last executing test programs:

356.148733ms ago: executing program 1 (id=5402):
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))

299.066293ms ago: executing program 2 (id=5403):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

298.840089ms ago: executing program 0 (id=5404):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000010000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031ed3afa84c401f0ece6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cdbef2662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3ddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc521718348071ec6288906347dcd62b75c72ce26424630ff7bb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48)

298.650915ms ago: executing program 1 (id=5405):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)

234.26672ms ago: executing program 2 (id=5406):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x7ffffe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)

234.005819ms ago: executing program 0 (id=5407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x20808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

232.566291ms ago: executing program 1 (id=5408):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c)

157.536489ms ago: executing program 2 (id=5409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011000101000000001d00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00!@\x00\x00\b\x00)'], 0x28}}, 0x0)

157.27185ms ago: executing program 0 (id=5410):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

107.299983ms ago: executing program 2 (id=5411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)

107.017141ms ago: executing program 0 (id=5412):
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000e40))

106.765199ms ago: executing program 1 (id=5413):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
listen(r0, 0x3)

49.426394ms ago: executing program 0 (id=5414):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

49.184507ms ago: executing program 2 (id=5415):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

49.040872ms ago: executing program 1 (id=5416):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005fd0a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

624.995µs ago: executing program 0 (id=5417):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)

140.886µs ago: executing program 2 (id=5418):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 1 (id=5419):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac093296", 0x4}], 0x1)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

