last executing test programs:

419.576366ms ago: executing program 0 (id=1215):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03076844268cb89e14f188a8", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

359.96625ms ago: executing program 1 (id=1217):
syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0)

359.557555ms ago: executing program 0 (id=1218):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000001000000040008802c000480050003000100000005000300000000020000000000000000050003000000000005000300020000000800010003000000080002000100"], 0x54}}, 0x880)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0)
r4 = socket(0x22, 0x2, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0)
accept4$inet(r4, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0)
recvmmsg(r9, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/129, 0x81}, {0x0}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

359.36454ms ago: executing program 2 (id=1219):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40)

359.030189ms ago: executing program 1 (id=1220):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e1f, 0x4, @mcast2, 0xb90}, 0x1c)
bind$inet6(r0, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c)

310.586155ms ago: executing program 2 (id=1221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40000)

310.34017ms ago: executing program 1 (id=1222):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x4, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004)

237.156511ms ago: executing program 1 (id=1223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0)

237.058813ms ago: executing program 2 (id=1224):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x4f83, 0xffffffff}, 0x1c)

189.233426ms ago: executing program 1 (id=1225):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/245, 0xf5}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

189.055005ms ago: executing program 2 (id=1226):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="91f27222e2485aec56a1c0b3b8b8b5985c5a71e59abc509aa32ba2", 0x1b}, {0x0, 0x500}], 0x2}}], 0x1, 0x0)

139.030192ms ago: executing program 2 (id=1227):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

138.40246ms ago: executing program 2 (id=1228):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10)

80.299606ms ago: executing program 1 (id=1229):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)

69.452313ms ago: executing program 0 (id=1230):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

345.888µs ago: executing program 0 (id=1231):
r0 = socket(0x2, 0x80802, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x15, 0x0, &(0x7f00000001c0))

