last executing test programs:

42.328894813s ago: executing program 0 (id=102):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8000, 0x5a7431a2, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

35.321761083s ago: executing program 0 (id=102):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8000, 0x5a7431a2, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

25.481288311s ago: executing program 0 (id=102):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8000, 0x5a7431a2, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

19.784491959s ago: executing program 0 (id=102):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8000, 0x5a7431a2, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

13.461244243s ago: executing program 0 (id=102):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8000, 0x5a7431a2, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

5.249284187s ago: executing program 0 (id=102):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8000, 0x5a7431a2, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

920.418934ms ago: executing program 2 (id=635):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
bind$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10)

788.611814ms ago: executing program 2 (id=637):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

667.862045ms ago: executing program 2 (id=639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x403, 0xfffffffa, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20044000)

589.988328ms ago: executing program 2 (id=641):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a3100000000050001"], 0x58}}, 0x0)

589.676162ms ago: executing program 2 (id=642):
socket(0x1e, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

517.593173ms ago: executing program 2 (id=645):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000000901010000000000000000000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff02000000000000000000000000000108000540000000000c000480080101400000000009000100"], 0x70}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0)
unshare(0x6a040000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

370.103894ms ago: executing program 1 (id=649):
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000000080)=@udp=r0}, 0x20)

308.125873ms ago: executing program 1 (id=650):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x3a, "87bdd28301505fb042435a3375a4c2a134161c6ffef08c0ea10f0d7c9ee9900a5c109f2e88a781374dae93972de7506e14fed35f912e88f60382"}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

250.284902ms ago: executing program 1 (id=651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r1, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0)

149.354477ms ago: executing program 1 (id=652):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r1, 0x20, 0x70bd25, 0x6, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

70.184787ms ago: executing program 1 (id=653):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x80000001, @mcast1, 0x48b4}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000000)

