last executing test programs:

283.003399ms ago: executing program 2 (id=1413):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x24, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x10022}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0)

280.731317ms ago: executing program 1 (id=1416):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0)

210.534538ms ago: executing program 2 (id=1417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x10, 0x10, 0x9, 0x5, 0x0, 0x0, 0x8, 0xf}}, 0x1c}, 0x1, 0x0, 0x0, 0x82d92b8cfe1c32b5}, 0x4000080)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40004091)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40408b0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

210.290135ms ago: executing program 0 (id=1418):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})

210.198718ms ago: executing program 1 (id=1419):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0)

201.126869ms ago: executing program 2 (id=1420):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0)

171.981737ms ago: executing program 1 (id=1421):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

168.135298ms ago: executing program 0 (id=1422):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400})

109.443141ms ago: executing program 2 (id=1423):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

109.217654ms ago: executing program 1 (id=1424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x28011, r0, 0xffffc000)

108.278023ms ago: executing program 2 (id=1425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0)

108.103392ms ago: executing program 1 (id=1426):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=""/4096, 0x1000}, 0x4}], 0x1, 0x400005aa, 0x0)

52.691168ms ago: executing program 0 (id=1427):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000)=0xfc, 0x4)

52.570376ms ago: executing program 0 (id=1428):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000)=0x6, 0x4)

52.397748ms ago: executing program 1 (id=1429):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

417.665µs ago: executing program 2 (id=1430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20)

267.809µs ago: executing program 0 (id=1431):
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd6004000000002c0000000000000000000000ffffe0000002fe8000000000000000000000000000aa"], 0x0)

