last executing test programs:

1.028927094s ago: executing program 1 (id=4641):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x21)

968.090125ms ago: executing program 1 (id=4642):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000680)="3e951bb4", 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0)

838.411482ms ago: executing program 1 (id=4646):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)='Xn', 0x2}], 0x2}}], 0x1, 0x8084)

795.623997ms ago: executing program 1 (id=4648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0xf6}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x68, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @md5sig={0x13, 0x12, "4c4b87e502f4faa38d629a87cca98bf0"}, @fastopen={0x22, 0xe, "5e2a264473053c8d6ef98c0c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x0]}, @sack={0x5, 0xe, [0x8, 0x7ff, 0x101]}]}}}}}}}}, 0x7a)

627.200051ms ago: executing program 1 (id=4656):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x19, @remote, 'vlan1\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e)

573.737731ms ago: executing program 1 (id=4660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r2, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x80002, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6)

428.109476ms ago: executing program 2 (id=4664):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x60}}, 0x0)

427.444869ms ago: executing program 2 (id=4665):
r0 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)

359.419533ms ago: executing program 2 (id=4667):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x430, 0x238, 0x0, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdda27f907a03732da3acbc650000010000000000f9d2f413b94a105f4bdf01425ce81c5d000000020000000500fffffffffcffffff00"}}}, {{@arp={@private, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 'wg2\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5cc9, 'syz0\x00', {0x8}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="fefaaf180786", @empty, @multicast1, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)

358.856549ms ago: executing program 2 (id=4669):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x88000008, 0x6}, 0x4}}]}, {0x2}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0)

259.075356ms ago: executing program 2 (id=4670):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124", 0x12}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

258.601684ms ago: executing program 0 (id=4672):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000240)='\x0f\x82.\xd3\b*\xf8\xcau\xb5\xc9\xdb\x1fL\xba\xf5\xb2d\xbc\xf6y\xe6$?j\x95\xa4{\xcbw\xd3 v\xd2\x8f\x1d\x89\x9e\xb2\xa3k\xc6}\xce\xec\xee\x1bb\x8f\x18P\x1c\xa5]\x12x\x99T\xb5B#\xe4L\rb\x85g7\xac\xc2\v\xdcWV\xc3\xb1!\xdc\xf4\xae\x97\xb8\xa5\xf6\x14\xed5\xfe\x83\xb1\xc2\xe17\x8b\x14\n\xaa+()\x81\x885d:T\xa0\"\x02\xce\xa6\xf1O\x1a\xe7C\xde\xdfr^\xa6_\x04\x00\x00\x00\x00\x00\x00\x00\xa7\x00'/146, 0x92)

158.555086ms ago: executing program 0 (id=4673):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011)
recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1}, 0x3}], 0x1, 0x40000060, 0x0)

158.324349ms ago: executing program 0 (id=4674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="30000000040601040000000000000000030000050500010007000000050001"], 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)

108.524459ms ago: executing program 0 (id=4675):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x3a, {0x2, 0x4e21, @broadcast}, 'xfrm0\x00'})

108.290318ms ago: executing program 0 (id=4676):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x24, 0x0, &(0x7f0000000000))

3.434639ms ago: executing program 0 (id=4677):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x0, 0x0})