rface caif0 may have been left with an inconsistent configuration, please check.
[   79.963477][ T6103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.008699][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[   80.050447][ T6105] gtp0: entered promiscuous mode
[   80.053340][ T6105] gtp0: entered allmulticast mode
[   80.053748][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'.
[   80.062083][ T6107] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[   80.067816][ T6107] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   80.195561][ T6111] No such timeout policy "syz0"
[   80.350802][ T6121] netlink: 'syz.0.103': attribute type 2 has an invalid length.
[   80.644198][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'.
[   80.719623][ T6142] tipc: Started in network mode
[   80.722514][ T6142] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   80.726204][ T6142] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   80.763262][ T5217] Bluetooth: hci0: command tx timeout
[   80.763330][ T5855] Bluetooth: hci1: command tx timeout
[   80.765055][ T5217] Bluetooth: hci2: command tx timeout
[   81.480180][ T6157] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   81.483672][ T6157] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   81.652227][ T6167] Bluetooth: MGMT ver 1.23
[   81.915408][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.922295][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.926506][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.929073][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.034417][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'.
[   82.055747][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   83.001053][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'.
[   83.059212][ T6231] geneve2: entered promiscuous mode
[   84.009586][ T6288] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   84.169380][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.183'.
[   84.383189][ T6313] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.495306][ T6318] ip6erspan0: entered promiscuous mode
[   84.596598][ T6326] netlink: 'syz.1.191': attribute type 21 has an invalid length.
[   84.613315][ T6326] netlink: 128 bytes leftover after parsing attributes in process `syz.1.191'.
[   84.668928][ T6326] netlink: 3 bytes leftover after parsing attributes in process `syz.1.191'.
[   84.669005][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'.
[   84.686511][ T6329] xfrm1: entered promiscuous mode
[   84.688689][ T6329] xfrm1: entered allmulticast mode
[   84.743778][ T6335] netlink: 'syz.2.196': attribute type 4 has an invalid length.
[   85.849149][ T6383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   85.861453][ T6383] batman_adv: batadv0: Adding interface: ip6gretap1
[   85.864953][ T6383] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.886677][ T6383] batman_adv: batadv0: Interface activated: ip6gretap1
[   86.126457][ T6403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.226'.
[   86.404968][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'.
[   86.408001][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'.
[   86.411348][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'.
[   86.417819][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'.
[   86.421645][ T6419] netlink: 21 bytes leftover after parsing attributes in process `syz.0.234'.
[   86.467504][   T10] cfg80211: failed to load regulatory.db
[   87.393563][ T6482] syzkaller1: entered promiscuous mode
[   87.395783][ T6482] syzkaller1: entered allmulticast mode
[   88.158757][ T6533] syzkaller1: entered promiscuous mode
[   88.161165][ T6533] syzkaller1: entered allmulticast mode
[   88.554588][ T6551] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[   88.618024][ T6551] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.686057][ T6555] bond1: (slave geneve2): making interface the new active one
[   88.690706][ T6555] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   88.735426][ T6551] bond1: entered promiscuous mode
[   88.737504][ T6551] geneve2: entered promiscuous mode
[   88.829251][ T6563] ieee802154 phy0 wpan0: encryption failed: -22
[   88.832460][ T6563] netlink: 196 bytes leftover after parsing attributes in process `syz.2.300'.
[   88.839133][ T6563] lo: left promiscuous mode
[   88.847618][ T6563] tunl0: left promiscuous mode
[   88.851994][ T6563] gre0: left promiscuous mode
[   88.874438][ T6563] gretap0: left promiscuous mode
[   88.887894][ T6563] erspan0: left promiscuous mode
[   88.909812][ T6563] ip_vti0: left promiscuous mode
[   88.922173][ T6563] ip6_vti0: left promiscuous mode
[   88.933096][ T6563] sit0: left promiscuous mode
[   88.939366][ T6563] ip6tnl0: left promiscuous mode
[   88.943968][ T6563] ip6gre0: left promiscuous mode
[   88.948076][ T6563] syz_tun: left promiscuous mode
[   88.959484][ T6563] ip6gretap0: left promiscuous mode
[   88.974830][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.978637][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.993897][ T6563] bridge0: left promiscuous mode
[   88.999611][ T6563] vcan0: left promiscuous mode
[   89.011932][ T6563] bond0: left promiscuous mode
[   89.014255][ T6563] bond_slave_0: left promiscuous mode
[   89.016723][ T6563] bond_slave_1: left promiscuous mode
[   89.026082][ T6563] team0: left promiscuous mode
[   89.028185][ T6563] team_slave_0: left promiscuous mode
[   89.030660][ T6563] team_slave_1: left promiscuous mode
[   89.046117][ T6563] dummy0: left promiscuous mode
[   89.054792][ T6563] nlmon0: left promiscuous mode
[   89.058961][ T6563] caif0: left promiscuous mode
[   89.221176][ T6563] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.227025][ T6563] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.230722][ T6563] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.234609][ T6563] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.277799][ T6563] gtp0: left promiscuous mode
[   89.283424][ T6563] ip6erspan0: left promiscuous mode
[   89.288942][ T6563] xfrm1: left promiscuous mode
[   89.536584][   T33] audit: type=1800 audit(1753173489.524:2): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=583 res=0 errno=0
[   89.557438][   T33] audit: type=1804 audit(1753173489.534:3): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.308" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=583 res=1 errno=0
[   89.970236][ T6617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.324'.
[   90.103884][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'.
[   90.110745][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'.
[   90.686156][ T6649] xt_CT: No such helper "netbios-ns"
[   90.978051][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.2.338'.
[   90.985560][ T6654] netlink: 44 bytes leftover after parsing attributes in process `syz.2.338'.
[   91.400432][ T6686] GUP no longer grows the stack in syz.1.348 (6686): 200000006000-20000000a000 (200000005000)
[   91.407596][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.1.348 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[   91.407615][ T6686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.407625][ T6686] Call Trace:
[   91.407632][ T6686]  <TASK>
[   91.407662][ T6686]  dump_stack_lvl+0x189/0x250
[   91.407695][ T6686]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.407710][ T6686]  ? __pfx__printk+0x10/0x10
[   91.407727][ T6686]  ? find_vma+0xe7/0x160
[   91.407758][ T6686]  __get_user_pages+0x2a60/0x30b0
[   91.407804][ T6686]  ? __pfx___get_user_pages+0x10/0x10
[   91.407817][ T6686]  ? __gup_longterm_locked+0xbf7/0x15b0
[   91.407836][ T6686]  ? down_read_killable+0x1d1/0x350
[   91.407853][ T6686]  ? try_get_folio+0x633/0x660
[   91.407875][ T6686]  __gup_longterm_locked+0xd66/0x15b0
[   91.407900][ T6686]  ? try_grab_folio_fast+0x1be/0x4f0
[   91.407929][ T6686]  ? gup_fast_fallback+0x1afc/0x2260
[   91.407944][ T6686]  gup_fast_fallback+0x1cd4/0x2260
[   91.407989][ T6686]  ? __pfx_gup_fast_fallback+0x10/0x10
[   91.408003][ T6686]  ? trace_contention_end+0x39/0x120
[   91.408022][ T6686]  ? __mutex_lock+0x330/0xe80
[   91.408038][ T6686]  ? futex_unqueue+0x22/0x240
[   91.408056][ T6686]  ? futex_unqueue+0x22/0x240
[   91.408068][ T6686]  ? futex_unqueue+0x22/0x240
[   91.408079][ T6686]  ? is_valid_gup_args+0x11f/0x200
[   91.408099][ T6686]  ? get_user_pages_fast+0x4d/0xb0
[   91.408118][ T6686]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   91.408175][ T6686]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   91.408189][ T6686]  ? get_futex_key+0x880/0x1640
[   91.408199][ T6686]  ? wait_for_space+0x24d/0x2d0
[   91.408241][ T6686]  iov_iter_get_pages2+0x5e/0xa0
[   91.408267][ T6686]  __se_sys_vmsplice+0x548/0x10d0
[   91.408306][ T6686]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   91.408324][ T6686]  ? __pfx_futex_wait+0x10/0x10
[   91.408348][ T6686]  ? __lock_acquire+0xab9/0xd20
[   91.408392][ T6686]  ? do_pipe2+0xf7/0x170
[   91.408407][ T6686]  ? rcu_is_watching+0x15/0xb0
[   91.408420][ T6686]  ? do_syscall_64+0xbe/0x3b0
[   91.408431][ T6686]  do_syscall_64+0xfa/0x3b0
[   91.408439][ T6686]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.408447][ T6686]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.408456][ T6686]  ? exc_page_fault+0x9f/0xf0
[   91.408466][ T6686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.408475][ T6686] RIP: 0033:0x7fbfa0d8e9a9
[   91.408484][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.408492][ T6686] RSP: 002b:00007fbfa1b34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   91.408502][ T6686] RAX: ffffffffffffffda RBX: 00007fbfa0fb5fa0 RCX: 00007fbfa0d8e9a9
[   91.408509][ T6686] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   91.408514][ T6686] RBP: 00007fbfa0e10d69 R08: 0000000000000000 R09: 0000000000000000
[   91.408520][ T6686] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   91.408525][ T6686] R13: 0000000000000000 R14: 00007fbfa0fb5fa0 R15: 00007fff286eaed8
[   91.408538][ T6686]  </TASK>
[   91.685364][ T6703] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.790839][ T6711] bond0: option min_links: invalid value (18446744073709551604)
[   91.807012][ T6711] bond0: option min_links: allowed values 0 - 2147483647
[   91.959486][ T6725] pimreg: entered allmulticast mode
[   91.972700][ T6725] pimreg: left allmulticast mode
[   92.011068][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.369'.
[   92.014882][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'.
[   92.045583][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'.
[   92.048662][ T6731] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   92.050914][ T6731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.875186][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   92.915475][ T6762] bridge_slave_1: left allmulticast mode
[   92.917390][ T6762] bridge_slave_1: left promiscuous mode
[   92.919906][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.930434][ T6762] bridge_slave_0: left allmulticast mode
[   92.935595][ T6762] bridge_slave_0: left promiscuous mode
[   92.938170][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.381291][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'.
[   93.855554][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.860014][ T6803] batadv_slave_1: entered promiscuous mode
[   94.144360][   T24] IPVS: starting estimator thread 0...
[   94.249115][ T6819] IPVS: using max 62 ests per chain, 148800 per kthread
[   94.909032][ T6854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.439921][ T6866] delete_channel: no stack
[   95.462161][ T6868] Zero length message leads to an empty skb
[   95.645269][ T6878] openvswitch: netlink: IPv6 tunnel dst address is zero
[   95.776982][ T6885] netlink: 'syz.0.439': attribute type 6 has an invalid length.
[   95.781103][ T6885] netlink: 'syz.0.439': attribute type 6 has an invalid length.
[   95.785426][ T6886] ieee802154 phy0 wpan0: encryption failed: -22
[   95.915681][ T6894] __nla_validate_parse: 3 callbacks suppressed
[   95.915691][ T6894] netlink: 14 bytes leftover after parsing attributes in process `syz.2.443'.
[   96.002001][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[   96.003322][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'.
[   96.139015][ T6910] netlink: 'syz.0.451': attribute type 8 has an invalid length.
[   96.251718][ T6912] tipc: Started in network mode
[   96.257440][ T6912] tipc: Node identity e2079606a741, cluster identity 4711
[   96.272881][ T6912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.298613][ T6912] syzkaller0: entered promiscuous mode
[   96.306937][ T6912] syzkaller0: entered allmulticast mode
[   96.379989][ T6912] tipc: Resetting bearer <eth:syzkaller0>
[   96.389482][ T6911] tipc: Resetting bearer <eth:syzkaller0>
[   96.400031][ T6911] tipc: Disabling bearer <eth:syzkaller0>
[   96.566912][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'.
[   96.703628][ T6939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.146075][ T6963] netlink: 'syz.1.475': attribute type 5 has an invalid length.
[   98.624890][ T6995] xt_TCPMSS: Only works on TCP SYN packets
[   98.691955][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'.
[   99.399189][ T7057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.646473][   T10] IPVS: starting estimator thread 0...
[   99.734979][ T7074] IPVS: using max 53 ests per chain, 127200 per kthread
[   99.782996][ T7079] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  100.627186][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027642400: rx timeout, send abort
[  101.065670][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'.
[  101.071591][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'.
[  101.131738][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027642400: abort rx timeout. Force session deactivation
[  101.344732][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.575'.
[  101.348214][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.575'.
[  101.392527][ T7177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.544943][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'.
[  101.577689][ T7187] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  101.593691][ T7187] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  101.621055][ T7197] 8021q: VLANs not supported on ipvlan1
[  102.045535][ T7224] netlink: 'syz.2.594': attribute type 1 has an invalid length.
[  102.291836][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[  102.563312][ T7267] netlink: 'syz.0.615': attribute type 1 has an invalid length.
[  102.566079][ T7267] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.615'.
[  102.571091][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'.
[  102.935230][ T7298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.628'.
[  103.369595][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.642'.
[  104.415007][ T7377] netlink: zone id is out of range
[  104.418126][ T7377] netlink: zone id is out of range
[  104.424773][ T7377] netlink: zone id is out of range
[  104.426891][ T7377] netlink: zone id is out of range
[  104.428686][ T7377] netlink: zone id is out of range
[  104.430424][ T7377] netlink: zone id is out of range
[  104.432297][ T7377] netlink: zone id is out of range
[  104.437903][ T7377] netlink: zone id is out of range
[  104.439741][ T7377] netlink: zone id is out of range
[  104.441503][ T7377] netlink: zone id is out of range
[  105.411474][ T7446] netlink: 'syz.1.687': attribute type 12 has an invalid length.
[  105.570296][ T7461] IPv6: NLM_F_REPLACE set, but no existing node found!
[  106.359154][ T7501] TCP: TCP_TX_DELAY enabled
[  107.221670][ T7521] netlink: 'syz.0.717': attribute type 42 has an invalid length.
[  108.344168][ T7542] netlink: 'syz.2.727': attribute type 11 has an invalid length.
[  108.541075][ T7557] __nla_validate_parse: 1 callbacks suppressed
[  108.541092][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'.
[  109.769101][ T7569] IPv6: syztnl1: Disabled Multicast RS
[  109.871496][ T7573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.737'.
[  110.004932][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'.
[  110.008552][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'.
[  110.012184][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'.
[  110.330077][ T7618] netlink: 72 bytes leftover after parsing attributes in process `syz.2.756'.
[  110.338974][ T7618] netlink: 72 bytes leftover after parsing attributes in process `syz.2.756'.
[  110.446133][ T7623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.449310][ T7623] syzkaller0: entered promiscuous mode
[  110.451325][ T7623] syzkaller0: entered allmulticast mode
[  110.462778][ T7623] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  110.467793][ T7623] tipc: Resetting bearer <eth:syzkaller0>
[  110.480722][ T7621] tipc: Resetting bearer <eth:syzkaller0>
[  110.523289][ T7621] tipc: Disabling bearer <eth:syzkaller0>
[  110.743774][ T7647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.147643][ T7664] sctp: [Deprecated]: syz.1.777 (pid 7664) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.147643][ T7664] Use struct sctp_sack_info instead
[  111.465467][ T7666] infiniband syz!: set active
[  111.468695][ T7666] infiniband syz!: added team_slave_0
[  111.469427][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'.
[  111.528045][ T7666] RDS/IB: syz!: added
[  111.530366][ T7666] smc: adding ib device syz! with port count 1
[  111.535968][ T7666] smc:    ib device syz! port 1 has pnetid 
[  112.014226][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'.
[  112.017756][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'.
[  112.207520][ T7694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.211065][ T7694] syzkaller0: entered promiscuous mode
[  112.213712][ T7694] syzkaller0: entered allmulticast mode
[  112.250244][ T7694] tipc: Resetting bearer <eth:syzkaller0>
[  112.269955][ T7692] tipc: Resetting bearer <eth:syzkaller0>
[  112.298341][ T7692] tipc: Disabling bearer <eth:syzkaller0>
[  112.654642][ T7723] erspan0: entered promiscuous mode
[  112.657004][ T7723] macvtap1: entered promiscuous mode
[  112.663908][ T7725] syz.0.806 (7725) used greatest stack depth: 17912 bytes left
[  112.669365][ T7723] macvtap1: entered allmulticast mode
[  112.673878][ T7723] erspan0: entered allmulticast mode
[  113.317567][ T7766] sit0: entered promiscuous mode
[  113.481864][ T7776] netlink: 'syz.0.830': attribute type 4 has an invalid length.
[  113.578847][ T7784] __nla_validate_parse: 3 callbacks suppressed
