last executing test programs:

1.110825423s ago: executing program 0 (id=2583):
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0)

1.010543757s ago: executing program 0 (id=2585):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='8', 0x1)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

611.821516ms ago: executing program 1 (id=2593):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0})
recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0)
sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

511.759586ms ago: executing program 1 (id=2594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0)

511.584779ms ago: executing program 1 (id=2595):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1)
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef)

414.690962ms ago: executing program 1 (id=2598):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x60, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x0, @in=@broadcast, 0x800000, 0x3, 0x0, 0x4b}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0x6c}, 0x0, @in6=@remote, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x23c}}, 0x20004040)

331.160126ms ago: executing program 1 (id=2600):
unshare(0x2c020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20)

330.745288ms ago: executing program 2 (id=2601):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xa)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000b80)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0xfc0, 0x67, 0x0, 0x5, 0x6, 0x0, @empty, @broadcast}, "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"}}}, 0xfce)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x8000)

271.261213ms ago: executing program 1 (id=2602):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7)
vmsplice(r0, &(0x7f0000001c80)=[{&(0x7f00000019c0)="547ca44de2e19cdc24892d4cacca39b43e828821258bfbbbf3ef3cb7330cd177875b067b8ca128ebec27e185b525a93b7db5a67994ad98e53c509e59bd0b6e9ccdeb87358d97d95c74c41f578420b45d99fdab496616e1571c291d17b8e25ca49058ec274c739bed572bbd5a1112f66678fc0e712ca843f49d68b1680a256253499aa5ba", 0x84}, {&(0x7f0000001a80)="6ced0e6c3a547efaa6f53c255af15db0c40670e4d337fa37c6b45005d6c44b999fa3339bd76278944670d69f539d3d944686446f6a5f76812e565b03ffd3b7a974f6893d9c71b1df002b3179304a293eed2e357230a4f0a2d0d5f3df19688bea18f49f83569496fbdf", 0x69}, {&(0x7f0000001b00)="2707a5584868a044bac89ab6cc8a26", 0xf}, {&(0x7f0000001b40)="ca757469a06b66af4d0b63959b1db9cc1f939b5ed732589b12f7fa8e3c8c3d1e0d8724be955f8fc1a1ad80bf5a26f44c35dfeab06334d57206220121c3e1b08039ae8e542b504bf712312a092da21f80c8963f90a2d867967017a0433f03", 0x5e}, {&(0x7f0000002d80)="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", 0xea6}], 0x5, 0x1)
write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef)

150.143075ms ago: executing program 0 (id=2603):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0)

149.799305ms ago: executing program 2 (id=2604):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0109ff"], 0xb)

98.813746ms ago: executing program 2 (id=2605):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/80, 0x0, 0xc00, 0x0, 0x1}, 0x20)

98.561396ms ago: executing program 0 (id=2606):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

51.771ms ago: executing program 2 (id=2607):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8)
close(r1)

51.578064ms ago: executing program 0 (id=2608):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100), 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e499419be4f9142da0bc21470e441225642855b5f2b4b67efbffefdf98328de9434031748589b763d46d14810acc5f7000000e3ffffff000000000000000000000020"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

780.234µs ago: executing program 2 (id=2609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0001000000000002000900000000000000000e00000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x2810)

534.997µs ago: executing program 2 (id=2610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