179.205µs ago: executing program 0 (id=1232):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=1233):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfd, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x240c0000}, 0x20000040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44215' (ED25519) to the list of known hosts.
syzkaller login: [   48.994736][ T5840] cgroup: Unknown subsys name 'net'
[   49.121416][ T5840] cgroup: Unknown subsys name 'cpuset'
[   49.125748][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.871939][ T5840] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.712531][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.717018][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.720413][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.723792][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.726618][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.729879][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.733482][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.736878][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.760831][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.764047][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.800416][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.803430][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.806371][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.809970][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.813068][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.955638][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   54.964343][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   55.065274][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   55.072758][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.075099][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.077495][ T5857] bridge_slave_0: entered allmulticast mode
[   55.080440][ T5857] bridge_slave_0: entered promiscuous mode
[   55.083849][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.086464][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.090156][ T5853] bridge_slave_0: entered allmulticast mode
[   55.092808][ T5853] bridge_slave_0: entered promiscuous mode
[   55.098721][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.101811][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.104207][ T5853] bridge_slave_1: entered allmulticast mode
[   55.106447][ T5853] bridge_slave_1: entered promiscuous mode
[   55.108831][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.112012][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.114580][ T5857] bridge_slave_1: entered allmulticast mode
[   55.117654][ T5857] bridge_slave_1: entered promiscuous mode
[   55.165662][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.170423][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.184366][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.188158][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.192057][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.195045][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.197549][ T5861] bridge_slave_0: entered allmulticast mode
[   55.201166][ T5861] bridge_slave_0: entered promiscuous mode
[   55.204646][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.207156][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.210218][ T5861] bridge_slave_1: entered allmulticast mode
[   55.213367][ T5861] bridge_slave_1: entered promiscuous mode
[   55.247170][ T5853] team0: Port device team_slave_0 added
[   55.250221][ T5853] team0: Port device team_slave_1 added
[   55.253583][ T5857] team0: Port device team_slave_0 added
[   55.271092][ T5857] team0: Port device team_slave_1 added
[   55.275231][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.296329][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.316263][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.319297][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.330301][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.343949][ T5861] team0: Port device team_slave_0 added
[   55.346957][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.349854][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.360278][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.365027][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.367532][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.375989][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.384263][ T5861] team0: Port device team_slave_1 added
[   55.387170][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.390568][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.401199][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.435169][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.437940][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.447822][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.464605][ T5853] hsr_slave_0: entered promiscuous mode
[   55.466917][ T5853] hsr_slave_1: entered promiscuous mode
[   55.469837][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.472206][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.481189][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.498575][ T5857] hsr_slave_0: entered promiscuous mode
[   55.501669][ T5857] hsr_slave_1: entered promiscuous mode
[   55.504355][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   55.506617][ T5857] Cannot create hsr debugfs directory
[   55.558582][ T5861] hsr_slave_0: entered promiscuous mode
[   55.561165][ T5861] hsr_slave_1: entered promiscuous mode
[   55.563530][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   55.565651][ T5861] Cannot create hsr debugfs directory
[   55.721751][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.735219][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.750456][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.755449][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.787658][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.792207][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.801626][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.806678][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.825251][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.827924][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.830816][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.833411][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.846748][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.856180][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.864598][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.870427][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.873077][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.875701][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.878376][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.883387][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.918952][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.921895][ T5861] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.924950][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.927688][ T5861] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.941068][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.944566][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.947785][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.951927][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.956382][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.960460][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.980020][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.001710][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.013498][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.021071][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.024029][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.035073][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.037474][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.049929][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   56.061824][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.064294][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.081733][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.093105][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.095978][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.120008][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   56.138309][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.141266][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.157587][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.160572][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.205953][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.234044][ T5853] veth0_vlan: entered promiscuous mode