0s ago: executing program 2 (id=4678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0xa428a332fa3ee95f, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61253' (ED25519) to the list of known hosts.
syzkaller login: [   55.972715][ T5754] cgroup: Unknown subsys name 'net'
[   56.103743][ T5754] cgroup: Unknown subsys name 'cpuset'
[   56.108331][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.595415][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.234287][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.237038][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   72.437217][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.452068][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.455786][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.460735][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.463983][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.467116][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.471547][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.473464][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.475566][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.481724][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.485607][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.488908][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.493021][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.497776][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.502006][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.945626][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   73.021023][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   73.071632][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   73.099314][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.102565][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.104852][ T5863] bridge_slave_0: entered allmulticast mode
[   73.108733][ T5863] bridge_slave_0: entered promiscuous mode
[   73.120427][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.123284][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.125801][ T5863] bridge_slave_1: entered allmulticast mode
[   73.128673][ T5863] bridge_slave_1: entered promiscuous mode
[   73.216356][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.231728][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.296752][ T5863] team0: Port device team_slave_0 added
[   73.299324][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.302707][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.304909][ T5860] bridge_slave_0: entered allmulticast mode
[   73.307587][ T5860] bridge_slave_0: entered promiscuous mode
[   73.324096][ T5863] team0: Port device team_slave_1 added
[   73.326431][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.329384][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.333135][ T5860] bridge_slave_1: entered allmulticast mode
[   73.336750][ T5860] bridge_slave_1: entered promiscuous mode
[   73.339827][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.344950][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.347858][ T5866] bridge_slave_0: entered allmulticast mode
[   73.352267][ T5866] bridge_slave_0: entered promiscuous mode
[   73.356912][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.359639][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.365173][ T5866] bridge_slave_1: entered allmulticast mode
[   73.368961][ T5866] bridge_slave_1: entered promiscuous mode
[   73.453578][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.458025][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.462033][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.472655][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.483331][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.490349][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.508961][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.512036][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.521863][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.528572][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.574070][ T5866] team0: Port device team_slave_0 added
[   73.591560][ T5860] team0: Port device team_slave_0 added
[   73.595882][ T5866] team0: Port device team_slave_1 added
[   73.601307][ T5860] team0: Port device team_slave_1 added
[   73.645507][ T5863] hsr_slave_0: entered promiscuous mode
[   73.649025][ T5863] hsr_slave_1: entered promiscuous mode
[   73.679287][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.682660][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.690604][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.695213][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.697300][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.704997][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.708828][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.711536][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.719240][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.752008][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.754557][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.763191][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.875171][ T5866] hsr_slave_0: entered promiscuous mode
[   73.878316][ T5866] hsr_slave_1: entered promiscuous mode
[   73.883971][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.887154][ T5866] Cannot create hsr debugfs directory
[   73.896608][ T5860] hsr_slave_0: entered promiscuous mode
[   73.900000][ T5860] hsr_slave_1: entered promiscuous mode
[   73.903611][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.906466][ T5860] Cannot create hsr debugfs directory
[   74.129282][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.145252][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.173963][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.187228][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.267235][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.275501][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.282592][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.289663][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.372687][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.378823][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.386854][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.398534][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.512158][   T54] Bluetooth: hci0: command tx timeout
[   74.518309][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.549748][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.564940][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   74.585774][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.588199][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.591815][   T54] Bluetooth: hci2: command tx timeout
[   74.591905][ T5864] Bluetooth: hci1: command tx timeout
[   74.604347][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   74.618216][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.620624][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.632885][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.635503][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.656223][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.674733][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.677599][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.727013][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   74.758510][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.761739][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.783508][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.786231][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.993494][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.052732][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.077818][ T5863] veth0_vlan: entered promiscuous mode
[   75.085073][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.099698][ T5863] veth1_vlan: entered promiscuous mode
[   75.147768][ T5866] veth0_vlan: entered promiscuous mode
[   75.166063][ T5866] veth1_vlan: entered promiscuous mode
[   75.176647][ T5863] veth0_macvtap: entered promiscuous mode
[   75.180279][ T5860] veth0_vlan: entered promiscuous mode
[   75.189337][ T5863] veth1_macvtap: entered promiscuous mode
[   75.198535][ T5860] veth1_vlan: entered promiscuous mode
[   75.235767][ T5866] veth0_macvtap: entered promiscuous mode
[   75.247327][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.253543][ T5866] veth1_macvtap: entered promiscuous mode
[   75.269054][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.293811][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.297403][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.301727][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.304660][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.313656][ T5860] veth0_macvtap: entered promiscuous mode
[   75.318418][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.333609][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.338120][ T5860] veth1_macvtap: entered promiscuous mode
[   75.354422][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.357770][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.365412][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.368739][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.449169][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.492053][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.514142][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.517221][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.528043][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.534534][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.537857][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.541823][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.599022][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.603254][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.650284][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.661861][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.730142][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.740048][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.742581][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.799130][ T1935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.810806][ T1935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.872033][ T1935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.881295][ T1935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.088130][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'.
[   76.134135][ T5940] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[   76.425505][ T5953] IPVS: persistence engine module ip_vs_pe_ not found
[   76.592002][ T5864] Bluetooth: hci0: command tx timeout
[   76.616379][ T5963] syzkaller1: entered promiscuous mode
[   76.618648][ T5963] syzkaller1: entered allmulticast mode
[   76.672493][ T5864] Bluetooth: hci1: command tx timeout
[   76.673286][   T54] Bluetooth: hci2: command tx timeout
[   76.707203][ T5972] netlink: 87 bytes leftover after parsing attributes in process `syz.0.37'.
[   76.713998][ T5966] "syz.1.35" (5966) uses obsolete ecb(arc4) skcipher
[   76.761568][ T5976] netlink: 'syz.0.38': attribute type 1 has an invalid length.
[   77.644916][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.928820][ T6026] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   78.051916][ T6033] netlink: 'syz.0.60': attribute type 1 has an invalid length.
[   78.494002][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   78.572817][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   78.578248][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   78.588009][ T6076] Zero length message leads to an empty skb
[   78.604068][ T6078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.80'.
[   78.671827][   T54] Bluetooth: hci0: command tx timeout
[   78.753473][   T54] Bluetooth: hci2: command tx timeout
[   78.761544][   T54] Bluetooth: hci1: command tx timeout
[   79.400347][ T6116] netlink: 704 bytes leftover after parsing attributes in process `syz.0.96'.
[   79.751443][ T6138] ieee802154 phy0 wpan0: encryption failed: -22
[   80.269253][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.114'.
[   80.276976][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.114'.
[   80.763721][   T54] Bluetooth: hci0: command tx timeout
[   80.833098][   T54] Bluetooth: hci1: command tx timeout
[   80.835365][   T54] Bluetooth: hci2: command tx timeout
[   80.959757][ T6243] netlink: 'syz.0.124': attribute type 21 has an invalid length.
[   80.964303][ T6243] netlink: 'syz.0.124': attribute type 1 has an invalid length.
[   80.966809][ T6243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.124'.
[   81.065687][ T6247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.125'.
[   81.095768][ T6247] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   81.099660][ T6247] gretap1: entered promiscuous mode
[   81.119689][ T6247] gretap1: entered allmulticast mode
[   81.292644][ T6255] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   81.397485][ T6261] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.097852][ T6301] __nla_validate_parse: 1 callbacks suppressed
[   82.097870][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   82.109581][ T6301] netlink: 52 bytes leftover after parsing attributes in process `syz.2.142'.
[   82.143467][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[   82.360225][ T6324] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   82.377579][ T6324] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   82.523947][ T6336] syz.2.154 uses obsolete (PF_INET,SOCK_PACKET)
[   83.180001][ T6373] netlink: 'syz.0.169': attribute type 83 has an invalid length.
[   83.624727][ T6404] vlan2: entered promiscuous mode
[   83.627794][ T6404] vlan2: entered allmulticast mode
[   83.630196][ T6404] hsr_slave_1: entered allmulticast mode
[   83.744817][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   84.034387][ T6424] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.469837][ T6452] tipc: Started in network mode
[   84.473152][ T6452] tipc: Node identity 0ade2e17dadd, cluster identity 4711
[   84.481528][ T6452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.491863][ T6452] syzkaller0: entered promiscuous mode
[   84.493381][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'.
[   84.494074][ T6452] syzkaller0: entered allmulticast mode
[   84.531899][ T6452] tipc: Resetting bearer <eth:syzkaller0>
[   84.538198][ T6450] tipc: Resetting bearer <eth:syzkaller0>
[   84.558880][ T6458] netlink: 212 bytes leftover after parsing attributes in process `syz.1.208'.
[   84.566638][ T6458] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[   84.567470][ T6450] tipc: Disabling bearer <eth:syzkaller0>
[   85.276508][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   86.232804][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'.
[   86.472410][ T6549] netlink: 452 bytes leftover after parsing attributes in process `syz.1.246'.
[   86.598740][   T10] cfg80211: failed to load regulatory.db
[   87.442054][ T6570] lo: entered promiscuous mode
[   87.451593][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   87.761042][ T6592] netlink: 'syz.1.261': attribute type 21 has an invalid length.
[   87.763987][ T6592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'.
[   87.798488][ T6569] lo: left promiscuous mode
[   87.920763][ T6600] netlink: 'syz.0.266': attribute type 4 has an invalid length.
[   88.185463][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'.
[   88.207376][ T6629] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   88.219312][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[   88.232451][ T6631] netlink: 'syz.0.281': attribute type 1 has an invalid length.
[   88.236040][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'.
[   88.672031][ T6659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.293'.
[   88.930828][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'.
[   88.934373][ T6678] netlink: 152 bytes leftover after parsing attributes in process `syz.0.300'.
[   89.028061][ T6682] netlink: 248 bytes leftover after parsing attributes in process `syz.0.302'.
[   89.174227][ T6689] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   89.883078][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'.
[   90.688235][ T6779] trusted_key: syz.2.335 sent an empty control message without MSG_MORE.
[   90.809052][ T6792] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   90.973787][ T6796] syzkaller0: entered promiscuous mode
[   90.976032][ T6796] syzkaller0: entered allmulticast mode
[   91.342249][ T6822] netlink: 'syz.0.355': attribute type 5 has an invalid length.
[   92.320804][ T6817] syz_tun: entered promiscuous mode
[   92.337888][ T6822] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   92.350931][ T6822] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   92.354490][ T6822] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   92.358069][ T6822] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   92.363908][ T6822] geneve2: entered promiscuous mode
[   92.366074][ T6822] geneve2: entered allmulticast mode
[   92.626226][ T6841] syz.2.363 uses old SIOCAX25GETINFO
[   92.708571][ T6845] __nla_validate_parse: 6 callbacks suppressed
[   92.708594][ T6845] netlink: 1 bytes leftover after parsing attributes in process `syz.2.365'.
[   93.298579][ T6884] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   93.368820][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'.
[   93.378672][ T6888] vlan2: entered promiscuous mode
[   93.380429][ T6888] team0: entered promiscuous mode
[   93.385382][ T6888] team_slave_0: entered promiscuous mode
[   93.388070][ T6888] team_slave_1: entered promiscuous mode
[   93.638562][ T6906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.395'.
