink: 'syz.2.721': attribute type 4 has an invalid length.
[   89.969850][ T7541] netlink: 'syz.2.721': attribute type 4 has an invalid length.
[   89.999277][ T7541] IPVS: length: 24 != 55320
[   90.119281][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'.
[   90.129044][ T7557] bond_slave_0: entered promiscuous mode
[   90.131207][ T7557] bond_slave_1: entered promiscuous mode
[   90.133278][ T7557] batadv0: entered promiscuous mode
[   90.135991][ T7557] macvtap1: entered promiscuous mode
[   90.137884][ T7557] bond0: entered promiscuous mode
[   90.140064][ T7557] macvtap1: entered allmulticast mode
[   90.141923][ T7557] bond0: entered allmulticast mode
[   90.144364][ T7557] bond_slave_0: entered allmulticast mode
[   90.146404][ T7557] bond_slave_1: entered allmulticast mode
[   90.148300][ T7557] batadv0: entered allmulticast mode
[   90.150823][ T7557] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   90.248080][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'.
[   90.271635][ T7568] bridge_slave_1: left allmulticast mode
[   90.275002][ T7568] bridge_slave_1: left promiscuous mode
[   90.277597][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.285593][ T7568] bridge_slave_0: left allmulticast mode
[   90.288110][ T7568] bridge_slave_0: left promiscuous mode
[   90.290914][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.500358][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[   90.518600][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[   90.527018][ T7584] bridge1: entered promiscuous mode
[   90.528983][ T7584] macsec1: entered promiscuous mode
[   90.530891][ T7584] macsec1: entered allmulticast mode
[   90.532850][ T7584] bridge1: entered allmulticast mode
[   90.536507][ T7584] bridge1: port 1(macsec1) entered blocking state
[   90.539174][ T7584] bridge1: port 1(macsec1) entered disabled state
[   90.546976][ T7584] bridge1: left allmulticast mode
[   90.549226][ T7584] bridge1: left promiscuous mode
[   91.130021][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'.
[   91.160138][ T7599] syzkaller1: entered promiscuous mode
[   91.162473][ T7599] syzkaller1: entered allmulticast mode
[   91.358027][ T7602] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   91.672396][ T7610] sctp: [Deprecated]: syz.2.751 (pid 7610) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.672396][ T7610] Use struct sctp_sack_info instead
[   91.762828][ T7614] netlink: 'syz.0.750': attribute type 10 has an invalid length.
[   91.778432][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.789169][ T7614] batadv0: entered promiscuous mode
[   91.792196][ T7614] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   92.316083][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.325309][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.334622][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.337757][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.367442][ T7651] batman_adv: batadv0: Interface deactivated: macvtap1
[   92.370449][ T7651] batman_adv: batadv0: Removing interface: macvtap1
[   92.418362][ T7651] bond0: (slave batadv0): Releasing backup interface
[   92.425534][ T7651] batadv0 (unregistering): left promiscuous mode
[   92.845734][ T7693] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[   93.177351][ T7707] openvswitch: netlink: Multiple metadata blocks provided
[   93.415975][ T7723] netlink: 'syz.1.797': attribute type 16 has an invalid length.
[   93.419322][ T7723] netlink: 'syz.1.797': attribute type 3 has an invalid length.
[   93.422740][ T7723] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.797'.
[   93.708414][ T7735] netlink: 'syz.1.804': attribute type 3 has an invalid length.
[   93.711990][ T7735] netlink: 'syz.1.804': attribute type 1 has an invalid length.
[   93.715083][ T7735] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.804'.
[   93.820140][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[   93.872936][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'.
[   93.986949][ T7772] netlink: 'syz.1.817': attribute type 10 has an invalid length.
[   93.993943][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.000412][ T7772] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   94.269193][ T7781] netlink: 'syz.1.823': attribute type 1 has an invalid length.
[   95.257528][ T7819] lo speed is unknown, defaulting to 1000
[   95.417808][ T7833] gre1: entered allmulticast mode
[   95.969690][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'.
[   96.013343][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'.
[   96.168775][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'.
[   96.172467][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'.
[   96.988077][ T7922] netlink: 'syz.0.888': attribute type 1 has an invalid length.
[   96.991366][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'.
[   97.319476][ T7952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.903'.
[   97.469663][ T7967] pim6reg1: entered promiscuous mode
[   97.471827][ T7967] pim6reg1: entered allmulticast mode
[   97.782264][ T7987] netlink: 'syz.1.919': attribute type 3 has an invalid length.
[   97.954696][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[   97.958322][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[   97.962072][ T7999] netlink: 124 bytes leftover after parsing attributes in process `syz.1.925'.
[   98.001808][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'.
[   98.011208][ T8002] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   98.667485][ T8035] netlink: 'syz.2.938': attribute type 1 has an invalid length.
[   98.715090][ T8035] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.731022][ T8035] bond1: (slave dummy0): making interface the new active one
[   98.734646][ T8035] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   99.021407][ T8046] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[   99.513510][ T8084] netlink: 'syz.2.960': attribute type 1 has an invalid length.
[   99.645803][ T8095] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  100.475828][ T8160] netlink: 'syz.2.997': attribute type 1 has an invalid length.
[  100.501734][ T8160] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.523725][ T8160] bond3: (slave geneve3): making interface the new active one
[  100.529865][ T8160] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  100.649255][ T8165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.685577][ T8166] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.718648][ T8165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.764725][ T8165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.824172][ T8165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.899410][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.922030][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.931629][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.935030][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.059994][ T8173] bridge_slave_0: left allmulticast mode
[  101.061809][ T8173] bridge_slave_0: left promiscuous mode
[  101.065471][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.069878][ T8173] bridge_slave_1: left allmulticast mode
[  101.071649][ T8173] bridge_slave_1: left promiscuous mode
[  101.074219][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.079996][ T8173] bond0: (slave bond_slave_0): Releasing backup interface
[  101.085883][ T8173] bond_slave_0: left promiscuous mode
[  101.089369][ T8173] bond0: (slave bond_slave_1): Releasing backup interface
[  101.092837][ T8173] bond_slave_1: left promiscuous mode
[  101.106876][ T8173] team0: Port device team_slave_0 removed
[  101.116638][ T8173] team0: Port device team_slave_1 removed
[  101.121980][ T8173] macsec0: left allmulticast mode
[  101.124231][ T8173] veth1_macvtap: left allmulticast mode
[  101.126005][ T8173] macsec0: left promiscuous mode
[  101.127945][ T8173] bridge0: port 3(macsec0) entered disabled state
[  101.135041][ T8173] bond1: (slave gretap1): Releasing active interface
[  101.140629][ T8177] netlink: 'syz.2.1004': attribute type 1 has an invalid length.
[  101.145967][ T8177] __nla_validate_parse: 8 callbacks suppressed
[  101.145977][ T8177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1004'.
[  101.273828][ T8178] netlink: 'syz.0.1001': attribute type 10 has an invalid length.
[  101.302431][ T8178] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  101.312280][ T8178] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  101.324762][ T8178] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.330038][ T8178] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.672296][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'.
[  101.945632][   T10] syz1: Port: 1 Link DOWN
[  102.181213][ T8268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1044'.
[  102.186626][ T8262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1044'.
[  102.343230][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  102.705094][ T8307] netlink: 'syz.2.1065': attribute type 1 has an invalid length.
[  102.707807][ T8307] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1065'.
[  102.710972][ T8307] NCSI netlink: No device for ifindex 0
[  102.778033][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  102.793887][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  103.068499][ T8327] lo speed is unknown, defaulting to 1000
[  103.341894][ T8347] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1081'.
[  104.070127][ T8396] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1105'.
[  104.455378][ T8424] bridge0: port 1(netdevsim2) entered blocking state
[  104.457927][ T8424] bridge0: port 1(netdevsim2) entered disabled state
[  104.460369][ T8424] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  104.468667][ T8424] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  104.471844][ T8424] bridge0: port 1(netdevsim2) entered blocking state
[  104.474210][ T8424] bridge0: port 1(netdevsim2) entered forwarding state
[  104.509073][ T8428] netlink: 'syz.1.1120': attribute type 1 has an invalid length.
[  104.709937][ T8449] nftables ruleset with unbound chain
[  104.862217][ T8466] netlink: 'syz.2.1138': attribute type 5 has an invalid length.
[  104.983738][ T8472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.986905][ T8472] IPv6: NLM_F_CREATE should be set when creating new route
[  104.990042][ T8472] IPv6: NLM_F_CREATE should be set when creating new route
[  104.992958][ T8472] IPv6: NLM_F_CREATE should be set when creating new route
[  105.121342][ T8484] netlink: 'syz.1.1147': attribute type 2 has an invalid length.
[  105.124585][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'.
[  105.256901][ T8500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  105.567533][ T8536] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  105.613880][ T8540] netlink: 'syz.2.1174': attribute type 1 has an invalid length.
[  105.687377][ T8540] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  106.267072][ T8569] IPv6: Can't replace route, no match found
[  106.707101][ T8598] __nla_validate_parse: 5 callbacks suppressed
[  106.707115][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'.
[  106.746710][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'.
[  106.763512][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'.
[  106.774590][ T8602] macsec0: entered allmulticast mode
[  106.776666][ T8602] veth1_macvtap: entered allmulticast mode
[  106.779159][ T8602] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  106.885913][ T8616] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1210'.
[  106.925333][ T8620] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  107.309586][ T8654] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  107.312551][ T8654] netlink: 'syz.2.1228': attribute type 3 has an invalid length.
[  107.318422][ T8654] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1228'.
[  107.325662][ T8654] NCSI netlink: No device for ifindex 246
[  107.401392][ T8662] netlink: 'syz.2.1232': attribute type 16 has an invalid length.
[  107.406206][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  107.715346][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1244'.
[  107.805816][ T8629] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  108.306722][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'.
[  108.411812][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'.
[  108.478288][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'.
[  108.733440][ T8780] lo speed is unknown, defaulting to 1000
[  108.779720][   T10] IPVS: starting estimator thread 0...
[  108.827977][ T8794] syzkaller1: entered promiscuous mode
[  108.830168][ T8794] syzkaller1: entered allmulticast mode
[  108.863504][ T8790] IPVS: using max 46 ests per chain, 110400 per kthread
[  108.894336][ T8800] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.986174][   T54] Bluetooth: hci0: command 0x080f tx timeout
[  109.072131][ T8810] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  109.077699][ T8810] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  110.326873][ T8850] netlink: 'syz.2.1317': attribute type 10 has an invalid length.
[  110.363203][ T8849] netlink: 'syz.0.1318': attribute type 12 has an invalid length.
[  110.385908][ T8851] netlink: 'syz.2.1317': attribute type 10 has an invalid length.
[  110.415872][ T8850] bond1: (slave dummy0): Releasing active interface
[  110.429561][ T8850] team0: Port device dummy0 added
[  110.467179][ T8851] team0: Port device dummy0 removed
[  110.486909][ T8851] dummy0: entered promiscuous mode
[  110.504986][ T8851] dummy0: entered allmulticast mode
[  110.517906][ T8855] block nbd0: Unsupported socket: shutdown callout must be supported.
[  110.536865][ T8851] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  110.700231][ T8859] bridge_slave_0: entered promiscuous mode
[  110.946206][ T8865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.350680][ T8873] lo speed is unknown, defaulting to 1000
[  111.616237][ T8876] lo speed is unknown, defaulting to 1000
[  111.994402][ T8908] block nbd0: not configured, cannot reconfigure
[  112.209004][ T8917] netlink: 'syz.0.1346': attribute type 10 has an invalid length.
[  112.220629][ T8917] team0: Port device dummy0 added
[  112.229293][ T8917] netlink: 'syz.0.1346': attribute type 10 has an invalid length.
[  112.265320][ T8917] team0: Port device dummy0 removed
[  112.270730][ T8917] dummy0: entered promiscuous mode
[  112.275317][ T8917] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  113.120038][ T8965] netlink: 'syz.1.1371': attribute type 6 has an invalid length.
[  113.304596][ T8843] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  113.364976][ T8970] __nla_validate_parse: 3 callbacks suppressed
[  113.364990][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'.
[  113.609800][ T9009] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1387'.
[  113.762666][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'.
[  113.828513][ T9030] netlink: 'syz.0.1397': attribute type 3 has an invalid length.
[  113.832206][ T9030] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1397'.
[  114.032742][ T9051] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  114.128680][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'.
[  114.809106][ T9113] lo speed is unknown, defaulting to 1000
[  115.066619][ T9122] lo speed is unknown, defaulting to 1000
[  115.602552][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'.