[   56.238920][ T5853] veth1_vlan: entered promiscuous mode
[   56.274897][ T5853] veth0_macvtap: entered promiscuous mode
[   56.290665][ T5853] veth1_macvtap: entered promiscuous mode
[   56.304195][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.312781][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.325938][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.330598][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.333923][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.337263][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.354143][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.375616][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.397222][ T4668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.402492][ T4668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.423910][ T4668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.426389][ T4668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.435195][ T5861] veth0_vlan: entered promiscuous mode
[   56.441336][ T5857] veth0_vlan: entered promiscuous mode
[   56.451535][ T5857] veth1_vlan: entered promiscuous mode
[   56.454976][ T5861] veth1_vlan: entered promiscuous mode
[   56.463020][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.494853][ T5857] veth0_macvtap: entered promiscuous mode
[   56.503580][ T5857] veth1_macvtap: entered promiscuous mode
[   56.507321][ T5918] netlink: 'syz.0.1': attribute type 11 has an invalid length.
[   56.507700][ T5861] veth0_macvtap: entered promiscuous mode
[   56.516088][ T5861] veth1_macvtap: entered promiscuous mode
[   56.534251][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.542151][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.559108][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.561751][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.565310][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.568951][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.575069][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.584272][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.622040][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.627590][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.648241][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.654300][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.658276][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.664402][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.721015][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.727996][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.750688][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.753812][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.786549][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.790146][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.790164][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.791356][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'.
[   56.814488][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'.
[   56.819177][   T54] Bluetooth: hci1: command tx timeout
[   56.831397][   T54] Bluetooth: hci2: command tx timeout
[   56.833875][ T5859] Bluetooth: hci0: command tx timeout
[   56.836169][ T5931] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8'.
[   56.836342][ T5927] Zero length message leads to an empty skb
[   56.864312][ T5927] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   56.931413][ T5940] netlink: 'syz.2.10': attribute type 1 has an invalid length.
[   56.973074][ T5945] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   57.199552][ T5970] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.348181][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[   57.429703][ T5996] netlink: 452 bytes leftover after parsing attributes in process `syz.1.23'.
[   57.575898][ T6012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.29'.
[   57.600051][ T6014] vlan0: entered promiscuous mode
[   57.633783][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.735163][ T6016] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   58.041590][ T6036] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET)
[   58.050197][ T6036] syzkaller1: entered allmulticast mode
[   58.430168][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'.
[   58.472290][ T6056] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   58.494906][ T6056] Bluetooth: MGMT ver 1.23
[   58.836169][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'.
[   58.899610][   T54] Bluetooth: hci2: command tx timeout
[   58.901790][   T54] Bluetooth: hci1: command tx timeout
[   59.547187][ T6086] tipc: Started in network mode
[   59.548835][ T6086] tipc: Node identity ac14140f, cluster identity 4711
[   59.553271][ T6086] tipc: New replicast peer: 255.255.255.255
[   59.560049][ T6086] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.621228][ T6093] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   59.871250][ T6108] xt_time: invalid argument - start or stop time greater than 23:59:59
[   60.368558][ T6157] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   60.562627][   T24] tipc: Node number set to 2886997007
[   60.979807][ T5859] Bluetooth: hci1: command tx timeout
[   60.980079][   T54] Bluetooth: hci2: command tx timeout
[   61.052052][ T6216] Bluetooth: MGMT ver 1.23
[   61.100958][ T6218] netlink: 'syz.1.117': attribute type 1 has an invalid length.
[   61.380242][ T6250] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   61.407143][ T6252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   61.825737][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   61.947206][ T6315] __nla_validate_parse: 4 callbacks suppressed
[   61.947225][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'.
[   62.661676][ T6326] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   62.688118][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   62.694943][ T6329] netlink: 'syz.1.164': attribute type 30 has an invalid length.
[   62.697775][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'.
[   62.715330][ T6332] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   62.781603][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.784499][ T6332] batadv_slave_0: entered promiscuous mode
[   62.793953][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'.
[   62.800482][ T6332] netlink: 428 bytes leftover after parsing attributes in process `syz.2.165'.
[   62.809551][ T6332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'.
[   62.813816][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.171'.
[   62.817086][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'.
[   62.820584][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.171'.
[   62.822024][    C1] Illegal XDP return value 16128 on prog  (id 36) dev lo, expect packet loss!
[   62.823882][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.171'.
[   62.910229][ T6345] nbd0: detected capacity change from 0 to 549764202496
[   62.917673][   T56] block nbd0: Receive control failed (result -32)
[   62.922982][ T5854] block nbd0: Dead connection, failed to find a fallback
[   62.932422][ T5854] block nbd0: shutting down sockets
[   62.934462][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.950546][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.956511][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.959705][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.962321][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.965199][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.967832][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.971633][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.975170][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.983139][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.989179][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.992201][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.995103][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.998525][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.007393][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.010478][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.012939][ T5854] ldm_validate_partition_table(): Disk read failed.
