last executing test programs:

1.979373845s ago: executing program 1 (id=5936):
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0)

1.919286897s ago: executing program 1 (id=5937):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
close(r1)

1.030668856s ago: executing program 1 (id=5944):
syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0)

1.030522626s ago: executing program 1 (id=5945):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x0, 0x102e2e, 0xfffffffe, 0x0, 0x0, 0xf3a8, 0x9, 0x401}})

968.487225ms ago: executing program 0 (id=5947):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)

910.796142ms ago: executing program 0 (id=5948):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20)

859.92591ms ago: executing program 0 (id=5950):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff03316844268cb89614f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

798.490523ms ago: executing program 0 (id=5952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)}, 0x840)
recvmsg$unix(r1, 0x0, 0x10102)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
unshare(0x22020600)
unshare(0x40000200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x20, 0x70bd25, 0x6, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040))
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x15c98180}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0xbc, 0x0, 0x409, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe826539a35be4c5497dfac4635244d64675239174659c36"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "390d8eb5b5957fc8f577ea9b678b375e339995e2445dff43"}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r7, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080)

340.788316ms ago: executing program 2 (id=5958):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0)

323.228558ms ago: executing program 2 (id=5959):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
close(r1)

220.392507ms ago: executing program 2 (id=5960):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

220.181809ms ago: executing program 2 (id=5961):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

202.05369ms ago: executing program 0 (id=5962):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671}, {0x800, 0x0, 0x4}, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xc5)

120.8936ms ago: executing program 1 (id=5963):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xedef})
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

120.584926ms ago: executing program 2 (id=5964):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000015c0)="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", 0x12a}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab", 0x15}], 0x2}, 0x40000)

120.05221ms ago: executing program 0 (id=5965):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xd44263be89ee4aba}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0xffffffffffffffff, {[0x0, 0x0, 0x5c, 0x3, 0x3, 0x5, 0x0, 0x3]}}, 0x66)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

220.951µs ago: executing program 2 (id=5966):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="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", 0x33f}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815)
recvmmsg(r1, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x2100, 0x0)

0s ago: executing program 1 (id=5967):
clock_gettime(0x5, &(0x7f0000007580))

kernel console output (not intermixed with test programs):

