last executing test programs:

1.229258192s ago: executing program 2 (id=6592):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12, 0x20}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fcebff", 0x30, 0x2c, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}, 0x66)

1.139702999s ago: executing program 2 (id=6597):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)

1.048316122s ago: executing program 2 (id=6599):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001f00)="254bfce0e3c124ce8085834876cb658d", 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002040)="432d73c42ca7a48414e8ef51e54d3ce9", 0x10)

1.0476623s ago: executing program 2 (id=6601):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x4040005)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r7, 0x1ad72f7)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_opts(r9, 0x29, 0x48, &(0x7f0000000000)=@srh={0x3a, 0x8, 0x4, 0x4, 0xf7, 0x40, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, 0x48)
accept4(r7, 0x0, 0x0, 0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
r10 = accept4$netrom(r7, 0x0, 0x0, 0x80000)
writev(r10, &(0x7f00000001c0), 0x7)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f0000000280), &(0x7f0000000600)=""/98}, 0x20)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

668.607641ms ago: executing program 0 (id=6616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x17, 0x1, "18069c0131b1daae261374e6fe20c389c72d7d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0)

608.283965ms ago: executing program 0 (id=6618):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)

528.366345ms ago: executing program 0 (id=6620):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r0, 0x0, 0x4)

468.574729ms ago: executing program 0 (id=6621):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0xffffffff}}}, 0x10)

467.957228ms ago: executing program 0 (id=6623):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000004800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

388.699354ms ago: executing program 0 (id=6624):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8)
unshare(0x26020480)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xc, 0x4, 0x2b0, 0xffffffff, 0x118, 0x118, 0x90, 0x98, 0xffffffff, 0x248, 0x248, 0x248, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="2f0000000000b50cb403a51a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r7, 0x301, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0)
recvmsg(r8, &(0x7f0000000e40)={&(0x7f0000000840)=@rc, 0x80, &(0x7f0000000e00)}, 0x2)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc)
getsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r11 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1a8, 0x5c, 0x160, 0x0, 0x3e0, 0x2b8, 0x228, 0x25a, 0x2b8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x160, 0x1a8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh1={{0x90}, {0xff, 0x84, 0x3, 0x1, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xffffff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1000, 0x4449}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xff000000], [0xff], 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0xac, 0x30, 0xb, 0x5, 0x0, {}, [{0x98, 0x1, [@m_ct={0x94, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "14d13dec9dcc5dea7cc3e615eb9b94f3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

249.365825ms ago: executing program 1 (id=6625):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2)

177.869978ms ago: executing program 1 (id=6626):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0)

177.640081ms ago: executing program 1 (id=6627):
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @loopback}}}}, 0x0)

162.835002ms ago: executing program 2 (id=6628):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x18, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x30, 0x0]}}, 0x0, 0x2d}, 0x28)

109.919806ms ago: executing program 1 (id=6629):
close(0xffffffffffffffff)

109.730725ms ago: executing program 1 (id=6630):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x8}, 0x2}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/171, 0xab}], 0x9}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0xb68d}], 0xa, 0x40002000, 0x0)

109.320876ms ago: executing program 2 (id=6631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r2, 0x0, &(0x7f0000000a80))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)
sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r9, 0x0, r8, 0x0, 0x7ffff000, 0x6)

0s ago: executing program 1 (id=6632):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8)

kernel console output (not intermixed with test programs):