[   63.018199][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.022139][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.026480][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.031172][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.035127][ T5854] Dev nbd0: unable to read RDB block 0
[   63.037592][ T5854]  nbd0: unable to read partition table
[   63.051304][ T5854] ldm_validate_partition_table(): Disk read failed.
[   63.053981][ T5854] Dev nbd0: unable to read RDB block 0
[   63.055964][ T5854]  nbd0: unable to read partition table
[   63.059322][   T54] Bluetooth: hci2: command tx timeout
[   63.059418][ T5859] Bluetooth: hci1: command tx timeout
[   64.340798][ T6419] openvswitch: netlink: IP tunnel dst address not specified
[   64.512817][ T6444] syzkaller1: entered promiscuous mode
[   64.514975][ T6444] syzkaller1: entered allmulticast mode
[   64.697185][ T6468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.711034][ T6468] syzkaller0: entered promiscuous mode
[   64.721419][ T6468] syzkaller0: entered allmulticast mode
[   64.778747][ T6468] tipc: Resetting bearer <eth:syzkaller0>
[   64.805073][ T6467] tipc: Resetting bearer <eth:syzkaller0>
[   64.808910][ T6467] tipc: Disabling bearer <eth:syzkaller0>
[   64.818619][ T6484] netlink: 'syz.1.234': attribute type 3 has an invalid length.
[   65.065722][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.070456][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.139207][ T5859] Bluetooth: hci2: command tx timeout
[   65.822995][ T6541] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   65.828205][ T6541] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   65.983585][ T6553] vlan0: entered promiscuous mode
[   65.991832][ T6553] lo speed is unknown, defaulting to 1000
[   65.994788][ T6553] lo speed is unknown, defaulting to 1000
[   65.997683][ T6553] lo speed is unknown, defaulting to 1000
[   66.068216][ T6553] infiniband syz0: set active
[   66.069932][    T9] lo speed is unknown, defaulting to 1000
[   66.071894][ T6553] infiniband syz0: added lo
[   66.089883][ T6553] RDS/IB: syz0: added
[   66.091202][ T6553] smc: adding ib device syz0 with port count 1
[   66.093459][ T6553] smc:    ib device syz0 port 1 has pnetid 
[   66.095715][    T9] lo speed is unknown, defaulting to 1000
[   66.098303][ T6553] lo speed is unknown, defaulting to 1000
[   66.153449][ T6553] lo speed is unknown, defaulting to 1000
[   66.205498][ T6553] lo speed is unknown, defaulting to 1000
[   66.953421][ T6609] netlink: 'syz.2.289': attribute type 1 has an invalid length.
[   67.426533][ T6660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.511715][ T6671] netlink: 'syz.1.316': attribute type 9 has an invalid length.
[   67.514804][ T6671] __nla_validate_parse: 17 callbacks suppressed
[   67.514818][ T6671] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.316'.
[   67.798069][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'.
[   67.834490][ T6700] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   67.838566][ T6700] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   67.884427][ T6702] netlink: 'syz.1.327': attribute type 1 has an invalid length.
[   67.902693][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.172104][ T6728] netlink: 'syz.1.333': attribute type 13 has an invalid length.
[   68.175343][ T6728] netlink: 'syz.1.333': attribute type 17 has an invalid length.
[   68.267534][ T6728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.277139][ T6734] tipc: MTU too low for tipc bearer
[   68.304093][ T6715] lo speed is unknown, defaulting to 1000
[   68.322763][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.571091][ T6761] lo speed is unknown, defaulting to 1000
[   68.920233][ T6769] netlink: 'syz.2.347': attribute type 13 has an invalid length.
[   69.245755][ T6786] netlink: 71 bytes leftover after parsing attributes in process `syz.2.356'.
[   69.257274][ T6788] netlink: 516 bytes leftover after parsing attributes in process `syz.1.355'.
[   69.308953][ T6794] netlink: 92 bytes leftover after parsing attributes in process `syz.1.359'.
[   69.314027][ T6794] netem: unknown loss type 0
[   69.315664][ T6794] netem: change failed
[   69.438827][ T6809] netlink: 240 bytes leftover after parsing attributes in process `syz.2.357'.
[   69.786820][ T6835] netlink: 'syz.0.378': attribute type 1 has an invalid length.
[   69.808761][ T6835] bond2: entered promiscuous mode
[   69.811295][ T6835] bond2: entered allmulticast mode
[   69.813770][ T6835] 8021q: adding VLAN 0 to HW filter on device bond2
[   69.833087][ T6835] bridge2: entered promiscuous mode
[   69.838452][ T6835] bridge2: entered allmulticast mode
[   69.844163][ T6835] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[   69.852328][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'.
[   69.887374][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.891233][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.910749][ T5882] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   69.945265][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.952874][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.021447][ T5882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.025001][ T5882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.028426][ T5882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.032037][ T5256] lo speed is unknown, defaulting to 1000
[   70.034746][ T5256] syz0: Port: 1 Link DOWN
[   70.042619][ T5256] lo speed is unknown, defaulting to 1000
[   70.044953][ T5882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.222680][ T6858] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   70.283568][ T6864] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[   70.330517][ T6870] netlink: 'syz.2.393': attribute type 5 has an invalid length.
[   70.341024][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[   70.504503][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'.
[   70.505086][ T6893] netlink: 'syz.0.403': attribute type 29 has an invalid length.
[   70.515109][ T6892] bond0: entered promiscuous mode
[   70.517313][ T6892] bond_slave_0: entered promiscuous mode
[   70.521104][ T6892] bond_slave_1: entered promiscuous mode
[   70.524553][ T6892] bond0: left promiscuous mode
[   70.526475][ T6892] bond_slave_0: left promiscuous mode
[   70.529467][ T6892] bond_slave_1: left promiscuous mode
[   70.564928][ T6897] bridge_slave_0: left allmulticast mode
[   70.567309][ T6897] bridge_slave_0: left promiscuous mode
[   70.571323][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.575374][ T6897] bridge_slave_1: left allmulticast mode
[   70.577637][ T6897] bridge_slave_1: left promiscuous mode
[   70.580748][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.585527][ T6897] bond0: (slave bond_slave_0): Releasing backup interface
[   70.592741][ T6897] bond0: (slave bond_slave_1): Releasing backup interface
[   70.605075][ T6897] team0: Port device team_slave_0 removed
[   70.608508][ T6897] team0: Port device team_slave_1 removed
[   70.611898][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.624115][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.640812][ T6897] bond2: (slave bridge2): Removing an active aggregator
[   70.644821][ T6897] bond2: (slave bridge2): Releasing backup interface
[   70.649572][ T6897] bridge2: left promiscuous mode
[   70.654147][ T6897] bridge2: left allmulticast mode
[   70.664006][ T6902] xt_socket: unknown flags 0xd0
[   71.150808][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.761487][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.432'.
[   71.863199][ T6968] netlink: 'syz.1.438': attribute type 8 has an invalid length.