[  113.578866][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'.
[  113.589042][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'.
[  113.983084][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'.
[  113.986913][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'.
[  114.496529][ T7814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.849'.
[  114.559320][ T7816] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.851'.
[  114.562243][ T7816] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.851'.
[  114.653724][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.852'.
[  114.719250][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'.
[  115.134021][ T7851] net_ratelimit: 163 callbacks suppressed
[  115.134034][ T7851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.387609][ T7862] netlink: 'syz.1.872': attribute type 9 has an invalid length.
[  115.591995][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'.
[  115.601722][ T7866] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  115.605755][ T7866] tipc: Enabled bearer <udp:syz1>, priority 10
[  115.884650][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.887428][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.987951][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.001319][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.089626][ T7875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.092983][ T7875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.096236][ T7875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.099404][ T7875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.116805][ T7875] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  116.131523][ T7875] erspan0: left allmulticast mode
[  116.162915][ T7886] netlink: 'syz.2.882': attribute type 20 has an invalid length.
[  116.186680][ T7886] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.189948][ T7886] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.192859][ T7886] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.195979][ T7886] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.214693][ T7886] netlink: 'syz.2.882': attribute type 20 has an invalid length.
[  116.509616][ T7899] vlan3: entered promiscuous mode
[  116.511824][ T7899] syz_tun: entered promiscuous mode
[  116.716691][ T7907] netlink: zone id is out of range
[  116.718820][ T7907] netlink: zone id is out of range
[  116.720837][ T7907] netlink: zone id is out of range
[  116.723164][   T95] tipc: Node number set to 4278255617
[  116.733841][ T7907] netlink: zone id is out of range
[  116.735927][ T7907] netlink: zone id is out of range
[  116.738899][ T7907] netlink: zone id is out of range
[  116.741124][ T7907] netlink: zone id is out of range
[  116.751738][ T7907] netlink: zone id is out of range
[  116.753905][ T7907] netlink: zone id is out of range
[  116.948699][ T7918] syz.1.896 uses old SIOCAX25GETINFO
[  118.424574][ T7983] netlink: 'syz.2.926': attribute type 21 has an invalid length.
[  118.630370][ T7993] __nla_validate_parse: 9 callbacks suppressed
[  118.630389][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.930'.
[  118.760259][ T7997] trusted_key: syz.2.932 sent an empty control message without MSG_MORE.
[  119.272388][ T8036] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.948'.
[  119.469794][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.956'.
[  119.563497][ T8062] netlink: 'syz.2.961': attribute type 11 has an invalid length.
[  119.798360][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'.
[  120.011857][ T8098] netlink: 'syz.2.978': attribute type 1 has an invalid length.
[  120.019245][ T8098] netlink: 'syz.2.978': attribute type 4 has an invalid length.
[  120.023511][ T8098] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.978'.
[  120.142719][ T8107] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  120.225594][ T8115] xt_TPROXY: Can be used only with -p tcp or -p udp
[  120.303063][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'.
[  120.388539][ T8129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  120.409774][ T8131] ip6t_srh: unknown srh match flags  4000
[  120.540496][ T8137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  121.128827][ T8180] netlink: 'syz.0.1014': attribute type 2 has an invalid length.
[  121.179731][ T8185] netlink: 'syz.0.1017': attribute type 4 has an invalid length.
[  121.188938][ T8185] netlink: 'syz.0.1017': attribute type 4 has an invalid length.
[  121.399529][ T8193] netlink: 'syz.0.1020': attribute type 1 has an invalid length.
[  121.406379][ T8193] netlink: 'syz.0.1020': attribute type 4 has an invalid length.
[  121.411990][ T8193] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1020'.
[  121.463981][ T8196] netlink: 'syz.0.1021': attribute type 1 has an invalid length.
[  121.829173][ T8214] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1029'.
[  121.940048][ T8222] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.943942][ T8222] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.946668][ T8222] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.949391][ T8222] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.958276][ T8222] vxlan0: entered promiscuous mode
[  121.959944][ T8222] vxlan0: entered allmulticast mode
[  122.220752][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'.
[  122.240195][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'.
[  122.454585][ T8253] ieee802154 phy0 wpan0: encryption failed: -22
[  122.500064][ T8256] No such timeout policy "syz0"
[  122.744453][ T8276] netlink: 'syz.2.1059': attribute type 29 has an invalid length.
[  122.804509][ T8280] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.807516][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.816914][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.148736][ T8307] macvlan2: entered allmulticast mode
[  123.150877][ T8307] veth1_vlan: entered allmulticast mode
[  123.156494][ T8309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.159506][ T8309] IPv6: NLM_F_CREATE should be set when creating new route
[  123.162514][ T8309] IPv6: NLM_F_CREATE should be set when creating new route
[  123.167927][ T8309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.169612][ T8307] veth1_vlan: left allmulticast mode
[  123.828735][ T8352] __nla_validate_parse: 7 callbacks suppressed
[  123.828747][ T8352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1095'.
[  123.870739][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  123.898234][ T8359] lo: entered allmulticast mode
[  123.905699][ T8359] lo: left allmulticast mode
[  124.105253][ T8372] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1103'.
[  124.166009][ T8376] net_ratelimit: 253 callbacks suppressed
[  124.166023][ T8376] sock: sock_set_timeout: `syz.1.1105' (pid 8376) tries to set negative timeout
[  124.311359][ T8384] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  124.376107][ T8392] 8021q: VLANs not supported on ip_vti0
[  124.617923][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'.
[  124.895540][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'.
[  126.588241][ T8556] wireguard0: entered promiscuous mode
[  126.590515][ T8556] wireguard0: entered allmulticast mode
[  126.737110][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'.
[  126.744175][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'.
[  126.955275][ T8548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.304017][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'.
[  128.307900][ T8613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1177'.
[  129.098793][ T8629] vlan0: entered promiscuous mode
[  129.101442][ T8629] macvlan2: entered promiscuous mode
[  129.357797][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1191'.
[  129.554505][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'.
[  129.911732][ T8671] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  129.994011][ T8676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1204'.
[  130.191636][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'.
[  131.500492][ T8726] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1227'.
[  131.713095][ T8743] bond0: (slave bond_slave_0): Releasing backup interface
[  131.718685][ T8743] bond0: (slave bond_slave_1): Releasing backup interface
[  131.744446][ T8746] validate_nla: 1 callbacks suppressed
[  131.744484][ T8746] netlink: 'syz.1.1236': attribute type 2 has an invalid length.
[  131.749807][ T8743] team0: Failed to send options change via netlink (err -105)
[  131.750123][ T8746] netlink: 'syz.1.1236': attribute type 1 has an invalid length.
[  131.753275][ T8743] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  131.756649][ T8746] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1236'.
[  131.759514][ T8743] team0: Port device team_slave_0 removed
[  131.769383][ T8743] team0: Failed to send options change via netlink (err -105)
[  131.772076][ T8743] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  131.775935][ T8743] team0: Port device team_slave_1 removed
[  131.783251][ T8743] bond1: (slave geneve2): Releasing active interface
[  131.785539][ T8743] geneve2: left promiscuous mode
[  131.799843][   T95] syz!: Port: 1 Link DOWN
[  131.945191][ T8759] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1243'.
[  132.178198][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1252'.
[  132.527251][ T8800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1261'.
[  132.536460][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.815122][   T33] audit: type=1800 audit(1753173532.794:4): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1261" name="cgroup.controllers" dev="tmpfs" ino=1784 res=0 errno=0
[  133.567595][ T8841] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  134.412082][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'.
[  134.550452][ T8866] 8021q: adding VLAN 0 to HW filter on device team0
[  134.589939][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'.
[  134.845579][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1308'.
[  134.904564][ T8905] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1310'.
[  135.018019][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'.
[  135.417207][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'.
[  135.436495][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'.
[  136.072300][ T9001] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  136.087114][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.099990][ T9001] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  138.458955][ T9088] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  138.593497][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1400'.
[  139.315353][   T33] audit: type=1804 audit(1753173539.304:5): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1418" name="/newroot/398/cgroup.controllers" dev="tmpfs" ino=2015 res=1 errno=0
[  139.334054][   T33] audit: type=1800 audit(1753173539.314:6): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1418" name="cgroup.controllers" dev="tmpfs" ino=2015 res=0 errno=0
[  139.361924][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'.
[  139.437522][ T9153] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  139.647335][ T5217] Bluetooth: hci0: command 0x0c20 tx timeout
[  139.883901][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1432'.
[  140.361330][ T9219] netlink: 'syz.0.1446': attribute type 13 has an invalid length.
[  140.367650][ T9219] netlink: 'syz.0.1446': attribute type 17 has an invalid length.
[  140.400212][ T9219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.469269][ T9224] netlink: 'syz.1.1449': attribute type 39 has an invalid length.
[  140.540929][ T9219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.615799][ T9219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.632004][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'.
[  140.639018][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'.
[  140.687504][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.023274][ T9256] sctp: [Deprecated]: syz.2.1462 (pid 9256) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.023274][ T9256] Use struct sctp_sack_info instead
[  141.035003][ T9254] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  141.069905][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1463'.
[  141.140095][ T9267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1467'.
[  141.314789][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'.
[  141.489712][ T9295] netlink: 'syz.1.1481': attribute type 32 has an invalid length.
[  141.621676][ T9306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1487'.
[  141.928099][ T9326] sctp: [Deprecated]: syz.2.1496 (pid 9326) Use of int in max_burst socket option deprecated.
[  141.928099][ T9326] Use struct sctp_assoc_value instead
[  142.659438][ T9363] nbd: must specify at least one socket
[  142.944865][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  143.187159][ T9411] xt_SECMARK: invalid mode: 0
[  144.003203][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'.
[  144.007031][ T9434] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  144.010455][ T9434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.319342][ T9462] tipc: New replicast peer: 255.255.255.255
[  144.322945][ T9462] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.767583][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  145.130720][ T9458] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  145.278152][ T9519] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  145.283756][ T9521] __nla_validate_parse: 3 callbacks suppressed
[  145.283768][ T9521] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1582'.
[  145.288671][ T9521] nbd: illegal input index 65508
[  145.446448][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'.
[  145.473959][ T9535] xt_CT: No such helper "snmp"
[  145.631025][ T9553] netlink: 'syz.1.1598': attribute type 1 has an invalid length.
[  145.645182][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  145.648715][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'.
[  145.718488][ T9560] sctp: [Deprecated]: syz.0.1601 (pid 9560) Use of int in max_burst socket option.
[  145.718488][ T9560] Use struct sctp_assoc_value instead
[  145.812628][ T9569] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1605'.
[  146.198671][ T9595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1617'.
[  146.272549][ T9602] IPv6: Can't replace route, no match found
[  146.341992][ T9611] netlink: 'syz.1.1624': attribute type 16 has an invalid length.
[  146.353901][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'.
[  146.360428][ T9614] macsec1: entered allmulticast mode
[  146.362118][ T9614] team0: entered allmulticast mode
[  146.364871][ T5217] Bluetooth: hci0: command 0x0c20 tx timeout
[  146.367885][ T9614] team0: left allmulticast mode
[  146.371476][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1624'.
[  146.567991][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'.
[  146.576806][ T9631] syz_tun: entered promiscuous mode
[  146.579059][ T9631] macvtap1: entered promiscuous mode
[  146.581278][ T9631] macvtap1: entered allmulticast mode
[  146.583671][ T9631] syz_tun: entered allmulticast mode
[  146.594843][ T9631] syz_tun: left allmulticast mode
[  146.596955][ T9631] syz_tun: left promiscuous mode
[  146.851192][ T9643] netlink: 'syz.0.1635': attribute type 13 has an invalid length.
[  146.854986][ T9643] netlink: 'syz.0.1635': attribute type 17 has an invalid length.
[  146.869115][ T9643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.386317][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'.
[  147.824415][ T9708] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  150.467629][ T9875] sctp: [Deprecated]: syz.0.1736 (pid 9875) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.467629][ T9875] Use struct sctp_sack_info instead
[  150.948495][ T9895] netlink: 'syz.1.1745': attribute type 1 has an invalid length.
[  150.978206][ T9895] bond1: entered promiscuous mode
[  150.980807][ T9895] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.999590][ T9895] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.011180][ T9895] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  151.016079][ T9895] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  151.025019][ T9895] bond1: (slave vcan1): making interface the new active one
[  151.027967][ T9895] vcan1: entered promiscuous mode
[  151.031591][ T9895] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  151.423322][ T9931] __nla_validate_parse: 4 callbacks suppressed
[  151.423340][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'.
[  151.434175][ T9929] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1759'.
[  151.965469][ T9961] : entered promiscuous mode
[  152.053865][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'.
[  154.768998][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'.
[  155.362597][T10050] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1814'.
[  155.477963][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'.
[  156.723649][T10143] netlink: 'syz.2.1859': attribute type 2 has an invalid length.
[  156.726909][T10143] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1859'.
[  157.122258][T10178] netlink: 'syz.2.1877': attribute type 1 has an invalid length.
[  157.129564][T10178] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1877'.
[  157.143897][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'.
[  157.150213][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'.
[  157.181402][T10182] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1880'.
[  157.769961][T10230] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  157.824408][T10234] netlink: 'syz.0.1904': attribute type 3 has an invalid length.
[  157.827747][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'.
[  157.907183][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[  158.562255][T10268] xt_l2tp: wrong L2TP version: 0
[  158.813402][T10277] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  159.067762][T10294] @: renamed from bond_slave_0
[  159.145117][T10298] batadv_slave_1: entered promiscuous mode
[  159.151667][T10297] batadv_slave_1: left promiscuous mode
[  159.258898][T10303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1934'.
[  159.555761][   T95] hid-generic 0005:046D:5505.0001: item fetching failed at offset 0/1
[  159.559798][   T95] hid-generic 0005:046D:5505.0001: probe with driver hid-generic failed with error -22