[  115.611362][ T9163] netlink: 'syz.2.1456': attribute type 4 has an invalid length.
[  115.618686][ T9163] netlink: 'syz.2.1456': attribute type 4 has an invalid length.
[  115.956796][ T9176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.960482][ T9176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.992064][ T9179] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  116.016295][ T9176] bridge0: port 1(netdevsim2) entered disabled state
[  116.029887][ T9176] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode
[  116.034411][ T9176] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode
[  116.037793][ T9176] bridge0: port 1(netdevsim2) entered disabled state
[  116.042038][ T9176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.046584][ T9176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.115776][ T9176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.120675][ T9176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.185696][ T9176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.190051][ T9176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.279743][ T5895] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.282829][ T5895] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.306287][ T5895] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.309507][ T5895] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.312538][ T5895] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.322505][ T5895] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.334457][ T5895] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.337062][ T5895] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.576394][ T9220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.610029][ T9227] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  116.654186][ T9220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.706048][ T9220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.829291][ T9237] netlink: 'syz.2.1489': attribute type 1 has an invalid length.
[  116.862159][ T9220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.957049][ T9246] netlink: 'syz.2.1494': attribute type 10 has an invalid length.
[  116.964191][ T9246] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  116.971881][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.977502][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.988454][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.991061][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.094464][ T9257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'.
[  117.098189][ T9252] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1496'.
[  117.101550][ T9252] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1496'.
[  117.122387][ T9257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'.
[  118.371887][ T9317] netlink: 'syz.0.1526': attribute type 11 has an invalid length.
[  118.429381][ T9323] trusted_key: syz.0.1528 sent an empty control message without MSG_MORE.
[  118.645561][ T9351] __nla_validate_parse: 2 callbacks suppressed
[  118.645576][ T9351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1542'.
[  118.696032][ T9357] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1544'.
[  118.730968][ T9365] netlink: 'syz.2.1546': attribute type 1 has an invalid length.
[  118.734395][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1546'.
[  119.021777][ T9398] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1562'.
[  119.077746][ T9400] lo speed is unknown, defaulting to 1000
[  120.490438][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'.
[  120.749254][ T9478] ieee802154 phy0 wpan0: encryption failed: -22
[  120.810505][ T9482] netlink: 'syz.0.1595': attribute type 16 has an invalid length.
[  120.817297][ T9482] netlink: 'syz.0.1595': attribute type 17 has an invalid length.
[  120.837710][ T9482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.100444][ T9495] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1605'.
[  121.342141][ T9505] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  121.625496][ T9527] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  121.628748][ T9527] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.660925][ T9530] netlink: 'syz.0.1623': attribute type 8 has an invalid length.
[  121.685546][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'.
[  122.761298][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'.
[  122.949654][ T9659] netlink: 'syz.0.1683': attribute type 1 has an invalid length.
[  122.988949][ T9663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.991808][ T9663] syzkaller0: entered promiscuous mode
[  122.994415][ T9663] syzkaller0: entered allmulticast mode
[  123.012250][ T9663] tipc: Resetting bearer <eth:syzkaller0>
[  123.018495][ T9662] tipc: Resetting bearer <eth:syzkaller0>
[  123.036233][ T9662] tipc: Disabling bearer <eth:syzkaller0>
[  123.226000][ T9682] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1694'.
[  123.704099][ T9725] block nbd0: server does not support multiple connections per device.
[  123.708791][ T9725] block nbd0: shutting down sockets
[  123.939909][ T9752] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1729'.
[  124.319199][ T9787] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  124.370646][ T9791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1747'.
[  124.408102][ T9796] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  124.507011][ T9808] netlink: 'syz.0.1755': attribute type 1 has an invalid length.
[  124.571895][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'.
[  124.616579][ T9823] netlink: 'syz.0.1762': attribute type 9 has an invalid length.
[  124.631101][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1764'.
[  124.917352][ T9849] lo speed is unknown, defaulting to 1000
[  124.954603][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'.
[  124.963818][ T9854] ip6tnl0: entered promiscuous mode
[  124.966052][ T9854] ip6tnl0: entered allmulticast mode
[  125.024121][ T9859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.027433][ T9859] syzkaller0: entered promiscuous mode
[  125.029813][ T9859] syzkaller0: entered allmulticast mode
[  125.047456][ T9859] tipc: Resetting bearer <eth:syzkaller0>
[  125.051060][ T9858] tipc: Resetting bearer <eth:syzkaller0>
[  125.062954][ T9858] tipc: Disabling bearer <eth:syzkaller0>
[  125.325531][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'.
[  125.529541][ T9890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1793'.
[  125.534093][ T9890] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  125.832472][ T9909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.917563][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'.
[  126.312491][ T9942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.463434][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1822'.
[  126.595852][ T9955] vlan3: entered promiscuous mode
[  126.597979][ T9955] team0: entered promiscuous mode
[  126.600867][ T9955] team0: Device vlan3 is already an upper device of the team interface
[  126.692737][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'.
[  127.115397][ T9983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.118606][ T9983] syzkaller0: entered promiscuous mode
[  127.120726][ T9983] syzkaller0: entered allmulticast mode
[  127.130390][ T9983] tipc: Resetting bearer <eth:syzkaller0>
[  127.135169][ T9982] tipc: Resetting bearer <eth:syzkaller0>
[  127.143462][ T9982] tipc: Disabling bearer <eth:syzkaller0>
[  127.450108][T10005] netlink: 'syz.1.1849': attribute type 20 has an invalid length.
[  127.529513][T10015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.538496][T10015] syzkaller0: entered promiscuous mode
[  127.540317][T10015] syzkaller0: entered allmulticast mode
[  127.575026][T10015] tipc: Resetting bearer <eth:syzkaller0>
[  127.582608][T10014] tipc: Resetting bearer <eth:syzkaller0>
[  127.593573][T10014] tipc: Disabling bearer <eth:syzkaller0>
[  128.622717][T10067] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  128.754396][T10076] syzkaller1: entered allmulticast mode
[  129.006794][T10083] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  129.010080][T10083] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  129.018144][T10083] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  129.021131][T10083] dummy0: left promiscuous mode
[  129.023956][T10083] bond0 (unregistering): Released all slaves
[  129.050493][T10092] __nla_validate_parse: 2 callbacks suppressed
[  129.050507][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'.
[  129.096057][T10100] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  129.103009][T10100] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  129.347396][T10125] lo speed is unknown, defaulting to 1000
[  129.711471][T10142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.720864][T10142] syzkaller0: entered promiscuous mode
[  129.726269][T10142] syzkaller0: entered allmulticast mode
[  129.771000][T10142] tipc: Resetting bearer <eth:syzkaller0>
[  129.778631][T10141] tipc: Resetting bearer <eth:syzkaller0>
[  129.807718][T10141] tipc: Disabling bearer <eth:syzkaller0>
[  129.901819][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  130.288085][T10182] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1904'.
[  130.308112][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1904'.
[  130.592347][T10192] veth1_macvtap: left allmulticast mode
[  130.600903][T10192] macsec0: left allmulticast mode
[  130.652692][T10192] gtp0: left promiscuous mode
[  130.661199][T10192] gtp0: left allmulticast mode
[  130.674883][T10192] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  130.683283][T10192] macvtap1: left allmulticast mode
[  130.690988][T10192] gre1: left allmulticast mode
[  130.695642][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.698522][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.702300][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.707087][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.785777][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  131.068760][T10230] netlink: 'syz.0.1912': attribute type 16 has an invalid length.
[  131.071479][T10230] netlink: 'syz.0.1912': attribute type 17 has an invalid length.
[  131.075280][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'.
[  131.079259][T10230] IPv6: NLM_F_REPLACE set, but no existing node found!
[  131.095225][T10232] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1913'.
[  131.098531][T10232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1913'.
[  132.572636][T10287] netlink: zone id is out of range
[  132.574885][T10287] netlink: zone id is out of range
[  132.576551][T10287] netlink: set zone limit has 4 unknown bytes
[  132.668489][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.865496][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1950'.
[  132.869385][T10311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1950'.
[  132.950181][ T5191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.957434][ T5191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.220566][T10353] netlink: 'syz.2.1964': attribute type 16 has an invalid length.
[  133.232082][T10353] netlink: 'syz.2.1964': attribute type 17 has an invalid length.
[  133.324730][T10353] tipc: Resetting bearer <eth:team0>
[  133.341189][T10364] IPv6: NLM_F_REPLACE set, but no existing node found!
[  133.425140][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.434490][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.543040][T10353] bond0: left allmulticast mode
[  133.545661][T10353] bond_slave_0: left allmulticast mode
[  133.547461][T10353] bond_slave_1: left allmulticast mode
[  133.549256][T10353] batadv0: left allmulticast mode
[  133.550927][T10353] dummy0: left allmulticast mode
[  133.552514][T10353] bond0: left promiscuous mode
[  133.554492][T10353] bond_slave_1: left promiscuous mode
[  133.556523][T10353] batadv0: left promiscuous mode
[  133.558222][T10353] dummy0: left promiscuous mode
[  133.581716][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.585927][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.612451][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.618573][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.725677][T10386] netlink: 'syz.1.1975': attribute type 2 has an invalid length.
[  133.728455][T10386] netlink: 'syz.1.1975': attribute type 1 has an invalid length.
[  133.889412][T10400] netlink: 'syz.0.1979': attribute type 21 has an invalid length.
[  133.980798][T10403] lo speed is unknown, defaulting to 1000
[  134.238072][T10417] __nla_validate_parse: 3 callbacks suppressed
[  134.238088][T10417] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1983'.
[  134.246362][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1983'.
[  134.414181][T10425] netlink: 91 bytes leftover after parsing attributes in process `syz.0.1986'.
[  134.755780][T10449] netlink: 'syz.1.1988': attribute type 16 has an invalid length.
[  134.759133][T10449] netlink: 'syz.1.1988': attribute type 17 has an invalid length.
[  134.880938][T10454] IPv6: NLM_F_REPLACE set, but no existing node found!
[  135.106565][T10370] lo speed is unknown, defaulting to 1000
[  135.106730][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  135.108951][T10370] syz0: Port: 1 Link DOWN
[  135.121729][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.125112][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.128035][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.130699][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.153185][T10370] lo speed is unknown, defaulting to 1000
[  135.159000][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.162769][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.166238][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.169065][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.388052][T10456] tc_dump_action: action bad kind
[  135.412379][T10458] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  135.720590][T10488] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.724745][T10488] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.776568][T10492] netlink: 'syz.0.2009': attribute type 10 has an invalid length.
[  135.842377][T10498] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2007'.
[  135.849152][T10498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2007'.
[  135.970410][T10508] netlink: 'syz.2.2016': attribute type 11 has an invalid length.
[  136.739579][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2042'.
[  136.882777][T10573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2047'.
[  137.148637][T10598] ip6tnl1: entered promiscuous mode
[  137.175329][T10602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2060'.
[  137.218714][T10606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.221793][T10606] syzkaller0: entered promiscuous mode
[  137.224001][T10606] syzkaller0: entered allmulticast mode
[  137.236099][T10606] tipc: Resetting bearer <eth:syzkaller0>
[  137.241148][T10605] tipc: Resetting bearer <eth:syzkaller0>
[  137.252996][T10605] tipc: Disabling bearer <eth:syzkaller0>
[  137.515597][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2072'.
[  137.782107][T10636] netlink: 'syz.0.2078': attribute type 1 has an invalid length.
[  138.426711][T10696] IPVS: stopping master sync thread 9051 ...
[  138.577902][T10713] ipvlan2: entered promiscuous mode
[  138.742805][T10733] batadv_slave_0: entered promiscuous mode
[  138.747529][T10732] batadv_slave_0: left promiscuous mode
[  139.005696][T10761] lo speed is unknown, defaulting to 1000
[  139.695669][T10803] __nla_validate_parse: 4 callbacks suppressed
[  139.695678][T10803] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2147'.
[  139.908792][T10816] lo speed is unknown, defaulting to 1000
[  139.926635][T10821] vlan2: entered promiscuous mode
[  139.928618][T10821] bridge0: entered promiscuous mode
[  139.989189][T10823] netlink: 'syz.2.2155': attribute type 1 has an invalid length.
[  139.991731][T10823] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2155'.
[  140.114735][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  140.118104][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  140.121337][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  140.130857][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  140.400917][ T5909] IPVS: starting estimator thread 0...
[  140.416542][T10855] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.419890][T10855] tipc: Enabled bearer <udp:s>, priority 10
[  140.423677][T10861] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2171'.