0s ago: executing program 0 (id=1432):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7ffbc72b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28221' (ED25519) to the list of known hosts.
syzkaller login: [   49.345208][ T5804] cgroup: Unknown subsys name 'net'
[   49.473343][ T5804] cgroup: Unknown subsys name 'cpuset'
[   49.477837][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.912694][ T5804] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.444912][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.448942][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.453904][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.457795][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.461977][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.507592][ T5200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.513465][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.517368][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.522838][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.526482][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.536392][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.540269][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.544287][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.548343][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.552064][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.911649][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   55.919280][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   55.994514][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   56.075495][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.079261][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.082926][ T5815] bridge_slave_0: entered allmulticast mode
[   56.086821][ T5815] bridge_slave_0: entered promiscuous mode
[   56.128240][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.131721][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.135031][ T5815] bridge_slave_1: entered allmulticast mode
[   56.138916][ T5815] bridge_slave_1: entered promiscuous mode
[   56.155606][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.158659][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.162198][ T5823] bridge_slave_0: entered allmulticast mode
[   56.166182][ T5823] bridge_slave_0: entered promiscuous mode
[   56.169971][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.172591][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.175285][ T5823] bridge_slave_1: entered allmulticast mode
[   56.179204][ T5823] bridge_slave_1: entered promiscuous mode
[   56.203221][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.227921][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.264082][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.267373][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.270292][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.272909][ T5819] bridge_slave_0: entered allmulticast mode
[   56.275639][ T5819] bridge_slave_0: entered promiscuous mode
[   56.281096][ T5815] team0: Port device team_slave_0 added
[   56.285706][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.291954][ T5815] team0: Port device team_slave_1 added
[   56.294099][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.296847][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.299599][ T5819] bridge_slave_1: entered allmulticast mode
[   56.303710][ T5819] bridge_slave_1: entered promiscuous mode
[   56.356962][ T5823] team0: Port device team_slave_0 added
[   56.359541][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.362630][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.371661][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.378033][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.385922][ T5823] team0: Port device team_slave_1 added
[   56.389933][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.395717][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.397867][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.408319][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.468761][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.471817][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.482342][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.489658][ T5819] team0: Port device team_slave_0 added
[   56.494036][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.496925][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.506576][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.516256][ T5819] team0: Port device team_slave_1 added
[   56.575372][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.578323][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.587678][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.596705][ T5815] hsr_slave_0: entered promiscuous mode
[   56.600027][ T5815] hsr_slave_1: entered promiscuous mode
[   56.614743][ T5823] hsr_slave_0: entered promiscuous mode
[   56.617037][ T5823] hsr_slave_1: entered promiscuous mode
[   56.619340][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.623554][ T5823] Cannot create hsr debugfs directory
[   56.625670][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.627886][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.637369][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.732669][ T5819] hsr_slave_0: entered promiscuous mode
[   56.735201][ T5819] hsr_slave_1: entered promiscuous mode
[   56.737334][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.740270][ T5819] Cannot create hsr debugfs directory
[   56.992002][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.000992][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.013618][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.033141][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.059658][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.077495][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.104456][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.112255][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.149005][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.159123][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.170323][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.187034][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.280230][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.310007][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   57.322203][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.329836][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.332549][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.345482][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.348508][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.369217][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   57.385700][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.388735][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.401906][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.415851][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.418127][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.445650][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   57.478934][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.482131][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.498448][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.501664][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.512205][   T54] Bluetooth: hci0: command tx timeout
[   57.580729][   T54] Bluetooth: hci1: command tx timeout
[   57.592987][ T5817] Bluetooth: hci2: command tx timeout
[   57.630277][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.687059][ T5815] veth0_vlan: entered promiscuous mode
[   57.714801][ T5815] veth1_vlan: entered promiscuous mode
[   57.728110][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.751369][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.757939][ T5815] veth0_macvtap: entered promiscuous mode
[   57.772170][ T5815] veth1_macvtap: entered promiscuous mode
[   57.795610][ T5823] veth0_vlan: entered promiscuous mode
[   57.807032][ T5819] veth0_vlan: entered promiscuous mode
[   57.809245][ T5823] veth1_vlan: entered promiscuous mode