[  159.644013][T10331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'.
[  159.922081][T10351] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1956'.
[  159.966397][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  160.467575][T10388] syz_tun: entered promiscuous mode
[  160.690511][T10404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.730809][T10405] wireguard0: entered promiscuous mode
[  160.735158][T10405] wireguard0: entered allmulticast mode
[  160.937839][T10417] netlink: 'syz.2.1986': attribute type 64 has an invalid length.
[  161.704658][T10467] Driver unsupported XDP return value 0 on prog  (id 262) dev N/A, expect packet loss!
[  161.781903][T10470] __nla_validate_parse: 7 callbacks suppressed
[  161.781916][T10470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2007'.
[  162.459926][T10505] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  162.520814][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2027'.
[  162.710814][T10527] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2035'.
[  162.835026][T10541] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  163.006640][T10553] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2048'.
[  163.022034][T10556] netlink: 'syz.1.2050': attribute type 1 has an invalid length.
[  163.027754][T10556] NCSI netlink: No device for ifindex 0
[  163.041956][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'.
[  163.339717][T10578] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  164.013974][T10606] netlink: 'syz.0.2072': attribute type 1 has an invalid length.
[  164.016578][T10606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.055854][T10608] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  164.700425][T10641] netlink: 'syz.2.2089': attribute type 58 has an invalid length.
[  164.718230][T10634] IPVS: persistence engine module ip_vs_pe_ not found
[  164.955759][T10662] batadv1: entered allmulticast mode
[  164.958434][T10662] 8021q: adding VLAN 0 to HW filter on device batadv1
[  165.014889][T10668] netlink: 'syz.2.2101': attribute type 1 has an invalid length.
[  165.017512][T10668] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2101'.
[  165.025924][T10670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  165.142870][T10678] xt_CT: No such helper "pptp"
[  165.260620][T10690] IPVS: length: 148 != 24
[  165.297453][T10693] netlink: 'syz.2.2111': attribute type 11 has an invalid length.
[  165.308909][T10693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2111'.
[  165.325019][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'.
[  165.628023][T10703] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  165.695524][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2115'.
[  166.086418][T10735] raw_sendmsg: syz.0.2125 forgot to set AF_INET. Fix it!
[  166.635067][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2142'.
[  166.862048][T10792] netlink: 'syz.2.2146': attribute type 1 has an invalid length.
[  166.914388][T10795] tipc: Enabled bearer <udp:syz0>, priority 10
[  167.150338][T10800] IPv6: NLM_F_CREATE should be specified when creating new route
[  167.204663][T10802] netlink: 'syz.2.2150': attribute type 10 has an invalid length.
[  167.208001][T10802] netem: change failed
[  167.370301][T10810] netlink: 'syz.2.2154': attribute type 2 has an invalid length.
[  168.231866][T10875] netlink: 'syz.0.2182': attribute type 29 has an invalid length.
[  168.241664][T10875] netlink: 'syz.0.2182': attribute type 29 has an invalid length.
[  168.251595][T10875] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2182'.
[  168.467315][T10888] netlink: 'syz.2.2188': attribute type 10 has an invalid length.
[  168.470008][T10888] veth0_vlan: left promiscuous mode
[  168.479594][T10888] veth0_vlan: entered promiscuous mode
[  168.488710][T10888] team0: Device veth0_vlan failed to register rx_handler
[  168.540975][T10889] netlink: 'syz.0.2187': attribute type 13 has an invalid length.
[  168.545859][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'.
[  168.655044][T10889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.671321][T10889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.692289][T10889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.037173][T10906] netlink: 'syz.1.2196': attribute type 7 has an invalid length.
[  169.563147][ T5217] Bluetooth: hci0: command 0x0c20 tx timeout
[  169.570746][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  169.675462][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'.
[  169.704509][T10929] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2208'.
[  169.876456][T10938] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  170.470796][T10966] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  170.486969][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'.
[  170.615258][T10974] pim6reg9: entered allmulticast mode
[  170.719264][T10982] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  171.046080][T10985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.051559][T10985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.056636][T10985] bond0 (unregistering): Released all slaves
[  171.068091][T10998] netlink: 'syz.0.2238': attribute type 10 has an invalid length.
[  171.137203][T11006] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2240'.
[  172.951116][T11087] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2276'.
[  172.960634][T11087] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  173.016307][T11094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2280'.
[  173.020760][T11094] sit0: left promiscuous mode
[  173.026706][T11094] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  173.028945][T11094] macvtap1: left promiscuous mode
[  173.034656][T11097] nbd: must specify an index to disconnect
[  173.042021][T11094] bond1: left promiscuous mode
[  173.048309][T11094] vcan1: left promiscuous mode
[  173.290624][T11119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.961093][   T24] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1
[  173.974987][   T24] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[  174.111318][T11164] lo speed is unknown, defaulting to 1000
[  174.128007][T11164] lo speed is unknown, defaulting to 1000
[  174.132018][T11164] lo speed is unknown, defaulting to 1000
[  174.485267][T11164] infiniband syz0: set down
[  174.485489][T11171] netlink: 'syz.0.2310': attribute type 4 has an invalid length.
[  174.487226][T11164] infiniband syz0: added lo
[  174.499003][   T95] lo speed is unknown, defaulting to 1000
[  174.535416][T11164] RDS/IB: syz0: added
[  174.537196][T11164] smc: adding ib device syz0 with port count 1
[  174.539777][T11164] smc:    ib device syz0 port 1 has pnetid 
[  174.543200][T11164] lo speed is unknown, defaulting to 1000
[  174.648078][   T95] lo speed is unknown, defaulting to 1000
[  174.745754][T11164] lo speed is unknown, defaulting to 1000
[  174.782121][   T95] 0: reclassify loop, rule prio 0, protocol 800
[  175.113756][T11164] lo speed is unknown, defaulting to 1000
[  175.288426][T11202] netlink: 'syz.0.2323': attribute type 10 has an invalid length.
[  175.291617][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2323'.
[  175.337516][T11164] lo speed is unknown, defaulting to 1000
[  175.697571][T11213] netlink: 'syz.1.2325': attribute type 1 has an invalid length.
[  175.700404][T11213] netlink: 'syz.1.2325': attribute type 2 has an invalid length.
[  175.714169][T11213] netlink: 'syz.1.2325': attribute type 1 has an invalid length.
[  175.717211][T11213] netlink: 'syz.1.2325': attribute type 2 has an invalid length.
[  175.745553][T11203] lo speed is unknown, defaulting to 1000
[  175.798517][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'.
[  175.806502][T11220] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  176.744810][T11265] lo speed is unknown, defaulting to 1000
[  176.852505][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'.
[  176.855391][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'.
[  176.864379][T11288] netlink: 'syz.1.2359': attribute type 6 has an invalid length.
[  176.987628][T11293] netlink: 'syz.1.2362': attribute type 2 has an invalid length.
[  177.605748][T11321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2371'.
[  177.668946][T11326] 0: reclassify loop, rule prio 0, protocol 800
[  177.982301][T11343] netlink: 'syz.1.2380': attribute type 1 has an invalid length.
[  178.184395][T11357] netlink: 'syz.2.2385': attribute type 3 has an invalid length.
[  178.481097][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[  178.712983][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  178.855351][T11399] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  178.859865][T11401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2397'.
[  179.018817][   T54] Bluetooth: hci2: link tx timeout
[  179.020484][T11388] lo speed is unknown, defaulting to 1000
[  179.021032][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  179.123965][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  179.283598][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  179.347129][T11403] lo speed is unknown, defaulting to 1000
[  179.962853][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  180.041905][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'.
[  180.331965][T11468] xt_CT: You must specify a L4 protocol and not use inversions on it
[  180.507800][T11467] validate_nla: 1 callbacks suppressed
[  180.507814][T11467] netlink: 'syz.0.2427': attribute type 10 has an invalid length.
[  180.595254][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'.
[  180.632534][T11483] v: renamed from veth0_vlan
[  180.639373][T11486] bridge_slave_1: left allmulticast mode
[  180.639810][T11472] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  180.641113][T11486] bridge_slave_1: left promiscuous mode
[  180.641260][T11486] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.647461][T11472] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  180.664773][T11486] bridge_slave_0: left allmulticast mode
[  180.667019][T11486] bridge_slave_0: left promiscuous mode
[  180.669083][T11486] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.895361][T11493] xt_time: invalid argument - start or stop time greater than 23:59:59
[  181.082888][ T5217] Bluetooth: hci2: command 0x0405 tx timeout
[  181.337342][T11514] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  181.360069][T11516] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2447'.
[  181.653280][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  181.761192][T11538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.769545][T11538] syzkaller0: entered promiscuous mode
[  181.779430][T11538] syzkaller0: entered allmulticast mode
[  181.808170][T11538] tipc: Resetting bearer <eth:syzkaller0>
[  181.821584][T11537] tipc: Resetting bearer <eth:syzkaller0>
[  181.849838][T11537] tipc: Disabling bearer <eth:syzkaller0>
[  182.291968][T11552] lo speed is unknown, defaulting to 1000
[  182.297051][T11562] syzkaller1: entered promiscuous mode
[  182.302932][T11562] syzkaller1: entered allmulticast mode
[  182.330354][T11555] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2465'.
[  182.452208][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2470'.
[  182.465163][T11565] tipc: Invalid UDP bearer configuration
[  182.465223][T11565] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  183.326644][T11608] bridge0: port 1(erspan0) entered blocking state
[  183.333083][T11608] bridge0: port 1(erspan0) entered disabled state
[  183.335849][T11608] erspan0: entered allmulticast mode
[  183.357222][T11608] erspan0: entered promiscuous mode
[  183.391894][T11608] erspan0: left allmulticast mode
[  183.394265][T11608] erspan0: left promiscuous mode
[  183.397659][T11608] bridge0: port 1(erspan0) entered disabled state
[  183.429152][T11608] 0: reclassify loop, rule prio 0, protocol 800
[  183.730011][T11631] netlink: 'syz.1.2493': attribute type 1 has an invalid length.
[  183.735238][T11631] netlink: 'syz.1.2493': attribute type 1 has an invalid length.
[  183.837531][T11634] bridge0: entered allmulticast mode
[  184.345346][T11675] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  184.363785][   T95] 0: reclassify loop, rule prio 0, protocol 800
[  184.366322][   T10] 0: reclassify loop, rule prio 0, protocol 800
[  184.448072][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'.
[  184.507689][T11686] netlink: 'syz.2.2514': attribute type 1 has an invalid length.
[  184.510950][T11686] netlink: 'syz.2.2514': attribute type 3 has an invalid length.
[  184.516678][T11686] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2514'.
[  184.519502][T11686] NCSI netlink: No device for ifindex 246
[  184.785447][T11697] netlink: 'syz.2.2518': attribute type 21 has an invalid length.
[  184.788058][T11697] netlink: 'syz.2.2518': attribute type 22 has an invalid length.
[  184.790761][T11697] netlink: 'syz.2.2518': attribute type 23 has an invalid length.
[  184.795497][T11697] netlink: 'syz.2.2518': attribute type 25 has an invalid length.
[  184.798047][T11697] netlink: 'syz.2.2518': attribute type 26 has an invalid length.
[  184.800692][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2518'.
[  184.932898][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  184.961359][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'.
[  185.151824][T11716] lo: entered promiscuous mode
[  185.154792][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'.
[  185.305346][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'.
[  185.375592][T11719] vlan0 (unregistering): left promiscuous mode
[  185.466061][T11715] lo: left promiscuous mode
[  187.092604][T11773] validate_nla: 1 callbacks suppressed
[  187.092619][T11773] netlink: 'syz.2.2548': attribute type 13 has an invalid length.
[  187.629470][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'.
[  187.799154][T11817] smc: net device bond0 applied user defined pnetid SYZ2
[  187.802287][T11817] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2568'.
[  187.945382][T11817] smc: removing net device bond0 with user defined pnetid SYZ2
[  187.949419][T11817] bond0 (unregistering): Released all slaves
[  188.279665][T11826] lo speed is unknown, defaulting to 1000
[  188.297718][T11836] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2576'.
[  188.404745][T11830] netlink: 'syz.2.2572': attribute type 9 has an invalid length.
[  188.407797][T11830] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.2572'.
[  188.666342][T11850] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2581'.
[  188.779086][T11855] xt_CT: No such helper "snmp"
[  189.034899][T11873] netlink: 'syz.2.2590': attribute type 83 has an invalid length.
[  189.262690][T11884] netlink: 'syz.2.2596': attribute type 1 has an invalid length.
[  189.431022][T11894] sctp: [Deprecated]: syz.0.2599 (pid 11894) Use of int in maxseg socket option.
[  189.431022][T11894] Use struct sctp_assoc_value instead
[  189.899207][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'.
[  190.161682][T11924] netlink: 'syz.1.2613': attribute type 28 has an invalid length.
[  190.211811][T11928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2615'.
[  190.424243][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'.
[  190.579719][   T95] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  190.598744][   T95] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  190.613916][   T95] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  190.704456][T11958] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  190.719940][T11958] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  190.770104][T11962] 0: reclassify loop, rule prio 0, protocol 800
[  191.393094][T12000] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2642'.
[  191.402831][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  191.579814][T12012] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2648'.
[  191.706088][T12020] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  193.769189][T12056] __nla_validate_parse: 2 callbacks suppressed
[  193.769202][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2669'.
[  193.819188][T12056] bridge4: port 1(veth3) entered blocking state
[  193.825892][T12056] bridge4: port 1(veth3) entered disabled state
[  193.829167][T12056] veth3: entered allmulticast mode
[  193.833515][T12056] veth3: entered promiscuous mode
[  193.849728][T12056] bridge4: port 2(veth0_to_bond) entered blocking state
[  193.852217][T12056] bridge4: port 2(veth0_to_bond) entered disabled state
[  193.854970][T12056] veth0_to_bond: entered allmulticast mode
[  193.858305][T12056] veth0_to_bond: entered promiscuous mode
[  193.867669][T12056] vlan4: entered allmulticast mode
[  193.869310][T12056] veth1: entered allmulticast mode
[  193.871227][T12056] bridge4: port 3(vlan4) entered blocking state
[  193.879190][T12056] bridge4: port 3(vlan4) entered disabled state
[  193.886427][T12056] vlan4: entered promiscuous mode
[  193.888156][T12056] veth1: entered promiscuous mode
[  193.967865][   T95] 0: reclassify loop, rule prio 0, protocol 800
[  194.089107][T12073] Bluetooth: MGMT ver 1.23
[  194.251832][T12064] lo speed is unknown, defaulting to 1000
[  194.388750][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2682'.
[  194.415393][T12068] netlink: 'syz.1.2673': attribute type 2 has an invalid length.
[  195.883404][T12082] netlink: 'syz.2.2681': attribute type 4 has an invalid length.
[  196.023070][T12104] xt_bpf: check failed: parse error
[  196.047946][ T5863] Bluetooth: hci0: command 0x0c20 tx timeout
[  196.050444][ T5863] Bluetooth: hci1: command 0x0406 tx timeout
[  196.289629][T12113] erspan0: left promiscuous mode
[  196.348224][T12113] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.360906][T12113] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  196.384896][   T10] lo speed is unknown, defaulting to 1000
[  196.395847][   T10] syz0: Port: 1 Link ACTIVE
[  196.399818][   T10] lo speed is unknown, defaulting to 1000
[  197.481677][T12143] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  197.541779][T12146] netlink: 'syz.1.2700': attribute type 21 has an invalid length.
[  197.549521][T12146] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2700'.
[  197.847329][T12163] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  197.945928][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2701'.
[  198.468001][T12165] lo speed is unknown, defaulting to 1000
[  199.292305][T12248] Cannot find set identified by id 0 to match
[  199.363442][T12174] lo speed is unknown, defaulting to 1000