_slave_1) entered blocking state
[   69.393225][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.398204][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.401161][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.408653][ T5234] Bluetooth: hci0: command tx timeout
[   69.419403][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.422286][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.433126][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.436004][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.460971][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.463928][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.488131][ T5234] Bluetooth: hci1: command tx timeout
[   69.568670][ T5234] Bluetooth: hci2: command tx timeout
[   69.713805][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.802063][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.807138][ T5862] veth0_vlan: entered promiscuous mode
[   69.825824][ T5862] veth1_vlan: entered promiscuous mode
[   69.879211][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.893471][ T5854] veth0_vlan: entered promiscuous mode
[   69.915718][ T5854] veth1_vlan: entered promiscuous mode
[   69.920757][ T5862] veth0_macvtap: entered promiscuous mode
[   69.931812][ T5862] veth1_macvtap: entered promiscuous mode
[   69.978990][ T5859] veth0_vlan: entered promiscuous mode
[   69.986050][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.005755][ T5854] veth0_macvtap: entered promiscuous mode
[   70.011402][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.020044][ T5859] veth1_vlan: entered promiscuous mode
[   70.034106][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.042250][ T5854] veth1_macvtap: entered promiscuous mode
[   70.053082][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.060273][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.063737][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.095273][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.113259][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.152221][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.155425][ T5859] veth0_macvtap: entered promiscuous mode
[   70.165774][ T5859] veth1_macvtap: entered promiscuous mode
[   70.168949][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.177572][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.180190][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.195461][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.212103][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.250547][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.258692][  T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.268161][  T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.272841][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.312244][ T5917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.316405][ T5917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.334145][ T5917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.346068][ T5917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.359407][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.361872][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.384156][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.410879][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.414726][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.485187][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.491516][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.541920][  T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.545071][  T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.585349][ T5925] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5'.
[   70.590112][ T5925] netlink: zone id is out of range
[   70.591997][ T5925] netlink: zone id is out of range
[   70.593786][ T5925] netlink: zone id is out of range
[   70.595440][ T5925] netlink: zone id is out of range
[   70.600442][ T5925] netlink: zone id is out of range
[   70.602403][ T5925] netlink: zone id is out of range
[   70.604409][ T5925] netlink: zone id is out of range
[   70.606014][ T5925] netlink: zone id is out of range
[   70.611217][ T5925] netlink: zone id is out of range
[   70.616031][ T5925] netlink: zone id is out of range
[   71.129843][ T5965] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   71.132463][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'.
[   71.144380][ T5965] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   71.171999][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.186342][ T5969] ieee802154 phy0 wpan0: encryption failed: -22
[   71.332078][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.334678][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.389266][ T5980] netlink: 156 bytes leftover after parsing attributes in process `syz.1.22'.
[   71.392803][ T5980] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[   71.486772][ T5234] Bluetooth: hci0: command tx timeout
[   71.549082][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'.
[   71.578124][ T5234] Bluetooth: hci1: command tx timeout
[   71.620689][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   71.647297][ T5234] Bluetooth: hci2: command tx timeout
[   72.238342][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'.
[   72.242002][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'.
[   72.780283][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'.
[   73.174796][ T6067] syz_tun: entered promiscuous mode
[   73.201083][ T6067] batadv_slave_0: entered promiscuous mode
[   73.211192][ T6067] hsr1: entered allmulticast mode
[   73.213472][ T6067] syz_tun: entered allmulticast mode
[   73.215689][ T6067] batadv_slave_0: entered allmulticast mode
[   73.372951][ T6076] Zero length message leads to an empty skb
[   73.469384][ T6080] netlink: 176 bytes leftover after parsing attributes in process `syz.0.67'.
[   73.578819][ T5234] Bluetooth: hci0: command tx timeout
[   73.647130][ T5234] Bluetooth: hci1: command tx timeout
[   73.661193][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.726587][ T5234] Bluetooth: hci2: command tx timeout
[   74.440978][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   75.048485][ T6176] netlink: 'syz.2.114': attribute type 6 has an invalid length.
[   75.051042][ T6176] netlink: 'syz.2.114': attribute type 5 has an invalid length.
[   75.389013][ T5861] IPVS: starting estimator thread 0...
[   75.480088][ T6204] IPVS: using max 61 ests per chain, 146400 per kthread
[   75.657406][ T5234] Bluetooth: hci0: command tx timeout
[   75.699770][ T6229] __nla_validate_parse: 10 callbacks suppressed
[   75.699788][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[   75.726895][ T5234] Bluetooth: hci1: command tx timeout
[   75.736373][ T6231] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.138'.
[   75.807382][ T5234] Bluetooth: hci2: command tx timeout
[   76.498966][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'.
[   76.515495][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'.
[   76.558780][ T6279] C: renamed from team_slave_0 (while UP)
[   76.573076][ T6279] netlink: 'syz.2.161': attribute type 3 has an invalid length.
[   76.575614][ T6279] netlink: 152 bytes leftover after parsing attributes in process `syz.2.161'.
[   76.587915][ T6279] net_ratelimit: 30 callbacks suppressed
[   76.587942][ T6279] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   77.886783][ T5234] Bluetooth: hci2: command tx timeout
[   78.167002][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   78.170038][ T6334] netlink: 'syz.2.184': attribute type 19 has an invalid length.
[   78.185380][ T5883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.185409][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   78.193023][ T6334] netlink: 'syz.2.184': attribute type 19 has an invalid length.
[   78.198897][ T5883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.253120][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[   78.358999][ T5883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.361832][ T5883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.365338][ T6338] bridge_slave_1: left allmulticast mode
[   78.376566][ T6338] bridge_slave_1: left promiscuous mode
[   78.386350][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.458874][ T6338] bridge_slave_0: left allmulticast mode
[   78.461373][ T6338] bridge_slave_0: left promiscuous mode
[   78.464132][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.596316][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'.
[   78.603617][ T6346] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[   78.611151][ T6346] netlink: 'syz.0.189': attribute type 2 has an invalid length.
[   78.614632][ T6346] netlink: 80 bytes leftover after parsing attributes in process `syz.0.189'.
[   78.785868][ T6352] netlink: 'syz.1.192': attribute type 2 has an invalid length.
[   78.939846][ T6360] Bluetooth: MGMT ver 1.23
[   79.037511][ T6366] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   79.041956][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.045431][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.241664][ T6374] netlink: 'syz.2.203': attribute type 32 has an invalid length.
[   79.679629][ T6384] netlink: 'syz.2.208': attribute type 2 has an invalid length.
[   79.682785][ T6384] netlink: 'syz.2.208': attribute type 1 has an invalid length.
[   80.170263][ T6410] netlink: 'syz.1.221': attribute type 22 has an invalid length.
[   80.189114][ T5883] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.192626][ T5883] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.205225][ T5883] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.213103][ T5883] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.706434][ T6434] gretap0: refused to change device tx_queue_len
[   80.710920][ T6434] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   80.912380][ T6443] vxcan1: entered allmulticast mode
[   80.917541][ T6443] vxcan1: left allmulticast mode
[   81.035171][ T6443] raw_sendmsg: syz.2.235 forgot to set AF_INET. Fix it!
[   81.174115][ T6455] __nla_validate_parse: 5 callbacks suppressed
[   81.174136][ T6455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.240'.
[   81.269996][ T6459] tipc: Started in network mode
[   81.272338][ T6459] tipc: Node identity c26bd9d771a3, cluster identity 4711
[   81.276093][ T6459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.281851][ T6459] syzkaller0: entered promiscuous mode
[   81.284249][ T6459] syzkaller0: entered allmulticast mode
[   81.312114][ T6459] tipc: Resetting bearer <eth:syzkaller0>
[   81.322124][ T6457] tipc: Resetting bearer <eth:syzkaller0>
[   81.344622][ T6457] tipc: Disabling bearer <eth:syzkaller0>
[   81.513606][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'.
[   81.626946][ T6474] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   81.853561][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'.
[   81.866809][ T6485] warning: `syz.1.255' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.625698][ T6524] validate_nla: 3 callbacks suppressed
[   82.625725][ T6524] netlink: 'syz.2.270': attribute type 1 has an invalid length.
[   82.631166][ T6524] netlink: 'syz.2.270': attribute type 2 has an invalid length.
[   82.909837][ T6534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.275'.
[   82.913488][ T6534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.275'.
[   83.275675][ T6557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'.
[   83.281680][ T6557] netlink: 92 bytes leftover after parsing attributes in process `syz.1.284'.
[   83.524562][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'.
[   83.547577][ T5890] IPVS: starting estimator thread 0...
[   83.655054][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[   83.662463][ T6576] IPVS: using max 37 ests per chain, 88800 per kthread
[   84.554793][  T974] cfg80211: failed to load regulatory.db
[   84.763516][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'.
[   85.030828][ T6635] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   85.259314][ T6650] netlink: 'syz.0.322': attribute type 4 has an invalid length.
[   85.613018][ T6683] netlink: 'syz.1.337': attribute type 3 has an invalid length.
[   85.896113][ T6708] Driver unsupported XDP return value 0 on prog  (id 60) dev N/A, expect packet loss!
[   87.287930][ T6729] netdevsim0: mtu less than device minimum
[   87.722822][ T6781] vcan0: tx drop: invalid da for name 0x0000000000000002
[   87.872025][ T6795] tipc: Started in network mode
[   87.874079][ T6795] tipc: Node identity 0eedca8b7d29, cluster identity 4711
[   87.877376][ T6795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.880831][ T6795] syzkaller0: entered promiscuous mode
[   87.883016][ T6795] syzkaller0: entered allmulticast mode
[   87.914752][ T6795] tipc: Resetting bearer <eth:syzkaller0>
[   87.931119][ T6794] tipc: Resetting bearer <eth:syzkaller0>
[   87.960112][ T6794] tipc: Disabling bearer <eth:syzkaller0>
[   88.331162][ T6815] netlink: 'syz.1.386': attribute type 13 has an invalid length.
[   88.334828][ T6815] netlink: 'syz.1.386': attribute type 17 has an invalid length.
[   88.464678][ T6815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.655133][ T6811] syz.1.386 (6811) used greatest stack depth: 18776 bytes left
[   88.879714][ T6835] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   89.531262][ T6879] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   89.534923][ T6879] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   89.545362][ T6881] __nla_validate_parse: 5 callbacks suppressed
[   89.545372][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'.
[   90.375616][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.434'.
[   90.999913][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.004662][ T6974] batadv_slave_1: entered promiscuous mode
[   91.378317][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'.
[   91.782784][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'.
[   91.991077][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'.
[   91.997719][ T7037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.785576][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[   93.984109][ T7146] tipc: Started in network mode
[   93.986207][ T7146] tipc: Node identity , cluster identity 4711
[   94.604188][ T7201] tipc: Started in network mode
[   94.606152][ T7201] tipc: Node identity 2e60daa574d8, cluster identity 4711
[   94.611240][ T7201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.614160][ T7201] syzkaller0: entered promiscuous mode
[   94.616266][ T7201] syzkaller0: entered allmulticast mode
[   94.631463][ T7201] syzkaller0: left promiscuous mode
[   94.633494][ T7201] syzkaller0: left allmulticast mode
[   94.641591][ T7201] tipc: Resetting bearer <eth:syzkaller0>
[   94.647735][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   94.667573][ T7200] tipc: Disabling bearer <eth:syzkaller0>
[   94.945757][ T7233] netlink: 'syz.0.565': attribute type 3 has an invalid length.
[   95.321866][ T7273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.672933][ T7338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.675622][ T7338] syzkaller0: entered promiscuous mode
[   96.680968][ T7338] syzkaller0: entered allmulticast mode
[   96.704302][ T7338] tipc: Resetting bearer <eth:syzkaller0>
[   96.713422][ T7337] tipc: Resetting bearer <eth:syzkaller0>
[   96.724482][ T7337] tipc: Disabling bearer <eth:syzkaller0>
[   97.058042][ T7363] netlink: 'syz.2.615': attribute type 12 has an invalid length.
[   97.061205][ T7363] netlink: 'syz.2.615': attribute type 29 has an invalid length.
[   97.068747][ T7363] netlink: 148 bytes leftover after parsing attributes in process `syz.2.615'.
[   97.072312][ T7363] netlink: 'syz.2.615': attribute type 2 has an invalid length.
[   97.075362][ T7363] netlink: 'syz.2.615': attribute type 3 has an invalid length.
[   97.113654][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[   97.133582][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[   97.773939][ T7431] netlink: 788 bytes leftover after parsing attributes in process `syz.2.647'.
[   98.052680][ T7453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.055187][ T7453] syzkaller0: entered promiscuous mode
[   98.059088][ T7453] syzkaller0: entered allmulticast mode
[   98.071989][ T7453] tipc: Resetting bearer <eth:syzkaller0>
[   98.082006][ T7452] tipc: Resetting bearer <eth:syzkaller0>
[   98.089903][ T7452] tipc: Disabling bearer <eth:syzkaller0>
[   98.508831][ T7482] netdevsim netdevsim0: Direct firmware load for 2Q failed with error -2
[   98.512119][ T7482] netdevsim netdevsim0: Falling back to sysfs fallback for: 2Q
[   99.726047][ T7539] bridge_slave_0: left allmulticast mode
[   99.732754][ T7539] bridge_slave_0: left promiscuous mode
[   99.735582][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.743849][ T7539] bridge_slave_1: left allmulticast mode
[   99.746118][ T7539] bridge_slave_1: left promiscuous mode
[   99.768336][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.776094][ T7539] bond0: (slave bond_slave_0): Releasing backup interface
[   99.789592][ T7539] bond0: (slave bond_slave_1): Releasing backup interface
[   99.843848][ T7539] team0: Port device team_slave_0 removed
[   99.871308][ T7539] team0: Port device team_slave_1 removed
[   99.874357][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.893608][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.909754][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.918804][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.971193][ T7546] team0: Mode changed to "broadcast"
[   99.983703][ T7550] vlan0: entered promiscuous mode
[  100.022325][ T7550] team0: Port device vlan0 added
[  100.025100][ T7554] tipc: Enabled bearer <eth:team0>, priority 0
[  100.211681][ T7574] netlink: 550 bytes leftover after parsing attributes in process `syz.0.709'.
[  100.721110][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'.
[  100.732807][ T7612] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  100.740494][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'.
[  100.789514][ T7614] macvtap0: refused to change device tx_queue_len
[  100.791824][ T7614] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  101.028532][ T7637] netlink: 'syz.1.735': attribute type 1 has an invalid length.
[  101.080075][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'.
[  101.137799][   T24] tipc: Node number set to 3016284631
[  102.444942][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.451843][ T7716] netlink: 'syz.2.761': attribute type 1 has an invalid length.