[   93.692097][ T6910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.695459][ T6910] batadv_slave_1: entered promiscuous mode
[   93.700224][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[   93.963856][ T6923] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   94.028077][ T6925] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   94.031832][ T6925] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   94.155840][ T6921] infiniband syz0: set down
[   94.158235][ T6921] infiniband syz0: added ipvlan1
[   94.221049][ T6921] RDS/IB: syz0: added
[   94.226652][ T6921] smc: adding ib device syz0 with port count 1
[   94.229467][ T6921] smc:    ib device syz0 port 1 has pnetid 
[   94.371168][  T790] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   94.435991][ T6941] netlink: 'syz.0.411': attribute type 15 has an invalid length.
[   94.449882][ T6941] netlink: 666 bytes leftover after parsing attributes in process `syz.0.411'.
[   94.559490][ T6946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.413'.
[   94.570726][ T6946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.413'.
[   94.575112][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'.
[   94.846970][ T5926] IPVS: starting estimator thread 0...
[   94.930758][ T6959] IPVS: using max 54 ests per chain, 129600 per kthread
[   95.019149][ T6967] netlink: 9 bytes leftover after parsing attributes in process `syz.1.423'.
[   95.044441][ T6967] gretap0: entered promiscuous mode
[   95.222543][ T6972] syz.0.424 (6972) used greatest stack depth: 19928 bytes left
[   95.531394][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'.
[   96.431138][ T7046] tipc: Started in network mode
[   96.433063][ T7046] tipc: Node identity cadcf8403571, cluster identity 4711
[   96.435509][ T7046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.438696][ T7046] syzkaller0: entered promiscuous mode
[   96.441711][ T7046] syzkaller0: entered allmulticast mode
[   96.461182][ T7046] tipc: Resetting bearer <eth:syzkaller0>
[   96.478915][ T7045] tipc: Resetting bearer <eth:syzkaller0>
[   96.499561][ T7045] tipc: Disabling bearer <eth:syzkaller0>
[   96.908843][ T7082] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   97.719681][ T7139] __nla_validate_parse: 6 callbacks suppressed
[   97.719699][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.501'.
[   97.992155][ T7165] netlink: 'syz.0.514': attribute type 5 has an invalid length.
[   98.393690][ T7191] netlink: 'syz.0.526': attribute type 46 has an invalid length.
[   98.468224][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'.
[   98.472825][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[   98.475926][ T7195] netlink: 'syz.0.528': attribute type 7 has an invalid length.
[   98.697006][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[   98.779550][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'.
[   99.283167][ T7240] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  100.092489][ T7287] netlink: 'syz.0.571': attribute type 4 has an invalid length.
[  100.117271][ T7287] netlink: 'syz.0.571': attribute type 4 has an invalid length.
[  100.301309][ T7308] ipvlan2: entered promiscuous mode
[  100.305514][ T7308] bridge0: port 3(ipvlan2) entered blocking state
[  100.308268][ T7308] bridge0: port 3(ipvlan2) entered disabled state
[  100.314367][ T7308] ipvlan2: entered allmulticast mode
[  100.316513][ T7308] bridge0: entered allmulticast mode
[  100.321086][ T7308] ipvlan2: left allmulticast mode
[  100.324855][ T7308] bridge0: left allmulticast mode
[  100.591876][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[  100.595412][ T7333] netlink: 'syz.2.594': attribute type 14 has an invalid length.
[  100.604683][ T7333] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.608218][ T7333] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.611878][ T7333] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.615231][ T7333] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.625130][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[  100.628596][ T7333] netlink: 'syz.2.594': attribute type 14 has an invalid length.
[  100.838717][ T7351] syzkaller1: entered promiscuous mode
[  100.842937][ T7351] syzkaller1: entered allmulticast mode
[  101.153944][ T7380] netlink: 'syz.0.617': attribute type 83 has an invalid length.
[  101.586321][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  101.589695][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'.
[  101.593333][ T7420] netlink: 'syz.0.637': attribute type 20 has an invalid length.
[  101.596605][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  101.611093][ T7420] netlink: 'syz.0.637': attribute type 20 has an invalid length.
[  101.688266][ T7429] siw: device registration error -23
[  102.023086][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.026835][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.909847][ T7462] __nla_validate_parse: 1 callbacks suppressed
[  102.909859][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'.
[  102.929269][ T7462] batadv0: entered promiscuous mode
[  102.938259][ T7462] macvtap1: entered promiscuous mode
[  102.943681][ T7462] macvtap1: entered allmulticast mode
[  102.946040][ T7462] batadv0: entered allmulticast mode
[  102.949221][ T7462] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  102.962357][ T7462] batadv0: left allmulticast mode
[  102.964827][ T7462] batadv0: left promiscuous mode
[  102.990883][ T7468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.653'.
[  103.000629][ T7468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.653'.
[  103.477635][ T7498] netlink: 'syz.0.666': attribute type 13 has an invalid length.
[  103.484475][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'.
[  103.536711][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.667'.
[  103.950290][ T7510] netlink: 'syz.2.672': attribute type 4 has an invalid length.
[  103.957484][ T7483] netlink: 'syz.1.661': attribute type 6 has an invalid length.
[  104.030252][ T7516] netlink: 64 bytes leftover after parsing attributes in process `syz.0.673'.
[  104.052703][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'.
[  104.059159][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'.
[  104.082353][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'.
[  104.117983][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'.
[  104.506713][ T7529] "syz.1.679" (7529) uses obsolete ecb(arc4) skcipher
[  105.329954][ T7570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.345213][ T7570] syzkaller0: entered promiscuous mode
[  105.347372][ T7570] syzkaller0: entered allmulticast mode
[  105.376638][ T7570] tipc: Resetting bearer <eth:syzkaller0>
[  105.388835][ T7572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.394670][ T7568] tipc: Resetting bearer <eth:syzkaller0>
[  105.410405][ T7568] tipc: Disabling bearer <eth:syzkaller0>
[  105.422111][ T7572] syzkaller0: entered promiscuous mode
[  105.427788][ T7572] syzkaller0: entered allmulticast mode
[  105.444841][ T7577] macvtap0: refused to change device tx_queue_len
[  105.447241][ T7577] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  105.457153][ T7572] tipc: Resetting bearer <eth:syzkaller0>
[  105.464429][ T7571] tipc: Resetting bearer <eth:syzkaller0>
[  105.491355][ T7571] tipc: Disabling bearer <eth:syzkaller0>
[  105.500000][ T7579] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  106.610049][   T33] audit: type=1800 audit(1753656484.403:2): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.716" name="cgroup.controllers" dev="tmpfs" ino=1124 res=0 errno=0
[  106.704243][ T7627] validate_nla: 2 callbacks suppressed
[  106.704279][ T7627] netlink: 'syz.0.718': attribute type 35 has an invalid length.
[  106.863338][ T7635] tun0: tun_chr_ioctl cmd 2147767520
[  106.974660][ T7642] netlink: 'syz.1.724': attribute type 16 has an invalid length.
[  106.976926][ T7643] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  106.977758][ T7642] netlink: 'syz.1.724': attribute type 17 has an invalid length.
[  107.079685][ T7646] IPv6: NLM_F_REPLACE set, but no existing node found!
[  107.085776][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.089654][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.295649][ T7642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.427606][ T7642] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.430908][ T7642] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.434430][ T7642] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.437752][ T7642] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.652386][ T7653] dvmrp8: entered allmulticast mode
[  107.711972][ T7649] dvmrp8: left allmulticast mode
[  108.066930][ T7675] GUP no longer grows the stack in syz.2.739 (7675): 200000002000-20000000a000 (200000001000)
[  108.073640][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.2.739 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  108.073667][ T7675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.073678][ T7675] Call Trace:
[  108.073687][ T7675]  <TASK>
[  108.073717][ T7675]  dump_stack_lvl+0x189/0x250
[  108.073748][ T7675]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.073770][ T7675]  ? __pfx__printk+0x10/0x10
[  108.073814][ T7675]  ? find_vma+0xe7/0x160
[  108.073848][ T7675]  __get_user_pages+0x2a60/0x30b0
[  108.073906][ T7675]  ? __pfx___get_user_pages+0x10/0x10
[  108.073934][ T7675]  __gup_longterm_locked+0xd66/0x15b0
[  108.073963][ T7675]  ? try_grab_folio_fast+0x35b/0x4f0
[  108.073987][ T7675]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  108.074013][ T7675]  gup_fast_fallback+0x1cd4/0x2260
[  108.074060][ T7675]  ? __pfx_gup_fast_fallback+0x10/0x10
[  108.074082][ T7675]  ? stack_depot_save_flags+0x429/0x900
[  108.074105][ T7675]  ? pin_user_pages_fast+0x4d/0xb0
[  108.074127][ T7675]  iov_iter_extract_pages+0x35a/0x5e0
[  108.074156][ T7675]  extract_iter_to_sg+0xe46/0x24e0
[  108.074188][ T7675]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  108.074219][ T7675]  ? __asan_memset+0x22/0x50
[  108.074240][ T7675]  af_alg_get_rsgl+0x436/0x810
[  108.074271][ T7675]  aead_recvmsg+0x4cc/0x13f0
[  108.074298][ T7675]  ? rcu_is_watching+0x15/0xb0
[  108.074324][ T7675]  ? __pfx_aead_recvmsg+0x10/0x10
[  108.074345][ T7675]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  108.074364][ T7675]  ? __pfx_aead_recvmsg+0x10/0x10
[  108.074388][ T7675]  sock_recvmsg_nosec+0x186/0x1c0
[  108.074411][ T7675]  ____sys_recvmsg+0x3aa/0x460
[  108.074442][ T7675]  ? __pfx_____sys_recvmsg+0x10/0x10
[  108.074470][ T7675]  ? import_iovec+0x74/0xa0
[  108.074488][ T7675]  ___sys_recvmsg+0x1b5/0x510
[  108.074510][ T7675]  ? __pfx____sys_recvmsg+0x10/0x10
[  108.074555][ T7675]  ? __might_fault+0xb0/0x130
[  108.074579][ T7675]  do_recvmmsg+0x307/0x770
[  108.074600][ T7675]  ? __pfx_do_recvmmsg+0x10/0x10
[  108.074611][ T7675]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  108.074634][ T7675]  ? __pfx_do_futex+0x10/0x10
[  108.074666][ T7675]  __x64_sys_recvmmsg+0x190/0x240
[  108.074683][ T7675]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  108.074693][ T7675]  ? rcu_is_watching+0x15/0xb0
[  108.074711][ T7675]  ? do_syscall_64+0xbe/0x3b0
[  108.074731][ T7675]  do_syscall_64+0xfa/0x3b0
[  108.074746][ T7675]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.074760][ T7675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.074775][ T7675]  ? exc_page_fault+0x9f/0xf0
[  108.074827][ T7675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.074841][ T7675] RIP: 0033:0x7f9e5ed8e9a9
[  108.074856][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.074869][ T7675] RSP: 002b:00007f9e5fc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  108.074894][ T7675] RAX: ffffffffffffffda RBX: 00007f9e5efb5fa0 RCX: 00007f9e5ed8e9a9
[  108.074905][ T7675] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[  108.074914][ T7675] RBP: 00007f9e5ee10d69 R08: 0000000000000000 R09: 0000000000000000
[  108.074923][ T7675] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  108.074933][ T7675] R13: 0000000000000000 R14: 00007f9e5efb5fa0 R15: 00007ffe6b7ff398
[  108.074956][ T7675]  </TASK>
[  108.218737][   T33] audit: type=1804 audit(1753656486.013:3): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.739" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1198 res=1 errno=0
[  108.229172][   T33] audit: type=1800 audit(1753656486.013:4): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.739" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1198 res=0 errno=0
[  109.077433][ T7721] macvlan1: entered promiscuous mode
[  109.083752][ T7721] ipvlan0: entered promiscuous mode
[  109.087353][ T7721] ipvlan0: left promiscuous mode
[  109.089913][ T7721] macvlan1: left promiscuous mode
[  109.281517][ T7727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.991852][ T7768] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  110.113901][ T7780] netlink: 'syz.1.786': attribute type 1 has an invalid length.
[  110.269924][ T7793] block nbd0: not configured, cannot reconfigure
[  110.309288][ T7796] __nla_validate_parse: 9 callbacks suppressed
[  110.309310][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'.
[  110.738918][ T7833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.762231][ T7831] block nbd0: server does not support multiple connections per device.
[  110.773210][ T7831] block nbd0: shutting down sockets
[  111.014878][ T7857] netlink: 'syz.2.824': attribute type 12 has an invalid length.
[  111.085044][ T7865] netlink: 'syz.1.828': attribute type 1 has an invalid length.
[  111.161846][ T7865] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  111.198863][ T7865] veth3: entered promiscuous mode
[  111.212411][ T7865] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  111.229386][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.828'.
[  111.238582][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  111.239595][ T7865] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.339896][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  111.361956][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  111.407110][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'.
[  111.499092][ T7875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.504895][ T7875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.194263][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.834'.
[  112.373229][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  112.399723][ T7897] bridge0: entered promiscuous mode
[  112.423511][ T7897] bridge0: left promiscuous mode
[  112.666876][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'.
[  112.706838][ T7916] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  112.850422][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'.
[  112.856610][ T7926] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.851'.
[  112.859880][ T7924] vlan2: entered promiscuous mode
[  112.944201][ T7930] netlink: 'syz.2.853': attribute type 6 has an invalid length.
[  113.197781][ T7946] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.861'.
[  113.655888][ T7972] Bluetooth: MGMT ver 1.23
[  113.659152][ T7968] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  114.088314][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.091605][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.862303][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.075933][ T8056] rdma_rxe: rxe_newlink: failed to add lo
[  115.085995][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.088666][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.092710][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.095437][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.112840][ T8056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.144914][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.185185][ T8060] netlink: 'syz.2.912': attribute type 5 has an invalid length.
[  115.250216][ T8064] netlink: 'syz.2.914': attribute type 13 has an invalid length.
[  115.337718][ T8068] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  115.432044][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.710772][ T5864] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  115.871484][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.923520][ T8092] __nla_validate_parse: 2 callbacks suppressed
[  115.923542][ T8092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.927'.
[  115.929490][ T8092] netlink: 48 bytes leftover after parsing attributes in process `syz.2.927'.
[  115.935089][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'.
[  116.116227][ T8101] bridge_slave_0: left allmulticast mode
[  116.122607][ T8101] bridge_slave_0: left promiscuous mode
[  116.125056][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.136310][ T8101] bridge_slave_1: left allmulticast mode
[  116.138578][ T8101] bridge_slave_1: left promiscuous mode
[  116.143211][ T8105] netlink: 'syz.0.932': attribute type 3 has an invalid length.
[  116.157741][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.183104][ T8101] bond0: (slave bond_slave_0): Releasing backup interface
[  116.193661][ T8101] bond0: (slave bond_slave_1): Releasing backup interface
[  116.211566][ T8101] team0: Port device team_slave_0 removed
[  116.215228][ T8101] team0: Port device team_slave_1 removed
[  116.217343][ T8101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.234405][ T8101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.260893][ T8101] bond1: (slave ip6gretap1): Removing an active aggregator
[  116.268340][ T8101] bond1: (slave ip6gretap1): Releasing backup interface
[  116.273041][ T8101] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ce:39:16:d0:41:54 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  116.287642][ T8101] bond1: (slave veth3): Releasing backup interface
[  116.305941][ T8108] team0: Mode changed to "activebackup"
[  116.316536][ T8113] vlan0: entered promiscuous mode
[  116.323501][ T8118] tipc: Started in network mode