[   57.816519][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.828393][ T5819] veth1_vlan: entered promiscuous mode
[   57.835586][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.854058][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.857623][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.861976][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.865573][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.878662][ T5823] veth0_macvtap: entered promiscuous mode
[   57.892493][ T5823] veth1_macvtap: entered promiscuous mode
[   57.898882][ T5819] veth0_macvtap: entered promiscuous mode
[   57.912838][ T5819] veth1_macvtap: entered promiscuous mode
[   57.932711][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.953635][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.958840][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.965005][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.968194][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.972020][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.977430][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.997446][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.017500][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.021658][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.025147][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.028829][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.059621][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.075462][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.099403][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.103071][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.139107][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.148198][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.167349][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.169947][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.170104][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.201375][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.209348][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.237062][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.240291][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.523072][ T5896] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7'.
[   58.532774][ T5896] Bluetooth: MGMT ver 1.23
[   58.628700][ T5903] netlink: 'syz.1.10': attribute type 2 has an invalid length.
[   58.635882][ T5903] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10'.
[   58.768248][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.216200][ T5939] netlink: 'syz.0.28': attribute type 2 has an invalid length.
[   59.246874][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.365103][ T5949] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   59.583765][ T5817] Bluetooth: hci0: command tx timeout
[   59.661858][ T5817] Bluetooth: hci1: command tx timeout
[   59.671981][ T5817] Bluetooth: hci2: command tx timeout
[   59.682129][ T5968] xt_TPROXY: Can be used only with -p tcp or -p udp
[   60.123885][ T5992] netlink: 'syz.1.51': attribute type 5 has an invalid length.
[   60.624627][ T5999] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[   60.632553][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   60.806210][ T6011] netlink: 596 bytes leftover after parsing attributes in process `syz.1.60'.
[   61.161982][ T6039] syz.1.74 uses obsolete (PF_INET,SOCK_PACKET)
[   61.316140][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'.
[   61.371248][ T6051] nbd0: detected capacity change from 0 to 63
[   61.378419][   T55] block nbd0: Receive control failed (result -104)
[   61.422883][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'.
[   61.519238][ T6068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   61.522189][ T6068] IPv6: NLM_F_CREATE should be set when creating new route
[   61.524963][ T6068] IPv6: NLM_F_CREATE should be set when creating new route
[   61.527477][ T6068] IPv6: NLM_F_CREATE should be set when creating new route
[   61.534586][ T6068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   61.537026][ T6068] Zero length message leads to an empty skb
[   61.661654][ T5817] Bluetooth: hci0: command tx timeout
[   61.682978][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   61.692356][ T6083] hsr0: entered allmulticast mode
[   61.694236][ T6083] hsr_slave_0: entered allmulticast mode
[   61.696014][ T6083] hsr_slave_1: entered allmulticast mode
[   61.713347][ T6082] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.716637][ T6082] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.719730][ T6082] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.722977][ T6082] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.751534][ T5817] Bluetooth: hci2: command tx timeout
[   61.752536][   T54] Bluetooth: hci1: command tx timeout
[   61.766251][ T6082] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   61.769846][ T6082] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   61.773953][ T6082] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   61.777582][ T6082] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   61.828332][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.832107][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.268468][ T6126] Unsupported ieee802154 address type: 0
[   62.406150][ T6134] lo: entered allmulticast mode
[   62.411985][ T6134] lo: left allmulticast mode
[   62.415150][ T6135] sctp: [Deprecated]: syz.1.113 (pid 6135) Use of int in max_burst socket option deprecated.
[   62.415150][ T6135] Use struct sctp_assoc_value instead
[   62.691731][ T6154] netlink: 4832 bytes leftover after parsing attributes in process `syz.0.122'.
[   63.009385][ T6170] xt_hashlimit: max too large, truncated to 1048576
[   63.014802][ T6170] No such timeout policy "syz1"
[   63.068944][ T6172] netlink: 'syz.2.133': attribute type 1 has an invalid length.
[   63.125355][ T6172] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   63.135810][ T5845] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   63.142179][ T6172] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.160817][ T6172] veth3: entered promiscuous mode
[   63.166046][ T6172] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   63.252291][ T5845] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   63.372005][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'.
[   63.395143][ T6190] netlink: 'syz.1.141': attribute type 1 has an invalid length.
[   63.668146][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[   63.672138][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[   63.675473][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[   63.681568][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[   63.684711][   T60] block nbd0: Dead connection, failed to find a fallback
[   63.687746][   T60] block nbd0: shutting down sockets
[   63.690274][   T60] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.694426][   T60] Buffer I/O error on dev nbd0, logical block 3, async page read
[   63.697658][   T60] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.701809][   T60] Buffer I/O error on dev nbd0, logical block 2, async page read
[   63.705135][   T60] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.708779][   T60] Buffer I/O error on dev nbd0, logical block 1, async page read
[   63.712482][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.716413][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.728383][ T5816] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.743473][ T5816] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.752702][ T5817] Bluetooth: hci0: command tx timeout
[   63.754693][ T5816] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.758904][ T5816] Buffer I/O error on dev nbd0, logical block 1, async page read
[   63.763167][ T5816] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.767018][ T5816] Buffer I/O error on dev nbd0, logical block 2, async page read
[   63.770465][ T5816] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.788123][ T5816] Buffer I/O error on dev nbd0, logical block 3, async page read