0s ago: executing program 1 (id=654):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x4c, 0x0, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket(0x10, 0x3, 0xc)
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20614' (ED25519) to the list of known hosts.
syzkaller login: [   48.433999][ T5764] cgroup: Unknown subsys name 'net'
[   48.528580][ T5764] cgroup: Unknown subsys name 'cpuset'
[   48.534021][ T5764] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.523200][ T5764] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.342702][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.345890][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.350292][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.353645][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.357424][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.460916][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.463882][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.474933][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.484248][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.496997][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.499903][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.502572][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.505888][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.508760][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.512137][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.616890][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.729639][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.732353][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.735800][ T5832] bridge_slave_0: entered allmulticast mode
[   55.738859][ T5832] bridge_slave_0: entered promiscuous mode
[   55.745199][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.747911][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.750755][ T5832] bridge_slave_1: entered allmulticast mode
[   55.755398][ T5832] bridge_slave_1: entered promiscuous mode
[   55.781893][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.798427][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.855256][ T5832] team0: Port device team_slave_0 added
[   55.862201][ T5832] team0: Port device team_slave_1 added
[   55.950870][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.953617][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.966257][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.971403][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   55.979733][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.982300][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.990604][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.021561][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   56.117024][ T5832] hsr_slave_0: entered promiscuous mode
[   56.119928][ T5832] hsr_slave_1: entered promiscuous mode
[   56.123100][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.126120][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.128270][ T5838] bridge_slave_0: entered allmulticast mode
[   56.131046][ T5838] bridge_slave_0: entered promiscuous mode
[   56.157238][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.160075][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.162328][ T5838] bridge_slave_1: entered allmulticast mode
[   56.166243][ T5838] bridge_slave_1: entered promiscuous mode
[   56.176874][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.179700][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.182370][ T5837] bridge_slave_0: entered allmulticast mode
[   56.186349][ T5837] bridge_slave_0: entered promiscuous mode
[   56.202148][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.215330][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.218143][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.220401][ T5837] bridge_slave_1: entered allmulticast mode
[   56.223183][ T5837] bridge_slave_1: entered promiscuous mode
[   56.228923][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.295015][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.307072][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.312046][ T5838] team0: Port device team_slave_0 added
[   56.317019][ T5838] team0: Port device team_slave_1 added
[   56.401300][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.403690][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.412961][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.420027][ T5837] team0: Port device team_slave_0 added
[   56.429259][ T5837] team0: Port device team_slave_1 added
[   56.437740][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.439934][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.447981][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.574384][ T5838] hsr_slave_0: entered promiscuous mode
[   56.577776][ T5838] hsr_slave_1: entered promiscuous mode
[   56.581468][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.586319][ T5838] Cannot create hsr debugfs directory
[   56.589127][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.591425][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.599946][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.643255][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.646272][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.655330][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.766026][ T5837] hsr_slave_0: entered promiscuous mode
[   56.768934][ T5837] hsr_slave_1: entered promiscuous mode
[   56.771571][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.774757][ T5837] Cannot create hsr debugfs directory
[   56.777214][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.807420][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.833608][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.846215][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.997962][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.013545][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.022379][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.032702][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.099824][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.109565][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.127586][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.145951][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.225016][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.277419][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   57.289135][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.297123][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.300149][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.321682][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   57.334986][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.337776][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.353455][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.356358][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.366174][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.388820][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.391742][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.414958][ T5835] Bluetooth: hci0: command tx timeout