[  116.325596][ T8118] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  116.328698][ T8118] tipc: Enabled bearer <eth:team0>, priority 0
[  116.336097][ T8116] pim6reg1: entered promiscuous mode
[  116.340695][ T8116] pim6reg1: entered allmulticast mode
[  116.523116][ T8128] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  116.698368][ T8140] netlink: 'syz.2.947': attribute type 1 has an invalid length.
[  116.913334][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.940804][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.995548][ T8148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.012305][ T8148] syzkaller0: entered promiscuous mode
[  117.021539][ T8148] syzkaller0: entered allmulticast mode
[  117.087365][ T8148] tipc: Resetting bearer <eth:syzkaller0>
[  117.123989][ T8147] tipc: Resetting bearer <eth:syzkaller0>
[  117.164462][ T8147] tipc: Disabling bearer <eth:syzkaller0>
[  117.231773][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'.
[  117.263476][ T8152] geneve2: entered promiscuous mode
[  117.265519][ T8152] geneve2: entered allmulticast mode
[  117.365766][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'.
[  117.456195][ T5926] tipc: Node number set to 11578026
[  117.628787][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'.
[  117.630822][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  118.027854][ T8188] bridge_slave_0: left allmulticast mode
[  118.032727][ T8188] bridge_slave_0: left promiscuous mode
[  118.033905][ T8190] netlink: 272 bytes leftover after parsing attributes in process `syz.0.969'.
[  118.035211][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.057110][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  118.074859][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.075561][ T8188] bridge_slave_1: left allmulticast mode
[  118.081854][ T8188] bridge_slave_1: left promiscuous mode
[  118.084761][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.114200][ T8188] bond0: (slave bond_slave_0): Releasing backup interface
[  118.123132][ T8188] bond0: (slave bond_slave_1): Releasing backup interface
[  118.147740][ T8188] team0: Port device team_slave_0 removed
[  118.158993][ T8188] team0: Port device team_slave_1 removed
[  118.162569][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.165374][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.169566][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.173253][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.197236][ T8191] bridge0: entered promiscuous mode
[  118.400870][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  118.738223][ T8228] netlink: 204 bytes leftover after parsing attributes in process `syz.0.985'.
[  118.836290][ T8237] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  119.784063][ T8282] smc: net device bond0 applied user defined pnetid SYZ2
[  119.787024][ T8282] smc: net device bond0 erased user defined pnetid SYZ2
[  119.913328][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.377271][ T8318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.383317][ T8318] syzkaller0: entered promiscuous mode
[  120.385472][ T8318] syzkaller0: entered allmulticast mode
[  120.413081][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1024'.
[  120.416679][ T8320] netlink: 'syz.1.1024': attribute type 1 has an invalid length.
[  120.428668][ T8318] tipc: Resetting bearer <eth:syzkaller0>
[  120.448922][ T8317] tipc: Resetting bearer <eth:syzkaller0>
[  120.502393][ T8317] tipc: Disabling bearer <eth:syzkaller0>
[  121.137074][ T8352] IPVS: stopping master sync thread 7643 ...
[  121.230784][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.269854][ T8356] netlink: 'syz.1.1040': attribute type 4 has an invalid length.
[  121.278194][ T8356] netlink: 'syz.1.1040': attribute type 4 has an invalid length.
[  122.124991][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'.
[  122.135756][ T8378] veth1_macvtap: left promiscuous mode
[  122.926688][ T8421] netlink: 'syz.2.1070': attribute type 5 has an invalid length.
[  123.158117][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'.
[  123.282095][ T8449] netlink: 'syz.2.1084': attribute type 12 has an invalid length.
[  123.337941][ T8454] veth0: entered promiscuous mode
[  123.340567][ T8454] veth0: left promiscuous mode
[  123.424791][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'.
[  123.430034][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  123.436663][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  123.440128][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  123.443386][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  123.446217][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  123.449495][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  123.457263][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[  123.990374][ T8518] ipt_ECN: cannot use operation on non-tcp rule
[  124.161666][ T8533] syzkaller0: entered allmulticast mode
[  124.181904][ T8533] syzkaller0 (unregistering): left allmulticast mode
[  124.658261][  T790] IPVS: starting estimator thread 0...
[  124.699493][ T8565] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  124.770637][ T8568] IPVS: using max 44 ests per chain, 105600 per kthread
[  126.154944][ T8639] vxcan1 speed is unknown, defaulting to 1000
[  126.158484][ T8639] vxcan1 speed is unknown, defaulting to 1000
[  126.166679][ T8639] vxcan1 speed is unknown, defaulting to 1000
[  126.242100][ T8646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.406249][ T8639] infiniband syz2: set down
[  126.407959][   T10] vxcan1 speed is unknown, defaulting to 1000
[  126.412497][ T8639] infiniband syz2: added vxcan1
[  126.451438][ T8639] RDS/IB: syz2: added
[  126.465065][ T8639] smc: adding ib device syz2 with port count 1
[  126.467535][ T8639] smc:    ib device syz2 port 1 has pnetid 
[  126.469928][   T10] vxcan1 speed is unknown, defaulting to 1000
[  126.479790][ T8639] vxcan1 speed is unknown, defaulting to 1000
[  126.657094][ T8639] vxcan1 speed is unknown, defaulting to 1000
[  126.859971][ T8639] vxcan1 speed is unknown, defaulting to 1000
[  126.986325][ T8682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.990001][ T8682] syzkaller0: entered promiscuous mode
[  126.995666][ T8682] syzkaller0: entered allmulticast mode
[  127.006011][ T8682] syzkaller0: left promiscuous mode
[  127.008260][ T8682] syzkaller0: left allmulticast mode
[  127.015846][ T8682] tipc: Resetting bearer <eth:syzkaller0>
[  127.024731][ T8681] tipc: Resetting bearer <eth:syzkaller0>
[  127.037237][ T8681] tipc: Disabling bearer <eth:syzkaller0>
[  127.404885][   T33] audit: type=1800 audit(1753656505.203:5): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1194" name="@" dev="tmpfs" ino=1955 res=0 errno=0
[  127.564163][ T8711] __nla_validate_parse: 50 callbacks suppressed
[  127.564184][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'.
[  127.652956][ T8715] netlink: 'syz.2.1200': attribute type 6 has an invalid length.
[  127.818298][ T8731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1207'.
[  128.310411][ T8756] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  128.856642][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  128.859627][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  128.955154][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'.
[  129.051653][ T8776] vxcan1 speed is unknown, defaulting to 1000
[  129.105220][ T8807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.176163][ T8810] netlink: 'syz.0.1241': attribute type 11 has an invalid length.
[  129.180248][ T8810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1241'.
[  129.398803][ T8806] vxcan1 speed is unknown, defaulting to 1000
[  129.563850][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'.
[  129.874149][ T8835] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  130.110817][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.733286][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'.
[  131.736322][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'.
[  131.744302][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1306'.
[  131.746234][ T8950] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  132.188571][ T8979] netlink: 'syz.2.1320': attribute type 1 has an invalid length.
[  132.557182][ T9007] tipc: Cannot configure node identity twice
[  132.686740][ T5864] Bluetooth: hci2: command tx timeout
[  132.691169][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.777493][ T9006] vxcan1 speed is unknown, defaulting to 1000
[  133.079565][ T9011] __nla_validate_parse: 6 callbacks suppressed
[  133.079588][ T9011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1332'.
[  133.090075][ T9011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1332'.
[  133.692952][ T9035] delete_channel: no stack
[  134.112616][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'.
[  134.186855][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'.
[  134.190218][ T9074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.254391][ T9074] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.273816][ T9077] IPv6: Can't replace route, no match found
[  134.290894][ T9077] x_tables: duplicate underflow at hook 1
[  135.355094][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  135.907599][ T9144] netlink: 'syz.2.1387': attribute type 1 has an invalid length.
[  135.930658][ T9144] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.955332][ T9144] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.958399][ T9144] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  135.964356][ T9144] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  135.994242][ T9146] batadv_slave_1: entered promiscuous mode
[  136.013664][ T9146] bond1: (slave batadv_slave_1): making interface the new active one
[  136.018785][ T9146] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link
[  136.045880][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1387'.
[  136.052387][ T9144] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.192342][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'.
[  136.821415][ T9191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1405'.
[  136.825686][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1405'.
[  136.844124][ T9191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1405'.
[  136.856532][ T9191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1405'.
[  138.136592][ T9187] vxcan1 speed is unknown, defaulting to 1000
[  138.508058][ T9205] vxcan1 speed is unknown, defaulting to 1000
[  138.649289][ T9219] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1419'.
[  138.989072][ T9226] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1422'.
[  139.068338][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'.
[  139.073710][ T9230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.950300][ T9267] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1440'.
[  141.306722][ T9283] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  141.313760][ T9283] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  141.444682][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1454'.
[  142.048972][ T9336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1472'.
[  142.056969][ T9336] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1472'.
[  142.060448][ T9336] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1472'.
[  142.127420][ T9342] netlink: 'syz.1.1475': attribute type 4 has an invalid length.
[  142.139471][ T9342] netlink: 'syz.1.1475': attribute type 4 has an invalid length.
[  142.477701][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'.
[  142.569335][ T9378] netlink: 'syz.1.1491': attribute type 42 has an invalid length.
[  143.214313][ T9418] openvswitch: netlink: Message has 20 unknown bytes.
[  143.217217][ T9418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.393058][ T9430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1515'.
[  143.703888][ T9446] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  143.782067][ T9448] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1524'.
[  143.785345][ T9448] ip6gretap0: entered promiscuous mode
[  143.787981][ T9448] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1524'.
[  144.395589][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'.
[  144.680179][ T9483] syzkaller0: entered promiscuous mode
[  144.682209][ T9483] syzkaller0: entered allmulticast mode
[  146.096768][ T9520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'.
[  146.377402][ T9537] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  146.581713][ T9547] netlink: 'syz.1.1569': attribute type 64 has an invalid length.
[  146.586867][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'.
[  147.449243][ T9558] vxcan1 speed is unknown, defaulting to 1000
[  147.739140][ T9592] vlan2: entered promiscuous mode
[  147.744148][ T9592] team0: entered promiscuous mode
[  148.030797][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  148.575609][ T9633] netlink: 'syz.0.1603': attribute type 4 has an invalid length.
[  148.585140][ T9633] netlink: 'syz.0.1603': attribute type 4 has an invalid length.
[  148.904586][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'.
[  148.939296][ T9649] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  148.958553][ T9649] team0: Device ipvlan0 is already an upper device of the team interface
[  149.212471][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'.
[  149.219276][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'.
[  149.353316][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'.
[  149.356777][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'.
[  149.359872][ T9696] netlink: 'syz.0.1634': attribute type 14 has an invalid length.
[  149.378592][ T9699] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  149.388234][ T9699] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  149.418138][   T24] IPVS: starting estimator thread 0...
[  149.446372][ T9702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.501964][ T9706] IPVS: using max 62 ests per chain, 148800 per kthread
[  149.639166][ T9715] netlink: 'syz.0.1641': attribute type 3 has an invalid length.
[  150.643882][ T9773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1670'.
[  150.650318][ T9773] tc_dump_action: action bad kind
[  150.820239][ T9786] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1675'.
[  151.069274][ T9800] block nbd1: Unsupported socket: shutdown callout must be supported.
[  151.239981][ T9817] openvswitch: netlink: Key type 251 is out of range max 32
[  151.266423][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'.
[  151.401946][ T9831] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1698'.
[  151.405214][ T9831] netlink: zone id is out of range
[  151.407135][ T9831] netlink: zone id is out of range
[  151.408935][ T9831] netlink: zone id is out of range
[  151.412554][ T9831] netlink: zone id is out of range
[  151.414193][ T9831] netlink: zone id is out of range
[  151.416354][ T9831] netlink: zone id is out of range
[  151.418527][ T9831] netlink: zone id is out of range
[  151.426481][ T9831] netlink: zone id is out of range
[  151.428052][ T9831] netlink: zone id is out of range
[  151.429604][ T9831] netlink: zone id is out of range
[  151.497158][ T9841] delete_channel: no stack
[  151.711636][   T26] wlan0: Trigger new scan to find an IBSS to join
[  152.095945][ T9873] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  152.528341][ T9889] sctp: [Deprecated]: syz.0.1721 (pid 9889) Use of int in max_burst socket option deprecated.
[  152.528341][ T9889] Use struct sctp_assoc_value instead
[  152.544204][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'.
[  152.559015][ T9887] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  152.573741][ T9887] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  153.379573][ T9937] netlink: 'syz.1.1743': attribute type 2 has an invalid length.
[  153.745592][ T9961] netlink: 'syz.2.1753': attribute type 16 has an invalid length.
[  153.779453][ T9965] netlink: 'syz.1.1755': attribute type 11 has an invalid length.
[  154.673280][ T6223] wlan0: Trigger new scan to find an IBSS to join
[  154.947403][ T9996] syzkaller1: entered promiscuous mode
[  154.949726][ T9996] syzkaller1: entered allmulticast mode
[  155.190433][T10015] __nla_validate_parse: 2 callbacks suppressed
[  155.194464][T10015] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1776'.
[  155.231780][T10018] netlink: 'syz.0.1777': attribute type 83 has an invalid length.
[  156.037701][T10039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.042553][T10039] syzkaller0: entered promiscuous mode
[  156.044773][T10039] syzkaller0: entered allmulticast mode
[  156.068637][T10039] tipc: Resetting bearer <eth:syzkaller0>
[  156.074127][T10038] tipc: Resetting bearer <eth:syzkaller0>
[  156.122330][T10038] tipc: Disabling bearer <eth:syzkaller0>
[  156.269550][T10053] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1790'.
[  156.359522][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  156.575673][ T5864] Bluetooth: hci2: link tx timeout
[  156.578276][ T5864] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.864644][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1812'.
[  156.908331][T10101] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1813'.
[  157.368496][T10146] netlink: 'syz.2.1833': attribute type 10 has an invalid length.
[  157.490343][T10156] syzkaller1: entered promiscuous mode
[  157.494230][T10156] syzkaller1: entered allmulticast mode
[  157.599144][T10160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1840'.
[  157.710848][ T6223] wlan0: Trigger new scan to find an IBSS to join
[  158.404663][T10231] netlink: 'syz.0.1874': attribute type 3 has an invalid length.
[  158.407234][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'.
[  158.538451][T10237] netlink: 'syz.2.1876': attribute type 4 has an invalid length.