th:syzkaller0>
[  163.843662][T10807] tipc: Disabling bearer <eth:syzkaller0>
[  163.852669][T10813] syzkaller1: entered allmulticast mode
[  163.865367][T10813] syzkaller1: left allmulticast mode
[  164.044230][ T5878] Bluetooth: hci2: command 0x0405 tx timeout
[  164.098395][T10840] netlink: 'syz.1.2091': attribute type 1 has an invalid length.
[  164.101372][T10840] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2091'.
[  164.208167][T10844] lo speed is unknown, defaulting to 1000
[  164.371276][T10857] netlink: 'syz.1.2099': attribute type 2 has an invalid length.
[  164.428487][T10854] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  164.536240][T10864] netlink: 'syz.2.2101': attribute type 13 has an invalid length.
[  164.539183][T10864] netlink: 'syz.2.2101': attribute type 17 has an invalid length.
[  164.635339][T10864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.679579][T10874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2106'.
[  164.685515][T10874] tipc: Invalid UDP bearer configuration
[  164.685564][T10874] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  164.727461][T10864] lo speed is unknown, defaulting to 1000
[  164.734227][T10878] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2108'.
[  164.974590][T10892] netlink: 'syz.2.2113': attribute type 30 has an invalid length.
[  164.978089][T10892] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  164.981915][T10892] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  165.098126][T10900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'.
[  165.212816][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'.
[  165.221082][T10912] netlink: 'syz.2.2124': attribute type 15 has an invalid length.
[  165.234795][T10910] lo speed is unknown, defaulting to 1000
[  165.357685][T10910] netlink: 'syz.0.2123': attribute type 13 has an invalid length.
[  165.360288][T10910] netlink: 'syz.0.2123': attribute type 17 has an invalid length.
[  165.367874][T10910] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  166.182026][T10936] netlink: 'syz.0.2133': attribute type 16 has an invalid length.
[  166.193015][T10936] netlink: 'syz.0.2133': attribute type 17 has an invalid length.
[  166.259724][T10936] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.265336][T10936] 8021q: adding VLAN 0 to HW filter on device team0
[  166.278489][T10936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.659741][T10968] lo speed is unknown, defaulting to 1000
[  166.687716][T10964] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2142'.
[  167.072565][T10997] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  167.425730][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'.
[  167.502832][T11022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2168'.
[  167.515268][T11025] netlink: 'syz.0.2169': attribute type 303 has an invalid length.
[  167.627108][T11036] netlink: 'syz.0.2175': attribute type 11 has an invalid length.
[  167.630390][T11036] netlink: 'syz.0.2175': attribute type 4 has an invalid length.
[  167.636287][T11036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2175'.
[  167.674868][T11040] netlink: 'syz.0.2177': attribute type 10 has an invalid length.
[  167.679740][T11040] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.688532][T11040] team0: Port device bond0 added
[  168.655370][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'.
[  168.741665][T11108] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  168.827438][T11117] netlink: 'syz.0.2212': attribute type 10 has an invalid length.
[  168.851350][T11117] team0: Device veth0_vlan failed to register rx_handler
[  168.918683][T11124] IPv6: NLM_F_REPLACE set, but no existing node found!
[  168.948960][T11126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.952108][T11126] syzkaller0: entered promiscuous mode
[  168.956480][T11126] syzkaller0: entered allmulticast mode
[  168.992597][T11126] tipc: Resetting bearer <eth:syzkaller0>
[  169.002531][T11125] tipc: Resetting bearer <eth:syzkaller0>
[  169.027477][T11125] tipc: Disabling bearer <eth:syzkaller0>
[  169.045251][T11134] netlink: 'syz.0.2221': attribute type 5 has an invalid length.
[  169.113840][T11139] netlink: 'syz.2.2223': attribute type 3 has an invalid length.
[  169.466864][T11170] team0: left allmulticast mode
[  169.468959][T11170] team_slave_0: left allmulticast mode
[  169.471043][T11170] team_slave_1: left allmulticast mode
[  169.474912][T11170] bridge0: port 3(team0) entered disabled state
[  169.480734][T11170] bridge_slave_0: left allmulticast mode
[  169.483430][T11170] bridge_slave_0: left promiscuous mode
[  169.485925][T11170] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.491269][T11170] bridge_slave_1: left allmulticast mode
[  169.493749][T11170] bridge_slave_1: left promiscuous mode
[  169.496443][T11170] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.503905][T11170] bond0: (slave bond_slave_0): Releasing backup interface
[  169.509099][T11170] team_slave_0: left promiscuous mode
[  169.513102][T11170] team0: Port device team_slave_0 removed
[  169.517950][T11170] team_slave_1: left promiscuous mode
[  169.521132][T11170] team0: Port device team_slave_1 removed
[  169.525634][T11170] bond2: (slave geneve2): Releasing active interface
[  169.536898][T11170] bond3: (slave gretap1): Releasing active interface
[  169.542562][T11170] bond4: (slave veth3): Releasing backup interface
[  169.831794][T11184] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  169.888812][T11189] __nla_validate_parse: 1 callbacks suppressed
[  169.888829][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'.
[  170.018468][T11196] netlink: 'syz.2.2247': attribute type 4 has an invalid length.
[  170.274766][T11215] syzkaller0: entered promiscuous mode
[  170.276946][T11215] syzkaller0: entered allmulticast mode
[  170.339596][T11221] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[  170.396033][T11227] sock: sock_timestamping_bind_phc: sock not bind to device
[  170.434543][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'.
[  170.596804][T11238] netlink: 'syz.0.2267': attribute type 10 has an invalid length.
[  170.600080][T11238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2267'.
[  170.604339][T11238] dummy0: entered promiscuous mode
[  170.606885][T11238] bridge0: port 1(dummy0) entered blocking state
[  170.610507][T11238] bridge0: port 1(dummy0) entered disabled state
[  170.615572][T11238] dummy0: entered allmulticast mode
[  170.620392][T11238] bridge0: port 1(dummy0) entered blocking state
[  170.623137][T11238] bridge0: port 1(dummy0) entered forwarding state
[  170.866939][T11248] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2272'.
[  170.915821][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'.
[  171.211144][T11266] netlink: 'syz.1.2281': attribute type 1 has an invalid length.
[  171.221071][T11266] netlink: 'syz.1.2281': attribute type 10 has an invalid length.
[  171.224874][T11266] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2281'.
[  171.285188][T11270] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  171.418866][T11282] lo speed is unknown, defaulting to 1000
[  171.568399][  T793] IPVS: starting estimator thread 0...
[  171.605427][T11286] tipc: Resetting bearer <ib:ip6gre0>
[  171.618462][T11286] bridge0: port 1(dummy0) entered disabled state
[  171.653028][T11293] IPVS: using max 42 ests per chain, 100800 per kthread
[  171.811493][T11301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.815637][T11301] syzkaller0: entered promiscuous mode
[  171.817508][T11301] syzkaller0: entered allmulticast mode
[  171.825009][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'.
[  171.828691][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'.
[  171.830546][T11301] tipc: Resetting bearer <eth:syzkaller0>
[  171.841654][T11300] tipc: Resetting bearer <eth:syzkaller0>
[  171.853515][T11300] tipc: Disabling bearer <eth:syzkaller0>
[  171.918081][T11310] netlink: 'syz.1.2300': attribute type 10 has an invalid length.
[  171.921376][T11310] veth1_macvtap: left promiscuous mode
[  171.923771][T11310] team0: Device veth1_macvtap failed to register rx_handler
[  171.947641][T11313] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2301'.
[  171.950891][T11313] netlink: zone id is out of range
[  171.952775][T11313] netlink: zone id is out of range
[  171.954810][T11313] netlink: zone id is out of range
[  171.956777][T11313] netlink: zone id is out of range
[  171.958707][T11313] netlink: zone id is out of range
[  171.960661][T11313] netlink: zone id is out of range
[  171.962422][T11313] netlink: zone id is out of range
[  171.964744][T11313] netlink: zone id is out of range
[  171.966516][T11313] netlink: zone id is out of range
[  171.968532][T11313] netlink: zone id is out of range
[  171.987886][ T5926] IPVS: stop unused estimator thread 0...
[  172.192796][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'.
[  173.350304][T11358] lo speed is unknown, defaulting to 1000
[  173.645429][   T98] block nbd0: Possible stuck request ffff8880201c8000: control (read@0,4096B). Runtime 60 seconds
[  174.596317][T11439] syzkaller0: entered promiscuous mode
[  174.598648][T11439] syzkaller0: entered allmulticast mode
[  174.704230][T11441] nbd: couldn't find device at index 536870912
[  175.074227][T11459] __nla_validate_parse: 2 callbacks suppressed
[  175.074242][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2366'.
[  175.747052][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'.
[  175.922485][T11499] lo speed is unknown, defaulting to 1000
[  176.272015][T11504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.275698][T11504] syzkaller0: entered promiscuous mode
[  176.277894][T11504] syzkaller0: entered allmulticast mode
[  176.301364][T11504] tipc: Resetting bearer <eth:syzkaller0>
[  176.310760][T11503] tipc: Resetting bearer <eth:syzkaller0>
[  176.325542][T11503] tipc: Disabling bearer <eth:syzkaller0>
[  176.911148][T11533] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  177.032418][T11537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2398'.
[  177.036677][T11537] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2398'.
[  177.294284][T11555] netlink: 'syz.1.2407': attribute type 1 has an invalid length.
[  177.421203][T11561] wireguard0: entered promiscuous mode
[  177.423957][T11561] wireguard0: entered allmulticast mode
[  177.662643][T11580] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2418'.
[  177.847499][T11592] ip6tnl1: entered promiscuous mode
[  177.849743][T11592] ip6tnl1: entered allmulticast mode
[  177.901063][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'.
[  178.095670][T11605] lo speed is unknown, defaulting to 1000
[  178.313934][T11622] siw: device registration error -23
[  178.561465][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'.
[  178.564589][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'.
[  178.569219][T11642] netlink: 'syz.1.2444': attribute type 18 has an invalid length.
[  178.572696][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'.
[  178.575604][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'.
[  178.578692][T11642] netlink: 'syz.1.2444': attribute type 18 has an invalid length.
[  179.046644][T11689] netlink: 'syz.1.2465': attribute type 4 has an invalid length.
[  179.827624][T11762] net_ratelimit: 30 callbacks suppressed
[  179.827656][T11762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.328179][T11784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  180.595215][T11796] __nla_validate_parse: 7 callbacks suppressed
[  180.595228][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'.
[  180.680748][T11807] netlink: 'syz.0.2518': attribute type 1 has an invalid length.
[  180.690093][T11807] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2518'.
[  181.084892][T11835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  181.257438][T11843] syz.0.2532: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  181.273097][T11843] CPU: 0 UID: 0 PID: 11843 Comm: syz.0.2532 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  181.273121][T11843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.273130][T11843] Call Trace:
[  181.273137][T11843]  <TASK>
[  181.273146][T11843]  dump_stack_lvl+0x189/0x250
[  181.273171][T11843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.273190][T11843]  ? __pfx__printk+0x10/0x10
[  181.273211][T11843]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  181.273229][T11843]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  181.273248][T11843]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  181.273269][T11843]  warn_alloc+0x214/0x310
[  181.273300][T11843]  ? stack_depot_save_flags+0x40/0x860
[  181.273320][T11843]  ? __pfx_warn_alloc+0x10/0x10
[  181.273344][T11843]  ? kasan_save_track+0x4f/0x80
[  181.273362][T11843]  ? xskq_create+0x56/0x170
[  181.273377][T11843]  ? xsk_init_queue+0xb0/0x110
[  181.273392][T11843]  ? xsk_setsockopt+0x4dc/0x8d0
[  181.273405][T11843]  ? do_sock_setsockopt+0x17c/0x1b0
[  181.273425][T11843]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  181.273442][T11843]  ? do_syscall_64+0xfa/0x3b0
[  181.273493][T11843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.273515][T11843]  __vmalloc_node_range_noprof+0x125/0x12f0
[  181.273562][T11843]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.273588][T11843]  ? __kasan_kmalloc+0x93/0xb0
[  181.273610][T11843]  vmalloc_user_noprof+0xad/0xf0
[  181.273632][T11843]  ? xskq_create+0xbf/0x170
[  181.273648][T11843]  xskq_create+0xbf/0x170
[  181.273668][T11843]  xsk_init_queue+0xb0/0x110
[  181.273687][T11843]  xsk_setsockopt+0x4dc/0x8d0
[  181.273705][T11843]  ? __pfx_xsk_setsockopt+0x10/0x10
[  181.273721][T11843]  ? __pfx_aa_sk_perm+0x10/0x10
[  181.273744][T11843]  ? aa_sock_opt_perm+0xff/0x1b0
[  181.273767][T11843]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  181.273783][T11843]  ? __pfx_xsk_setsockopt+0x10/0x10
[  181.273799][T11843]  do_sock_setsockopt+0x17c/0x1b0
[  181.273823][T11843]  __x64_sys_setsockopt+0x13f/0x1b0
[  181.273848][T11843]  do_syscall_64+0xfa/0x3b0
[  181.273866][T11843]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.273883][T11843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.273897][T11843]  ? exc_page_fault+0x9f/0xf0
[  181.273915][T11843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.273930][T11843] RIP: 0033:0x7f7722b8ebe9
[  181.273958][T11843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.273972][T11843] RSP: 002b:00007f77239ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  181.273988][T11843] RAX: ffffffffffffffda RBX: 00007f7722db6090 RCX: 00007f7722b8ebe9
[  181.273999][T11843] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  181.274008][T11843] RBP: 00007f7722c11e19 R08: 0000000000000004 R09: 0000000000000000
[  181.274016][T11843] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.274024][T11843] R13: 00007f7722db6128 R14: 00007f7722db6090 R15: 00007ffdec85ab08
[  181.274048][T11843]  </TASK>
[  181.274054][T11843] Mem-Info:
[  181.390110][T11843] active_anon:12556 inactive_anon:0 isolated_anon:0
[  181.390110][T11843]  active_file:1190 inactive_file:38262 isolated_file:0
[  181.390110][T11843]  unevictable:1768 dirty:386 writeback:0
[  181.390110][T11843]  slab_reclaimable:9797 slab_unreclaimable:82325
[  181.390110][T11843]  mapped:19380 shmem:2450 pagetables:979
[  181.390110][T11843]  sec_pagetables:0 bounce:0
[  181.390110][T11843]  kernel_misc_reclaimable:0
[  181.390110][T11843]  free:259317 free_pcp:21213 free_cma:0
[  181.411300][T11843] Node 0 active_anon:15636kB inactive_anon:0kB active_file:2880kB inactive_file:136384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47360kB dirty:1112kB writeback:0kB shmem:5072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7536kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  181.423213][T11843] Node 1 active_anon:34588kB inactive_anon:0kB active_file:1880kB inactive_file:16664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30160kB dirty:432kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4984kB pagetables:1916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  181.434075][T11843] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  181.444530][T11843] lowmem_reserve[]: 0 811 811 811 811
[  181.446284][T11843] Node 0 DMA32 free:191588kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15636kB inactive_anon:0kB active_file:2880kB inactive_file:136384kB unevictable:3536kB writepending:1112kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:50476kB local_pcp:34520kB free_cma:0kB
[  181.456927][T11843] lowmem_reserve[]: 0 0 0 0 0
[  181.458527][T11843] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  181.468122][T11843] lowmem_reserve[]: 0 0 854 854 854
[  181.470092][T11843] Node 1 Normal free:371536kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34588kB inactive_anon:0kB active_file:1880kB inactive_file:16664kB unevictable:3536kB writepending:432kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34288kB local_pcp:21768kB free_cma:0kB
[  181.481080][T11843] lowmem_reserve[]: 0 0 0 0 0
[  181.483155][T11843] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  181.487508][T11843] Node 0 DMA32: 821*4kB (UM) 114*8kB (UME) 6*16kB (ME) 203*32kB (UE) 79*64kB (UME) 19*128kB (UM) 17*256kB (UM) 4*512kB (UME) 1*1024kB (E) 3*2048kB (ME) 39*4096kB (UM) = 191588kB
[  181.505951][T11843] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  181.511670][T11843] Node 1 Normal: 42*4kB (M) 155*8kB (UME) 391*16kB (UME) 323*32kB (UME) 197*64kB (UME) 79*128kB (UM) 12*256kB (UME) 10*512kB (UM) 7*1024kB (UM) 8*2048kB (UM) 73*4096kB (UM) = 371472kB
[  181.518972][T11843] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.522598][T11843] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.530949][T11843] 41902 total pagecache pages
[  181.534789][T11843] 0 pages in swap cache
[  181.536488][T11843] Free swap  = 124996kB
[  181.538091][T11843] Total swap = 124996kB
[  181.539691][T11843] 786301 pages RAM
[  181.541140][T11843] 0 pages HighMem/MovableOnly
[  181.545949][T11843] 241320 pages reserved
[  181.547658][T11843] 0 pages cma reserved
[  181.589454][T11851] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2535'.