[   57.420490][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   57.452184][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.455092][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.469630][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.472466][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.592246][ T5835] Bluetooth: hci1: command tx timeout
[   57.596683][   T54] Bluetooth: hci2: command tx timeout
[   57.650397][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.719938][ T5832] veth0_vlan: entered promiscuous mode
[   57.727883][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.753675][ T5832] veth1_vlan: entered promiscuous mode
[   57.761273][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.797694][ T5837] veth0_vlan: entered promiscuous mode
[   57.817337][ T5837] veth1_vlan: entered promiscuous mode
[   57.836553][ T5832] veth0_macvtap: entered promiscuous mode
[   57.864689][ T5832] veth1_macvtap: entered promiscuous mode
[   57.901527][ T5837] veth0_macvtap: entered promiscuous mode
[   57.913356][ T5838] veth0_vlan: entered promiscuous mode
[   57.935599][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.947706][ T5837] veth1_macvtap: entered promiscuous mode
[   57.955516][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.979059][ T5838] veth1_vlan: entered promiscuous mode
[   57.990921][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.993702][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.999303][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.002127][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.017315][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.031907][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.047467][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.050252][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.053032][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.056884][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.102373][ T5838] veth0_macvtap: entered promiscuous mode
[   58.138324][ T5838] veth1_macvtap: entered promiscuous mode
[   58.182025][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.195480][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.217005][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.234965][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.238405][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.238429][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.245926][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.249321][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.252922][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.260071][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.295244][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.298608][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.339424][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.342915][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.408388][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.419695][ T4614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.423064][ T4614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.473880][ T4614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.480454][ T4614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.568726][ T5904] Zero length message leads to an empty skb
[   58.791215][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   58.807111][ T5916] Bluetooth: MGMT ver 1.23
[   59.020571][ T5927] xt_hashlimit: max too large, truncated to 1048576
[   59.023962][ T5927] Cannot find add_set index 3 as target
[   59.462539][ T5947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.21'.
[   59.495431][   T54] Bluetooth: hci0: command tx timeout
[   59.635070][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   59.655196][   T54] Bluetooth: hci2: command tx timeout
[   59.664860][   T54] Bluetooth: hci1: command tx timeout
[   59.736268][ T5965] netlink: 'syz.0.29': attribute type 10 has an invalid length.
[   59.843002][ T5974] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET)
[   59.893181][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'.
[   59.996067][ T5986] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   60.003290][ T5986] netlink: 232 bytes leftover after parsing attributes in process `syz.0.40'.
[   60.016682][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   60.206668][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'.
[   60.903584][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.575033][   T54] Bluetooth: hci0: command tx timeout
[   61.734224][   T54] Bluetooth: hci1: command tx timeout
[   61.736023][ T5835] Bluetooth: hci2: command tx timeout
[   62.268939][ T6103] tipc: Started in network mode
[   62.270734][ T6103] tipc: Node identity 9ac018ab7be6, cluster identity 4711
[   62.273097][ T6103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.276480][ T6103] syzkaller0: entered promiscuous mode
[   62.278252][ T6103] syzkaller0: entered allmulticast mode
[   62.523865][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[   62.531017][ T6100] tipc: Resetting bearer <eth:syzkaller0>
[   62.607357][ T6100] tipc: Disabling bearer <eth:syzkaller0>
[   62.925975][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.989155][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.069889][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.197466][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.232391][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   63.240274][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'.
[   63.243460][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.247389][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.250688][ T6132] netlink: 52 bytes leftover after parsing attributes in process `syz.2.107'.
[   63.253687][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.261801][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.265495][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.581609][   T12] bridge_slave_1: left allmulticast mode
[   63.583580][   T12] bridge_slave_1: left promiscuous mode
[   63.588975][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.606090][   T12] bridge_slave_0: left allmulticast mode
[   63.608263][   T12] bridge_slave_0: left promiscuous mode
[   63.610328][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.665343][ T5835] Bluetooth: hci0: command tx timeout
[   63.815556][ T5835] Bluetooth: hci1: command tx timeout
[   64.125497][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.130397][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.137326][   T12] bond0 (unregistering): Released all slaves
[   64.162692][ T6179] __nla_validate_parse: 2 callbacks suppressed
[   64.162708][ T6179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'.
[   64.192355][ T6133] chnl_net:caif_netlink_parms(): no params data found
[   64.381297][ T6187] netlink: 136 bytes leftover after parsing attributes in process `syz.1.128'.
[   64.392458][ T6187] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   64.533657][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.539197][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.541931][ T6133] bridge_slave_0: entered allmulticast mode