[  158.592226][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  158.610145][T10228] vxcan1 speed is unknown, defaulting to 1000
[  158.636286][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.678729][T10240] tc_dump_action: action bad kind
[  158.977996][T10228] netlink: 'syz.1.1872': attribute type 13 has an invalid length.
[  158.994004][T10228] net_ratelimit: 6 callbacks suppressed
[  158.994022][T10228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.366592][T10263] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1887'.
[  159.551319][T10275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1889'.
[  159.598561][T10271] netlink: 'syz.1.1889': attribute type 4 has an invalid length.
[  159.604608][T10271] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1889'.
[  159.609656][T10271] : renamed from bond0
[  159.864169][T10289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.868494][T10289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.952282][T10289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.956612][T10289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.039077][T10289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.044324][T10289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.113336][T10289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.119675][T10289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.194871][T10289] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.198399][T10289] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.215769][T10289] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.218960][T10289] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.231554][T10289] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.234776][T10289] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.243129][T10289] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.245833][T10289] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.537566][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  160.588569][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1908'.
[  160.755620][T10320] netlink: 'syz.1.1912': attribute type 58 has an invalid length.
[  160.758717][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1912'.
[  161.022060][T10328] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1917'.
[  161.255404][T10346] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  162.436400][T10395] netlink: 1212 bytes leftover after parsing attributes in process `syz.0.1948'.
[  163.403895][T10419] netlink: 'syz.1.1959': attribute type 15 has an invalid length.
[  163.620343][T10431] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1964'.
[  163.751703][T10440] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1967'.
[  163.869747][T10450] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.1970'.
[  163.876277][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'.
[  164.032840][T10460] netlink: 'syz.1.1979': attribute type 1 has an invalid length.
[  164.162193][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'.
[  164.165788][T10470] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  164.168629][T10470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.524139][T10505] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  164.527229][T10505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.808912][T10530] ipvlan0: entered promiscuous mode
[  164.816302][T10530] bridge0: port 3(ipvlan0) entered blocking state
[  164.819105][T10530] bridge0: port 3(ipvlan0) entered disabled state
[  164.822533][T10530] ipvlan0: entered allmulticast mode
[  164.824867][T10530] gretap0: entered allmulticast mode
[  164.828981][T10530] ipvlan0: left allmulticast mode
[  164.835014][T10530] gretap0: left allmulticast mode
[  165.568380][T10597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.695254][T10609] netlink: 'syz.1.2046': attribute type 1 has an invalid length.
[  165.697651][T10609] __nla_validate_parse: 1 callbacks suppressed
[  165.697662][T10609] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2046'.
[  165.705020][T10609] NCSI netlink: No device for ifindex 0
[  165.716463][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'.
[  165.720069][T10611] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  165.724492][T10611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.893285][T10625] netlink: 'syz.1.2054': attribute type 17 has an invalid length.
[  165.903230][T10625] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2054'.
[  165.907492][T10625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.971651][T10630] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  166.024094][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'.
[  166.302864][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'.
[  166.321074][T10655] veth1: entered promiscuous mode
[  166.329141][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'.
[  166.339803][T10655] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  166.539760][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'.
[  166.736005][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'.
[  167.686311][T10689] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2080'.
[  167.698675][T10689] 0X: renamed from caif0
[  167.712855][T10689] 0X: entered allmulticast mode
[  168.106819][T10719] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2091'.
[  168.940061][T10754] syzkaller0: entered promiscuous mode
[  168.942335][T10754] syzkaller0: entered allmulticast mode
[  169.078593][T10764] smc: removing ib device syz2
[  170.625903][T10761] macsec1: entered allmulticast mode
[  170.627709][T10761] syz_tun: entered allmulticast mode
[  170.631250][T10761] syz_tun: left allmulticast mode
[  170.693770][T10768] sch_tbf: burst 0 is lower than device bridge4 mtu (1514) !
[  170.850032][T10780] net_ratelimit: 1 callbacks suppressed
[  170.850046][T10780] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  171.319336][T10819] dummy0: entered allmulticast mode
[  171.329669][T10818] dummy0: left allmulticast mode
[  171.345630][T10822] syzkaller0: entered promiscuous mode
[  171.352539][T10822] syzkaller0: entered allmulticast mode
[  171.466340][T10832] __nla_validate_parse: 3 callbacks suppressed
[  171.466356][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2143'.
[  171.537343][   T33] audit: type=1800 audit(1753656549.333:6): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2144" name="memory.events" dev="tmpfs" ino=3336 res=0 errno=0
[  171.555992][   T33] audit: type=1804 audit(1753656549.353:7): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2144" name="memory.events" dev="tmpfs" ino=3336 res=1 errno=0
[  171.575050][T10835] netlink: 'syz.0.2143': attribute type 2 has an invalid length.
[  171.587016][T10835] : entered promiscuous mode
[  172.049022][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'.
[  172.530129][T10885] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2166'.
[  172.542060][T10882] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2166'.
[  172.781075][T10891] netlink: 'syz.2.2167': attribute type 1 has an invalid length.
[  172.787871][T10891] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2167'.
[  172.849865][T10892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2167'.
[  173.462167][T10901] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  173.504766][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'.
[  173.507575][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'.
[  173.858085][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2184'.
[  174.048730][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'.
[  174.413940][T10954] netlink: 'syz.0.2192': attribute type 10 has an invalid length.
[  174.439871][T10955] 8021q: adding VLAN 0 to HW filter on device bond2
[  174.442745][T10954] bridge0: port 3(team0) entered blocking state
[  174.447352][T10954] bridge0: port 3(team0) entered disabled state
[  174.452114][T10954] team0: entered allmulticast mode
[  174.453795][T10954] team_slave_0: entered allmulticast mode
[  174.455577][T10954] team_slave_1: entered allmulticast mode
[  174.468968][T10954] bridge0: port 3(team0) entered blocking state
[  174.472181][T10954] bridge0: port 3(team0) entered forwarding state
[  174.750203][T10976] netlink: 'syz.0.2206': attribute type 1 has an invalid length.
[  174.873936][T10986] syzkaller0: entered promiscuous mode
[  174.881718][T10986] syzkaller0: entered allmulticast mode
[  174.904109][T10986] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  176.677996][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  177.294006][T11075] __nla_validate_parse: 2 callbacks suppressed
[  177.294020][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'.
[  177.298614][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'.
[  177.437127][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2255'.
[  177.543244][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'.
[  177.597442][T11109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2263'.
[  177.656435][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'.
[  178.145402][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2279'.
[  178.527557][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'.
[  178.906901][T11186] syzkaller1: entered promiscuous mode
[  178.932649][T11186] syzkaller1: entered allmulticast mode
[  178.995618][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'.
[  179.485401][T11226] bridge0: port 1(erspan0) entered blocking state
[  179.488382][T11226] bridge0: port 1(erspan0) entered disabled state
[  179.494278][T11226] erspan0: entered allmulticast mode
[  179.498403][T11226] erspan0: entered promiscuous mode
[  179.516224][T11226] erspan0: left allmulticast mode
[  179.518582][T11226] erspan0: left promiscuous mode
[  179.523592][T11226] bridge0: port 1(erspan0) entered disabled state
[  179.810807][T11244] netlink: 'syz.2.2327': attribute type 1 has an invalid length.
[  179.854499][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'.
[  180.325666][T11280] netlink: 'syz.2.2344': attribute type 6 has an invalid length.
[  180.565971][T11295] netlink: 'syz.1.2351': attribute type 1 has an invalid length.
[  180.615978][T11295] bond0: entered promiscuous mode
[  180.622091][T11295] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.653055][T11295] bond0: (slave bridge3): making interface the new active one
[  180.658904][T11295] bridge3: entered promiscuous mode
[  180.671938][T11295] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  180.930063][T11318] netlink: 'syz.0.2361': attribute type 10 has an invalid length.
[  180.969104][T11320] netlink: 'syz.2.2360': attribute type 7 has an invalid length.
[  180.974233][T11321] !: renamed from dummy0 (while UP)
[  181.966796][T11364] TCP: TCP_TX_DELAY enabled
[  182.795660][T11371] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  182.856344][T11375] __nla_validate_parse: 6 callbacks suppressed
[  182.856360][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'.
[  182.885120][T11375] syzkaller1: entered promiscuous mode
[  182.886869][T11375] syzkaller1: entered allmulticast mode
[  183.773919][T11442] netlink: 'syz.0.2413': attribute type 10 has an invalid length.
[  183.796024][T11442] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  183.870739][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  183.905840][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2419'.
[  184.483704][T11497] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  184.587642][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2441'.
[  184.595027][T11505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2441'.
[  184.603321][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2441'.
[  184.613017][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2441'.
[  184.786925][T11493] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.793113][T11493] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.796487][T11493] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.799715][T11493] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.815513][T11493] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.818814][T11493] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.823777][T11493] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.827165][T11493] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.993243][T11531] netlink: 'syz.0.2453': attribute type 1 has an invalid length.
[  185.995915][T11531] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2453'.
[  185.998631][T11531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2453'.
[  186.029631][T11533] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2454'.
[  186.032994][T11533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2454'.
[  186.062063][T11536] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  186.065600][T11537] netlink: 'syz.0.2456': attribute type 13 has an invalid length.
[  186.208898][T11537] bridge0: port 3(team0) entered disabled state
[  186.211029][T11537] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.214625][T11537] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.356938][T11537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.425943][T11537] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[  186.428785][T11537] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.432534][T11537] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.435419][T11537] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.483785][T11537] netdevsim netdevsim0 : unset [1, 1] type 2 family 0 port 256 - 0
[  186.486527][T11537] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  186.489429][T11537] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  186.492370][T11537] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  186.569248][T11552] bond1: (slave batadv_slave_1): Releasing active interface
[  186.577735][T11554] smc: net device bond0 applied user defined pnetid SYZ2
[  186.917227][T11588] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  187.106969][T11609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.112939][T11609] syzkaller0: entered promiscuous mode
[  187.117885][T11609] syzkaller0: entered allmulticast mode
[  187.124286][T11609] tipc: Resetting bearer <eth:syzkaller0>
[  187.127587][T11608] tipc: Resetting bearer <eth:syzkaller0>
[  187.138513][T11608] tipc: Disabling bearer <eth:syzkaller0>
[  187.229323][T11622] netlink: 'syz.0.2493': attribute type 10 has an invalid length.
[  187.238895][T11622] bond0: (slave ): Enslaving as an active interface with an up link
[  187.507278][T11638] netlink: 'syz.2.2500': attribute type 8 has an invalid length.
[  187.537769][T11640] netlink: 'syz.1.2501': attribute type 20 has an invalid length.
[  187.766987][T11666] netlink: 'syz.1.2515': attribute type 4 has an invalid length.
[  187.814541][T11672] tipc: Enabling <ib:lo> not permitted
[  187.816347][T11672] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  188.170296][T11709] veth1_to_team: entered allmulticast mode
[  188.173719][T11709] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  188.283461][T11721] tipc: Cannot configure node identity twice
[  188.331839][T11723] __nla_validate_parse: 8 callbacks suppressed
[  188.331855][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2541'.
[  188.747484][T11759] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.2557'.
[  188.752500][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'.
[  188.798374][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'.
[  190.534297][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2604'.
[  190.694289][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2609'.
[  190.697050][T11884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2609'.
[  190.943782][T11904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.947071][T11904] syzkaller0: entered promiscuous mode
[  190.949254][T11904] syzkaller0: entered allmulticast mode
[  190.965623][T11904] tipc: Resetting bearer <eth:syzkaller0>
[  190.969780][T11903] tipc: Resetting bearer <eth:syzkaller0>
[  190.990419][T11903] tipc: Disabling bearer <eth:syzkaller0>
[  191.223292][T11921] netlink: 'syz.1.2626': attribute type 7 has an invalid length.
[  191.226327][T11921] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2626'.
[  191.242312][T11923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2627'.
[  191.327362][T11929] netlink: 'syz.2.2630': attribute type 9 has an invalid length.
[  191.329783][T11929] netlink: 'syz.2.2630': attribute type 9 has an invalid length.
[  192.217441][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'.
[  192.859316][T12011] x9: renamed from bridge_slave_0
[  193.519704][T12073] __nla_validate_parse: 6 callbacks suppressed
[  193.519720][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'.
[  193.525489][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'.
[  193.528267][T12073] netlink: 'syz.2.2697': attribute type 12 has an invalid length.
[  193.534270][T12073] netlink: 'syz.2.2697': attribute type 11 has an invalid length.
[  193.576792][T12077] netlink: 'syz.2.2699': attribute type 4 has an invalid length.
[  193.629971][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'.
[  194.886969][T12117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.890085][T12117] syzkaller0: entered promiscuous mode
[  194.893883][T12117] syzkaller0: entered allmulticast mode
[  194.925380][T12117] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  194.933774][T12117] tipc: Resetting bearer <eth:syzkaller0>
[  194.943400][T12115] tipc: Resetting bearer <eth:syzkaller0>
[  194.979503][T12115] tipc: Disabling bearer <eth:syzkaller0>
[  195.169966][T12129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2721'.
[  195.206487][T12129] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  195.245087][T12129] bond0: (slave bridge3): Releasing backup interface
[  195.252909][T12129] bridge3: left promiscuous mode