[  102.475392][ T7716] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.481677][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'.
[  102.495622][ T7716] vlan2: entered allmulticast mode
[  102.498177][ T7716] macvtap0: entered allmulticast mode
[  102.500325][ T7716] veth0_macvtap: entered allmulticast mode
[  102.506367][ T7716] bond1: (slave vlan2): making interface the new active one
[  102.512220][ T7716] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  103.084294][ T7742] netlink: 'syz.2.771': attribute type 28 has an invalid length.
[  103.160449][ T7748] gretap0: entered promiscuous mode
[  103.163113][ T7748] vlan2: entered promiscuous mode
[  103.300187][ T7758] netlink: 'syz.1.778': attribute type 4 has an invalid length.
[  104.828847][ T7856] netlink: 'syz.1.824': attribute type 64 has an invalid length.
[  104.941335][ T7876] netlink: 56 bytes leftover after parsing attributes in process `syz.1.832'.
[  104.955481][ T7876] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  105.099796][ T7890] IPv6: Can't replace route, no match found
[  105.353857][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.848'.
[  105.421424][ T7916] netlink: 'syz.0.849': attribute type 17 has an invalid length.
[  106.498896][ T7978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.515959][ T7978] syzkaller0: entered promiscuous mode
[  106.522258][ T7978] syzkaller0: entered allmulticast mode
[  106.560062][ T7978] tipc: Resetting bearer <eth:syzkaller0>
[  106.564439][ T7977] tipc: Resetting bearer <eth:syzkaller0>
[  106.588316][ T7977] tipc: Disabling bearer <eth:syzkaller0>
[  106.895605][ T8016] netlink: 168 bytes leftover after parsing attributes in process `syz.1.887'.
[  107.107173][ T8031] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  107.415846][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'.
[  107.426002][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'.
[  107.445932][ T8058] netlink: 188 bytes leftover after parsing attributes in process `syz.0.905'.
[  107.490178][ T8062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.907'.
[  107.500276][ T8064] netlink: 'syz.2.908': attribute type 1 has an invalid length.
[  107.593830][ T8077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.914'.
[  107.599034][ T8077] bridge0: port 1(macvlan1) entered blocking state
[  107.601253][ T8077] bridge0: port 1(macvlan1) entered disabled state
[  107.603400][ T8077] macvlan1: entered allmulticast mode
[  107.605521][ T8077] veth1_vlan: entered allmulticast mode
[  107.611187][ T8077] macvlan1: entered promiscuous mode
[  107.991274][ T8106] netlink: 292 bytes leftover after parsing attributes in process `syz.0.926'.
[  108.004128][ T8108] netlink: 'syz.2.927': attribute type 12 has an invalid length.
[  108.007155][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'.
[  108.011686][ T8108] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  108.038331][ T8110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.064162][ T8110] syzkaller0: entered promiscuous mode
[  108.065990][ T8110] syzkaller0: entered allmulticast mode
[  108.068712][ T8110] tipc: Resetting bearer <eth:syzkaller0>
[  108.080187][ T8109] tipc: Resetting bearer <eth:syzkaller0>
[  108.500571][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'.
[  109.163146][ T8109] tipc: Disabling bearer <eth:syzkaller0>
[  109.343358][ T8147] netlink: 'syz.0.942': attribute type 13 has an invalid length.
[  109.346063][ T8147] netlink: 'syz.0.942': attribute type 17 has an invalid length.
[  109.464218][ T8147] bridge0: port 1(macvlan1) entered blocking state
[  109.467067][ T8147] bridge0: port 1(macvlan1) entered forwarding state
[  109.484307][ T8147] 8021q: adding VLAN 0 to HW filter on device team0
[  109.494692][ T8147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.593065][ T8147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.641117][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'.
[  109.671851][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.375101][ T8211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.382117][ T8211] syzkaller0: entered promiscuous mode
[  110.384379][ T8211] syzkaller0: entered allmulticast mode
[  110.393180][ T8211] tipc: Resetting bearer <eth:syzkaller0>
[  110.397042][ T8210] tipc: Resetting bearer <eth:syzkaller0>
[  110.407562][ T8210] tipc: Disabling bearer <eth:syzkaller0>
[  110.879174][ T8222] block nbd0: server does not support multiple connections per device.
[  110.884166][ T8222] block nbd0: shutting down sockets
[  110.977966][ T8232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.980894][ T8232] IPv6: NLM_F_CREATE should be set when creating new route
[  110.983729][ T8232] IPv6: NLM_F_CREATE should be set when creating new route
[  110.986644][ T8232] IPv6: NLM_F_CREATE should be set when creating new route
[  110.992478][ T8232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.625811][ T8265] IPv6: sit1: Disabled Multicast RS
[  111.780204][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'.
[  112.012145][ T8286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.062701][ T8288] netlink: 'syz.2.1004': attribute type 12 has an invalid length.
[  112.068738][ T8288] netlink: 'syz.2.1004': attribute type 29 has an invalid length.
[  112.071252][ T8288] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1004'.
[  112.934500][ T8338] syzkaller0: entered promiscuous mode
[  112.938984][ T8338] syzkaller0: entered allmulticast mode
[  112.973559][ T8342] vxcan0: tx address claim with dest, not broadcast
[  113.091957][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  113.175284][ T5234] Bluetooth: hci2: link tx timeout
[  113.185729][ T5234] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.461195][ T8382] netlink: 'syz.2.1042': attribute type 10 has an invalid length.
[  114.463801][ T8382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1042'.
[  114.467998][ T8382] dummy0: entered promiscuous mode
[  114.470138][ T8382] dummy0: entered allmulticast mode
[  114.473786][ T8382] bridge0: port 3(dummy0) entered blocking state
[  114.475940][ T8382] bridge0: port 3(dummy0) entered disabled state
[  114.480892][ T8382] bridge0: port 3(dummy0) entered blocking state
[  114.483015][ T8382] bridge0: port 3(dummy0) entered forwarding state
[  114.758886][ T8404] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1052'.
[  115.247735][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  115.418389][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'.
[  115.502355][ T8422] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  115.587886][ T8421] netlink: 'syz.2.1058': attribute type 11 has an invalid length.
[  115.638908][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[  115.865406][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[  116.768563][ T8480] netlink: 'syz.1.1080': attribute type 4 has an invalid length.
[  117.098448][ T8502] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  117.272917][ T8515] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  117.773529][ T8533] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1103'.
[  118.146257][ T8546] bridge0: port 3(dummy0) entered disabled state
[  118.149000][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.152684][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.274240][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.290187][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.335253][ T8546] veth0_macvtap: left allmulticast mode
[  118.411648][ T8546] vlan2: left allmulticast mode
[  118.413674][ T8546] macvtap0: left allmulticast mode
[  118.458732][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.462137][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.465549][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.482907][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.487859][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.496523][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.501817][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.511925][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.735632][ T8572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.737853][ T8573] netlink: 'syz.0.1121': attribute type 1 has an invalid length.
[  118.742056][ T8573] netlink: 'syz.0.1121': attribute type 1 has an invalid length.
[  120.790286][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'.
[  120.803725][ T5883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.807172][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'.
[  120.810024][ T5883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.813349][ T5883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.818551][ T5883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.151064][ T8723] netlink: 'syz.1.1187': attribute type 2 has an invalid length.
[  122.570790][ T8755] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1198'.
[  123.148526][ T8795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1212'.
[  123.182816][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  123.574784][ T8821] netlink: 'syz.0.1226': attribute type 9 has an invalid length.
[  123.584426][ T8821] netlink: 'syz.0.1226': attribute type 7 has an invalid length.
[  123.587967][ T8821] netlink: 'syz.0.1226': attribute type 8 has an invalid length.
[  123.706205][ T8831] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1231'.
[  124.195202][ T8863] tun0: tun_chr_ioctl cmd 1074812117
[  124.294886][ T8853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1242'.
[  124.397268][ T8872] netlink: 'syz.1.1249': attribute type 21 has an invalid length.
[  124.450140][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'.
[  124.459442][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'.
[  124.730131][ T8898] Unsupported ieee802154 address type: 0
[  124.744400][ T8896] tun0: tun_chr_ioctl cmd 2148045848
[  124.749990][ T8896] tun0: tun_chr_ioctl cmd 21731
[  124.808916][ T8906] tipc: Enabled bearer <ib:geneve1>, priority 10
[  125.936589][ T2307] tipc: Node number set to 1942276747
[  126.622640][ T8988] netlink: 'syz.0.1304': attribute type 7 has an invalid length.
[  126.625837][ T8988] netlink: 'syz.0.1304': attribute type 8 has an invalid length.
[  126.862834][ T9005] netlink: 'syz.2.1312': attribute type 10 has an invalid length.
[  126.866103][ T9005] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1312'.
[  126.870542][ T9005] team0: entered promiscuous mode
[  126.876254][ T9005] C: entered promiscuous mode
[  126.878622][ T9005] team_slave_1: entered promiscuous mode
[  126.887123][ T9005] 8021q: adding VLAN 0 to HW filter on device team0
[  126.890327][ T9005] bridge0: port 4(team0) entered blocking state
[  126.892935][ T9005] bridge0: port 4(team0) entered disabled state
[  126.895596][ T9005] team0: entered allmulticast mode
[  126.900991][ T9005] C: entered allmulticast mode
[  126.908018][ T9005] team_slave_1: entered allmulticast mode
[  127.046106][ T9023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.051070][ T9023] syzkaller0: entered promiscuous mode
[  127.056734][ T9023] syzkaller0: entered allmulticast mode
[  127.089887][ T9023] tipc: Resetting bearer <eth:syzkaller0>
[  127.099092][ T9021] tipc: Resetting bearer <eth:syzkaller0>
[  127.109454][ T9021] tipc: Disabling bearer <eth:syzkaller0>
[  127.770708][ T9097] netlink: 'syz.1.1355': attribute type 21 has an invalid length.
[  127.773811][ T9097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1355'.
[  127.851138][ T9101] netlink: 'syz.1.1357': attribute type 1 has an invalid length.
[  127.882804][ T9101] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.890917][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'.
[  128.058607][ T9105] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1357'.
[  128.122073][ T9107] tipc: Failed to remove unknown binding: 66,1,1/1942276747:3735605034/3735605036
[  128.464831][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'.
[  128.468403][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'.
[  128.513130][ T9138] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1372'.
[  128.516336][ T9138] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1372'.
[  128.569849][ T9144] sctp: [Deprecated]: syz.0.1374 (pid 9144) Use of int in maxseg socket option.
[  128.569849][ T9144] Use struct sctp_assoc_value instead
[  129.878758][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'.
[  129.882423][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'.
[  129.885858][ T9192] netlink: 'syz.2.1395': attribute type 20 has an invalid length.
[  129.890867][ T9192] netlink: 'syz.2.1395': attribute type 20 has an invalid length.
[  130.709015][ T9219] veth3: entered promiscuous mode
[  131.292809][ T9251] vlan3: entered promiscuous mode
[  131.294862][ T9251] bond0: entered promiscuous mode
[  131.297188][ T9251] bond_slave_0: entered promiscuous mode
[  131.299402][ T9251] bond_slave_1: entered promiscuous mode
[  131.301566][ T9251] vlan3: entered allmulticast mode
[  131.303561][ T9251] bond0: entered allmulticast mode
[  131.305627][ T9251] bond_slave_0: entered allmulticast mode
[  131.310476][ T9251] bond_slave_1: entered allmulticast mode
[  131.395444][ T9255] sock: sock_timestamping_bind_phc: sock not bind to device
[  131.955203][ T9286] netlink: 'syz.0.1436': attribute type 10 has an invalid length.
[  131.960734][ T9286] __nla_validate_parse: 3 callbacks suppressed
[  131.960747][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1436'.
[  131.969703][ T9286] dummy0: entered promiscuous mode
[  131.971848][ T9286] dummy0: entered allmulticast mode
[  131.974804][ T9286] bridge0: port 2(dummy0) entered blocking state
[  131.977913][ T9286] bridge0: port 2(dummy0) entered disabled state
[  131.984196][ T9286] bridge0: port 2(dummy0) entered blocking state
[  131.986977][ T9286] bridge0: port 2(dummy0) entered forwarding state
[  132.133378][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'.
[  132.136413][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'.
[  132.604354][ T9342] pimreg: entered allmulticast mode
[  132.771403][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.773923][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.986431][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  133.081325][ T9367] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  134.264368][ T9412] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1486'.
[  134.392502][ T9419] netlink: 'syz.0.1490': attribute type 1 has an invalid length.
[  134.395614][ T9419] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1490'.
[  134.709109][ T9444] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1501'.
[  134.886331][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[  134.917926][ T9466] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  135.389953][ T9503] netlink: 'syz.0.1525': attribute type 2 has an invalid length.
[  135.793296][   T33] audit: type=1800 audit(1755019362.159:2): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1535" name="cgroup.controllers" dev="tmpfs" ino=2754 res=0 errno=0
[  135.878467][ T9536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.274084][ T9567] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1554'.
[  137.102512][ T9602] tipc: Resetting bearer <ib:ip6gre0>
[  137.165762][ T9602] bridge0: port 2(dummy0) entered disabled state
[  137.168648][ T9602] bridge0: port 1(macvlan1) entered disabled state
[  137.262085][ T9602] tipc: Resetting bearer <eth:team0>
[  137.338620][ T9620] netlink: 'syz.1.1573': attribute type 1 has an invalid length.
[  137.341156][ T9620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1573'.
[  137.613812][ T9602] vlan0: left promiscuous mode
[  137.629927][ T9602] veth1_vlan: left allmulticast mode
[  137.728443][ T9602] hsr1: left allmulticast mode
[  137.730236][ T9602] syz_tun: left allmulticast mode
[  137.731894][ T9602] batadv_slave_0: left allmulticast mode
[  137.752821][ T9602] veth3: left promiscuous mode
[  137.835837][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.855846][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.859044][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.862256][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.369820][ T9678] tap0: tun_chr_ioctl cmd 1074025677
[  138.372160][ T9678] tap0: linktype set to 825
[  138.383013][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1596'.
[  138.572511][ T9702] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1606'.
[  138.874485][ T9737] unsupported nlmsg_type 40
[  139.034350][ T9756] netlink: 'syz.0.1633': attribute type 1 has an invalid length.
[  139.041266][ T9756] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1633'.
[  139.397032][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'.
[  139.400817][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1648'.
[  139.412640][ T9788] bridge0: port 5(vlan4) entered blocking state
[  139.415502][ T9788] bridge0: port 5(vlan4) entered disabled state
[  139.420487][ T9788] vlan4: entered allmulticast mode
[  139.422602][ T9788] bridge0: entered allmulticast mode
[  139.436995][ T9788] vlan4: left allmulticast mode
[  139.439030][ T9788] bridge0: left allmulticast mode
[  140.914720][ T9806] tipc: Can't bind to reserved service type 2
[  141.188416][ T9828] netlink: 'syz.0.1666': attribute type 1 has an invalid length.
[  141.433647][ T9844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1671'.
[  142.174444][ T9880] tc_dump_action: action bad kind
[  142.299204][ T9888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.302602][ T9888] syzkaller0: entered promiscuous mode
[  142.304904][ T9888] syzkaller0: entered allmulticast mode
[  142.336439][ T9888] tipc: Resetting bearer <eth:syzkaller0>
[  142.338640][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.344046][ T9887] tipc: Resetting bearer <eth:syzkaller0>
[  142.356182][ T9887] tipc: Disabling bearer <eth:syzkaller0>
[  142.520132][ T9908] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1701'.
[  142.560328][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  142.642909][ T9920] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1706'.
[  145.217958][T10026] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  145.806807][ T5234] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  146.998449][T10109] netlink: 'syz.0.1785': attribute type 13 has an invalid length.
[  147.001431][T10109] netlink: 'syz.0.1785': attribute type 17 has an invalid length.
[  147.046071][T10109] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.052822][T10109] 8021q: adding VLAN 0 to HW filter on device team0