[  181.593947][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'.
[  181.712140][T11857] netlink: 'syz.1.2538': attribute type 29 has an invalid length.
[  181.716464][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'.
[  181.864807][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'.
[  182.012810][T11864] bridge0 (unregistering): left allmulticast mode
[  182.158037][T11841] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  182.280663][T11882] geneve3: entered promiscuous mode
[  182.289941][ T5926] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.292737][ T5926] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.298559][ T5926] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.301547][ T5926] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.385434][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'.
[  182.455249][T11896] netlink: 'syz.0.2556': attribute type 3 has an invalid length.
[  182.536894][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2560'.
[  182.575252][T11908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.657782][T11911] lo speed is unknown, defaulting to 1000
[  183.199464][T11939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.587827][T11944] netlink: 'syz.2.2576': attribute type 27 has an invalid length.
[  183.770655][T11954] netlink: 'syz.0.2581': attribute type 1 has an invalid length.
[  183.775969][T11954] netlink: 'syz.0.2581': attribute type 4 has an invalid length.
[  183.779308][T11954] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2581'.
[  183.890665][T11958] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2583'.
[  183.962549][T11960] netlink: 'syz.2.2580': attribute type 1 has an invalid length.
[  183.967790][T11960] netlink: 'syz.2.2580': attribute type 1 has an invalid length.
[  186.005830][T12061] __nla_validate_parse: 4 callbacks suppressed
[  186.005843][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'.
[  186.138603][T12065] lo speed is unknown, defaulting to 1000
[  186.338330][T12079] sock: sock_timestamping_bind_phc: sock not bind to device
[  186.366792][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2636'.
[  186.457886][T12086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.475363][T12086] syzkaller0: entered promiscuous mode
[  186.488557][T12086] syzkaller0: entered allmulticast mode
[  186.538271][T12081] smc: net device bond0 applied user defined pnetid SYZ2
[  186.545521][T12076] smc: net device bond0 erased user defined pnetid SYZ2
[  186.575611][T12086] tipc: Resetting bearer <eth:syzkaller0>
[  186.585629][T12082] tipc: Resetting bearer <eth:syzkaller0>
[  186.618520][T12082] tipc: Disabling bearer <eth:syzkaller0>
[  186.700080][T12096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.710372][T12096] syzkaller0: entered promiscuous mode
[  186.712606][T12096] syzkaller0: entered allmulticast mode
[  186.746773][T12096] tipc: Resetting bearer <eth:syzkaller0>
[  186.759070][T12095] tipc: Resetting bearer <eth:syzkaller0>
[  186.793363][T12095] tipc: Disabling bearer <eth:syzkaller0>
[  186.950786][T12110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2649'.
[  187.015745][T12114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.018339][T12114] syzkaller0: entered promiscuous mode
[  187.020018][T12114] syzkaller0: entered allmulticast mode
[  187.031410][T12114] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  187.058803][T12114] tipc: Resetting bearer <eth:syzkaller0>
[  187.067546][T12113] tipc: Resetting bearer <eth:syzkaller0>
[  187.103990][T12113] tipc: Disabling bearer <eth:syzkaller0>
[  187.403074][ T5878] Bluetooth: hci2: command 0x0405 tx timeout
[  187.625946][T12157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2668'.
[  187.770696][T12171] syz_tun: entered allmulticast mode
[  187.851573][T12175] IPv6: sit1: Disabled Multicast RS
[  187.930047][T12170] syz_tun: left allmulticast mode
[  188.186672][T12197] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  188.189387][T12197] netlink: 'syz.0.2687': attribute type 2 has an invalid length.
[  188.192037][T12197] netlink: 'syz.0.2687': attribute type 8 has an invalid length.
[  188.202651][T12197] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.2687'.
[  188.324738][ T5913] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/2
[  188.332114][ T5913] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22
[  188.998164][T12236] netlink: 'syz.0.2705': attribute type 12 has an invalid length.
[  190.382030][T12241] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2707'.
[  190.386055][T12241] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2707'.
[  190.594088][T12262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.598079][T12262] syzkaller0: entered promiscuous mode
[  190.600008][T12262] syzkaller0: entered allmulticast mode
[  190.607465][T12262] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  190.637052][T12262] tipc: Resetting bearer <eth:syzkaller0>
[  190.644484][T12261] tipc: Resetting bearer <eth:syzkaller0>
[  190.664666][T12261] tipc: Disabling bearer <eth:syzkaller0>
[  191.047362][T12288] netlink: 'syz.1.2729': attribute type 12 has an invalid length.
[  191.115566][T12292] ksmbd: Unknown IPC event: 3, ignore.
[  191.336939][ T5295] udevd[5295]: worker [5848] /devices/virtual/block/nbd0 is taking a long time
[  191.671548][T12255] syz.0.2714: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  191.678411][T12255] CPU: 1 UID: 0 PID: 12255 Comm: syz.0.2714 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  191.678433][T12255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.678441][T12255] Call Trace:
[  191.678449][T12255]  <TASK>
[  191.678457][T12255]  dump_stack_lvl+0x189/0x250
[  191.678477][T12255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.678495][T12255]  ? __pfx__printk+0x10/0x10
[  191.678516][T12255]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  191.678534][T12255]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  191.678553][T12255]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  191.678565][T12255]  warn_alloc+0x214/0x310
[  191.678593][T12255]  ? __pfx_warn_alloc+0x10/0x10
[  191.678623][T12255]  ? __get_vm_area_node+0x28f/0x300
[  191.678642][T12255]  ? hash_ip4_resize+0x1e0/0x1990
[  191.678660][T12255]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  191.678730][T12255]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  191.678753][T12255]  ? rcu_is_watching+0x15/0xb0
[  191.678769][T12255]  ? hash_ip4_resize+0x1e0/0x1990
[  191.678788][T12255]  ? hash_ip4_resize+0x1e0/0x1990
[  191.678806][T12255]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  191.678824][T12255]  ? hash_ip4_resize+0x1e0/0x1990
[  191.678846][T12255]  hash_ip4_resize+0x1e0/0x1990
[  191.678869][T12255]  ? hash_ip4_uadt+0x6cb/0x850
[  191.678891][T12255]  ? __pfx_hash_ip4_add+0x10/0x10
[  191.678908][T12255]  ? __pfx_hash_ip4_uadt+0x10/0x10
[  191.678920][T12255]  ? __local_bh_enable_ip+0x12d/0x1c0
[  191.678953][T12255]  call_ad+0x44e/0xb00
[  191.678976][T12255]  ? __pfx_call_ad+0x10/0x10
[  191.678998][T12255]  ? __nla_parse+0x40/0x60
[  191.679019][T12255]  ip_set_ad+0x791/0x930
[  191.679044][T12255]  ? __pfx_ip_set_ad+0x10/0x10
[  191.679086][T12255]  nfnetlink_rcv_msg+0xb4d/0x1130
[  191.679104][T12255]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  191.679136][T12255]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  191.679172][T12255]  ? __lock_acquire+0xab9/0xd20
[  191.679211][T12255]  netlink_rcv_skb+0x208/0x470
[  191.679231][T12255]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  191.679249][T12255]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.679270][T12255]  ? bpf_lsm_capable+0x9/0x20
[  191.679289][T12255]  ? security_capable+0x7e/0x2e0
[  191.679315][T12255]  nfnetlink_rcv+0x26a/0x2520
[  191.679331][T12255]  ? is_bpf_text_address+0x26/0x2b0
[  191.679349][T12255]  ? kernel_text_address+0xa5/0xe0
[  191.679369][T12255]  ? __kernel_text_address+0xd/0x40
[  191.679389][T12255]  ? unwind_get_return_address+0x4d/0x90
[  191.679406][T12255]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  191.679424][T12255]  ? arch_stack_walk+0xfc/0x150
[  191.679446][T12255]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  191.679463][T12255]  ? stack_depot_save_flags+0x40/0x860
[  191.679484][T12255]  ? __lock_acquire+0xab9/0xd20
[  191.679521][T12255]  ? __lock_acquire+0xab9/0xd20
[  191.679547][T12255]  ? netlink_deliver_tap+0x2e/0x1b0
[  191.679572][T12255]  ? netlink_deliver_tap+0x2e/0x1b0
[  191.679597][T12255]  netlink_unicast+0x82f/0x9e0
[  191.679614][T12255]  ? __pfx_netlink_unicast+0x10/0x10
[  191.679633][T12255]  ? netlink_sendmsg+0x642/0xb30
[  191.679650][T12255]  ? skb_put+0x11b/0x210
[  191.679694][T12255]  netlink_sendmsg+0x805/0xb30
[  191.679720][T12255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.679742][T12255]  ? aa_sock_msg_perm+0xf1/0x1d0
[  191.679764][T12255]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.679778][T12255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.679791][T12255]  __sock_sendmsg+0x21c/0x270
[  191.679811][T12255]  ____sys_sendmsg+0x505/0x830
[  191.679838][T12255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.679866][T12255]  ? import_iovec+0x74/0xa0
[  191.679877][T12255]  ___sys_sendmsg+0x21f/0x2a0
[  191.679901][T12255]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.679953][T12255]  ? __fget_files+0x2a/0x420
[  191.679966][T12255]  ? __fget_files+0x3a0/0x420
[  191.679997][T12255]  __x64_sys_sendmsg+0x19b/0x260
[  191.680022][T12255]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.680051][T12255]  ? do_syscall_64+0xbe/0x3b0
[  191.680074][T12255]  do_syscall_64+0xfa/0x3b0
[  191.680092][T12255]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.680109][T12255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.680123][T12255]  ? exc_page_fault+0x9f/0xf0
[  191.680135][T12255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.680150][T12255] RIP: 0033:0x7f7722b8ebe9
[  191.680163][T12255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.680176][T12255] RSP: 002b:00007f7723a10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.680196][T12255] RAX: ffffffffffffffda RBX: 00007f7722db5fa0 RCX: 00007f7722b8ebe9
[  191.680206][T12255] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004
[  191.680213][T12255] RBP: 00007f7722c11e19 R08: 0000000000000000 R09: 0000000000000000
[  191.680218][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.680223][T12255] R13: 00007f7722db6038 R14: 00007f7722db5fa0 R15: 00007ffdec85ab08
[  191.680247][T12255]  </TASK>
[  191.680253][T12255] Mem-Info:
[  191.850528][T12255] active_anon:12485 inactive_anon:0 isolated_anon:0
[  191.850528][T12255]  active_file:1190 inactive_file:38266 isolated_file:0
[  191.850528][T12255]  unevictable:1768 dirty:126 writeback:0
[  191.850528][T12255]  slab_reclaimable:9712 slab_unreclaimable:70023
[  191.850528][T12255]  mapped:18334 shmem:2450 pagetables:987
[  191.850528][T12255]  sec_pagetables:0 bounce:0
[  191.850528][T12255]  kernel_misc_reclaimable:0
[  191.850528][T12255]  free:271854 free_pcp:18887 free_cma:0
[  191.865862][T12255] Node 0 active_anon:15712kB inactive_anon:0kB active_file:2872kB inactive_file:136400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45812kB dirty:368kB writeback:0kB shmem:5072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7472kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  191.888791][T12255] Node 1 active_anon:34160kB inactive_anon:0kB active_file:1888kB inactive_file:16664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27524kB dirty:136kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4856kB pagetables:1800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  191.899596][T12255] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  191.913280][T12255] lowmem_reserve[]: 0 811 811 811 811
[  191.915032][T12255] Node 0 DMA32 free:228820kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15712kB inactive_anon:0kB active_file:2872kB inactive_file:136400kB unevictable:3536kB writepending:368kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:48488kB local_pcp:19300kB free_cma:0kB
[  191.925997][T12255] lowmem_reserve[]: 0 0 0 0 0
[  191.927611][T12255] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  191.936682][T12255] lowmem_reserve[]: 0 0 854 854 854
[  191.938743][T12255] Node 1 Normal free:384620kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34160kB inactive_anon:0kB active_file:1888kB inactive_file:16664kB unevictable:3536kB writepending:136kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:27264kB local_pcp:9904kB free_cma:0kB
[  191.950453][T12255] lowmem_reserve[]: 0 0 0 0 0
[  191.952405][T12255] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  191.957501][T12255] Node 0 DMA32: 1089*4kB (UM) 376*8kB (UME) 365*16kB (UME) 72*32kB (UME) 127*64kB (UME) 51*128kB (UM) 14*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 45*4096kB (UM) = 228820kB
[  191.964962][T12255] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  191.970115][T12255] Node 1 Normal: 179*4kB (UM) 212*8kB (UME) 54*16kB (UME) 401*32kB (UME) 206*64kB (UME) 94*128kB (UM) 19*256kB (UME) 11*512kB (UM) 7*1024kB (UM) 3*2048kB (M) 78*4096kB (UM) = 384620kB
[  191.977059][T12255] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.980137][T12255] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.983805][T12255] 41906 total pagecache pages
[  191.985766][T12255] 0 pages in swap cache
[  191.987470][T12255] Free swap  = 124996kB
[  191.989186][T12255] Total swap = 124996kB
[  191.990921][T12255] 786301 pages RAM
[  191.992469][T12255] 0 pages HighMem/MovableOnly
[  191.994488][T12255] 241320 pages reserved
[  191.996287][T12255] 0 pages cma reserved
[  192.201259][T12331] veth5: entered promiscuous mode
[  192.244438][T12333] tipc: Enabling <ib:lo> not permitted
[  192.246339][T12333] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  192.370817][T12338] netlink: 'syz.0.2750': attribute type 13 has an invalid length.
[  192.374278][T12338] netlink: 'syz.0.2750': attribute type 17 has an invalid length.
[  192.427519][T12338] bridge0: left promiscuous mode
[  192.431569][T12338] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.437144][T12338] 8021q: adding VLAN 0 to HW filter on device team0
[  192.441468][T12338] bridge0: port 1(dummy0) entered blocking state
[  192.443733][T12338] bridge0: port 1(dummy0) entered forwarding state
[  192.452351][T12338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.535179][T12337] lo speed is unknown, defaulting to 1000
[  192.843887][ T5235] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  193.397919][T12368] veth1_to_bond: entered allmulticast mode
[  193.400999][T12368] bond_slave_1: entered promiscuous mode
[  193.406055][T12367] bond_slave_1: left promiscuous mode
[  193.408460][T12367] veth1_to_bond: left allmulticast mode
[  193.632789][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2772'.
[  193.952689][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2791'.
[  194.125856][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.274790][T12468] syzkaller1: entered promiscuous mode
[  194.276585][T12468] syzkaller1: entered allmulticast mode
[  194.466192][T12485] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  194.630880][T12493] netlink: 'syz.1.2819': attribute type 11 has an invalid length.
[  194.639995][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'.
[  195.205239][T12521] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[  195.658744][T12523] netlink: 'syz.0.2832': attribute type 4 has an invalid length.
[  195.985618][T12547] netlink: 'syz.0.2841': attribute type 3 has an invalid length.
[  196.060172][T12554] IPv6: Can't replace route, no match found
[  196.204541][ T5878] Bluetooth: hci1: command 0x080f tx timeout
[  196.410135][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'.
[  196.684807][T12624] netlink: 'syz.2.2880': attribute type 2 has an invalid length.
[  196.697763][T12624] k*]: entered promiscuous mode
[  196.879934][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'.
[  197.230334][T12669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2898'.
[  197.282000][T12675] netlink: 'syz.2.2900': attribute type 17 has an invalid length.
[  197.285582][T12675] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2900'.
[  197.289724][T12675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.331850][T12677] lo speed is unknown, defaulting to 1000
[  197.747078][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2916'.
[  197.778517][T12715] ip6gretap0: entered promiscuous mode
[  197.781117][T12715] macsec1: entered promiscuous mode
[  197.787396][T12715] macsec1: entered allmulticast mode
[  197.789194][T12715] ip6gretap0: entered allmulticast mode
[  197.801294][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2920'.
[  197.838440][T12721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2921'.
[  198.127141][T12757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.395937][T12805] : entered promiscuous mode
[  199.752071][T12824] netlink: 'syz.1.2966': attribute type 3 has an invalid length.
[  200.910222][ T5883] IPVS: starting estimator thread 0...
[  200.951150][T12881] netlink: 'syz.1.2985': attribute type 1 has an invalid length.
[  200.956727][T12881] __nla_validate_parse: 2 callbacks suppressed
[  200.956737][T12881] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2985'.
[  200.993083][T12880] IPVS: using max 61 ests per chain, 146400 per kthread
[  201.109369][T12897] netlink: 'syz.0.2996': attribute type 4 has an invalid length.
[  201.205054][T12910] netlink: 'syz.2.3001': attribute type 1 has an invalid length.
[  201.213487][T12910] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3001'.
[  201.379382][T12923] lo speed is unknown, defaulting to 1000
[  201.536457][T12934] siw: device registration error -23
[  201.711578][T12942] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  202.022251][T12953] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3022'.
[  202.138008][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3024'.
[  202.269614][T12968] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3027'.
[  202.546782][T12988] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  202.605501][T12996] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3041'.