[  195.275816][T12131] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  195.383871][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'.
[  195.539577][T12147] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2730'.
[  195.986634][T12169] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  196.191493][ T5864] Bluetooth: hci1: command 0x0406 tx timeout
[  196.335947][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'.
[  196.705798][T12210] syzkaller1: entered promiscuous mode
[  196.707979][T12210] syzkaller1: entered allmulticast mode
[  196.756489][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'.
[  196.883911][T12220] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2766'.
[  197.177358][T12242] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2777'.
[  197.189164][T12242] 0: renamed from hsr0
[  197.195244][T12242] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  197.199406][T12242] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.206035][T12242] 0: entered allmulticast mode
[  197.208029][T12242] hsr_slave_0: entered allmulticast mode
[  197.210729][T12242] hsr_slave_1: entered allmulticast mode
[  197.215039][T12242] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  197.408793][T12258] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  197.710122][T12283] netlink: 'syz.2.2796': attribute type 21 has an invalid length.
[  197.779049][T12289] openvswitch: netlink: IP tunnel TTL not specified.
[  197.797220][T12292] netlink: 'syz.0.2800': attribute type 1 has an invalid length.
[  197.928694][T12306] netlink: 'syz.0.2805': attribute type 18 has an invalid length.
[  197.942119][T12306] netlink: 'syz.0.2805': attribute type 18 has an invalid length.
[  198.005141][T12312] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  198.178648][T12326] netlink: 'syz.0.2812': attribute type 13 has an invalid length.
[  198.185206][T12326] netlink: 'syz.0.2812': attribute type 17 has an invalid length.
[  198.266280][T12326] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.269596][T12326] 8021q: adding VLAN 0 to HW filter on device team0
[  198.278091][T12326] 0X: left allmulticast mode
[  198.279716][T12326] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  198.928254][T12353] Bluetooth: MGMT ver 1.23
[  198.934551][T12355] netlink: 'syz.1.2826': attribute type 10 has an invalid length.
[  198.943456][T12355] __nla_validate_parse: 7 callbacks suppressed
[  198.943468][T12355] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2826'.
[  199.119477][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'.
[  199.127565][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'.
[  199.904457][T12414] bond0: entered promiscuous mode
[  199.907197][T12414] bond_slave_0: entered promiscuous mode
[  199.909715][T12414] bond_slave_1: entered promiscuous mode
[  199.914197][T12414] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  199.923797][T12414] netdevsim netdevsim0 : entered promiscuous mode
[  199.942669][T12414] bond0: left promiscuous mode
[  199.944723][T12414] bond_slave_0: left promiscuous mode
[  199.947746][T12414] bond_slave_1: left promiscuous mode
[  199.950370][T12414] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  199.957932][T12414] netdevsim netdevsim0 : left promiscuous mode
[  199.984863][T12417] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  200.277538][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'.
[  200.386900][T12434] netlink: 'syz.2.2862': attribute type 21 has an invalid length.
[  200.389398][T12434] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2862'.
[  200.393435][T12434] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2862'.
[  200.694966][T12455] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  200.703734][T12455] syz_tun: entered allmulticast mode
[  200.719268][T12455] dvmrp8: entered allmulticast mode
[  200.726380][T12454] syz_tun: left allmulticast mode
[  200.822002][T12463] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2876'.
[  200.844162][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'.
[  201.212349][T12500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.215041][T12500] syzkaller0: entered promiscuous mode
[  201.216680][T12500] syzkaller0: entered allmulticast mode
[  201.245627][T12500] tipc: Resetting bearer <eth:syzkaller0>
[  201.261645][T12499] tipc: Resetting bearer <eth:syzkaller0>
[  201.291728][T12499] tipc: Disabling bearer <eth:syzkaller0>
[  201.415248][T12516] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2903'.
[  201.449061][T12519] netlink: 'syz.2.2904': attribute type 10 has an invalid length.
[  201.466832][T12519] dummy0: entered promiscuous mode
[  201.471551][T12519] team0: Port device dummy0 added
[  201.475022][T12519] netlink: 'syz.2.2904': attribute type 10 has an invalid length.
[  201.477909][T12519] dummy0: left promiscuous mode
[  201.489618][T12519] team0: Port device dummy0 removed
[  201.495311][T12519] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  201.498267][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'.
[  201.745271][T12542] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  205.243321][T12623] __nla_validate_parse: 2 callbacks suppressed
[  205.243336][T12623] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2950'.
[  205.527159][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'.
[  205.733737][T12658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2967'.
[  205.965700][T12667] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2972'.
[  205.997185][T12677] openvswitch: netlink: Flow key attr not present in new flow.
[  206.212513][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'.
[  206.313416][T12697] bond3: entered promiscuous mode
[  206.321321][T12697] 8021q: adding VLAN 0 to HW filter on device bond3
[  206.535033][T12712] validate_nla: 1 callbacks suppressed
[  206.535046][T12712] netlink: 'syz.2.2990': attribute type 8 has an invalid length.
[  206.919391][T12742] bond0: option mode: unable to set because the bond device is up
[  206.981539][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3008'.
[  206.985532][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3008'.
[  207.543359][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'.
[  207.787659][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3029'.
[  208.166163][T12827] syzkaller0: entered allmulticast mode
[  208.256092][T12836] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  208.259676][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'.
[  208.369503][T12848] netlink: 'syz.1.3053': attribute type 15 has an invalid length.
[  208.579611][T12875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.813758][T12886] netlink: 'syz.1.3068': attribute type 16 has an invalid length.
[  208.816374][T12886] netlink: 'syz.1.3068': attribute type 17 has an invalid length.
[  210.269401][T12886] 8021q: adding VLAN 0 to HW filter on device team0
[  210.275366][T12886] tipc: Resetting bearer <eth:team0>
[  210.279261][T12886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.478452][T12915] __nla_validate_parse: 1 callbacks suppressed
[  210.478474][T12915] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3084'.
[  211.398274][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'.
[  211.714843][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3117'.
[  212.162287][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3124'.
[  212.205845][T13011] bond1: entered promiscuous mode
[  212.216122][T13011] bond1: entered allmulticast mode
[  212.218484][T13011] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.859169][T13047] netlink: 'syz.2.3138': attribute type 10 has an invalid length.
[  212.862494][T13047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3138'.
[  212.865436][T13047] dummy0: entered promiscuous mode
[  212.867444][T13047] dummy0: entered allmulticast mode
[  212.870323][T13047] bond0: (slave dummy0): Releasing backup interface
[  212.878556][T13047] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  212.978737][T13051] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  213.293678][T13066] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  213.323445][T13068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3147'.
[  213.498503][T13078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3151'.
[  213.870375][T13100] netlink: 'syz.1.3162': attribute type 1 has an invalid length.
[  213.874056][T13100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3162'.
[  214.746742][T13147] sctp: [Deprecated]: syz.1.3185 (pid 13147) Use of int in maxseg socket option.
[  214.746742][T13147] Use struct sctp_assoc_value instead
[  214.983721][T13161] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3191'.
[  215.094511][T13165] netlink: 'syz.2.3194': attribute type 2 has an invalid length.
[  215.099501][T13165] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3194'.
[  215.456870][T13193] netlink: 'syz.2.3207': attribute type 1 has an invalid length.
[  215.459931][T13193] netlink: 'syz.2.3207': attribute type 2 has an invalid length.
[  215.466122][T13193] netlink: 'syz.2.3207': attribute type 1 has an invalid length.
[  215.519690][T13196] netlink: 'syz.2.3208': attribute type 3 has an invalid length.
[  215.585485][T13198] netlink: 'syz.2.3209': attribute type 3 has an invalid length.
[  215.876170][T13216] netlink: 'syz.2.3218': attribute type 1 has an invalid length.
[  215.878613][T13216] __nla_validate_parse: 1 callbacks suppressed
[  215.878622][T13216] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3218'.
[  215.885170][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3218'.
[  215.944727][T13215] tipc: Resetting bearer <eth:team0>
[  215.947027][T13223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3221'.
[  216.036393][T13228] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3225'.
[  216.138848][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'.
[  217.293203][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'.
[  217.499625][T13289] sch_fq: defrate 4294967295 ignored.
[  218.267414][T13327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.274367][T13327] syzkaller0: entered promiscuous mode
[  218.276524][T13327] syzkaller0: entered allmulticast mode
[  218.298376][T13327] tipc: Resetting bearer <eth:syzkaller0>
[  218.303367][T13326] tipc: Resetting bearer <eth:syzkaller0>
[  218.319457][T13326] tipc: Disabling bearer <eth:syzkaller0>
[  218.453880][T13333] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  218.528979][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'.
[  218.654589][T13347] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3280'.
[  218.665449][T13347] batadv1: entered promiscuous mode
[  218.667233][T13347] batadv1: entered allmulticast mode
[  218.773473][T13361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3280'.
[  219.268229][T13401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'.
[  219.337275][T13409] team0: Device sit2 is of different type
[  219.458226][T13420] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  219.482316][T13420] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  220.227204][T13478] IPv6: Can't replace route, no match found
[  220.549995][T13486] hsr_slave_1 (unregistering): left promiscuous mode
[  221.235143][T13523] __nla_validate_parse: 1 callbacks suppressed
[  221.235157][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'.
[  221.339489][T13533] netlink: 'syz.2.3365': attribute type 3 has an invalid length.
[  221.406704][T13535] syz_tun: entered allmulticast mode
[  221.409422][T13535] dvmrp8: left allmulticast mode
[  221.465752][T13538] siw: device registration error -23
[  221.498308][T13538] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.502388][T13538] 8021q: adding VLAN 0 to HW filter on device team0
[  221.505018][T13538] dummy0: left promiscuous mode
[  221.506532][T13538] dummy0: left allmulticast mode
[  221.515087][T13538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.552278][   T52] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  222.183437][T13575] netlink: 'syz.1.3386': attribute type 1 has an invalid length.
[  222.193638][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  222.238472][T13534] syz_tun: left allmulticast mode
[  222.431203][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  222.475740][T13596] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3396'.
[  222.645027][T13610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3405'.
[  222.657041][T13610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3405'.
[  222.743584][T13616] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3406'.
[  222.777271][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'.
[  222.791484][T13618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3407'.
[  223.166694][T13647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.175317][T13647] syzkaller0: entered promiscuous mode
[  223.177877][T13647] syzkaller0: entered allmulticast mode
[  223.195250][T13647] tipc: Resetting bearer <eth:syzkaller0>
[  223.199968][T13646] tipc: Resetting bearer <eth:syzkaller0>
[  223.226382][T13646] tipc: Disabling bearer <eth:syzkaller0>
[  223.236656][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  223.245405][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  223.320325][T13658] netlink: 'syz.0.3426': attribute type 2 has an invalid length.
[  223.801754][   T52] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  224.074730][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3433'.
[  224.259930][T13683] openvswitch: netlink: Actions may not be safe on all matching packets
[  224.388456][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'.
[  224.394793][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3439'.
[  224.644778][T13711] netlink: 'syz.0.3446': attribute type 1 has an invalid length.
[  225.264830][T13757] sctp: [Deprecated]: syz.0.3469 (pid 13757) Use of int in maxseg socket option.
[  225.264830][T13757] Use struct sctp_assoc_value instead
[  225.787465][T13791] netlink: 'syz.1.3485': attribute type 4 has an invalid length.
[  226.084876][T13810] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  226.099430][T13809] tipc: Enabled bearer <eth:wg0>, priority 14
[  226.327872][T13828] __nla_validate_parse: 3 callbacks suppressed
[  226.327892][T13828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3502'.
[  226.408955][T13832] netlink: 'syz.2.3505': attribute type 32 has an invalid length.
[  226.532837][T13844] netlink: 'syz.0.3507': attribute type 13 has an invalid length.
[  226.549227][T13844] netlink: 'syz.0.3507': attribute type 17 has an invalid length.
[  226.574144][T13844] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  226.692386][T13849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.749761][T13849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.824054][T13861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.964777][T13869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3518'.
[  227.009530][T13875] netlink: 'syz.1.3519': attribute type 2 has an invalid length.
[  227.026572][T13875] : entered promiscuous mode
[  227.230775][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  227.230988][   T10] tipc: Node number set to 4289591360
[  227.378659][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3532'.
[  227.472810][T13907] netlink: 'syz.2.3533': attribute type 12 has an invalid length.
[  227.476549][T13907] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3533'.
[  227.562157][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'.
[  227.577840][T13913] macvtap1: entered promiscuous mode
[  227.580240][T13913] : entered promiscuous mode
[  227.584932][T13913] macvtap1: entered allmulticast mode
[  227.587088][T13913] : entered allmulticast mode
[  227.595048][T13913] : left allmulticast mode
[  227.597046][T13913] : left promiscuous mode
[  227.878409][T13933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3546'.
[  229.842859][T14016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.925835][T14022] netlink: 'syz.2.3580': attribute type 83 has an invalid length.
[  230.016503][T14026] netlink: 'syz.2.3582': attribute type 1 has an invalid length.
[  230.021511][T14026] netlink: 'syz.2.3582': attribute type 2 has an invalid length.
[  230.027425][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'.
[  230.508099][T14067] vxcan1: entered allmulticast mode
[  230.510043][T14067] vxcan1: left allmulticast mode
[  230.545246][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3602'.
[  230.835905][T14090] netlink: 'syz.1.3612': attribute type 2 has an invalid length.
[  230.838421][T14090] netlink: 'syz.1.3612': attribute type 1 has an invalid length.
[  230.842575][T14090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3612'.
[  231.806092][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'.
[  232.062904][T14148] netlink: zone id is out of range
[  232.067944][T14148] netlink: zone id is out of range
[  232.088810][T14148] netlink: zone id is out of range
[  232.101274][T14148] netlink: zone id is out of range
[  232.103116][T14148] netlink: zone id is out of range
[  232.105187][T14148] netlink: zone id is out of range
[  232.120620][T14148] netlink: zone id is out of range
[  232.122438][T14148] netlink: zone id is out of range
[  232.129743][T14153] : entered promiscuous mode
[  232.143663][T14148] netlink: zone id is out of range
[  232.145440][T14148] netlink: zone id is out of range
[  232.149767][T14155] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3636'.
[  232.233170][T14161] netlink: 'syz.0.3638': attribute type 21 has an invalid length.
[  232.240631][T14161] IPv6: NLM_F_CREATE should be specified when creating new route
[  232.247017][T14161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  232.249640][T14161] IPv6: NLM_F_CREATE should be set when creating new route
[  232.252572][T14161] IPv6: NLM_F_CREATE should be set when creating new route