[  147.056031][T10109] tipc: Resetting bearer <eth:team0>
[  147.059604][T10109] tipc: Resetting bearer <eth:team0>
[  147.064943][T10109] bridge0: port 2(dummy0) entered blocking state
[  147.067884][T10109] bridge0: port 2(dummy0) entered forwarding state
[  147.077421][T10109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.234024][T10122] openvswitch: netlink: Message has 4 unknown bytes.
[  147.437450][T10134] syzkaller1: entered promiscuous mode
[  147.439779][T10134] syzkaller1: entered allmulticast mode
[  147.705423][T10146] syzkaller0: entered promiscuous mode
[  147.708342][T10146] syzkaller0: entered allmulticast mode
[  148.542424][   T10] IPVS: starting estimator thread 0...
[  148.626632][T10155] IPVS: using max 44 ests per chain, 105600 per kthread
[  148.729250][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'.
[  148.836809][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027a20c00: rx timeout, send abort
[  148.911522][T10171] syzkaller1: entered promiscuous mode
[  148.913508][T10171] syzkaller1: entered allmulticast mode
[  149.080363][T10180] Bluetooth: MGMT ver 1.23
[  149.341241][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027a20c00: abort rx timeout. Force session deactivation
[  150.691842][T10236] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1843'.
[  150.840734][T10246] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1848'.
[  151.558541][T10255] netlink: 'syz.2.1852': attribute type 1 has an invalid length.
[  151.592123][T10255] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.612161][T10255] bond2: (slave veth3): Enslaving as an active interface with a down link
[  151.627649][T10255] vlan4: entered allmulticast mode
[  151.629403][T10255] veth1: entered allmulticast mode
[  151.631457][T10255] bond2: (slave vlan4): Opening slave failed
[  151.680926][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.824109][T10276] netlink: 'syz.1.1862': attribute type 1 has an invalid length.
[  151.836594][   T33] audit: type=1804 audit(1755019378.199:3): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1861" name="/newroot/586/cgroup.controllers" dev="tmpfs" ino=2966 res=1 errno=0
[  151.855311][   T33] audit: type=1800 audit(1755019378.199:4): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1861" name="cgroup.controllers" dev="tmpfs" ino=2966 res=0 errno=0
[  151.876823][   T33] audit: type=1800 audit(1755019378.199:5): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1861" name="cgroup.controllers" dev="tmpfs" ino=2966 res=0 errno=0
[  152.234010][T10300] netlink: 'syz.1.1873': attribute type 2 has an invalid length.
[  152.366789][T10309] geneve2: entered promiscuous mode
[  152.371183][ T5917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.374570][ T5917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.385289][ T5917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.393596][ T5917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.403578][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'.
[  152.482206][T10321] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  152.687531][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'.
[  152.712883][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'.
[  153.029764][T10348] netlink: 'syz.0.1891': attribute type 16 has an invalid length.
[  153.033244][T10348] netlink: 'syz.0.1891': attribute type 17 has an invalid length.
[  153.050362][T10348] tipc: Resetting bearer <eth:team0>
[  153.055304][T10348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.801816][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1899'.
[  154.432660][T10391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1912'.
[  154.540633][T10401] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1915'.
[  154.547044][T10396] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1915'.
[  154.566941][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'.
[  154.621605][T10406] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1919'.
[  154.719439][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'.
[  154.789617][T10423] tun0: tun_chr_ioctl cmd 2147767520
[  155.711284][T10449] netlink: 'syz.0.1935': attribute type 1 has an invalid length.
[  155.714448][T10449] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1935'.
[  155.718651][T10449] netlink: 'syz.0.1935': attribute type 2 has an invalid length.
[  155.721740][T10449] netlink: 'syz.0.1935': attribute type 1 has an invalid length.
[  155.949580][T10463] syzkaller1: entered promiscuous mode
[  155.951573][T10463] syzkaller1: entered allmulticast mode
[  156.473875][T10486] syz_tun: entered allmulticast mode
[  156.484350][T10485] syz_tun: left allmulticast mode
[  156.728090][T10494] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.732676][T10493] IPVS: stopping backup sync thread 10494 ...
[  156.784554][T10496] netlink: 'syz.0.1955': attribute type 3 has an invalid length.
[  157.906274][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'.
[  158.041477][T10525] netlink: 'syz.2.1967': attribute type 1 has an invalid length.
[  158.044411][T10525] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1967'.
[  158.087272][T10445] Set syz1 is full, maxelem 65536 reached
[  159.204948][T10603] __nla_validate_parse: 5 callbacks suppressed
[  159.204969][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'.
[  159.510805][T10619] lo speed is unknown, defaulting to 1000
[  159.515881][T10619] lo speed is unknown, defaulting to 1000
[  159.525175][T10619] lo speed is unknown, defaulting to 1000
[  159.616056][T10623] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.628958][T10623] bridge0: port 3(dummy0) entered blocking state
[  159.631636][T10623] bridge0: port 3(dummy0) entered forwarding state
[  159.638670][T10623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.659177][T10622] ip6gre2: entered allmulticast mode
[  159.808665][ T9641] lo speed is unknown, defaulting to 1000
[  159.811165][ T9641] syz0: Port: 1 Link ACTIVE
[  159.813618][T10619] infiniband syz0: set active
[  159.815571][T10619] infiniband syz0: added lo
[  159.916078][T10619] RDS/IB: syz0: added
[  159.919709][T10619] smc: adding ib device syz0 with port count 1
[  159.923335][T10619] smc:    ib device syz0 port 1 has pnetid 
[  159.937931][T10619] lo speed is unknown, defaulting to 1000
[  160.115577][   T10] lo speed is unknown, defaulting to 1000
[  160.138953][T10619] lo speed is unknown, defaulting to 1000
[  160.358831][T10619] lo speed is unknown, defaulting to 1000
[  160.467519][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'.
[  160.690184][T10666] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  160.885830][T10681] IPv6: addrconf: prefix option has invalid lifetime
[  160.955180][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2037'.
[  161.165336][T10702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2045'.
[  161.408233][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'.
[  161.552196][T10735] tun0: tun_chr_ioctl cmd 2147767507
[  161.770819][T10753] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2068'.
[  161.845800][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[  162.446633][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  163.851994][T10862] netlink: 'syz.0.2107': attribute type 1 has an invalid length.
[  164.088329][T10870] block nbd0: server does not support multiple connections per device.
[  164.092166][T10870] block nbd0: shutting down sockets
[  164.626268][T10919] : entered promiscuous mode
[  164.770088][T10934] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2136'.
[  164.775822][T10934] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2136'.
[  164.840047][T10940] sock: sock_timestamping_bind_phc: sock not bind to device
[  164.870160][T10937] lo speed is unknown, defaulting to 1000
[  164.962721][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'.
[  165.160433][T10942] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2137'.
[  165.291758][T10952] siw: device registration error -23
[  165.431230][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'.
[  166.791896][T11052] can: request_module (can-proto-0) failed.
[  167.090140][T11075] netlink: 'syz.1.2187': attribute type 4 has an invalid length.
[  167.093243][T11075] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.2187'.
[  167.156056][T11080] netlink: 'syz.0.2192': attribute type 13 has an invalid length.
[  167.160568][T11081] netlink: 'syz.1.2190': attribute type 10 has an invalid length.
[  167.168329][T11080] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.2192'.
[  167.185473][T11081] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  167.189674][T11078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.197106][  T974] lo speed is unknown, defaulting to 1000
[  167.484162][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'.
[  167.491824][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'.
[  167.499266][T11103] netlink: 'syz.2.2200': attribute type 4 has an invalid length.
[  167.535906][T11104] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2200'.
[  167.874396][T11124] netlink: 'syz.0.2212': attribute type 1 has an invalid length.
[  167.891252][T11127] netlink: 'syz.1.2210': attribute type 4 has an invalid length.
[  167.924669][T11127] netlink: 'syz.1.2210': attribute type 4 has an invalid length.
[  167.955892][T11131] netlink: 'syz.0.2215': attribute type 10 has an invalid length.
[  167.959690][T11131] tipc: Resetting bearer <eth:team0>
[  167.965435][T11131] batman_adv: batadv0: Adding interface: team0
[  167.970153][T11131] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.981669][T11131] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  167.989965][T11131] netlink: 'syz.0.2215': attribute type 10 has an invalid length.
[  167.993283][T11131] team0: entered promiscuous mode
[  167.995265][T11131] vlan0: entered promiscuous mode
[  167.998862][T11131] 8021q: adding VLAN 0 to HW filter on device team0
[  168.002215][T11131] batman_adv: batadv0: Interface activated: team0
[  168.004929][T11131] batman_adv: batadv0: Interface deactivated: team0
[  168.009466][T11131] batman_adv: batadv0: Removing interface: team0
[  168.013023][T11131] bridge0: port 3(team0) entered blocking state
[  168.015889][T11131] bridge0: port 3(team0) entered disabled state
[  168.018734][T11131] team0: entered allmulticast mode
[  168.020723][T11131] vlan0: entered allmulticast mode
[  168.022722][T11131] veth0_vlan: entered allmulticast mode
[  168.139586][T11144] netlink: del zone limit has 4 unknown bytes
[  168.751035][T11199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.753628][T11199] syzkaller0: entered promiscuous mode
[  168.755287][T11199] syzkaller0: entered allmulticast mode
[  168.777803][T11199] tipc: Resetting bearer <eth:syzkaller0>
[  168.781497][T11198] tipc: Resetting bearer <eth:syzkaller0>
[  168.799438][T11198] tipc: Disabling bearer <eth:syzkaller0>
[  169.074179][T11231] team0: left allmulticast mode
[  169.076349][T11231] vlan0: left allmulticast mode
[  169.080943][T11231] veth0_vlan: left allmulticast mode
[  169.082838][T11231] bridge0: port 3(team0) entered disabled state
[  169.087100][T11231] dummy0: left allmulticast mode
[  169.088874][T11231] dummy0: left promiscuous mode
[  169.090626][T11231] bridge0: port 2(dummy0) entered disabled state
[  169.094754][T11231] macvlan1: left allmulticast mode
[  169.097863][T11231] macvlan1: left promiscuous mode
[  169.099974][T11231] bridge0: port 1(macvlan1) entered disabled state
[  169.441240][T11257] smc: net device bond0 applied user defined pnetid SYZ
[  170.018496][T11310] __nla_validate_parse: 14 callbacks suppressed
[  170.018508][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'.
[  170.159389][T11321] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2295'.
[  170.273940][T11336] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2303'.
[  170.369422][T11345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.862746][T11390] IPVS: ip_vs_add_dest(): server weight less than zero
[  171.184353][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'.
[  171.188582][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'.
[  171.192375][T11399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.374047][   T33] audit: type=1804 audit(1755019397.739:6): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2332" name="/newroot/798/cgroup.controllers" dev="tmpfs" ino=4035 res=1 errno=0
[  171.383256][   T33] audit: type=1800 audit(1755019397.739:7): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2332" name="cgroup.controllers" dev="tmpfs" ino=4035 res=0 errno=0
[  172.619990][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.623847][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'.
[  172.625991][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.629033][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'.
[  172.636204][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.654134][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.060372][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'.
[  173.743459][T11548] syzkaller1: entered promiscuous mode
[  173.745695][T11548] syzkaller1: entered allmulticast mode
[  173.882706][T11556] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2396'.
[  174.091403][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2403'.
[  174.091810][T11571] lo speed is unknown, defaulting to 1000
[  174.179218][T11572] bond1: (slave vlan2): Releasing active interface
[  174.879731][T11612] syzkaller1: entered promiscuous mode
[  174.881941][T11612] syzkaller1: entered allmulticast mode
[  175.093789][T11628] dummy0: entered promiscuous mode
[  175.096390][T11628] vlan2: entered promiscuous mode
[  175.326305][T11640] lo speed is unknown, defaulting to 1000
[  175.714658][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2440'.
[  175.720315][T11668] openvswitch: netlink: Missing key (keys=40, expected=80)
[  175.732044][T11668] validate_nla: 4 callbacks suppressed
[  175.732063][T11668] netlink: 'syz.2.2440': attribute type 10 has an invalid length.
[  175.743155][T11668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2440'.
[  175.830672][T11672] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  177.574397][T11731] pim6reg0: tun_chr_ioctl cmd 1074025677
[  177.581188][T11731] pim6reg0: linktype set to 768
[  177.710125][T11740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.940310][T11757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2476'.
[  178.232269][T11779] gre0: entered promiscuous mode
[  178.234133][T11779] gre0: entered allmulticast mode
[  178.352794][ T5883] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.361288][ T5883] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.382302][T11790] pim6reg: entered allmulticast mode
[  178.390676][T11790] pim6reg: left allmulticast mode
[  178.828384][ T9641] tipc: Node number set to 1522064037
[  179.419676][T11824] netlink: 'syz.0.2506': attribute type 1 has an invalid length.
[  180.024934][T11844] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  180.689140][T11869] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2525'.
[  180.694910][T11869] tipc: Resetting bearer <eth:team0>
[  180.708649][T11869] tipc: Resetting bearer <eth:team0>
[  181.635358][T11903] trusted_key: syz.2.2538 sent an empty control message without MSG_MORE.
[  182.188390][T11919] netlink: 'syz.0.2544': attribute type 1 has an invalid length.
[  182.396078][T11932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.400212][T11932] syzkaller0: entered promiscuous mode
[  182.402398][T11932] syzkaller0: entered allmulticast mode
[  182.419638][T11932] tipc: Resetting bearer <eth:syzkaller0>
[  182.424446][T11931] tipc: Resetting bearer <eth:syzkaller0>
[  182.437492][T11931] tipc: Disabling bearer <eth:syzkaller0>
[  182.581702][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'.
[  182.741788][T11959] netlink: 'syz.1.2562': attribute type 1 has an invalid length.
[  182.751271][T11959] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2562'.
[  183.329787][T12000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2582'.
[  184.289772][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  184.384867][T12034] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  184.409418][T12034] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2597'.
[  184.416801][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  184.855712][T12053] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  184.891811][T12053] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.940502][T12053] vlan2: entered promiscuous mode
[  184.942519][T12053] bond2: entered promiscuous mode
[  184.951396][T12053] vlan2: entered allmulticast mode
[  184.953516][T12053] bond2: entered allmulticast mode
[  184.991378][T12053] bond2: (slave gretap1): making interface the new active one
[  184.995546][T12053] gretap1: entered promiscuous mode
[  184.998439][T12053] gretap1: entered allmulticast mode
[  185.012469][T12053] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  185.079217][T12053] syz.0.2607 (12053) used greatest stack depth: 18664 bytes left
[  185.232015][T12088] ip6gre1: entered allmulticast mode
[  186.275637][T12141] netlink: 'syz.1.2645': attribute type 1 has an invalid length.
[  186.328920][T12144] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2647'.
[  186.332397][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2647'.
[  186.389434][T12149] syzkaller1: entered promiscuous mode
[  186.391770][T12149] syzkaller1: entered allmulticast mode
[  187.244573][T12172] syzkaller1: entered promiscuous mode
[  187.249921][T12172] syzkaller1: entered allmulticast mode
[  187.351807][T12178] lo speed is unknown, defaulting to 1000
[  188.026907][T12170] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  188.733323][T12248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.248799][T12289] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2711'.
[  189.489823][T12299] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  189.542260][T12301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2717'.
[  189.775906][T12311] lo speed is unknown, defaulting to 1000
[  190.471669][T12343] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  190.790766][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2737'.
[  191.022405][   T33] audit: type=1800 audit(1755019417.389:8): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2746" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=4745 res=0 errno=0