[  140.423758][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2170'.
[  140.427537][T10861] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2171'.
[  140.430870][T10858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.505637][T10859] IPVS: using max 82 ests per chain, 196800 per kthread
[  140.524981][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  140.563922][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.703444][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.843358][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.955527][T10910] netlink: 'syz.2.2191': attribute type 21 has an invalid length.
[  140.963260][T10910] netlink: 'syz.2.2191': attribute type 1 has an invalid length.
[  140.968147][T10910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2191'.
[  140.983548][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.018142][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'.
[  141.123502][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.263457][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.286599][T10932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.413270][  T793] tipc: Node number set to 4043051059
[  141.496213][T10946] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2207'.
[  141.553401][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.870737][T10975] netlink: 'syz.2.2220': attribute type 1 has an invalid length.
[  141.874703][T10975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2220'.
[  142.436163][T11037] Bluetooth: MGMT ver 1.23
[  143.042935][T11090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  144.282151][T11146] netlink: 'syz.1.2296': attribute type 7 has an invalid length.
[  145.258927][T11192] netlink: 'syz.2.2316': attribute type 3 has an invalid length.
[  145.417048][T11202] __nla_validate_parse: 9 callbacks suppressed
[  145.417057][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2321'.
[  145.463416][    C0] net_ratelimit: 6 callbacks suppressed
[  145.463430][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.521035][T11212] veth0: entered promiscuous mode
[  145.524077][T11211] veth0: left promiscuous mode
[  145.573779][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'.
[  145.726808][T11230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2332'.
[  145.761321][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'.
[  146.169790][  T793] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[  146.176591][  T793] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  146.271581][ T5909] IPVS: starting estimator thread 0...
[  146.327448][T11271] lo speed is unknown, defaulting to 1000
[  146.365438][T11273] IPVS: using max 54 ests per chain, 129600 per kthread
[  146.503411][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  146.675817][T11293] netlink: 'syz.2.2359': attribute type 1 has an invalid length.
[  146.975684][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2365'.
[  147.018517][T11305] vlan2: entered allmulticast mode
[  147.020157][T11305] bond3: entered allmulticast mode
[  147.543541][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  147.557907][T11334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2378'.
[  147.561717][T11334] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2378'.
[  147.569145][T11335] pimreg: tun_chr_ioctl cmd 2147767506
[  147.603952][T11337] netlink: 'syz.1.2379': attribute type 62 has an invalid length.
[  147.805598][T11351] netlink: 'syz.0.2385': attribute type 1 has an invalid length.
[  147.808873][T11351] netlink: 'syz.0.2385': attribute type 2 has an invalid length.
[  147.812351][T11351] netlink: 'syz.0.2385': attribute type 8 has an invalid length.
[  147.815995][T11351] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.2385'.
[  148.049223][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'.
[  148.091759][T11369] bond0: (slave dummy0): Releasing backup interface
[  148.098076][T11369] bond0: (slave batadv0): Releasing backup interface
[  148.104071][T11369] bond0: (slave bond_slave_0): Releasing backup interface
[  148.108922][T11369] bond0: (slave bond_slave_1): Releasing backup interface
[  148.122829][T11369] team0: Port device team_slave_0 removed
[  148.131151][T11369] team0: Port device team_slave_1 removed
[  148.134395][T11369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.143801][T11369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.157102][T11369] team0: Port device vlan0 removed
[  148.164375][T11369] team0: Port device geneve0 removed
[  148.168956][T11369] bond3: (slave geneve3): Releasing active interface
[  148.179548][T11365] vlan2: entered allmulticast mode
[  148.181341][T11365] bond0: entered allmulticast mode
[  148.212153][T11373] team0: Mode changed to "loadbalance"
[  148.291329][T11384] vti0: entered promiscuous mode
[  148.294403][T11384] vti0: entered allmulticast mode
[  148.339225][T11388] netlink: 'syz.1.2404': attribute type 4 has an invalid length.
[  148.473778][T11402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.513653][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2411'.
[  148.517924][T11402] syzkaller0: entered promiscuous mode
[  148.520358][T11402] syzkaller0: entered allmulticast mode
[  148.583436][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  149.529957][T11405] tipc: Resetting bearer <eth:syzkaller0>
[  149.532827][T11413] netlink: 'syz.2.2415': attribute type 6 has an invalid length.
[  149.538118][T11401] tipc: Resetting bearer <eth:syzkaller0>
[  149.553982][T11401] tipc: Disabling bearer <eth:syzkaller0>
[  149.612878][T11415] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  149.623502][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  149.682916][T11419] netlink: 'syz.0.2417': attribute type 1 has an invalid length.
[  149.762470][T11417] lo speed is unknown, defaulting to 1000
[  149.870532][T11438] netlink: 'syz.2.2424': attribute type 2 has an invalid length.
[  150.114703][T11451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.117903][T11451] syzkaller0: entered promiscuous mode
[  150.119838][T11451] syzkaller0: entered allmulticast mode
[  150.151581][T11451] tipc: Resetting bearer <eth:syzkaller0>
[  150.165045][T11450] tipc: Resetting bearer <eth:syzkaller0>
[  150.198083][T11450] tipc: Disabling bearer <eth:syzkaller0>
[  150.420067][T11469] pimreg: tun_chr_ioctl cmd 1074812118
[  150.434152][T11473] __nla_validate_parse: 5 callbacks suppressed
[  150.434194][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'.
[  150.498556][T11478] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2443'.
[  150.550565][T11482] validate_nla: 1 callbacks suppressed
[  150.550579][T11482] netlink: 'syz.1.2446': attribute type 10 has an invalid length.
[  150.561828][T11482] team0: Device hsr_slave_0 failed to register rx_handler
[  150.608015][T11488] netlink: 'syz.1.2449': attribute type 1 has an invalid length.
[  150.611440][T11488] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2449'.
[  150.615324][T11488] netlink: 'syz.1.2449': attribute type 1 has an invalid length.
[  150.618750][T11488] netlink: 'syz.1.2449': attribute type 2 has an invalid length.
[  150.622879][T11489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2448'.
[  150.663496][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  150.740875][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2452'.
[  151.703450][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  151.772955][T11517] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2462'.
[  152.156220][T11557] nbd: must specify at least one socket
[  152.469066][T11574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.653094][T11523] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  152.675029][T11589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2498'.
[  152.727387][T11595] macsec0: entered allmulticast mode
[  152.744335][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  152.836353][T11604] netlink: 'syz.2.2504': attribute type 1 has an invalid length.
[  152.839777][T11604] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2504'.
[  152.844666][T11604] NCSI netlink: No device for ifindex 813332851
[  152.998082][T11618] lo speed is unknown, defaulting to 1000
[  153.047465][T11621] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2511'.
[  153.135915][T11621] lo speed is unknown, defaulting to 1000
[  153.261761][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2518'.
[  153.783425][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  153.873614][   T54] Bluetooth: hci0: command 0x080f tx timeout
[  154.202040][T11702] delete_channel: no stack
[  154.482329][T11725] ip6tnl0: left promiscuous mode
[  154.484827][T11725] ip6tnl0: left allmulticast mode
[  154.498427][T11725] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.501231][T11725] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  154.507773][  T793] lo speed is unknown, defaulting to 1000
[  154.509861][  T793] syz0: Port: 1 Link ACTIVE
[  154.511551][  T793] lo speed is unknown, defaulting to 1000
[  154.513843][T11729] batadv_slave_1: entered promiscuous mode
[  154.516827][T11728] batadv_slave_1: left promiscuous mode
[  154.823322][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  155.010533][T11779] smc: net device bond0 applied user defined pnetid SYZ2
[  155.027850][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803042ec00: rx timeout, send abort
[  155.532372][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803042ec00: abort rx timeout. Force session deactivation
[  155.657589][T11803] tap0: tun_chr_ioctl cmd 1074025677
[  155.659962][T11803] tap0: linktype set to 774
[  155.863426][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  155.881541][T11815] lo speed is unknown, defaulting to 1000
[  156.016234][T11827] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  156.480793][T11850] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  156.641193][T11855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  156.903352][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  157.943322][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  158.252192][T11926] __nla_validate_parse: 4 callbacks suppressed
[  158.252207][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2637'.
[  158.589570][T11935] lo speed is unknown, defaulting to 1000
[  158.867210][T11852] Set syz1 is full, maxelem 65536 reached
[  158.983229][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  159.239385][T11954] syzkaller0: entered promiscuous mode
[  159.241759][T11954] syzkaller0: entered allmulticast mode
[  160.023395][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  160.184225][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'.
[  160.284644][T11987] C: renamed from team_slave_0
[  160.290382][T11987] netlink: 'syz.0.2660': attribute type 4 has an invalid length.
[  160.296215][T11987] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.325442][T11990] netlink: 'syz.2.2661': attribute type 8 has an invalid length.
[  160.390942][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2664'.
[  160.478819][T12002] netlink: 'syz.0.2667': attribute type 83 has an invalid length.
[  160.612486][T12007] syzkaller1: entered promiscuous mode
[  160.616312][T12007] syzkaller1: entered allmulticast mode
[  161.063480][    C0] net_ratelimit: 1 callbacks suppressed
[  161.063494][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  161.102765][T12047] lo speed is unknown, defaulting to 1000
[  161.106121][T12041] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  161.202054][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'.
[  161.211808][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'.
[  162.060372][T12074] lo speed is unknown, defaulting to 1000
[  162.103395][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.205464][T12081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.208650][T12081] IPv6: NLM_F_CREATE should be set when creating new route
[  162.211828][T12081] IPv6: NLM_F_CREATE should be set when creating new route
[  162.303536][T12086] syzkaller1: entered promiscuous mode
[  162.305898][T12086] syzkaller1: entered allmulticast mode
[  162.561448][T12099] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  163.143363][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  163.367183][T12147] netlink: 'syz.1.2731': attribute type 1 has an invalid length.
[  163.389859][T12147] 8021q: adding VLAN 0 to HW filter on device bond4
[  163.407873][T12147] bond4: (slave geneve2): making interface the new active one
[  163.412341][T12147] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  163.417230][ T5895] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.425599][T12147] bond4: entered promiscuous mode
[  163.427451][T12147] geneve2: entered promiscuous mode
[  163.432404][ T5895] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.435862][ T5895] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.439281][ T5895] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.514321][T12153] tap0: tun_chr_ioctl cmd 1074025681
[  163.679441][T12155] raw_sendmsg: syz.1.2734 forgot to set AF_INET. Fix it!
[  163.968903][T12179] lo speed is unknown, defaulting to 1000
[  164.033379][   T54] Bluetooth: hci2: link tx timeout
[  164.035789][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.049054][ T5238] Bluetooth: hci2: link tx timeout
[  164.050784][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.053387][ T5238] Bluetooth: hci2: link tx timeout
[  164.055056][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.057580][ T5238] Bluetooth: hci2: link tx timeout
[  164.059276][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.183529][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.289561][T12192] netlink: 'syz.2.2749': attribute type 2 has an invalid length.
[  164.336852][T12192] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2749'.
[  164.362440][T12198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.365023][T12198] IPv6: NLM_F_CREATE should be set when creating new route
[  164.367842][T12198] IPv6: NLM_F_CREATE should be set when creating new route
[  164.371842][T12198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.520936][T12207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.699280][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'.
[  164.724402][T12233] veth1_to_team: entered allmulticast mode
[  165.045229][T12257] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2776'.
[  165.052051][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2777'.
[  165.210439][T12267] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  165.223636][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  165.299234][T12281] Bluetooth: MGMT ver 1.23
[  165.318865][T12276] lo speed is unknown, defaulting to 1000
[  165.405980][T12287] netlink: 'syz.0.2785': attribute type 1 has an invalid length.
[  165.409313][T12287] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2785'.
[  165.442738][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'.
[  165.522253][T12301] netlink: 'syz.2.2795': attribute type 4 has an invalid length.
[  165.742564][T12317] netlink: 'syz.1.2801': attribute type 10 has an invalid length.
[  165.765400][T12316] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2800'.
[  166.103397][ T5238] Bluetooth: hci2: command 0x0419 tx timeout
[  166.273400][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  166.572488][T12347] 8021q: adding VLAN 0 to HW filter on device bond2
[  166.613836][T12351] IPVS: persistence engine module ip_vs_pe_ not found
[  166.792334][T12373] xt_limit: Overflow, try lower: 604147548/4200216962
[  166.793018][T12372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2825'.
[  167.068606][T12399] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2836'.