0s ago: executing program 0 (id=2611):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58439' (ED25519) to the list of known hosts.
syzkaller login: [   57.962236][ T5829] cgroup: Unknown subsys name 'net'
[   58.039907][ T5829] cgroup: Unknown subsys name 'cpuset'
[   58.044579][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.855782][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.006256][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.027573][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.031696][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.047857][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.051914][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.082548][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.086141][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.097926][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.108135][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.112849][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.134698][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.138725][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.144290][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.150999][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.154902][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.163137][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.170709][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.484385][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   71.596292][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   71.611556][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   71.719535][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.721983][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.724797][ T5867] bridge_slave_0: entered allmulticast mode
[   71.728933][ T5867] bridge_slave_0: entered promiscuous mode
[   71.754302][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.757270][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.759849][ T5872] bridge_slave_0: entered allmulticast mode
[   71.762640][ T5872] bridge_slave_0: entered promiscuous mode
[   71.766264][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.769199][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.771974][ T5867] bridge_slave_1: entered allmulticast mode
[   71.775657][ T5867] bridge_slave_1: entered promiscuous mode
[   71.789793][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.792655][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.795543][ T5872] bridge_slave_1: entered allmulticast mode
[   71.799880][ T5872] bridge_slave_1: entered promiscuous mode
[   71.852594][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.885248][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.892643][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.895948][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.898713][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.901225][ T5870] bridge_slave_0: entered allmulticast mode
[   71.904962][ T5870] bridge_slave_0: entered promiscuous mode
[   71.910695][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.913180][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.915606][ T5870] bridge_slave_1: entered allmulticast mode
[   71.918679][ T5870] bridge_slave_1: entered promiscuous mode
[   71.938248][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.997908][ T5867] team0: Port device team_slave_0 added
[   72.015364][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.020891][ T5867] team0: Port device team_slave_1 added
[   72.024994][ T5872] team0: Port device team_slave_0 added
[   72.030454][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.056566][ T5872] team0: Port device team_slave_1 added
[   72.060788][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.063526][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.073112][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.100497][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.103076][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.111489][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.149956][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.152530][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.163348][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.169364][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.172017][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.182254][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.188242][ T5870] team0: Port device team_slave_0 added
[   72.212996][ T5870] team0: Port device team_slave_1 added
[   72.258603][ T5867] hsr_slave_0: entered promiscuous mode
[   72.261453][ T5867] hsr_slave_1: entered promiscuous mode
[   72.293268][ T5872] hsr_slave_0: entered promiscuous mode
[   72.296195][ T5872] hsr_slave_1: entered promiscuous mode
[   72.300897][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   72.303117][ T5872] Cannot create hsr debugfs directory
[   72.305923][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.309008][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.318914][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.337846][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.340451][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.351196][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.498169][ T5870] hsr_slave_0: entered promiscuous mode
[   72.500537][ T5870] hsr_slave_1: entered promiscuous mode
[   72.502994][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   72.505293][ T5870] Cannot create hsr debugfs directory
[   72.697874][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.706093][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.738760][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.744090][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.805320][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.816840][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.832961][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.840785][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.898421][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.910484][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.915256][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.922720][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.009234][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.051925][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.060325][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   73.077287][   T55] Bluetooth: hci0: command tx timeout
[   73.083287][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.086403][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.103217][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.105519][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.115748][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   73.132875][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.135576][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.154056][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.156882][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.168156][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.171805][   T55] Bluetooth: hci1: command tx timeout
[   73.200448][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   73.223869][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.226742][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.237150][   T55] Bluetooth: hci2: command tx timeout
[   73.240211][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.261040][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.263731][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.488585][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.551059][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.556315][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.582590][ T5872] veth0_vlan: entered promiscuous mode
[   73.606166][ T5872] veth1_vlan: entered promiscuous mode
[   73.654778][ T5867] veth0_vlan: entered promiscuous mode
[   73.669854][ T5867] veth1_vlan: entered promiscuous mode
[   73.674915][ T5870] veth0_vlan: entered promiscuous mode
[   73.688482][ T5872] veth0_macvtap: entered promiscuous mode
[   73.695008][ T5870] veth1_vlan: entered promiscuous mode
[   73.705479][ T5872] veth1_macvtap: entered promiscuous mode
[   73.748731][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.759420][ T5867] veth0_macvtap: entered promiscuous mode
[   73.766092][ T5867] veth1_macvtap: entered promiscuous mode
[   73.773451][ T5870] veth0_macvtap: entered promiscuous mode
[   73.782730][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.802948][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.823815][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.830104][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.834055][ T5870] veth1_macvtap: entered promiscuous mode
[   73.851904][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.868373][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.874164][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.895033][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.911087][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.942377][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.960822][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.985906][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.989006][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.992309][ T5893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.000463][ T4066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.008982][ T4066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.012678][ T5893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.015289][ T5893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.048529][ T5893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.090314][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.093369][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.143683][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.148225][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.152003][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.194962][ T4066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.201848][ T4066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.231867][ T5930] xt_limit: Overflow, try lower: 271964/0
[   74.261752][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.264759][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.280896][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.283903][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.400576][ T5934] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   74.458989][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'.
[   74.744892][ T5948] Bluetooth: MGMT ver 1.23
[   75.170800][   T55] Bluetooth: hci0: command tx timeout
[   75.188994][ T5977] Zero length message leads to an empty skb
[   75.239237][   T55] Bluetooth: hci1: command tx timeout
[   75.291853][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.326795][   T55] Bluetooth: hci2: command tx timeout
[   75.509739][ T5998] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET)
[   75.994884][ T6034] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   76.007172][ T6034] NCSI netlink: No device for ifindex 0
[   76.122173][ T6046] syzkaller1: entered promiscuous mode
[   76.129056][ T6046] syzkaller1: entered allmulticast mode
[   76.693940][ T6090] tipc: Started in network mode
[   76.696067][ T6090] tipc: Node identity aa7388d7c922, cluster identity 4711
[   76.709134][ T6090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.712709][ T6086] tipc: Resetting bearer <eth:syzkaller0>
[   76.746318][ T6086] tipc: Disabling bearer <eth:syzkaller0>
[   77.187670][ T6116] netlink: 108 bytes leftover after parsing attributes in process `syz.2.87'.
[   77.237392][   T55] Bluetooth: hci0: command tx timeout
[   77.244815][ T6118] netlink: 'syz.2.88': attribute type 1 has an invalid length.
[   77.248268][ T6118] netlink: 232 bytes leftover after parsing attributes in process `syz.2.88'.
[   77.321326][   T55] Bluetooth: hci1: command tx timeout
[   77.397956][ T6127] netlink: 'syz.2.91': attribute type 2 has an invalid length.
[   77.408214][   T55] Bluetooth: hci2: command tx timeout
[   77.561142][ T6135] netlink: 'syz.2.94': attribute type 2 has an invalid length.
[   77.712494][ T6150] netlink: 276 bytes leftover after parsing attributes in process `syz.1.101'.
[   77.919603][ T6169] netlink: 'syz.2.107': attribute type 7 has an invalid length.
[   77.974726][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'.
[   78.036271][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   78.115419][ T6181] hsr_slave_1 (unregistering): left promiscuous mode
[   78.167576][ T6189] warning: `syz.1.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.454755][ T6200] syzkaller1: entered promiscuous mode
[   78.457284][ T6200] syzkaller1: entered allmulticast mode
[   78.965625][ T6221] tipc: Started in network mode
[   78.969777][ T6221] tipc: Node identity b2a41af1d43b, cluster identity 4711
[   78.972703][ T6221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.035021][ T6219] tipc: Resetting bearer <eth:syzkaller0>
[   79.320386][   T55] Bluetooth: hci0: command tx timeout
[   79.397695][   T55] Bluetooth: hci1: command tx timeout
[   79.478247][   T55] Bluetooth: hci2: command tx timeout
[   80.030540][ T5913] tipc: Node number set to 1721703153
[   80.087871][ T6219] tipc: Disabling bearer <eth:syzkaller0>
[   80.260750][ T6246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.137'.
[   80.789019][ T6301] delete_channel: no stack
[   80.823529][ T6304] Illegal XDP return value 4294967294 on prog  (id 24) dev N/A, expect packet loss!
[   80.889214][ T6310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.892733][ T6310] syzkaller0: entered promiscuous mode
[   80.894947][ T6310] syzkaller0: entered allmulticast mode
[   80.909644][ T6310] tipc: Resetting bearer <eth:syzkaller0>
[   80.913989][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[   80.924712][ T6309] tipc: Disabling bearer <eth:syzkaller0>
[   80.999730][ T6316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.739936][ T6342] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   82.014363][ T6358] Bluetooth: MGMT ver 1.23
[   83.038423][ T6416] netlink: 'syz.0.214': attribute type 3 has an invalid length.
[   83.041497][ T6416] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.214'.
[   83.223325][ T6438] netlink: 'syz.2.225': attribute type 7 has an invalid length.
[   83.225840][ T6438] netlink: 'syz.2.225': attribute type 8 has an invalid length.
[   83.229845][ T6438] netlink: 'syz.2.225': attribute type 4 has an invalid length.
[   83.232419][ T6438] netlink: 204 bytes leftover after parsing attributes in process `syz.2.225'.