[  202.708269][T13009] netlink: 'syz.2.3046': attribute type 6 has an invalid length.
[  202.796992][T13017] IPVS: length: 148 != 24
[  202.867679][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'.
[  202.872713][T13026] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  202.877284][T13026] macsec2: entered promiscuous mode
[  202.879264][T13026] macsec2: entered allmulticast mode
[  202.881171][T13026] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  202.934869][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'.
[  202.963784][T13037] netlink: 'syz.0.3059': attribute type 1 has an invalid length.
[  203.005498][T13041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.167564][T13059] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  203.197113][T13063] erspan1: entered promiscuous mode
[  203.565628][T13076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.575545][T13076] netlink: 'syz.1.3077': attribute type 1 has an invalid length.
[  203.610204][T13076] 8021q: adding VLAN 0 to HW filter on device bond6
[  203.732321][   T98] block nbd0: Possible stuck request ffff8880201c8000: control (read@0,4096B). Runtime 90 seconds
[  203.950015][T13084] IPVS: Error connecting to the multicast addr
[  204.286811][T13105] unknown channel width for channel at 909000KHz?
[  204.289605][T13105] unknown channel width for channel at 909000KHz?
[  204.315128][T13109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'.
[  204.330417][T13109] smc: net device bond0 applied user defined pnetid SYZ2
[  204.335999][T13109] smc: net device bond0 erased user defined pnetid SYZ2
[  204.468241][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3094'.
[  205.997249][T13164] netlink: 'syz.0.3113': attribute type 1 has an invalid length.
[  206.029869][T13164] bond2: (slave gretap1): making interface the new active one
[  206.038541][T13164] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  206.497909][T13192] dvmrp1: entered allmulticast mode
[  206.549611][T13198] __nla_validate_parse: 4 callbacks suppressed
[  206.549626][T13198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'.
[  206.980061][T13246] netlink: 304 bytes leftover after parsing attributes in process `syz.0.3149'.
[  207.030607][T13252] netlink: 'syz.0.3150': attribute type 4 has an invalid length.
[  207.142585][T13266] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  207.196657][ T5888] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  207.293111][T13262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.679399][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3174'.
[  209.692210][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3175'.
[  209.710599][T13304] ipvlan2: entered promiscuous mode
[  209.750543][T13317] sctp: [Deprecated]: syz.2.3178 (pid 13317) Use of int in max_burst socket option.
[  209.750543][T13317] Use struct sctp_assoc_value instead
[  209.854790][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'.
[  209.862963][T13326] netlink: 'syz.2.3182': attribute type 30 has an invalid length.
[  209.870640][ T5926] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.874188][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'.
[  209.874207][T13326] netlink: 'syz.2.3182': attribute type 30 has an invalid length.
[  209.917139][ T5926] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.920353][ T5926] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.924816][ T5926] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.051842][T13339] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  210.300658][T13347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3192'.
[  210.719286][T13349] Bluetooth: MGMT ver 1.23
[  211.082495][T13360] sctp: [Deprecated]: syz.2.3198 (pid 13360) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.082495][T13360] Use struct sctp_sack_info instead
[  211.149216][T13364] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  211.155103][T13362] openvswitch: netlink: Multiple metadata blocks provided
[  211.177035][T13364] bond2: entered promiscuous mode
[  211.179185][T13364] bond2: entered allmulticast mode
[  211.181804][T13364] 8021q: adding VLAN 0 to HW filter on device bond2
[  211.272570][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3202'.
[  211.368410][T13373] tipc: Resetting bearer <ib:ip6gre0>
[  211.418007][T13373] bridge0: port 1(dummy0) entered disabled state
[  211.445528][T13373] vlan0: left promiscuous mode
[  211.448185][T13373] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  211.451048][T13373] bridge4: left promiscuous mode
[  211.457392][T13373] veth5: left promiscuous mode
[  211.459920][T13373] erspan1: left promiscuous mode
[  211.550982][T13382] netlink: 'syz.0.3208': attribute type 5 has an invalid length.
[  211.682728][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'.
[  211.706419][T13398] xfrm2: entered promiscuous mode
[  211.708084][T13398] xfrm2: entered allmulticast mode
[  211.711998][T13400] netlink: 'syz.1.3218': attribute type 1 has an invalid length.
[  211.715140][T13400] netlink: 'syz.1.3218': attribute type 1 has an invalid length.
[  211.775616][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3220'.
[  212.079402][T13441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3235'.
[  212.228250][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'.
[  212.502538][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3253'.
[  212.510309][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3253'.
[  213.149620][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3255'.
[  213.402311][T13494] ip6gretap0: left allmulticast mode
[  213.409095][T13494] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  213.429404][ T5876] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.432177][ T5876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.435621][ T5876] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.438374][ T5876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.441657][ T5876] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.446124][ T5876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.449356][ T5876] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.452395][ T5876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.468501][T13498] Set syz0 is full, maxelem 0 reached
[  213.715605][T13529] IPv6: NLM_F_CREATE should be specified when creating new route
[  213.853984][T13548] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3282'.
[  213.871370][T13550] netlink: 'syz.1.3283': attribute type 8 has an invalid length.
[  214.678231][T13610] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3310'.
[  215.031127][T13643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.147375][T13649] lo speed is unknown, defaulting to 1000
[  215.276430][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'.
[  215.725602][T13693] netlink: 'syz.2.3349': attribute type 7 has an invalid length.
[  216.255769][T13740] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  216.259423][T13740] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  216.319686][T13748] netlink: 'syz.0.3373': attribute type 11 has an invalid length.
[  216.880955][T13802] __nla_validate_parse: 2 callbacks suppressed
[  216.880970][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'.
[  217.304108][T13810] netlink: 'syz.0.3400': attribute type 16 has an invalid length.
[  217.307237][T13810] netlink: 'syz.0.3400': attribute type 17 has an invalid length.
[  217.320152][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'.
[  217.324617][T13810] IPv6: NLM_F_REPLACE set, but no existing node found!
[  217.620823][T13813] "syz.2.3401" (13813) uses obsolete ecb(arc4) skcipher
[  217.628318][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3403'.
[  217.641912][T13812] vlan0: left promiscuous mode
[  217.647265][T13812] gtp1: left promiscuous mode
[  217.649311][T13812] gtp1: left allmulticast mode
[  217.651056][T13812] ip6erspan0: left promiscuous mode
[  217.657842][T13812] macsec1: left promiscuous mode
[  217.660022][T13812] macsec1: left allmulticast mode
[  217.662589][T13812] macsec2: left promiscuous mode
[  217.664859][T13812] macsec2: left allmulticast mode
[  217.667357][T13812] bond2: left promiscuous mode
[  217.669363][T13812] bond2: left allmulticast mode
[  217.671962][T13812] xfrm2: left promiscuous mode
[  217.675873][T13812] xfrm2: left allmulticast mode
[  217.943234][T13847] openvswitch: netlink: Missing valid actions attribute.
[  217.945868][T13847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.670425][T13907] netlink: 'syz.2.3440': attribute type 11 has an invalid length.
[  218.829247][T13915] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3443'.
[  218.871629][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3444'.
[  218.900797][T13919] netlink: 'syz.2.3445': attribute type 1 has an invalid length.
[  219.317091][T13942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3456'.
[  219.324198][T13942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3456'.
[  219.429805][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3460'.
[  220.302704][T13971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3470'.
[  220.306756][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'.
[  220.310481][T13973] pim6reg: entered allmulticast mode
[  220.336376][T13973] pim6reg: left allmulticast mode
[  220.594717][T14003] netlink: 'syz.2.3484': attribute type 3 has an invalid length.
[  220.723757][T14012] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  220.767634][T14021] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  220.781759][T14021] team0: Port device bond0 removed
[  220.784775][T14021] dummy0: left allmulticast mode
[  220.788268][T14021] dummy0: left promiscuous mode
[  220.790181][T14021] bridge0: port 1(dummy0) entered disabled state
[  220.796571][T14021] bond2: (slave gretap1): Releasing active interface
[  220.821888][T14021] netlink: 'syz.0.3492': attribute type 10 has an invalid length.
[  220.833073][T14021] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  220.837876][T14021] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  220.871963][T14021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  220.878525][T14021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  221.489115][T14095] netlink: 'syz.2.3528': attribute type 15 has an invalid length.
[  221.492075][T14095] netlink: 'syz.2.3528': attribute type 18 has an invalid length.
[  222.749743][T14157] netlink: 'syz.2.3554': attribute type 10 has an invalid length.
[  222.789170][T14161] __nla_validate_parse: 13 callbacks suppressed
[  222.789186][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'.
[  222.795544][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'.
[  222.851061][T14165] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3560'.
[  223.001127][T14171] syzkaller0: entered promiscuous mode
[  223.003777][T14171] syzkaller0: entered allmulticast mode
[  223.006953][T14175] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  223.205982][T14183] netlink: 'syz.2.3565': attribute type 10 has an invalid length.
[  224.160150][T14181] bond0: (slave wlan1): Releasing backup interface
[  224.179549][T14183] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  224.185011][T14183] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  224.189602][T14184] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  224.192645][T14184] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.224050][T14186] lo speed is unknown, defaulting to 1000
[  224.347346][T14200] netlink: 'syz.2.3574': attribute type 7 has an invalid length.
[  224.350348][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3574'.
[  224.359713][T14197] vlan2: entered promiscuous mode
[  224.361345][T14197] bridge0: entered promiscuous mode
[  224.365777][T14197] vlan2: entered allmulticast mode
[  224.368866][T14197] bridge0: entered allmulticast mode
[  224.769966][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'.
[  224.777580][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'.
[  224.838005][T14239] lo speed is unknown, defaulting to 1000
[  225.177100][T14255] syz_tun: entered allmulticast mode
[  225.189060][T14255] dvmrp1: entered allmulticast mode
[  225.197623][T14254] syz_tun: left allmulticast mode
[  225.790304][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3616'.
[  225.823680][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'.
[  225.827318][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'.
[  225.852185][T14297] tap0: tun_chr_ioctl cmd 1074025680
[  225.856187][T14297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.859160][T14297] D: renamed from syzkaller0
[  225.862576][T14297] tipc: Disabling bearer <eth:syzkaller0>
[  227.094540][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'.
[  227.499133][T14329] syzkaller1: entered promiscuous mode
[  227.501540][T14329] syzkaller1: entered allmulticast mode
[  227.707695][T14336] lo speed is unknown, defaulting to 1000
[  227.786962][T14349] sctp: [Deprecated]: syz.2.3638 (pid 14349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  227.786962][T14349] Use struct sctp_sack_info instead
[  228.045527][T14365] __nla_validate_parse: 2 callbacks suppressed
[  228.045539][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'.
[  228.570905][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3660'.
[  228.949336][T14429] netlink: 'syz.2.3674': attribute type 3 has an invalid length.
[  228.953828][T14431] netlink: 'syz.0.3673': attribute type 10 has an invalid length.
[  229.900965][T14461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3687'.
[  230.040500][T14468] netlink: 'syz.1.3690': attribute type 12 has an invalid length.
[  230.147888][T14480] netlink: 'syz.0.3695': attribute type 1 has an invalid length.
[  230.209357][T14480] bond3: entered promiscuous mode
[  230.211518][T14480] bond3: entered allmulticast mode
[  230.214233][T14480] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.234865][T14480] ip6gretap1: entered promiscuous mode
[  230.237107][T14480] ip6gretap1: entered allmulticast mode
[  230.240099][T14480] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  230.313913][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  230.433584][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  231.352442][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'.
[  231.356114][T14534] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  231.359233][T14534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.690556][T14550] netlink: 'syz.2.3727': attribute type 1 has an invalid length.
[  231.695737][T14550] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3727'.
[  232.148205][T14595] syz_tun: entered promiscuous mode
[  232.149888][T14595] syz_tun: entered allmulticast mode
[  232.259366][T14599] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  232.335408][T14610] syzkaller1: entered promiscuous mode
[  232.337280][T14610] syzkaller1: entered allmulticast mode
[  232.752752][T14648] netlink: 'syz.2.3772': attribute type 1 has an invalid length.
[  232.777495][T14648] 8021q: adding VLAN 0 to HW filter on device bond4
[  232.801502][T14648] 8021q: adding VLAN 0 to HW filter on device bond4
[  232.804783][T14648] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  232.809567][T14648] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  232.855153][T14650] bond4: (slave bridge2): Enslaving as an active interface with a down link
[  233.387970][ T5906] lo speed is unknown, defaulting to 1000
[  233.419608][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3794'.
[  233.423453][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3794'.
[  233.521218][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3798'.
[  233.666494][T14718] netlink: 'syz.0.3804': attribute type 2 has an invalid length.
[  233.803112][   T98] block nbd0: Possible stuck request ffff8880201c8000: control (read@0,4096B). Runtime 120 seconds
[  233.855963][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3814'.
[  234.980753][T14796] netlink: 'syz.1.3835': attribute type 3 has an invalid length.
[  234.987357][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3835'.
[  235.158185][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3842'.
[  235.206175][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  235.209912][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'.
[  235.285625][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3846'.
[  235.320412][T14824] netlink: 'syz.2.3849': attribute type 1 has an invalid length.
[  235.324865][T14824] netlink: 'syz.2.3849': attribute type 2 has an invalid length.
[  235.328233][T14824] netlink: 'syz.2.3849': attribute type 1 has an invalid length.
[  235.330664][T14824] netlink: 'syz.2.3849': attribute type 2 has an invalid length.
[  235.374586][T14828] syz_tun: left promiscuous mode
[  235.386566][T14828] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  235.614199][T14849] lo speed is unknown, defaulting to 1000
[  235.828243][T14877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3870'.
[  236.472519][T14915] C: renamed from team_slave_0
[  236.476651][T14915] netlink: 'syz.2.3890': attribute type 3 has an invalid length.
[  236.479405][T14915] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  236.632658][T14925] netlink: 'syz.2.3895': attribute type 46 has an invalid length.
[  236.834482][T14940] netlink: 'syz.1.3902': attribute type 5 has an invalid length.
[  236.882809][T14943] lo speed is unknown, defaulting to 1000
[  237.961478][ T7956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.964256][ T7956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.007150][T15010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.567453][T15017] netlink: 'syz.0.3937': attribute type 6 has an invalid length.
[  238.726013][T15023] __nla_validate_parse: 10 callbacks suppressed
[  238.726030][T15023] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3940'.
[  238.836876][T15025] syzkaller0: entered promiscuous mode
[  238.840479][T15025] syzkaller0: entered allmulticast mode
[  240.151267][T15044] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  240.162120][T15044] syzkaller0: entered promiscuous mode