[  167.303392][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  167.439313][T12422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.445105][T12422] syzkaller0: entered promiscuous mode
[  167.447601][T12422] syzkaller0: entered allmulticast mode
[  167.467080][T12422] tipc: Resetting bearer <eth:syzkaller0>
[  167.470961][T12422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.480258][T12421] tipc: Resetting bearer <eth:syzkaller0>
[  167.496136][T12421] tipc: Disabling bearer <eth:syzkaller0>
[  168.026930][T12445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.032459][T12445] syzkaller0: entered promiscuous mode
[  168.036339][T12445] syzkaller0: entered allmulticast mode
[  168.059593][T12445] tipc: Resetting bearer <eth:syzkaller0>
[  168.064406][T12444] tipc: Resetting bearer <eth:syzkaller0>
[  168.077523][T12444] tipc: Disabling bearer <eth:syzkaller0>
[  168.249138][T12453] syzkaller1: entered promiscuous mode
[  168.251713][T12453] syzkaller1: entered allmulticast mode
[  168.343437][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  168.461967][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'.
[  168.514455][T12469] netlink: 'syz.0.2867': attribute type 21 has an invalid length.
[  168.523341][T12469] netlink: 'syz.0.2867': attribute type 5 has an invalid length.
[  168.714950][T12490] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  169.085812][T12527] lo speed is unknown, defaulting to 1000
[  169.169371][T12532] netlink: 'syz.0.2896': attribute type 7 has an invalid length.
[  169.172504][T12532] netlink: 'syz.0.2896': attribute type 8 has an invalid length.
[  169.383564][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  170.215432][T12589] netlink: 'syz.0.2920': attribute type 1 has an invalid length.
[  170.336407][T12604] __nla_validate_parse: 7 callbacks suppressed
[  170.336421][T12604] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2927'.
[  170.396370][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'.
[  170.419211][T12606] hsr_slave_1 (unregistering): left promiscuous mode
[  170.433311][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  170.577043][T12614] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2931'.
[  170.712526][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2937'.
[  170.725749][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2937'.
[  170.992719][T12655] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  171.011558][T12655] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.091160][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'.
[  171.099727][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'.
[  171.129444][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'.
[  171.334663][T12704] netlink: 'syz.0.2972': attribute type 2 has an invalid length.
[  171.463458][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  171.510078][T12724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2982'.
[  171.514951][T12722] tun0: tun_chr_ioctl cmd 2148553947
[  171.518385][T12724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2982'.
[  171.728926][T12752] IPVS: length: 24 != 55320
[  171.861536][T12766] netlink: 'syz.1.3003': attribute type 1 has an invalid length.
[  171.946637][T12776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.044269][T12789] netlink: 'syz.1.3014': attribute type 1 has an invalid length.
[  172.065722][T12789] 8021q: adding VLAN 0 to HW filter on device bond5
[  172.095609][T12789] veth7: entered promiscuous mode
[  172.101898][T12789] bond5: (slave veth7): Enslaving as an active interface with an up link
[  172.338803][T12826] netlink: 'syz.0.3029': attribute type 7 has an invalid length.
[  172.341608][T12826] netlink: 'syz.0.3029': attribute type 8 has an invalid length.
[  172.346853][T12826] netlink: 'syz.0.3029': attribute type 4 has an invalid length.
[  172.513425][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.379381][T12858] netlink: 'syz.1.3043': attribute type 10 has an invalid length.
[  173.401572][T12860] netlink: 'syz.2.3044': attribute type 13 has an invalid length.
[  173.543368][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.886573][T12890] block nbd0: server does not support multiple connections per device.
[  173.891685][T12890] block nbd0: shutting down sockets
[  174.583513][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  174.868854][   T33] audit: type=1800 audit(1756437508.110:3): pid=12966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3092" name="memory.events" dev="tmpfs" ino=5098 res=0 errno=0
[  175.110414][   T33] audit: type=1800 audit(1756437508.350:4): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3095" name="memory.events" dev="tmpfs" ino=5104 res=0 errno=0
[  175.413482][T12992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.420576][T12992] syzkaller0: entered promiscuous mode
[  175.423306][T12992] syzkaller0: entered allmulticast mode
[  175.442133][T12992] tipc: Resetting bearer <eth:syzkaller0>
[  175.454162][T12991] tipc: Resetting bearer <eth:syzkaller0>
[  175.474040][T12991] tipc: Disabling bearer <eth:syzkaller0>
[  175.623287][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  175.745169][T13015] netlink: 'syz.2.3115': attribute type 1 has an invalid length.
[  175.748352][T13015] __nla_validate_parse: 7 callbacks suppressed
[  175.748362][T13015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3115'.
[  175.824349][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'.
[  175.827880][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3120'.
[  175.831196][T13025] netlink: 'syz.1.3120': attribute type 20 has an invalid length.
[  175.836159][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'.
[  175.840488][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3120'.
[  176.160809][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'.
[  176.170451][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3138'.
[  176.270908][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'.
[  176.285600][T13073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.290778][T13073] syzkaller0: entered promiscuous mode
[  176.293571][T13073] syzkaller0: entered allmulticast mode
[  176.309524][T13073] tipc: Resetting bearer <eth:syzkaller0>
[  176.318111][T13071] tipc: Resetting bearer <eth:syzkaller0>
[  176.335813][T13071] tipc: Disabling bearer <eth:syzkaller0>
[  176.353850][T13077] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3143'.
[  176.642389][T13093] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3152'.
[  176.663500][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  176.799797][T13103] Unsupported ieee802154 address type: 0
[  177.089912][T13134] validate_nla: 2 callbacks suppressed
[  177.089923][T13134] netlink: 'syz.1.3170': attribute type 8 has an invalid length.
[  177.167002][T13144] nbd: must specify a size in bytes for the device
[  177.498881][T13170] netlink: 'syz.2.3180': attribute type 29 has an invalid length.
[  177.703667][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  178.026908][T13227] sctp: [Deprecated]: syz.0.3205 (pid 13227) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.026908][T13227] Use struct sctp_sack_info instead
[  178.037418][T13229] smc: net device bond0 applied user defined pnetid SYZ2
[  178.744740][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  178.936878][T13286] tipc: New replicast peer: 255.255.255.255
[  178.940549][T13286] tipc: Enabled bearer <udp:syz2>, priority 26
[  179.415759][T13301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.419480][T13301] syzkaller0: entered promiscuous mode
[  179.428601][T13301] syzkaller0: entered allmulticast mode
[  179.468049][T13301] tipc: Resetting bearer <eth:syzkaller0>
[  179.472246][T13300] tipc: Resetting bearer <eth:syzkaller0>
[  179.485700][T13300] tipc: Disabling bearer <eth:syzkaller0>
[  179.783325][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  179.851879][T13325] xt_limit: Overflow, try lower: 271964/0
[  180.823412][T13276] Bluetooth: hci1: command 0x0406 tx timeout
[  180.823444][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  180.828446][T13276] Bluetooth: hci0: command 0x080f tx timeout
[  181.163178][T13371] netlink: 'syz.2.3270': attribute type 14 has an invalid length.
[  181.209141][T13377] __nla_validate_parse: 7 callbacks suppressed
[  181.209155][T13377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3273'.
[  181.347649][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'.
[  181.351403][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'.
[  181.362293][T13394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.416109][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'.
[  181.419098][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3283'.
[  181.429393][T13403] gtp1: entered promiscuous mode
[  181.457666][T13406] netlink: 'syz.2.3286': attribute type 101 has an invalid length.
[  181.463605][T13406] netlink: 'syz.2.3286': attribute type 7 has an invalid length.
[  181.557567][T13418] netlink: 'syz.0.3292': attribute type 11 has an invalid length.
[  181.560265][T13418] netlink: 'syz.0.3292': attribute type 11 has an invalid length.
[  181.562899][T13418] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3292'.
[  181.616835][T13422] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  181.630739][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3294'.
[  181.635253][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3294'.
[  181.840651][T13439] netlink: 'syz.2.3302': attribute type 21 has an invalid length.
[  181.873292][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  181.932434][T13446] syz.1.3304 uses old SIOCAX25GETINFO
[  182.134586][T13454] netlink: zone id is out of range
[  182.137534][T13454] netlink: zone id is out of range
[  182.140117][T13454] netlink: zone id is out of range
[  182.142293][T13454] netlink: zone id is out of range
[  182.145226][T13454] netlink: zone id is out of range
[  182.147437][T13454] netlink: zone id is out of range
[  182.149581][T13454] netlink: zone id is out of range
[  182.154562][T13454] netlink: zone id is out of range
[  182.156637][T13454] netlink: zone id is out of range
[  182.407897][T13466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3314'.
[  182.506374][T13467] netlink: 'syz.2.3312': attribute type 1 has an invalid length.
[  182.509848][T13467] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3312'.
[  182.552379][T13470] GUP no longer grows the stack in syz.1.3315 (13470): 200000003000-20000000a000 (200000001000)
[  182.556069][T13470] CPU: 0 UID: 0 PID: 13470 Comm: syz.1.3315 Not tainted syzkaller #0 PREEMPT(full) 
[  182.556080][T13470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.556084][T13470] Call Trace:
[  182.556088][T13470]  <TASK>
[  182.556092][T13470]  dump_stack_lvl+0x189/0x250
[  182.556106][T13470]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.556114][T13470]  ? __pfx__printk+0x10/0x10
[  182.556122][T13470]  ? find_vma+0xe7/0x160
[  182.556131][T13470]  ? __lock_acquire+0xab9/0xd20
[  182.556146][T13470]  __get_user_pages+0x24d0/0x2ce0
[  182.556156][T13470]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  182.556174][T13470]  ? rcu_is_watching+0x15/0xb0
[  182.556183][T13470]  __gup_longterm_locked+0xde9/0x1660
[  182.556196][T13470]  ? sanity_check_pinned_pages+0x123a/0x1300
[  182.556207][T13470]  gup_fast_fallback+0x1e6a/0x2010
[  182.556229][T13470]  ? __pfx_gup_fast_fallback+0x10/0x10
[  182.556236][T13470]  ? stack_trace_save+0x9c/0xe0
[  182.556243][T13470]  ? __pfx_stack_trace_save+0x10/0x10
[  182.556254][T13470]  ? pin_user_pages_fast+0x4d/0xb0
[  182.556265][T13470]  iov_iter_extract_pages+0x35a/0x5e0
[  182.556283][T13470]  extract_iter_to_sg+0xe46/0x24e0
[  182.556309][T13470]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  182.556326][T13470]  ? __asan_memset+0x22/0x50
[  182.556335][T13470]  af_alg_get_rsgl+0x436/0x810
[  182.556350][T13470]  aead_recvmsg+0x4cc/0x13f0
[  182.556367][T13470]  ? __pfx_aead_recvmsg+0x10/0x10
[  182.556377][T13470]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  182.556386][T13470]  ? __pfx_aead_recvmsg+0x10/0x10
[  182.556394][T13470]  sock_recvmsg_nosec+0x186/0x1c0
[  182.556406][T13470]  ____sys_recvmsg+0x3aa/0x460
[  182.556416][T13470]  ? __pfx_____sys_recvmsg+0x10/0x10
[  182.556430][T13470]  ? import_iovec+0x74/0xa0
[  182.556438][T13470]  ___sys_recvmsg+0x1b5/0x510
[  182.556448][T13470]  ? __pfx____sys_recvmsg+0x10/0x10
[  182.556467][T13470]  ? __might_fault+0xb0/0x130
[  182.556479][T13470]  do_recvmmsg+0x307/0x770
[  182.556490][T13470]  ? __pfx_do_recvmmsg+0x10/0x10
[  182.556496][T13470]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  182.556511][T13470]  ? __pfx_do_futex+0x10/0x10
[  182.556526][T13470]  __x64_sys_recvmmsg+0x190/0x240
[  182.556535][T13470]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  182.556541][T13470]  ? rcu_is_watching+0x15/0xb0
[  182.556550][T13470]  ? do_syscall_64+0xbe/0x3b0
[  182.556560][T13470]  do_syscall_64+0xfa/0x3b0
[  182.556568][T13470]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.556576][T13470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.556583][T13470]  ? exc_page_fault+0x9f/0xf0
[  182.556592][T13470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.556598][T13470] RIP: 0033:0x7f2b4bd8ebe9
[  182.556605][T13470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.556610][T13470] RSP: 002b:00007f2b4cb10038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  182.556619][T13470] RAX: ffffffffffffffda RBX: 00007f2b4bfb5fa0 RCX: 00007f2b4bd8ebe9
[  182.556623][T13470] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  182.556627][T13470] RBP: 00007f2b4be11e19 R08: 0000000000000000 R09: 0000000000000000
[  182.556631][T13470] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  182.556635][T13470] R13: 00007f2b4bfb6038 R14: 00007f2b4bfb5fa0 R15: 00007ffd31c151e8
[  182.556646][T13470]  </TASK>
[  183.226625][T13503] IPVS: Error connecting to the multicast addr
[  183.290849][T13509] netlink: 'syz.0.3333': attribute type 1 has an invalid length.