[   83.294997][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[   83.316386][ T6450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.231'.
[   83.440362][ T6464] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[   83.498626][ T6464] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   83.504025][ T6464] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.508160][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.532122][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'.
[   83.539836][ T6464] veth3: entered promiscuous mode
[   83.550032][ T6464] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   83.577448][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   83.581586][ T6464] bridge_slave_0: left allmulticast mode
[   83.583779][ T6464] bridge_slave_0: left promiscuous mode
[   83.587251][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.601789][ T6464] bridge_slave_1: left allmulticast mode
[   83.604049][ T6464] bridge_slave_1: left promiscuous mode
[   83.606268][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.617918][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.624741][ T6464] bond0: (slave bond_slave_0): Releasing backup interface
[   83.638637][ T6464] bond0: (slave bond_slave_1): Releasing backup interface
[   83.652404][ T6464] team0: Port device team_slave_0 removed
[   83.660316][ T6464] team0: Port device team_slave_1 removed
[   83.662823][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.665274][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.672979][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.675375][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.686271][ T6464] bond2: (slave ip6gretap1): Removing an active aggregator
[   83.690136][ T6464] bond2: (slave ip6gretap1): Releasing backup interface
[   83.692991][ T6464] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 2e:2a:2c:33:45:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   83.704231][ T6464] bond2: (slave veth3): Releasing backup interface
[   83.805560][ T6485] netlink: 'syz.2.246': attribute type 1 has an invalid length.
[   83.841241][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.878558][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.883154][ T6485] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   83.890040][ T6492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.890175][ T6485] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   83.893079][ T6492] IPv6: NLM_F_CREATE should be set when creating new route
[   83.893172][ T6492] IPv6: NLM_F_CREATE should be set when creating new route
[   83.901992][ T6492] IPv6: NLM_F_CREATE should be set when creating new route
[   83.929268][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'.
[   84.002607][ T6495] veth3: entered promiscuous mode
[   84.011684][ T6495] bond1: (slave veth3): Enslaving as an active interface with a down link
[   84.103514][ T6510] tipc: Enabled bearer <ib:caif0>, priority 14
[   84.232990][ T6513] netlink: 'syz.0.257': attribute type 10 has an invalid length.
[   84.239972][ T6513] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.441270][ T6536] netlink: 'syz.2.268': attribute type 21 has an invalid length.
[   84.444342][ T6536] netlink: 128 bytes leftover after parsing attributes in process `syz.2.268'.
[   84.451023][ T6536] netlink: 'syz.2.268': attribute type 5 has an invalid length.
[   84.453969][ T6536] netlink: 3 bytes leftover after parsing attributes in process `syz.2.268'.
[   84.610091][ T6547] netlink: 'syz.2.270': attribute type 1 has an invalid length.
[   84.761246][ T5866] IPVS: starting estimator thread 0...
[   84.772508][ T6556] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   84.776006][ T6556] tipc: Enabled bearer <udp:s>, priority 10
[   84.846866][ T6558] IPVS: using max 49 ests per chain, 117600 per kthread
[   84.906850][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   85.046552][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   85.094305][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.097640][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.186613][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   85.258419][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.274508][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.326703][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   85.452322][ T6589] __nla_validate_parse: 3 callbacks suppressed
[   85.452333][ T6589] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'.
[   85.459872][ T5676] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.462845][ T5676] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.465976][ T5676] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.466774][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   85.469101][ T5676] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.581846][ T6598] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   85.886638][    T9] tipc: Node number set to 1666287831
[   86.521845][   T10] cfg80211: failed to load regulatory.db
[   86.640643][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'.
[   86.643661][ T6677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.330'.
[   86.826584][    C0] net_ratelimit: 5 callbacks suppressed
[   86.826602][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   87.095984][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'.
[   87.239120][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'.
[   87.392028][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'.
[   87.426704][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'.
[   87.430106][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'.
[   87.467282][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'.
[   87.623491][ T6744] atomic_op ffff88802e0a3198 conn xmit_atomic 0000000000000000
[   87.876657][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   88.856134][ T6823] validate_nla: 1 callbacks suppressed
[   88.856165][ T6823] netlink: 'syz.2.388': attribute type 12 has an invalid length.
[   88.916648][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   89.561512][ T6849] netlink: 'syz.2.397': attribute type 10 has an invalid length.
[   89.579697][ T6849] team0: Port device dummy0 added
[   89.584676][ T6849] netlink: 'syz.2.397': attribute type 10 has an invalid length.
[   89.596392][ T6849] team0: Port device dummy0 removed
[   89.605227][ T6849] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   89.956821][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   90.028268][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'.
[   90.042893][ T6869] erspan0: entered promiscuous mode
[   90.045588][ T6869] macvtap1: entered promiscuous mode
[   90.050296][ T6869] macvtap1: entered allmulticast mode
[   90.052615][ T6869] erspan0: entered allmulticast mode
[   90.609507][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'.
[   90.945872][ T6919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.949792][ T6919] syzkaller0: entered promiscuous mode
[   90.952095][ T6919] syzkaller0: entered allmulticast mode
[   90.974875][ T6919] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   90.984408][ T6919] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[   90.996655][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   91.013150][ T6923] netlink: 'syz.2.426': attribute type 11 has an invalid length.
[   91.014341][ T6919] tipc: Resetting bearer <eth:syzkaller0>
[   91.020877][ T6918] tipc: Resetting bearer <eth:syzkaller0>
[   91.044307][ T6918] tipc: Disabling bearer <eth:syzkaller0>
[   91.103416][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   91.106321][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   91.460428][ T6952] bond0: (slave wlan1): Releasing backup interface
[   91.767226][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'.
[   91.771080][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'.
[   91.907985][ T6987] netlink: 92 bytes leftover after parsing attributes in process `syz.1.456'.
[   92.002927][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'.
[   92.036626][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   92.332617][ T7013] syzkaller0: entered promiscuous mode
[   92.334339][ T7013] syzkaller0: entered allmulticast mode
[   92.348897][ T7019] bond_slave_0: entered promiscuous mode
[   92.351061][ T7019] bond_slave_1: entered promiscuous mode
[   92.353044][ T7019] dummy0: entered promiscuous mode
[   92.355363][ T7019] vlan0: entered promiscuous mode
[   92.357829][ T7019] bond0: entered promiscuous mode
[   92.364423][ T7021] netlink: 248 bytes leftover after parsing attributes in process `syz.0.473'.
[   93.077673][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   93.604411][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'.
[   93.634146][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.117828][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   94.387986][ T7069] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   94.417715][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'.
[   94.684142][ T7076] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[   94.802855][ T7096] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   94.835339][ T7098] ip6gretap0: entered promiscuous mode
[   94.839195][ T7098] macsec1: entered allmulticast mode
[   94.840991][ T7098] ip6gretap0: entered allmulticast mode
[   94.846227][ T7098] ip6gretap0: left allmulticast mode
[   94.850607][ T7098] ip6gretap0: left promiscuous mode
[   95.156685][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   95.274711][ T7149] macvlan2: entered promiscuous mode
[   95.281656][ T7149] bond0: entered promiscuous mode
[   95.283500][ T7149] bond_slave_0: entered promiscuous mode
[   95.285371][ T7149] bond_slave_1: entered promiscuous mode
[   95.292759][ T7149] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.509815][ T7177] netlink: 'syz.0.533': attribute type 13 has an invalid length.
[   95.512980][ T7177] netlink: 'syz.0.533': attribute type 17 has an invalid length.
[   95.622606][ T7177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.646687][ T7185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.704162][ T7190] netlink: 'syz.1.542': attribute type 1 has an invalid length.
[   95.715050][ T7190] netlink: 'syz.1.542': attribute type 3 has an invalid length.
[   95.719142][ T7190] __nla_validate_parse: 4 callbacks suppressed
[   95.719155][ T7190] netlink: 224 bytes leftover after parsing attributes in process `syz.1.542'.
[   95.728984][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.929489][ T7197] netlink: 'syz.2.543': attribute type 1 has an invalid length.
[   95.932764][ T7197] netlink: 224 bytes leftover after parsing attributes in process `syz.2.543'.
[   96.108282][ T7202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.547'.
[   96.145333][ T7204] netlink: 'syz.1.548': attribute type 1 has an invalid length.
[   96.196638][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   96.841403][ T5239] Bluetooth: hci0: command tx timeout
[   96.939476][ T7228] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.558'.
[   97.002521][ T7232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.560'.
[   97.246669][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   97.423110][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'.
[   97.428830][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'.
[   97.442146][ T7246] erspan0: entered promiscuous mode
[   97.445276][ T7246] erspan0: left promiscuous mode
[   97.535937][ T7250] netlink: 'syz.1.567': attribute type 7 has an invalid length.
[   97.544525][ T7250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.567'.
[   97.985501][   T33] audit: type=1800 audit(1756389064.981:2): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.577" name=CB dev="tmpfs" ino=828 res=0 errno=0
[   98.014296][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.578'.
[   98.276720][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   98.283531][ T7302] netlink: 'syz.2.587': attribute type 41 has an invalid length.
[   98.511312][ T7324] sch_tbf: burst 4398 is lower than device lo mtu (65499) !
[   98.535776][ T7326] netlink: 'syz.0.598': attribute type 1 has an invalid length.
[   98.562673][ T7326] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.580609][ T7326] bond3: (slave geneve2): making interface the new active one
[   98.587474][ T7326] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   98.611528][ T7326] syz.0.598 (7326) used greatest stack depth: 16760 bytes left
[   99.269460][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.603'.
[   99.321475][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   99.413974][ T7351] syzkaller0: entered allmulticast mode
[  100.357031][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  100.648220][ T7439] nbd: device at index 0 is going down
[  101.396826][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  101.792945][ T5893] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.795961][ T5893] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.811785][ T5893] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.815241][ T5893] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.010528][ T7486] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  102.018617][ T7488] __nla_validate_parse: 5 callbacks suppressed
[  102.018627][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'.
[  102.128078][ T7498] 8021q: adding VLAN 0 to HW filter on device bond4
[  102.130878][ T7498] bridge0: port 1(bond4) entered blocking state
[  102.134371][ T7498] bridge0: port 1(bond4) entered disabled state
[  102.138134][ T7498] bond4: entered allmulticast mode
[  102.141301][ T7498] bond4: entered promiscuous mode
[  102.144061][ T7498] bridge0: port 1(bond4) entered blocking state
[  102.147226][ T7498] bridge0: port 1(bond4) entered forwarding state
[  102.155131][   T32] bridge0: port 1(bond4) entered disabled state
[  102.192858][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'.
[  102.197319][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'.
[  102.340503][ T7522] vxcan1: entered allmulticast mode
[  102.381912][ T7520] netlink: 'syz.0.679': attribute type 12 has an invalid length.
[  102.384896][ T7520] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.679'.
[  102.446674][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  102.799195][ T7535] veth3: left promiscuous mode
[  102.809158][ T7535] erspan0: left allmulticast mode
[  102.811668][ T7535] macvtap1: left promiscuous mode
[  102.813771][ T7535] macvtap1: left allmulticast mode
[  102.830671][ T5893] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.836959][ T5676] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.842430][ T5676] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.846233][ T5676] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.869787][ T7543] netlink: 'syz.2.692': attribute type 1 has an invalid length.