[  200.036181][T12302] netlink: 'syz.1.2734': attribute type 4 has an invalid length.
[  200.054084][T12302] netlink: 'syz.1.2734': attribute type 4 has an invalid length.
[  200.149224][   T24] lo speed is unknown, defaulting to 1000
[  200.151530][   T24] syz0: Port: 1 Link DOWN
[  200.165011][   T24] lo speed is unknown, defaulting to 1000
[  200.176753][   T24] syz0: Port: 1 Link ACTIVE
[  200.179158][   T51] lo speed is unknown, defaulting to 1000
[  200.345519][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'.
[  200.349143][T12317] bond0: invalid ARP target 0.0.0.0 specified for addition
[  200.352094][T12317] bond0: option arp_ip_target: invalid value (0)
[  200.848975][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'.
[  201.050817][T12350] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2757'.
[  201.408497][T12379] netlink: 'syz.0.2770': attribute type 1 has an invalid length.
[  201.411626][T12379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2770'.
[  201.415931][T12379] netlink: 'syz.0.2770': attribute type 1 has an invalid length.
[  201.612113][T12403] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2779'.
[  201.777263][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2787'.
[  201.919768][T12436] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.2794'.
[  201.968679][T12438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2795'.
[  202.404700][T12477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.408819][T12477] syzkaller0: entered promiscuous mode
[  202.410975][T12477] syzkaller0: entered allmulticast mode
[  202.440200][T12477] tipc: Resetting bearer <eth:syzkaller0>
[  202.446834][T12476] tipc: Resetting bearer <eth:syzkaller0>
[  202.462792][T12476] tipc: Disabling bearer <eth:syzkaller0>
[  202.731658][T12497] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.738345][T12497] team0: Port device batadv0 added
[  202.944636][T12520] bond0 (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  203.028806][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'.
[  203.031727][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'.
[  203.092957][T12532] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  203.133148][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.248379][T12544] netlink: 'syz.0.2845': attribute type 18 has an invalid length.
[  203.387710][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.512588][T12562] sctp: [Deprecated]: syz.1.2852 (pid 12562) Use of int in max_burst socket option.
[  203.512588][T12562] Use struct sctp_assoc_value instead
[  203.569640][   T10] 0: reclassify loop, rule prio 0, protocol 800
[  203.572294][   T10] 0: reclassify loop, rule prio 0, protocol 800
[  203.667652][T12567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.681275][T12567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.708004][T12572] 0: reclassify loop, rule prio 0, protocol 800
[  203.788515][T12567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.797058][T12567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.876247][T12567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.880562][T12567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.017987][T12567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.022053][T12567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.843703][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  205.559396][T12567] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.562967][T12567] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.574238][T12567] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.577549][T12567] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.591616][T12567] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.598030][T12567] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.621526][T12567] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.625257][T12567] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.909732][T12618] netlink: 'syz.1.2877': attribute type 1 has an invalid length.
[  205.940405][T12618] bond2: (slave gretap1): making interface the new active one
[  205.945427][T12618] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  206.410634][T12640] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  206.416353][T12640] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  206.805571][T12646] 0: reclassify loop, rule prio 0, protocol 800
[  207.012056][T12660] xt_CT: No such helper "pptp"
[  207.061970][T12666] 0: reclassify loop, rule prio 0, protocol 800
[  207.118508][T12669] __nla_validate_parse: 4 callbacks suppressed
[  207.118521][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'.
[  207.128179][T12669] erspan0: entered promiscuous mode
[  207.134513][T12671] netlink: 'syz.2.2897': attribute type 58 has an invalid length.
[  207.137939][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'.
[  207.307752][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2902'.
[  207.884604][T12712] x_tables: duplicate underflow at hook 4
[  208.024786][T12720] gtp0: entered promiscuous mode
[  208.076678][T12725] smc: net device bond0 applied user defined pnetid SYZ2
[  208.544525][T12762] netlink: 'syz.2.2941': attribute type 21 has an invalid length.
[  208.547002][T12762] netlink: 'syz.2.2941': attribute type 1 has an invalid length.
[  208.734953][T12777] 0: reclassify loop, rule prio 0, protocol 800
[  209.266581][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2971'.
[  209.287827][T12834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.387989][T12842] netlink: 'syz.2.2977': attribute type 1 has an invalid length.
[  209.398590][T12842] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2977'.
[  209.445828][T12848] xt_TPROXY: Can be used only with -p tcp or -p udp
[  209.518206][T12856] 0: reclassify loop, rule prio 0, protocol 800
[  209.570378][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2986'.
[  209.576923][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'.
[  209.581078][T12860] netlink: 'syz.2.2986': attribute type 6 has an invalid length.
[  209.977373][T12885] netlink: 'syz.2.2998': attribute type 1 has an invalid length.
[  209.980532][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2998'.
[  210.170034][T12892] netlink: 'syz.2.3001': attribute type 2 has an invalid length.
[  210.174293][T12892] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3001'.
[  210.455025][T12911] block nbd0: Unsupported socket: shutdown callout must be supported.
[  210.547271][T12914] gtp0: left allmulticast mode
[  210.549110][T12914] xfrm1: left allmulticast mode
[  210.558959][T12914] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.562918][T12914] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.565716][T12914] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.568761][T12914] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.580074][T12914] wireguard0: left promiscuous mode
[  210.581901][T12914] wireguard0: left allmulticast mode
[  210.899125][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'.
[  210.986134][T12938] x_tables: ip_tables: osf match: only valid for protocol 6
[  211.307669][T12975] : renamed from batadv_slave_1 (while UP)
[  211.319237][T12977] netlink: 'syz.2.3039': attribute type 9 has an invalid length.
[  211.557397][T12994] IPv6: sit2: Disabled Multicast RS
[  212.270064][T13037] __nla_validate_parse: 5 callbacks suppressed
[  212.270082][T13037] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3067'.
[  212.349478][T13044] netlink: 'syz.1.3069': attribute type 1 has an invalid length.
[  212.402766][T13047] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3070'.
[  212.881005][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3081'.
[  213.147867][T13083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3087'.
[  213.151382][T13083] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  213.163273][   T10] 0: reclassify loop, rule prio 0, protocol 800
[  213.707069][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'.
[  213.765960][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'.
[  213.863779][T13135] Bluetooth: MGMT ver 1.23
[  213.979622][T13141] "syz.0.3115" (13141) uses obsolete ecb(arc4) skcipher
[  214.001662][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3116'.
[  214.217207][T13161] xt_CT: No such helper "snmp_trap"
[  214.313061][T13174] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  214.316200][T13174] netlink: 'syz.0.3127': attribute type 2 has an invalid length.
[  214.335134][T13174] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  214.338227][T13174] netlink: 'syz.0.3127': attribute type 2 has an invalid length.
[  214.355547][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'.
[  214.358498][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'.
[  214.454116][   T95] 0: reclassify loop, rule prio 0, protocol 800
[  214.454622][T13186] netlink: 'syz.2.3133': attribute type 5 has an invalid length.
[  214.459992][T13186] netlink: 'syz.2.3133': attribute type 7 has an invalid length.
[  215.081990][T13208] lo speed is unknown, defaulting to 1000
[  215.166061][T13239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.407086][T13250] netlink: 'syz.1.3161': attribute type 1 has an invalid length.
[  215.427111][T13250] 8021q: adding VLAN 0 to HW filter on device bond3
[  215.539599][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3162'.
[  216.276994][T13285] sctp: [Deprecated]: syz.2.3178 (pid 13285) Use of int in max_burst socket option.
[  216.276994][T13285] Use struct sctp_assoc_value instead
[  216.510865][T13301] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  216.838321][T13331] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  216.841792][T13331] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  217.338208][T13372] netlink: 'syz.0.3218': attribute type 3 has an invalid length.
[  217.448934][T13381] netlink: 'syz.2.3222': attribute type 3 has an invalid length.
[  217.452073][T13381] __nla_validate_parse: 6 callbacks suppressed
[  217.452086][T13381] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3222'.
[  217.606777][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'.
[  217.610142][T13392] bridge_slave_1: left allmulticast mode
[  217.611995][T13392] bridge_slave_1: left promiscuous mode
[  217.617198][T13392] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.622241][T13392] bridge_slave_0: left allmulticast mode
[  217.624501][T13392] bridge_slave_0: left promiscuous mode
[  217.626357][T13392] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.862529][T13398] netlink: 'syz.0.3230': attribute type 2 has an invalid length.
[  217.865691][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'.
[  218.080572][T13408] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  218.083182][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3235'.
[  218.086502][T13408] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  218.089350][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3235'.
[  218.094997][T13408] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  218.097549][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3235'.
[  218.101427][T13408] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  218.104207][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3235'.
[  218.107609][T13408] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  218.110115][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3235'.
[  218.113863][T13408] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  218.117142][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3235'.
[  218.120540][T13408] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  218.124191][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3235'.
[  218.154041][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  219.162685][   T95] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  219.562841][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  219.567902][   T95] 0: reclassify loop, rule prio 0, protocol 800
[  219.636029][T13484] xt_hashlimit: max too large, truncated to 1048576
[  219.756387][T13492] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  220.268093][T13533] batadv_slave_0: entered promiscuous mode
[  220.278776][T13532] batadv_slave_0: left promiscuous mode
[  220.849059][T13574] smc: removing ib device syz0
[  221.204594][T13584] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.248269][T13584] bond0: (slave rose0): Enslaving as an active interface with an up link
[  221.558163][T13598] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  221.569302][T13598] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  222.054770][T13619] smc: net device bond0 erased user defined pnetid SYZ2
[  223.971632][T13691] __nla_validate_parse: 85 callbacks suppressed
[  223.971654][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3343'.
[  224.459503][T13716] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  224.497056][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3356'.
[  224.856800][T13740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.889910][T13740] syzkaller0: entered promiscuous mode
[  224.891780][T13740] syzkaller0: entered allmulticast mode
[  224.895434][T13740] tipc: Resetting bearer <eth:syzkaller0>
[  224.921994][T13739] tipc: Resetting bearer <eth:syzkaller0>
[  225.172545][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  225.298540][T13756] xt_connbytes: Forcing CT accounting to be enabled
[  225.301489][T13756] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  226.822928][T13739] tipc: Disabling bearer <eth:syzkaller0>
[  226.938820][T13772] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  227.110658][T13785] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3384'.
[  227.145086][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'.
[  227.148691][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3386'.
[  227.252569][T13796] syzkaller0: entered promiscuous mode
[  227.254389][T13796] syzkaller0: entered allmulticast mode
[  227.570747][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  229.149264][T13824] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  229.320785][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3409'.
[  229.617250][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'.
[  230.010969][T13892] validate_nla: 72 callbacks suppressed
[  230.010990][T13892] netlink: 'syz.2.3432': attribute type 4 has an invalid length.
[  230.026569][T13892] netlink: 'syz.2.3432': attribute type 4 has an invalid length.
[  230.778053][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'.
[  231.864027][T14016] netlink: 'syz.1.3484': attribute type 49 has an invalid length.
[  232.070600][T14028] veth0: entered promiscuous mode
[  232.076285][T14027] veth0: left promiscuous mode
[  232.115378][T14033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.747377][T14077] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3509'.
[  232.751935][T14077] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3509'.
[  232.875142][T14089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3513'.
[  232.966771][T14096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.119560][T14105] netlink: 'syz.2.3524': attribute type 1 has an invalid length.
[  233.122992][T14105] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3524'.
[  233.127170][T14108] netlink: 'syz.1.3523': attribute type 1 has an invalid length.
[  233.130254][T14108] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3523'.
[  233.247853][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'.
[  233.415512][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3528'.
[  233.797057][T14161] unsupported nla_type 52263
[  234.091740][T14175] bond0: (slave batadv0): Releasing backup interface
[  234.104860][T14175] bond0: (slave 1@): Releasing backup interface
[  234.109519][T14175] bond0: (slave bond_slave_1): Releasing backup interface
[  234.120757][T14175] team0: Port device team_slave_0 removed
[  234.126377][T14175] team0: Port device team_slave_1 removed
[  234.129348][T14175] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.134710][T14175] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.140438][T14175] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  234.143435][T14175] batman_adv: batadv0: Removing interface: ip6gretap1
[  234.146921][T14175] macvtap1: left allmulticast mode
[  234.150281][T14175] bond1: (slave vcan1): Releasing backup interface
[  234.155690][T14175] batadv1: left allmulticast mode
[  234.158281][T14175] bridge0: left allmulticast mode
[  234.170462][T14175] bond2: (slave gretap1): Releasing active interface
[  234.236139][T14179] ip6gretap0: entered promiscuous mode
[  234.240242][T14179] ip6gretap0: left promiscuous mode
[  234.848506][T14206] __nla_validate_parse: 1 callbacks suppressed
[  234.848520][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'.
[  234.864605][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3564'.
[  235.344456][T14234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3576'.
[  235.570007][ T5699] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.623659][T14244] sock: sock_timestamping_bind_phc: sock not bind to device
[  235.628018][ T5917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.642980][ T5699] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.690730][T14246] syz.2.3582 (14246) used obsolete PPPIOCDETACH ioctl
[  235.894544][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.937635][T14262] netem: unknown loss type 0
[  235.939888][T14262] netem: change failed
[  236.093344][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.276953][T14287] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  236.280536][T14289] IPv6: NLM_F_REPLACE set, but no existing node found!
[  236.416590][T14303] netlink: 'syz.2.3605': attribute type 4 has an invalid length.
[  236.421163][T14304] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3601'.
[  236.427287][T14294] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3601'.
[  236.476972][T14307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3606'.
[  236.536177][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3607'.
[  236.539853][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3607'.
[  236.975389][T14343] netlink: 'syz.2.3623': attribute type 8 has an invalid length.
[  237.039418][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'.
[  237.173859][T14351] pimreg: entered allmulticast mode
[  237.196530][T14351] pimreg: left allmulticast mode
[  237.263726][T14348] openvswitch: netlink: IP tunnel dst address not specified