[  183.296519][T13509] netlink: 'syz.0.3333': attribute type 2 has an invalid length.
[  183.299889][T13509] netlink: 'syz.0.3333': attribute type 1 has an invalid length.
[  183.349117][T13513] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  184.030554][T13560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.035007][T13560] syzkaller0: entered promiscuous mode
[  184.044826][T13560] syzkaller0: entered allmulticast mode
[  184.068207][T13560] tipc: Resetting bearer <eth:syzkaller0>
[  184.072180][T13558] tipc: Resetting bearer <eth:syzkaller0>
[  184.082890][T13558] tipc: Disabling bearer <eth:syzkaller0>
[  184.120339][T13564] netlink: 'syz.2.3359': attribute type 1 has an invalid length.
[  185.173897][T13648] netlink: 'syz.2.3398': attribute type 1 has an invalid length.
[  185.177336][T13648] netlink: 'syz.2.3398': attribute type 4 has an invalid length.
[  185.909480][T13703] netlink: 'syz.1.3415': attribute type 8 has an invalid length.
[  186.338758][T13729] lo speed is unknown, defaulting to 1000
[  186.934609][T13744] nbd1: detected capacity change from 0 to 127
[  186.944380][   T56] block nbd1: Receive control failed (result -32)
[  186.970939][T13666] block nbd1: Dead connection, failed to find a fallback
[  186.981620][T13666] block nbd1: shutting down sockets
[  186.984921][T13666] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  186.988506][T13666] Buffer I/O error on dev nbd1, logical block 0, async page read
[  186.992876][T13666] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.001129][T13666] Buffer I/O error on dev nbd1, logical block 1, async page read
[  187.011083][T13666] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.019865][T13666] Buffer I/O error on dev nbd1, logical block 2, async page read
[  187.026489][T13666] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.030169][T13666] Buffer I/O error on dev nbd1, logical block 3, async page read
[  187.034422][T13753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.035844][T13666] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.037066][T13753] syzkaller0: entered promiscuous mode
[  187.040096][T13666] Buffer I/O error on dev nbd1, logical block 0, async page read
[  187.040240][T13666] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.043391][T13753] syzkaller0: entered allmulticast mode
[  187.046226][T13666] Buffer I/O error on dev nbd1, logical block 1, async page read
[  187.055291][T13666] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.059150][T13666] Buffer I/O error on dev nbd1, logical block 2, async page read
[  187.061816][T13666] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.065351][    C0] net_ratelimit: 18 callbacks suppressed
[  187.065362][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  187.068635][T13753] tipc: Resetting bearer <eth:syzkaller0>
[  187.080533][T13666] Buffer I/O error on dev nbd1, logical block 3, async page read
[  187.084580][T13666] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.088999][T13752] tipc: Resetting bearer <eth:syzkaller0>
[  187.093196][T13666] Buffer I/O error on dev nbd1, logical block 0, async page read
[  187.098551][T13666] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.102107][T13666] Buffer I/O error on dev nbd1, logical block 1, async page read
[  187.115547][T13666] ldm_validate_partition_table(): Disk read failed.
[  187.119110][T13666] Dev nbd1: unable to read RDB block 0
[  187.122453][T13666]  nbd1: unable to read partition table
[  187.129647][T13666] ldm_validate_partition_table(): Disk read failed.
[  187.130160][T13752] tipc: Disabling bearer <eth:syzkaller0>
[  187.139101][T13666] Dev nbd1: unable to read RDB block 0
[  187.147958][T13666]  nbd1: unable to read partition table
[  187.174189][T13768] netlink: 'syz.2.3439': attribute type 13 has an invalid length.
[  187.176770][T13768] netlink: 'syz.2.3439': attribute type 17 has an invalid length.
[  187.247658][T13768] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.252046][T13768] 8021q: adding VLAN 0 to HW filter on device team0
[  187.262472][T13768] tipc: Resetting bearer <eth:team0>
[  187.271755][T13768] tipc: Resetting bearer <eth:team0>
[  187.281235][T13768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.315698][T13778] lo speed is unknown, defaulting to 1000
[  187.422008][T13789] syz.0.3448: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  187.428908][T13789] CPU: 0 UID: 0 PID: 13789 Comm: syz.0.3448 Not tainted syzkaller #0 PREEMPT(full) 
[  187.428926][T13789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.428933][T13789] Call Trace:
[  187.428938][T13789]  <TASK>
[  187.428944][T13789]  dump_stack_lvl+0x189/0x250
[  187.428965][T13789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.428980][T13789]  ? __pfx__printk+0x10/0x10
[  187.428998][T13789]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  187.429018][T13789]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  187.429033][T13789]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  187.429048][T13789]  warn_alloc+0x214/0x310
[  187.429087][T13789]  ? stack_depot_save_flags+0x40/0x860
[  187.429106][T13789]  ? __pfx_warn_alloc+0x10/0x10
[  187.429125][T13789]  ? kasan_save_track+0x4f/0x80
[  187.429141][T13789]  ? xskq_create+0x56/0x170
[  187.429155][T13789]  ? xsk_init_queue+0xb0/0x110
[  187.429167][T13789]  ? xsk_setsockopt+0x4dc/0x8d0
[  187.429179][T13789]  ? do_sock_setsockopt+0x17c/0x1b0
[  187.429189][T13789]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  187.429200][T13789]  ? do_syscall_64+0xfa/0x3b0
[  187.429214][T13789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.429233][T13789]  __vmalloc_node_range_noprof+0x125/0x12f0
[  187.429273][T13789]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  187.429292][T13789]  ? xskq_create+0x56/0x170
[  187.429308][T13789]  ? __kasan_kmalloc+0x93/0xb0
[  187.429326][T13789]  vmalloc_user_noprof+0xad/0xf0
[  187.429343][T13789]  ? xskq_create+0xbf/0x170
[  187.429358][T13789]  xskq_create+0xbf/0x170
[  187.429374][T13789]  xsk_init_queue+0xb0/0x110
[  187.429389][T13789]  xsk_setsockopt+0x4dc/0x8d0
[  187.429402][T13789]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.429416][T13789]  ? __pfx_aa_sk_perm+0x10/0x10
[  187.429433][T13789]  ? aa_sock_opt_perm+0xff/0x1b0
[  187.429446][T13789]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  187.429457][T13789]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.429471][T13789]  do_sock_setsockopt+0x17c/0x1b0
[  187.429487][T13789]  __x64_sys_setsockopt+0x13f/0x1b0
[  187.429503][T13789]  do_syscall_64+0xfa/0x3b0
[  187.429517][T13789]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.429530][T13789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.429541][T13789]  ? exc_page_fault+0x9f/0xf0
[  187.429557][T13789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.429569][T13789] RIP: 0033:0x7fe5c9f8ebe9
[  187.429580][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.429590][T13789] RSP: 002b:00007fe5cae5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  187.429602][T13789] RAX: ffffffffffffffda RBX: 00007fe5ca1b5fa0 RCX: 00007fe5c9f8ebe9
[  187.429611][T13789] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  187.429618][T13789] RBP: 00007fe5ca011e19 R08: 0000000000000004 R09: 0000000000000000
[  187.429625][T13789] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.429632][T13789] R13: 00007fe5ca1b6038 R14: 00007fe5ca1b5fa0 R15: 00007ffdc1937d88
[  187.429653][T13789]  </TASK>
[  187.429686][T13789] Mem-Info:
[  187.451141][T13761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.527309][T13789] active_anon:13252 inactive_anon:0 isolated_anon:0
[  187.527309][T13789]  active_file:1353 inactive_file:38259 isolated_file:0
[  187.527309][T13789]  unevictable:1768 dirty:193 writeback:0
[  187.527309][T13789]  slab_reclaimable:10077 slab_unreclaimable:120724
[  187.527309][T13789]  mapped:18198 shmem:2415 pagetables:1058
[  187.527309][T13789]  sec_pagetables:0 bounce:0
[  187.527309][T13789]  kernel_misc_reclaimable:0
[  187.527309][T13789]  free:212239 free_pcp:22826 free_cma:0
[  187.571013][T13789] Node 0 active_anon:12984kB inactive_anon:0kB active_file:3992kB inactive_file:19036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35432kB dirty:628kB writeback:0kB shmem:4972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5080kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  187.582833][T13789] Node 1 active_anon:40024kB inactive_anon:0kB active_file:1420kB inactive_file:134000kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37360kB dirty:144kB writeback:0kB shmem:4688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6840kB pagetables:1656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  187.594258][T13789] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  187.614532][T13789] lowmem_reserve[]: 0 811 811 811 811
[  187.616538][T13789] Node 0 DMA32 free:216536kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12916kB inactive_anon:0kB active_file:3992kB inactive_file:19036kB unevictable:3536kB writepending:628kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:46108kB local_pcp:26384kB free_cma:0kB
[  187.646636][T13789] lowmem_reserve[]: 0 0 0 0 0
[  187.648761][T13789] Node 1 DMA32 free:443216kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:15304kB local_pcp:7168kB free_cma:0kB
[  187.659758][T13789] lowmem_reserve[]: 0 0 854 854 854
[  187.662196][T13789] Node 1 Normal free:173844kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40024kB inactive_anon:0kB active_file:1420kB inactive_file:133992kB unevictable:3536kB writepending:144kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29208kB local_pcp:7512kB free_cma:0kB
[  187.683469][T13789] lowmem_reserve[]: 0 0 0 0 0
[  187.685988][T13789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  187.691533][T13789] Node 0 DMA32: 528*4kB (ME) 141*8kB (UME) 172*16kB (UME) 222*32kB (UM) 422*64kB (UME) 184*128kB (UM) 83*256kB (UM) 51*512kB (U) 17*1024kB (U) 3*2048kB (UM) 20*4096kB (UM) = 216488kB
[  187.699516][T13789] Node 1 DMA32: 3*4kB (U) 7*8kB (UM) 6*16kB (UM) 10*32kB (UM) 6*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 5*1024kB (UM) 4*2048kB (UM) 104*4096kB (UM) = 443236kB
[  187.707338][T13789] Node 1 Normal: 3*4kB (UME) 3*8kB (ME) 507*16kB (UME) 294*32kB (UME) 250*64kB (UME) 146*128kB (UME) 71*256kB (UM) 38*512kB (UM) 18*1024kB (UM) 4*2048kB (UME) 14*4096kB (UM) = 173844kB
[  187.715624][T13789] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  187.719634][T13789] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  187.723821][T13789] 42031 total pagecache pages
[  187.726010][T13789] 0 pages in swap cache
[  187.727837][T13789] Free swap  = 124996kB
[  187.729716][T13789] Total swap = 124996kB
[  187.731631][T13789] 786301 pages RAM
[  187.733384][T13789] 0 pages HighMem/MovableOnly
[  187.735614][T13789] 241332 pages reserved
[  187.737597][T13789] 0 pages cma reserved
[  187.775047][T13799] netlink: 'syz.1.3452': attribute type 10 has an invalid length.
[  187.851700][T13801] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  187.857337][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.861271][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.103382][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  188.528841][T13820] __nla_validate_parse: 10 callbacks suppressed
[  188.528857][T13820] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3461'.
[  188.540635][T13820] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3461'.
[  188.788018][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'.
[  189.105183][T13858] bridge0: port 1(batadv2) entered blocking state
[  189.108120][T13858] bridge0: port 1(batadv2) entered disabled state
[  189.112798][T13858] batadv2: entered allmulticast mode
[  189.122894][T13858] batadv2: entered promiscuous mode
[  189.153381][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  189.272968][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3480'.
[  189.579480][T13888] netlink: 'syz.0.3490': attribute type 1 has an invalid length.
[  189.603987][ T5871] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  189.607949][ T5871] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  189.704472][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'.
[  189.943801][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'.
[  189.946990][T13909] nbd: socks must be embedded in a SOCK_ITEM attr
[  189.950073][T13909] block nbd2: shutting down sockets
[  190.008950][T13911] netlink: 'syz.2.3501': attribute type 10 has an invalid length.