[  191.036019][   T33] audit: type=1804 audit(1755019417.389:9): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2746" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=4745 res=1 errno=0
[  191.167328][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  191.529402][T12409] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.533408][T12409] syzkaller0: entered promiscuous mode
[  191.535346][T12409] syzkaller0: entered allmulticast mode
[  191.543516][T12409] tipc: Resetting bearer <eth:syzkaller0>
[  191.853626][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'.
[  192.392415][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'.
[  192.526423][T12479] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2792'.
[  192.704547][T12491] lo speed is unknown, defaulting to 1000
[  193.211364][T12531] netlink: 'syz.0.2815': attribute type 7 has an invalid length.
[  193.213918][T12531] netlink: 'syz.0.2815': attribute type 8 has an invalid length.
[  193.216332][T12531] netlink: 'syz.0.2815': attribute type 4 has an invalid length.
[  193.221756][T12531] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2815'.
[  193.462472][T12552] netlink: 'syz.2.2825': attribute type 1 has an invalid length.
[  193.504397][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'.
[  193.507336][T12552] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  193.513056][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2827'.
[  193.519864][T12552] 8021q: adding VLAN 0 to HW filter on device bond3
[  193.521035][ T5866] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  193.541027][T12552] veth5: entered promiscuous mode
[  193.548120][T12552] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  193.570903][T12552] team0: left allmulticast mode
[  193.573202][T12552] C: left allmulticast mode
[  193.575376][T12552] team_slave_1: left allmulticast mode
[  193.578259][T12552] team0: left promiscuous mode
[  193.580583][T12552] C: left promiscuous mode
[  193.582916][T12552] team_slave_1: left promiscuous mode
[  193.585800][T12552] bridge0: port 4(team0) entered disabled state
[  193.591708][T12552] dummy0: left allmulticast mode
[  193.594030][T12552] bridge0: port 3(dummy0) entered disabled state
[  193.602121][T12552] bridge_slave_0: left allmulticast mode
[  193.604775][T12552] bridge_slave_0: left promiscuous mode
[  193.607841][T12552] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.611807][T12552] bridge_slave_1: left allmulticast mode
[  193.613778][T12552] bridge_slave_1: left promiscuous mode
[  193.615868][T12552] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.622862][T12552] bond0: (slave bond_slave_0): Releasing backup interface
[  193.628437][T12552] bond_slave_0: left promiscuous mode
[  193.630819][T12552] bond_slave_0: left allmulticast mode
[  193.634794][T12552] bond0: (slave bond_slave_1): Releasing backup interface
[  193.642209][T12552] bond_slave_1: left promiscuous mode
[  193.644762][T12552] bond_slave_1: left allmulticast mode
[  193.648771][ T5866] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  193.657125][T12552] team0: Port device C removed
[  193.662332][T12552] team0: Port device team_slave_1 removed
[  193.665229][T12552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.669397][T12552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.674947][T12552] bond2: (slave veth3): Releasing active interface
[  193.684871][T12552] bond3: (slave ip6gretap1): Removing an active aggregator
[  193.688761][T12552] bond3: (slave ip6gretap1): Releasing backup interface
[  193.691534][T12552] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 22:42:c8:aa:cc:d3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  193.704848][T12552] bond3: (slave veth5): Releasing backup interface
[  193.888664][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'.
[  194.211057][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.319410][T12613] netlink: 'syz.0.2852': attribute type 1 has an invalid length.
[  194.505719][T12625] __nla_validate_parse: 1 callbacks suppressed
[  194.505735][T12625] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2854'.
[  194.872114][T12652] ieee802154 phy1 wpan1: encryption failed: -90
[  195.038885][T12670] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2878'.
[  195.475378][T12701] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2891'.
[  195.486049][T12701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.583121][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'.
[  195.625001][T12713] bridge0: port 1(erspan0) entered blocking state
[  195.636096][T12713] bridge0: port 1(erspan0) entered disabled state
[  195.641291][T12713] erspan0: entered allmulticast mode
[  195.644114][T12713] erspan0: left allmulticast mode
[  195.713169][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'.
[  195.716370][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'.
[  195.822546][T12740] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  195.824804][T12740] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  195.828020][T12740] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  195.840644][T12742] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2911'.
[  195.918748][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2916'.
[  195.974244][T12758] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  196.074562][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2925'.
[  196.116208][T12778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.120121][T12777] netlink: 'syz.1.2928': attribute type 1 has an invalid length.
[  196.209312][T12782] tipc: New replicast peer: 255.255.255.255
[  196.212183][T12782] tipc: Enabled bearer <udp:syz2>, priority 10
[  196.215170][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2930'.
[  196.221173][T12782] tipc: Disabling bearer <udp:syz2>
[  197.175154][T12798] netlink: 'syz.2.2938': attribute type 21 has an invalid length.
[  197.297100][T12803] lo speed is unknown, defaulting to 1000
[  197.927918][T12862] netlink: zone id is out of range
[  197.929715][T12862] netlink: zone id is out of range
[  197.945840][T12862] netlink: set zone limit has 4 unknown bytes
[  198.034609][T12870] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.048730][T12872] netlink: 'syz.1.2972': attribute type 13 has an invalid length.
[  198.051640][T12872] netlink: 'syz.1.2972': attribute type 17 has an invalid length.
[  198.070991][T12872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.083201][T12872] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  198.217564][T12872] netlink: 'syz.1.2972': attribute type 10 has an invalid length.
[  198.310869][T12872] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  198.315396][T12877] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  198.319673][T12877] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.986929][T12888] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  201.020022][T12945] __nla_validate_parse: 4 callbacks suppressed
[  201.020038][T12945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3004'.
[  201.190342][T12957] netlink: 'syz.2.3010': attribute type 1 has an invalid length.
[  201.192726][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3010'.
[  201.334366][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3018'.
[  201.386371][T12975] lo speed is unknown, defaulting to 1000
[  201.391406][T12978] netlink: 'syz.2.3021': attribute type 12 has an invalid length.
[  201.472184][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'.
[  201.675887][T12998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3027'.
[  201.938114][T13000] infiniband syz2: set down
[  201.940179][T13000] infiniband syz2: added syzkaller0
[  201.975662][T13000] RDS/IB: syz2: added
[  201.977680][T13000] smc: adding ib device syz2 with port count 1
[  201.980222][T13000] smc:    ib device syz2 port 1 has pnetid 
[  202.838989][  T743] smc: removing ib device syz2
[  202.952116][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3044'.
[  202.955572][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3044'.
[  203.819292][T13061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.223635][T13096] netlink: 'syz.2.3070': attribute type 12 has an invalid length.
[  204.227597][T13096] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3070'.
[  205.202404][T13146] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3091'.
[  205.527709][T13158] syzkaller0: entered promiscuous mode
[  205.529659][T13158] syzkaller0: entered allmulticast mode
[  205.843472][T13172] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3102'.
[  206.848824][T13172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.968662][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'.
[  207.029802][T13193] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3111'.
[  207.492793][T13225] netem: change failed
[  207.509371][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.512526][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.551188][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'.
[  208.019436][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3137'.
[  208.536329][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  208.548689][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  208.552588][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  208.565221][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  208.572349][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'.
[  208.723674][T13301] netlink: 'syz.0.3159': attribute type 3 has an invalid length.
[  208.726563][T13301] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3159'.
[  209.795883][T13337] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  209.946295][T13345] bridge4: entered promiscuous mode
[  209.950150][T13345] bridge4: entered allmulticast mode
[  209.991290][ T5234] Bluetooth: hci2: link tx timeout
[  209.993400][ T5234] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  212.046627][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  212.131266][T13394] macvlan2: entered allmulticast mode
[  212.133784][T13394] veth1_vlan: entered allmulticast mode
[  212.149093][T13394] veth1_vlan: left allmulticast mode
[  212.283357][T13404] netlink: 'syz.2.3200': attribute type 1 has an invalid length.
[  212.291402][T13404] netlink: 'syz.2.3200': attribute type 2 has an invalid length.
[  212.327762][T13404] netlink: 'syz.2.3200': attribute type 1 has an invalid length.
[  212.335339][T13404] netlink: 'syz.2.3200': attribute type 2 has an invalid length.
[  212.602396][T13430] __nla_validate_parse: 2 callbacks suppressed
[  212.602415][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'.
[  212.613534][T13431] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  212.655544][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3208'.
[  213.032947][T13459] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3225'.
[  213.113743][T13465] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.143401][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'.
[  213.209736][T13470] netlink: 'syz.1.3230': attribute type 17 has an invalid length.
[  213.477963][T13488] netlink: 'syz.1.3239': attribute type 9 has an invalid length.
[  213.480446][T13488] netlink: 'syz.1.3239': attribute type 6 has an invalid length.
[  213.484461][T13488] netlink: 'syz.1.3239': attribute type 7 has an invalid length.
[  213.489060][T13488] netlink: 'syz.1.3239': attribute type 8 has an invalid length.
[  213.567039][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  213.858422][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  213.969255][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'.
[  213.972803][T13521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3253'.
[  213.987418][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'.
[  213.994204][T13521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3253'.
[  213.998487][T13521] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3253'.
[  214.781093][T13583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3278'.
[  215.340955][T13632] netlink: 'syz.1.3299': attribute type 41 has an invalid length.
[  215.727667][T13649] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  215.765721][T13649] syz_tun (unregistering): left promiscuous mode
[  216.078592][T13677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.100861][T13686] veth0_to_team: entered promiscuous mode
[  216.102673][T13686] veth0_to_team: entered allmulticast mode
[  216.384300][T13708] gre0: left promiscuous mode
[  216.385779][T13708] gre0: left allmulticast mode
[  216.460946][T13708] dummy0: left promiscuous mode
[  216.466281][T13708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.476865][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  216.505552][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.562450][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.619008][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.727135][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  216.826243][ T5917] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  217.407451][ T5917] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.415405][ T5917] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.471783][ T2208] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  218.809416][T13783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.812241][T13783] syzkaller0: entered promiscuous mode
[  218.814101][T13783] syzkaller0: entered allmulticast mode
[  218.833312][T13783] tipc: Resetting bearer <eth:syzkaller0>
[  218.836731][T13782] tipc: Resetting bearer <eth:syzkaller0>
[  218.850967][T13782] tipc: Disabling bearer <eth:syzkaller0>
[  219.383339][T13811] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  219.484399][T13817] validate_nla: 2 callbacks suppressed
[  219.484418][T13817] netlink: 'syz.0.3370': attribute type 1 has an invalid length.
[  219.508077][T13817] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.519413][T13817] bond4: (slave gretap3): making interface the new active one
[  219.524253][T13817] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  219.640085][T13825] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  219.886579][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  220.886417][T13871] __nla_validate_parse: 3 callbacks suppressed
[  220.886431][T13871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3393'.
[  221.155272][T13895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3404'.
[  221.160954][T13895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3404'.
[  221.233378][T13901] netlink: 'syz.1.3407': attribute type 10 has an invalid length.
[  221.238117][T13901] syz_tun: entered promiscuous mode
[  221.239437][T13903] netlink: 'syz.0.3408': attribute type 3 has an invalid length.
[  221.244203][T13901] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  221.251629][T13901] netlink: 'syz.1.3407': attribute type 10 has an invalid length.
[  221.260642][T13901] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.267892][T13901] team0: Port device bond0 added
[  221.425434][T13920] netlink: 'syz.1.3413': attribute type 21 has an invalid length.
[  221.428657][T13920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3413'.
[  221.615206][T13937] netlink: 'syz.1.3422': attribute type 11 has an invalid length.
[  221.710406][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3424'.
[  221.714148][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3424'.
[  221.762520][T13945] netlink: 'syz.1.3426': attribute type 2 has an invalid length.
[  221.765731][T13945] netlink: 'syz.1.3426': attribute type 1 has an invalid length.
[  221.771837][T13945] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3426'.
[  221.775415][T13945] nbd: couldn't find device at index 16
[  221.795567][T13947] delete_channel: no stack
[  221.806790][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  221.958798][T13951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.125148][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'.
[  222.935208][T14054] lo speed is unknown, defaulting to 1000
[  224.352068][T14093] infiniband syz1: set active
[  224.354063][T14093] infiniband syz1: added veth1_to_bond
[  224.381751][T14093] RDS/IB: syz1: added
[  224.384688][T14093] smc: adding ib device syz1 with port count 1
[  224.387529][T14093] smc:    ib device syz1 port 1 has pnetid 
[  225.063801][T14106] netlink: 'syz.1.3492': attribute type 1 has an invalid length.
[  225.835146][T14164] batman_adv: batadv0: Adding interface: dummy0
[  225.838642][T14164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.856759][T14164] batman_adv: batadv0: Interface activated: dummy0
[  225.873788][T14164] batadv0: mtu less than device minimum
[  225.877404][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.882794][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.888015][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.893164][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.898403][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.903520][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.907975][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.912573][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  225.917251][T14164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  226.032350][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3520'.
[  226.294975][T14180] v: renamed from ip6_vti0 (while UP)
[  226.457703][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3528'.
[  226.507621][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'.
[  227.234970][T14233] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3549'.
[  227.418691][T14241] lo speed is unknown, defaulting to 1000
[  227.505502][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'.
[  227.538491][T14244] netlink: 'syz.0.3554': attribute type 21 has an invalid length.
[  227.669771][T14248] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  227.673703][T14248] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  228.458946][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'.
[  228.462417][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'.
[  228.477167][T14279] netlink: 'syz.0.3564': attribute type 18 has an invalid length.
[  228.794314][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3568'.
[  228.802959][T14290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3568'.
[  228.806702][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3568'.
[  229.695380][T14331] netlink: 'syz.0.3582': attribute type 17 has an invalid length.
[  231.174874][   T33] audit: type=1800 audit(1755019457.539:10): pid=14454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3639" name="memory.events" dev="tmpfs" ino=5808 res=0 errno=0