[  102.873045][ T7543] netlink: 'syz.2.692': attribute type 2 has an invalid length.
[  102.886116][ T7543] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  103.486659][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  103.546003][ T7585] syzkaller1: entered promiscuous mode
[  103.548753][ T7585] syzkaller1: entered allmulticast mode
[  103.878107][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  104.185035][ T7618] netlink: 'syz.1.725': attribute type 4 has an invalid length.
[  104.194842][ T7618] netlink: 'syz.1.725': attribute type 4 has an invalid length.
[  104.269186][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.727'.
[  104.299503][ T7625] ip6erspan0: entered allmulticast mode
[  104.516715][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  104.881487][ T7665] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  104.884429][ T7665] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  104.888930][ T7665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  105.556717][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  106.183953][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'.
[  106.192164][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'.
[  106.274677][ T7701] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0
[  106.291587][ T7698] tipc: Started in network mode
[  106.295958][ T7698] tipc: Node identity 32ae86f5e29e, cluster identity 4711
[  106.317529][ T7698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.324661][ T7698] syzkaller0: entered promiscuous mode
[  106.334024][ T7698] syzkaller0: entered allmulticast mode
[  106.365708][ T7698] tipc: Resetting bearer <eth:syzkaller0>
[  106.376908][ T7697] tipc: Resetting bearer <eth:syzkaller0>
[  106.400280][ T7697] tipc: Disabling bearer <eth:syzkaller0>
[  106.596672][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  106.773785][ T7743] netlink: 'syz.0.781': attribute type 22 has an invalid length.
[  106.809595][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'.
[  107.055726][ T7765] netlink: 144 bytes leftover after parsing attributes in process `syz.1.791'.
[  107.332936][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.797'.
[  107.428461][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'.
[  107.432069][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'.
[  107.636708][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  107.775765][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.816'.
[  107.817755][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'.
[  107.887702][ T7832] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  108.080022][ T7847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.823'.
[  108.676620][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  108.790745][ T7916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.856'.
[  108.841469][ T7921] netlink: 'syz.1.857': attribute type 1 has an invalid length.
[  108.841580][ T7923] netlink: 256 bytes leftover after parsing attributes in process `syz.2.859'.
[  109.024897][ T7931] netlink: 'syz.0.861': attribute type 42 has an invalid length.
[  109.109957][ T7939] netlink: 'syz.0.866': attribute type 3 has an invalid length.
[  109.112447][ T7939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.866'.
[  109.184015][ T7943] can: request_module (can-proto-3) failed.
[  109.716676][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  110.018311][ T8011] sctp: [Deprecated]: syz.0.901 (pid 8011) Use of int in max_burst socket option.
[  110.018311][ T8011] Use struct sctp_assoc_value instead
[  110.335882][ T8036] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  110.469257][ T8043] netlink: 'syz.2.917': attribute type 8 has an invalid length.
[  110.756703][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  110.814067][ T8069] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  110.825162][ T8069] bond3: (slave geneve2): Releasing active interface
[  110.830236][ T8069] bond4: left allmulticast mode
[  110.832245][ T8069] bond4: left promiscuous mode
[  110.834398][ T8069] bridge0: port 1(bond4) entered disabled state
[  110.845275][ T8069] netlink: 'syz.0.928': attribute type 10 has an invalid length.
[  110.853810][ T8069] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.857494][ T8069] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.287685][ T8088] macsec2: entered promiscuous mode
[  111.290792][ T8088] macsec2: entered allmulticast mode
[  111.292886][ T8088] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  111.474304][ T8100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.608199][ T8110] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  111.710300][ T8115] pimreg: entered allmulticast mode
[  111.725071][ T8115] dvmrp8: entered allmulticast mode
[  111.727455][ T8115] pimreg: left allmulticast mode
[  111.729284][ T8115] dvmrp8: left allmulticast mode
[  111.796688][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  111.822990][ T8123] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  112.112829][ T8156] __nla_validate_parse: 2 callbacks suppressed
[  112.112880][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'.
[  112.837003][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  113.138941][ T8193] netlink: 64 bytes leftover after parsing attributes in process `syz.1.977'.
[  113.252458][ T8207] tap0: tun_chr_ioctl cmd 1074025677
[  113.254257][ T8207] tap0: linktype set to 825
[  113.298980][ T8209] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  113.365282][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'.
[  113.633856][ T8232] tipc: Enabled bearer <eth:gre0>, priority 10
[  113.842277][ T8252] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  113.876624][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  114.359751][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1014'.
[  114.365744][ T8284] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1016'.
[  114.371143][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'.
[  114.926682][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  115.674273][ T8331] netlink: 'syz.2.1035': attribute type 1 has an invalid length.
[  115.759466][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[  115.769245][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[  115.909254][ T8347] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  115.928164][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'.
[  115.931503][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.966751][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  115.985964][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.996852][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  117.108872][ T8389] tipc: Can't bind to reserved service type 0
[  117.323411][ T8412] netlink: 648 bytes leftover after parsing attributes in process `syz.2.1065'.
[  117.357982][ T8409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.361246][ T8409] syzkaller0: entered promiscuous mode
[  117.363384][ T8409] syzkaller0: entered allmulticast mode
[  117.391672][ T8409] tipc: Resetting bearer <eth:syzkaller0>
[  117.404317][ T8408] tipc: Resetting bearer <eth:syzkaller0>
[  117.424578][ T8408] tipc: Disabling bearer <eth:syzkaller0>
[  117.486191][ T8422] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  117.617280][ T8436] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1078'.
[  117.813465][ T8447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.819370][ T8447] syzkaller0: entered promiscuous mode
[  117.821752][ T8447] syzkaller0: entered allmulticast mode
[  117.842025][ T8447] tipc: Resetting bearer <eth:syzkaller0>
[  117.849124][ T8446] tipc: Resetting bearer <eth:syzkaller0>
[  117.872008][ T8446] tipc: Disabling bearer <eth:syzkaller0>
[  118.036751][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  118.804813][ T8477] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1094'.
[  118.810539][ T8477] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1094'.
[  119.028552][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'.
[  119.032386][ T8487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1099'.
[  119.076901][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  119.486833][ T8518] pim6reg1: entered promiscuous mode
[  119.489041][ T8518] pim6reg1: entered allmulticast mode
[  120.082998][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1133'.
[  120.116576][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  120.203804][ T8566] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  120.339040][ T8576] netlink: 'syz.0.1142': attribute type 1 has an invalid length.
[  120.572448][ T8597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.586702][ T8597] syzkaller0: entered promiscuous mode
[  120.591321][ T8597] syzkaller0: entered allmulticast mode
[  120.663299][ T8597] tipc: Resetting bearer <eth:syzkaller0>
[  120.664153][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1153'.
[  120.669103][ T8596] tipc: Resetting bearer <eth:syzkaller0>
[  120.686971][ T8596] tipc: Disabling bearer <eth:syzkaller0>
[  121.009721][ T8615] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  121.166706][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  121.360611][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'.
[  121.430944][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[  121.956278][ T8684] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  121.981658][ T8684] bond0: (slave dummy0): Releasing backup interface
[  121.984985][ T8684] dummy0: left promiscuous mode
[  121.990075][ T8688] sctp: [Deprecated]: syz.0.1192 (pid 8688) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.990075][ T8688] Use struct sctp_sack_info instead
[  121.995874][ T8684] bridge_slave_0: left allmulticast mode
[  122.002263][ T8684] bridge_slave_0: left promiscuous mode
[  122.004755][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.013071][ T8684] bridge_slave_1: left allmulticast mode
[  122.015437][ T8684] bridge_slave_1: left promiscuous mode
[  122.021778][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.035223][ T8684] bond0: (slave bond_slave_0): Releasing backup interface
[  122.041672][ T8684] bond_slave_0: left promiscuous mode
[  122.054750][ T8684] bond0: (slave bond_slave_1): Releasing backup interface
[  122.061730][ T8684] bond_slave_1: left promiscuous mode
[  122.072369][ T8684] team0: Port device team_slave_0 removed
[  122.083485][ T8684] team0: Port device team_slave_1 removed
[  122.088002][ T8684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.091240][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.091641][ T8694] netlink: 'syz.2.1191': attribute type 10 has an invalid length.
[  122.104973][ T8684] bond1: (slave veth3): Releasing active interface
[  122.124243][ T8694] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  122.137947][ T8694] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.152390][ T8694] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  122.161308][ T8694] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  122.196702][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  122.197363][ T8684] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.206379][ T8684] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.465569][ T8712] __nla_validate_parse: 2 callbacks suppressed
[  122.465580][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'.
[  122.870575][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[  122.873397][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[  122.947459][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  123.015593][ T8752] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  123.028795][ T8752] bridge_slave_0: left allmulticast mode
[  123.031089][ T8752] bridge_slave_0: left promiscuous mode
[  123.033375][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.038792][ T8752] bridge_slave_1: left allmulticast mode
[  123.041141][ T8752] bridge_slave_1: left promiscuous mode
[  123.043467][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.051515][ T8752] bond0: (slave bond_slave_0): Releasing backup interface
[  123.054769][ T8752] bond_slave_0: left promiscuous mode
[  123.067474][ T8752] bond0: (slave bond_slave_1): Releasing backup interface
[  123.071672][ T8752] bond_slave_1: left promiscuous mode
[  123.075352][ T8752] team0: Port device team_slave_0 removed
[  123.078264][ T5239] Bluetooth: hci0: command tx timeout
[  123.085848][ T8752] team0: Port device team_slave_1 removed
[  123.089765][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.093976][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.130907][ T8752] netlink: 'syz.1.1220': attribute type 10 has an invalid length.
[  123.133843][ T8752] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  123.136230][ T8752] bond0: (slave wlan1): refused to change device type
[  123.143526][ T8752] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  123.148675][ T8752] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.246712][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  123.284562][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'.
[  123.581646][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.584396][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.584675][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'.
[  123.609937][ T8793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.919371][ T8811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.922262][ T8811] IPv6: NLM_F_CREATE should be set when creating new route
[  123.925110][ T8811] IPv6: NLM_F_CREATE should be set when creating new route
[  123.931491][ T8811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.070892][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'.
[  124.074192][ T8819] netlink: 'syz.1.1251': attribute type 2 has an invalid length.
[  124.102108][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'.
[  124.106179][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'.
[  124.113447][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'.
[  124.286799][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  124.472700][ T8855] ip6gre0: Master is either lo or non-ether device
[  124.732595][ T8882] sctp: [Deprecated]: syz.2.1280 (pid 8882) Use of int in maxseg socket option.
[  124.732595][ T8882] Use struct sctp_assoc_value instead
[  124.796346][ T8889] tap0: tun_chr_ioctl cmd 1074025675
[  124.798807][ T8889] tap0: persist disabled
[  125.001851][ T8907] netem: incorrect gi model size
[  125.004977][ T8907] netem: change failed
[  125.316736][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  125.862703][ T8939] netlink: 'syz.2.1303': attribute type 1 has an invalid length.
[  126.356618][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  127.406694][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  127.844811][ T8986] __nla_validate_parse: 45 callbacks suppressed