[  237.519349][T14366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3633'.
[  237.781452][T14373] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  237.959598][T14381] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  237.967430][T14381] tipc: Bearer <udp:s>: trying with adjusted priority
[  237.970409][T14381] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  238.580075][T14407] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  238.753656][T14417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.760622][T14417] syzkaller0: entered promiscuous mode
[  238.763571][T14417] syzkaller0: entered allmulticast mode
[  238.803543][T14417] tipc: Resetting bearer <eth:syzkaller0>
[  238.808582][T14415] tipc: Resetting bearer <eth:syzkaller0>
[  238.829012][T14415] tipc: Disabling bearer <eth:syzkaller0>
[  238.941577][T14424] vlan5: entered promiscuous mode
[  238.943833][T14424] bond0: entered promiscuous mode
[  238.945477][T14424] vlan5: entered allmulticast mode
[  238.947032][T14424] bond0: entered allmulticast mode
[  239.018443][T14430] tc_dump_action: action bad kind
[  239.128422][T14440] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  239.307969][T14460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  239.310161][T14460] IPv6: NLM_F_CREATE should be set when creating new route
[  239.642636][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  240.468024][T14531] __nla_validate_parse: 2 callbacks suppressed
[  240.468047][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3709'.
[  240.991706][T14559] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  241.106644][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3722'.
[  241.354924][T14584] tipc: New replicast peer: 255.255.255.255
[  241.359204][T14584] tipc: Enabled bearer <udp:syz2>, priority 10
[  241.364517][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3730'.
[  241.368266][T14584] tipc: Disabling bearer <udp:syz2>
[  241.377203][T14587] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3732'.
[  241.486804][T14595] netlink: 'syz.2.3737': attribute type 39 has an invalid length.
[  241.786679][ T5824] IPVS: starting estimator thread 0...
[  241.865361][T14623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3746'.
[  241.873200][T14618] IPVS: using max 62 ests per chain, 148800 per kthread
[  242.674126][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'.
[  242.727281][T14654] netlink: 'syz.0.3761': attribute type 1 has an invalid length.
[  242.730411][T14654] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3761'.
[  242.740662][T14654] NCSI netlink: No device for ifindex 813332851
[  242.923290][T14669] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3768'.
[  243.093133][T14684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.095577][T14684] IPv6: NLM_F_CREATE should be set when creating new route
[  243.098028][T14684] IPv6: NLM_F_CREATE should be set when creating new route
[  243.100751][T14684] IPv6: NLM_F_CREATE should be set when creating new route
[  243.106791][T14684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.792192][T14716] netlink: 'syz.1.3790': attribute type 3 has an invalid length.
[  243.795579][T14716] netlink: 'syz.1.3790': attribute type 3 has an invalid length.
[  245.011480][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'.
[  245.076866][T14774] netlink: 'syz.1.3818': attribute type 29 has an invalid length.
[  245.092983][T14774] netlink: 'syz.1.3818': attribute type 29 has an invalid length.
[  245.096969][T14774] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3818'.
[  245.292039][T14789] syzkaller0: entered promiscuous mode
[  245.296513][T14789] syzkaller0: entered allmulticast mode
[  247.345101][T14822] __nla_validate_parse: 1 callbacks suppressed
[  247.345127][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3837'.
[  247.499487][T14828] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  247.722506][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  248.161042][T14855] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.590620][T14888] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3865'.
[  249.086362][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3879'.
[  249.317303][T14930] netlink: 'syz.0.3880': attribute type 2 has an invalid length.
[  249.322124][T14930] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3880'.
[  250.206743][T14946] xt_TPROXY: Can be used only with -p tcp or -p udp
[  250.317405][T14952] syzkaller1: entered promiscuous mode
[  250.319747][T14952] syzkaller1: entered allmulticast mode
[  250.334968][T14956] macsec2: entered promiscuous mode
[  250.337097][T14956] macsec2: entered allmulticast mode
[  250.549135][T14968] netlink: del zone limit has 4 unknown bytes
[  250.643972][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3902'.
[  250.788491][T14989] xt_bpf: check failed: parse error
[  250.873823][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3912'.
[  252.105315][T15045] netlink: 'syz.2.3931': attribute type 9 has an invalid length.
[  252.108268][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3932'.
[  252.115456][T15046] lo speed is unknown, defaulting to 1000
[  252.115528][T15046] lo speed is unknown, defaulting to 1000
[  252.116563][T15046] lo speed is unknown, defaulting to 1000
[  252.127917][T15046] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  252.136186][T15046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  252.166412][T15046] lo speed is unknown, defaulting to 1000
[  252.169784][T15046] lo speed is unknown, defaulting to 1000
[  252.182750][T15046] lo speed is unknown, defaulting to 1000
[  252.346931][T15061] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3939'.
[  252.422771][T15066] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3941'.
[  252.534014][ T5917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  252.879241][T15087] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  253.102794][ T5917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  253.527318][T15122] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  254.179731][T15149] openvswitch: netlink: IPv4 tun info is not correct
[  254.863650][T15204] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  254.916393][T15215] netlink: 'syz.1.4010': attribute type 1 has an invalid length.
[  254.959596][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4012'.
[  255.203784][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4023'.
[  255.381631][T15256] syzkaller0: entered promiscuous mode
[  255.383814][T15256] syzkaller0: entered allmulticast mode
[  255.408475][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  256.833573][T15278] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4037'.
[  256.837546][T15278] netlink: zone id is out of range
[  256.839762][T15278] netlink: get zone limit has 8 unknown bytes
[  257.052067][T15294] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  257.063254][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4047'.
[  257.097140][T15294] bridge7: entered promiscuous mode
[  257.099236][T15294] bridge7: entered allmulticast mode
[  257.120527][T15294] team0: Port device bridge7 added
[  257.355308][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4057'.
[  257.592106][T15331] erspan1: entered promiscuous mode
[  257.594505][T15331] erspan1: entered allmulticast mode
[  257.748432][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4068'.
[  257.863441][T15347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4071'.
[  257.870511][   T33] audit: type=1800 audit(1753173657.854:7): pid=15349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4072" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6812 res=0 errno=0
[  257.879301][   T33] audit: type=1800 audit(1753173657.864:8): pid=15349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4072" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6812 res=0 errno=0
[  257.925287][T15351] syzkaller1: tun_chr_ioctl cmd 1074025677
[  257.927333][T15351] syzkaller1: linktype set to 778
[  258.066165][T15363] vlan5: left promiscuous mode
[  258.068103][T15363] bond0: left promiscuous mode
[  258.070213][T15363] vlan5: left allmulticast mode
[  258.072191][T15363] bond0: left allmulticast mode
[  258.102640][T15367] bridge0: port 1(syz_tun) entered blocking state
[  258.110974][T15367] bridge0: port 1(syz_tun) entered disabled state
[  258.116304][T15367] syz_tun: entered allmulticast mode
[  258.135553][T15367] syz_tun: entered promiscuous mode
[  258.198967][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'.
[  258.269317][T15382] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4088'.
[  258.276996][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4087'.
[  258.481483][T15404] delete_channel: no stack
[  258.483874][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4097'.
[  259.006297][T15423] netlink: 'syz.2.4104': attribute type 4 has an invalid length.
[  259.579374][T15434] lo speed is unknown, defaulting to 1000
[  259.819317][T15442] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  260.236244][T15461] syzkaller0: entered promiscuous mode
[  260.238362][T15461] syzkaller0: entered allmulticast mode
[  260.252592][T15459] netlink: 'syz.1.4119': attribute type 30 has an invalid length.
[  260.256167][T15460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.292101][T15454] tipc: Resetting bearer <eth:syzkaller0>
[  260.297232][T15452] tipc: Resetting bearer <eth:syzkaller0>
[  260.318446][T15452] tipc: Disabling bearer <eth:syzkaller0>
[  260.397600][T15469] netlink: 'syz.1.4122': attribute type 1 has an invalid length.
[  260.494576][T15478] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4126'.
[  260.525289][T15482] netlink: 'syz.0.4127': attribute type 4 has an invalid length.
[  260.559334][T15482] netlink: 'syz.0.4127': attribute type 4 has an invalid length.
[  260.574180][T15484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4129'.
[  260.578122][T15484] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4129'.
[  260.586065][T15484] netlink: 'syz.1.4129': attribute type 5 has an invalid length.
[  260.589445][T15484] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4129'.
[  260.929682][T15520] netlink: 'syz.0.4147': attribute type 1 has an invalid length.
[  261.366547][T15560] _Z`Ԁ@: entered promiscuous mode
[  261.677230][T15590] xt_hashlimit: size too large, truncated to 1048576
[  261.741454][T15595] : renamed from bridge_slave_0
[  262.865650][T15691] __nla_validate_parse: 4 callbacks suppressed
[  262.865662][T15691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4228'.
[  262.874317][T15693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4229'.
[  263.015543][T15705] netlink: 'syz.2.4236': attribute type 49 has an invalid length.
[  263.076254][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4237'.
[  263.339929][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4244'.
[  263.528085][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4247'.
[  263.722555][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  264.070093][T15760] netlink: 'syz.2.4255': attribute type 1 has an invalid length.
[  264.075371][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4255'.
[  264.109442][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4255'.
[  264.264548][T15777] netlink: 'syz.1.4263': attribute type 2 has an invalid length.
[  264.267091][T15777] netlink: 'syz.1.4263': attribute type 8 has an invalid length.
[  264.269954][T15777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4263'.
[  264.683242][T15802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.686029][T15802] syzkaller0: entered promiscuous mode
[  264.687711][T15802] syzkaller0: entered allmulticast mode
[  264.709211][T15802] tipc: Resetting bearer <eth:syzkaller0>
[  264.718263][T15800] tipc: Resetting bearer <eth:syzkaller0>
[  264.730113][T15800] tipc: Disabling bearer <eth:syzkaller0>
[  265.059248][T15837] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4292'.
[  265.141562][T15846] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  265.257661][T15853] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  265.264953][ T5699] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  265.266443][T15853] 8021q: adding VLAN 0 to HW filter on device bond4
[  265.315040][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.375051][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.379168][   T13] bond4: (slave ip6gretap2): link status up again after 0 ms
[  265.381729][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  265.384774][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  265.464688][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4307'.
[  265.471205][T15873] gtp0: entered promiscuous mode
[  265.474256][T15873] gtp0: entered allmulticast mode
[  265.492993][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  265.603574][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  265.717037][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  265.842923][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  265.953058][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  266.065555][T15924] validate_nla: 4 callbacks suppressed
[  266.065572][T15924] netlink: 'syz.0.4330': attribute type 83 has an invalid length.
[  266.967874][   T33] audit: type=1804 audit(1753173666.954:9): pid=15955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4342" name="/newroot/1415/cgroup.controllers" dev="tmpfs" ino=7143 res=1 errno=0
[  266.987104][   T33] audit: type=1800 audit(1753173666.954:10): pid=15955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4342" name="cgroup.controllers" dev="tmpfs" ino=7143 res=0 errno=0
[  267.176155][T15971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  267.697623][T16032] netlink: 'syz.0.4372': attribute type 1 has an invalid length.
[  267.878772][T16043] __nla_validate_parse: 9 callbacks suppressed
[  267.878791][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4377'.
[  267.975738][T16033] lo speed is unknown, defaulting to 1000
[  268.009037][T16050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4380'.
[  268.243594][T16065] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  268.424339][ T5277] udevd[5277]: worker [15981] terminated by signal 33 (Unknown signal 33)
[  268.427445][ T5277] udevd[5277]: worker [15981] failed while handling '/fs/nfs/net/nfs_client'
[  268.505437][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4393'.
[  269.059150][T16102] lo speed is unknown, defaulting to 1000
[  269.908370][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'.
[  269.962073][T16142] sctp: [Deprecated]: syz.1.4419 (pid 16142) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.962073][T16142] Use struct sctp_sack_info instead
[  270.152494][   T13] net_ratelimit: 36 callbacks suppressed
[  270.152513][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  270.271862][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  270.288270][T16169] xt_TCPMSS: Only works on TCP SYN packets
[  270.386606][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  270.523339][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  270.611666][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4442'.
[  270.641796][T16193] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  270.647939][T16193] team0: Device ipvlan0 is already an upper device of the team interface
[  270.705169][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  270.822432][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  270.932476][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  271.053142][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  271.144869][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4458'.
[  271.178002][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  271.233023][T16232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4459'.
[  271.282496][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  271.638710][T16272] 8021q: adding VLAN 0 to HW filter on device bond5
[  271.650651][T16272] bond0: (slave bond5): Enslaving as an active interface with an up link
[  271.829536][T16284] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  271.834847][T16284] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  271.904684][T16287] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4481'.
[  271.909315][T16293] syzkaller1: entered promiscuous mode
[  271.911356][T16293] syzkaller1: entered allmulticast mode
[  271.928294][T16287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4481'.
[  272.290264][T16340] netlink: 'syz.2.4502': attribute type 21 has an invalid length.
[  272.294507][T16340] IPv6: NLM_F_CREATE should be specified when creating new route
[  272.365487][T16351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4507'.
[  272.429456][T16357] xt_time: invalid argument - start or stop time greater than 23:59:59
[  273.128042][T16412] __nla_validate_parse: 1 callbacks suppressed
[  273.128053][T16412] netlink: 9988 bytes leftover after parsing attributes in process `syz.0.4535'.
[  273.405028][T16436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4546'.
[  273.469306][T16442] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4549'.
[  273.647245][T16456] netlink: 'syz.2.4556': attribute type 12 has an invalid length.
[  274.420438][T16496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4574'.
[  274.432781][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4575'.
[  274.668575][T16506] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4578'.
[  274.672100][T16506] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4578'.
[  274.682695][T16506] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4578'.
[  274.781547][T16513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4578'.
[  275.020302][T16503] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.032645][T16503] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.036265][T16503] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.039641][T16503] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.075841][T16503] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  275.079303][T16503] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  275.083074][T16503] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  275.086895][T16503] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  275.255328][   T12] net_ratelimit: 33 callbacks suppressed
[  275.255348][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  275.361942][T16531] netlink: 'syz.0.4588': attribute type 2 has an invalid length.