[  190.024424][T13911] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  190.183591][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  190.526012][T13931] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3510'.
[  190.530682][T13931] nbd: illegal input index 65508
[  190.565367][T13934] netlink: 'syz.1.3512': attribute type 1 has an invalid length.
[  190.568781][T13934] netlink: 'syz.1.3512': attribute type 1 has an invalid length.
[  191.223429][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  191.657197][T13979] netlink: 'syz.0.3528': attribute type 4 has an invalid length.
[  191.665245][T13979] netlink: 'syz.0.3528': attribute type 4 has an invalid length.
[  191.690149][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3531'.
[  191.835018][T13998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3539'.
[  192.215148][T14033] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3556'.
[  192.263285][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  192.307108][T14039] syz_tun: entered allmulticast mode
[  192.315774][T14039] dvmrp8: entered allmulticast mode
[  192.325921][T14039] syz_tun: left allmulticast mode
[  192.328095][T14039] dvmrp8: left allmulticast mode
[  192.379757][T14040] netlink: 'syz.2.3558': attribute type 23 has an invalid length.
[  193.061505][T14082] vlan0: entered promiscuous mode
[  193.230507][T14096] tap0: tun_chr_ioctl cmd 35108
[  193.303415][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  193.676528][T14123] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  193.681476][T14124] __nla_validate_parse: 3 callbacks suppressed
[  193.681488][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'.
[  193.985625][T14147] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3606'.
[  194.290760][T14176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.299142][T14176] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  194.303267][T14176] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  194.309977][T14176] tipc: Resetting bearer <eth:syzkaller0>
[  194.343512][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  194.585735][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3628'.
[  194.642876][T14197] netlink: 'syz.2.3630': attribute type 10 has an invalid length.
[  194.646242][T14197] tipc: Resetting bearer <eth:team0>
[  194.651966][T14197] tipc: Resetting bearer <eth:team0>
[  194.659688][T14197] 8021q: adding VLAN 0 to HW filter on device team0
[  194.662741][T14197] bond0: (slave team0): Enslaving as an active interface with an up link
[  194.895193][T14209] netlink: 'syz.2.3636': attribute type 2 has an invalid length.
[  194.897956][T14209] netlink: 'syz.2.3636': attribute type 2 has an invalid length.
[  194.971712][T14213] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3638'.
[  195.383454][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  195.407739][T14248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3654'.
[  196.290406][T14294] netlink: 'syz.0.3674': attribute type 1 has an invalid length.
[  196.348271][T14294] 8021q: adding VLAN 0 to HW filter on device bond3
[  196.368292][T14300] bond3: (slave geneve3): making interface the new active one
[  196.384146][T14300] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  196.396271][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  196.401657][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  196.416551][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  196.419321][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  196.423283][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  196.428051][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'.
[  196.497882][T14311] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3681'.
[  196.695564][T14331] netlink: 'syz.1.3691': attribute type 1 has an invalid length.
[  196.698357][T14331] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3691'.
[  197.062986][T14355] lo speed is unknown, defaulting to 1000
[  197.066568][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  197.438304][T14370] lo speed is unknown, defaulting to 1000
[  197.473449][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  197.680299][T14379] lo speed is unknown, defaulting to 1000
[  197.845643][T14390] netlink: 'syz.1.3713': attribute type 10 has an invalid length.
[  197.850262][T14390] 8021q: adding VLAN 0 to HW filter on device team0
[  197.877829][T14390] bond0: (slave team0): Enslaving as an active interface with an up link
[  198.312754][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'.
[  198.360700][T14411] netlink: 'syz.0.3729': attribute type 2 has an invalid length.
[  198.503454][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  199.105267][T14418] netlink: 'syz.2.3725': attribute type 1 has an invalid length.
[  199.149154][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'.
[  199.385981][T14440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3736'.
[  199.419904][T14440] netlink: 'syz.2.3736': attribute type 10 has an invalid length.
[  199.543448][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  199.761829][T14469] team0: entered promiscuous mode
[  199.769516][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3750'.
[  199.773817][T14469] tipc: Resetting bearer <eth:team0>
[  199.958328][T14469] bond0: (slave team0): Releasing backup interface
[  199.961961][T14469] tipc: Resetting bearer <eth:team0>
[  199.965212][T14469] team0 (unregistering): left promiscuous mode
[  199.967983][T14469] tipc: Disabling bearer <eth:team0>
[  200.224650][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3762'.
[  200.232067][T14496] macsec2: entered promiscuous mode
[  200.234619][T14496] macvlan1: entered promiscuous mode
[  200.237464][T14496] macvlan1: left promiscuous mode
[  200.386391][T14505] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.541541][T14516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.547310][T14516] syzkaller0: entered promiscuous mode
[  200.549730][T14516] syzkaller0: entered allmulticast mode
[  200.574975][T14516] tipc: Resetting bearer <eth:syzkaller0>
[  200.582721][T14515] tipc: Resetting bearer <eth:syzkaller0>
[  200.585543][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  200.605982][T14515] tipc: Disabling bearer <eth:syzkaller0>
[  200.616809][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3770'.
[  200.864906][T14544] netlink: 'syz.0.3784': attribute type 3 has an invalid length.
[  201.271475][T14560] lo speed is unknown, defaulting to 1000
[  201.604427][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'.
[  201.623486][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  201.972891][T14595] bond0: (slave team0): Releasing backup interface
[  201.999346][T14595] bond0: (slave batadv0): Releasing backup interface
[  202.007523][T14595] bond1: (slave gretap1): Releasing active interface
[  202.011645][T14595] bond4: (slave geneve2): Releasing active interface
[  202.019205][T14595] geneve2: left promiscuous mode
[  202.034309][T14595] bond5: (slave veth7): Releasing backup interface
[  202.040621][T14595] batadv2: left allmulticast mode
[  202.042293][T14595] batadv2: left promiscuous mode
[  202.046186][T14595] bridge0: port 1(batadv2) entered disabled state
[  202.052078][ T5895] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.055314][ T5895] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.077086][ T5895] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.081104][ T5895] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.180593][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'.
[  202.267505][T14617] netlink: 'syz.0.3815': attribute type 3 has an invalid length.
[  202.271141][T14617] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3815'.
[  202.321206][T14625] netlink: 'syz.0.3817': attribute type 1 has an invalid length.
[  202.325452][T14625] netlink: 'syz.0.3817': attribute type 1 has an invalid length.
[  202.430091][T14625] netlink: 'syz.0.3817': attribute type 1 has an invalid length.
[  202.454105][T14625] 8021q: adding VLAN 0 to HW filter on device bond4
[  202.498965][T14637] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  202.579008][T14643] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3824'.
[  202.673467][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  202.684178][T14650] syzkaller1: entered promiscuous mode
[  202.686668][T14650] syzkaller1: entered allmulticast mode
[  203.105944][T14679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3842'.
[  203.713467][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  204.457521][T14737] 8021q: adding VLAN 0 to HW filter on device team0
[  204.465397][T14737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.524125][T14743] __nla_validate_parse: 1 callbacks suppressed
[  204.524140][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3861'.
[  204.536598][T14746] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  204.549267][T14747] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.729824][T14766] syzkaller1: entered promiscuous mode
[  204.732200][T14766] syzkaller1: entered allmulticast mode
[  204.743515][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  204.747431][T14768] lo speed is unknown, defaulting to 1000
[  205.793449][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  205.953803][T14796] netlink: 'syz.1.3880': attribute type 13 has an invalid length.
[  205.956943][T14796] netlink: 'syz.1.3880': attribute type 17 has an invalid length.
[  206.028355][T14796] 8021q: adding VLAN 0 to HW filter on device team0
[  206.041111][T14796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.072779][T14801] lo speed is unknown, defaulting to 1000
[  206.169375][T14796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.194883][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'.
[  206.823515][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  207.084627][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3892'.
[  207.376585][T14835] sock: sock_set_timeout: `syz.1.3898' (pid 14835) tries to set negative timeout
[  207.709267][T14838] syzkaller0: entered promiscuous mode
[  207.711845][T14838] syzkaller0: entered allmulticast mode
[  207.864326][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  208.903248][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  209.071965][ T4561] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  209.281391][T14899] xt_time: unknown flags 0xf4
[  209.513560][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3938'.
[  209.701133][T14944] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  209.730761][T14956] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3952'.
[  209.798781][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3954'.
[  209.904414][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3958'.
[  209.943333][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  209.988408][T14976] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3961'.
[  210.112778][T14994] openvswitch: netlink: Message has 16 unknown bytes.
[  210.208300][ T5895] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  210.535295][T15007] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3974'.
[  210.993229][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  211.022790][T15018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3980'.
[  211.092793][T15027] netlink: 'syz.1.3984': attribute type 4 has an invalid length.
[  211.098198][T15028] netlink: 'syz.0.3983': attribute type 5 has an invalid length.
[  211.103971][  T793] lo speed is unknown, defaulting to 1000
[  211.106446][  T793] syz0: Port: 1 Link DOWN
[  211.108376][  T793] lo speed is unknown, defaulting to 1000
[  211.112183][T15027] netlink: 'syz.1.3984': attribute type 4 has an invalid length.
[  211.122045][  T793] lo speed is unknown, defaulting to 1000
[  211.131328][  T793] syz0: Port: 1 Link ACTIVE
[  211.133547][  T793] lo speed is unknown, defaulting to 1000
[  211.274278][T15041] batadv_slave_0: entered promiscuous mode
[  211.277697][T15041] batadv_slave_0: left promiscuous mode
[  211.783365][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  211.788158][T15071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.033278][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  212.077076][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'.
[  212.310872][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4017'.
[  212.500598][T15115] netlink: 'syz.1.4025': attribute type 29 has an invalid length.
[  212.505900][T15115] netlink: 'syz.1.4025': attribute type 29 has an invalid length.
[  212.517316][T15115] netlink: 488 bytes leftover after parsing attributes in process `syz.1.4025'.
[  213.037252][T15158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.063300][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  213.411881][T15177] netlink: 'syz.2.4053': attribute type 1 has an invalid length.
[  213.415451][T15177] netlink: 'syz.2.4053': attribute type 2 has an invalid length.
[  213.418607][T15177] netlink: 'syz.2.4053': attribute type 1 has an invalid length.
[  213.421810][T15177] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.4053'.
[  214.092781][T15207] netlink: 'syz.1.4068': attribute type 6 has an invalid length.
[  214.096354][T15207] netlink: 'syz.1.4068': attribute type 5 has an invalid length.
[  214.113352][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  214.401416][T15239] tc_dump_action: action bad kind
[  214.632805][T15263] bond6: entered promiscuous mode
[  214.635796][T15263] 8021q: adding VLAN 0 to HW filter on device bond6
[  215.027181][T15283] __nla_validate_parse: 4 callbacks suppressed
[  215.027196][T15283] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4103'.
[  215.068047][T15285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4104'.
[  215.081373][T15285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4104'.
[  215.153380][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  215.199705][T15291] tipc: Trying to set illegal importance in message
[  215.250087][T15293] syzkaller1: entered promiscuous mode
[  215.252506][T15293] syzkaller1: entered allmulticast mode
[  215.282501][T15295] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  215.491964][T15308] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4115'.
[  215.659763][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4121'.
[  215.746590][T15331] syz_tun: entered promiscuous mode
[  215.749483][T15331] batadv_slave_0: entered promiscuous mode
[  215.752157][T15331] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  215.756467][T15331] hsr1: entered allmulticast mode
[  215.758115][T15331] syz_tun: entered allmulticast mode
[  215.759793][T15331] batadv_slave_0: entered allmulticast mode
[  216.193332][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  216.250398][T15370] pim6reg1: entered promiscuous mode
[  216.252611][T15370] pim6reg1: entered allmulticast mode
[  216.554020][T15332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  216.797072][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'.
[  216.800997][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'.
[  216.915878][T15410] bridge0: port 1(erspan0) entered blocking state
[  216.918895][T15410] bridge0: port 1(erspan0) entered disabled state
[  216.922430][T15410] erspan0: entered allmulticast mode
[  216.926915][T15410] erspan0: left allmulticast mode
[  217.039104][T15420] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4158'.
[  217.190926][T15431] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  217.223380][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  218.009710][T15472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4179'.
[  218.263285][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  218.941878][T15514] validate_nla: 1 callbacks suppressed
[  218.941893][T15514] netlink: 'syz.0.4196': attribute type 1 has an invalid length.
[  218.948611][T15514] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4196'.