[  127.844829][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'.
[  127.886676][ T8989] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1321'.
[  128.255921][ T9015] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  128.436642][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  128.544270][ T9021] netlink: 'syz.2.1337': attribute type 4 has an invalid length.
[  128.775457][ T9041] netlink: 'syz.1.1346': attribute type 9 has an invalid length.
[  128.786668][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  128.805056][ T9041] macvlan3: entered promiscuous mode
[  128.807409][ T9041] hsr0: entered promiscuous mode
[  128.809549][ T9041] macvlan3: entered allmulticast mode
[  128.826563][ T9041] hsr0: entered allmulticast mode
[  128.828564][ T9041] hsr_slave_0: entered allmulticast mode
[  128.830671][ T9041] hsr_slave_1: entered allmulticast mode
[  128.851953][ T5866] IPVS: starting estimator thread 0...
[  128.947732][ T9043] IPVS: using max 46 ests per chain, 110400 per kthread
[  129.319132][ T9060] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1354'.
[  129.390949][ T9065] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  129.476772][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  129.548027][ T9080] openvswitch: netlink: IP tunnel dst address not specified
[  129.943441][ T5239] Bluetooth: hci2: link tx timeout
[  129.945851][ T5239] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  129.950935][ T5239] Bluetooth: hci2: link tx timeout
[  129.954056][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.961963][ T9105] veth5: entered promiscuous mode
[  130.526726][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  130.869734][ T9129] netlink: 'syz.1.1382': attribute type 1 has an invalid length.
[  130.872859][ T9129] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1382'.
[  130.982735][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1387'.
[  130.994624][ T9137] netlink: 'syz.2.1387': attribute type 7 has an invalid length.
[  130.999692][ T9137] netlink: 'syz.2.1387': attribute type 8 has an invalid length.
[  131.002740][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'.
[  131.458424][   T33] audit: type=1800 audit(1756389098.461:3): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1399" name="memory.events" dev="tmpfs" ino=2625 res=0 errno=0
[  131.566638][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  131.759530][ T9190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1412'.
[  131.759879][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'.
[  131.785723][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'.
[  132.036679][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  132.133981][ T9215] vxcan1 (unregistering): left allmulticast mode
[  132.596682][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  132.772625][ T9248] tipc: New replicast peer: 208.253.78.183
[  132.776109][ T9248] tipc: Enabled bearer <udp:s>, priority 10
[  133.000447][ T9260] netlink: 'syz.0.1430': attribute type 28 has an invalid length.
[  133.037859][ T9262] __nla_validate_parse: 2 callbacks suppressed
[  133.037871][ T9262] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1431'.
[  133.636609][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  133.830381][ T9282] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1440'.
[  133.887155][ T5913] tipc: Node number set to 3492841205
[  134.124495][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  134.686660][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  135.716681][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  136.329621][ T9372] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  136.536747][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'.
[  136.571945][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.766605][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  137.260299][ T9405] netlink: 'syz.0.1493': attribute type 11 has an invalid length.
[  137.574130][ T9417] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  137.796789][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  137.965710][ T9426] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1500'.
[  138.153041][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1502'.
[  138.494022][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'.
[  138.499518][ T9448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.846549][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  139.173475][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  139.507454][ T9528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1547'.
[  139.511494][ T9528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1547'.
[  139.714366][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'.
[  139.825698][ T9543] : renamed from vlan1
[  139.856033][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  139.876727][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.334720][ T9559] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1560'.
[  140.648331][ T9580] dummy0: entered allmulticast mode
[  140.651626][ T9579] dummy0: left allmulticast mode
[  140.900972][ T9585] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  140.904282][ T9585] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1572'.
[  140.917076][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.395239][ T9602] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  141.419403][ T9603] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1581'.
[  141.797867][ T9618] block nbd1: server does not support multiple connections per device.
[  141.801502][ T9618] block nbd1: shutting down sockets
[  141.871217][ T9622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.956770][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  142.023675][ T9628] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  142.996544][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  143.742639][ T9724] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  143.759497][ T9724] netlink: 'syz.0.1637': attribute type 10 has an invalid length.
[  144.046582][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.076702][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.162706][ T9761] __nla_validate_parse: 4 callbacks suppressed
[  145.162724][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1654'.
[  145.542270][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1665'.
[  145.641748][ T9792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.647362][ T9792] syzkaller0: entered promiscuous mode
[  145.649401][ T9792] syzkaller0: entered allmulticast mode
[  145.671259][ T9794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.675751][ T9792] tipc: Resetting bearer <eth:syzkaller0>
[  145.681787][ T9794] syzkaller0: entered promiscuous mode
[  145.683816][ T9794] syzkaller0: entered allmulticast mode
[  145.688351][ T9791] tipc: Resetting bearer <eth:syzkaller0>
[  145.699126][ T9791] tipc: Disabling bearer <eth:syzkaller0>
[  145.714914][ T9794] tipc: Resetting bearer <eth:syzkaller0>
[  145.720228][ T9793] tipc: Resetting bearer <eth:syzkaller0>
[  145.728753][ T9793] tipc: Disabling bearer <eth:syzkaller0>
[  145.813285][ T9804] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1673'.
[  145.816403][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  145.950792][ T9817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.954191][ T9817] syzkaller0: entered promiscuous mode
[  145.956696][ T9817] syzkaller0: entered allmulticast mode
[  145.972866][ T9817] tipc: Resetting bearer <eth:syzkaller0>
[  145.977250][ T9816] tipc: Resetting bearer <eth:syzkaller0>
[  145.986849][ T9816] tipc: Disabling bearer <eth:syzkaller0>
[  146.126613][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  146.461115][ T9843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1689'.
[  146.731101][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1692'.
[  147.156697][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  147.204209][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'.
[  147.650225][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'.
[  147.747072][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'.
[  147.750854][ T9918] veth1: entered promiscuous mode
[  147.753088][ T9918] netlink: 'syz.0.1710': attribute type 1 has an invalid length.
[  147.756217][ T9918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  147.762353][ T9918] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  148.196600][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  149.246681][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  149.405919][ T5913] IPVS: starting estimator thread 0...
[  149.506575][T10003] IPVS: using max 46 ests per chain, 110400 per kthread
[  150.091302][T10033] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  150.130236][T10037] netlink: 'syz.1.1766': attribute type 1 has an invalid length.
[  150.199472][T10037] bond1: (slave gretap1): making interface the new active one
[  150.204767][T10040] netlink: 'syz.0.1767': attribute type 2 has an invalid length.
[  150.210831][T10037] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  150.283704][T10040] k*]: entered promiscuous mode
[  150.286716][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  150.322231][T10041] erspan0: left promiscuous mode
[  150.364007][T10041] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.369064][T10045] __nla_validate_parse: 4 callbacks suppressed
[  150.369080][T10045] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1769'.
[  150.372330][T10041] 8021q: adding VLAN 0 to HW filter on device team0
[  150.385166][T10041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.421470][T10040] veth0_to_team: entered promiscuous mode
[  150.423819][T10040] veth0_to_team: entered allmulticast mode
[  150.475048][T10048] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1769'.
[  150.480560][T10048] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1769'.
[  150.483965][T10048] netlink: 'syz.1.1769': attribute type 6 has an invalid length.
[  150.487956][T10048] netlink: 'syz.1.1769': attribute type 5 has an invalid length.
[  150.491157][T10048] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1769'.
[  150.800777][T10077] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.068232][T10092] openvswitch: netlink: Multiple metadata blocks provided
[  151.286870][T10098] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1791'.
[  151.316627][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  151.785987][T10127] IPv6: NLM_F_REPLACE set, but no existing node found!
[  152.356663][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  152.872876][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'.
[  152.881080][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'.
[  153.078959][T10200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  153.172730][T10206] syzkaller1: entered allmulticast mode
[  153.406732][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  153.918577][T10257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1858'.
[  154.326157][T10280] infiniband syz2: set down
[  154.330449][T10280] infiniband syz2: added ipvlan1
[  154.385970][T10280] RDS/IB: syz2: added
[  154.395644][T10280] smc: adding ib device syz2 with port count 1
[  154.405719][T10280] smc:    ib device syz2 port 1 has pnetid 
[  154.436750][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  154.568659][T10300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.580178][T10300] syzkaller0: entered promiscuous mode
[  154.582464][T10300] syzkaller0: entered allmulticast mode
[  154.641147][T10300] tipc: Resetting bearer <eth:syzkaller0>
[  154.648673][T10299] tipc: Resetting bearer <eth:syzkaller0>
[  154.672834][T10299] tipc: Disabling bearer <eth:syzkaller0>
[  154.987910][T10318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1881'.
[  154.996890][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1881'.
[  155.142010][T10324] delete_channel: no stack
[  155.451014][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.476707][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  155.507029][T10349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1898'.
[  155.521351][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'.
[  155.681574][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'.
[  155.690554][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1907'.
[  155.694101][T10368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1907'.
[  155.870285][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1913'.
[  156.498981][T10428] rdma_op ffff888111f4d9f0 conn xmit_rdma 0000000000000000
[  156.516615][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  156.539964][T10428] netlink: 'syz.0.1928': attribute type 10 has an invalid length.
[  156.678104][T10444] C: renamed from team_slave_0
[  156.685342][T10444] netlink: 'syz.1.1937': attribute type 4 has an invalid length.
[  156.706697][T10444] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  156.899137][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'.
[  156.906291][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1940'.
[  156.969300][T10460] netlink: 'syz.1.1945': attribute type 1 has an invalid length.
[  156.996860][T10460] bond2: entered promiscuous mode
[  156.999354][T10460] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.021253][T10460] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.024558][T10460] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  157.030210][T10460] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  157.035944][T10460] bond2: (slave vxcan3): making interface the new active one
[  157.039275][T10460] vxcan3: entered promiscuous mode
[  157.042256][T10460] bond2: (slave vxcan3): Enslaving as an active interface with an up link
[  157.104953][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1946'.
[  157.280385][T10473] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  157.496372][T10487] veth1: left promiscuous mode
[  157.499101][T10487] veth0_to_team: left promiscuous mode
[  157.501565][T10487] veth0_to_team: left allmulticast mode
[  157.566664][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  157.575549][T10490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  157.582605][T10490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  157.646827][T10497] netlink: 'syz.0.1959': attribute type 3 has an invalid length.
[  157.930778][T10513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.935021][T10513] syzkaller0: entered promiscuous mode
[  157.938271][T10513] syzkaller0: entered allmulticast mode
[  157.955181][T10513] tipc: Resetting bearer <eth:syzkaller0>
[  157.960006][T10512] tipc: Resetting bearer <eth:syzkaller0>
[  157.969038][T10512] tipc: Disabling bearer <eth:syzkaller0>
[  158.473737][T10527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.569214][T10533] syzkaller1: entered promiscuous mode