[   71.972926][ T6980] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   71.976807][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.694588][ T7030] __nla_validate_parse: 5 callbacks suppressed
[   72.694600][ T7030] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.467'.
[   72.868731][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'.
[   73.437199][ T7069] netlink: 'syz.0.486': attribute type 6 has an invalid length.
[   73.442409][ T7072] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.487'.
[   74.176372][ T7093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.247479][ T7097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.498'.
[   74.516503][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.562961][ T7123] netlink: 'syz.0.511': attribute type 4 has an invalid length.
[   74.721641][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'.
[   74.835371][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'.
[   74.962688][ T7159] sctp: [Deprecated]: syz.2.526 (pid 7159) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.962688][ T7159] Use struct sctp_sack_info instead
[   75.465124][ T7196] netlink: 'syz.2.544': attribute type 12 has an invalid length.
[   75.468632][ T7196] netlink: 'syz.2.544': attribute type 18 has an invalid length.
[   75.472524][ T7196] netlink: 'syz.2.544': attribute type 21 has an invalid length.
[   75.475524][ T7196] netlink: 'syz.2.544': attribute type 26 has an invalid length.
[   76.313018][ T7240] netlink: 'syz.1.563': attribute type 1 has an invalid length.
[   76.315462][ T7240] netlink: 140 bytes leftover after parsing attributes in process `syz.1.563'.
[   76.318586][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.324082][ T7240] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.456038][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[   76.466939][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'.
[   76.474709][ T7248] netlink: 'syz.1.564': attribute type 7 has an invalid length.
[   76.652270][ T7259] pim6reg1: entered promiscuous mode
[   76.654252][ T7259] pim6reg1: entered allmulticast mode
[   76.907816][ T7283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.575'.
[   76.921591][ T7283] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   76.925459][ T7283] gretap1: entered promiscuous mode
[   76.929765][ T7283] gretap1: entered allmulticast mode
[   77.302138][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   77.874433][ T7375] syzkaller0: entered promiscuous mode
[   77.876854][ T7375] syzkaller0: entered allmulticast mode
[   78.370950][   T55] block nbd1: Receive control failed (result -32)
[   78.466955][ T7417] netlink: 'syz.0.631': attribute type 8 has an invalid length.
[   78.562619][ T7430] pim6reg: entered allmulticast mode
[   78.566014][ T7430] pim6reg: left allmulticast mode
[   78.676400][ T7446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.680559][ T7446] syzkaller0: entered promiscuous mode
[   78.682411][ T7446] syzkaller0: entered allmulticast mode
[   78.693909][ T7446] tipc: Resetting bearer <eth:syzkaller0>
[   78.712024][ T7444] tipc: Resetting bearer <eth:syzkaller0>
[   78.719760][ T7444] tipc: Disabling bearer <eth:syzkaller0>
[   78.913309][ T7468] __nla_validate_parse: 3 callbacks suppressed
[   78.913320][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'.
[   78.932499][ T7468] bridge3: port 1(veth5) entered blocking state
[   78.934782][ T7468] bridge3: port 1(veth5) entered disabled state
[   78.937270][ T7468] veth5: entered allmulticast mode
[   78.940088][ T7468] veth5: entered promiscuous mode
[   78.957119][ T7468] bridge3: port 2(veth0_to_bond) entered blocking state
[   78.961032][ T7468] bridge3: port 2(veth0_to_bond) entered disabled state
[   78.963453][ T7468] veth0_to_bond: entered allmulticast mode
[   78.966969][ T7468] veth0_to_bond: entered promiscuous mode
[   78.982763][ T7468] vlan2: entered allmulticast mode
[   78.984641][ T7468] veth0_to_hsr: entered allmulticast mode
[   78.986985][ T7468] bridge3: port 3(vlan2) entered blocking state
[   78.989594][ T7468] bridge3: port 3(vlan2) entered disabled state
[   78.992588][ T7468] vlan2: entered promiscuous mode
[   78.994661][ T7468] veth0_to_hsr: entered promiscuous mode
[   79.036119][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'.
[   79.161246][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'.
[   79.354811][ T7507] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.674'.
[   79.423339][ T7513] netlink: 56 bytes leftover after parsing attributes in process `syz.2.677'.
[   79.524176][ T7523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.682'.
[   79.560734][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'.
[   79.798053][ T7538] netlink: 'syz.0.688': attribute type 1 has an invalid length.
[   79.801286][ T7538] netlink: 224 bytes leftover after parsing attributes in process `syz.0.688'.
[   80.656571][ T7564] netlink: 34 bytes leftover after parsing attributes in process `syz.2.700'.
[   80.806424][ T7576] netlink: 'syz.0.704': attribute type 1 has an invalid length.
[   80.813658][ T7579] netlink: 'syz.1.706': attribute type 10 has an invalid length.
[   80.833818][ T7579] team0: Cannot enslave team device to itself
[   80.842802][ T7576] bond3: (slave gretap1): making interface the new active one
[   80.846311][ T7576] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   80.858571][ T7576] syz.0.704 (7576) used greatest stack depth: 20040 bytes left
[   80.956548][ T7588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.710'.
[   81.055271][ T7595] netlink: 'syz.0.713': attribute type 1 has an invalid length.
[   81.390271][   T47] cfg80211: failed to load regulatory.db
[   81.450251][ T7621] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[   81.524387][ T7625] lo speed is unknown, defaulting to 1000
[   81.750508][ T7636] syzkaller0: entered promiscuous mode
[   81.752652][ T7636] syzkaller0: entered allmulticast mode
[   81.863633][ T5904] IPVS: starting estimator thread 0...
[   81.945506][ T7653] lo speed is unknown, defaulting to 1000
[   81.959313][ T7643] IPVS: using max 92 ests per chain, 220800 per kthread
[   81.988691][ T5919] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   83.004308][ T7688] atomic_op ffff88802e37f998 conn xmit_atomic 0000000000000000
[   83.107624][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.110134][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.263945][ T7686] batadv_slave_0: left promiscuous mode
[   83.277102][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.342393][ T7686] vlan0: left promiscuous mode
[   83.391839][ T7705] vlan2: entered promiscuous mode
[   83.398704][ T7705] vlan2: entered allmulticast mode
[   83.400903][ T7705] hsr_slave_1: entered allmulticast mode
[   83.464079][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.474073][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.477206][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.481527][ T7714] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   83.484316][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.841367][ T7758] warning: `syz.0.785' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.133251][ T7802] netlink: zone id is out of range
[   84.135903][ T7802] netlink: zone id is out of range
[   84.156372][ T7802] netlink: set zone limit has 4 unknown bytes
[   84.177236][ T7802] netlink: del zone limit has 4 unknown bytes
[   84.287992][ T7814] lo speed is unknown, defaulting to 1000
[   84.818932][ T7829] __nla_validate_parse: 10 callbacks suppressed
[   84.818949][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[   85.334392][ T7862] bridge: RTM_NEWNEIGH with invalid ether address
[   85.390290][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'.
[   85.747462][ T7874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.751113][ T7874] syzkaller0: entered promiscuous mode
[   85.753323][ T7874] syzkaller0: entered allmulticast mode
[   85.770581][ T7874] tipc: Resetting bearer <eth:syzkaller0>
[   85.774528][ T7873] tipc: Resetting bearer <eth:syzkaller0>
[   85.778812][ T7873] tipc: Disabling bearer <eth:syzkaller0>
[   86.139621][ T5884] IPVS: starting estimator thread 0...