[  232.255397][T14161] IPv6: NLM_F_CREATE should be set when creating new route
[  232.470391][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'.
[  233.111985][T14216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3660'.
[  233.734694][T14247] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3674'.
[  233.769236][T14251] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3676'.
[  233.800162][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'.
[  233.804583][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3677'.
[  233.897223][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'.
[  233.900295][T14263] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3681'.
[  233.931703][T14263] vlan2: entered allmulticast mode
[  233.933355][T14263] veth1: entered allmulticast mode
[  234.901553][T14325] netlink: 'syz.2.3711': attribute type 1 has an invalid length.
[  235.629244][T14382] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  235.710716][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  235.756227][T14393] syz_tun: entered promiscuous mode
[  235.758379][T14393] syz_tun: entered allmulticast mode
[  236.228438][T14429] netlink: 'syz.1.3759': attribute type 10 has an invalid length.
[  236.231380][T14429] dummy0: entered promiscuous mode
[  236.233277][T14429] dummy0: entered allmulticast mode
[  236.236165][T14429] bridge0: port 1(dummy0) entered blocking state
[  236.238912][T14429] bridge0: port 1(dummy0) entered disabled state
[  236.539254][T14442] IPVS: stopping backup sync thread 8128 ...
[  237.291893][T14500] __nla_validate_parse: 10 callbacks suppressed
[  237.291906][T14500] netlink: 270 bytes leftover after parsing attributes in process `syz.2.3792'.
[  237.426758][T14512] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  237.496314][T14518] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3801'.
[  237.625497][T14532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3807'.
[  237.856704][T14552] netlink: 'syz.1.3819': attribute type 3 has an invalid length.
[  237.909686][T14558] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3823'.
[  237.927424][T14560] netlink: 'syz.0.3821': attribute type 23 has an invalid length.
[  238.495164][T14601] netlink: 'syz.2.3838': attribute type 1 has an invalid length.
[  238.498531][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'.
[  238.508003][T14595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3836'.
[  238.512364][T14601] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3838'.
[  238.609868][T14603] net_ratelimit: 100 callbacks suppressed
[  238.609887][T14603] netlink: del zone limit has 4 unknown bytes
[  238.736427][T14611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3842'.
[  238.829614][T14618] netlink: 'syz.0.3848': attribute type 1 has an invalid length.
[  238.832903][T14618] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3848'.
[  239.275007][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3866'.
[  239.287514][T14659] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.291119][T14659] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.294416][T14659] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.297572][T14659] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.387604][T14663] netlink: 'syz.0.3868': attribute type 1 has an invalid length.
[  239.417316][T14664] x9`.Ā*|: renamed from bridge_slave_0
[  240.100174][T14726] tap0: tun_chr_ioctl cmd 1074025677
[  240.103803][T14726] tap0: linktype set to 825
[  241.346251][T14806] dvmrp0: entered allmulticast mode
[  241.558920][T14775] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  241.844413][T14853] netlink: 'syz.1.3928': attribute type 16 has an invalid length.
[  241.847814][T14853] netlink: 'syz.1.3928': attribute type 17 has an invalid length.
[  241.901913][T14853] 8021q: adding VLAN 0 to HW filter on device team0
[  241.905144][T14853] tipc: Resetting bearer <eth:team0>
[  241.910829][T14853] bridge0: port 1(dummy0) entered blocking state
[  241.914192][T14853] bridge0: port 1(dummy0) entered forwarding state
[  241.921807][   T52] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.928452][T14853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.952790][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.956139][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.960907][T14855] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  242.033719][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  242.181239][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  243.266887][T14874] netlink: 'syz.2.3941': attribute type 1 has an invalid length.
[  243.270014][T14874] netlink: 'syz.2.3941': attribute type 11 has an invalid length.
[  243.281654][T14874] __nla_validate_parse: 4 callbacks suppressed
[  243.281671][T14874] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3941'.
[  243.483885][T14884] netlink: 'syz.1.3945': attribute type 1 has an invalid length.
[  243.487127][T14884] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3945'.
[  243.510049][T14887] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  243.829293][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3953'.
[  244.085270][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'.
[  244.094464][T14938] syzkaller1: entered promiscuous mode
[  244.096678][T14938] syzkaller1: entered allmulticast mode
[  244.260215][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'.
[  244.304635][T14961] netlink: 'syz.2.3973': attribute type 1 has an invalid length.
[  244.344581][T14961] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  244.362821][T14961] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  244.419259][T14968] gretap1: entered promiscuous mode
[  244.423691][T14968] bond4: (slave gretap1): making interface the new active one
[  244.428245][T14968] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  244.443969][T14961] macvlan2: entered promiscuous mode
[  244.445708][T14961] macvlan2: entered allmulticast mode
[  244.448322][T14961] bond4: entered promiscuous mode
[  244.450587][T14961] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  244.454851][T14961] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  244.460052][T14961] bond4: left promiscuous mode
[  244.615685][T14986] netlink: 'syz.2.3983': attribute type 21 has an invalid length.
[  244.618805][T14986] netlink: 'syz.2.3983': attribute type 1 has an invalid length.
[  244.634107][T14986] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3983'.
[  244.687894][T14990] netlink: 'syz.1.3986': attribute type 1 has an invalid length.
[  244.694667][T14990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3986'.
[  244.813558][T14998] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  244.816838][T14998] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  244.819826][T14998] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  244.822924][T14998] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.265870][T15034] tipc: Enabled bearer <udp:syz0>, priority 26
[  246.004390][T15080] netlink: 'syz.0.4027': attribute type 29 has an invalid length.
[  246.017722][T15079] syzkaller1: entered promiscuous mode
[  246.019928][T15079] syzkaller1: entered allmulticast mode
[  246.110681][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  246.560436][T15110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.857579][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'.
[  246.875547][T15122] netlink: 'syz.2.4048': attribute type 1 has an invalid length.
[  246.878627][T15122] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.4048'.
[  246.973908][T15141] netlink: 'syz.1.4053': attribute type 1 has an invalid length.
[  247.024347][T15147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4056'.
[  248.779132][T15249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.864157][T15251] __nla_validate_parse: 2 callbacks suppressed
[  248.864172][T15251] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4095'.
[  248.869896][T15251] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4095'.
[  248.916301][T15257] bridge7: entered allmulticast mode
[  249.459628][T15293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.466929][T15293] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  249.469423][T15293] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  249.489298][T15293] tipc: Resetting bearer <eth:syzkaller0>
[  249.515169][T15299] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  249.520685][T15299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.594292][T15307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.772059][T15325] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  249.922789][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4133'.
[  249.926442][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4133'.
[  249.930312][T15342] validate_nla: 4 callbacks suppressed
[  249.930327][T15342] netlink: 'syz.0.4133': attribute type 4 has an invalid length.
[  250.378228][T15379] netlink: 'syz.0.4148': attribute type 2 has an invalid length.
[  250.388745][T15379] netlink: 'syz.0.4148': attribute type 8 has an invalid length.
[  250.395391][T15379] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4148'.
[  250.507083][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4151'.
[  250.677213][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4156'.
[  250.690776][T15396] openvswitch: netlink: Unknown nsh attribute 0
[  250.693344][T15396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.364209][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4165'.
[  251.768199][T15435] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4173'.
[  251.948927][T15451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4180'.
[  252.350774][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  252.466116][T15486] dvmrp0: entered allmulticast mode
[  252.613499][T15496] netlink: 'syz.2.4200': attribute type 1 has an invalid length.
[  253.355527][T15516] nbd: illegal input index 65508
[  253.913610][T15560] __nla_validate_parse: 4 callbacks suppressed
[  253.913621][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4228'.
[  253.938680][T15560] macvtap2: entered promiscuous mode
[  253.945869][T15560] macvtap2: entered allmulticast mode
[  253.947946][T15560] syz_tun: entered allmulticast mode
[  253.975196][T15560] syz_tun: left allmulticast mode
[  254.124650][T15582] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4238'.
[  254.173764][T15584] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  254.178702][T15588] tipc: Invalid UDP bearer configuration
[  254.178729][T15588] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  254.448522][T15609] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  254.718321][T15616] netlink: 'syz.1.4253': attribute type 21 has an invalid length.
[  254.723554][T15616] netlink: 'syz.1.4253': attribute type 1 has an invalid length.
[  254.912223][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.605999][T15631] nbd: must specify at least one socket
[  255.839749][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4262'.
[  255.846280][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4262'.
[  255.910540][T15642] netlink: 'syz.1.4262': attribute type 4 has an invalid length.
[  255.919478][T15642] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4262'.
[  256.094051][T15651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4267'.
[  256.273493][T15659] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  256.317196][T15661] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4272'.
[  256.853110][T15682] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4282'.
[  257.001328][T15692] bridge0: port 1(dummy0) entered disabled state
[  257.028032][T15692] tipc: Resetting bearer <eth:team0>
[  257.056916][T15692] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.059851][T15692] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.063496][T15692] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.066864][T15692] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.613934][ T5864] Bluetooth: hci2: link tx timeout
[  257.616028][ T5864] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  257.624169][ T5869] Bluetooth: hci2: link tx timeout
[  257.626256][ T5869] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  257.639680][ T5869] Bluetooth: hci2: link tx timeout
[  257.641880][ T5869] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  257.644975][ T5869] Bluetooth: hci2: link tx timeout
[  257.646938][ T5869] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  257.649933][ T5869] Bluetooth: hci2: link tx timeout
[  257.652180][ T5869] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  257.655177][ T5869] Bluetooth: hci2: link tx timeout
[  257.657158][ T5869] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  257.792255][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4309'.
[  258.474506][T15748] IPv6: NLM_F_REPLACE set, but no existing node found!
[  259.630994][ T5869] Bluetooth: hci2: command 0x0406 tx timeout
[  259.723683][T15838] netlink: 'syz.1.4355': attribute type 1 has an invalid length.
[  259.726974][T15838] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4355'.
[  260.118901][T15861] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4366'.
[  260.199560][T15870] netlink: 'syz.1.4371': attribute type 1 has an invalid length.
[  260.203711][T15870] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4371'.
[  260.489720][T15891] netlink: 'syz.1.4381': attribute type 1 has an invalid length.
[  260.495409][T15891] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4381'.
[  260.531680][T15891] xt_CT: No such helper "snmp"
[  260.669753][T15902] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.4385'.
[  260.745861][T15906] tun0: tun_chr_ioctl cmd 35111
[  261.429243][   T33] audit: type=1800 audit(1753656639.223:8): pid=15937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4400" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7267 res=0 errno=0
[  261.883231][T15959] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  261.891867][T15961] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4408'.
[  262.968999][T16024] ip6erspan0: entered promiscuous mode
[  263.358736][T16051] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  263.366667][T16051] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  263.437959][T16055] sctp: [Deprecated]: syz.1.4453 (pid 16055) Use of struct sctp_assoc_value in delayed_ack socket option.
[  263.437959][T16055] Use struct sctp_sack_info instead
[  263.451388][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4454'.
[  263.887761][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4464'.
[  264.206445][T16090] nbd: must specify a size in bytes for the device
[  264.609367][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'.
[  265.117307][T16152] macsec0: entered allmulticast mode
[  265.120298][T16152] veth1_macvtap: entered allmulticast mode
[  265.124490][T16152] macsec0: left allmulticast mode
[  265.127223][T16152] veth1_macvtap: left allmulticast mode
[  265.477655][T16171] macsec0: entered promiscuous mode
[  265.479717][T16171] macsec0: entered allmulticast mode
[  265.915411][T16183] tipc: Resetting bearer <eth:syzkaller0>
[  265.935626][T16183] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  265.939042][T16183] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  265.942815][T16183] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  265.946629][T16183] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.339342][T16220] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  266.572264][T16239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4531'.
[  266.673031][T16250] netlink: 'syz.0.4535': attribute type 4 has an invalid length.
[  266.783827][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'.
[  266.866694][T16268] sctp: [Deprecated]: syz.1.4542 (pid 16268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.866694][T16268] Use struct sctp_sack_info instead
[  267.248334][T16293] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  267.475401][T16308] netlink: 'syz.0.4561': attribute type 1 has an invalid length.
[  267.478488][T16308] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4561'.
[  268.448131][T16377] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4589'.
[  268.452836][T16377] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  268.478994][T16377] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4589'.
[  268.603739][T16389] pim6reg1: entered promiscuous mode
[  268.621851][T16389] pim6reg1: entered allmulticast mode
[  268.677415][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4598'.
[  268.690828][T16395] IPVS: Error joining to the multicast group
[  269.264708][T16451] netlink: 'syz.2.4625': attribute type 8 has an invalid length.
[  269.513882][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'.
[  269.533986][T16473] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.889714][T16488] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4643'.
[  269.903010][T16488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.208231][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4657'.
[  270.212340][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4657'.
[  270.374189][T16531] sit2: entered promiscuous mode
[  270.910695][    C0] ==================================================================
[  270.913234][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  270.915776][    C0] Read of size 2 at addr ffff888030ec6c2a by task udevd/16193
[  270.918979][    C0] 
[  270.920084][    C0] CPU: 0 UID: 0 PID: 16193 Comm: udevd Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  270.920097][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.920105][    C0] Call Trace:
[  270.920109][    C0]  <IRQ>
[  270.920113][    C0]  dump_stack_lvl+0x189/0x250
[  270.920127][    C0]  ? rcu_is_watching+0x15/0xb0
[  270.920137][    C0]  ? __kasan_check_byte+0x12/0x40