[   64.544765][ T6133] bridge_slave_0: entered promiscuous mode
[   64.547930][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.550218][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.552407][ T6133] bridge_slave_1: entered allmulticast mode
[   64.555093][ T6133] bridge_slave_1: entered promiscuous mode
[   64.609245][   T12] hsr_slave_0: left promiscuous mode
[   64.616260][ T6206] netlink: 164 bytes leftover after parsing attributes in process `syz.1.134'.
[   64.619960][   T12] hsr_slave_1: left promiscuous mode
[   64.622152][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.629329][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.637521][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.640436][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.666088][   T12] veth1_macvtap: left promiscuous mode
[   64.668152][   T12] veth0_macvtap: left promiscuous mode
[   64.669919][   T12] veth1_vlan: left promiscuous mode
[   64.671814][   T12] veth0_vlan: left promiscuous mode
[   65.030287][   T12] team0 (unregistering): Port device team_slave_1 removed
[   65.053690][   T12] team0 (unregistering): Port device team_slave_0 removed
[   65.344872][ T5835] Bluetooth: hci2: command tx timeout
[   65.354972][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.387889][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.467794][ T6133] team0: Port device team_slave_0 added
[   65.471962][ T6133] team0: Port device team_slave_1 added
[   65.626652][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.629135][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.654306][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.675109][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.677345][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.739945][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.844284][ T6240] warning: `syz.2.146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.853477][ T6133] hsr_slave_0: entered promiscuous mode
[   65.855980][ T6133] hsr_slave_1: entered promiscuous mode
[   65.858358][ T6133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.861529][ T6133] Cannot create hsr debugfs directory
[   65.898776][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'.
[   66.878137][ T6256] netlink: 92 bytes leftover after parsing attributes in process `syz.1.148'.
[   66.880860][ T6256] tc_dump_action: action bad kind
[   67.366024][ T6133] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.383120][ T6133] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.420038][ T6133] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.431543][ T5835] Bluetooth: hci2: command tx timeout
[   67.446361][ T6133] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.578350][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.606133][ T6133] 8021q: adding VLAN 0 to HW filter on device team0
[   67.616085][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.618823][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.638120][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.640405][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.918040][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.988780][ T6133] veth0_vlan: entered promiscuous mode
[   68.015972][ T6133] veth1_vlan: entered promiscuous mode
[   68.046770][ T6133] veth0_macvtap: entered promiscuous mode
[   68.062076][ T6133] veth1_macvtap: entered promiscuous mode
[   68.081545][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.093713][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.107776][ T6133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.116686][ T6133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.122934][ T6133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.130452][ T6133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.253296][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.265622][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.301784][ T6322] netlink: 268 bytes leftover after parsing attributes in process `syz.2.165'.
[   68.310971][ T6322] unsupported nla_type 65024
[   68.312611][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.317472][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.730842][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'.
[   68.733843][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'.
[   68.754300][ T6350] netlink: 'syz.2.174': attribute type 20 has an invalid length.
[   68.863654][ T6357] netlink: 'syz.1.177': attribute type 3 has an invalid length.
[   69.340333][ T6388] netlink: 76 bytes leftover after parsing attributes in process `syz.2.192'.
[   69.465484][ T6398] ieee802154 phy0 wpan0: encryption failed: -22
[   69.650608][ T6406] tipc: MTU too low for tipc bearer
[   69.731860][ T6411] tipc: Started in network mode
[   69.738272][ T6411] tipc: Node identity 7, cluster identity 4711
[   69.743675][ T6411] tipc: Node number set to 7
[   69.933175][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.222716][ T6428] netlink: 348 bytes leftover after parsing attributes in process `syz.1.208'.
[   70.370402][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.378631][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.382683][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.391588][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.395134][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.538442][ T6438] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[   70.645141][ T6433] chnl_net:caif_netlink_parms(): no params data found
[   70.775288][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.777922][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.780146][ T6433] bridge_slave_0: entered allmulticast mode
[   70.789451][ T6433] bridge_slave_0: entered promiscuous mode
[   70.794328][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.796559][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.798815][ T6433] bridge_slave_1: entered allmulticast mode
[   70.801592][ T6433] bridge_slave_1: entered promiscuous mode
[   70.865700][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.886006][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.981372][ T6433] team0: Port device team_slave_0 added
[   71.003340][ T6433] team0: Port device team_slave_1 added
[   71.034859][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.037498][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.049273][ T6459] netlink: 'syz.1.219': attribute type 3 has an invalid length.
[   71.052984][ T6459] netlink: 'syz.1.219': attribute type 3 has an invalid length.
[   71.142455][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.167212][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.169926][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.183982][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.195731][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.198422][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.211658][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.308432][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.329265][ T6433] hsr_slave_0: entered promiscuous mode