[  275.365459][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  275.473075][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  275.534436][T16537] openvswitch: netlink: Flow actions attr not present in new flow.
[  275.587321][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  275.818213][T16541] 8021q: adding VLAN 0 to HW filter on device bond6
[  275.823634][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  275.944600][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  276.052735][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  276.127541][T16558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4600'.
[  276.162471][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  276.272784][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  276.485077][T16582] syzkaller1: entered promiscuous mode
[  276.487387][T16582] syzkaller1: entered allmulticast mode
[  277.570651][T16657] sctp: [Deprecated]: syz.1.4647 (pid 16657) Use of struct sctp_assoc_value in delayed_ack socket option.
[  277.570651][T16657] Use struct sctp_sack_info instead
[  278.158223][T16677] __nla_validate_parse: 3 callbacks suppressed
[  278.158242][T16677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4656'.
[  278.323833][T16689] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4661'.
[  278.729174][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'.
[  278.732087][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4673'.
[  278.967830][T16736] bridge0: port 1(gretap0) entered blocking state
[  278.970582][T16736] bridge0: port 1(gretap0) entered disabled state
[  278.976444][T16736] gretap0: entered allmulticast mode
[  278.980716][T16736] gretap0: entered promiscuous mode
[  279.244741][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  279.321638][T16763] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4695'.
[  279.738801][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4703'.
[  280.299510][T16798] netlink: 'syz.2.4712': attribute type 2 has an invalid length.
[  280.342686][   T12] net_ratelimit: 35 callbacks suppressed
[  280.342702][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  280.452800][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  280.562821][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  280.682801][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  280.792621][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  280.905310][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  281.012564][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  281.077376][T16847] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4734'.
[  281.122842][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  281.157387][T16853] netlink: 'syz.1.4737': attribute type 1 has an invalid length.
[  281.161655][T16853] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4737'.
[  281.252550][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  281.319305][T16864] No such timeout policy "syz0"
[  281.362987][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  281.374834][T16868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4744'.
[  281.386887][T16864] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4742'.
[  281.973608][T16890] netlink: 'syz.2.4752': attribute type 4 has an invalid length.
[  282.929746][T16916] SET target dimension over the limit!
[  283.276836][T16954] netlink: 'syz.0.4781': attribute type 12 has an invalid length.
[  283.279972][T16954] __nla_validate_parse: 3 callbacks suppressed
[  283.280007][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4781'.
[  283.304308][T16954] netlink: 'syz.0.4781': attribute type 12 has an invalid length.
[  283.322651][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4781'.
[  283.932743][T16993] netlink: 'syz.2.4797': attribute type 10 has an invalid length.
[  284.327844][T17007] netlink: 'syz.1.4805': attribute type 21 has an invalid length.
[  284.330468][T17007] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4805'.
[  284.815854][T17034] netlink: 'syz.0.4816': attribute type 1 has an invalid length.
[  284.818995][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4816'.
[  284.868384][T17038] netlink: 'syz.2.4818': attribute type 1 has an invalid length.
[  284.870815][T17038] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4818'.
[  284.941562][T17045] netlink: 'syz.2.4821': attribute type 1 has an invalid length.
[  284.952480][T17045] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4821'.
[  285.296144][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4832'.
[  285.378306][T17073] xt_CT: You must specify a L4 protocol and not use inversions on it
[  285.413714][ T5868] net_ratelimit: 36 callbacks suppressed
[  285.413731][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  285.454573][T17077] validate_nla: 1 callbacks suppressed
[  285.454591][T17077] netlink: 'syz.1.4836': attribute type 3 has an invalid length.
[  285.469050][T17079] xt_cluster: node mask cannot exceed total number of nodes
[  285.532679][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  285.564726][T17087] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4841'.
[  285.567614][T17087] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4841'.
[  285.571027][T17087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4841'.
[  285.657570][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  285.723744][T17096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.763491][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  285.902686][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  286.022737][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  286.099910][T17121] smc: adding net device bond0 with user defined pnetid SYZ2
[  286.173703][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  286.285107][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  286.404510][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  287.893528][T17228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.896189][T17228] syzkaller0: entered promiscuous mode
[  287.902886][T17228] syzkaller0: entered allmulticast mode
[  287.969584][T17228] tipc: Resetting bearer <eth:syzkaller0>
[  287.981979][T17227] tipc: Resetting bearer <eth:syzkaller0>
[  287.995439][T17227] tipc: Disabling bearer <eth:syzkaller0>
[  288.054540][T17236] syzkaller0: entered promiscuous mode
[  288.056255][T17236] syzkaller0: entered allmulticast mode
[  289.804984][T17256] tap0: tun_chr_ioctl cmd 1074025677
[  289.807242][T17256] tap0: linktype set to 1
[  289.823373][T17258] IPv6: Can't replace route, no match found
[  289.871474][T17243] lo speed is unknown, defaulting to 1000
[  290.110661][T17269] __nla_validate_parse: 7 callbacks suppressed
[  290.110683][T17269] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4923'.
[  290.120546][T17269] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4923'.
[  290.299263][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4930'.
[  290.361806][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4931'.
[  290.372598][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4931'.
[  290.482879][   T12] net_ratelimit: 23 callbacks suppressed
[  290.482897][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  290.600095][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  290.712579][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  290.727348][T17312] netlink: 'syz.0.4943': attribute type 1 has an invalid length.
[  290.730383][T17312] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4943'.
[  290.742829][T17312] netlink: 'syz.0.4943': attribute type 2 has an invalid length.
[  290.745849][T17312] netlink: 'syz.0.4943': attribute type 1 has an invalid length.
[  290.822718][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  290.932586][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  291.043577][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  291.163775][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  291.273197][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  291.384456][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  291.493059][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  291.518630][T17331] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4952'.
[  291.524301][T17331] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4952'.
[  291.528029][T17331] netlink: 'syz.1.4952': attribute type 6 has an invalid length.
[  291.531132][T17331] netlink: 'syz.1.4952': attribute type 5 has an invalid length.
[  291.535207][T17331] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4952'.
[  292.005185][T17343] gretap0: left allmulticast mode
[  292.007217][T17343] gretap0: left promiscuous mode
[  292.009433][T17343] bridge0: port 1(gretap0) entered disabled state
[  292.017386][T17343] veth0_to_bond: left allmulticast mode
[  292.019585][T17343] veth0_to_bond: left promiscuous mode
[  292.021952][T17343] bridge4: port 2(veth0_to_bond) entered disabled state
[  292.032049][T17343] team0: Port device team_slave_0 removed
[  292.038878][T17343] team0: Port device team_slave_1 removed
[  292.041709][T17343] veth3: left allmulticast mode
[  292.044694][T17343] veth3: left promiscuous mode
[  292.048582][T17343] bridge4: port 1(veth3) entered disabled state
[  292.054660][T17343] vlan4: left allmulticast mode
[  292.056694][T17343] veth1: left allmulticast mode
[  292.058838][T17343] vlan4: left promiscuous mode
[  292.060828][T17343] veth1: left promiscuous mode
[  292.066575][T17343] bridge4: port 3(vlan4) entered disabled state
[  292.252037][T17350] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  292.466979][T17362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4967'.
[  292.560662][T17369] netlink: 'syz.2.4970': attribute type 6 has an invalid length.
[  292.659348][T17374] Bluetooth: hci0: Opcode 0x080f failed: -22
[  293.378913][T17428] IPVS: Unknown mcast interface: vlan0
[  293.389203][T17432] atomic_op ffff8880319d9198 conn xmit_atomic 0000000000000000
[  293.468736][T17438] xt_hashlimit: size too large, truncated to 1048576
[  294.284241][   T54] Bluetooth: hci0: command tx timeout
[  294.619075][ T5868] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  295.552998][ T5868] net_ratelimit: 35 callbacks suppressed
[  295.553016][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  295.826353][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  295.933114][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.053398][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.178221][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.294047][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.362636][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  296.412984][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.524759][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.670326][T17604] netlink: 'syz.0.5075': attribute type 12 has an invalid length.
[  296.674107][T17604] __nla_validate_parse: 4 callbacks suppressed
[  296.674121][T17604] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5075'.
[  296.792962][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.902460][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  296.981107][T17610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.984195][T17610] syzkaller0: entered promiscuous mode
[  296.986144][T17610] syzkaller0: entered allmulticast mode
[  297.006169][T17610] tipc: Resetting bearer <eth:syzkaller0>
[  297.015680][T17609] tipc: Resetting bearer <eth:syzkaller0>
[  297.039293][T17609] tipc: Disabling bearer <eth:syzkaller0>
[  297.056420][T17614] sctp: [Deprecated]: syz.1.5080 (pid 17614) Use of struct sctp_assoc_value in delayed_ack socket option.
[  297.056420][T17614] Use struct sctp_sack_info instead
[  297.508055][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5095'.
[  297.584111][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5097'.
[  297.635763][T17655] syzkaller1: entered promiscuous mode
[  297.642382][T17655] syzkaller1: entered allmulticast mode
[  297.666228][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5102'.
[  297.719851][T17662] syzkaller1: entered promiscuous mode
[  297.722079][T17662] syzkaller1: entered allmulticast mode
[  297.865470][T17667] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5106'.
[  297.869192][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5106'.
[  297.945754][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5108'.
[  297.948669][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5108'.
[  298.278725][T17679] netlink: 488 bytes leftover after parsing attributes in process `syz.2.5112'.
[  298.514170][T17686] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  298.680545][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  299.511503][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5125'.
[  299.539519][T17715] xt_l2tp: v2 doesn't support IP mode
[  300.615907][   T13] net_ratelimit: 33 callbacks suppressed
[  300.615929][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  300.732766][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  300.853093][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  300.929634][T17769] netlink: 'syz.2.5152': attribute type 1 has an invalid length.
[  300.934726][T17769] netlink: 'syz.2.5152': attribute type 2 has an invalid length.
[  300.962644][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  301.077497][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  301.130822][T17781] netlink: 'syz.1.5157': attribute type 1 has an invalid length.
[  301.137260][T17781] netlink: 'syz.1.5157': attribute type 11 has an invalid length.
[  301.183195][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  301.293268][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  301.402721][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  301.404087][T17799] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  301.408261][T17799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.566914][T17815] netlink: 'syz.2.5173': attribute type 11 has an invalid length.
[  301.953168][T17844] __nla_validate_parse: 8 callbacks suppressed
[  301.953182][T17844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5188'.
[  302.268046][T17870] ipt_ECN: cannot use operation on non-tcp rule
[  302.335733][T17874] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5202'.
[  302.780950][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'.
[  302.788123][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5224'.
[  302.836598][T17919] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5224'.
[  303.120149][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5233'.
[  303.371657][T17952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5239'.
[  303.466904][T17956] tap0: tun_chr_ioctl cmd 1074025680
[  303.553871][T17961] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5242'.
[  303.567446][T17958] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  303.580915][T17958] syzkaller0: entered promiscuous mode
[  303.596453][T17958] syzkaller0: entered allmulticast mode
[  303.914103][T17983] !: renamed from dummy0
[  304.331463][T18013] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  305.792567][ T5868] net_ratelimit: 27 callbacks suppressed
[  305.792582][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  305.830088][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5261'.
[  305.905007][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  305.970337][T18010] lo speed is unknown, defaulting to 1000
[  305.971819][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5266'.
[  306.092579][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  306.203100][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  306.322777][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  306.443243][   T12] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  306.565005][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  306.673905][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  306.786570][T18085] netlink: 'syz.2.5289': attribute type 1 has an invalid length.
[  306.807684][T18085] bond2 (unregistering): Released all slaves
[  306.833026][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  306.942724][ T5868] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  307.094141][T18098] tipc: Can't bind to reserved service type 2
[  307.187577][T18102] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  307.548757][T18115] xt_hashlimit: max too large, truncated to 1048576
[  307.875847][T18125] lo speed is unknown, defaulting to 1000
[  308.236649][T18153] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  308.757367][T18178] __nla_validate_parse: 4 callbacks suppressed
[  308.757382][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'.
[  309.068559][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5336'.
[  309.071946][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'.
[  309.165213][T18206] netlink: 'syz.1.5340': attribute type 1 has an invalid length.
[  309.289645][T18220] tap0: tun_chr_ioctl cmd 1074025680
[  309.294579][T18220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.297578][T18220] D: renamed from syzkaller0
[  309.300316][T18220] tipc: Disabling bearer <eth:syzkaller0>
[  309.486852][T18237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5353'.
[  309.501305][T18239] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5354'.
[  309.957519][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5365'.
[  309.961260][T18265] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  309.965410][T18265] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  310.754982][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5380'.
[  310.823027][ T5699] net_ratelimit: 34 callbacks suppressed
[  310.823048][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  310.858108][T18303] delete_channel: no stack
[  310.916082][T18309] bond0: entered promiscuous mode
[  310.925567][T18309] bond0: left promiscuous mode
[  310.953218][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  310.958818][T18314] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  310.998324][T18316] netlink: 'syz.2.5389': attribute type 10 has an invalid length.
[  311.056445][T18316] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5389'.
[  311.090205][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  311.213184][ T5699] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  311.277024][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5400'.
[  311.323990][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  311.351843][T18346] netlink: 'syz.2.5403': attribute type 83 has an invalid length.