[  158.571557][T10533] syzkaller1: entered allmulticast mode
[  158.596610][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  158.644868][T10535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.742763][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'.
[  158.863436][T10555] geneve0: entered promiscuous mode
[  158.873981][ T5676] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  158.881048][ T5676] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  158.892271][ T5676] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  158.895317][ T5676] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  158.944115][T10560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.956111][T10560] syzkaller0: entered promiscuous mode
[  158.966611][T10560] syzkaller0: entered allmulticast mode
[  158.994194][T10560] tipc: Resetting bearer <eth:syzkaller0>
[  159.002390][T10558] tipc: Resetting bearer <eth:syzkaller0>
[  159.014663][T10558] tipc: Disabling bearer <eth:syzkaller0>
[  159.636732][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  159.865986][T10630] gretap2: entered promiscuous mode
[  160.393023][T10680] vlan0: entered promiscuous mode
[  160.686683][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  160.736015][T10702] __nla_validate_parse: 9 callbacks suppressed
[  160.736040][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'.
[  160.968533][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2046'.
[  161.669551][T10786] bond1: (slave gretap1): Releasing active interface
[  161.679030][T10786] bond2: (slave vxcan3): Releasing backup interface
[  161.681609][T10786] vxcan3: left promiscuous mode
[  161.726686][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  161.753665][T10787] netlink: 'syz.1.2058': attribute type 10 has an invalid length.
[  161.757140][T10787] bond0: (slave wlan1): refused to change device type
[  162.221871][T10789] team0: entered promiscuous mode
[  162.224402][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'.
[  162.315713][T10789] team0 (unregistering): left promiscuous mode
[  162.404859][T10798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2063'.
[  162.571589][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'.
[  162.756602][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.865309][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2087'.
[  163.016861][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'.
[  163.071042][T10863] bond0: (slave rose0): Enslaving as an active interface with an up link
[  163.575029][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2100'.
[  163.796620][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.286213][T10897] pim6reg1: entered promiscuous mode
[  164.294479][T10897] pim6reg1: entered allmulticast mode
[  164.836631][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.956655][T10932] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2124'.
[  164.962144][T10930] syzkaller0: entered promiscuous mode
[  164.964213][T10930] syzkaller0: entered allmulticast mode
[  164.979641][T10930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.987966][T10929] tipc: Resetting bearer <eth:syzkaller0>
[  165.127336][T10938] netlink: 'syz.0.2126': attribute type 1 has an invalid length.
[  165.876747][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  166.184930][T10929] tipc: Disabling bearer <eth:syzkaller0>
[  166.190853][T10938] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  166.305329][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2128'.
[  166.348081][T10949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  166.396629][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2133'.
[  166.412730][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2133'.
[  166.416832][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2133'.
[  166.503405][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'.
[  166.508880][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2137'.
[  166.520508][T10966] bridge0: port 1(vlan0) entered blocking state
[  166.523452][T10966] bridge0: port 1(vlan0) entered disabled state
[  166.526182][T10966] vlan0: entered allmulticast mode
[  166.529658][T10966] bridge0: entered allmulticast mode
[  166.534882][T10966] vlan0: left allmulticast mode
[  166.539470][T10966] bridge0: left allmulticast mode
[  166.772710][T10985] netlink: 'syz.1.2146': attribute type 1 has an invalid length.
[  166.887887][T10993] netlink: 11382 bytes leftover after parsing attributes in process `syz.1.2150'.
[  166.916682][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  167.032927][T11000] vlan0: left promiscuous mode
[  167.038443][T11000] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  167.041016][T11000] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  167.046260][T11000] bond0: left promiscuous mode
[  167.050206][T11000] macvlan2: left promiscuous mode
[  167.064020][T11000] ip6erspan0: left allmulticast mode
[  167.071427][T11000] hsr0: left allmulticast mode
[  167.073657][T11000] hsr_slave_0: left allmulticast mode
[  167.075843][T11000] hsr_slave_1: left allmulticast mode
[  167.078424][T11000] hsr0: left promiscuous mode
[  167.087145][T11000] macvlan3: left promiscuous mode
[  167.089262][T11000] macvlan3: left allmulticast mode
[  167.092991][T11005] netlink: 'syz.2.2155': attribute type 13 has an invalid length.
[  167.096175][T11005] netlink: 'syz.2.2155': attribute type 17 has an invalid length.
[  167.097003][T11000] bond2: left promiscuous mode
[  167.112273][T11000] gretap2: left promiscuous mode
[  167.129071][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.175990][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'.
[  167.247753][T11010] IPVS: Scheduler module ip_vs_ not found
[  167.250425][T11015] IPVS: length: 154 != 8
[  167.272360][T11003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.321469][T11005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.329231][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.337538][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.341841][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.356323][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'.
[  167.739767][T11031] netlink: 'syz.0.2165': attribute type 10 has an invalid length.
[  167.780895][T11031] team0: Port device dummy0 added
[  167.795899][T11032] netlink: 'syz.0.2165': attribute type 10 has an invalid length.
[  167.830260][T11032] team0: Port device dummy0 removed
[  167.833920][T11032] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  167.956750][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  168.044961][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'.
[  168.061144][T11043] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  168.519657][T11053] netlink: 'syz.1.2175': attribute type 3 has an invalid length.
[  168.979386][T11078] trusted_key: syz.2.2185 sent an empty control message without MSG_MORE.
[  168.996614][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  170.036619][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  171.086710][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  171.289930][T11163] netlink: 'syz.1.2220': attribute type 1 has an invalid length.
[  171.552848][T11179] netlink: 'syz.1.2226': attribute type 2 has an invalid length.
[  172.015567][T11213] netlink: 'syz.1.2243': attribute type 1 has an invalid length.
[  172.018833][T11213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2243'.
[  172.126637][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  172.868893][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2244'.
[  173.156637][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.294743][T11247] pimreg: entered allmulticast mode
[  173.387318][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2258'.
[  174.110025][T11290] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2274'.
[  174.158769][T11293] netlink: 'syz.0.2275': attribute type 10 has an invalid length.
[  174.183191][T11293] bond0: (slave dummy0): Releasing backup interface
[  174.196950][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  174.205775][T11293] team0: Port device dummy0 added
[  174.213424][T11295] netlink: 'syz.0.2275': attribute type 10 has an invalid length.
[  174.234721][T11295] team0: Port device dummy0 removed
[  174.245234][T11295] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  175.154068][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2285'.
[  175.160604][T11321] netlink: 'syz.0.2285': attribute type 4 has an invalid length.
[  175.246621][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  176.029199][T11238] Set syz1 is full, maxelem 65536 reached
[  176.286598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  176.442557][T11367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.448965][T11367] syzkaller0: entered promiscuous mode
[  176.451090][T11367] syzkaller0: entered allmulticast mode
[  176.476506][T11367] tipc: Resetting bearer <eth:syzkaller0>
[  176.482057][T11366] tipc: Resetting bearer <eth:syzkaller0>
[  176.499639][T11366] tipc: Disabling bearer <eth:syzkaller0>
[  176.605955][T11374] netlink: 'syz.2.2312': attribute type 11 has an invalid length.
[  176.739724][T11380] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  177.116130][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'.
[  177.119751][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2331'.
[  177.123302][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'.
[  177.128928][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2331'.
[  177.241196][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'.
[  177.244256][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'.
[  177.248754][T11422] netlink: 'syz.0.2335': attribute type 18 has an invalid length.
[  177.316743][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  177.673011][T11436] bridge0: port 1(erspan0) entered blocking state
[  177.675744][T11436] bridge0: port 1(erspan0) entered disabled state
[  177.689793][T11436] erspan0: entered allmulticast mode
[  177.696955][T11436] erspan0: entered promiscuous mode
[  177.713177][T11436] erspan0: left allmulticast mode
[  177.715151][T11436] erspan0: left promiscuous mode
[  177.721930][T11436] bridge0: port 1(erspan0) entered disabled state
[  177.887264][T11445] syzkaller1: entered promiscuous mode
[  177.889621][T11445] syzkaller1: entered allmulticast mode
[  177.925327][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2348'.
[  177.934267][T11450] IPv6: sit2: Disabled Multicast RS
[  177.940898][T11450] sit2: entered allmulticast mode
[  178.104192][T11463] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2355'.
[  178.356687][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  179.410197][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  179.841828][T11556] netlink: 'syz.0.2394': attribute type 32 has an invalid length.
[  179.932035][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2396'.
[  180.040357][T11575] netlink: 'syz.1.2402': attribute type 10 has an invalid length.
[  180.048998][T11572] netlink: 'syz.2.2401': attribute type 29 has an invalid length.
[  180.410132][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'.
[  180.417161][T11595] netlink: 'syz.1.2411': attribute type 4 has an invalid length.
[  180.436605][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  180.674639][T11609] netlink: 'syz.1.2418': attribute type 16 has an invalid length.
[  181.486747][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  181.792134][T11649] veth3: left promiscuous mode
[  181.795055][T11649] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  181.797965][T11649] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  181.800872][T11649] macsec2: left promiscuous mode
[  181.802936][T11649] macsec2: left allmulticast mode
[  181.809418][T11649] veth5: left promiscuous mode
[  181.823539][T11649] geneve0: left promiscuous mode
[  181.835900][T11673] netlink: set zone limit has 4 unknown bytes
[  181.856899][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.860421][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.863947][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.867696][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.871174][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.874565][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.890944][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.895021][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  182.526618][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  182.538580][T11718] __nla_validate_parse: 2 callbacks suppressed
[  182.538595][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'.
[  182.544072][T11718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2464'.
[  182.728110][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'.
[  182.731148][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'.
[  182.750650][T11728] Set syz1 is full, maxelem 65536 reached
[  183.192319][T11771] netlink: 'syz.1.2487': attribute type 7 has an invalid length.
[  183.194564][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  183.255883][T11771] 8021q: adding VLAN 0 to HW filter on device bond3
[  183.260608][T11771] bridge6: port 1(bond3) entered blocking state
[  183.263212][T11771] bridge6: port 1(bond3) entered disabled state
[  183.266152][T11771] bond3: entered allmulticast mode
[  183.288462][T11771] bridge6: port 1(bond3) entered blocking state
[  183.290648][T11771] bridge6: port 1(bond3) entered forwarding state
[  183.309426][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'.
[  183.312537][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'.
[  183.453570][T11788] xt_time: unknown flags 0xf4
[  183.469111][T11789] netlink: 'syz.1.2497': attribute type 23 has an invalid length.
[  183.556656][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  183.581015][T11803] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2503'.
[  183.653519][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2506'.
[  183.799156][T11817] netlink: 'syz.1.2503': attribute type 1 has an invalid length.
[  183.802898][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'.
[  183.807403][T11819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.883672][T11817] netlink: 'syz.1.2503': attribute type 1 has an invalid length.
[  183.942977][ T4066] bridge6: port 1(bond3) entered disabled state
[  184.596572][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  184.824190][T11847] netlink: 'syz.0.2521': attribute type 4 has an invalid length.
[  185.105083][T11867] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  185.646590][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  186.030934][T11920] tipc: Enabled bearer <eth:team0>, priority 10
[  186.677347][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  186.735551][T11980] ip6tnl1: entered promiscuous mode