[   71.332504][ T6433] hsr_slave_1: entered promiscuous mode
[   71.352157][ T6433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.361279][ T6433] Cannot create hsr debugfs directory
[   71.402158][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.481759][ T6478] ip6gre1: entered promiscuous mode
[   71.804403][ T6495] netlink: 'syz.2.234': attribute type 11 has an invalid length.
[   71.807092][ T6495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.234'.
[   71.822726][ T5863] bridge_slave_1: left allmulticast mode
[   71.825136][ T5863] bridge_slave_1: left promiscuous mode
[   71.826938][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.834013][ T5863] bridge_slave_0: left allmulticast mode
[   71.842385][ T5863] bridge_slave_0: left promiscuous mode
[   71.847869][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.162993][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.168904][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.173874][ T5863] bond0 (unregistering): Released all slaves
[   72.468334][   T54] Bluetooth: hci2: command tx timeout
[   72.642682][ T5863] hsr_slave_0: left promiscuous mode
[   72.657137][ T5863] hsr_slave_1: left promiscuous mode
[   72.659441][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.661645][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.668398][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.676375][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.700543][ T5863] veth1_macvtap: left promiscuous mode
[   72.702280][ T5863] veth0_macvtap: left promiscuous mode
[   72.704003][ T5863] veth1_vlan: left promiscuous mode
[   72.707474][ T5863] veth0_vlan: left promiscuous mode
[   73.080068][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   73.107313][ T5863] team0 (unregistering): Port device team_slave_0 removed
[   73.350657][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'.
[   73.485807][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'.
[   73.593428][ T6433] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.649854][ T6433] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.681914][ T6433] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.700786][ T6433] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.057767][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.172084][ T6433] 8021q: adding VLAN 0 to HW filter on device team0
[   74.217597][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.220520][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.247887][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.250669][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.373691][ T6583] netlink: 'syz.2.259': attribute type 21 has an invalid length.
[   74.402692][ T6583] netlink: 128 bytes leftover after parsing attributes in process `syz.2.259'.
[   74.411566][ T6583] netlink: 3 bytes leftover after parsing attributes in process `syz.2.259'.
[   74.477386][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'.
[   74.535732][   T54] Bluetooth: hci2: command tx timeout
[   74.566079][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.653500][ T6433] veth0_vlan: entered promiscuous mode
[   74.677031][ T6433] veth1_vlan: entered promiscuous mode
[   74.708237][ T6604] netlink: 720 bytes leftover after parsing attributes in process `syz.2.264'.
[   74.738202][ T6604] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   74.742178][ T6604] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   74.767365][ T6433] veth0_macvtap: entered promiscuous mode
[   74.795805][ T6433] veth1_macvtap: entered promiscuous mode
[   74.877945][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.912329][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.938322][ T6433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.954480][ T6433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.958019][ T6433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.961424][ T6433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.045293][ T6619] netlink: 'syz.1.268': attribute type 30 has an invalid length.
[   75.163494][ T4614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.170283][ T4614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.207318][ T4614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.210927][ T4614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.507087][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.715610][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.096324][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.236033][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.714383][ T5863] bridge_slave_1: left allmulticast mode
[   78.716673][ T5863] bridge_slave_1: left promiscuous mode
[   78.719084][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.785319][ T5863] bridge_slave_0: left allmulticast mode
[   78.787643][ T5863] bridge_slave_0: left promiscuous mode
[   78.790031][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.944992][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.979705][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.989457][ T5863] bond0 (unregistering): Released all slaves
[   80.156370][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.163769][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.168792][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.172849][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.175982][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.426080][ T5863] hsr_slave_0: left promiscuous mode
[   80.428918][ T5863] hsr_slave_1: left promiscuous mode
[   80.433038][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.436884][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.439578][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.441889][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.465063][ T5863] veth1_macvtap: left promiscuous mode
[   80.467449][ T5863] veth0_macvtap: left promiscuous mode
[   80.469646][ T5863] veth1_vlan: left promiscuous mode
[   80.471704][ T5863] veth0_vlan: left promiscuous mode
[   80.798730][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   80.828244][ T5863] team0 (unregistering): Port device team_slave_0 removed
[   81.265837][    T9] cfg80211: failed to load regulatory.db
[   81.280191][ T6665] chnl_net:caif_netlink_parms(): no params data found
[   81.619708][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.623325][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.628055][ T6665] bridge_slave_0: entered allmulticast mode
[   81.631842][ T6665] bridge_slave_0: entered promiscuous mode
[   81.649157][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.652578][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.665691][ T6665] bridge_slave_1: entered allmulticast mode
[   81.674749][ T6665] bridge_slave_1: entered promiscuous mode
[   81.749097][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.756741][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.838745][ T6665] team0: Port device team_slave_0 added
[   81.859933][ T6665] team0: Port device team_slave_1 added