[  231.203510][   T33] audit: type=1804 audit(1755019457.549:11): pid=14454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3639" name="/newroot/1150/memory.events" dev="tmpfs" ino=5808 res=1 errno=0
[  231.326784][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.335926][T14466] __nla_validate_parse: 9 callbacks suppressed
[  231.335941][T14466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3644'.
[  231.343241][T14466] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3644'.
[  231.348419][T14466] netlink: 'syz.1.3644': attribute type 5 has an invalid length.
[  231.351364][T14466] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3644'.
[  231.540718][T14481] lo: entered allmulticast mode
[  231.555688][T14481] dvmrp1: entered allmulticast mode
[  231.573966][T14480] lo: left allmulticast mode
[  231.741019][T14498] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3659'.
[  231.789605][T14496] dummy0: entered promiscuous mode
[  231.791712][T14496] vlan2: entered promiscuous mode
[  231.824338][T14493] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.903386][T14493] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.942584][T14508] pim6reg: entered allmulticast mode
[  231.966987][T14493] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.978243][T14508] pim6reg: left allmulticast mode
[  232.013542][T14493] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.132057][T14519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3667'.
[  232.143528][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.164450][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.178337][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.197744][T14523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3669'.
[  232.208562][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.295069][T14529] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3672'.
[  232.353124][T14534] netlink: 'syz.1.3675': attribute type 10 has an invalid length.
[  232.355539][T14535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3674'.
[  232.486019][T14544] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  232.699328][T14562] netlink: 'syz.2.3685': attribute type 3 has an invalid length.
[  232.701817][T14562] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3685'.
[  232.811834][T14578] wlan1 speed is unknown, defaulting to 1000
[  232.814050][T14578] wlan1 speed is unknown, defaulting to 1000
[  232.817977][T14578] wlan1 speed is unknown, defaulting to 1000
[  232.858608][T14578] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  232.871946][T14578] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  232.883089][T14559] netlink: 'syz.0.3683': attribute type 13 has an invalid length.
[  232.908606][T14578] wlan1 speed is unknown, defaulting to 1000
[  232.912761][T14578] wlan1 speed is unknown, defaulting to 1000
[  232.927305][T14578] wlan1 speed is unknown, defaulting to 1000
[  234.340782][T14643] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3719'.
[  234.699851][T14649] netlink: 'syz.0.3722': attribute type 10 has an invalid length.
[  235.419906][T14682] syz.0.3738 (14682) used greatest stack depth: 18504 bytes left
[  235.809707][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  235.850722][T14708] net_ratelimit: 13 callbacks suppressed
[  235.850733][T14708] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  236.727922][T14636] Set syz1 is full, maxelem 65536 reached
[  237.071828][T14764] netlink: 'syz.0.3774': attribute type 10 has an invalid length.
[  237.075274][T14764] team0: Device veth0_vlan is already a lower device of the team interface
[  237.170094][T14771] __nla_validate_parse: 1 callbacks suppressed
[  237.170114][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3776'.
[  237.472872][T14739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.461280][T14821] lo speed is unknown, defaulting to 1000
[  238.829734][T14821] wlan1 speed is unknown, defaulting to 1000
[  239.460836][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3821'.
[  239.464344][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3821'.
[  239.478300][T14871] netlink: 'syz.2.3821': attribute type 13 has an invalid length.
[  239.600238][T14883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'.
[  239.603850][T14883] netlink: 'syz.1.3825': attribute type 7 has an invalid length.
[  239.607530][T14883] netlink: 'syz.1.3825': attribute type 8 has an invalid length.
[  239.610601][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'.
[  239.627026][T14883] dummy0: entered promiscuous mode
[  239.631481][T14883] team0: entered promiscuous mode
[  239.633738][T14883] team_slave_0: entered promiscuous mode
[  239.636245][T14883] team_slave_1: entered promiscuous mode
[  239.642416][T14883] bond0: entered promiscuous mode
[  239.644609][T14883] bond_slave_0: entered promiscuous mode
[  239.654567][T14883] bond_slave_1: entered promiscuous mode
[  239.658215][T14883] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  239.662977][T14883] dummy0: left promiscuous mode
[  239.665988][T14883] team0: left promiscuous mode
[  239.668656][T14883] team_slave_0: left promiscuous mode
[  239.671107][T14883] team_slave_1: left promiscuous mode
[  239.673580][T14883] bond0: left promiscuous mode
[  239.675631][T14883] bond_slave_0: left promiscuous mode
[  239.679191][T14883] bond_slave_1: left promiscuous mode
[  239.681698][T14883] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  239.787610][ T1955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.791683][ T1955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.831541][T14898] netlink: 'syz.0.3833': attribute type 1 has an invalid length.
[  239.855406][T14898] bond5: entered promiscuous mode
[  239.857362][T14898] bond5: entered allmulticast mode
[  239.868103][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3833'.
[  239.897369][T14898] bridge4: the hash_elasticity option has been deprecated and is always 16
[  240.332095][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3841'.
[  240.440281][T14927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3843'.
[  240.795307][T14949] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  240.817889][T14950] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3852'.
[  240.922060][T14950] team0: Port device bond0 removed
[  240.928928][T14950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.935290][T14950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.942441][T14950] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  240.949484][T14950] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  240.961619][T14950] bond0 (unregistering): Released all slaves
[  240.988700][ T2307] syz1: Port: 1 Link DOWN
[  240.990887][ T2208] wlan1 speed is unknown, defaulting to 1000
[  241.122871][T14963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3858'.
[  241.375258][T14971] batman_adv: batadv0: Interface deactivated: dummy0
[  241.385037][T14971] batman_adv: batadv0: Removing interface: dummy0
[  241.398010][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.518016][T14971] team0: Mode changed to "activebackup"
[  241.722639][T14984] sch_fq: defrate 0 ignored.
[  241.729736][T14985] netlink: 'syz.2.3867': attribute type 10 has an invalid length.
[  241.744499][T14985] 8021q: adding VLAN 0 to HW filter on device team0
[  241.749784][T14985] team0: entered promiscuous mode
[  241.751491][T14985] team0: entered allmulticast mode
[  241.754789][T14985] bond0: (slave team0): Enslaving as an active interface with an up link
[  241.956875][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  242.982288][T15029] lo speed is unknown, defaulting to 1000
[  243.245739][T15029] wlan1 speed is unknown, defaulting to 1000
[  243.663686][T15058] __nla_validate_parse: 1 callbacks suppressed
[  243.663705][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'.
[  243.780201][T15067] netlink: 'syz.2.3902': attribute type 10 has an invalid length.
[  243.783626][T15067] netlink: 'syz.2.3902': attribute type 49 has an invalid length.
[  243.849050][T15073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.020884][T15079] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  244.069771][T15081] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3909'.
[  244.406829][T15098] netlink: 'syz.2.3917': attribute type 1 has an invalid length.
[  244.593178][T15111] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  244.706428][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'.
[  245.141471][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'.
[  245.554142][T15192] syzkaller1: entered promiscuous mode
[  245.555921][T15192] syzkaller1: entered allmulticast mode
[  245.622601][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3961'.
[  245.625550][T15196] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3961'.
[  245.629711][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3961'.
[  245.638471][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'.
[  245.707305][T15198] vlan0 (unregistering): left promiscuous mode
[  245.713683][T15198] team0: Port device vlan0 removed
[  245.799081][T15206] netlink: 'syz.2.3966': attribute type 1 has an invalid length.
[  245.803081][T15206] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3966'.
[  245.883469][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3967'.
[  247.450806][T15277] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  247.450934][T15276] IPVS: stopping backup sync thread 15277 ...
[  247.658763][T15286] netlink: 'syz.2.4001': attribute type 1 has an invalid length.
[  247.732492][T15289] lo speed is unknown, defaulting to 1000
[  248.025234][T15289] wlan1 speed is unknown, defaulting to 1000
[  248.804565][T15356] netlink: 'syz.0.4035': attribute type 21 has an invalid length.
[  249.318654][T15397] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  249.621243][T15428] tipc: Resetting bearer <ib:ip6gre0>
[  249.912051][T15454] syzkaller1: entered promiscuous mode
[  249.914025][T15454] syzkaller1: entered allmulticast mode
[  250.335205][T15489] __nla_validate_parse: 5 callbacks suppressed
[  250.335224][T15489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4095'.
[  250.560500][T15506] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  250.815440][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4111'.
[  250.881362][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'.
[  251.168029][T15570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.364345][T15574] netlink: 'syz.0.4129': attribute type 10 has an invalid length.
[  251.526174][T15601] netlink: 'syz.0.4136': attribute type 4 has an invalid length.
[  252.221649][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4170'.
[  252.665255][T15710] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  252.726888][T15712] lo speed is unknown, defaulting to 1000
[  253.030144][T15735] lo speed is unknown, defaulting to 1000
[  254.728193][T15834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4235'.
[  255.203224][T15879] netlink: 'syz.0.4255': attribute type 142 has an invalid length.
[  255.590994][T15906] syzkaller0: entered promiscuous mode
[  255.593287][T15906] syzkaller0: entered allmulticast mode
[  258.024432][T15967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.057406][T15967] syzkaller0: entered promiscuous mode
[  258.059735][T15967] syzkaller0: entered allmulticast mode
[  258.062219][T15967] tipc: Resetting bearer <eth:syzkaller0>
[  258.068298][T15966] tipc: Resetting bearer <eth:syzkaller0>
[  258.081782][T15971] netlink: 'syz.2.4294': attribute type 11 has an invalid length.
[  259.262561][T15966] tipc: Disabling bearer <eth:syzkaller0>
[  259.581039][T16003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4306'.
[  259.613308][T16003] lo speed is unknown, defaulting to 1000
[  259.621508][T16008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4309'.
[  259.748145][T16012] IPVS: Scheduler module ip_vs_ not found
[  259.850705][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'.
[  259.853564][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'.
[  259.864117][T16023] ip6tnl2: entered promiscuous mode
[  259.865925][T16023] ip6tnl2: entered allmulticast mode
[  260.875934][T16051] netlink: 'syz.2.4326': attribute type 2 has an invalid length.
[  260.884571][T16051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4326'.
[  261.003515][T16061] netlink: 'syz.2.4331': attribute type 2 has an invalid length.
[  261.066994][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'.
[  261.474442][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4349'.
[  262.704992][T16216] netlink: 'syz.0.4396': attribute type 4 has an invalid length.
[  262.749851][T16219] netlink: 'syz.1.4397': attribute type 66 has an invalid length.
[  262.793700][T16223] IPVS: Unknown mcast interface: macvlan0
[  263.599857][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4410'.
[  263.634414][T16254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.759933][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'.
[  263.821539][T16272] bridge0: port 1(syz_tun) entered blocking state
[  263.829322][T16272] bridge0: port 1(syz_tun) entered disabled state
[  263.831483][T16272] syz_tun: entered allmulticast mode
[  263.861623][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'.
[  263.918336][T16280] netlink: 'syz.0.4425': attribute type 1 has an invalid length.
[  264.116068][T16303] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1
[  264.240254][T16313] netlink: 'syz.0.4441': attribute type 15 has an invalid length.
[  264.428773][T16320] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  264.432087][T16320] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  264.440818][T16320] vlan3: left promiscuous mode
[  264.442857][T16320] bond0: left promiscuous mode
[  264.444852][T16320] team0: left promiscuous mode
[  264.448130][T16320] vlan3: left allmulticast mode
[  264.450181][T16320] bond0: left allmulticast mode
[  264.452701][T16320] team0: left allmulticast mode
[  264.457105][T16320] tipc: Resetting bearer <eth:syzkaller0>
[  264.460843][T16320] syzkaller0: left promiscuous mode
[  264.463179][T16320] syzkaller0: left allmulticast mode
[  264.484544][T16320] geneve2: left promiscuous mode
[  264.495865][T16320] veth5: left promiscuous mode
[  264.511086][T16320] ip6tnl2: left promiscuous mode
[  264.513138][T16320] ip6tnl2: left allmulticast mode
[  264.521287][ T2208] lo speed is unknown, defaulting to 1000
[  264.521328][ T5883] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.523606][ T2208] syz0: Port: 1 Link DOWN
[  264.536993][ T5883] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.540747][ T5883] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.544493][ T5883] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.550128][ T2208] lo speed is unknown, defaulting to 1000
[  264.552640][ T5883] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.556325][ T5883] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.805389][T16339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.840432][T16339] syzkaller0: entered promiscuous mode
[  264.848595][T16339] syzkaller0: entered allmulticast mode
[  265.250135][T16373] lo speed is unknown, defaulting to 1000
[  266.600040][T16446] macvtap0: refused to change device tx_queue_len
[  266.602072][T16446] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  266.725870][T16460] __nla_validate_parse: 2 callbacks suppressed
[  266.725890][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'.
[  266.791973][T16467] netlink: 336 bytes leftover after parsing attributes in process `syz.2.4507'.
[  267.248516][T16504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.251041][T16504] syzkaller0: entered promiscuous mode
[  267.252801][T16504] syzkaller0: entered allmulticast mode
[  267.260321][T16504] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  267.274664][T16504] tipc: Resetting bearer <eth:syzkaller0>
[  267.278600][T16503] tipc: Resetting bearer <eth:syzkaller0>
[  267.291185][T16503] tipc: Disabling bearer <eth:syzkaller0>
[  267.455939][T16518] veth0: entered promiscuous mode
[  267.459189][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4529'.
[  267.689239][T16538] syzkaller1: entered promiscuous mode
[  267.691397][T16538] syzkaller1: entered allmulticast mode
[  267.855476][T16542] lo speed is unknown, defaulting to 1000
[  267.907082][T16549] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  268.311299][T16574] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4553'.
[  268.585075][T16591] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4558'.
[  269.020502][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4560'.
[  269.211512][T16614] C: renamed from team_slave_0 (while UP)
[  269.219056][T16614] netlink: 'syz.1.4564': attribute type 2 has an invalid length.
[  269.222370][T16614] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4564'.
[  269.225895][T16614] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  269.289121][T16618] tap0: tun_chr_ioctl cmd 35108
[  269.533906][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4575'.
[  269.539280][T16636] netlink: 'syz.1.4575': attribute type 5 has an invalid length.
[  270.738140][ T5917] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  271.842727][T16725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4612'.
[  271.988492][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4614'.
[  272.151769][T16746] syzkaller0: entered promiscuous mode
[  272.174517][T16746] syzkaller0: entered allmulticast mode
[  272.264327][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4626'.
[  274.254382][T16808] batadv_slave_0: entered promiscuous mode
[  274.261867][T16807] batadv_slave_0: left promiscuous mode
[  274.405746][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4653'.
[  274.410321][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'.
[  274.413977][T16822] netlink: 'syz.2.4653': attribute type 13 has an invalid length.
[  274.419549][T16822] netlink: 'syz.2.4653': attribute type 11 has an invalid length.
[  274.604371][T16836] netlink: 'syz.2.4661': attribute type 13 has an invalid length.
[  275.036137][T16876] lo speed is unknown, defaulting to 1000
[  275.211102][T16887] lo speed is unknown, defaulting to 1000
[  275.466623][T16893] lo speed is unknown, defaulting to 1000
[  276.058619][T16929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4699'.
[  276.431645][T16948] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4707'.