[  219.072115][T15515] veth1_to_team: left allmulticast mode
[  219.079081][T15515] vlan0: left promiscuous mode
[  219.082820][T15515] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  219.092830][T15515] geneve2: left promiscuous mode
[  219.098706][T15515] macvtap1: left promiscuous mode
[  219.101026][T15515] macvtap1: left allmulticast mode
[  219.106437][T15515] gtp1: left promiscuous mode
[  219.108902][T15515] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  219.112087][T15515] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  219.303311][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  219.345068][T15530] nbd: socks must be embedded in a SOCK_ITEM attr
[  219.557037][T15554] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.562114][T15554] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  219.582766][T15554] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  219.687387][T15560] netlink: 'syz.2.4216': attribute type 1 has an invalid length.
[  219.705878][T15558] bond3: (slave geneve3): Releasing active interface
[  219.726665][ T5895] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  219.730240][ T5895] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  219.739990][ T5895] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  219.743197][ T5895] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  219.791535][T15564] netlink: 'syz.0.4215': attribute type 10 has an invalid length.
[  219.798952][T15564] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  219.802319][T15564] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  220.353298][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  220.420115][T15591] macsec0: left allmulticast mode
[  220.422420][T15591] ip6gre1: left allmulticast mode
[  220.431980][T15591] vti0: left allmulticast mode
[  220.437316][T15591] hsr1: left allmulticast mode
[  220.439396][T15591] syz_tun: left allmulticast mode
[  220.441602][T15591] batadv_slave_0: left allmulticast mode
[  220.443232][T15595] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  220.598026][T15603] lo: MTU too low for tipc bearer
[  220.600190][T15603] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  220.630224][T15607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.797881][T15623] syzkaller1: entered promiscuous mode
[  220.799806][T15623] syzkaller1: entered allmulticast mode
[  221.098717][T15660] __nla_validate_parse: 2 callbacks suppressed
[  221.098731][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4261'.
[  221.129756][T15660] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  221.138732][T15660] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  221.286493][T15676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4254'.
[  221.292580][T15676] IPVS: Unknown mcast interface: bridGe_slave0
[  221.383447][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  221.464534][T15689] nbd: nbd1 already in use
[  221.466901][T15689] block nbd1: NBD_DISCONNECT
[  221.468893][T15689] block nbd1: Send disconnect failed -32
[  221.502326][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'.
[  221.508619][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4276'.
[  221.511917][T15691] netlink: 540 bytes leftover after parsing attributes in process `syz.2.4276'.
[  221.552017][T15695] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  222.049367][T15744] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4302'.
[  222.165806][T15756] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4308'.
[  222.169492][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4308'.
[  222.291125][T15766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.299686][T15766] syzkaller0: entered promiscuous mode
[  222.302016][T15766] syzkaller0: entered allmulticast mode
[  222.304685][T15769] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  222.330749][T15766] tipc: Resetting bearer <eth:syzkaller0>
[  222.335859][T15765] tipc: Resetting bearer <eth:syzkaller0>
[  222.349062][T15765] tipc: Disabling bearer <eth:syzkaller0>
[  222.433295][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  222.482195][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'.
[  222.517934][T15798] netlink: 'syz.0.4329': attribute type 4 has an invalid length.
[  222.572946][T15805] netlink: 'syz.0.4329': attribute type 4 has an invalid length.
[  222.628586][T15807] : entered promiscuous mode
[  222.658936][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4335'.
[  222.858484][T15839] netlink: 'syz.2.4347': attribute type 1 has an invalid length.
[  222.924987][T15846] netlink: 'syz.2.4351': attribute type 10 has an invalid length.
[  223.131330][T15863] openvswitch: netlink: Duplicate or invalid key (type 0).
[  223.463719][    C0] net_ratelimit: 1 callbacks suppressed
[  223.463735][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  224.292080][T15902] netlink: 'syz.1.4376': attribute type 2 has an invalid length.
[  224.503469][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  224.558290][T15923] netlink: 'syz.0.4386': attribute type 11 has an invalid length.
[  224.930737][T15963] netlink: 'syz.2.4405': attribute type 9 has an invalid length.
[  225.534128][T16020] syzkaller1: entered promiscuous mode
[  225.536476][T16020] syzkaller1: entered allmulticast mode
[  225.553267][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  225.845049][T16040] 
[  225.846061][T16040] ======================================================
[  225.848726][T16040] WARNING: possible circular locking dependency detected
[  225.851020][T16040] syzkaller #0 Not tainted
[  225.852680][T16040] ------------------------------------------------------
[  225.855802][T16040] syz.2.4441/16040 is trying to acquire lock:
[  225.857719][T16040] ffff888021bd6808 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450
[  225.860700][T16040] 
[  225.860700][T16040] but task is already holding lock:
[  225.863125][T16040] ffff888021bd62c8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450
[  225.866356][T16040] 
[  225.866356][T16040] which lock already depends on the new lock.
[  225.866356][T16040] 
[  225.870126][T16040] 
[  225.870126][T16040] the existing dependency chain (in reverse order) is:
[  225.873464][T16040] 
[  225.873464][T16040] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  225.876729][T16040]        lock_acquire+0x120/0x360
[  225.878522][T16040]        blk_alloc_queue+0x538/0x620
[  225.880328][T16040]        __blk_mq_alloc_disk+0x15c/0x340
[  225.882343][T16040]        nbd_dev_add+0x46c/0xae0
[  225.884106][T16040]        nbd_init+0x168/0x1f0
[  225.885689][T16040]        do_one_initcall+0x236/0x820
[  225.887438][T16040]        do_initcall_level+0x104/0x190
[  225.889227][T16040]        do_initcalls+0x59/0xa0
[  225.890954][T16040]        kernel_init_freeable+0x334/0x4b0
[  225.893036][T16040]        kernel_init+0x1d/0x1d0
[  225.894700][T16040]        ret_from_fork+0x3fc/0x770
[  225.896441][T16040]        ret_from_fork_asm+0x1a/0x30
[  225.898157][T16040] 
[  225.898157][T16040] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  225.900620][T16040]        lock_acquire+0x120/0x360
[  225.902507][T16040]        fs_reclaim_acquire+0x72/0x100
[  225.904567][T16040]        __kmalloc_cache_noprof+0x41/0x3d0
[  225.906859][T16040]        virtio_transport_do_socket_init+0x57/0x2f0
[  225.909218][T16040]        vsock_assign_transport+0x5ae/0x770
[  225.911406][T16040]        vsock_connect+0x5ab/0xe20
[  225.913040][T16040]        __sys_connect+0x316/0x440
[  225.914677][T16040]        __x64_sys_connect+0x7a/0x90
[  225.916395][T16040]        do_syscall_64+0xfa/0x3b0
[  225.918028][T16040]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.920081][T16040] 
[  225.920081][T16040] -> #4 (sk_lock-AF_VSOCK){+.+.}-{0:0}:
[  225.922663][T16040]        lock_acquire+0x120/0x360
[  225.924552][T16040]        lock_sock_nested+0x48/0x100
[  225.926695][T16040]        vsock_shutdown+0x67/0x2a0
[  225.928658][T16040]        nbd_mark_nsock_dead+0x2e9/0x560
[  225.930619][T16040]        sock_shutdown+0x15e/0x260
[  225.932360][T16040]        nbd_config_put+0x342/0x790
[  225.934067][T16040]        nbd_genl_connect+0x167c/0x18f0
[  225.935887][T16040]        genl_family_rcv_msg_doit+0x215/0x300
[  225.937975][T16040]        genl_rcv_msg+0x60e/0x790
[  225.939641][T16040]        netlink_rcv_skb+0x208/0x470
[  225.941868][T16040]        genl_rcv+0x28/0x40
[  225.943864][T16040]        netlink_unicast+0x82f/0x9e0
[  225.946040][T16040]        netlink_sendmsg+0x805/0xb30
[  225.948232][T16040]        __sock_sendmsg+0x21c/0x270
[  225.950419][T16040]        ____sys_sendmsg+0x505/0x830
[  225.952227][T16040]        ___sys_sendmsg+0x21f/0x2a0
[  225.953880][T16040]        __x64_sys_sendmsg+0x19b/0x260
[  225.955659][T16040]        do_syscall_64+0xfa/0x3b0
[  225.957273][T16040]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.959340][T16040] 
[  225.959340][T16040] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  225.961769][T16040]        lock_acquire+0x120/0x360
[  225.963392][T16040]        __mutex_lock+0x187/0x1350
[  225.965061][T16040]        nbd_queue_rq+0x257/0xf10
[  225.966784][T16040]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  225.968749][T16040]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  225.971095][T16040]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  225.973394][T16040]        blk_mq_run_hw_queue+0x348/0x4f0
[  225.975375][T16040]        blk_mq_dispatch_list+0xd0c/0xe00
[  225.977482][T16040]        blk_mq_flush_plug_list+0x469/0x550
[  225.979455][T16040]        __blk_flush_plug+0x3d3/0x4b0
[  225.981286][T16040]        __submit_bio+0x2d3/0x5a0
[  225.982975][T16040]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  225.985186][T16040]        block_read_full_folio+0x599/0x830
[  225.987068][T16040]        filemap_read_folio+0x117/0x380
[  225.988940][T16040]        do_read_cache_folio+0x350/0x590
[  225.990825][T16040]        read_part_sector+0xb6/0x2b0
[  225.992978][T16040]        adfspart_check_ICS+0xa4/0xa50
[  225.994769][T16040]        bdev_disk_changed+0x75f/0x14b0
[  225.996825][T16040]        blkdev_get_whole+0x380/0x510
[  225.998583][T16040]        bdev_open+0x31e/0xd30
[  226.000206][T16040]        blkdev_open+0x3a8/0x510
[  226.001876][T16040]        do_dentry_open+0x953/0x13f0
[  226.003611][T16040]        vfs_open+0x3b/0x340
[  226.005093][T16040]        path_openat+0x2ee5/0x3830
[  226.006735][T16040]        do_filp_open+0x1fa/0x410
[  226.008386][T16040]        do_sys_openat2+0x121/0x1c0
[  226.010218][T16040]        __x64_sys_openat+0x138/0x170
[  226.012082][T16040]        do_syscall_64+0xfa/0x3b0
[  226.013654][T16040]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.015572][T16040] 
[  226.015572][T16040] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  226.018081][T16040]        lock_acquire+0x120/0x360
[  226.020172][T16040]        __mutex_lock+0x187/0x1350
[  226.022215][T16040]        nbd_queue_rq+0xc8/0xf10
[  226.024322][T16040]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  226.026918][T16040]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  226.029765][T16040]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  226.032500][T16040]        blk_mq_run_hw_queue+0x348/0x4f0
[  226.034878][T16040]        blk_mq_dispatch_list+0xd0c/0xe00
[  226.037351][T16040]        blk_mq_flush_plug_list+0x469/0x550
[  226.039920][T16040]        __blk_flush_plug+0x3d3/0x4b0
[  226.042154][T16040]        __submit_bio+0x2d3/0x5a0
[  226.044235][T16040]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  226.046872][T16040]        block_read_full_folio+0x599/0x830
[  226.049308][T16040]        filemap_read_folio+0x117/0x380
[  226.051645][T16040]        do_read_cache_folio+0x350/0x590
[  226.053969][T16040]        read_part_sector+0xb6/0x2b0
[  226.056205][T16040]        adfspart_check_ICS+0xa4/0xa50
[  226.058469][T16040]        bdev_disk_changed+0x75f/0x14b0
[  226.060794][T16040]        blkdev_get_whole+0x380/0x510
[  226.063030][T16040]        bdev_open+0x31e/0xd30
[  226.065045][T16040]        blkdev_open+0x3a8/0x510
[  226.067111][T16040]        do_dentry_open+0x953/0x13f0
[  226.069357][T16040]        vfs_open+0x3b/0x340
[  226.071318][T16040]        path_openat+0x2ee5/0x3830
[  226.073469][T16040]        do_filp_open+0x1fa/0x410
[  226.075567][T16040]        do_sys_openat2+0x121/0x1c0
[  226.077730][T16040]        __x64_sys_openat+0x138/0x170
[  226.079934][T16040]        do_syscall_64+0xfa/0x3b0
[  226.082130][T16040]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.084825][T16040] 
[  226.084825][T16040] -> #1 (set->srcu){.+.+}-{0:0}:
[  226.087800][T16040]        lock_sync+0xba/0x160
[  226.089862][T16040]        __synchronize_srcu+0x96/0x3a0
[  226.092207][T16040]        elevator_switch+0x12b/0x640
[  226.094496][T16040]        elevator_change+0x2d4/0x450
[  226.096773][T16040]        elevator_set_default+0x186/0x260