[   86.141291][ T7904] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   86.201441][ T7911] netlink: 96 bytes leftover after parsing attributes in process `syz.1.844'.
[   86.229779][ T7909] IPVS: using max 60 ests per chain, 144000 per kthread
[   86.231456][ T7913] netlink: 248 bytes leftover after parsing attributes in process `syz.0.845'.
[   86.318531][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'.
[   86.343781][ T7927] netlink: 676 bytes leftover after parsing attributes in process `syz.0.850'.
[   86.347205][ T7927] netlink: 676 bytes leftover after parsing attributes in process `syz.0.850'.
[   86.419976][ T7936] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   86.424917][ T7936] netlink: 14 bytes leftover after parsing attributes in process `syz.1.853'.
[   86.439818][ T7936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.446469][ T7936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.453919][ T7936] bond0 (unregistering): Released all slaves
[   86.488389][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.855'.
[   86.683129][ T7961] syzkaller0: entered promiscuous mode
[   86.685315][ T7961] syzkaller0: entered allmulticast mode
[   86.973919][ T7977] bridge_slave_0: left allmulticast mode
[   86.976255][ T7977] bridge_slave_0: left promiscuous mode
[   86.978783][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.984555][ T7977] bridge_slave_1: left promiscuous mode
[   86.986839][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.996074][ T7977] team0: Port device team_slave_0 removed
[   87.001303][ T7977] team0: Port device team_slave_1 removed
[   87.005119][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.008028][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.012777][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.015789][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.023234][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'.
[   87.628657][ T7967] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   88.052624][ T8017] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[   88.537276][ T8043] sch_fq: defrate 0 ignored.
[   88.684632][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.806837][ T8069] netlink: 'syz.0.910': attribute type 10 has an invalid length.
[   88.812087][ T8069] bond0: (slave wlan1): Opening slave failed
[   89.096198][   T33] audit: type=1804 audit(1756156010.905:2): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.920" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1728 res=1 errno=0
[   89.105208][   T33] audit: type=1800 audit(1756156010.905:3): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name="cgroup.controllers" dev="tmpfs" ino=1728 res=0 errno=0
[   89.244362][ T8099] netlink: 'syz.2.924': attribute type 3 has an invalid length.
[   89.800134][ T8145] openvswitch: netlink: IP tunnel TTL not specified.
[   89.877980][ T8155] __nla_validate_parse: 2 callbacks suppressed
[   89.877992][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'.
[   89.882917][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'.
[   90.064447][ T8175] netlink: 'syz.0.957': attribute type 1 has an invalid length.
[   90.067574][ T8175] netlink: 'syz.0.957': attribute type 1 has an invalid length.
[   90.201760][ T8191] lo speed is unknown, defaulting to 1000
[   90.202947][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'.
[   90.283788][ T8192] ieee802154 phy1 wpan1: encryption failed: -22
[   90.388878][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'.
[   90.592013][ T8221] netlink: 'syz.1.978': attribute type 6 has an invalid length.
[   90.596003][ T8221] netlink: 'syz.1.978': attribute type 6 has an invalid length.
[   90.614217][ T8216] lo speed is unknown, defaulting to 1000
[   90.823129][ T8241] netlink: 'syz.1.987': attribute type 1 has an invalid length.
[   90.936276][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'.
[   90.980739][ T8248] veth7: entered allmulticast mode
[   91.077222][ T8256] netlink: 'syz.2.994': attribute type 13 has an invalid length.
[   91.352771][ T8277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.379840][ T8277] syzkaller0: entered promiscuous mode
[   91.382083][ T8277] syzkaller0: entered allmulticast mode
[   91.386094][ T8277] tipc: Resetting bearer <eth:syzkaller0>
[   91.399737][ T8276] tipc: Resetting bearer <eth:syzkaller0>
[   91.454275][ T8276] tipc: Disabling bearer <eth:syzkaller0>
[   91.488615][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'.
[   91.492149][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'.
[   91.495777][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'.
[   91.951655][ T8329] block nbd2: server does not support multiple connections per device.
[   91.956838][ T8329] block nbd2: shutting down sockets
[   92.137705][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'.
[   92.148213][ T8347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1037'.
[   93.209630][ T8421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.212736][ T8421] syzkaller0: entered promiscuous mode
[   93.214959][ T8421] syzkaller0: entered allmulticast mode
[   93.226222][ T8421] tipc: Resetting bearer <eth:syzkaller0>
[   93.230757][ T8420] tipc: Resetting bearer <eth:syzkaller0>
[   93.235506][ T8420] tipc: Disabling bearer <eth:syzkaller0>
[   93.337089][ T8435] nbd: nbd0 already in use
[   93.339857][ T8435] block nbd0: NBD_DISCONNECT
[   93.341581][ T8435] block nbd0: Send disconnect failed -32
[   93.445200][ T8447] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   93.753096][ T8481] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.757172][ T8481] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.796007][ T8485] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.855022][ T8491] trusted_key: syz.2.1102 sent an empty control message without MSG_MORE.
[   93.875414][ T8489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.302421][ T8505] netlink: 'syz.1.1111': attribute type 3 has an invalid length.
[   94.526269][ T8530] vlan2: entered allmulticast mode
[   94.528138][ T8530] bridge_slave_0: entered allmulticast mode
[   94.861810][ T8575] lo: Caught tx_queue_len zero misconfig
[   94.884928][ T8576] delete_channel: no stack
[   94.937038][ T8586] __nla_validate_parse: 3 callbacks suppressed
[   94.937078][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'.
[   94.944607][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'.
[   94.949653][ T8586] netlink: 'syz.2.1145': attribute type 11 has an invalid length.
[   95.112327][ T8605] veth1_macvtap: left promiscuous mode
[   95.114499][ T8605] macsec0: entered allmulticast mode
[   95.126562][ T8605] veth1_macvtap: entered promiscuous mode
[   95.128321][ T8605] veth1_macvtap: entered allmulticast mode
[   95.132106][ T8605] macsec0: left allmulticast mode
[   95.134108][ T8605] veth1_macvtap: left allmulticast mode
[   95.223997][ T8613] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1156'.
[   95.550059][ T8641] raw_sendmsg: syz.1.1168 forgot to set AF_INET. Fix it!
[   95.704422][ T8653] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1174'.
[   95.707971][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'.
[   95.858317][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1183'.
[   95.864746][ T8670] geneve2: entered promiscuous mode
[   95.944887][ T8678] tipc: Started in network mode
[   95.946841][ T8678] tipc: Node identity d64f5b0a42c, cluster identity 4711
[   95.950565][ T8678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.954303][ T8678] syzkaller0: entered promiscuous mode
[   95.956634][ T8678] syzkaller0: entered allmulticast mode
[   95.963491][ T8678] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   95.975673][ T8678] tipc: Resetting bearer <eth:syzkaller0>
[   95.985541][ T8677] tipc: Resetting bearer <eth:syzkaller0>
[   95.989548][ T8677] tipc: Disabling bearer <eth:syzkaller0>
[   96.100953][ T8681] infiniband syz2: set down
[   96.102857][ T8681] infiniband syz2: added batadv_slave_1
[   96.123008][ T8681] RDS/IB: syz2: added
[   96.124673][ T8681] smc: adding ib device syz2 with port count 1
[   96.142213][ T8681] smc:    ib device syz2 port 1 has pnetid 
[   96.627348][ T8728] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[   96.632272][ T8728] netlink: 'syz.1.1209': attribute type 3 has an invalid length.