[  240.166730][T15044] syzkaller0: entered allmulticast mode
[  240.182267][T15045] delete_channel: no stack
[  241.560785][T15071] bridge6: entered allmulticast mode
[  241.988267][T15114] netlink: 'syz.2.3977': attribute type 1 has an invalid length.
[  241.990862][T15114] netlink: 'syz.2.3977': attribute type 3 has an invalid length.
[  241.994780][T15114] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3977'.
[  242.040463][T15118] netlink: 'syz.2.3979': attribute type 4 has an invalid length.
[  242.045810][T15118] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.3979'.
[  242.133252][T15126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3983'.
[  242.136858][T15126] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3983'.
[  242.140802][T15126] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3983'.
[  242.146882][T15128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3984'.
[  242.356306][T15139] netlink: 'syz.2.3989': attribute type 1 has an invalid length.
[  242.359049][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3989'.
[  242.418196][T15143] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  242.815274][T15162] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  243.393755][T15201] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4016'.
[  243.763948][T15219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.767139][T15219] syzkaller0: entered promiscuous mode
[  243.768866][T15219] syzkaller0: entered allmulticast mode
[  243.789540][T15219] tipc: Resetting bearer <eth:syzkaller0>
[  243.796851][T15218] tipc: Resetting bearer <eth:syzkaller0>
[  243.812102][T15218] tipc: Disabling bearer <eth:syzkaller0>
[  244.187089][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4035'.
[  244.642193][T15269] lo speed is unknown, defaulting to 1000
[  244.650670][T15274] netlink: 'syz.1.4049': attribute type 1 has an invalid length.
[  244.654357][T15274] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4049'.
[  244.934519][T15287] ip6gre2: entered promiscuous mode
[  245.252521][T15294] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4057'.
[  246.136464][T15329] netlink: 'syz.2.4071': attribute type 8 has an invalid length.
[  246.291034][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4075'.
[  247.072088][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4092'.
[  247.211399][T15390] netlink: 'syz.1.4097': attribute type 3 has an invalid length.
[  247.220996][T15390] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4097'.
[  247.227519][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'.
[  247.291516][T15397] nbd: couldn't find a device at index 1
[  247.348654][T15401] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4103'.
[  247.460126][T15413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4109'.
[  247.465093][T15413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4109'.
[  248.991639][T15520] netlink: 'syz.0.4149': attribute type 5 has an invalid length.
[  249.309557][T15536] netlink: 'syz.2.4156': attribute type 1 has an invalid length.
[  249.313863][T15536] __nla_validate_parse: 3 callbacks suppressed
[  249.313877][T15536] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4156'.
[  249.322341][T15536] netlink: 'syz.2.4156': attribute type 1 has an invalid length.
[  249.459750][T15545] netlink: 'syz.1.4157': attribute type 10 has an invalid length.
[  249.526538][T15538] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.529438][T15538] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.595765][T15558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.751653][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4181'.
[  251.299225][T15640] syzkaller0: entered promiscuous mode
[  251.301126][T15640] syzkaller0: entered allmulticast mode
[  251.317953][T15640] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  252.607181][T15686] bond3: left promiscuous mode
[  252.609282][T15686] ip6gretap1: left promiscuous mode
[  252.611551][T15686] bond3: left allmulticast mode
[  252.613677][T15686] ip6gretap1: left allmulticast mode
[  252.626344][T15686] bridge6: left allmulticast mode
[  252.763278][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4218'.
[  252.784906][T15688] nbd: socks must be embedded in a SOCK_ITEM attr
[  253.306614][T15706] lo speed is unknown, defaulting to 1000
[  253.329889][T15707] netlink: 'syz.1.4225': attribute type 13 has an invalid length.
[  253.338508][T15707] netlink: 'syz.1.4225': attribute type 17 has an invalid length.
[  253.376169][T15707] erspan0: entered promiscuous mode
[  253.392574][T15707] sit0: left promiscuous mode
[  253.407167][T15707] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.411667][T15707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.418276][  T794] lo speed is unknown, defaulting to 1000
[  253.423955][  T794] syz2: Port: 1 Link ACTIVE
[  254.636748][T15746] lo speed is unknown, defaulting to 1000
[  254.657064][T15749] IPVS: Error connecting to the multicast addr
[  254.990292][T15778] lo speed is unknown, defaulting to 1000
[  254.990380][T15777] netlink: 516 bytes leftover after parsing attributes in process `syz.2.4254'.
[  255.072512][T15784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.089068][T15786] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4260'.
[  255.092033][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'.
[  255.126393][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'.
[  255.205921][   T33] audit: type=1107 audit(1755202737.094:4): pid=15797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  255.210192][T15800] netlink: 'syz.2.4266': attribute type 3 has an invalid length.
[  255.264078][T15800] dvmrp1: left allmulticast mode
[  255.294478][T15804] netlink: 'syz.0.4268': attribute type 3 has an invalid length.
[  255.297356][T15804] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4268'.
[  255.337680][T15807] ip6gretap0: left promiscuous mode
[  255.346709][T15807] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.349676][T15807] 8021q: adding VLAN 0 to HW filter on device team0
[  255.354005][T15807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.548402][T15825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4276'.
[  255.566396][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.617895][T15831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4279'.
[  255.756815][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4282'.
[  256.371557][T15860] sock: sock_set_timeout: `syz.0.4294' (pid 15860) tries to set negative timeout
[  257.097653][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4324'.
[  257.101164][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4324'.
[  257.927128][T15957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.110157][T15971] netlink: 'syz.2.4343': attribute type 1 has an invalid length.
[  258.115116][T15971] netlink: 'syz.2.4343': attribute type 2 has an invalid length.
[  258.145950][T15973] netlink: 'syz.0.4344': attribute type 1 has an invalid length.
[  258.155131][T15973] netlink: 'syz.0.4344': attribute type 11 has an invalid length.
[  258.250083][T15981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.438613][T15994] netlink: 'syz.2.4355': attribute type 6 has an invalid length.
[  258.925494][T16035] netlink: 'syz.2.4372': attribute type 10 has an invalid length.
[  259.230024][T16066] macvlan4: entered promiscuous mode
[  259.232189][T16066] macvlan4: entered allmulticast mode
[  259.237415][T16066] bond5: (slave macvlan4): Opening slave failed
[  259.377805][T16077] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  259.908066][ T5926] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  259.955557][T16132] can: request_module (can-proto-5) failed.
[  260.148499][T16141] __nla_validate_parse: 13 callbacks suppressed
[  260.148516][T16141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4418'.
[  260.882385][T16181] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4434'.
[  260.911828][T16181] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  260.917123][T16181] bond0 (unregistering): Released all slaves
[  261.001857][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4440'.
[  261.105184][T16203] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4445'.
[  261.108896][T16203] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4445'.
[  261.271344][T16218] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  261.381164][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4454'.
[  261.789106][T16243] lo speed is unknown, defaulting to 1000
[  261.826553][T16247] IPVS: Unknown mcast interface: veth1_to_bridge
[  262.231349][T16268] tun0: tun_chr_ioctl cmd 1074025681
[  262.323684][T16276] netlink: 'syz.2.4476': attribute type 1 has an invalid length.
[  262.326834][T16276] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4476'.
[  262.444199][T16288] netlink: 'syz.0.4482': attribute type 21 has an invalid length.
[  262.753720][T16306] block nbd2: server does not support multiple connections per device.
[  262.757632][T16306] block nbd2: shutting down sockets
[  262.951813][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  263.076670][T16347] rdma_rxe: rxe_newlink: failed to add vxcan1
[  263.893193][   T98] block nbd0: Possible stuck request ffff8880201c8000: control (read@0,4096B). Runtime 150 seconds
[  264.065601][T16369] IPVS: Error connecting to the multicast addr
[  264.080765][T16369] netlink: 'syz.0.4515': attribute type 16 has an invalid length.
[  264.084450][T16369] netlink: 'syz.0.4515': attribute type 17 has an invalid length.
[  264.250946][T16381] tipc: Failed to remove unknown binding: 66,1,1/0:3307687569/3307687571
[  264.259389][T16381] tipc: Failed to remove unknown binding: 66,1,1/0:3307687569/3307687571
[  264.263531][T16381] tipc: Failed to remove unknown binding: 66,1,1/0:3307687569/3307687571
[  264.412351][T16393] openvswitch: netlink: Message has 16 unknown bytes.
[  264.561167][T16401] lo speed is unknown, defaulting to 1000
[  264.562015][T16403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.577901][T16403] syzkaller0: entered promiscuous mode
[  264.581378][T16403] syzkaller0: entered allmulticast mode
[  264.620092][T16403] tipc: Resetting bearer <eth:syzkaller0>
[  264.630840][T16402] tipc: Resetting bearer <eth:syzkaller0>
[  264.645372][T16402] tipc: Disabling bearer <eth:syzkaller0>
[  265.198886][T16436] netlink: 'syz.1.4549': attribute type 2 has an invalid length.
[  265.201594][T16436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4549'.
[  265.214290][T16441] netlink: 'syz.2.4550': attribute type 15 has an invalid length.
[  265.507937][T16460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  265.516745][  T793] lo speed is unknown, defaulting to 1000
[  265.519069][  T793] syz2: Port: 1 Link DOWN
[  265.728470][T16467] ieee802154 phy1 wpan1: encryption failed: -22
[  265.835440][T16469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.838835][T16469] syzkaller0: entered promiscuous mode
[  265.841035][T16469] syzkaller0: entered allmulticast mode
[  265.867515][T16469] tipc: Resetting bearer <eth:syzkaller0>
[  265.876932][T16468] tipc: Resetting bearer <eth:syzkaller0>
[  265.889006][T16468] tipc: Disabling bearer <eth:syzkaller0>
[  265.999975][T16475] lo speed is unknown, defaulting to 1000
[  266.080812][T16483] netlink: 'syz.1.4566': attribute type 1 has an invalid length.
[  266.084957][T16483] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4566'.
[  268.260477][T16574] netlink: 'syz.2.4609': attribute type 2 has an invalid length.
[  268.826214][T16613] ieee802154 phy1 wpan1: encryption failed: -22
[  268.837824][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.842318][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.845471][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.848428][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.495855][T16666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4651'.
[  269.498778][T16666] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  269.537800][T16669] tipc: Enabled bearer <udp:syz0>, priority 10
[  269.541469][   T33] audit: type=1804 audit(1755202751.424:5): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4654" name="/newroot/1604/cgroup.controllers" dev="tmpfs" ino=8105 res=1 errno=0
[  269.556769][   T33] audit: type=1800 audit(1755202751.424:6): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4654" name="cgroup.controllers" dev="tmpfs" ino=8105 res=0 errno=0
[  269.571476][   T33] audit: type=1800 audit(1755202751.424:7): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4654" name="cgroup.controllers" dev="tmpfs" ino=8105 res=0 errno=0
[  269.595977][T16674] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  269.708020][T16685] x9ytes_recu: renamed from bridge_slave_0
[  270.172226][T16738] syzkaller1: entered promiscuous mode
[  270.175312][T16738] syzkaller1: entered allmulticast mode
[  270.564463][T16761] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4696'.
[  270.571480][T16761] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4696'.
[  270.653530][ T5883] tipc: Node number set to 365195262
[  270.756297][T16767] lo speed is unknown, defaulting to 1000
[  270.861689][T16772] IPVS: Error connecting to the multicast addr
[  271.131574][T16787] netlink: 'syz.1.4705': attribute type 13 has an invalid length.
[  271.135264][T16787] netlink: 'syz.1.4705': attribute type 17 has an invalid length.
[  271.159277][T16787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.167539][ T5883] lo speed is unknown, defaulting to 1000
[  271.169541][ T5883] syz2: Port: 1 Link ACTIVE
[  271.232352][T16787] lo speed is unknown, defaulting to 1000
[  271.275780][T16796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.367470][T16787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.522426][T16814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.529238][T16814] syzkaller0: entered promiscuous mode
[  271.530992][T16814] syzkaller0: entered allmulticast mode
[  271.552101][T16814] tipc: Resetting bearer <eth:syzkaller0>
[  271.558382][T16813] tipc: Resetting bearer <eth:syzkaller0>
[  271.581940][T16813] tipc: Disabling bearer <eth:syzkaller0>
[  271.748287][T16831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4726'.
[  272.099393][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4739'.
[  272.105081][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4739'.
[  272.171798][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4741'.
[  272.337183][T16873] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4746'.
[  272.482364][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4750'.
[  272.634528][T16888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4753'.
[  272.777559][T16902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4759'.
[  272.918828][T16908] lo speed is unknown, defaulting to 1000
[  273.077735][T16930] x9: renamed from bridge_slave_0
[  273.086091][T16930] netlink: 'syz.1.4769': attribute type 5 has an invalid length.
[  273.105374][T16930] netlink: 'syz.1.4769': attribute type 12 has an invalid length.
[  273.361515][T16959] netlink: 'syz.1.4785': attribute type 3 has an invalid length.
[  273.646281][T16988] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  274.061830][T17026] lo speed is unknown, defaulting to 1000
[  274.356103][T17050] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  274.743654][T17076] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  274.746663][T17076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.817680][T17082] policy can only be matched on NF_INET_PRE_ROUTING
[  274.817699][T17082] unable to load match
[  274.969189][T17094] netlink: 'syz.2.4843': attribute type 1 has an invalid length.
[  275.475746][T17129] gretap0: entered promiscuous mode
[  275.479434][T17129] gretap0: left promiscuous mode
[  275.599752][T17146] __nla_validate_parse: 12 callbacks suppressed
[  275.599770][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'.
[  275.606384][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'.
[  275.719001][T17157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.721643][T17157] syzkaller0: entered promiscuous mode
[  275.724449][T17157] syzkaller0: entered allmulticast mode
[  275.738878][T17157] tipc: Resetting bearer <eth:syzkaller0>
[  275.742296][T17156] tipc: Resetting bearer <eth:syzkaller0>
[  275.754756][T17156] tipc: Disabling bearer <eth:syzkaller0>
[  275.868094][T17161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.903772][T17163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.916215][T17163] veth0_to_team: entered promiscuous mode
[  275.918665][T17163] veth0_to_team: entered allmulticast mode
[  276.161256][T17176] netlink: 'syz.2.4881': attribute type 16 has an invalid length.
[  276.164527][T17176] netlink: 'syz.2.4881': attribute type 17 has an invalid length.
[  276.176105][T17176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.745382][T17200] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  276.827130][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4893'.
[  276.830661][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4893'.
[  276.836291][T17203] netlink: 'syz.1.4893': attribute type 19 has an invalid length.
[  277.321682][T17262] netlink: 'syz.1.4923': attribute type 1 has an invalid length.
[  277.866343][T17289] netlink: 'syz.1.4933': attribute type 46 has an invalid length.
[  278.291954][T17324] lo speed is unknown, defaulting to 1000
[  278.298217][T17324] lo speed is unknown, defaulting to 1000
[  278.301275][T17324] lo speed is unknown, defaulting to 1000
[  278.463992][ T5906] lo speed is unknown, defaulting to 1000
[  278.466260][T17324] infiniband syz0: set down
[  278.468044][T17324] infiniband syz0: added lo
[  278.493620][T17324] RDS/IB: syz0: added
[  278.496305][T17324] smc: adding ib device syz0 with port count 1
[  278.498608][T17324] smc:    ib device syz0 port 1 has pnetid 
[  278.504109][T17324] lo speed is unknown, defaulting to 1000
[  278.513509][ T5906] lo speed is unknown, defaulting to 1000
[  278.517278][T17332] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4952'.
[  278.671735][T17324] lo speed is unknown, defaulting to 1000
[  278.861404][T17324] lo speed is unknown, defaulting to 1000