[   63.797437][ T5816] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.801394][ T5816] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.804782][ T5816] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.808501][ T5816] Buffer I/O error on dev nbd0, logical block 1, async page read
[   63.816168][ T5816] ldm_validate_partition_table(): Disk read failed.
[   63.820907][ T5817] Bluetooth: hci1: command tx timeout
[   63.821076][ T5816] Dev nbd0: unable to read RDB block 0
[   63.827111][ T5816]  nbd0: unable to read partition table
[   63.832775][ T5817] Bluetooth: hci2: command tx timeout
[   63.843936][ T5816] ldm_validate_partition_table(): Disk read failed.
[   63.854702][ T5816] Dev nbd0: unable to read RDB block 0
[   63.858759][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[   63.864664][ T5816]  nbd0: unable to read partition table
[   63.932424][ T6218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.155'.
[   64.040153][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'.
[   64.123898][ T6231] sctp: [Deprecated]: syz.1.162 (pid 6231) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.123898][ T6231] Use struct sctp_sack_info instead
[   64.288071][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'.
[   64.288384][ T6243] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   64.291791][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.166'.
[   64.312324][ T6242] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   64.486599][ T6253] IPv6: addrconf: prefix option has invalid lifetime
[   64.914352][   T33] audit: type=1800 audit(1751906927.290:2): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="bpf-map" dev="anon_inodefs" ino=32 res=0 errno=0
[   64.935008][ T6279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.181'.
[   65.025458][   T33] audit: type=1800 audit(1751906927.420:3): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.187" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=328 res=0 errno=0
[   65.042172][   T33] audit: type=1804 audit(1751906927.430:4): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.187" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=328 res=1 errno=0
[   65.242035][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'.
[   65.415449][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[   65.578442][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[   65.817560][ T6336] netlink: 'syz.0.210': attribute type 2 has an invalid length.
[   66.011008][ T6354] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   66.014757][ T6354] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   66.648903][ T6370] bridge_slave_0: left allmulticast mode
[   66.651089][ T6370] bridge_slave_0: left promiscuous mode
[   66.653213][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.659182][ T6370] bridge_slave_1: left allmulticast mode
[   66.662249][ T6370] bridge_slave_1: left promiscuous mode
[   66.664363][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.673721][ T6370] bond0: (slave bond_slave_0): Releasing backup interface
[   66.679335][ T6370] bond0: (slave bond_slave_1): Releasing backup interface
[   66.702676][ T6370] team0: Failed to send options change via netlink (err -105)
[   66.711410][ T6370] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   66.718358][ T6370] team0: Port device team_slave_0 removed
[   66.733696][ T6370] team0: Failed to send options change via netlink (err -105)
[   66.737371][ T6370] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   66.740997][ T6370] team0: Port device team_slave_1 removed
[   66.743556][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.747244][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.757233][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.760171][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.104504][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'.
[   67.325806][ T6421] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   67.680053][ T6457] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   68.300705][ T6503] warning: `syz.1.286' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.304768][ T6523] __nla_validate_parse: 6 callbacks suppressed
[   69.304781][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'.
[   69.409153][ T6528] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   69.589262][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'.
[   69.899688][ T6563] netlink: 356 bytes leftover after parsing attributes in process `syz.1.313'.
[   69.932024][ T5844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.935631][ T5844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.961631][ T5278] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   70.070900][ T5278] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   70.322782][ T6588] bond0: Unable to set down delay as MII monitoring is disabled
[   70.800397][ T6608] vlan2: entered promiscuous mode
[   70.803519][ T6608] bond0: entered promiscuous mode
[   70.816468][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.320'.
[   70.837188][ T6591] netlink: 'syz.0.320': attribute type 12 has an invalid length.
[   70.943258][ T5278] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   71.031018][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.117359][ T6615] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.255754][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'.
[   71.282189][ T6629] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   72.549741][ T6740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.854571][ T6756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.856948][ T6756] IPv6: NLM_F_CREATE should be set when creating new route
[   72.859319][ T6756] IPv6: NLM_F_CREATE should be set when creating new route
[   73.217341][ T6769] pim6reg1: entered promiscuous mode
[   73.219126][ T6769] pim6reg1: entered allmulticast mode
[   73.358401][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.397'.
[   73.363077][ T6776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.397'.
[   73.449150][ T6781] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[   73.478848][ T6781] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.487172][ T6781] erspan0: entered allmulticast mode
[   73.515257][ T6781] bond2: (slave erspan0): making interface the new active one
[   73.523037][ T6781] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   73.660662][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.674075][ T6802] netlink: 176 bytes leftover after parsing attributes in process `syz.2.410'.
[   73.787014][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'.
[   74.959078][ T6961] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   75.307936][ T6992] Driver unsupported XDP return value 0 on prog  (id 62) dev N/A, expect packet loss!
[   75.532439][ T7010] netlink: 208 bytes leftover after parsing attributes in process `syz.0.474'.
[   76.283572][ T7051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.487'.
[   76.336343][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.493'.
[   76.344238][ T7054] netlink: 'syz.1.493': attribute type 4 has an invalid length.
[   76.347202][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[   76.423836][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'.
[   76.713846][ T7087] netlink: 164 bytes leftover after parsing attributes in process `syz.0.510'.
[   76.863135][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[   76.891777][ T7100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'.
[   76.949353][ T6545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.952190][ T6545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.954853][ T7102] netlink: 'syz.0.517': attribute type 21 has an invalid length.
[   76.957365][ T7102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.517'.
[   76.969452][    C1] Unknown status report in ack skb
[   77.010948][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.019315][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.044903][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'.