[   96.635421][ T8728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1209'.
[   96.647031][ T8730] netlink: 'syz.0.1210': attribute type 3 has an invalid length.
[   96.777110][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1218'.
[   96.784060][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'.
[   97.131118][ T8780] ==================================================================
[   97.133789][ T8780] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[   97.136682][ T8780] Write of size 8 at addr ffff8881258e04b0 by task syz.0.1233/8780
[   97.140656][ T8780] 
[   97.141626][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.0.1233 Not tainted syzkaller #0 PREEMPT(full) 
[   97.141644][ T8780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.141654][ T8780] Call Trace:
[   97.141675][ T8780]  <TASK>
[   97.141690][ T8780]  dump_stack_lvl+0x189/0x250
[   97.141714][ T8780]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.141730][ T8780]  ? lock_release+0x4b/0x3e0
[   97.141752][ T8780]  ? __virt_addr_valid+0x4a5/0x5c0
[   97.141772][ T8780]  print_report+0xca/0x240
[   97.141785][ T8780]  ? __xfrm_state_delete+0x696/0xca0
[   97.141798][ T8780]  kasan_report+0x118/0x150
[   97.141818][ T8780]  ? __xfrm_state_delete+0x696/0xca0
[   97.141833][ T8780]  __xfrm_state_delete+0x696/0xca0
[   97.141850][ T8780]  xfrm_state_flush+0x45f/0x770
[   97.141867][ T8780]  xfrm_flush_sa+0xea/0x2a0
[   97.141920][ T8780]  ? __pfx_xfrm_flush_sa+0x10/0x10
[   97.141939][ T8780]  ? apparmor_capable+0x137/0x1b0
[   97.141957][ T8780]  ? __nla_parse+0x40/0x60
[   97.141979][ T8780]  xfrm_user_rcv_msg+0x7a3/0xab0
[   97.141998][ T8780]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   97.142027][ T8780]  ? __pfx___mutex_trylock_common+0x10/0x10
[   97.142041][ T8780]  ? kasan_save_track+0x4f/0x80
[   97.142057][ T8780]  ? rcu_is_watching+0x15/0xb0
[   97.142071][ T8780]  ? trace_contention_end+0x39/0x120
[   97.142084][ T8780]  ? __mutex_lock+0x335/0x1350
[   97.142099][ T8780]  netlink_rcv_skb+0x208/0x470
[   97.142120][ T8780]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   97.142136][ T8780]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   97.142158][ T8780]  ? lock_release+0x4b/0x3e0
[   97.142175][ T8780]  ? net_generic+0x1e/0x240
[   97.142189][ T8780]  ? net_generic+0x1e/0x240
[   97.142204][ T8780]  ? netlink_deliver_tap+0x2e/0x1b0
[   97.142224][ T8780]  xfrm_netlink_rcv+0x79/0x90
[   97.142239][ T8780]  netlink_unicast+0x82f/0x9e0
[   97.142260][ T8780]  ? __pfx_netlink_unicast+0x10/0x10
[   97.142276][ T8780]  ? netlink_sendmsg+0x642/0xb30
[   97.142294][ T8780]  ? skb_put+0x11b/0x210
[   97.142307][ T8780]  netlink_sendmsg+0x805/0xb30
[   97.142329][ T8780]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.142348][ T8780]  ? aa_sock_msg_perm+0xf1/0x1d0
[   97.142360][ T8780]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   97.142375][ T8780]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.142394][ T8780]  __sock_sendmsg+0x21c/0x270
[   97.142411][ T8780]  ____sys_sendmsg+0x505/0x830
[   97.142424][ T8780]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.142440][ T8780]  ? import_iovec+0x74/0xa0
[   97.142456][ T8780]  ___sys_sendmsg+0x21f/0x2a0
[   97.142470][ T8780]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.142486][ T8780]  ? futex_wake+0x4b2/0x560
[   97.142509][ T8780]  ? __fget_files+0x2a/0x420
[   97.142519][ T8780]  ? __fget_files+0x3a0/0x420
[   97.142531][ T8780]  __x64_sys_sendmsg+0x19b/0x260
[   97.142552][ T8780]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   97.142569][ T8780]  ? rcu_is_watching+0x15/0xb0
[   97.142586][ T8780]  ? rcu_is_watching+0x15/0xb0
[   97.142599][ T8780]  do_syscall_64+0xfa/0x3b0
[   97.142613][ T8780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.142627][ T8780]  ? exc_page_fault+0x9f/0xf0
[   97.142645][ T8780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.142658][ T8780] RIP: 0033:0x7febd158ebe9
[   97.142672][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.142685][ T8780] RSP: 002b:00007febd24c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.142702][ T8780] RAX: ffffffffffffffda RBX: 00007febd17b5fa0 RCX: 00007febd158ebe9
[   97.142713][ T8780] RDX: 0000000020000040 RSI: 0000200000000340 RDI: 0000000000000003
[   97.142722][ T8780] RBP: 00007febd1611e19 R08: 0000000000000000 R09: 0000000000000000
[   97.142732][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.142740][ T8780] R13: 00007febd17b6038 R14: 00007febd17b5fa0 R15: 00007ffe4338ab08
[   97.142755][ T8780]  </TASK>
[   97.142761][ T8780] 
[   97.272093][ T8780] Allocated by task 6042:
[   97.273802][ T8780]  kasan_save_track+0x3e/0x80
[   97.275591][ T8780]  __kasan_slab_alloc+0x6c/0x80
[   97.277505][ T8780]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   97.279533][ T8780]  xfrm_state_alloc+0x24/0x2f0
[   97.281244][ T8780]  __find_acq_core+0x8a7/0x1c00
[   97.282993][ T8780]  xfrm_find_acq+0x78/0xa0
[   97.284476][ T8780]  xfrm_alloc_userspi+0x6b3/0xc90
[   97.286396][ T8780]  xfrm_user_rcv_msg+0x7a3/0xab0
[   97.288342][ T8780]  netlink_rcv_skb+0x208/0x470
[   97.290084][ T8780]  xfrm_netlink_rcv+0x79/0x90
[   97.291769][ T8780]  netlink_unicast+0x82f/0x9e0
[   97.293446][ T8780]  netlink_sendmsg+0x805/0xb30
[   97.295176][ T8780]  __sock_sendmsg+0x21c/0x270
[   97.296839][ T8780]  ____sys_sendmsg+0x505/0x830
[   97.298556][ T8780]  ___sys_sendmsg+0x21f/0x2a0
[   97.300375][ T8780]  __x64_sys_sendmsg+0x19b/0x260
[   97.302009][ T8780]  do_syscall_64+0xfa/0x3b0
[   97.303534][ T8780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.305519][ T8780] 
[   97.306337][ T8780] Freed by task 5904:
[   97.307736][ T8780]  kasan_save_track+0x3e/0x80
[   97.309215][ T8780]  kasan_save_free_info+0x46/0x50
[   97.310951][ T8780]  __kasan_slab_free+0x5b/0x80
[   97.312610][ T8780]  kmem_cache_free+0x18f/0x400
[   97.314151][ T8780]  xfrm_state_gc_task+0x52d/0x6b0
[   97.315932][ T8780]  process_scheduled_works+0xae1/0x17b0
[   97.317961][ T8780]  worker_thread+0x8a0/0xda0
[   97.319470][ T8780]  kthread+0x711/0x8a0
[   97.320852][ T8780]  ret_from_fork+0x3fc/0x770
[   97.322414][ T8780]  ret_from_fork_asm+0x1a/0x30
[   97.324297][ T8780] 
[   97.325275][ T8780] The buggy address belongs to the object at ffff8881258e0480
[   97.325275][ T8780]  which belongs to the cache xfrm_state of size 928
[   97.330298][ T8780] The buggy address is located 48 bytes inside of
[   97.330298][ T8780]  freed 928-byte region [ffff8881258e0480, ffff8881258e0820)
[   97.334674][ T8780] 
[   97.335507][ T8780] The buggy address belongs to the physical page:
[   97.337600][ T8780] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881258e0480 pfn:0x1258e0
[   97.340825][ T8780] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   97.343739][ T8780] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   97.346224][ T8780] page_type: f5(slab)
[   97.347684][ T8780] raw: 057ff00000000040 ffff888104f26640 dead000000000122 0000000000000000
[   97.350584][ T8780] raw: ffff8881258e0480 00000000800e000c 00000000f5000000 0000000000000000
[   97.353339][ T8780] head: 057ff00000000040 ffff888104f26640 dead000000000122 0000000000000000
[   97.356522][ T8780] head: ffff8881258e0480 00000000800e000c 00000000f5000000 0000000000000000
[   97.359606][ T8780] head: 057ff00000000002 ffffea0004963801 00000000ffffffff 00000000ffffffff
[   97.362748][ T8780] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   97.365683][ T8780] page dumped because: kasan: bad access detected
[   97.367669][ T8780] page_owner tracks the page as allocated
[   97.369511][ T8780] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5933, tgid 5932 (syz.1.2), ts 56867835700, free_ts 56860304631
[   97.375293][ T8780]  post_alloc_hook+0x240/0x2a0
[   97.376965][ T8780]  get_page_from_freelist+0x21e4/0x22c0
[   97.379136][ T8780]  __alloc_frozen_pages_noprof+0x181/0x370
[   97.381052][ T8780]  alloc_pages_mpol+0x232/0x4a0
[   97.382846][ T8780]  allocate_slab+0x8a/0x370
[   97.384402][ T8780]  ___slab_alloc+0xbeb/0x1410
[   97.386095][ T8780]  kmem_cache_alloc_noprof+0x283/0x3c0
[   97.387966][ T8780]  xfrm_state_alloc+0x24/0x2f0
[   97.389665][ T8780]  pfkey_add+0x6e4/0x2e00