[  279.081372][T17323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.089612][T17354] geneve5: entered promiscuous mode
[  279.091613][T17354] geneve5: entered allmulticast mode
[  279.094130][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 36311 - 0
[  279.097581][   T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 35270 - 0
[  279.118542][T17361] netlink: 'syz.2.4966': attribute type 11 has an invalid length.
[  279.155999][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 36311 - 0
[  279.158527][   T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 35270 - 0
[  279.161032][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 36311 - 0
[  279.165926][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 35270 - 0
[  279.168555][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 36311 - 0
[  279.170979][   T13] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 35270 - 0
[  279.285038][T17375] netlink: 'syz.1.4973': attribute type 1 has an invalid length.
[  279.326515][T17377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4974'.
[  279.329988][T17377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4974'.
[  279.333612][T17377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4974'.
[  279.333965][T17373] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  279.337462][T17377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4974'.
[  279.976940][T17412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4990'.
[  280.341524][   T33] audit: type=1107 audit(1755202762.224:8): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  281.309083][T17491] tipc: Failed to remove unknown binding: 66,1,1/365195262:3011016319/3011016321
[  281.313309][T17491] tipc: Failed to remove unknown binding: 66,1,1/365195262:3011016319/3011016321
[  282.002054][T17514] syzkaller1: entered promiscuous mode
[  282.004401][T17514] syzkaller1: entered allmulticast mode
[  282.119087][T17519] __nla_validate_parse: 1 callbacks suppressed
[  282.119099][T17519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5038'.
[  282.119790][T17517] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5037'.
[  282.370606][T17540] lo speed is unknown, defaulting to 1000
[  282.378895][T17540] lo speed is unknown, defaulting to 1000
[  282.409783][ T5235] Bluetooth: hci2: link tx timeout
[  282.411843][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.416536][ T5235] Bluetooth: hci2: link tx timeout
[  282.418624][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.421637][ T5235] Bluetooth: hci2: link tx timeout
[  282.426953][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.430601][ T5235] Bluetooth: hci2: link tx timeout
[  282.432761][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.437231][ T5235] Bluetooth: hci2: link tx timeout
[  282.439269][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.446038][ T5235] Bluetooth: hci2: link tx timeout
[  282.448199][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.451115][ T5235] Bluetooth: hci2: link tx timeout
[  282.453249][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.456244][ T5235] Bluetooth: hci2: link tx timeout
[  282.458237][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.461343][ T5235] Bluetooth: hci2: link tx timeout
[  282.464160][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.467079][ T5235] Bluetooth: hci2: link tx timeout
[  282.469288][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.472223][ T5235] Bluetooth: hci2: link tx timeout
[  282.474429][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.477486][ T5235] Bluetooth: hci2: link tx timeout
[  282.479597][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.482608][ T5235] Bluetooth: hci2: link tx timeout
[  282.484955][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.539682][T17550] lo speed is unknown, defaulting to 1000
[  282.627872][T17550] lo speed is unknown, defaulting to 1000
[  282.737173][T17557] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  283.161003][T17577] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5061'.
[  283.389970][T17593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.394004][T17593] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  283.576424][T17607] mac80211_hwsim hwsim2 ": renamed from wlan0
[  283.869743][T17630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5081'.
[  284.054828][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5083'.
[  284.108666][T17641] netlink: 'syz.1.5085': attribute type 1 has an invalid length.
[  284.111771][T17641] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5085'.
[  284.445866][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  284.868361][T17696] sctp: [Deprecated]: syz.1.5109 (pid 17696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  284.868361][T17696] Use struct sctp_sack_info instead
[  285.130706][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5111'.
[  285.200177][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5112'.
[  285.405216][T17720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.640775][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5127'.
[  286.406931][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'.
[  286.630127][T17795] gretap2: entered promiscuous mode
[  286.632264][T17795] gretap2: entered allmulticast mode
[  286.965233][T17803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.276913][T17809] __nla_validate_parse: 1 callbacks suppressed
[  287.276931][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5156'.
[  287.288984][T17809] veth0_to_bond: entered allmulticast mode
[  288.301200][T17834] netlink: 'syz.2.5166': attribute type 1 has an invalid length.
[  288.327743][T17834] bond0: entered promiscuous mode
[  288.330746][T17834] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.352278][T17834] bond0: (slave bridge4): making interface the new active one
[  288.355669][T17834] bridge4: entered promiscuous mode
[  288.359058][T17834] bond0: (slave bridge4): Enslaving as an active interface with an up link
[  288.520152][T17859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5178'.
[  288.637519][T17868] netlink: 'syz.1.5182': attribute type 6 has an invalid length.
[  288.670661][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'.
[  288.676809][T17870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5183'.
[  288.863142][T17876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5185'.
[  288.899357][T17873] infiniband syz1: set down
[  288.901338][T17873] infiniband syz1: added bond0
[  288.949324][T17873] RDS/IB: syz1: added
[  288.951023][T17873] smc: adding ib device syz1 with port count 1
[  288.955257][T17873] smc:    ib device syz1 port 1 has pnetid 
[  289.267935][T17885] netlink: 'syz.2.5189': attribute type 1 has an invalid length.
[  289.300706][T17885] 8021q: adding VLAN 0 to HW filter on device bond6
[  289.327676][T17885] bond6: (slave bridge6): making interface the new active one
[  289.332541][T17885] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  289.364524][T17885] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  289.861834][T17930] syzkaller1: entered promiscuous mode
[  289.864616][T17930] syzkaller1: entered allmulticast mode
[  290.042805][T17945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5214'.
[  290.046687][T17945] netlink: 'syz.0.5214': attribute type 7 has an invalid length.
[  290.049545][T17945] netlink: 'syz.0.5214': attribute type 8 has an invalid length.
[  290.052153][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5214'.
[  290.188828][T17961] netlink: 'syz.1.5220': attribute type 11 has an invalid length.
[  290.479847][T17985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5231'.
[  290.528142][T17989] netlink: 'syz.1.5233': attribute type 7 has an invalid length.
[  290.629596][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5237'.
[  291.291309][T18027] IPVS: Scheduler module ip_vs_ not found
[  292.078081][T18104] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5286'.
[  292.088856][T18104] rdma_rxe: rxe_newlink: failed to add lo
[  292.108607][T18104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  292.214094][T18116] syzkaller1: tun_chr_ioctl cmd 1074025677
[  292.216618][T18116] syzkaller1: linktype set to 778
[  292.251909][T18122] veth1_to_team: entered allmulticast mode
[  292.258550][T18122] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  292.377582][T18130] __nla_validate_parse: 1 callbacks suppressed
[  292.377598][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5297'.
[  292.838849][T18167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5315'.
[  292.842652][T18167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5315'.
[  292.905824][T18165] block nbd2: server does not support multiple connections per device.
[  292.909265][T18165] block nbd2: shutting down sockets
[  292.940296][T18169] lo speed is unknown, defaulting to 1000
[  292.945371][T18169] lo speed is unknown, defaulting to 1000
[  293.656194][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5333'.
[  293.664707][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5333'.
[  293.722115][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5333'.
[  293.722824][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.729687][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5333'.
[  293.735646][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.738338][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.753332][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.966957][   T98] block nbd0: Possible stuck request ffff8880201c8000: control (read@0,4096B). Runtime 180 seconds
[  294.206502][T18255] ieee802154 phy1 wpan1: encryption failed: -22
[  294.299954][T18268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5359'.
[  294.370401][T18274] netlink: 'syz.0.5363': attribute type 1 has an invalid length.
[  294.378972][T18274] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5363'.
[  294.769716][T18316] sctp: [Deprecated]: syz.2.5384 (pid 18316) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.769716][T18316] Use struct sctp_sack_info instead
[  295.364384][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5408'.
[  295.386228][T18366] netlink: 'syz.0.5408': attribute type 1 has an invalid length.
[  295.390183][T18366] netlink: 'syz.0.5408': attribute type 1 has an invalid length.
[  295.432500][T18372] pim6reg: entered allmulticast mode
[  295.438976][T18372] pim6reg: left allmulticast mode
[  296.410141][T18447] bridge9: entered promiscuous mode
[  296.412254][T18447] bridge9: entered allmulticast mode
[  296.501364][T18453] netlink: 'syz.2.5448': attribute type 3 has an invalid length.
[  297.520003][ T5295] udevd[5295]: worker [5848] /devices/virtual/block/nbd0 timeout; kill it
[  297.527397][ T5295] udevd[5295]: seq 11694 '/devices/virtual/block/nbd0' killed
[  297.660874][T18487] __nla_validate_parse: 2 callbacks suppressed
[  297.660890][T18487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5462'.
[  297.667436][T18487] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5462'.
[  297.670164][T18487] netlink: 'syz.1.5462': attribute type 6 has an invalid length.
[  297.672575][T18487] netlink: 'syz.1.5462': attribute type 4 has an invalid length.
[  297.731555][T18493] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5465'.
[  298.386237][T18547] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5491'.
[  298.390437][T18547] unsupported nlmsg_type 40
[  298.440001][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'.
[  298.447785][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'.
[  299.230032][T18602] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5517'.
[  299.237744][T18602] ip6gretap0: entered promiscuous mode
[  299.240484][T18602] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5517'.
[  299.502029][T18612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.505890][T18612] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  299.509036][T18612] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  299.514064][T18612] tipc: Resetting bearer <eth:syzkaller0>
[  299.539615][T18612] tipc: Resetting bearer <eth:syzkaller0>
[  299.615904][ T7961] tipc: Resetting bearer <eth:syzkaller0>
[  299.687344][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5527'.
[  299.856926][T18636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  300.024191][T18647] netlink: 'syz.2.5537': attribute type 6 has an invalid length.
[  300.028753][T18647] netlink: 'syz.2.5537': attribute type 6 has an invalid length.
[  300.341733][T18664] netlink: 'syz.2.5544': attribute type 6 has an invalid length.
[  301.155348][T18708] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  301.168309][T18708] bond4: (slave bridge2): Releasing active interface
[  301.177763][T18708] bond0: (slave bridge4): Releasing backup interface
[  301.180501][T18708] bridge4: left promiscuous mode
[  301.192214][T18708] bond6: (slave bridge6): Releasing active interface
[  301.253858][T18708] netlink: 'syz.2.5564': attribute type 10 has an invalid length.
[  301.257244][T18708] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  301.266243][T18708] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  301.273346][T18708] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  301.368650][T18723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  302.167298][T18761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5586'.
[  302.814878][T18815] __nla_validate_parse: 4 callbacks suppressed
[  302.814894][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'.
[  302.848384][T18820] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5615'.
[  303.436427][T18867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5634'.
[  303.439323][T18867] 8021q: VLANs not supported on ipvlan1
[  304.103459][T18942] delete_channel: no stack
[  304.457496][T18973] sctp: [Deprecated]: syz.1.5683 (pid 18973) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.457496][T18973] Use struct sctp_sack_info instead
[  304.507505][T18979] netlink: 380 bytes leftover after parsing attributes in process `syz.1.5685'.
[  304.611839][T18987] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5690'.
[  305.533466][T19042] 8021q: adding VLAN 0 to HW filter on device bond4
[  305.679152][T19059] netlink: 'syz.1.5724': attribute type 1 has an invalid length.
[  305.764903][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5727'.
[  305.919606][T19072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5729'.
[  305.975834][T19079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.979744][T19079] syzkaller0: entered promiscuous mode
[  305.982290][T19079] syzkaller0: entered allmulticast mode
[  306.017220][T19079] tipc: Resetting bearer <eth:syzkaller0>
[  306.022113][T19078] tipc: Resetting bearer <eth:syzkaller0>
[  306.042486][T19078] tipc: Disabling bearer <eth:syzkaller0>
[  306.275595][T19091] netlink: 'syz.1.5735': attribute type 3 has an invalid length.
[  306.279037][T19086] lo speed is unknown, defaulting to 1000
[  306.282529][T19086] lo speed is unknown, defaulting to 1000
[  306.754005][T19097] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5737'.
[  306.767305][T19097] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave
[  306.770894][T19097] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0)
[  307.694263][T19165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  308.039704][T19197] vxcan1: entered allmulticast mode
[  308.041624][T19197] vxcan1: left allmulticast mode
[  308.110842][T19200] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5785'.
[  308.228739][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5789'.
[  308.246940][T19214] tipc: Enabled bearer <eth:gre0>, priority 10
[  308.609495][T19226] tipc: Resetting bearer <eth:gre0>
[  309.266149][  T793] lo speed is unknown, defaulting to 1000
[  309.268356][  T793] syz2: Port: 1 Link DOWN
[  309.273358][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.282977][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 36311 - 0
[  309.286121][   T13] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 35270 - 0
[  309.289250][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.292203][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 36311 - 0
[  309.313172][   T13] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 35270 - 0
[  309.316826][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.319949][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 36311 - 0
[  309.323152][  T793] tipc: Node number set to 2835764535
[  309.330167][   T13] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 35270 - 0
[  309.338904][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.342078][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 36311 - 0
[  309.356977][   T13] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 35270 - 0
[  309.486484][T19247] syzkaller1: entered promiscuous mode
[  309.489046][T19247] syzkaller1: entered allmulticast mode
[  309.556830][T19252] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  309.641438][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5812'.
[  309.644782][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5812'.
[  309.935304][T19302] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5832'.
[  309.956622][T19304] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  310.150888][T19315] netlink: 'syz.2.5838': attribute type 4 has an invalid length.
[  310.649935][T19327] netlink: 'syz.1.5840': attribute type 4 has an invalid length.
[  311.112766][T19351] netlink: 'syz.1.5850': attribute type 74 has an invalid length.
[  311.214500][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'.
[  311.217507][T19365] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  311.228585][T19365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.389034][T19381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5864'.
[  311.556998][T19395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5871'.
[  311.569904][T19396] wireguard0: entered promiscuous mode
[  311.571797][T19396] wireguard0: entered allmulticast mode
[  311.586823][T19395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5871'.
[  311.590087][T19395] netlink: 34 bytes leftover after parsing attributes in process `syz.0.5871'.