[   77.098908][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.105509][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.204898][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.210431][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.299390][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.303445][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.404317][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.407689][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.507452][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.527754][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.593474][ T7149] team0 (unregistering): Port device team_slave_0 removed
[   77.612819][ T7149] team0 (unregistering): Port device team_slave_1 removed
[   77.625020][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.628422][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.714989][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.721181][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.813114][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.816539][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.913676][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.916552][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.018009][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.021777][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.119043][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.121759][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.157216][ T7167] netlink: 'syz.0.547': attribute type 4 has an invalid length.
[   78.222385][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.225068][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.325365][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.328409][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.286677][ T6943] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   79.330189][ T7207] netlink: 'syz.2.566': attribute type 10 has an invalid length.
[   79.610962][ T1024] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   79.619769][ T7207] batman_adv: batadv0: Adding interface: netdevsim0
[   79.622175][ T7207] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.633633][ T7207] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   79.786467][ T7224] netlink: 'syz.1.573': attribute type 10 has an invalid length.
[   79.797771][ T7224] batman_adv: batadv0: Adding interface: netdevsim0
[   79.809626][ T7224] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.822348][ T7224] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   79.887141][ T7234] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   80.030123][ T7245] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   80.839241][ T7304] openvswitch: netlink: IPv4 tun info is not correct
[   81.270806][   T10] cfg80211: failed to load regulatory.db
[   81.405241][ T7352] __nla_validate_parse: 4 callbacks suppressed
[   81.405253][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[   81.411611][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[   81.851787][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'.
[   81.900677][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.979762][ T7405] netlink: 'syz.1.661': attribute type 10 has an invalid length.
[   81.987009][ T7405] syz_tun: entered promiscuous mode
[   82.000048][ T7405] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   82.541358][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   82.553364][ T7452] erspan0: left allmulticast mode
[   82.560020][ T7452] netlink: 136 bytes leftover after parsing attributes in process `syz.1.680'.
[   82.611437][   T13] bond2: (slave erspan0): link status definitely down, disabling slave
[   82.616413][   T13] bond2: now running without any active interface!
[   82.977225][ T7497] tc_dump_action: action bad kind
[   83.583359][ T7546] netlink: 'syz.0.725': attribute type 1 has an invalid length.
[   83.621123][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'.
[   83.655126][ T7554] netlink: 'syz.0.729': attribute type 5 has an invalid length.
[   83.657890][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'.
[   83.854273][ T7571] netlink: 'syz.0.736': attribute type 2 has an invalid length.
[   83.976537][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'.
[   83.979539][ T7583] netlink: 'syz.0.741': attribute type 2 has an invalid length.
[   83.984247][ T7583] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[   83.986690][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[   83.994091][ T7585] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[   84.109950][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   84.138158][ T7601] xt_connbytes: Forcing CT accounting to be enabled
[   84.140388][ T7601] Cannot find set identified by id 0 to match
[   84.210068][ T7611] netlink: 240 bytes leftover after parsing attributes in process `syz.2.754'.
[   85.086530][ T7686] sctp: [Deprecated]: syz.1.790 (pid 7686) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.086530][ T7686] Use struct sctp_sack_info instead
[   85.216059][ T7696] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   85.630407][ T7731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.782942][ T7747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.821378][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   85.930810][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[   86.040902][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   86.151025][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[   86.261393][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   86.371437][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[   86.481037][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[   86.591243][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   86.612865][ T7809] __nla_validate_parse: 5 callbacks suppressed
[   86.612875][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'.
[   86.619879][ T7809] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   86.624385][ T7809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.701349][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   86.719279][ T7819] netlink: 'syz.1.851': attribute type 1 has an invalid length.
[   86.746255][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'.
[   86.872128][ T7838] batadv_slave_1: entered promiscuous mode
[   86.874956][ T7838] batadv_slave_1: left promiscuous mode
[   87.654445][ T7881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.880'.
[   87.786211][ T7889] netlink: 'syz.2.884': attribute type 21 has an invalid length.
[   88.767398][ T7918] xt_l2tp: v2 sid > 0xffff: 4294901760
[   88.901654][ T7933] netlink: 'syz.2.905': attribute type 11 has an invalid length.
[   88.940448][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.908'.
[   88.956606][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.908'.
[   88.997749][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'.
[   89.107538][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'.
[   89.333647][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[   89.561921][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'.
[   89.634180][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'.
[   89.677878][ T8029] netlink: 'syz.1.950': attribute type 1 has an invalid length.
[   89.722040][ T8029] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.747453][ T8029] vlan2: entered allmulticast mode
[   89.749600][ T8029] geneve1: entered allmulticast mode
[   89.759478][ T8029] bond3: (slave vlan2): making interface the new active one
[   89.765715][ T8029] bond3: (slave vlan2): Enslaving as an active interface with an up link
[   90.053448][ T8064] IPv6: Can't replace route, no match found
[   90.082767][ T8070] tipc: Started in network mode
[   90.084405][ T8070] tipc: Node identity c6559194267f, cluster identity 4711
[   90.086782][ T8070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.089341][ T8070] syzkaller0: entered promiscuous mode
[   90.092473][ T8070] syzkaller0: entered allmulticast mode
[   90.122998][ T8070] tipc: Resetting bearer <eth:syzkaller0>
[   90.126523][ T8069] tipc: Resetting bearer <eth:syzkaller0>
[   90.144787][ T8069] tipc: Disabling bearer <eth:syzkaller0>
[   90.296792][ T8092] netlink: 'syz.2.979': attribute type 83 has an invalid length.