[   81.958245][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.960946][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.977822][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.986255][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.988805][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.996804][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.130765][ T6665] hsr_slave_0: entered promiscuous mode
[   82.133908][ T6665] hsr_slave_1: entered promiscuous mode
[   82.139456][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.142462][ T6665] Cannot create hsr debugfs directory
[   82.222864][ T5835] Bluetooth: hci2: command tx timeout
[   82.431552][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[   82.597166][ T6764] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   82.913457][ T6665] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.928671][ T6665] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.938718][ T6665] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.953542][ T6665] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.989546][ T6784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.999722][ T6784] syzkaller0: entered promiscuous mode
[   83.001973][ T6784] syzkaller0: entered allmulticast mode
[   83.031686][ T6784] tipc: Resetting bearer <eth:syzkaller0>
[   83.040161][ T6783] tipc: Resetting bearer <eth:syzkaller0>
[   83.060109][ T6783] tipc: Disabling bearer <eth:syzkaller0>
[   83.165840][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.187770][ T6665] 8021q: adding VLAN 0 to HW filter on device team0
[   83.205234][  T176] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.208176][  T176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.233608][  T176] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.236794][  T176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.543579][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.600445][ T6665] veth0_vlan: entered promiscuous mode
[   83.612803][ T6665] veth1_vlan: entered promiscuous mode
[   83.633192][ T6665] veth0_macvtap: entered promiscuous mode
[   83.642710][ T6665] veth1_macvtap: entered promiscuous mode
[   83.672113][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.689248][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.700398][ T6665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.715970][ T6665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.719413][ T6665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.722928][ T6665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.864973][  T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.867329][  T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.908826][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.911493][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.477182][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'.
[   84.637445][ T6888] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   84.639873][ T6888] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   84.775229][ T6898] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   84.786260][ T6900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.359'.
[   85.216259][ T6922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.369'.
[   85.219609][ T6922] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   85.389592][ T5851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.227525][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.231042][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.234318][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.238252][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.241322][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.245351][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'.
[   86.498142][ T5851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.574785][ T6954] chnl_net:caif_netlink_parms(): no params data found
[   86.638113][ T6974] xt_CT: No such helper "snmp"
[   86.647866][ T6981] netlink: 'syz.1.393': attribute type 1 has an invalid length.
[   86.650598][ T6981] netlink: 'syz.1.393': attribute type 2 has an invalid length.
[   86.711740][ T6983] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   86.720093][ T6983] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   86.727301][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.733040][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.739587][ T6954] bridge_slave_0: entered allmulticast mode
[   86.747881][ T6954] bridge_slave_0: entered promiscuous mode
[   86.771745][ T5851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.781254][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.785722][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.790368][ T6954] bridge_slave_1: entered allmulticast mode
[   86.795059][ T6954] bridge_slave_1: entered promiscuous mode
[   86.862068][ T5851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.881796][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.890551][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.932418][ T6954] team0: Port device team_slave_0 added
[   86.941148][ T6954] team0: Port device team_slave_1 added
[   86.950467][ T6988] sctp: [Deprecated]: syz.2.396 (pid 6988) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.950467][ T6988] Use struct sctp_sack_info instead
[   86.983778][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.990986][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.005512][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.045059][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.047303][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.064639][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.125047][ T5851] bridge_slave_1: left allmulticast mode
[   87.126994][ T5851] bridge_slave_1: left promiscuous mode
[   87.129219][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.139845][ T5851] bridge_slave_0: left allmulticast mode
[   87.142158][ T5851] bridge_slave_0: left promiscuous mode
[   87.146898][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.452937][ T5851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.460336][ T5851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.464696][ T5851] bond0 (unregistering): Released all slaves
[   87.486693][ T6954] hsr_slave_0: entered promiscuous mode
[   87.489057][ T6954] hsr_slave_1: entered promiscuous mode
[   87.491366][ T6954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.493759][ T6954] Cannot create hsr debugfs directory
[   87.752813][ T6323] IPVS: starting estimator thread 0...
[   87.855327][ T7010] IPVS: using max 62 ests per chain, 148800 per kthread
[   87.873816][ T5851] hsr_slave_0: left promiscuous mode
[   87.887103][ T5851] hsr_slave_1: left promiscuous mode
[   87.889989][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.892820][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.916027][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.919028][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.940489][ T5851] veth1_macvtap: left promiscuous mode
[   87.942439][ T5851] veth0_macvtap: left promiscuous mode
[   87.948753][ T5851] veth1_vlan: left promiscuous mode
[   87.950466][ T5851] veth0_vlan: left promiscuous mode
[   88.303835][ T5851] team0 (unregistering): Port device team_slave_1 removed