[  312.080853][T19419] netlink: 'syz.1.5882': attribute type 8 has an invalid length.
[  312.125414][T19417] syzkaller0: entered promiscuous mode
[  312.127843][T19417] syzkaller0: entered allmulticast mode
[  313.750988][T19428] lo speed is unknown, defaulting to 1000
[  313.756071][T19428] lo speed is unknown, defaulting to 1000
[  313.768965][T19455] netlink: 'syz.0.5897': attribute type 9 has an invalid length.
[  313.917734][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5903'.
[  314.067139][T19472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5905'.
[  314.388700][T19488] netlink: 'syz.0.5912': attribute type 1 has an invalid length.
[  314.391689][T19488] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5912'.
[  314.395452][T19488] netlink: 97 bytes leftover after parsing attributes in process `syz.0.5912'.
[  314.894971][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5926'.
[  314.913279][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5926'.
[  314.975839][T19521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5926'.
[  315.157379][T19537] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  315.222450][T19540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5937'.
[  315.316410][T19544] tipc: Resetting bearer <eth:syzkaller0>
[  315.349356][ T5876] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.352040][ T5876] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.360871][ T5876] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.364773][ T5876] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.373545][ T5876] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.376221][ T5876] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.379162][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.382495][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.490037][T19553] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5941'.
[  315.532794][T19556] netlink: 'syz.1.5944': attribute type 1 has an invalid length.
[  315.542145][T19556] netlink: 'syz.1.5944': attribute type 10 has an invalid length.
[  315.555195][T19556] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5944'.
[  315.952462][T19575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.165742][T19581] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  316.168338][T19581] openvswitch: netlink: Message has 1 unknown bytes.
[  317.006935][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.163263][ T5878] Bluetooth: hci0: command tx timeout
[  317.887512][T19683] netlink: 'syz.1.6001': attribute type 20 has an invalid length.
[  317.909047][T19683] netlink: 'syz.1.6001': attribute type 20 has an invalid length.
[  317.912276][ T5888] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  317.915195][ T5888] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  317.918088][ T5888] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  317.921055][ T5888] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  318.332821][T19728] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  319.203414][T19747] netlink: 'syz.1.6030': attribute type 1 has an invalid length.
[  319.206706][T19747] __nla_validate_parse: 14 callbacks suppressed
[  319.206725][T19747] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6030'.
[  319.243269][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  319.310251][T19749] lo speed is unknown, defaulting to 1000
[  319.318133][T19749] lo speed is unknown, defaulting to 1000
[  319.707898][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'.
[  319.791845][T19773] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.6041'.
[  320.035055][T19792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6050'.
[  320.044919][T19792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6050'.
[  320.048481][T19792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6050'.
[  320.060538][T19792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6050'.
[  320.346748][T19813] batadv_slave_0: entered promiscuous mode
[  320.351755][T19806] batadv_slave_0: left promiscuous mode
[  320.398865][T19819] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  320.609917][T19839] netlink: 'syz.2.6067': attribute type 4 has an invalid length.
[  320.793489][T19852] siw: device registration error -23
[  320.795713][T19852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6075'.
[  320.978837][T19864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.012673][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6083'.
[  321.048257][T19867] bond8: entered promiscuous mode
[  321.050604][T19867] 8021q: adding VLAN 0 to HW filter on device bond8
[  321.188953][T19867] bond8 (unregistering): Released all slaves
[  321.201262][T19871] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  321.210208][T19873] bond0: (slave wlan1): Releasing backup interface
[  321.220666][T19873] bond3: (slave ip6gretap1): Removing an active aggregator
[  321.232247][T19873] bond3: (slave ip6gretap1): Releasing backup interface
[  321.245748][T19871] netlink: 'syz.0.6085': attribute type 10 has an invalid length.
[  321.261957][T19871] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  321.269373][T19871] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  321.282673][T19871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  321.287930][T19871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  322.077448][T19909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6099'.
[  322.250161][T19918] pim6reg1: entered promiscuous mode
[  322.252036][T19918] pim6reg1: entered allmulticast mode
[  322.360161][T19920] netlink: 'syz.0.6104': attribute type 1 has an invalid length.
[  322.488291][T19929] syzkaller0: entered promiscuous mode
[  322.490551][T19929] syzkaller0: entered allmulticast mode
[  322.860728][T19943] netlink: 'syz.1.6115': attribute type 10 has an invalid length.
[  322.917258][T19944] netlink: 'syz.1.6115': attribute type 10 has an invalid length.
[  323.988664][T19950] gtp0: entered promiscuous mode
[  323.990671][T19950] gtp0: entered allmulticast mode
[  324.047108][   T98] block nbd0: Possible stuck request ffff8880201c8000: control (read@0,4096B). Runtime 210 seconds
[  324.066169][T19953] netlink: 'syz.1.6119': attribute type 1 has an invalid length.
[  324.276719][T19976] __nla_validate_parse: 3 callbacks suppressed
[  324.276730][T19976] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6130'.
[  324.487247][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6142'.
[  324.606150][T20012] netlink: 'syz.2.6148': attribute type 1 has an invalid length.
[  324.609529][T20012] netlink: 'syz.2.6148': attribute type 1 has an invalid length.
[  324.664699][T20018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6151'.
[  324.865270][T20039] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  324.867527][T20039] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  325.702989][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'.
[  325.757877][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6181'.
[  326.368571][T20134] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6203'.
[  326.475857][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6206'.
[  326.541512][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6208'.
[  326.586487][T20146] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.589883][T20146] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  326.592523][T20146] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  326.597500][T20146] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6209'.
[  326.647319][T20150] netlink: 'syz.0.6211': attribute type 83 has an invalid length.
[  326.744217][T20156] warn_alloc: 1 callbacks suppressed
[  326.744232][T20156] syz.0.6213: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  326.751859][T20156] CPU: 1 UID: 0 PID: 20156 Comm: syz.0.6213 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  326.751878][T20156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  326.751888][T20156] Call Trace:
[  326.751895][T20156]  <TASK>
[  326.751902][T20156]  dump_stack_lvl+0x189/0x250
[  326.751928][T20156]  ? __pfx_dump_stack_lvl+0x10/0x10
[  326.751945][T20156]  ? __pfx__printk+0x10/0x10
[  326.751965][T20156]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  326.751982][T20156]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  326.752000][T20156]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  326.752018][T20156]  warn_alloc+0x214/0x310
[  326.752040][T20156]  ? stack_depot_save_flags+0x40/0x860
[  326.752075][T20156]  ? __pfx_warn_alloc+0x10/0x10
[  326.752099][T20156]  ? kasan_save_track+0x4f/0x80
[  326.752122][T20156]  ? xskq_create+0x56/0x170
[  326.752138][T20156]  ? xsk_init_queue+0xb0/0x110
[  326.752151][T20156]  ? xsk_setsockopt+0x4dc/0x8d0
[  326.752164][T20156]  ? do_sock_setsockopt+0x17c/0x1b0
[  326.752183][T20156]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  326.752201][T20156]  ? do_syscall_64+0xfa/0x3b0
[  326.752216][T20156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.752236][T20156]  __vmalloc_node_range_noprof+0x125/0x12f0
[  326.752279][T20156]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  326.752303][T20156]  ? __kasan_kmalloc+0x93/0xb0
[  326.752323][T20156]  vmalloc_user_noprof+0xad/0xf0
[  326.752343][T20156]  ? xskq_create+0xbf/0x170
[  326.752358][T20156]  xskq_create+0xbf/0x170
[  326.752376][T20156]  xsk_init_queue+0xb0/0x110
[  326.752394][T20156]  xsk_setsockopt+0x4dc/0x8d0
[  326.752410][T20156]  ? __pfx_xsk_setsockopt+0x10/0x10
[  326.752425][T20156]  ? __pfx_aa_sk_perm+0x10/0x10
[  326.752445][T20156]  ? aa_sock_opt_perm+0xff/0x1b0
[  326.752465][T20156]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  326.752480][T20156]  ? __pfx_xsk_setsockopt+0x10/0x10
[  326.752496][T20156]  do_sock_setsockopt+0x17c/0x1b0
[  326.752518][T20156]  __x64_sys_setsockopt+0x13f/0x1b0
[  326.752541][T20156]  do_syscall_64+0xfa/0x3b0
[  326.752558][T20156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.752571][T20156]  ? asm_sysvec_call_function_single+0x1a/0x20
[  326.752589][T20156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.752602][T20156] RIP: 0033:0x7f7722b8ebe9
[  326.752616][T20156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.752656][T20156] RSP: 002b:00007f77239ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  326.752670][T20156] RAX: ffffffffffffffda RBX: 00007f7722db6090 RCX: 00007f7722b8ebe9
[  326.752681][T20156] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  326.752689][T20156] RBP: 00007f7722c11e19 R08: 0000000000000004 R09: 0000000000000000
[  326.752698][T20156] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  326.752707][T20156] R13: 00007f7722db6128 R14: 00007f7722db6090 R15: 00007ffdec85ab08
[  326.752729][T20156]  </TASK>
[  326.752755][T20156] Mem-Info:
[  326.866037][T20156] active_anon:12573 inactive_anon:0 isolated_anon:0
[  326.866037][T20156]  active_file:1190 inactive_file:38322 isolated_file:0
[  326.866037][T20156]  unevictable:1768 dirty:339 writeback:0
[  326.866037][T20156]  slab_reclaimable:10228 slab_unreclaimable:90066
[  326.866037][T20156]  mapped:18361 shmem:2447 pagetables:1027
[  326.866037][T20156]  sec_pagetables:0 bounce:0
[  326.866037][T20156]  kernel_misc_reclaimable:0
[  326.866037][T20156]  free:252977 free_pcp:18069 free_cma:0
[  326.883031][T20156] Node 0 active_anon:15604kB inactive_anon:0kB active_file:2824kB inactive_file:136540kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45800kB dirty:916kB writeback:0kB shmem:5064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7812kB pagetables:2068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  326.894646][T20156] Node 1 active_anon:34688kB inactive_anon:0kB active_file:1936kB inactive_file:16748kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27644kB dirty:440kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5180kB pagetables:2040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  326.906144][T20156] Node 0 DMA free:14856kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:504kB local_pcp:124kB free_cma:0kB
[  326.916842][T20156] lowmem_reserve[]: 0 811 811 811 811
[  326.919017][T20156] Node 0 DMA32 free:209560kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15604kB inactive_anon:0kB active_file:2824kB inactive_file:136540kB unevictable:3536kB writepending:916kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:48164kB local_pcp:20828kB free_cma:0kB
[  326.932918][T20156] lowmem_reserve[]: 0 0 0 0 0
[  326.934823][T20156] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  326.945707][T20156] lowmem_reserve[]: 0 0 854 854 854
[  326.962430][T20156] Node 1 Normal free:328876kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34552kB inactive_anon:0kB active_file:1936kB inactive_file:16748kB unevictable:3536kB writepending:440kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:23668kB local_pcp:7560kB free_cma:0kB
[  326.975708][T20156] lowmem_reserve[]: 0 0 0 0 0
[  326.977560][T20156] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 2*64kB (UM) 3*128kB (UM) 2*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 0*2048kB 2*4096kB (U) = 14856kB
[  326.994118][T20156] Node 0 DMA32: 484*4kB (UME) 443*8kB (UME) 229*16kB (UME) 283*32kB (UME) 101*64kB (UME) 149*128kB (UME) 75*256kB (UME) 36*512kB (UME) 23*1024kB (UM) 5*2048kB (UME) 25*4096kB (UM) = 217560kB
[  327.003977][T20156] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  327.009991][T20156] Node 1 Normal: 549*4kB (UM) 429*8kB (UME) 157*16kB (UME) 169*32kB (UME) 349*64kB (UME) 181*128kB (UM) 86*256kB (UME) 46*512kB (UM) 21*1024kB (UME) 17*2048kB (UME) 41*4096kB (UM) = 328876kB
[  327.017877][T20156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.021346][T20156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.024922][T20156] 41959 total pagecache pages
[  327.026672][T20156] 0 pages in swap cache
[  327.028205][T20156] Free swap  = 124996kB
[  327.029761][T20156] Total swap = 124996kB
[  327.031321][T20156] 786301 pages RAM
[  327.032763][T20156] 0 pages HighMem/MovableOnly
[  327.035360][T20156] 241320 pages reserved
[  327.036974][T20156] 0 pages cma reserved
[  327.256358][T20177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6223'.
[  327.315786][T20181] netlink: 'syz.0.6225': attribute type 15 has an invalid length.
[  328.158929][T20253] 0: renamed from hsr0
[  328.166117][T20253] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  328.176904][T20250] netlink: 'syz.0.6258': attribute type 4 has an invalid length.
[  328.179773][T20253] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  328.185305][T20253] 0: entered allmulticast mode
[  328.187450][T20253] hsr_slave_0: entered allmulticast mode
[  328.189571][T20253] hsr_slave_1: entered allmulticast mode
[  328.193182][T20253] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  328.933808][T20324] netlink: 'syz.1.6291': attribute type 13 has an invalid length.
[  328.936803][T20324] netlink: 'syz.1.6291': attribute type 17 has an invalid length.
[  328.955360][T20324] erspan0: left promiscuous mode
[  328.976686][T20324] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.981813][T20324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  328.989687][ T5883] lo speed is unknown, defaulting to 1000
[  328.992109][ T5883] syz2: Port: 1 Link ACTIVE
[  329.030941][T20324] lo speed is unknown, defaulting to 1000
[  329.034349][T20324] lo speed is unknown, defaulting to 1000
[  329.051200][T20331] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  329.140665][T20336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.526573][T20353] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  329.869863][T20370] __nla_validate_parse: 6 callbacks suppressed
[  329.869874][T20370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6310'.
[  330.310958][T20388] netlink: 'syz.2.6319': attribute type 5 has an invalid length.
[  330.330498][T20390] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  330.611441][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6330'.
[  330.655941][T20413] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6331'.
[  330.758936][T20426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.810166][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6337'.
[  331.054635][T20454] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  331.244345][T20473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6360'.
[  331.247524][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6360'.
[  331.250707][T20473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6360'.
[  331.256865][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6360'.
[  331.259837][T20473] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6360'.
[  331.472055][T20491] lo speed is unknown, defaulting to 1000
[  331.476223][T20491] lo speed is unknown, defaulting to 1000
[  331.511766][T20500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.556894][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6381'.
[  333.109417][T20551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.121612][T20553] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  333.139233][T20553] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  334.020604][T20592] netlink: 'syz.1.6410': attribute type 1 has an invalid length.
[  334.029811][T20592] netlink: 'syz.1.6410': attribute type 2 has an invalid length.
[  334.996799][T20658] __nla_validate_parse: 6 callbacks suppressed
[  334.996817][T20658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6440'.
[  335.404685][T20676] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6447'.
[  336.487697][T20728] rdma_op ffff8881122259f0 conn xmit_rdma 0000000000000000
[  336.949685][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6487'.
[  337.129921][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6493'.
[  337.478126][T20820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.511119][T20820] syzkaller0: entered promiscuous mode
[  337.513298][T20820] syzkaller0: entered allmulticast mode
[  337.515667][T20820] tipc: Resetting bearer <eth:syzkaller0>
[  337.520997][T20819] tipc: Resetting bearer <eth:syzkaller0>
[  338.297443][T20834] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6513'.
[  338.753174][T20819] tipc: Disabling bearer <eth:syzkaller0>