[   90.464547][ T8112] netlink: 'syz.1.989': attribute type 2 has an invalid length.
[   90.817496][ T8125] netlink: 'syz.1.995': attribute type 9 has an invalid length.
[   90.938533][ T8133] sctp: [Deprecated]: syz.1.999 (pid 8133) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.938533][ T8133] Use struct sctp_sack_info instead
[   90.960857][ T5844] net_ratelimit: 32 callbacks suppressed
[   90.960870][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[   91.070837][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[   91.181174][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   91.330687][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   91.470752][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   91.601637][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   91.681437][ T8175] block nbd1: server does not support multiple connections per device.
[   91.684788][ T8175] block nbd1: shutting down sockets
[   91.710742][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   91.820843][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   91.946338][ T8205] netlink: 'syz.0.1028': attribute type 13 has an invalid length.
[   91.952017][ T8205] netlink: 'syz.0.1028': attribute type 17 has an invalid length.
[   92.024811][ T8205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.046278][ T8214] __nla_validate_parse: 7 callbacks suppressed
[   92.046288][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1036'.
[   92.051484][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[   92.181842][ T8229] team0: Mode changed to "broadcast"
[   92.387931][ T8251] vcan0: tx drop: invalid da for name 0x0000000000000001
[   92.588999][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1058'.
[   92.637803][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120cbac00: rx timeout, send abort
[   92.729512][ T8269] netlink: 'syz.1.1059': attribute type 8 has an invalid length.
[   92.761798][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'.
[   93.138521][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120cba800: rx timeout, send abort
[   93.141452][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120cbac00: abort rx timeout. Force session deactivation
[   93.209287][ T8299] lo speed is unknown, defaulting to 1000
[   93.215855][ T8299] lo speed is unknown, defaulting to 1000
[   93.219141][ T8299] lo speed is unknown, defaulting to 1000
[   93.239860][ T8299] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.256170][ T8299] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   93.284794][ T8299] lo speed is unknown, defaulting to 1000
[   93.290052][ T8299] lo speed is unknown, defaulting to 1000
[   93.296319][ T8299] lo speed is unknown, defaulting to 1000
[   93.488680][ T8325] siw: device registration error -23
[   93.641254][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120cba800: abort rx timeout. Force session deactivation
[   94.414093][ T8382] netlink: 'syz.1.1112': attribute type 1 has an invalid length.
[   94.427749][ T8382] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.444609][ T8382] bond4: (slave ip6erspan0): making interface the new active one
[   94.448285][ T8382] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[   95.385688][ T8435] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   95.465480][ T8435] batadv_slave_0: entered promiscuous mode
[   95.472390][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'.
[   95.479978][ T8435] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1134'.
[   95.485335][ T8435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1134'.
[   96.061150][ T5845] net_ratelimit: 36 callbacks suppressed
[   96.061169][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[   96.173388][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[   96.226084][ T8487] macvlan0: entered promiscuous mode
[   96.230457][ T8487] netlink: 'syz.1.1159': attribute type 1 has an invalid length.
[   96.233826][ T8487] netlink: 'syz.1.1159': attribute type 2 has an invalid length.
[   96.262832][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1161'.
[   96.291480][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[   96.400693][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   96.511261][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[   96.620943][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[   96.732778][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   96.852541][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[   96.960852][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[   97.001997][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'.
[   97.005803][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'.
[   97.009392][ T8551] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.1181'.
[   97.072764][ T5682] bond2: (slave erspan0): failed to get link speed/duplex
[   97.260747][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   97.376323][ T8568] syz.1.1189 (8568) used obsolete PPPIOCDETACH ioctl
[   97.519595][ T5278] IPVS: starting estimator thread 0...
[   97.611617][ T8573] IPVS: using max 79 ests per chain, 189600 per kthread
[   97.784083][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'.
[   97.790041][ T8596] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1202'.
[   97.914680][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[   97.918408][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'.
[   98.236966][ T8628] lo speed is unknown, defaulting to 1000
[   98.268781][ T8638] netlink: 'syz.2.1217': attribute type 13 has an invalid length.
[   98.280696][ T8638] netlink: 'syz.2.1217': attribute type 17 has an invalid length.
[   98.325989][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'.
[   98.408010][ T8647] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   98.450741][ T8642] bond0: invalid ARP target 0.0.0.0 specified for addition
[   98.453784][ T8642] bond0: option arp_ip_target: invalid value (0)
[   98.604701][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1231'.
[   98.855717][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'.
[   98.860973][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   98.944327][ T8696] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1248'.
[   99.117595][ T8709] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.455605][ T8742] netlink: 'syz.0.1269': attribute type 3 has an invalid length.
[   99.714328][ T8763] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1277'.
[   99.858533][ T8773] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1281'.
[  100.334370][ T8824] tipc: Started in network mode
[  100.337376][ T8824] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  100.340107][ T8824] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  100.550122][ T8844] netlink: 'syz.0.1315': attribute type 11 has an invalid length.
[  100.943815][ T8880] netlink: 'syz.1.1333': attribute type 1 has an invalid length.
[  101.131616][ T5845] net_ratelimit: 59 callbacks suppressed
[  101.131629][ T5845] bond2: (slave erspan0): failed to get link speed/duplex
[  101.151631][ T5682] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.241023][   T13] bond2: (slave erspan0): failed to get link speed/duplex
[  101.261359][ T5845] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.335773][ T5880] tipc: Node number set to 10136234
[  101.357075][   T13] bond2: (slave erspan0): failed to get link speed/duplex
[  101.370634][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.472841][   T13] bond2: (slave erspan0): failed to get link speed/duplex
[  101.491606][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.581479][ T5844] bond2: (slave erspan0): failed to get link speed/duplex
[  101.619563][ T5844] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  101.906817][ T8949] syzkaller0: refused to change device tx_queue_len
[  102.039248][ T8961] syzkaller0: entered promiscuous mode
[  102.046732][ T8961] syzkaller0: entered allmulticast mode
[  102.225119][ T8969] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  102.229543][ T8969] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  102.234904][ T8969] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  102.238274][ T8969] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  102.242522][ T8969] geneve2: entered promiscuous mode