[   88.305048][ T5835] Bluetooth: hci2: command tx timeout
[   88.335523][ T5851] team0 (unregistering): Port device team_slave_0 removed
[   88.626213][ T7020] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   89.079629][ T6954] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.098439][ T6954] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.116568][ T6954] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.129276][ T6954] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.270643][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.301742][ T6954] 8021q: adding VLAN 0 to HW filter on device team0
[   89.335651][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.338743][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.352948][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.355870][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.607554][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.668857][ T6954] veth0_vlan: entered promiscuous mode
[   89.680225][ T6954] veth1_vlan: entered promiscuous mode
[   89.692699][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'.
[   89.699213][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'.
[   89.720464][ T6954] veth0_macvtap: entered promiscuous mode
[   89.728327][ T6954] veth1_macvtap: entered promiscuous mode
[   89.742159][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.753299][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.765880][ T6954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.769362][ T6954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.772772][ T6954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.781832][ T6954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.838017][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.845792][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.870546][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.873009][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.895428][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[   89.898882][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[   89.936299][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[   90.043684][ T7113] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   90.052662][ T7113] netlink: 'syz.2.441': attribute type 2 has an invalid length.
[   90.258687][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.589533][ T7155] 8021q: VLANs not supported on wg0
[   91.687827][ T5851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.441588][ T7208] syzkaller0: entered promiscuous mode
[   92.443366][ T7208] syzkaller0: entered allmulticast mode
[   92.636570][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.640152][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.651452][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.660195][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.669409][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.760744][ T7212] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   93.993485][ T7226] unknown channel width for channel at 909000KHz?
[   94.001480][ T7226] unknown channel width for channel at 909000KHz?
[   94.036566][ T7213] chnl_net:caif_netlink_parms(): no params data found
[   94.225887][ T5851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.260878][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.263148][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.274330][ T7213] bridge_slave_0: entered allmulticast mode
[   94.277731][ T7213] bridge_slave_0: entered promiscuous mode
[   94.326547][ T5851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.332679][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.493'.
[   94.345594][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'.
[   94.361252][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.367124][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.370133][ T7213] bridge_slave_1: entered allmulticast mode
[   94.377021][ T7213] bridge_slave_1: entered promiscuous mode
[   94.411354][ T5851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.442514][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.453055][ T7259] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.453610][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.536634][ T7213] team0: Port device team_slave_0 added
[   94.575642][ T7213] team0: Port device team_slave_1 added
[   94.638744][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.640963][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.653783][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.678411][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.680514][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.689728][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.701343][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'.
[   94.726426][ T7273] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[   94.729934][ T7273] netlink: 244 bytes leftover after parsing attributes in process `syz.2.502'.
[   94.740391][ T7213] hsr_slave_0: entered promiscuous mode
[   94.742797][ T7213] hsr_slave_1: entered promiscuous mode
[   94.745399][ T7213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.747700][ T7213] Cannot create hsr debugfs directory
[   94.776265][ T5835] Bluetooth: hci2: command tx timeout
[   94.794311][ T5851] bridge_slave_1: left allmulticast mode
[   94.796244][ T5851] bridge_slave_1: left promiscuous mode
[   94.798221][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.808451][ T5851] bridge_slave_0: left allmulticast mode
[   94.810433][ T5851] bridge_slave_0: left promiscuous mode
[   94.812398][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.836013][ T7277] netlink: 'syz.2.504': attribute type 7 has an invalid length.
[   95.023914][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.507'.
[   95.246213][ T5851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.253529][ T5851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.258825][ T5851] bond0 (unregistering): Released all slaves
[   95.518805][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'.
[   95.521859][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'.
[   95.723479][ T5851] hsr_slave_0: left promiscuous mode
[   95.726669][ T5851] hsr_slave_1: left promiscuous mode
[   95.728767][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.731128][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.734998][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.737502][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.749762][ T5851] veth1_macvtap: left promiscuous mode
[   95.751561][ T5851] veth0_macvtap: left promiscuous mode
[   95.753440][ T5851] veth1_vlan: left promiscuous mode
[   95.756491][ T5851] veth0_vlan: left promiscuous mode
[   96.165902][ T5851] team0 (unregistering): Port device team_slave_1 removed
[   96.207311][ T5851] team0 (unregistering): Port device team_slave_0 removed
[   96.860743][ T5835] Bluetooth: hci2: command tx timeout