[  311.442769][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  311.553376][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  311.646048][T18372] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5416'.
[  311.649523][T18372] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  311.675284][   T13] bond4: (slave ip6gretap2): failed to get link speed/duplex
[  311.722659][    C1] ==================================================================
[  311.725232][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  311.727706][    C1] Read of size 2 at addr ffff8880270cf42a by task syz-executor/5854
[  311.730796][    C1] 
[  311.731918][    C1] CPU: 1 UID: 0 PID: 5854 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  311.731931][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.731938][    C1] Call Trace:
[  311.731944][    C1]  <IRQ>
[  311.731949][    C1]  dump_stack_lvl+0x189/0x250
[  311.731965][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.731976][    C1]  ? __kasan_check_byte+0x12/0x40
[  311.731989][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.731998][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.732007][    C1]  ? lock_release+0x4b/0x3e0
[  311.732017][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  311.732029][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  311.732039][    C1]  print_report+0xca/0x230
[  311.732047][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  311.732057][    C1]  kasan_report+0x118/0x150
[  311.732069][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  311.732078][    C1]  rose_timer_expiry+0x471/0x4b0
[  311.732089][    C1]  call_timer_fn+0x17e/0x5f0
[  311.732098][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  311.732107][    C1]  ? call_timer_fn+0xbe/0x5f0
[  311.732114][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  311.732124][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  311.732137][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.732146][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  311.732156][    C1]  __run_timer_base+0x61a/0x860
[  311.732168][    C1]  ? ktime_get+0x3e/0x1f0
[  311.732181][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  311.732191][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  311.732206][    C1]  run_timer_softirq+0xb7/0x180
[  311.732217][    C1]  handle_softirqs+0x286/0x870
[  311.732228][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  311.732238][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  311.732248][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  311.732260][    C1]  __irq_exit_rcu+0xca/0x1f0
[  311.732268][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  311.732278][    C1]  irq_exit_rcu+0x9/0x30
[  311.732286][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  311.732294][    C1]  </IRQ>
[  311.732297][    C1]  <TASK>
[  311.732301][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  311.732311][    C1] RIP: 0010:copy_pmd_range+0x9a7/0x7000
[  311.732325][    C1] Code: 31 ff e8 8c 50 b5 ff 48 83 e3 01 0f 85 af 62 00 00 4c 89 ff be 08 00 00 00 e8 85 5f 17 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 ff 5c 17 00 48 8b 5c 24 60 48 2b 5c 24 48 48 c1
[  311.732333][    C1] RSP: 0018:ffffc9000314f3c0 EFLAGS: 00000246
[  311.732343][    C1] RAX: 1ffffd40000fafa8 RBX: 0000000000000000 RCX: ffffffff820add5b
[  311.732349][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea00007d7d40
[  311.732354][    C1] RBP: ffffc9000314f630 R08: ffffea00007d7d47 R09: 1ffffd40000fafa8
[  311.732360][    C1] R10: dffffc0000000000 R11: fffff940000fafa9 R12: dffffc0000000000
[  311.732369][    C1] R13: ffffea00007d7d40 R14: 1ffff11005e33a2b R15: ffffea00007d7d40
[  311.732380][    C1]  ? copy_pmd_range+0x99b/0x7000
[  311.732399][    C1]  ? arch_stack_walk+0xfc/0x150
[  311.732424][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  311.732450][    C1]  copy_page_range+0xc46/0x1270
[  311.732461][    C1]  ? __lock_acquire+0xab9/0xd20
[  311.732475][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  311.732491][    C1]  ? up_write+0x1c4/0x420
[  311.732510][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  311.732526][    C1]  dup_mmap+0xf57/0x1ac0
[  311.732555][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  311.732586][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  311.732605][    C1]  ? mm_init+0xce1/0xf10
[  311.732623][    C1]  copy_mm+0x13c/0x4b0
[  311.732641][    C1]  ? copy_process+0x978/0x3b80
[  311.732654][    C1]  copy_process+0x16d3/0x3b80
[  311.732665][    C1]  ? copy_process+0x978/0x3b80
[  311.732681][    C1]  ? __pfx_copy_process+0x10/0x10
[  311.732700][    C1]  kernel_clone+0x21e/0x870
[  311.732719][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  311.732743][    C1]  __x64_sys_clone+0x18b/0x1e0
[  311.732761][    C1]  ? count_memcg_event_mm+0x21/0x260
[  311.732779][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  311.732805][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  311.732819][    C1]  ? do_syscall_64+0xbe/0x3b0
[  311.732837][    C1]  do_syscall_64+0xfa/0x3b0
[  311.732850][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.732862][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.732906][    C1]  ? exc_page_fault+0x9f/0xf0
[  311.732921][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.732935][    C1] RIP: 0033:0x7f5240f85213
[  311.732949][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  311.732962][    C1] RSP: 002b:00007ffff230a378 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  311.732976][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5240f85213
[  311.732982][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  311.732987][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  311.732992][    C1] R10: 000055558e4f47d0 R11: 0000000000000246 R12: 0000000000000000
[  311.732997][    C1] R13: 00000000000927c0 R14: 000000000004c12c R15: 00007ffff230a510
[  311.733006][    C1]  </TASK>
[  311.733009][    C1] 
[  311.884351][    C1] Allocated by task 17710:
[  311.885690][    C1]  kasan_save_track+0x3e/0x80
[  311.887122][    C1]  __kasan_kmalloc+0x93/0xb0
[  311.888510][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  311.890135][    C1]  __genradix_ptr_alloc+0x352/0x4a0
[  311.891699][    C1]  __genradix_prealloc+0x44/0x90
[  311.893192][    C1]  sctp_stream_init+0x14b/0x440
[  311.894708][    C1]  sctp_association_new+0x10dd/0x25f0
[  311.896318][    C1]  sctp_connect_new_asoc+0x2c5/0x690
[  311.898027][    C1]  sctp_sendmsg+0x155c/0x2810
[  311.899562][    C1]  __sock_sendmsg+0x19c/0x270
[  311.900987][    C1]  __sys_sendto+0x3bd/0x520
[  311.902397][    C1]  __x64_sys_sendto+0xde/0x100
[  311.904267][    C1]  do_syscall_64+0xfa/0x3b0
[  311.906022][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.908053][    C1] 
[  311.908889][    C1] Freed by task 17710:
[  311.910164][    C1]  kasan_save_track+0x3e/0x80
[  311.911714][    C1]  kasan_save_free_info+0x46/0x50
[  311.913582][    C1]  __kasan_slab_free+0x62/0x70
[  311.915213][    C1]  kfree+0x18e/0x440
[  311.916471][    C1]  genradix_free_recurse+0x5d/0xa0
[  311.918209][    C1]  genradix_free_recurse+0x5d/0xa0
[  311.920153][    C1]  sctp_stream_free+0xd5/0x110
[  311.921661][    C1]  sctp_association_free+0x26d/0x7f0
[  311.923659][    C1]  sctp_do_sm+0x3eba/0x5a20
[  311.925422][    C1]  sctp_primitive_SHUTDOWN+0x98/0xc0
[  311.927057][    C1]  sctp_close+0x409/0x900
[  311.928360][    C1]  inet_release+0x144/0x190
[  311.929730][    C1]  sock_close+0xc3/0x240
[  311.931010][    C1]  __fput+0x44c/0xa70
[  311.932235][    C1]  task_work_run+0x1d4/0x260
[  311.934032][    C1]  get_signal+0x11ed/0x1340
[  311.935745][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  311.937904][    C1]  exit_to_user_mode_loop+0x75/0x110
[  311.939666][    C1]  do_syscall_64+0x2bd/0x3b0
[  311.941061][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.942977][    C1] 
[  311.943924][    C1] The buggy address belongs to the object at ffff8880270cf400
[  311.943924][    C1]  which belongs to the cache kmalloc-512 of size 512
[  311.948346][    C1] The buggy address is located 42 bytes inside of
[  311.948346][    C1]  freed 512-byte region [ffff8880270cf400, ffff8880270cf600)
[  311.952357][    C1] 
[  311.953175][    C1] The buggy address belongs to the physical page:
[  311.955149][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880270ce800 pfn:0x270cc
[  311.958325][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  311.960850][    C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  311.963787][    C1] page_type: f5(slab)
[  311.965353][    C1] raw: 00fff00000000240 ffff88801a441c80 ffffea00008abd10 ffffea0000a13810
[  311.968014][    C1] raw: ffff8880270ce800 0000000000100002 00000000f5000000 0000000000000000
[  311.970560][    C1] head: 00fff00000000240 ffff88801a441c80 ffffea00008abd10 ffffea0000a13810
[  311.973441][    C1] head: ffff8880270ce800 0000000000100002 00000000f5000000 0000000000000000
[  311.976726][    C1] head: 00fff00000000002 ffffea00009c3301 00000000ffffffff 00000000ffffffff
[  311.979963][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  311.982906][    C1] page dumped because: kasan: bad access detected
[  311.985305][    C1] page_owner tracks the page as allocated
[  311.987146][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5854, tgid 5854 (syz-executor), ts 74829883964, free_ts 74809042686
[  311.993310][    C1]  post_alloc_hook+0x240/0x2a0
[  311.994739][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  311.996385][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  311.998093][    C1]  alloc_pages_mpol+0x232/0x4a0
[  311.999529][    C1]  allocate_slab+0x8a/0x3b0
[  312.000875][    C1]  ___slab_alloc+0xbfc/0x1480
[  312.002272][    C1]  __kmalloc_noprof+0x305/0x4f0
[  312.004173][    C1]  fib6_info_alloc+0x30/0xf0
[  312.005967][    C1]  ip6_route_info_create+0x142/0x860
[  312.008022][    C1]  ip6_route_add+0x49/0x1b0
[  312.009785][    C1]  addrconf_add_dev+0x24f/0x340
[  312.011520][    C1]  inet6_addr_add+0x1a1/0xc00
[  312.013189][    C1]  inet6_rtm_newaddr+0x93d/0xd20
[  312.014725][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  312.016263][    C1]  netlink_rcv_skb+0x208/0x470
[  312.017720][    C1]  netlink_unicast+0x75c/0x8e0
[  312.019169][    C1] page last free pid 5905 tgid 5905 stack trace:
[  312.021059][    C1]  __free_frozen_pages+0xc71/0xe70
[  312.022749][    C1]  __slab_free+0x326/0x400
[  312.024489][    C1]  qlist_free_all+0x97/0x140
[  312.026287][    C1]  kasan_quarantine_reduce+0x148/0x160
[  312.028296][    C1]  __kasan_slab_alloc+0x22/0x80
[  312.029748][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  312.031372][    C1]  getname_flags+0xb8/0x540
[  312.032792][    C1]  vfs_fstatat+0x43/0x170
[  312.034132][    C1]  __x64_sys_newfstatat+0x116/0x190
[  312.035702][    C1]  do_syscall_64+0xfa/0x3b0
[  312.037066][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.038844][    C1] 
[  312.039595][    C1] Memory state around the buggy address:
[  312.041246][    C1]  ffff8880270cf300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  312.044023][    C1]  ffff8880270cf380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  312.047036][    C1] >ffff8880270cf400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  312.050044][    C1]                                   ^
[  312.051884][    C1]  ffff8880270cf480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  312.054302][    C1]  ffff8880270cf500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  312.056694][    C1] ==================================================================
[  312.059351][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  312.061660][    C1] CPU: 1 UID: 0 PID: 5854 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  312.066203][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  312.069281][    C1] Call Trace:
[  312.070300][    C1]  <IRQ>
[  312.071169][    C1]  dump_stack_lvl+0x99/0x250
[  312.072620][    C1]  ? __asan_memcpy+0x40/0x70
[  312.074053][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.075595][    C1]  ? __pfx__printk+0x10/0x10
[  312.076994][    C1]  panic+0x2db/0x790
[  312.078233][    C1]  ? __pfx_panic+0x10/0x10
[  312.079585][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  312.081349][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  312.083408][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  312.085780][    C1]  ? print_memory_metadata+0x314/0x400
[  312.087592][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  312.089119][    C1]  check_panic_on_warn+0x89/0xb0
[  312.090603][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  312.092127][    C1]  end_report+0x78/0x160
[  312.093438][    C1]  kasan_report+0x129/0x150
[  312.094804][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  312.096347][    C1]  rose_timer_expiry+0x471/0x4b0
[  312.097836][    C1]  call_timer_fn+0x17e/0x5f0
[  312.099230][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  312.100877][    C1]  ? call_timer_fn+0xbe/0x5f0
[  312.102322][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  312.104322][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  312.106095][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.107686][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  312.109318][    C1]  __run_timer_base+0x61a/0x860
[  312.110759][    C1]  ? ktime_get+0x3e/0x1f0
[  312.112084][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  312.113770][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  312.115657][    C1]  run_timer_softirq+0xb7/0x180
[  312.117159][    C1]  handle_softirqs+0x286/0x870
[  312.118602][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  312.120049][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  312.121632][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  312.123462][    C1]  __irq_exit_rcu+0xca/0x1f0
[  312.125253][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  312.127153][    C1]  irq_exit_rcu+0x9/0x30
[  312.128508][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  312.130216][    C1]  </IRQ>
[  312.131116][    C1]  <TASK>
[  312.132048][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  312.134390][    C1] RIP: 0010:copy_pmd_range+0x9a7/0x7000
[  312.136455][    C1] Code: 31 ff e8 8c 50 b5 ff 48 83 e3 01 0f 85 af 62 00 00 4c 89 ff be 08 00 00 00 e8 85 5f 17 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 ff 5c 17 00 48 8b 5c 24 60 48 2b 5c 24 48 48 c1
[  312.142261][    C1] RSP: 0018:ffffc9000314f3c0 EFLAGS: 00000246
[  312.144614][    C1] RAX: 1ffffd40000fafa8 RBX: 0000000000000000 RCX: ffffffff820add5b
[  312.147296][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea00007d7d40
[  312.149636][    C1] RBP: ffffc9000314f630 R08: ffffea00007d7d47 R09: 1ffffd40000fafa8
[  312.152025][    C1] R10: dffffc0000000000 R11: fffff940000fafa9 R12: dffffc0000000000
[  312.154436][    C1] R13: ffffea00007d7d40 R14: 1ffff11005e33a2b R15: ffffea00007d7d40
[  312.156756][    C1]  ? copy_pmd_range+0x99b/0x7000
[  312.158224][    C1]  ? arch_stack_walk+0xfc/0x150
[  312.159678][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  312.161228][    C1]  copy_page_range+0xc46/0x1270
[  312.162918][    C1]  ? __lock_acquire+0xab9/0xd20
[  312.164800][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  312.166541][    C1]  ? up_write+0x1c4/0x420
[  312.167831][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  312.169811][    C1]  dup_mmap+0xf57/0x1ac0
[  312.171111][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  312.172512][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  312.174313][    C1]  ? mm_init+0xce1/0xf10
[  312.175618][    C1]  copy_mm+0x13c/0x4b0
[  312.176875][    C1]  ? copy_process+0x978/0x3b80
[  312.178296][    C1]  copy_process+0x16d3/0x3b80
[  312.179726][    C1]  ? copy_process+0x978/0x3b80
[  312.181186][    C1]  ? __pfx_copy_process+0x10/0x10
[  312.182779][    C1]  kernel_clone+0x21e/0x870
[  312.184185][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  312.185711][    C1]  __x64_sys_clone+0x18b/0x1e0
[  312.187186][    C1]  ? count_memcg_event_mm+0x21/0x260
[  312.188891][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  312.190503][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  312.192042][    C1]  ? do_syscall_64+0xbe/0x3b0
[  312.193753][    C1]  do_syscall_64+0xfa/0x3b0
[  312.195450][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.197059][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.198827][    C1]  ? exc_page_fault+0x9f/0xf0
[  312.200254][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.202079][    C1] RIP: 0033:0x7f5240f85213
[  312.203724][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  312.209355][    C1] RSP: 002b:00007ffff230a378 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  312.211788][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5240f85213
[  312.214617][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  312.217263][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  312.219602][    C1] R10: 000055558e4f47d0 R11: 0000000000000246 R12: 0000000000000000
[  312.221975][    C1] R13: 00000000000927c0 R14: 000000000004c12c R15: 00007ffff230a510
[  312.224926][    C1]  </TASK>
[  312.226485][    C1] Kernel Offset: disabled
[  312.227961][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:41:51  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff9200062df30 RBX=0000000000000010 RCX=ffffffff8172b6d8 RDX=0000000000000010
RSI=0000000000000010 RDI=ffffc9000316f998 RBP=0000000000000000 RSP=ffffc9000316f7f8
R8 =0000000000000009 R9 =ffffffff8172aae5 R10=ffffc9000316f948 R11=fffff5200062df35
R12=ffffc9000316f948 R13=ffffc9000316f998 R14=ffffc9000316f998 R15=ffffc9000316f990
RIP=ffffffff82223d58 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555561085500 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2823d802d8 CR3=0000000027bb4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000524f525245 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2823c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df6590 RSP=ffffc900001e0410
R8 =ffff888107e90237 R9 =1ffff11020fd2046 R10=dffffc0000000000 R11=ffffffff85461c50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461cc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558e4f4500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5241ce56c0 CR3=00000000272cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5241011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