[  276.471580][   T33] audit: type=1800 audit(1755019502.839:12): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4701" name="memory.events" dev="tmpfs" ino=7491 res=0 errno=0
[  276.569955][T16958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4712'.
[  277.172260][T16989] netlink: 'syz.1.4726': attribute type 2 has an invalid length.
[  277.174999][T16989] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4726'.
[  277.280633][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4728'.
[  278.005855][T17032] syzkaller0: entered promiscuous mode
[  278.011012][T17032] syzkaller0: entered allmulticast mode
[  279.462976][T17044] pim6reg1: entered promiscuous mode
[  279.464766][T17044] pim6reg1: entered allmulticast mode
[  279.760100][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4768'.
[  279.915727][T17099] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.135617][T17126] sctp: [Deprecated]: syz.0.4785 (pid 17126) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.135617][T17126] Use struct sctp_sack_info instead
[  280.618848][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4806'.
[  280.623696][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4806'.
[  281.032594][T17193] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4815'.
[  282.512528][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4836'.
[  282.521290][T17247] Unsupported xt match
[  282.521310][T17247] unable to load match
[  282.839378][T17253] lo speed is unknown, defaulting to 1000
[  285.216114][T17345] bridge0: port 2(erspan0) entered blocking state
[  285.225823][T17345] bridge0: port 2(erspan0) entered disabled state
[  285.241927][T17345] erspan0: entered allmulticast mode
[  285.266681][T17345] erspan0: left allmulticast mode
[  285.384551][T17353] tipc: Resetting bearer <ib:ip6gre0>
[  285.440149][T17362] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4888'.
[  285.551894][ T5917] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.555428][T17365] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.569240][ T5917] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.577041][ T5917] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.580100][ T5917] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.806997][T17378] block nbd0: server does not support multiple connections per device.
[  285.811041][T17378] block nbd0: shutting down sockets
[  286.617977][T17452] netlink: del zone limit has 4 unknown bytes
[  286.836363][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4934'.
[  286.909755][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4936'.
[  287.014035][T17484] netlink: 'syz.2.4941': attribute type 1 has an invalid length.
[  288.380357][T17586] 8021q: adding VLAN 0 to HW filter on device bond6
[  288.459100][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4976'.
[  288.462857][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4976'.
[  288.757995][T17610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4986'.
[  289.251189][T17638] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4997'.
[  289.656134][ T1955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.659203][ T1955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.672938][T17665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.709487][T17672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5015'.
[  289.943868][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5023'.
[  289.948048][T17689] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  289.951104][T17689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.112493][T17701] netlink: 'syz.2.5028': attribute type 23 has an invalid length.
[  290.295736][T17718] Unsupported ieee802154 address type: 0
[  290.372415][T17724] tun0: tun_chr_ioctl cmd 2148045848
[  290.374618][T17724] tun0: tun_chr_ioctl cmd 21731
[  290.532028][T17740] netlink: zone id is out of range
[  290.533657][T17740] netlink: zone id is out of range
[  290.843784][T17767] tap0: tun_chr_ioctl cmd 1074025677
[  290.846289][T17767] tap0: linktype set to 776
[  291.039086][T17780] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  291.052900][T17785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5066'.
[  291.845108][T17820] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  292.461431][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5096'.
[  292.464739][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'.
[  292.696312][T17869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5106'.
[  292.740743][T17873] netlink: 'syz.1.5107': attribute type 21 has an invalid length.
[  292.896964][T17887] netlink: 'syz.1.5114': attribute type 11 has an invalid length.
[  293.122217][T17905] openvswitch: netlink: Message has 4 unknown bytes.
[  293.230668][T17914] netlink: 'syz.1.5125': attribute type 10 has an invalid length.
[  293.233778][T17914] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  293.238497][T17914] batman_adv: batadv0: Adding interface: netdevsim0
[  293.241105][T17914] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.251108][T17914] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  293.870842][T17964] __nla_validate_parse: 1 callbacks suppressed
[  293.870857][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5149'.
[  293.919101][T17968] tipc: Failed to remove unknown binding: 66,1,1/1942276747:3886989915/3886989917
[  294.065751][T17981] vlan0: entered promiscuous mode
[  294.067617][T17981] bridge0: entered promiscuous mode
[  294.070296][T17981] vlan0: entered allmulticast mode
[  294.072166][T17981] bridge0: entered allmulticast mode
[  294.248312][T17987] vlan0: entered promiscuous mode
[  294.250308][T17987] bond0: entered promiscuous mode
[  294.429441][T18001] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  294.631712][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'.
[  294.817897][T18025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5175'.
[  294.933071][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5180'.
[  294.956951][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5180'.
[  294.997719][T18044] syzkaller1: entered promiscuous mode
[  295.000911][T18044] syzkaller1: entered allmulticast mode
[  295.198223][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5195'.
[  295.525323][T18103] netlink: 'syz.0.5211': attribute type 1 has an invalid length.
[  295.558369][T18103] 8021q: adding VLAN 0 to HW filter on device bond7
[  295.571249][T18103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5211'.
[  295.581989][T18103] gretap4: entered promiscuous mode
[  295.591531][T18103] bond7: (slave gretap4): making interface the new active one
[  295.595823][T18103] bond7: (slave gretap4): Enslaving as an active interface with an up link
[  295.772415][T18115] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5211'.
[  296.404712][T18132] netlink: 'syz.2.5221': attribute type 6 has an invalid length.
[  296.551108][T18142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5226'.
[  296.554575][T18142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5226'.
[  297.463840][T18208] bridge0: port 1(vlan0) entered blocking state
[  297.466719][T18208] bridge0: port 1(vlan0) entered disabled state
[  297.469472][T18208] vlan0: entered allmulticast mode
[  297.473781][T18208] vlan0: left allmulticast mode
[  297.681818][T18216] lo speed is unknown, defaulting to 1000
[  298.230127][T18235] netlink: 'syz.0.5262': attribute type 1 has an invalid length.
[  299.689894][T18306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.692959][T18306] syzkaller0: entered promiscuous mode
[  299.694986][T18306] syzkaller0: entered allmulticast mode
[  299.711381][T18308] netlink: 'syz.1.5290': attribute type 1 has an invalid length.
[  299.714465][T18308] __nla_validate_parse: 10 callbacks suppressed
[  299.714482][T18308] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5290'.
[  299.723803][T18306] tipc: Resetting bearer <eth:syzkaller0>
[  299.764280][T18305] tipc: Resetting bearer <eth:syzkaller0>
[  299.774545][T18305] tipc: Disabling bearer <eth:syzkaller0>
[  299.923629][T18322] netlink: 'syz.1.5297': attribute type 1 has an invalid length.
[  299.926117][T18322] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5297'.
[  299.989411][T18320] lo speed is unknown, defaulting to 1000
[  299.998318][T18327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.002996][T18329] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004
[  300.005296][T18327] syzkaller0: entered promiscuous mode
[  300.008906][T18327] syzkaller0: entered allmulticast mode
[  300.028324][T18330] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5296'.
[  300.060622][T18327] tipc: Resetting bearer <eth:syzkaller0>
[  300.064495][T18326] tipc: Resetting bearer <eth:syzkaller0>
[  300.080307][T18326] tipc: Disabling bearer <eth:syzkaller0>
[  300.093614][T18332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5301'.
[  300.191414][T18338] netlink: 'syz.2.5304': attribute type 10 has an invalid length.
[  300.214815][T18338] team0: Port device dummy0 added
[  300.230759][T18338] netlink: 'syz.2.5304': attribute type 10 has an invalid length.
[  300.244319][T18338] team0: Port device dummy0 removed
[  300.253193][T18338] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  300.281637][T18346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5308'.
[  301.382254][T18424] netlink: del zone limit has 8 unknown bytes
[  301.960731][T18457] netlink: 'syz.2.5354': attribute type 8 has an invalid length.
[  302.396339][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5360'.
[  302.870494][T18490] lo speed is unknown, defaulting to 1000
[  303.176417][T18494] netlink: 'syz.2.5369': attribute type 12 has an invalid length.
[  303.180542][T18494] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5369'.
[  303.726053][T18515] netlink: 'syz.2.5375': attribute type 1 has an invalid length.
[  303.732855][T18515] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5375'.
[  304.221378][T18531] pim6reg: entered allmulticast mode
[  304.224209][T18531] pim6reg: left allmulticast mode
[  304.455093][T18549] netlink: 'syz.0.5393': attribute type 1 has an invalid length.
[  304.458219][T18549] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5393'.
[  304.491797][T18551] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5394'.
[  305.382848][T18593] lo speed is unknown, defaulting to 1000
[  305.702905][T18612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5420'.
[  305.760699][T18614] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  305.946330][T18621] netlink: 'syz.2.5424': attribute type 1 has an invalid length.
[  305.950716][T18621] NCSI netlink: No device for ifindex 0
[  306.261539][T18637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5432'.
[  306.265045][T18637] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  307.289133][T18695] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5457'.
[  307.563569][T18717] netlink: 'syz.0.5467': attribute type 3 has an invalid length.
[  307.566040][T18717] netlink: 'syz.0.5467': attribute type 1 has an invalid length.
[  307.568618][T18717] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5467'.
[  308.123955][T18761] syzkaller0: left promiscuous mode
[  308.126270][T18761] syzkaller0: left allmulticast mode
[  309.067559][T18779] bridge0: port 1(erspan0) entered blocking state
[  309.069669][T18779] bridge0: port 1(erspan0) entered disabled state
[  309.072449][T18779] erspan0: entered allmulticast mode
[  309.080038][T18779] erspan0: entered promiscuous mode
[  309.085290][T18779] erspan0: left allmulticast mode
[  309.087344][T18779] erspan0: left promiscuous mode
[  309.090372][T18779] bridge0: port 1(erspan0) entered disabled state
[  309.202394][T18789] netlink: 'syz.2.5500': attribute type 30 has an invalid length.
[  309.502377][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5511'.
[  309.670290][T18828] lo speed is unknown, defaulting to 1000
[  310.482269][T18856] lo speed is unknown, defaulting to 1000
[  311.096773][ T5857] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  312.290994][T18965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5576'.
[  312.299934][T18969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5572'.
[  312.304014][T18957] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5572'.
[  312.332049][T18965] nbd: socks must be embedded in a SOCK_ITEM attr
[  312.509178][T18991] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5587'.
[  312.512599][T18991] netlink: 'syz.0.5587': attribute type 1 has an invalid length.
[  312.771154][T19021] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[  312.838612][T19027] netlink: 'syz.0.5604': attribute type 1 has an invalid length.
[  312.841614][T19027] netlink: 'syz.0.5604': attribute type 3 has an invalid length.
[  312.844697][T19027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5604'.
[  312.879812][T19029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5606'.
[  312.925527][T19033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.928590][T19033] syzkaller0: entered promiscuous mode
[  312.930343][T19033] syzkaller0: entered allmulticast mode
[  312.943949][T19033] tipc: Resetting bearer <eth:syzkaller0>
[  312.948373][T19032] tipc: Resetting bearer <eth:syzkaller0>
[  312.958370][T19032] tipc: Disabling bearer <eth:syzkaller0>
[  313.180276][T19041] netlink: 'syz.0.5611': attribute type 15 has an invalid length.
[  313.183575][T19041] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5611'.
[  314.417945][T19087] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5633'.
[  314.699350][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5640'.
[  314.702261][T19105] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5640'.
[  314.723072][T19105] vlan1: entered allmulticast mode
[  314.724979][T19105] veth1: entered allmulticast mode
[  314.843984][T19116] netlink: 'syz.0.5645': attribute type 11 has an invalid length.
[  314.875500][T19118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.315687][T19144] netlink: 'syz.0.5658': attribute type 1 has an invalid length.
[  315.526869][T19160] netlink: 'syz.0.5667': attribute type 1 has an invalid length.
[  315.550536][T19160] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[  315.554398][T19160] bond8: (slave vxcan5): Error -95 calling set_mac_address
[  315.660596][   T33] audit: type=1804 audit(1755019542.029:13): pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5671" name="/newroot/1816/cgroup.controllers" dev="tmpfs" ino=9159 res=1 errno=0
[  315.671071][   T33] audit: type=1800 audit(1755019542.029:14): pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5671" name="cgroup.controllers" dev="tmpfs" ino=9159 res=0 errno=0
[  315.682414][   T33] audit: type=1800 audit(1755019542.039:15): pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5671" name="cgroup.controllers" dev="tmpfs" ino=9159 res=0 errno=0
[  317.839992][T19281] __nla_validate_parse: 3 callbacks suppressed
[  317.840010][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5718'.
[  320.278231][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.841264][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5757'.
[  320.869319][T19373] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  320.874416][T19372] IPVS: stopping backup sync thread 19373 ...
[  320.983853][T19385] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5764'.
[  321.431106][T19430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5785'.
[  321.480664][T19434] vlan0: entered promiscuous mode
[  321.482731][T19434] bridge_slave_1: entered promiscuous mode
[  322.354690][T19490] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5809'.
[  322.450980][T19492] lo speed is unknown, defaulting to 1000
[  322.551337][T19498] netlink: 'syz.0.5812': attribute type 2 has an invalid length.
[  322.588638][T19501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5813'.
[  323.228332][T19525] nbd1: detected capacity change from 0 to 63
[  323.263066][   T57] block nbd1: Receive control failed (result -104)
[  323.488293][T19540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5828'.
[  323.816359][T19560] netlink: 'syz.0.5836': attribute type 5 has an invalid length.
[  323.961838][T19563] batman_adv: batadv0: Adding interface: gretap5
[  323.964564][T19563] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.975212][T19563] batman_adv: batadv0: Interface activated: gretap5
[  324.069108][T19567] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  324.341764][T19579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5844'.
[  324.669793][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5848'.
[  324.682303][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5848'.
[  324.700209][T19594] netlink: 'syz.2.5848': attribute type 12 has an invalid length.
[  325.254927][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5857'.
[  325.329517][T19621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5860'.
[  325.476038][T19639] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5869'.
[  325.867073][T19668] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  325.870980][T19668] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5883'.
[  325.919424][T19671] lo speed is unknown, defaulting to 1000
[  326.028829][T19677] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.451192][T19697] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5896'.
[  326.649598][T19710] netlink: 'syz.1.5901': attribute type 3 has an invalid length.
[  326.756130][T19720] netlink: 'syz.2.5907': attribute type 1 has an invalid length.
[  331.377147][T19806] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  331.381812][T19806] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  331.611915][T19820] lo speed is unknown, defaulting to 1000
[  331.646380][T19825] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  331.755602][T19831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5955'.
[  331.765212][T19831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5955'.
[  331.771765][T19831] netlink: 'syz.2.5955': attribute type 4 has an invalid length.
[  331.779573][T19831] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5955'.
[  332.457581][    C0] ==================================================================
[  332.460777][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  332.463845][    C0] Read of size 2 at addr ffff888038d9742a by task syz.0.5965/19853
[  332.467621][    C0] 
[  332.468955][    C0] CPU: 0 UID: 0 PID: 19853 Comm: syz.0.5965 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  332.468979][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.468991][    C0] Call Trace:
[  332.468998][    C0]  <IRQ>
[  332.469006][    C0]  dump_stack_lvl+0x189/0x250
[  332.469031][    C0]  ? rcu_is_watching+0x15/0xb0
[  332.469046][    C0]  ? __kasan_check_byte+0x12/0x40
[  332.469067][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.469082][    C0]  ? rcu_is_watching+0x15/0xb0
[  332.469096][    C0]  ? lock_release+0x4b/0x3e0
[  332.469120][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  332.469138][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  332.469157][    C0]  print_report+0xca/0x240
[  332.469172][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  332.469189][    C0]  kasan_report+0x118/0x150
[  332.469209][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  332.469234][    C0]  rose_timer_expiry+0x471/0x4b0
[  332.469251][    C0]  call_timer_fn+0x17e/0x5f0
[  332.469272][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  332.469287][    C0]  ? call_timer_fn+0xbe/0x5f0
[  332.469306][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  332.469329][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  332.469346][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.469362][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  332.469378][    C0]  __run_timer_base+0x61a/0x860
[  332.469396][    C0]  ? ktime_get+0x3e/0x1f0
[  332.469417][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  332.469433][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  332.469456][    C0]  run_timer_softirq+0xb7/0x180
[  332.469475][    C0]  handle_softirqs+0x286/0x870
[  332.469491][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  332.469506][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  332.469520][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  332.469538][    C0]  __irq_exit_rcu+0xca/0x1f0
[  332.469550][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  332.469567][    C0]  irq_exit_rcu+0x9/0x30
[  332.469579][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  332.469595][    C0]  </IRQ>
[  332.469615][    C0]  <TASK>
[  332.469622][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  332.469641][    C0] RIP: 0010:do_raw_spin_lock+0x15/0x290
[  332.469662][    C0] Code: eb 86 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 <48> 81 ec 80 00 00 00 48 89 fb 65 48 8b 05 d9 c0 01 11 48 89 44 24
[  332.469677][    C0] RSP: 0018:ffffc9000482f640 EFLAGS: 00000282
[  332.469693][    C0] RAX: 58c9601e8b539400 RBX: ffff888028f72480 RCX: 58c9601e8b539400
[  332.469706][    C0] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff888027ca3400
[  332.469718][    C0] RBP: ffffc9000482f670 R08: 0000000000000000 R09: ffffffff8a26915f
[  332.469729][    C0] R10: dffffc0000000000 R11: fffff52000905ec0 R12: dffffc0000000000
[  332.469740][    C0] R13: 1ffff110051ee498 R14: 1ffff110051ee49e R15: 0000000000000001
[  332.469753][    C0]  ? unix_stream_read_generic+0xc2f/0x2480
[  332.469783][    C0]  unix_stream_read_generic+0xc2f/0x2480
[  332.469804][    C0]  ? __lock_acquire+0xab9/0xd20
[  332.469835][    C0]  ? __pfx_unix_stream_read_generic+0x10/0x10
[  332.469911][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  332.469931][    C0]  ? __schedule+0x17ae/0x4cc0
[  332.469954][    C0]  unix_stream_recvmsg+0x15d/0x1b0
[  332.469972][    C0]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  332.469985][    C0]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  332.470008][    C0]  ? aa_sock_msg_perm+0xda/0x1d0
[  332.470031][    C0]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  332.470045][    C0]  ? security_socket_recvmsg+0x7e/0x2e0
[  332.470059][    C0]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  332.470072][    C0]  sock_recvmsg+0x22c/0x270
[  332.470089][    C0]  ____sys_recvmsg+0x1c9/0x460
[  332.470113][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  332.470138][    C0]  ? import_iovec+0x74/0xa0
[  332.470154][    C0]  ___sys_recvmsg+0x1b5/0x510
[  332.470170][    C0]  ? futex_private_hash_put+0x245/0x280
[  332.470189][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  332.470215][    C0]  ? __fget_files+0x3a0/0x420
[  332.470249][    C0]  __x64_sys_recvmsg+0x198/0x260
[  332.470270][    C0]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  332.470296][    C0]  ? rcu_is_watching+0x15/0xb0
[  332.470312][    C0]  ? do_syscall_64+0xbe/0x3b0
[  332.470331][    C0]  do_syscall_64+0xfa/0x3b0
[  332.470348][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.470365][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.470379][    C0]  ? exc_page_fault+0x9f/0xf0
[  332.470392][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.470406][    C0] RIP: 0033:0x7fc1fef8ebe9
[  332.470421][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.470435][    C0] RSP: 002b:00007fc1fd1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  332.470451][    C0] RAX: ffffffffffffffda RBX: 00007fc1ff1b5fa0 RCX: 00007fc1fef8ebe9
[  332.470462][    C0] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000008
[  332.470472][    C0] RBP: 00007fc1ff011e19 R08: 0000000000000000 R09: 0000000000000000
[  332.470481][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.470490][    C0] R13: 00007fc1ff1b6038 R14: 00007fc1ff1b5fa0 R15: 00007ffcc5964738
[  332.470508][    C0]  </TASK>
[  332.470514][    C0] 
[  332.668266][    C0] Allocated by task 19820:
[  332.670014][    C0]  kasan_save_track+0x3e/0x80
[  332.671889][    C0]  __kasan_kmalloc+0x93/0xb0
[  332.673724][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  332.675858][    C0]  inetdev_init+0x7d/0x500
[  332.677589][    C0]  inetdev_event+0x301/0x15b0
[  332.679390][    C0]  notifier_call_chain+0x1b6/0x3e0
[  332.681419][    C0]  register_netdevice+0x1608/0x1ae0
[  332.683498][    C0]  __ip_tunnel_create+0x3e7/0x560
[  332.685460][    C0]  ip_tunnel_init_net+0x2ba/0x800
[  332.687462][    C0]  ops_init+0x35c/0x5c0
[  332.689150][    C0]  setup_net+0x10c/0x320
[  332.690823][    C0]  copy_net_ns+0x31b/0x4d0
[  332.692855][    C0]  create_new_namespaces+0x3f3/0x720
[  332.694959][    C0]  unshare_nsproxy_namespaces+0x11c/0x170
[  332.697241][    C0]  ksys_unshare+0x4c8/0x8c0
[  332.699030][    C0]  __x64_sys_unshare+0x38/0x50
[  332.700956][    C0]  do_syscall_64+0xfa/0x3b0
[  332.702723][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.705051][    C0] 
[  332.706029][    C0] Freed by task 23:
[  332.707530][    C0]  kasan_save_track+0x3e/0x80
[  332.709402][    C0]  kasan_save_free_info+0x46/0x50
[  332.711353][    C0]  __kasan_slab_free+0x5b/0x80
[  332.713252][    C0]  kfree+0x18e/0x440
[  332.714775][    C0]  rcu_core+0xcab/0x1770
[  332.716470][    C0]  handle_softirqs+0x286/0x870
[  332.718329][    C0]  run_ksoftirqd+0x9b/0x100
[  332.720072][    C0]  smpboot_thread_fn+0x542/0xa60
[  332.722002][    C0]  kthread+0x711/0x8a0
[  332.723575][    C0]  ret_from_fork+0x3fc/0x770
[  332.725352][    C0]  ret_from_fork_asm+0x1a/0x30
[  332.727150][    C0] 
[  332.728061][    C0] Last potentially related work creation:
[  332.730142][    C0]  kasan_save_stack+0x3e/0x60
[  332.731919][    C0]  kasan_record_aux_stack+0xbd/0xd0
[  332.733902][    C0]  call_rcu+0x157/0x9c0
[  332.735552][    C0]  inetdev_event+0x81c/0x15b0
[  332.737402][    C0]  notifier_call_chain+0x1b6/0x3e0
[  332.739396][    C0]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  332.741896][    C0]  ops_undo_list+0x3dc/0x990
[  332.743719][    C0]  cleanup_net+0x4c5/0x800
[  332.745463][    C0]  process_scheduled_works+0xae1/0x17b0
[  332.747566][    C0]  worker_thread+0x8a0/0xda0
[  332.749401][    C0]  kthread+0x711/0x8a0
[  332.750995][    C0]  ret_from_fork+0x3fc/0x770
[  332.752807][    C0]  ret_from_fork_asm+0x1a/0x30
[  332.754713][    C0] 
[  332.755650][    C0] The buggy address belongs to the object at ffff888038d97400
[  332.755650][    C0]  which belongs to the cache kmalloc-512 of size 512
[  332.760851][    C0] The buggy address is located 42 bytes inside of
[  332.760851][    C0]  freed 512-byte region [ffff888038d97400, ffff888038d97600)
[  332.765988][    C0] 
[  332.766935][    C0] The buggy address belongs to the physical page:
[  332.769499][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38d94
[  332.772900][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  332.776187][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  332.779055][    C0] page_type: f5(slab)
[  332.780620][    C0] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  332.783909][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  332.787186][    C0] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  332.790483][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  332.793755][    C0] head: 00fff00000000002 ffffea0000e36501 00000000ffffffff 00000000ffffffff
[  332.797039][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  332.800344][    C0] page dumped because: kasan: bad access detected
[  332.802846][    C0] page_owner tracks the page as allocated
[  332.805042][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10175, tgid 10174 (syz.2.1816), ts 149015509581, free_ts 139483702703
[  332.812452][    C0]  post_alloc_hook+0x240/0x2a0
[  332.814342][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  332.816496][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  332.818749][    C0]  alloc_pages_mpol+0x232/0x4a0
[  332.820648][    C0]  allocate_slab+0x8a/0x370
[  332.822424][    C0]  ___slab_alloc+0xbeb/0x1410
[  332.824284][    C0]  __kmalloc_cache_noprof+0x296/0x3d0
[  332.826363][    C0]  cfcnfg_create+0x68/0x380
[  332.828175][    C0]  caif_init_net+0x81/0xc0
[  332.829949][    C0]  ops_init+0x35c/0x5c0
[  332.831601][    C0]  setup_net+0x10c/0x320
[  332.833284][    C0]  copy_net_ns+0x31b/0x4d0
[  332.835030][    C0]  create_new_namespaces+0x3f3/0x720
[  332.837147][    C0]  unshare_nsproxy_namespaces+0x11c/0x170
[  332.839346][    C0]  ksys_unshare+0x4c8/0x8c0
[  332.841098][    C0]  __x64_sys_unshare+0x38/0x50
[  332.842971][    C0] page last free pid 5854 tgid 5854 stack trace:
[  332.845376][    C0]  __free_frozen_pages+0xbc4/0xd30
[  332.847337][    C0]  __put_partials+0x156/0x1a0
[  332.849161][    C0]  put_cpu_partial+0x17c/0x250
[  332.851001][    C0]  __slab_free+0x2d5/0x3c0
[  332.852730][    C0]  qlist_free_all+0x97/0x140
[  332.854537][    C0]  kasan_quarantine_reduce+0x148/0x160
[  332.856681][    C0]  __kasan_slab_alloc+0x22/0x80
[  332.858566][    C0]  __kmalloc_noprof+0x224/0x4f0
[  332.860489][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  332.862636][    C0]  tomoyo_path_perm+0x213/0x4b0
[  332.864535][    C0]  security_inode_getattr+0x12f/0x330
[  332.866632][    C0]  vfs_fstatat+0xb1/0x170
[  332.868305][    C0]  __x64_sys_newfstatat+0x116/0x190
[  332.870297][    C0]  do_syscall_64+0xfa/0x3b0
[  332.872080][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.874393][    C0] 
[  332.875351][    C0] Memory state around the buggy address:
[  332.877479][    C0]  ffff888038d97300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  332.880628][    C0]  ffff888038d97380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  332.883683][    C0] >ffff888038d97400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.886797][    C0]                                   ^
[  332.888887][    C0]  ffff888038d97480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.892011][    C0]  ffff888038d97500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.895130][    C0] ==================================================================
[  332.898356][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  332.901078][    C0] CPU: 0 UID: 0 PID: 19853 Comm: syz.0.5965 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  332.905746][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.909557][    C0] Call Trace:
[  332.910838][    C0]  <IRQ>
[  332.912005][    C0]  dump_stack_lvl+0x99/0x250
[  332.913853][    C0]  ? __asan_memcpy+0x40/0x70
[  332.915691][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.917730][    C0]  ? __pfx__printk+0x10/0x10
[  332.919588][    C0]  vpanic+0x281/0x750
[  332.921181][    C0]  ? __pfx_vpanic+0x10/0x10
[  332.922993][    C0]  ? irqentry_exit+0x74/0x90
[  332.924840][    C0]  panic+0xb9/0xc0
[  332.926346][    C0]  ? __pfx_panic+0x10/0x10
[  332.928134][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  332.930418][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  332.932730][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  332.934763][    C0]  check_panic_on_warn+0x89/0xb0
[  332.936700][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  332.938692][    C0]  end_report+0x78/0x160
[  332.940369][    C0]  kasan_report+0x129/0x150
[  332.942175][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  332.944194][    C0]  rose_timer_expiry+0x471/0x4b0
[  332.946147][    C0]  call_timer_fn+0x17e/0x5f0
[  332.948009][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  332.950090][    C0]  ? call_timer_fn+0xbe/0x5f0
[  332.951968][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  332.953977][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  332.956018][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.958050][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  332.960174][    C0]  __run_timer_base+0x61a/0x860
[  332.962084][    C0]  ? ktime_get+0x3e/0x1f0
[  332.963795][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  332.965873][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  332.968279][    C0]  run_timer_softirq+0xb7/0x180
[  332.970201][    C0]  handle_softirqs+0x286/0x870
[  332.972110][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  332.974008][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  332.976077][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  332.978092][    C0]  __irq_exit_rcu+0xca/0x1f0
[  332.979902][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  332.981931][    C0]  irq_exit_rcu+0x9/0x30
[  332.983600][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  332.985775][    C0]  </IRQ>
[  332.986955][    C0]  <TASK>
[  332.988133][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  332.990516][    C0] RIP: 0010:do_raw_spin_lock+0x15/0x290
[  332.992709][    C0] Code: eb 86 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 <48> 81 ec 80 00 00 00 48 89 fb 65 48 8b 05 d9 c0 01 11 48 89 44 24
[  333.000107][    C0] RSP: 0018:ffffc9000482f640 EFLAGS: 00000282
[  333.002460][    C0] RAX: 58c9601e8b539400 RBX: ffff888028f72480 RCX: 58c9601e8b539400
[  333.005492][    C0] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff888027ca3400
[  333.008518][    C0] RBP: ffffc9000482f670 R08: 0000000000000000 R09: ffffffff8a26915f
[  333.011604][    C0] R10: dffffc0000000000 R11: fffff52000905ec0 R12: dffffc0000000000
[  333.014698][    C0] R13: 1ffff110051ee498 R14: 1ffff110051ee49e R15: 0000000000000001
[  333.017835][    C0]  ? unix_stream_read_generic+0xc2f/0x2480
[  333.020172][    C0]  unix_stream_read_generic+0xc2f/0x2480
[  333.022382][    C0]  ? __lock_acquire+0xab9/0xd20
[  333.024365][    C0]  ? __pfx_unix_stream_read_generic+0x10/0x10
[  333.026754][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  333.029132][    C0]  ? __schedule+0x17ae/0x4cc0
[  333.031013][    C0]  unix_stream_recvmsg+0x15d/0x1b0
[  333.033061][    C0]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  333.035275][    C0]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  333.037487][    C0]  ? aa_sock_msg_perm+0xda/0x1d0
[  333.039380][    C0]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  333.041440][    C0]  ? security_socket_recvmsg+0x7e/0x2e0
[  333.043573][    C0]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  333.045738][    C0]  sock_recvmsg+0x22c/0x270
[  333.047527][    C0]  ____sys_recvmsg+0x1c9/0x460
[  333.049441][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  333.051563][    C0]  ? import_iovec+0x74/0xa0
[  333.053372][    C0]  ___sys_recvmsg+0x1b5/0x510
[  333.055248][    C0]  ? futex_private_hash_put+0x245/0x280
[  333.057390][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  333.059449][    C0]  ? __fget_files+0x3a0/0x420
[  333.061333][    C0]  __x64_sys_recvmsg+0x198/0x260
[  333.063305][    C0]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  333.065453][    C0]  ? rcu_is_watching+0x15/0xb0
[  333.067350][    C0]  ? do_syscall_64+0xbe/0x3b0
[  333.069207][    C0]  do_syscall_64+0xfa/0x3b0
[  333.071021][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  333.073068][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.075439][    C0]  ? exc_page_fault+0x9f/0xf0
[  333.077252][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.079560][    C0] RIP: 0033:0x7fc1fef8ebe9
[  333.081325][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.088671][    C0] RSP: 002b:00007fc1fd1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  333.091922][    C0] RAX: ffffffffffffffda RBX: 00007fc1ff1b5fa0 RCX: 00007fc1fef8ebe9
[  333.094995][    C0] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000008
[  333.098070][    C0] RBP: 00007fc1ff011e19 R08: 0000000000000000 R09: 0000000000000000
[  333.101101][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  333.104150][    C0] R13: 00007fc1ff1b6038 R14: 00007fc1ff1b5fa0 R15: 00007ffcc5964738
[  333.107251][    C0]  </TASK>
[  333.109189][    C0] Kernel Offset: disabled
[  333.110886][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:25:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007470
R8 =ffff888106480237 R9 =1ffff11020c90046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af190c R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc1fd1f66c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc1fd1d4fc8 CR3=000000003efc6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00007fc1ff012ee7 XMM09=0000000000000000 00007fc1ff012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11026cc7501 RBX=ffff88813663aa90 RCX=237c23caf96d4c00 RDX=dffffc0000000000
RSI=ffff8880245d0000 RDI=ffff888136639f80 RBP=1ffff11026cc7552 RSP=ffffc90009e57610
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520013caeb4
R12=1ffff110048ba056 R13=ffff888136639f80 R14=ffff8880245d02b0 R15=ffffffff8dbcdaf8
RIP=ffffffff8192314f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555556fe0588 CR3=000000010ebf8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fedc9987498 00007fedc9987470 XMM03=00007fedc99874a8 00007fedc99874a0
XMM04=00007fedca4ed100 00007fedc9987460 XMM05=00007fedc9987478 00007fedc99874c0
XMM06=00007fedc99874b8 00007fedc99874b0 XMM07=00007fedc99874a8 00007fedc99874a0
XMM08=0000000000000000 00007fedc9812ee7 XMM09=0000000000000000 00007fedc9812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