[  186.756718][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[  186.873027][T11988] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  187.716719][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  187.731676][T12030] __nla_validate_parse: 10 callbacks suppressed
[  187.731692][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2606'.
[  187.853874][T12038] netlink: 'syz.0.2611': attribute type 29 has an invalid length.
[  187.858672][T12038] netlink: 'syz.0.2611': attribute type 29 has an invalid length.
[  187.862695][T12038] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2611'.
[  187.866322][T12038] ==================================================================
[  187.869078][T12038] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  187.871913][T12038] Read of size 4 at addr ffff88802729d744 by task syz.0.2611/12038
[  187.875861][T12038] 
[  187.876824][T12038] CPU: 1 UID: 0 PID: 12038 Comm: syz.0.2611 Not tainted syzkaller #0 PREEMPT(full) 
[  187.876843][T12038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.876853][T12038] Call Trace:
[  187.876870][T12038]  <TASK>
[  187.876878][T12038]  dump_stack_lvl+0x189/0x250
[  187.876900][T12038]  ? __kasan_check_byte+0x12/0x40
[  187.876920][T12038]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.876937][T12038]  ? lock_release+0x4b/0x3e0
[  187.876958][T12038]  ? __virt_addr_valid+0x4a5/0x5c0
[  187.876976][T12038]  print_report+0xca/0x240
[  187.876989][T12038]  ? xfrm_alloc_spi+0x570/0xf30
[  187.877003][T12038]  kasan_report+0x118/0x150
[  187.877023][T12038]  ? xfrm_alloc_spi+0x570/0xf30
[  187.877039][T12038]  xfrm_alloc_spi+0x570/0xf30
[  187.877053][T12038]  ? xfrm_alloc_spi+0x2a0/0xf30
[  187.877073][T12038]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  187.877087][T12038]  ? xfrm_find_acq+0x87/0xa0
[  187.877102][T12038]  xfrm_alloc_userspi+0x70b/0xc90
[  187.877131][T12038]  ? apparmor_capable+0x137/0x1b0
[  187.877148][T12038]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  187.877165][T12038]  ? __nla_parse+0x40/0x60
[  187.877186][T12038]  xfrm_user_rcv_msg+0x7a3/0xab0
[  187.877203][T12038]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  187.877231][T12038]  ? __pfx___mutex_trylock_common+0x10/0x10
[  187.877247][T12038]  ? rcu_is_watching+0x15/0xb0
[  187.877259][T12038]  ? trace_contention_end+0x39/0x120
[  187.877273][T12038]  ? __mutex_lock+0x335/0x1350
[  187.877295][T12038]  netlink_rcv_skb+0x208/0x470
[  187.877315][T12038]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  187.877331][T12038]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.877355][T12038]  ? netlink_deliver_tap+0x2e/0x1b0
[  187.877373][T12038]  ? netlink_deliver_tap+0x2e/0x1b0
[  187.877420][T12038]  xfrm_netlink_rcv+0x79/0x90
[  187.877437][T12038]  netlink_unicast+0x82f/0x9e0
[  187.877458][T12038]  ? __pfx_netlink_unicast+0x10/0x10
[  187.877475][T12038]  ? netlink_sendmsg+0x642/0xb30
[  187.877493][T12038]  ? skb_put+0x11b/0x210
[  187.877506][T12038]  netlink_sendmsg+0x805/0xb30
[  187.877528][T12038]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.877549][T12038]  ? aa_sock_msg_perm+0xf1/0x1d0
[  187.877561][T12038]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.877576][T12038]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.877596][T12038]  __sock_sendmsg+0x21c/0x270
[  187.877616][T12038]  ____sys_sendmsg+0x505/0x830
[  187.877632][T12038]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.877648][T12038]  ? import_iovec+0x74/0xa0
[  187.877665][T12038]  ___sys_sendmsg+0x21f/0x2a0
[  187.877679][T12038]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.877704][T12038]  ? __fget_files+0x2a/0x420
[  187.877723][T12038]  ? __fget_files+0x3a0/0x420
[  187.877745][T12038]  __x64_sys_sendmsg+0x19b/0x260
[  187.877759][T12038]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.877776][T12038]  ? rcu_is_watching+0x15/0xb0
[  187.877790][T12038]  ? do_syscall_64+0xbe/0x3b0
[  187.877811][T12038]  do_syscall_64+0xfa/0x3b0
[  187.877829][T12038]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.877846][T12038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.877860][T12038]  ? exc_page_fault+0x9f/0xf0
[  187.877878][T12038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.877891][T12038] RIP: 0033:0x7f838458ebe9
[  187.877905][T12038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.877918][T12038] RSP: 002b:00007f83853e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.877933][T12038] RAX: ffffffffffffffda RBX: 00007f83847b5fa0 RCX: 00007f838458ebe9
[  187.877944][T12038] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  187.877954][T12038] RBP: 00007f8384611e19 R08: 0000000000000000 R09: 0000000000000000
[  187.877963][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.877970][T12038] R13: 00007f83847b6038 R14: 00007f83847b5fa0 R15: 00007fff1b0f9dc8
[  187.877984][T12038]  </TASK>
[  187.877990][T12038] 
[  188.015960][T12038] Allocated by task 9060:
[  188.017646][T12038]  kasan_save_track+0x3e/0x80
[  188.019458][T12038]  __kasan_slab_alloc+0x6c/0x80
[  188.021056][T12038]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  188.022959][T12038]  xfrm_state_alloc+0x24/0x2f0
[  188.024612][T12038]  __find_acq_core+0x8a7/0x1c00
[  188.026254][T12038]  xfrm_find_acq+0x78/0xa0
[  188.027908][T12038]  xfrm_alloc_userspi+0x6b3/0xc90
[  188.029945][T12038]  xfrm_user_rcv_msg+0x7a3/0xab0
[  188.031879][T12038]  netlink_rcv_skb+0x208/0x470
[  188.033770][T12038]  xfrm_netlink_rcv+0x79/0x90
[  188.035556][T12038]  netlink_unicast+0x82f/0x9e0
[  188.037047][T12038]  netlink_sendmsg+0x805/0xb30
[  188.038552][T12038]  __sock_sendmsg+0x21c/0x270
[  188.040013][T12038]  ____sys_sendmsg+0x505/0x830
[  188.041665][T12038]  ___sys_sendmsg+0x21f/0x2a0
[  188.043273][T12038]  __x64_sys_sendmsg+0x19b/0x260
[  188.045182][T12038]  do_syscall_64+0xfa/0x3b0
[  188.046602][T12038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.048400][T12038] 
[  188.049143][T12038] Freed by task 9:
[  188.050475][T12038]  kasan_save_track+0x3e/0x80
[  188.052303][T12038]  kasan_save_free_info+0x46/0x50
[  188.054219][T12038]  __kasan_slab_free+0x5b/0x80
[  188.055646][T12038]  kmem_cache_free+0x18f/0x400
[  188.057105][T12038]  xfrm_state_gc_task+0x52d/0x6b0
[  188.058894][T12038]  process_scheduled_works+0xae1/0x17b0
[  188.061047][T12038]  worker_thread+0x8a0/0xda0
[  188.062893][T12038]  kthread+0x711/0x8a0
[  188.064509][T12038]  ret_from_fork+0x3fc/0x770
[  188.066334][T12038]  ret_from_fork_asm+0x1a/0x30
[  188.068070][T12038] 
[  188.068901][T12038] The buggy address belongs to the object at ffff88802729d680
[  188.068901][T12038]  which belongs to the cache xfrm_state of size 928
[  188.074435][T12038] The buggy address is located 196 bytes inside of
[  188.074435][T12038]  freed 928-byte region [ffff88802729d680, ffff88802729da20)
[  188.079330][T12038] 
[  188.080209][T12038] The buggy address belongs to the physical page:
[  188.082282][T12038] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802729d680 pfn:0x2729c
[  188.085857][T12038] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  188.088410][T12038] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  188.090823][T12038] page_type: f5(slab)
[  188.092113][T12038] raw: 00fff00000000040 ffff888104dfb640 dead000000000122 0000000000000000
[  188.095117][T12038] raw: ffff88802729d680 00000000800e0009 00000000f5000000 0000000000000000
[  188.097921][T12038] head: 00fff00000000040 ffff888104dfb640 dead000000000122 0000000000000000
[  188.101262][T12038] head: ffff88802729d680 00000000800e0009 00000000f5000000 0000000000000000
[  188.104616][T12038] head: 00fff00000000002 ffffea00009ca701 00000000ffffffff 00000000ffffffff
[  188.107938][T12038] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  188.111188][T12038] page dumped because: kasan: bad access detected
[  188.113350][T12038] page_owner tracks the page as allocated
[  188.115635][T12038] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6271, tgid 6270 (syz.2.148), ts 80453182331, free_ts 80334323777
[  188.122754][T12038]  post_alloc_hook+0x240/0x2a0
[  188.124625][T12038]  get_page_from_freelist+0x21e4/0x22c0
[  188.126425][T12038]  __alloc_frozen_pages_noprof+0x181/0x370
[  188.128444][T12038]  alloc_pages_mpol+0x232/0x4a0
[  188.130325][T12038]  allocate_slab+0x8a/0x370
[  188.132140][T12038]  ___slab_alloc+0xbeb/0x1410
[  188.133932][T12038]  kmem_cache_alloc_noprof+0x283/0x3c0
[  188.135812][T12038]  xfrm_state_alloc+0x24/0x2f0
[  188.137654][T12038]  xfrm_add_sa+0x17d1/0x4070
[  188.139329][T12038]  xfrm_user_rcv_msg+0x7a3/0xab0
[  188.140979][T12038]  netlink_rcv_skb+0x208/0x470
[  188.142805][T12038]  xfrm_netlink_rcv+0x79/0x90
[  188.144403][T12038]  netlink_unicast+0x82f/0x9e0
[  188.146187][T12038]  netlink_sendmsg+0x805/0xb30
[  188.147706][T12038]  __sock_sendmsg+0x21c/0x270
[  188.149202][T12038]  ____sys_sendmsg+0x505/0x830
[  188.151081][T12038] page last free pid 5872 tgid 5872 stack trace:
[  188.153343][T12038]  __free_frozen_pages+0xbc4/0xd30
[  188.154991][T12038]  __slab_free+0x303/0x3c0
[  188.156604][T12038]  qlist_free_all+0x97/0x140
[  188.158043][T12038]  kasan_quarantine_reduce+0x148/0x160
[  188.159862][T12038]  __kasan_slab_alloc+0x22/0x80
[  188.161800][T12038]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  188.163934][T12038]  getname_flags+0xb8/0x540
[  188.165538][T12038]  user_path_at+0x24/0x60
[  188.166977][T12038]  __x64_sys_umount+0xee/0x160
[  188.168709][T12038]  do_syscall_64+0xfa/0x3b0
[  188.170308][T12038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.172456][T12038] 
[  188.173241][T12038] Memory state around the buggy address:
[  188.175404][T12038]  ffff88802729d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.178598][T12038]  ffff88802729d680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.181168][T12038] >ffff88802729d700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.183724][T12038]                                            ^
[  188.185989][T12038]  ffff88802729d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.188948][T12038]  ffff88802729d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.192072][T12038] ==================================================================
[  188.195349][T12038] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  188.197870][T12038] CPU: 1 UID: 0 PID: 12038 Comm: syz.0.2611 Not tainted syzkaller #0 PREEMPT(full) 
[  188.200976][T12038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.204532][T12038] Call Trace:
[  188.205857][T12038]  <TASK>
[  188.206856][T12038]  dump_stack_lvl+0x99/0x250
[  188.208392][T12038]  ? __asan_memcpy+0x40/0x70
[  188.209757][T12038]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.211814][T12038]  ? __pfx__printk+0x10/0x10
[  188.213482][T12038]  vpanic+0x281/0x750
[  188.214902][T12038]  ? __pfx_vpanic+0x10/0x10
[  188.216426][T12038]  ? irqentry_exit+0x74/0x90
[  188.218046][T12038]  panic+0xb9/0xc0
[  188.219470][T12038]  ? __pfx_panic+0x10/0x10
[  188.221133][T12038]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  188.223307][T12038]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  188.225081][T12038]  ? xfrm_alloc_spi+0x570/0xf30
[  188.226511][T12038]  check_panic_on_warn+0x89/0xb0
[  188.228098][T12038]  ? xfrm_alloc_spi+0x570/0xf30
[  188.229746][T12038]  end_report+0x78/0x160
[  188.231127][T12038]  kasan_report+0x129/0x150
[  188.232839][T12038]  ? xfrm_alloc_spi+0x570/0xf30
[  188.234542][T12038]  xfrm_alloc_spi+0x570/0xf30
[  188.236054][T12038]  ? xfrm_alloc_spi+0x2a0/0xf30
[  188.237782][T12038]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  188.239624][T12038]  ? xfrm_find_acq+0x87/0xa0
[  188.241123][T12038]  xfrm_alloc_userspi+0x70b/0xc90
[  188.242903][T12038]  ? apparmor_capable+0x137/0x1b0
[  188.244880][T12038]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  188.246754][T12038]  ? __nla_parse+0x40/0x60
[  188.248067][T12038]  xfrm_user_rcv_msg+0x7a3/0xab0
[  188.249619][T12038]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.251672][T12038]  ? __pfx___mutex_trylock_common+0x10/0x10
[  188.253464][T12038]  ? rcu_is_watching+0x15/0xb0
[  188.254827][T12038]  ? trace_contention_end+0x39/0x120
[  188.256398][T12038]  ? __mutex_lock+0x335/0x1350
[  188.258163][T12038]  netlink_rcv_skb+0x208/0x470
[  188.260018][T12038]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.262110][T12038]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.264168][T12038]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.266197][T12038]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.268223][T12038]  xfrm_netlink_rcv+0x79/0x90
[  188.270079][T12038]  netlink_unicast+0x82f/0x9e0
[  188.271955][T12038]  ? __pfx_netlink_unicast+0x10/0x10
[  188.274046][T12038]  ? netlink_sendmsg+0x642/0xb30
[  188.275943][T12038]  ? skb_put+0x11b/0x210
[  188.277594][T12038]  netlink_sendmsg+0x805/0xb30
[  188.279406][T12038]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.281352][T12038]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.283300][T12038]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.285387][T12038]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.287458][T12038]  __sock_sendmsg+0x21c/0x270
[  188.289327][T12038]  ____sys_sendmsg+0x505/0x830
[  188.291187][T12038]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.293264][T12038]  ? import_iovec+0x74/0xa0
[  188.295070][T12038]  ___sys_sendmsg+0x21f/0x2a0
[  188.296978][T12038]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.299005][T12038]  ? __fget_files+0x2a/0x420
[  188.300730][T12038]  ? __fget_files+0x3a0/0x420
[  188.302624][T12038]  __x64_sys_sendmsg+0x19b/0x260
[  188.304564][T12038]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.306710][T12038]  ? rcu_is_watching+0x15/0xb0
[  188.308556][T12038]  ? do_syscall_64+0xbe/0x3b0
[  188.310418][T12038]  do_syscall_64+0xfa/0x3b0
[  188.312214][T12038]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.314252][T12038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.316795][T12038]  ? exc_page_fault+0x9f/0xf0
[  188.318608][T12038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.320804][T12038] RIP: 0033:0x7f838458ebe9
[  188.322544][T12038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.329836][T12038] RSP: 002b:00007f83853e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.333114][T12038] RAX: ffffffffffffffda RBX: 00007f83847b5fa0 RCX: 00007f838458ebe9
[  188.336131][T12038] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  188.339208][T12038] RBP: 00007f8384611e19 R08: 0000000000000000 R09: 0000000000000000
[  188.342301][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.345400][T12038] R13: 00007f83847b6038 R14: 00007f83847b5fa0 R15: 00007fff1b0f9dc8
[  188.348508][T12038]  </TASK>
[  188.350457][T12038] Kernel Offset: disabled
[  188.352195][T12038] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:52:35  Registers:
info registers vcpu 0