[  102.245231][ T8981] netlink: 'syz.1.1375': attribute type 21 has an invalid length.
[  102.249345][ T8981] netlink: 'syz.1.1375': attribute type 22 has an invalid length.
[  102.256117][ T8981] netlink: 'syz.1.1375': attribute type 23 has an invalid length.
[  102.266281][ T8981] netlink: 'syz.1.1375': attribute type 25 has an invalid length.
[  102.269652][ T8981] netlink: 'syz.1.1375': attribute type 26 has an invalid length.
[  102.374146][ T8995] netlink: 'syz.0.1382': attribute type 1 has an invalid length.
[  102.930182][ T9042] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  103.167457][ T9068] veth1_macvtap: left promiscuous mode
[  103.169320][ T9068] macsec0: entered promiscuous mode
[  103.176195][ T9070] __nla_validate_parse: 13 callbacks suppressed
[  103.176205][ T9070] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1419'.
[  103.179880][ T9068] veth1_macvtap: entered promiscuous mode
[  103.185403][ T9068] macsec0: left promiscuous mode
[  103.390132][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.399029][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.407787][    C1] ------------[ cut here ]------------
[  103.410171][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  103.415024][    C1] WARNING: CPU: 1 PID: 9093 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  103.419251][    C1] Modules linked in:
[  103.421381][    C1] CPU: 1 UID: 0 PID: 9093 Comm: syz.1.1429 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  103.427173][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.431523][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  103.434039][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 1a a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  103.441944][    C1] RSP: 0018:ffffc900001e07f8 EFLAGS: 00010246
[  103.444520][    C1] RAX: cc2804fdd0e09f00 RBX: 000000000000000c RCX: ffff888034be8000
[  103.447809][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  103.451233][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  103.454632][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8881112559a8
[  103.457882][    C1] R13: 0000000000000000 R14: ffff888030de0e40 R15: ffff888030de30d8
[  103.461333][    C1] FS:  00007f43be2de6c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  103.464846][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.467098][    C1] CR2: 000000110c293811 CR3: 0000000030c70000 CR4: 00000000000006f0
[  103.469658][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  103.472552][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  103.475058][    C1] Call Trace:
[  103.476138][    C1]  <IRQ>
[  103.477062][    C1]  rate_control_send_low+0x194/0x7a0
[  103.478819][    C1]  rate_control_get_rate+0x20b/0x5d0
[  103.480621][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  103.482512][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  103.484537][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  103.486269][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  103.488011][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  103.490125][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  103.492881][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  103.495209][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  103.497510][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  103.499811][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  103.502435][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  103.504792][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  103.507799][    C1]  __iterate_interfaces+0x2ab/0x590
[  103.509942][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  103.512602][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  103.515506][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  103.517853][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  103.520887][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  103.523081][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  103.525562][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  103.527723][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  103.530091][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  103.532648][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  103.534815][    C1]  handle_softirqs+0x286/0x870
[  103.536883][    C1]  ? do_softirq+0xec/0x180
[  103.538580][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  103.540446][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.542180][    C1]  do_softirq+0xec/0x180
[  103.543742][    C1]  </IRQ>
[  103.545023][    C1]  <TASK>
[  103.545985][    C1]  ? __pfx_do_softirq+0x10/0x10
[  103.547975][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  103.550202][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  103.552260][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  103.554236][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.555871][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.557595][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.559273][    C1]  __dev_queue_xmit+0x1cd7/0x3a70
[  103.561174][    C1]  ? __netlink_deliver_tap+0x404/0x850
[  103.563243][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.565418][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.567418][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  103.569488][    C1]  ? __copy_skb_header+0xa7/0x550
[  103.571497][    C1]  ? __asan_memcpy+0x40/0x70
[  103.573011][    C1]  ? skb_clone+0x246/0x3a0
[  103.574772][    C1]  __netlink_deliver_tap+0x5ad/0x850
[  103.576824][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  103.578503][    C1]  netlink_deliver_tap+0x19c/0x1b0
[  103.580318][    C1]  netlink_sendskb+0x68/0x140
[  103.582220][    C1]  netlink_rcv_skb+0x28c/0x470
[  103.584148][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.586179][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.588376][    C1]  ? down_read+0x1ad/0x2e0
[  103.590213][    C1]  genl_rcv+0x28/0x40
[  103.592002][    C1]  netlink_unicast+0x75b/0x8d0
[  103.593995][    C1]  netlink_sendmsg+0x805/0xb30
[  103.595960][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.598172][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  103.600233][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  103.602559][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.604771][    C1]  __sock_sendmsg+0x21c/0x270
[  103.606682][    C1]  __sys_sendto+0x3bd/0x520
[  103.608553][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  103.610645][    C1]  ? fd_install+0x97/0x540
[  103.612426][    C1]  ? fd_install+0x30d/0x540
[  103.614250][    C1]  __x64_sys_sendto+0xde/0x100
[  103.616139][    C1]  do_syscall_64+0xfa/0x3b0
[  103.618079][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.620271][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.622812][    C1]  ? exc_page_fault+0x9f/0xf0
[  103.624751][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.627170][    C1] RIP: 0033:0x7f43bd3907bc
[  103.629113][    C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  103.636938][    C1] RSP: 002b:00007f43be2dcee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  103.640329][    C1] RAX: ffffffffffffffda RBX: 00007f43be2dcfa0 RCX: 00007f43bd3907bc
[  103.643683][    C1] RDX: 0000000000000014 RSI: 00007f43be2dcff0 RDI: 0000000000000003
[  103.646816][    C1] RBP: 0000000000000000 R08: 00007f43be2dcf34 R09: 000000000000000c
[  103.650016][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  103.653439][    C1] R13: 0000000000000000 R14: 00007f43be2dcff0 R15: 0000000000000000
[  103.656644][    C1]  </TASK>
[  103.657918][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  103.660878][    C1] CPU: 1 UID: 0 PID: 9093 Comm: syz.1.1429 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  103.665979][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.670360][    C1] Call Trace:
[  103.671811][    C1]  <IRQ>
[  103.673083][    C1]  dump_stack_lvl+0x99/0x250
[  103.675105][    C1]  ? __asan_memcpy+0x40/0x70