[   97.391131][ T8780]  pfkey_sendmsg+0xbfe/0x1090
[   97.392800][ T8780]  __sock_sendmsg+0x21c/0x270
[   97.394364][ T8780]  ____sys_sendmsg+0x505/0x830
[   97.396063][ T8780]  ___sys_sendmsg+0x21f/0x2a0
[   97.397722][ T8780]  __x64_sys_sendmsg+0x19b/0x260
[   97.399552][ T8780]  do_syscall_64+0xfa/0x3b0
[   97.400991][ T8780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.402853][ T8780] page last free pid 5838 tgid 5838 stack trace:
[   97.404944][ T8780]  __free_frozen_pages+0xbc4/0xd30
[   97.406803][ T8780]  __put_partials+0x156/0x1a0
[   97.408704][ T8780]  put_cpu_partial+0x17c/0x250
[   97.410618][ T8780]  __slab_free+0x2d5/0x3c0
[   97.412390][ T8780]  qlist_free_all+0x97/0x140
[   97.414236][ T8780]  kasan_quarantine_reduce+0x148/0x160
[   97.416359][ T8780]  __kasan_slab_alloc+0x22/0x80
[   97.418288][ T8780]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   97.420616][ T8780]  __alloc_skb+0x112/0x2d0
[   97.422370][ T8780]  tcp_stream_alloc_skb+0x3d/0x340
[   97.424430][ T8780]  tcp_sendmsg_locked+0xf38/0x5620
[   97.426454][ T8780]  tcp_sendmsg+0x2f/0x50
[   97.428160][ T8780]  __sock_sendmsg+0x19c/0x270
[   97.430054][ T8780]  sock_write_iter+0x258/0x330
[   97.431975][ T8780]  vfs_write+0x5c9/0xb30
[   97.433638][ T8780]  ksys_write+0x145/0x250
[   97.435371][ T8780] 
[   97.436368][ T8780] Memory state around the buggy address:
[   97.438580][ T8780]  ffff8881258e0380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[   97.441722][ T8780]  ffff8881258e0400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   97.444829][ T8780] >ffff8881258e0480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   97.447951][ T8780]                                      ^
[   97.450161][ T8780]  ffff8881258e0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   97.453444][ T8780]  ffff8881258e0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   97.456601][ T8780] ==================================================================
[   97.459947][ T8780] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   97.462625][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.0.1233 Not tainted syzkaller #0 PREEMPT(full) 
[   97.466004][ T8780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.469928][ T8780] Call Trace:
[   97.471137][ T8780]  <TASK>
[   97.472301][ T8780]  dump_stack_lvl+0x99/0x250
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   97.474331][ T8780]  ? __asan_memcpy+0x40/0x70
[   97.476374][ T8780]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.478359][ T8780]  ? __pfx__printk+0x10/0x10
[   97.480241][ T8780]  vpanic+0x281/0x750
[   97.481848][ T8780]  ? __pfx_vpanic+0x10/0x10
[   97.483705][ T8780]  ? rcu_is_watching+0x15/0xb0
[   97.485560][ T8780]  panic+0xb9/0xc0
[   97.487080][ T8780]  ? __pfx_panic+0x10/0x10
[   97.488846][ T8780]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   97.491224][ T8780]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   97.493566][ T8780]  ? __xfrm_state_delete+0x696/0xca0
[   97.495639][ T8780]  check_panic_on_warn+0x89/0xb0
[   97.497601][ T8780]  ? __xfrm_state_delete+0x696/0xca0
[   97.499696][ T8780]  end_report+0x78/0x160
[   97.501473][ T8780]  kasan_report+0x129/0x150
[   97.503284][ T8780]  ? __xfrm_state_delete+0x696/0xca0
[   97.505428][ T8780]  __xfrm_state_delete+0x696/0xca0
[   97.507504][ T8780]  xfrm_state_flush+0x45f/0x770
[   97.509488][ T8780]  xfrm_flush_sa+0xea/0x2a0
[   97.511301][ T8780]  ? __pfx_xfrm_flush_sa+0x10/0x10
[   97.513205][ T8780]  ? apparmor_capable+0x137/0x1b0
[   97.515064][ T8780]  ? __nla_parse+0x40/0x60
[   97.516773][ T8780]  xfrm_user_rcv_msg+0x7a3/0xab0
[   97.518655][ T8780]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   97.520413][ T8780]  ? __pfx___mutex_trylock_common+0x10/0x10
[   97.522602][ T8780]  ? kasan_save_track+0x4f/0x80
[   97.524316][ T8780]  ? rcu_is_watching+0x15/0xb0
[   97.525892][ T8780]  ? trace_contention_end+0x39/0x120
[   97.527785][ T8780]  ? __mutex_lock+0x335/0x1350
[   97.529610][ T8780]  netlink_rcv_skb+0x208/0x470
[   97.531365][ T8780]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   97.533347][ T8780]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   97.535329][ T8780]  ? lock_release+0x4b/0x3e0
[   97.537158][ T8780]  ? net_generic+0x1e/0x240
[   97.538935][ T8780]  ? net_generic+0x1e/0x240
[   97.540541][ T8780]  ? netlink_deliver_tap+0x2e/0x1b0
[   97.542318][ T8780]  xfrm_netlink_rcv+0x79/0x90
[   97.544099][ T8780]  netlink_unicast+0x82f/0x9e0
[   97.545994][ T8780]  ? __pfx_netlink_unicast+0x10/0x10
[   97.548121][ T8780]  ? netlink_sendmsg+0x642/0xb30
[   97.550146][ T8780]  ? skb_put+0x11b/0x210
[   97.551854][ T8780]  netlink_sendmsg+0x805/0xb30
[   97.553783][ T8780]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.555920][ T8780]  ? aa_sock_msg_perm+0xf1/0x1d0
[   97.557831][ T8780]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   97.559901][ T8780]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.561970][ T8780]  __sock_sendmsg+0x21c/0x270
[   97.563795][ T8780]  ____sys_sendmsg+0x505/0x830
[   97.565662][ T8780]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.567700][ T8780]  ? import_iovec+0x74/0xa0
[   97.569258][ T8780]  ___sys_sendmsg+0x21f/0x2a0
[   97.571109][ T8780]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.573216][ T8780]  ? futex_wake+0x4b2/0x560
[   97.574696][ T8780]  ? __fget_files+0x2a/0x420
[   97.576200][ T8780]  ? __fget_files+0x3a0/0x420
[   97.577687][ T8780]  __x64_sys_sendmsg+0x19b/0x260
[   97.579290][ T8780]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   97.581042][ T8780]  ? rcu_is_watching+0x15/0xb0
[   97.582797][ T8780]  ? rcu_is_watching+0x15/0xb0
[   97.584435][ T8780]  do_syscall_64+0xfa/0x3b0
[   97.586274][ T8780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.588712][ T8780]  ? exc_page_fault+0x9f/0xf0
[   97.590525][ T8780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.592510][ T8780] RIP: 0033:0x7febd158ebe9
[   97.594252][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.601038][ T8780] RSP: 002b:00007febd24c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.603973][ T8780] RAX: ffffffffffffffda RBX: 00007febd17b5fa0 RCX: 00007febd158ebe9
[   97.606513][ T8780] RDX: 0000000020000040 RSI: 0000200000000340 RDI: 0000000000000003
[   97.609363][ T8780] RBP: 00007febd1611e19 R08: 0000000000000000 R09: 0000000000000000
[   97.612553][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.615646][ T8780] R13: 00007febd17b6038 R14: 00007febd17b5fa0 R15: 00007ffe4338ab08
[   97.618807][ T8780]  </TASK>
[   97.620660][ T8780] Kernel Offset: disabled
[   97.622408][ T8780] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:06:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f1c RDI=0000000000000f1d RBP=00000000000003f8 RSP=ffffc9000315ea90
R8 =ffff88801f4f0237 R9 =1ffff11003e9e046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afd8ef R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007febd24c66c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000340 CR3=000000010317a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007febd1787498 00007febd1787470 XMM03=00007febd17874a8 00007febd17874a0
XMM04=00007febd22ed100 00007febd1787460 XMM05=00007febd1787478 00007febd17874c0
XMM06=00007febd17874b8 00007febd17874b0 XMM07=00007febd17874a8 00007febd17874a0
XMM08=0000000000000000 00007febd1612ee7 XMM09=0000000000000000 00007febd1612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc900001b7501 RCX=ffffc900001b78c8 RDX=ffffffff90408c01
RSI=ffffffff8172c195 RDI=ffffffff8e139ee0 RBP=dffffc0000000000 RSP=ffffc900001b7438
R8 =ffffc900001b7587 R9 =0000000000000000 R10=ffffc900001b7578 R11=fffff52000036eb1
R12=ffffc900001b78c0 R13=ffffc900001b0000 R14=ffffc900001b7528 R15=ffffffff8172c195
RIP=ffffffff819d6b99 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fd3ed0b000 CR3=000000010f1ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4511d87498 00007f4511d87470 XMM03=00007f4511d874a8 00007f4511d874a0
XMM04=00007f45128ed100 00007f4511d87460 XMM05=00007f4511d87478 00007f4511d874c0
XMM06=00007f4511d874b8 00007f4511d874b0 XMM07=00007f4511d874a8 00007f4511d874a0
XMM08=0000000000000000 00007f4511c12ee7 XMM09=0000000000000000 00007f4511c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