CPU#0
RAX=6b9c979085ff5500 RBX=ffffffff819683c8 RCX=6b9c979085ff5500 RDX=0000000000000001
RSI=ffffffff8d9b7844 RDI=ffffffff8be33680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38a30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c28e95a CR3=00000000272d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7c89387498 00007f7c89387470 XMM03=00007f7c893874a8 00007f7c893874a0
XMM04=00007f7c89eed100 00007f7c89387460 XMM05=00007f7c89387478 00007f7c893874c0
XMM06=00007f7c893874b8 00007f7c893874b0 XMM07=00007f7c893874a8 00007f7c893874a0
XMM08=68edf50da5592b73 0b6e1522c0670d6a XMM09=0000000000000000 00007f7c89212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015f5 RDI=00000000000015f6 RBP=00000000000003f8 RSP=ffffc900032869f0
R8 =ffff88801f230237 R9 =1ffff11003e46046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa915 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f83853e76c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3391fff8 CR3=000000010d614000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f71e4d87498 00007f71e4d87470 XMM03=00007f71e4d874a8 00007f71e4d874a0
XMM04=00007f71e58ed100 00007f71e4d87460 XMM05=00007f71e4d87478 00007f71e4d874c0
XMM06=00007f71e4d874b8 00007f71e4d874b0 XMM07=00007f71e4d874a8 00007f71e4d874a0
XMM08=0000000000000000 00007f71e4c12ee7 XMM09=0000000000000000 00007f71e4c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