[  226.099242][T16040]        blk_register_queue+0x34e/0x3f0
[  226.101530][T16040]        __add_disk+0x677/0xd50
[  226.103616][T16040]        add_disk_fwnode+0xfc/0x480
[  226.105837][T16040]        nbd_dev_add+0x717/0xae0
[  226.107924][T16040]        nbd_init+0x168/0x1f0
[  226.109969][T16040]        do_one_initcall+0x236/0x820
[  226.112183][T16040]        do_initcall_level+0x104/0x190
[  226.114411][T16040]        do_initcalls+0x59/0xa0
[  226.116436][T16040]        kernel_init_freeable+0x334/0x4b0
[  226.118798][T16040]        kernel_init+0x1d/0x1d0
[  226.120805][T16040]        ret_from_fork+0x3fc/0x770
[  226.122923][T16040]        ret_from_fork_asm+0x1a/0x30
[  226.125175][T16040] 
[  226.125175][T16040] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  226.128390][T16040]        validate_chain+0xb9b/0x2140
[  226.130628][T16040]        __lock_acquire+0xab9/0xd20
[  226.132875][T16040]        lock_acquire+0x120/0x360
[  226.135019][T16040]        __mutex_lock+0x187/0x1350
[  226.137199][T16040]        elevator_change+0x19b/0x450
[  226.139414][T16040]        elevator_set_none+0x42/0xb0
[  226.141727][T16040]        blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  226.144473][T16040]        nbd_start_device+0x17f/0xb10
[  226.146736][T16040]        nbd_genl_connect+0x135b/0x18f0
[  226.149116][T16040]        genl_family_rcv_msg_doit+0x215/0x300
[  226.151650][T16040]        genl_rcv_msg+0x60e/0x790
[  226.153810][T16040]        netlink_rcv_skb+0x208/0x470
[  226.156074][T16040]        genl_rcv+0x28/0x40
[  226.157957][T16040]        netlink_unicast+0x82f/0x9e0
[  226.160189][T16040]        netlink_sendmsg+0x805/0xb30
[  226.162369][T16040]        __sock_sendmsg+0x21c/0x270
[  226.164588][T16040]        ____sys_sendmsg+0x505/0x830
[  226.166853][T16040]        ___sys_sendmsg+0x21f/0x2a0
[  226.169021][T16040]        __x64_sys_sendmsg+0x19b/0x260
[  226.171338][T16040]        do_syscall_64+0xfa/0x3b0
[  226.173440][T16040]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.176127][T16040] 
[  226.176127][T16040] other info that might help us debug this:
[  226.176127][T16040] 
[  226.180325][T16040] Chain exists of:
[  226.180325][T16040]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50
[  226.180325][T16040] 
[  226.185892][T16040]  Possible unsafe locking scenario:
[  226.185892][T16040] 
[  226.189097][T16040]        CPU0                    CPU1
[  226.191329][T16040]        ----                    ----
[  226.193554][T16040]   lock(&q->q_usage_counter(io)#50);
[  226.195841][T16040]                                lock(fs_reclaim);
[  226.198620][T16040]                                lock(&q->q_usage_counter(io)#50);
[  226.202028][T16040]   lock(&q->elevator_lock);
[  226.204041][T16040] 
[  226.204041][T16040]  *** DEADLOCK ***
[  226.204041][T16040] 
[  226.207462][T16040] 6 locks held by syz.2.4441/16040:
[  226.209642][T16040]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  226.213070][T16040]  #1: ffffffff8f59dcc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  226.216791][T16040]  #2: ffff888021e45988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0
[  226.221441][T16040]  #3: ffff888021e458d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0
[  226.225833][T16040]  #4: ffff888021bd62c8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450
[  226.230101][T16040]  #5: ffff888021bd6300 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x180/0x450
[  226.234417][T16040] 
[  226.234417][T16040] stack backtrace:
[  226.236855][T16040] CPU: 1 UID: 0 PID: 16040 Comm: syz.2.4441 Not tainted syzkaller #0 PREEMPT(full) 
[  226.236871][T16040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.236880][T16040] Call Trace:
[  226.236887][T16040]  <TASK>
[  226.236893][T16040]  dump_stack_lvl+0x189/0x250
[  226.236912][T16040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.236927][T16040]  ? __pfx__printk+0x10/0x10
[  226.236945][T16040]  ? print_lock_name+0xde/0x100
[  226.236962][T16040]  print_circular_bug+0x2ee/0x310
[  226.236977][T16040]  check_noncircular+0x134/0x160
[  226.236992][T16040]  validate_chain+0xb9b/0x2140
[  226.237011][T16040]  __lock_acquire+0xab9/0xd20
[  226.237031][T16040]  ? elevator_change+0x19b/0x450
[  226.237046][T16040]  lock_acquire+0x120/0x360
[  226.237062][T16040]  ? elevator_change+0x19b/0x450
[  226.237081][T16040]  __mutex_lock+0x187/0x1350
[  226.237097][T16040]  ? elevator_change+0x19b/0x450
[  226.237114][T16040]  ? xa_find_after+0xae/0x430
[  226.237132][T16040]  ? xa_find_after+0x402/0x430
[  226.237142][T16040]  ? elevator_change+0x19b/0x450
[  226.237158][T16040]  ? xa_find_after+0xae/0x430
[  226.237167][T16040]  ? __pfx___mutex_lock+0x10/0x10
[  226.237185][T16040]  ? __pfx_blk_mq_cancel_work_sync+0x10/0x10
[  226.237206][T16040]  elevator_change+0x19b/0x450
[  226.237223][T16040]  ? elevator_set_none+0x37/0xb0
[  226.237241][T16040]  elevator_set_none+0x42/0xb0
[  226.237258][T16040]  blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  226.237275][T16040]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  226.237291][T16040]  ? sysfs_add_file_mode_ns+0x259/0x300
[  226.237312][T16040]  nbd_start_device+0x17f/0xb10
[  226.237330][T16040]  ? device_create_file+0xf4/0x1c0
[  226.237341][T16040]  nbd_genl_connect+0x135b/0x18f0
[  226.237360][T16040]  ? __pfx_nbd_genl_connect+0x10/0x10
[  226.237378][T16040]  ? __nla_parse+0x40/0x60
[  226.237397][T16040]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  226.237412][T16040]  genl_family_rcv_msg_doit+0x215/0x300
[  226.237427][T16040]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  226.237444][T16040]  ? stack_trace_save+0x9c/0xe0
[  226.237458][T16040]  genl_rcv_msg+0x60e/0x790
[  226.237473][T16040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  226.237485][T16040]  ? __pfx_nbd_genl_connect+0x10/0x10
[  226.237505][T16040]  netlink_rcv_skb+0x208/0x470
[  226.237521][T16040]  ? __lock_acquire+0xab9/0xd20
[  226.237537][T16040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  226.237551][T16040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  226.237572][T16040]  ? down_read+0x1ad/0x2e0
[  226.237589][T16040]  genl_rcv+0x28/0x40
[  226.237630][T16040]  netlink_unicast+0x82f/0x9e0
[  226.237648][T16040]  ? __pfx_netlink_unicast+0x10/0x10
[  226.237664][T16040]  ? netlink_sendmsg+0x642/0xb30
[  226.237679][T16040]  ? skb_put+0x11b/0x210
[  226.237691][T16040]  netlink_sendmsg+0x805/0xb30
[  226.237709][T16040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.237726][T16040]  ? aa_sock_msg_perm+0xf1/0x1d0
[  226.237737][T16040]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  226.237750][T16040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.237766][T16040]  __sock_sendmsg+0x21c/0x270
[  226.237783][T16040]  ____sys_sendmsg+0x505/0x830
[  226.237796][T16040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.237810][T16040]  ? import_iovec+0x74/0xa0
[  226.237824][T16040]  ___sys_sendmsg+0x21f/0x2a0
[  226.237836][T16040]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.237857][T16040]  ? __fget_files+0x2a/0x420
[  226.237874][T16040]  ? __fget_files+0x3a0/0x420
[  226.237892][T16040]  __x64_sys_sendmsg+0x19b/0x260
[  226.237906][T16040]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  226.237921][T16040]  ? rcu_is_watching+0x15/0xb0
[  226.237933][T16040]  ? do_syscall_64+0xbe/0x3b0
[  226.237950][T16040]  do_syscall_64+0xfa/0x3b0
[  226.237965][T16040]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.237979][T16040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.237991][T16040]  ? exc_page_fault+0x9f/0xf0
[  226.238005][T16040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.238016][T16040] RIP: 0033:0x7f68a018ebe9
[  226.238029][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.238039][T16040] RSP: 002b:00007f68a1041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.238052][T16040] RAX: ffffffffffffffda RBX: 00007f68a03b5fa0 RCX: 00007f68a018ebe9
[  226.238060][T16040] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  226.238068][T16040] RBP: 00007f68a0211e19 R08: 0000000000000000 R09: 0000000000000000
[  226.238076][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.238083][T16040] R13: 00007f68a03b6038 R14: 00007f68a03b5fa0 R15: 00007ffe9eeab5a8
[  226.238097][T16040]  </TASK>
[  226.543159][T16040] nbd1: detected capacity change from 0 to 127
[  226.564721][   T56] block nbd1: Receive control failed (result -104)
[  226.566918][T13747] block nbd1: Receive control failed (result -32)
[  226.593336][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  227.623385][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  228.663329][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  229.703433][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  229.863813][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  229.866252][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  229.868843][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  229.871368][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  229.874010][   T60] block nbd1: Dead connection, failed to find a fallback
[  229.876941][   T60] block nbd1: shutting down sockets
[  229.879188][   T60] blk_print_req_error: 138 callbacks suppressed
[  229.879197][   T60] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.886290][   T60] buffer_io_error: 138 callbacks suppressed
[  229.886301][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[  229.891554][   T60] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.894726][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[  229.897797][   T60] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.900998][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[  229.903852][   T60] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.906991][   T60] Buffer I/O error on dev nbd1, logical block 0, async page read
[  229.909848][T16027] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.914087][T16027] Buffer I/O error on dev nbd1, logical block 0, async page read
[  229.917399][T16027] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.921247][T16027] Buffer I/O error on dev nbd1, logical block 1, async page read
[  229.924975][T16027] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.928689][T16027] Buffer I/O error on dev nbd1, logical block 2, async page read
[  229.932067][T16027] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.936426][T16027] Buffer I/O error on dev nbd1, logical block 3, async page read
[  229.939841][T16027] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.945104][T16027] Buffer I/O error on dev nbd1, logical block 0, async page read
[  229.947860][T16027] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  229.951203][T16027] Buffer I/O error on dev nbd1, logical block 1, async page read
[  229.954677][T16027] ldm_validate_partition_table(): Disk read failed.
[  229.957859][T16027] Dev nbd1: unable to read RDB block 0
[  229.960832][T16027]  nbd1: unable to read partition table
[  229.965630][T16027] ldm_validate_partition_table(): Disk read failed.
[  229.968741][T16027] Dev nbd1: unable to read RDB block 0
[  229.971146][T16027]  nbd1: unable to read partition table
[  230.753319][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  231.783468][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  232.823398][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  233.873272][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  234.903352][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
03:19:19  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e5201 RBX=ffff888101de7208 RCX=ffffffff822e52d7 RDX=0000000000000001
RSI=0000000000000004 RDI=ffff888101de720c RBP=ffff888101de71c0 RSP=ffffc900042df310
R8 =ffff888101de720b R9 =1ffff110203bce41 R10=dffffc0000000000 R11=ffffed10203bce42
R12=0000000000000001 R13=0000000000000000 R14=000000000011e16c R15=0000000000000000
RIP=ffffffff82230130 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555864ca500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe5cace56c0 CR3=0000000123c8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fe5ca012e53
XMM06=0000000000000000 00007fe5ca012e4d XMM07=0000000000000000 00007fe5ca012e61
XMM08=0000000000000000 00007fe5ca012ee7 XMM09=0000000000000000 00007fe5ca012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000039ac RDI=00000000000039ad RBP=00000000000003f8 RSP=ffffc90006db6370
R8 =ffff8881072c0237 R9 =1ffff11020e58046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8d8 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f68a10416c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555864e55c8 CR3=0000000028208000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fe5ca012e53
XMM06=0000000000000000 00007fe5ca012e4d XMM07=0000000000000000 00007fe5ca012e61
XMM08=0000000000000000 00007fe5ca012ee7 XMM09=0000000000000000 00007fe5ca012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