[  270.920150][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.920158][    C0]  ? rcu_is_watching+0x15/0xb0
[  270.920167][    C0]  ? lock_release+0x4b/0x3e0
[  270.920176][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  270.920187][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  270.920197][    C0]  print_report+0xca/0x230
[  270.920224][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  270.920234][    C0]  kasan_report+0x118/0x150
[  270.920245][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  270.920255][    C0]  rose_timer_expiry+0x471/0x4b0
[  270.920265][    C0]  call_timer_fn+0x17e/0x5f0
[  270.920273][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  270.920281][    C0]  ? call_timer_fn+0xbe/0x5f0
[  270.920289][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  270.920298][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.920310][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.920319][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  270.920328][    C0]  __run_timer_base+0x61a/0x860
[  270.920346][    C0]  ? ktime_get+0x3e/0x1f0
[  270.920358][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  270.920369][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  270.920382][    C0]  run_timer_softirq+0xb7/0x180
[  270.920394][    C0]  handle_softirqs+0x286/0x870
[  270.920404][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  270.920413][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  270.920422][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  270.920434][    C0]  __irq_exit_rcu+0xca/0x1f0
[  270.920457][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  270.920468][    C0]  irq_exit_rcu+0x9/0x30
[  270.920476][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  270.920484][    C0]  </IRQ>
[  270.920487][    C0]  <TASK>
[  270.920490][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.920499][    C0] RIP: 0010:debug_smp_processor_id+0xb/0x20
[  270.920509][    C0] Code: 88 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 a0 8b e2 8b <48> c7 c6 e0 8b e2 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90
[  270.920516][    C0] RSP: 0018:ffffc90002c675d0 EFLAGS: 00000282
[  270.920525][    C0] RAX: 0000000000000001 RBX: ffffffff903fe401 RCX: ffff88801f8b0000
[  270.920531][    C0] RDX: ffffc90002c67701 RSI: dffffc0000000000 RDI: ffffffff8be28ba0
[  270.920537][    C0] RBP: dffffc0000000000 R08: ffffc90002c67ee0 R09: 0000000000000000
[  270.920543][    C0] R10: ffffc90002c67718 R11: fffff5200058cee5 R12: ffffc90002c67ef0
[  270.920549][    C0] R13: ffffc90002c60000 R14: ffffc90002c676c8 R15: ffffffff8172aae5
[  270.920555][    C0]  ? unwind_next_frame+0xa5/0x2390
[  270.920567][    C0]  rcu_is_watching+0x15/0xb0
[  270.920576][    C0]  ? unwind_next_frame+0xa5/0x2390
[  270.920584][    C0]  unwind_next_frame+0x1965/0x2390
[  270.920596][    C0]  ? unwind_next_frame+0xa5/0x2390
[  270.920605][    C0]  ? ksys_read+0x145/0x250
[  270.920616][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  270.920628][    C0]  arch_stack_walk+0x11c/0x150
[  270.920639][    C0]  ? do_syscall_64+0xfa/0x3b0
[  270.920648][    C0]  stack_trace_save+0x9c/0xe0
[  270.920658][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  270.920670][    C0]  ? __lock_acquire+0xab9/0xd20
[  270.920677][    C0]  kasan_save_track+0x3e/0x80
[  270.920687][    C0]  ? kasan_save_track+0x3e/0x80
[  270.920695][    C0]  ? kasan_save_free_info+0x46/0x50
[  270.920704][    C0]  ? __kasan_slab_free+0x62/0x70
[  270.920713][    C0]  ? kfree+0x18e/0x440
[  270.920723][    C0]  ? uevent_show+0x1d5/0x310
[  270.920731][    C0]  ? dev_attr_show+0x58/0xc0
[  270.920739][    C0]  ? sysfs_kf_seq_show+0x310/0x490
[  270.920750][    C0]  ? seq_read_iter+0x4ea/0xe10
[  270.920760][    C0]  ? vfs_read+0x4d0/0x980
[  270.920769][    C0]  ? ksys_read+0x145/0x250
[  270.920786][    C0]  kasan_save_free_info+0x46/0x50
[  270.920795][    C0]  __kasan_slab_free+0x62/0x70
[  270.920804][    C0]  ? uevent_show+0x1d5/0x310
[  270.920812][    C0]  kfree+0x18e/0x440
[  270.920821][    C0]  ? uevent_show+0x15a/0x310
[  270.920829][    C0]  uevent_show+0x1d5/0x310
[  270.920839][    C0]  dev_attr_show+0x58/0xc0
[  270.920846][    C0]  ? __pfx_dev_attr_show+0x10/0x10
[  270.920855][    C0]  sysfs_kf_seq_show+0x310/0x490
[  270.920868][    C0]  seq_read_iter+0x4ea/0xe10
[  270.920881][    C0]  vfs_read+0x4d0/0x980
[  270.920892][    C0]  ? __pfx_vfs_read+0x10/0x10
[  270.920905][    C0]  ksys_read+0x145/0x250
[  270.920915][    C0]  ? __pfx_ksys_read+0x10/0x10
[  270.920926][    C0]  ? do_syscall_64+0xbe/0x3b0
[  270.920935][    C0]  do_syscall_64+0xfa/0x3b0
[  270.920943][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.920951][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.920958][    C0]  ? exc_page_fault+0x9f/0xf0
[  270.920966][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.920973][    C0] RIP: 0033:0x7f5980585b6a
[  270.920981][    C0] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
[  270.920988][    C0] RSP: 002b:00007fffc1b875b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  270.920996][    C0] RAX: ffffffffffffffda RBX: 0000560dbc562110 RCX: 00007f5980585b6a
[  270.921002][    C0] RDX: 0000000000001000 RSI: 0000560dbc5710a0 RDI: 0000000000000008
[  270.921007][    C0] RBP: 0000560dbc562110 R08: 0000000000000008 R09: 0000000000000004
[  270.921012][    C0] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
[  270.921017][    C0] R13: 0000000000003fff R14: 00007fffc1b87a98 R15: 000000000000000a
[  270.921025][    C0]  </TASK>
[  270.921028][    C0] 
[  271.110691][    C0] Allocated by task 16383:
[  271.112333][    C0]  kasan_save_track+0x3e/0x80
[  271.113782][    C0]  __kasan_kmalloc+0x93/0xb0
[  271.115174][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  271.116764][    C0]  __genradix_ptr_alloc+0x199/0x4a0
[  271.118313][    C0]  __genradix_prealloc+0x44/0x90
[  271.119819][    C0]  sctp_stream_init+0x14b/0x440
[  271.121320][    C0]  sctp_association_new+0x10dd/0x25f0
[  271.122969][    C0]  sctp_connect_new_asoc+0x2c5/0x690
[  271.124599][    C0]  sctp_sendmsg+0x155c/0x2810
[  271.126045][    C0]  __sock_sendmsg+0x19c/0x270
[  271.127500][    C0]  ____sys_sendmsg+0x52d/0x830
[  271.128956][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  271.130382][    C0]  __sys_sendmmsg+0x227/0x430
[  271.131857][    C0]  __x64_sys_sendmmsg+0xa0/0xc0
[  271.133460][    C0]  do_syscall_64+0xfa/0x3b0
[  271.134888][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.136727][    C0] 
[  271.137479][    C0] Freed by task 16382:
[  271.138715][    C0]  kasan_save_track+0x3e/0x80
[  271.140144][    C0]  kasan_save_free_info+0x46/0x50
[  271.141693][    C0]  __kasan_slab_free+0x62/0x70
[  271.143548][    C0]  kfree+0x18e/0x440
[  271.144796][    C0]  sctp_stream_free+0xd5/0x110
[  271.146247][    C0]  sctp_association_free+0x26d/0x7f0
[  271.147830][    C0]  sctp_do_sm+0x3eba/0x5a20
[  271.149246][    C0]  sctp_primitive_SHUTDOWN+0x98/0xc0
[  271.150862][    C0]  sctp_close+0x409/0x900
[  271.152213][    C0]  inet_release+0x144/0x190
[  271.153613][    C0]  sock_close+0xc3/0x240
[  271.154909][    C0]  __fput+0x44c/0xa70
[  271.156132][    C0]  task_work_run+0x1d4/0x260
[  271.157608][    C0]  exit_to_user_mode_loop+0xec/0x110
[  271.159474][    C0]  do_syscall_64+0x2bd/0x3b0
[  271.160873][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.162738][    C0] 
[  271.163492][    C0] The buggy address belongs to the object at ffff888030ec6c00
[  271.163492][    C0]  which belongs to the cache kmalloc-512 of size 512
[  271.167622][    C0] The buggy address is located 42 bytes inside of
[  271.167622][    C0]  freed 512-byte region [ffff888030ec6c00, ffff888030ec6e00)
[  271.171673][    C0] 
[  271.172423][    C0] The buggy address belongs to the physical page:
[  271.174357][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30ec4
[  271.177061][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  271.179606][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  271.181887][    C0] page_type: f5(slab)
[  271.183168][    C0] raw: 00fff00000000040 ffff88801a441c80 ffffea0004184800 dead000000000002
[  271.185881][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  271.188497][    C0] head: 00fff00000000040 ffff88801a441c80 ffffea0004184800 dead000000000002
[  271.191109][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  271.193687][    C0] head: 00fff00000000002 ffffea0000c3b101 00000000ffffffff 00000000ffffffff
[  271.196406][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  271.199002][    C0] page dumped because: kasan: bad access detected
[  271.200908][    C0] page_owner tracks the page as allocated
[  271.202687][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 64, tgid 64 (kworker/u9:3), ts 74745478464, free_ts 0
[  271.208709][    C0]  post_alloc_hook+0x240/0x2a0
[  271.210156][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  271.211889][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  271.213629][    C0]  alloc_pages_mpol+0x232/0x4a0
[  271.215118][    C0]  allocate_slab+0x8a/0x3b0
[  271.216541][    C0]  ___slab_alloc+0xbfc/0x1480
[  271.217995][    C0]  __kmalloc_noprof+0x305/0x4f0
[  271.219582][    C0]  fib6_info_alloc+0x30/0xf0
[  271.221004][    C0]  ip6_route_info_create+0x142/0x860
[  271.222646][    C0]  ip6_route_add+0x49/0x1b0
[  271.224065][    C0]  addrconf_add_dev+0x24f/0x340
[  271.225579][    C0]  addrconf_init_auto_addrs+0x5c4/0xab0
[  271.227277][    C0]  addrconf_notify+0xacc/0x1010
[  271.228778][    C0]  notifier_call_chain+0x1b6/0x3e0
[  271.230339][    C0]  netif_state_change+0x284/0x3a0
[  271.231967][    C0]  linkwatch_do_dev+0x117/0x170
[  271.233505][    C0] page_owner free stack trace missing
[  271.235137][    C0] 
[  271.235910][    C0] Memory state around the buggy address:
[  271.237631][    C0]  ffff888030ec6b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  271.240045][    C0]  ffff888030ec6b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  271.242496][    C0] >ffff888030ec6c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  271.244918][    C0]                                   ^
[  271.246492][    C0]  ffff888030ec6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  271.248820][    C0]  ffff888030ec6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  271.251187][    C0] ==================================================================
[  271.253869][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  271.256226][    C0] CPU: 0 UID: 0 PID: 16193 Comm: udevd Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  271.260648][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.264641][    C0] Call Trace:
[  271.265960][    C0]  <IRQ>
[  271.267144][    C0]  dump_stack_lvl+0x99/0x250
[  271.268936][    C0]  ? __asan_memcpy+0x40/0x70
[  271.270754][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.272844][    C0]  ? __pfx__printk+0x10/0x10
[  271.274698][    C0]  panic+0x2db/0x790
[  271.276193][    C0]  ? __pfx_panic+0x10/0x10
[  271.277872][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  271.280088][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  271.282462][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  271.284994][    C0]  ? print_memory_metadata+0x314/0x400
[  271.287080][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  271.289053][    C0]  check_panic_on_warn+0x89/0xb0
[  271.291058][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  271.293082][    C0]  end_report+0x78/0x160
[  271.294802][    C0]  kasan_report+0x129/0x150
[  271.296614][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  271.298647][    C0]  rose_timer_expiry+0x471/0x4b0
[  271.300623][    C0]  call_timer_fn+0x17e/0x5f0
[  271.302426][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  271.304523][    C0]  ? call_timer_fn+0xbe/0x5f0
[  271.306336][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  271.308313][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.310314][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.312257][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  271.314377][    C0]  __run_timer_base+0x61a/0x860
[  271.316282][    C0]  ? ktime_get+0x3e/0x1f0
[  271.317954][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  271.320065][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  271.322559][    C0]  run_timer_softirq+0xb7/0x180
[  271.324472][    C0]  handle_softirqs+0x286/0x870
[  271.326405][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  271.328275][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  271.330288][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  271.332354][    C0]  __irq_exit_rcu+0xca/0x1f0
[  271.334236][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  271.336340][    C0]  irq_exit_rcu+0x9/0x30
[  271.338041][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  271.340279][    C0]  </IRQ>
[  271.341480][    C0]  <TASK>
[  271.342703][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.345125][    C0] RIP: 0010:debug_smp_processor_id+0xb/0x20
[  271.347515][    C0] Code: 88 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 a0 8b e2 8b <48> c7 c6 e0 8b e2 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90
[  271.354830][    C0] RSP: 0018:ffffc90002c675d0 EFLAGS: 00000282
[  271.357231][    C0] RAX: 0000000000000001 RBX: ffffffff903fe401 RCX: ffff88801f8b0000
[  271.360347][    C0] RDX: ffffc90002c67701 RSI: dffffc0000000000 RDI: ffffffff8be28ba0
[  271.363430][    C0] RBP: dffffc0000000000 R08: ffffc90002c67ee0 R09: 0000000000000000
[  271.366504][    C0] R10: ffffc90002c67718 R11: fffff5200058cee5 R12: ffffc90002c67ef0
[  271.369606][    C0] R13: ffffc90002c60000 R14: ffffc90002c676c8 R15: ffffffff8172aae5
[  271.372703][    C0]  ? unwind_next_frame+0xa5/0x2390
[  271.374788][    C0]  rcu_is_watching+0x15/0xb0
[  271.376671][    C0]  ? unwind_next_frame+0xa5/0x2390
[  271.378675][    C0]  unwind_next_frame+0x1965/0x2390
[  271.380667][    C0]  ? unwind_next_frame+0xa5/0x2390
[  271.382706][    C0]  ? ksys_read+0x145/0x250
[  271.384474][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  271.386808][    C0]  arch_stack_walk+0x11c/0x150
[  271.388690][    C0]  ? do_syscall_64+0xfa/0x3b0
[  271.390503][    C0]  stack_trace_save+0x9c/0xe0
[  271.392306][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  271.394099][    C0]  ? __lock_acquire+0xab9/0xd20
[  271.395696][    C0]  kasan_save_track+0x3e/0x80
[  271.397392][    C0]  ? kasan_save_track+0x3e/0x80
[  271.399299][    C0]  ? kasan_save_free_info+0x46/0x50
[  271.401312][    C0]  ? __kasan_slab_free+0x62/0x70
[  271.403194][    C0]  ? kfree+0x18e/0x440
[  271.404778][    C0]  ? uevent_show+0x1d5/0x310
[  271.406570][    C0]  ? dev_attr_show+0x58/0xc0
[  271.408323][    C0]  ? sysfs_kf_seq_show+0x310/0x490
[  271.410311][    C0]  ? seq_read_iter+0x4ea/0xe10
[  271.412141][    C0]  ? vfs_read+0x4d0/0x980
[  271.413730][    C0]  ? ksys_read+0x145/0x250
[  271.415549][    C0]  kasan_save_free_info+0x46/0x50
[  271.417613][    C0]  __kasan_slab_free+0x62/0x70
[  271.419520][    C0]  ? uevent_show+0x1d5/0x310
[  271.421356][    C0]  kfree+0x18e/0x440
[  271.422909][    C0]  ? uevent_show+0x15a/0x310
[  271.424716][    C0]  uevent_show+0x1d5/0x310
[  271.426521][    C0]  dev_attr_show+0x58/0xc0
[  271.428195][    C0]  ? __pfx_dev_attr_show+0x10/0x10
[  271.430216][    C0]  sysfs_kf_seq_show+0x310/0x490
[  271.432209][    C0]  seq_read_iter+0x4ea/0xe10
[  271.434048][    C0]  vfs_read+0x4d0/0x980
[  271.435680][    C0]  ? __pfx_vfs_read+0x10/0x10
[  271.437557][    C0]  ksys_read+0x145/0x250
[  271.439229][    C0]  ? __pfx_ksys_read+0x10/0x10
[  271.441070][    C0]  ? do_syscall_64+0xbe/0x3b0
[  271.442955][    C0]  do_syscall_64+0xfa/0x3b0
[  271.444787][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.446804][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.449016][    C0]  ? exc_page_fault+0x9f/0xf0
[  271.450552][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.452462][    C0] RIP: 0033:0x7f5980585b6a
[  271.454026][    C0] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
[  271.461285][    C0] RSP: 002b:00007fffc1b875b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  271.464606][    C0] RAX: ffffffffffffffda RBX: 0000560dbc562110 RCX: 00007f5980585b6a
[  271.467604][    C0] RDX: 0000000000001000 RSI: 0000560dbc5710a0 RDI: 0000000000000008
[  271.470724][    C0] RBP: 0000560dbc562110 R08: 0000000000000008 R09: 0000000000000004
[  271.473812][    C0] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
[  271.476878][    C0] R13: 0000000000003fff R14: 00007fffc1b87a98 R15: 000000000000000a
[  271.480007][    C0]  </TASK>
[  271.481921][    C0] Kernel Offset: disabled
[  271.483595][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:50:48  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df6590 RSP=ffffc90000007410
R8 =ffff888107a38237 R9 =1ffff11020f47046 R10=dffffc0000000000 R11=ffffffff85461c50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461cc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f59804afc80 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d30b389161 CR3=000000010e972000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=0000000000000051 0000000033330030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff0000ff00 XMM09=2d78722f73657565 75712f336e616c77
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff88810be0d640 RBX=0000000000000000 RCX=b1d6b6ee1d12b800 RDX=0000000000000000
RSI=ffffffff822d643a RDI=1ffffffff1c27e1c RBP=ffffffff822d641d RSP=ffffc900035a72c8
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff9400016f6a1
R12=0000000000000002 R13=ffffffff8e13f0e0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819e3beb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555638ba500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff3550e56c0 CR3=0000000027652000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff354411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