[  339.691357][T20895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.044321][T20926] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  340.052186][T20926] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  340.189470][T20936] netem: incorrect ge model size
[  340.193676][T20936] netem: change failed
[  340.378047][T20953] netlink: 'syz.2.6566': attribute type 12 has an invalid length.
[  340.381748][T20953] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.6566'.
[  340.385812][T20954] netlink: 'syz.0.6567': attribute type 27 has an invalid length.
[  340.431075][T20958] netlink: 'syz.2.6569': attribute type 4 has an invalid length.
[  340.446493][T20957] syzkaller1: entered promiscuous mode
[  340.448684][T20957] syzkaller1: entered allmulticast mode
[  340.461423][T20957] netlink: 'syz.0.6568': attribute type 15 has an invalid length.
[  340.809711][T20983] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6580'.
[  340.817194][T20983] gretap0: entered promiscuous mode
[  340.825116][T20983] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6580'.
[  340.829449][T20983] 0{X: renamed from gretap0
[  340.839531][T20983] 0{X: left promiscuous mode
[  340.841626][T20983] 0{X: entered allmulticast mode
[  340.847134][T20983] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  340.981772][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6585'.
[  340.985354][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6585'.
[  340.989023][T20997] netlink: 'syz.0.6585': attribute type 12 has an invalid length.
[  340.992290][T20997] netlink: 'syz.0.6585': attribute type 14 has an invalid length.
[  341.209404][T21019] sctp: [Deprecated]: syz.2.6597 (pid 21019) Use of int in maxseg socket option.
[  341.209404][T21019] Use struct sctp_assoc_value instead
[  341.438821][T21036] netlink: 'syz.1.6605': attribute type 4 has an invalid length.
[  341.612619][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6613'.
[  341.616141][T21054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.243328][T21095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6631'.
[  342.418423][T21100] ==================================================================
[  342.421656][T21100] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  342.424632][T21100] Read of size 4 at addr ffff88810ece5744 by task syz.1.6633/21100
[  342.428601][T21100] 
[  342.429936][T21100] CPU: 0 UID: 0 PID: 21100 Comm: syz.1.6633 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  342.429958][T21100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.429968][T21100] Call Trace:
[  342.429975][T21100]  <TASK>
[  342.429982][T21100]  dump_stack_lvl+0x189/0x250
[  342.430003][T21100]  ? __kasan_check_byte+0x12/0x40
[  342.430032][T21100]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.430048][T21100]  ? lock_release+0x4b/0x3e0
[  342.430071][T21100]  ? __virt_addr_valid+0x4a5/0x5c0
[  342.430090][T21100]  print_report+0xca/0x240
[  342.430103][T21100]  ? xfrm_alloc_spi+0x570/0xf30
[  342.430115][T21100]  kasan_report+0x118/0x150
[  342.430135][T21100]  ? xfrm_alloc_spi+0x570/0xf30
[  342.430149][T21100]  xfrm_alloc_spi+0x570/0xf30
[  342.430161][T21100]  ? xfrm_alloc_spi+0x2a0/0xf30
[  342.430178][T21100]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  342.430198][T21100]  ? xfrm_find_acq+0x87/0xa0
[  342.430220][T21100]  xfrm_alloc_userspi+0x70b/0xc90
[  342.430240][T21100]  ? apparmor_capable+0x137/0x1b0
[  342.430254][T21100]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  342.430269][T21100]  ? __nla_parse+0x40/0x60
[  342.430289][T21100]  xfrm_user_rcv_msg+0x7a3/0xab0
[  342.430304][T21100]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  342.430330][T21100]  ? __pfx___mutex_trylock_common+0x10/0x10
[  342.430348][T21100]  ? rcu_is_watching+0x15/0xb0
[  342.430361][T21100]  ? trace_contention_end+0x39/0x120
[  342.430376][T21100]  ? __mutex_lock+0x335/0x1360
[  342.430396][T21100]  netlink_rcv_skb+0x208/0x470
[  342.430414][T21100]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  342.430428][T21100]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.430450][T21100]  ? netlink_deliver_tap+0x2e/0x1b0
[  342.430498][T21100]  ? netlink_deliver_tap+0x2e/0x1b0
[  342.430516][T21100]  xfrm_netlink_rcv+0x79/0x90
[  342.430529][T21100]  netlink_unicast+0x82f/0x9e0
[  342.430548][T21100]  ? __pfx_netlink_unicast+0x10/0x10
[  342.430565][T21100]  ? netlink_sendmsg+0x642/0xb30
[  342.430581][T21100]  ? skb_put+0x11b/0x210
[  342.430601][T21100]  netlink_sendmsg+0x805/0xb30
[  342.430622][T21100]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.430640][T21100]  ? aa_sock_msg_perm+0xf1/0x1d0
[  342.430659][T21100]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  342.430674][T21100]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.430691][T21100]  __sock_sendmsg+0x21c/0x270
[  342.430708][T21100]  ____sys_sendmsg+0x505/0x830
[  342.430730][T21100]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.430753][T21100]  ? import_iovec+0x74/0xa0
[  342.430766][T21100]  ___sys_sendmsg+0x21f/0x2a0
[  342.430784][T21100]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.430814][T21100]  ? __fget_files+0x2a/0x420
[  342.430833][T21100]  ? __fget_files+0x3a0/0x420
[  342.430855][T21100]  __x64_sys_sendmsg+0x19b/0x260
[  342.430874][T21100]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  342.430896][T21100]  ? rcu_is_watching+0x15/0xb0
[  342.430911][T21100]  ? do_syscall_64+0xbe/0x3b0
[  342.430929][T21100]  do_syscall_64+0xfa/0x3b0
[  342.430947][T21100]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.430963][T21100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.430977][T21100]  ? exc_page_fault+0x9f/0xf0
[  342.430993][T21100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.431016][T21100] RIP: 0033:0x7f84aaf8ebe9
[  342.431031][T21100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.431045][T21100] RSP: 002b:00007f84a91f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.431061][T21100] RAX: ffffffffffffffda RBX: 00007f84ab1b5fa0 RCX: 00007f84aaf8ebe9
[  342.431072][T21100] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  342.431082][T21100] RBP: 00007f84ab011e19 R08: 0000000000000000 R09: 0000000000000000
[  342.431090][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.431099][T21100] R13: 00007f84ab1b6038 R14: 00007f84ab1b5fa0 R15: 00007ffdc6cce308
[  342.431121][T21100]  </TASK>
[  342.431126][T21100] 
[  342.574393][T21100] Allocated by task 18055:
[  342.576175][T21100]  kasan_save_track+0x3e/0x80
[  342.578091][T21100]  __kasan_slab_alloc+0x6c/0x80
[  342.579750][T21100]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  342.581427][T21100]  xfrm_state_alloc+0x24/0x2f0
[  342.583010][T21100]  __find_acq_core+0x8a7/0x1c00
[  342.584552][T21100]  xfrm_find_acq+0x78/0xa0
[  342.586016][T21100]  xfrm_alloc_userspi+0x6b3/0xc90
[  342.587584][T21100]  xfrm_user_rcv_msg+0x7a3/0xab0
[  342.589108][T21100]  netlink_rcv_skb+0x208/0x470
[  342.590597][T21100]  xfrm_netlink_rcv+0x79/0x90
[  342.592109][T21100]  netlink_unicast+0x82f/0x9e0
[  342.593692][T21100]  netlink_sendmsg+0x805/0xb30
[  342.595276][T21100]  __sock_sendmsg+0x21c/0x270
[  342.596828][T21100]  ____sys_sendmsg+0x505/0x830
[  342.598419][T21100]  ___sys_sendmsg+0x21f/0x2a0
[  342.599936][T21100]  __x64_sys_sendmsg+0x19b/0x260
[  342.601661][T21100]  do_syscall_64+0xfa/0x3b0
[  342.603159][T21100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.605030][T21100] 
[  342.605823][T21100] Freed by task 5913:
[  342.607141][T21100]  kasan_save_track+0x3e/0x80
[  342.608634][T21100]  kasan_save_free_info+0x46/0x50
[  342.610262][T21100]  __kasan_slab_free+0x5b/0x80
[  342.611773][T21100]  kmem_cache_free+0x18f/0x400
[  342.613399][T21100]  xfrm_state_gc_task+0x52d/0x6b0
[  342.615332][T21100]  process_scheduled_works+0xae1/0x17b0
[  342.617090][T21100]  worker_thread+0x8a0/0xda0
[  342.618595][T21100]  kthread+0x711/0x8a0
[  342.619924][T21100]  ret_from_fork+0x3fc/0x770
[  342.621428][T21100]  ret_from_fork_asm+0x1a/0x30
[  342.622977][T21100] 
[  342.623780][T21100] The buggy address belongs to the object at ffff88810ece5680
[  342.623780][T21100]  which belongs to the cache xfrm_state of size 928
[  342.628165][T21100] The buggy address is located 196 bytes inside of
[  342.628165][T21100]  freed 928-byte region [ffff88810ece5680, ffff88810ece5a20)
[  342.633145][T21100] 
[  342.633895][T21100] The buggy address belongs to the physical page:
[  342.635847][T21100] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810ece5200 pfn:0x10ece4
[  342.638876][T21100] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  342.641546][T21100] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  342.644193][T21100] page_type: f5(slab)
[  342.645465][T21100] raw: 057ff00000000040 ffff888104e00780 ffffea0000d98500 dead000000000002
[  342.648097][T21100] raw: ffff88810ece5200 00000000000e0000 00000000f5000000 0000000000000000
[  342.651371][T21100] head: 057ff00000000040 ffff888104e00780 ffffea0000d98500 dead000000000002
[  342.654792][T21100] head: ffff88810ece5200 00000000000e0000 00000000f5000000 0000000000000000
[  342.657934][T21100] head: 057ff00000000002 ffffea00043b3901 00000000ffffffff 00000000ffffffff
[  342.660514][T21100] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  342.663052][T21100] page dumped because: kasan: bad access detected
[  342.664980][T21100] page_owner tracks the page as allocated
[  342.666715][T21100] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7876, tgid 7867 (syz.1.835), ts 111657572495, free_ts 111346415332
[  342.672386][T21100]  post_alloc_hook+0x240/0x2a0
[  342.673867][T21100]  get_page_from_freelist+0x21e4/0x22c0
[  342.675636][T21100]  __alloc_frozen_pages_noprof+0x181/0x370
[  342.677697][T21100]  alloc_pages_mpol+0x232/0x4a0
[  342.679653][T21100]  allocate_slab+0x8a/0x370
[  342.681384][T21100]  ___slab_alloc+0xbeb/0x1410
[  342.683062][T21100]  kmem_cache_alloc_noprof+0x283/0x3c0
[  342.684776][T21100]  xfrm_state_alloc+0x24/0x2f0
[  342.686275][T21100]  xfrm_state_find+0x37d4/0x5400
[  342.688122][T21100]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  342.690358][T21100]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  342.692494][T21100]  xfrm_lookup_route+0x3c/0x1c0
[  342.694379][T21100]  udp_sendmsg+0x142e/0x2170
[  342.696173][T21100]  __sock_sendmsg+0x19c/0x270
[  342.698069][T21100]  ____sys_sendmsg+0x52d/0x830
[  342.699658][T21100]  ___sys_sendmsg+0x21f/0x2a0
[  342.701325][T21100] page last free pid 5888 tgid 5888 stack trace:
[  342.703456][T21100]  __free_frozen_pages+0xbc4/0xd30
[  342.705027][T21100]  stack_depot_save_flags+0x436/0x860
[  342.706660][T21100]  ref_tracker_free+0xfe/0x7d0
[  342.708132][T21100]  __sk_destruct+0x568/0x660
[  342.709580][T21100]  rcu_core+0xcab/0x1770
[  342.710998][T21100]  handle_softirqs+0x286/0x870
[  342.712680][T21100]  do_softirq+0xec/0x180
[  342.714020][T21100]  __local_bh_enable_ip+0x17d/0x1c0
[  342.715651][T21100]  rds_tcp_listen_stop+0x11a/0x170
[  342.717086][T21100]  rds_tcp_exit_net+0x107/0x5e0
[  342.718640][T21100]  ops_undo_list+0x49a/0x990
[  342.720282][T21100]  cleanup_net+0x4c5/0x800
[  342.722091][T21100]  process_scheduled_works+0xae1/0x17b0
[  342.723811][T21100]  worker_thread+0x8a0/0xda0
[  342.725293][T21100]  kthread+0x711/0x8a0
[  342.726590][T21100]  ret_from_fork+0x3fc/0x770
[  342.728092][T21100] 
[  342.729056][T21100] Memory state around the buggy address:
[  342.730864][T21100]  ffff88810ece5600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  342.733640][T21100]  ffff88810ece5680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  342.736220][T21100] >ffff88810ece5700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  342.738734][T21100]                                            ^
[  342.740706][T21100]  ffff88810ece5780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  342.743537][T21100]  ffff88810ece5800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  342.745995][T21100] ==================================================================
[  342.748492][T21100] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  342.750683][T21100] CPU: 0 UID: 0 PID: 21100 Comm: syz.1.6633 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  342.754715][T21100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.758534][T21100] Call Trace:
[  342.759674][T21100]  <TASK>
[  342.760648][T21100]  dump_stack_lvl+0x99/0x250
[  342.762327][T21100]  ? __asan_memcpy+0x40/0x70
[  342.763969][T21100]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.765623][T21100]  ? __pfx__printk+0x10/0x10
[  342.767052][T21100]  vpanic+0x281/0x750
[  342.768356][T21100]  ? __pfx_vpanic+0x10/0x10
[  342.769869][T21100]  ? irqentry_exit+0x74/0x90
[  342.771273][T21100]  panic+0xb9/0xc0
[  342.772633][T21100]  ? __pfx_panic+0x10/0x10
[  342.774238][T21100]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  342.776176][T21100]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  342.777993][T21100]  ? xfrm_alloc_spi+0x570/0xf30
[  342.779743][T21100]  check_panic_on_warn+0x89/0xb0
[  342.781346][T21100]  ? xfrm_alloc_spi+0x570/0xf30
[  342.783022][T21100]  end_report+0x78/0x160
[  342.784388][T21100]  kasan_report+0x129/0x150
[  342.785882][T21100]  ? xfrm_alloc_spi+0x570/0xf30
[  342.787463][T21100]  xfrm_alloc_spi+0x570/0xf30
[  342.788986][T21100]  ? xfrm_alloc_spi+0x2a0/0xf30
[  342.790581][T21100]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  342.792293][T21100]  ? xfrm_find_acq+0x87/0xa0
[  342.794043][T21100]  xfrm_alloc_userspi+0x70b/0xc90
[  342.795715][T21100]  ? apparmor_capable+0x137/0x1b0
[  342.797277][T21100]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  342.799278][T21100]  ? __nla_parse+0x40/0x60
[  342.800961][T21100]  xfrm_user_rcv_msg+0x7a3/0xab0
[  342.802517][T21100]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  342.804186][T21100]  ? __pfx___mutex_trylock_common+0x10/0x10
[  342.806039][T21100]  ? rcu_is_watching+0x15/0xb0
[  342.807543][T21100]  ? trace_contention_end+0x39/0x120
[  342.809149][T21100]  ? __mutex_lock+0x335/0x1360
[  342.810773][T21100]  netlink_rcv_skb+0x208/0x470
[  342.812471][T21100]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  342.814401][T21100]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.816135][T21100]  ? netlink_deliver_tap+0x2e/0x1b0
[  342.817757][T21100]  ? netlink_deliver_tap+0x2e/0x1b0
[  342.819465][T21100]  xfrm_netlink_rcv+0x79/0x90
[  342.820988][T21100]  netlink_unicast+0x82f/0x9e0
[  342.822689][T21100]  ? __pfx_netlink_unicast+0x10/0x10
[  342.824474][T21100]  ? netlink_sendmsg+0x642/0xb30
[  342.826366][T21100]  ? skb_put+0x11b/0x210
[  342.828108][T21100]  netlink_sendmsg+0x805/0xb30
[  342.829986][T21100]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.831959][T21100]  ? aa_sock_msg_perm+0xf1/0x1d0
[  342.833851][T21100]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  342.835560][T21100]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.837331][T21100]  __sock_sendmsg+0x21c/0x270
[  342.839014][T21100]  ____sys_sendmsg+0x505/0x830
[  342.840603][T21100]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.842322][T21100]  ? import_iovec+0x74/0xa0
[  342.843847][T21100]  ___sys_sendmsg+0x21f/0x2a0
[  342.845578][T21100]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.847465][T21100]  ? __fget_files+0x2a/0x420
[  342.849019][T21100]  ? __fget_files+0x3a0/0x420
[  342.850821][T21100]  __x64_sys_sendmsg+0x19b/0x260
[  342.852392][T21100]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  342.854406][T21100]  ? rcu_is_watching+0x15/0xb0
[  342.856071][T21100]  ? do_syscall_64+0xbe/0x3b0
[  342.857725][T21100]  do_syscall_64+0xfa/0x3b0
[  342.859123][T21100]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.860757][T21100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.862587][T21100]  ? exc_page_fault+0x9f/0xf0
[  342.864097][T21100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.866188][T21100] RIP: 0033:0x7f84aaf8ebe9
[  342.867795][T21100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.874191][T21100] RSP: 002b:00007f84a91f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.876870][T21100] RAX: ffffffffffffffda RBX: 00007f84ab1b5fa0 RCX: 00007f84aaf8ebe9
[  342.879187][T21100] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  342.881708][T21100] RBP: 00007f84ab011e19 R08: 0000000000000000 R09: 0000000000000000
[  342.884282][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.886831][T21100] R13: 00007f84ab1b6038 R14: 00007f84ab1b5fa0 R15: 00007ffdc6cce308
[  342.889615][T21100]  </TASK>
[  342.891217][T21100] Kernel Offset: disabled
[  342.892730][T21100] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:20:24  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000011f7 RDI=00000000000011f8 RBP=00000000000003f8 RSP=ffffc9000787e9f0
R8 =ffff8881087d0237 R9 =1ffff110210fa046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4912 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f84a91f66c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000580 CR3=0000000049d46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f84ab187498 00007f84ab187470 XMM03=00007f84ab1874a8 00007f84ab1874a0
XMM04=00007f84abced100 00007f84ab187460 XMM05=00007f84ab187478 00007f84ab1874c0
XMM06=00007f84ab1874b8 00007f84ab1874b0 XMM07=00007f84ab1874a8 00007f84ab1874a0
XMM08=0000000000000000 00007f84ab012ee7 XMM09=0000000000000000 00007f84ab012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00007fbeb6983270 RBX=00007fbeb69831b0 RCX=ffffffff825d2cda RDX=ffffffff825d2cda
RSI=ffffffff825d2cda RDI=00007fbeb69833f0 RBP=00007fbeb6983038 RSP=00007ffe378d2c00
R8 =00007fbeb6983210 R9 =00007fbeb6fa2000 R10=00007fbeb67ff008 R11=000000000000000b
R12=00007fbeb6983030 R13=0000000000000017 R14=00007ffe378d2e48 R15=00007fbeb67ff008
RIP=00007fbeb6c68035 RFL=00000283 [--S---C] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555580669500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3450dff8 CR3=0000000041949000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff825d2cda ffffffff825d2cda XMM01=ffffffff825d2cda ffffffff825d2cda
XMM02=ffffffff89572bd9 ffffffff825d2cda XMM03=ffffffff823c7954 ffffffff823c77ed
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fbeb6e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