[  103.677075][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.679335][    C1]  ? __pfx__printk+0x10/0x10
[  103.681273][    C1]  panic+0x2db/0x790
[  103.682881][    C1]  ? __pfx_panic+0x10/0x10
[  103.684821][    C1]  __warn+0x31b/0x4b0
[  103.686542][    C1]  ? __rate_control_send_low+0x5df/0x820
[  103.688913][    C1]  ? __rate_control_send_low+0x5df/0x820
[  103.691247][    C1]  report_bug+0x2be/0x4f0
[  103.693104][    C1]  ? __rate_control_send_low+0x5df/0x820
[  103.695424][    C1]  ? __rate_control_send_low+0x5df/0x820
[  103.697710][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  103.700047][    C1]  handle_bug+0x84/0x160
[  103.701842][    C1]  exc_invalid_op+0x1a/0x50
[  103.703755][    C1]  asm_exc_invalid_op+0x1a/0x20
[  103.705858][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  103.708449][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 1a a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  103.716205][    C1] RSP: 0018:ffffc900001e07f8 EFLAGS: 00010246
[  103.718815][    C1] RAX: cc2804fdd0e09f00 RBX: 000000000000000c RCX: ffff888034be8000
[  103.722101][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  103.725462][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  103.728669][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8881112559a8
[  103.731805][    C1] R13: 0000000000000000 R14: ffff888030de0e40 R15: ffff888030de30d8
[  103.735140][    C1]  ? __rate_control_send_low+0x5de/0x820
[  103.737466][    C1]  rate_control_send_low+0x194/0x7a0
[  103.739670][    C1]  rate_control_get_rate+0x20b/0x5d0
[  103.741850][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  103.744373][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  103.747004][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  103.749343][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  103.751698][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  103.753950][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  103.756198][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  103.758489][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  103.760491][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  103.762202][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  103.764351][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  103.766624][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  103.769671][    C1]  __iterate_interfaces+0x2ab/0x590
[  103.771852][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  103.774416][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  103.777488][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  103.780073][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  103.783026][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  103.785122][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  103.787604][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  103.789853][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  103.792259][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  103.794732][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  103.796844][    C1]  handle_softirqs+0x286/0x870
[  103.798936][    C1]  ? do_softirq+0xec/0x180
[  103.800848][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  103.802868][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.804611][    C1]  do_softirq+0xec/0x180
[  103.806333][    C1]  </IRQ>
[  103.807635][    C1]  <TASK>
[  103.808887][    C1]  ? __pfx_do_softirq+0x10/0x10
[  103.810826][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  103.812988][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  103.815127][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  103.817516][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.819664][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.821849][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.823985][    C1]  __dev_queue_xmit+0x1cd7/0x3a70
[  103.826122][    C1]  ? __netlink_deliver_tap+0x404/0x850
[  103.828417][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  103.830504][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.833067][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  103.835348][    C1]  ? __copy_skb_header+0xa7/0x550
[  103.837410][    C1]  ? __asan_memcpy+0x40/0x70
[  103.839403][    C1]  ? skb_clone+0x246/0x3a0
[  103.841258][    C1]  __netlink_deliver_tap+0x5ad/0x850
[  103.843471][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  103.845641][    C1]  netlink_deliver_tap+0x19c/0x1b0
[  103.847768][    C1]  netlink_sendskb+0x68/0x140
[  103.849805][    C1]  netlink_rcv_skb+0x28c/0x470
[  103.851798][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.853914][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.856117][    C1]  ? down_read+0x1ad/0x2e0
[  103.858014][    C1]  genl_rcv+0x28/0x40
[  103.859715][    C1]  netlink_unicast+0x75b/0x8d0
[  103.861770][    C1]  netlink_sendmsg+0x805/0xb30
[  103.863783][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.865947][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  103.867960][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  103.870115][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.872322][    C1]  __sock_sendmsg+0x21c/0x270
[  103.874319][    C1]  __sys_sendto+0x3bd/0x520
[  103.876174][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  103.878314][    C1]  ? fd_install+0x97/0x540
[  103.880208][    C1]  ? fd_install+0x30d/0x540
[  103.882135][    C1]  __x64_sys_sendto+0xde/0x100
[  103.884188][    C1]  do_syscall_64+0xfa/0x3b0
[  103.886155][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.888425][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.891013][    C1]  ? exc_page_fault+0x9f/0xf0
[  103.893034][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.895577][    C1] RIP: 0033:0x7f43bd3907bc
[  103.897417][    C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  103.905207][    C1] RSP: 002b:00007f43be2dcee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  103.908672][    C1] RAX: ffffffffffffffda RBX: 00007f43be2dcfa0 RCX: 00007f43bd3907bc
[  103.911923][    C1] RDX: 0000000000000014 RSI: 00007f43be2dcff0 RDI: 0000000000000003
[  103.915087][    C1] RBP: 0000000000000000 R08: 00007f43be2dcf34 R09: 000000000000000c
[  103.918190][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  103.921471][    C1] R13: 0000000000000000 R14: 00007f43be2dcff0 R15: 0000000000000000
[  103.924729][    C1]  </TASK>
[  103.926697][    C1] Kernel Offset: disabled
[  103.928509][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:49:25  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000675e00 RBX=0000000000000001 RCX=d2e479262d5fce00 RDX=ffffffff8b883e80
RSI=ffffffff8be28d20 RDI=ffffffff8be28ce0 RBP=dffffc0000000000 RSP=ffffc900033af218
R8 =0000000000000000 R9 =ffffffff81728af5 R10=ffffc900033af398 R11=fffff52000675e75
R12=ffffffff81696d83 R13=ffffc900033af398 R14=ffffc900033af348 R15=ffffc900033af390
RIP=ffffffff81728c19 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556177b500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f11b1781178 CR3=00000001116d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=041ee0030008001e d8030008001ed003 XMM03=ffffffffff041ef0 030fffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=000055556178f2c7 000055556178f250
XMM06=00005555617922a4 00005555617922a0 XMM07=030fffffffffffff 041ef0030fffffff
XMM08=ffffff041ee00300 08001ed803000800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33b9260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dc99f0 RSP=ffffc900001dff30
R8 =ffff8881082a0237 R9 =1ffff11021054046 R10=dffffc0000000000 R11=ffffffff85474540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff854745b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f43be2de6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c293811 CR3=0000000030c70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=000000ff00000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffff0000000000 XMM05=00007f43bd584458 00007f43bd5844a0
XMM06=00007f43bd584498 00007f43bd584490 XMM07=00007f43bd584488 00007f43bd584480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f43bd411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