[   97.030463][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[   97.127611][ T7213] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.136607][ T7213] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.145318][ T7213] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.150783][ T7213] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.183941][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[   97.209590][ T7345] gretap0: entered promiscuous mode
[   97.250977][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.328322][ T7213] 8021q: adding VLAN 0 to HW filter on device team0
[   97.353397][  T176] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.356565][  T176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.386743][  T176] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.389669][  T176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.447656][ T7363] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.642035][ T7378] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   97.735325][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.805114][ T7387] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551604)
[   97.810049][ T7387] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   97.826131][ T7213] veth0_vlan: entered promiscuous mode
[   97.857437][ T7213] veth1_vlan: entered promiscuous mode
[   97.916217][ T7213] veth0_macvtap: entered promiscuous mode
[   97.933633][ T7213] veth1_macvtap: entered promiscuous mode
[   97.972189][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.993336][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.999882][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'.
[   98.016594][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'.
[   98.034554][ T7213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.042545][ T7213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.046498][ T7213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.053454][ T7213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.073189][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[   98.214010][  T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.230393][  T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.276703][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.280798][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.350070][ T7415] IPv6: sit1: Disabled Multicast RS
[   98.636658][ T7436] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   99.903465][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.015954][ T7513] __nla_validate_parse: 4 callbacks suppressed
[  100.015969][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'.
[  100.770523][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  100.773659][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  100.793492][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  100.897306][ T7545] C: renamed from team_slave_0 (while UP)
[  100.908716][ T7545] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  100.918593][ T7545] netlink: 128 bytes leftover after parsing attributes in process `syz.2.593'.
[  100.921404][ T7545] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  100.940585][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.946532][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.950391][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.968212][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.971506][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.262143][ T7548] chnl_net:caif_netlink_parms(): no params data found
[  101.342754][ T7578] ieee802154 phy0 wpan0: encryption failed: -22
[  101.415500][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.423235][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.428262][ T7548] bridge_slave_0: entered allmulticast mode
[  101.432248][ T7548] bridge_slave_0: entered promiscuous mode
[  101.437890][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.440739][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.443769][ T7548] bridge_slave_1: entered allmulticast mode
[  101.450286][ T7548] bridge_slave_1: entered promiscuous mode
[  101.499493][ T7590] x_tables: duplicate underflow at hook 2
[  101.500542][ T7589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  101.578509][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.593039][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.611002][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.687438][ T7548] team0: Port device team_slave_0 added
[  101.691916][ T7548] team0: Port device team_slave_1 added
[  101.706151][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.741884][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.747000][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.758969][ T7548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.768690][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.771404][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.782004][ T7548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.807355][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.879483][ T7548] hsr_slave_0: entered promiscuous mode
[  101.882887][ T7548] hsr_slave_1: entered promiscuous mode
[  101.888756][ T7548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.892019][ T7548] Cannot create hsr debugfs directory
[  101.895215][ T7602] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[  102.068995][   T12] bridge_slave_1: left allmulticast mode
[  102.071327][   T12] bridge_slave_1: left promiscuous mode
[  102.073789][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.082355][   T12] bridge_slave_0: left allmulticast mode
[  102.085865][   T12] bridge_slave_0: left promiscuous mode
[  102.088304][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.491880][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.500076][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.509110][   T12] bond0 (unregistering): Released all slaves
[  102.603454][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[  102.621261][ T7617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.617'.
[  102.892523][ T7633] netlink: 'syz.1.623': attribute type 21 has an invalid length.
[  102.908939][ T7633] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.912324][ T7633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  102.915541][ T7633] IPv6: NLM_F_CREATE should be set when creating new route
[  102.918362][ T7633] IPv6: NLM_F_CREATE should be set when creating new route
[  102.921605][ T7633] IPv6: NLM_F_CREATE should be set when creating new route
[  103.017065][   T54] Bluetooth: hci2: command tx timeout
[  103.041185][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[  103.070828][   T12] hsr_slave_0: left promiscuous mode
[  103.076717][   T12] hsr_slave_1: left promiscuous mode
[  103.079429][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.090086][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.093959][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.100140][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.138367][   T12] veth1_macvtap: left promiscuous mode
[  103.140662][   T12] veth0_macvtap: left promiscuous mode
[  103.142943][   T12] veth1_vlan: left promiscuous mode
[  103.145857][   T12] veth0_vlan: left promiscuous mode
[  103.567943][   T12] team0 (unregistering): Port device team_slave_1 removed
[  103.599792][   T12] team0 (unregistering): Port device team_slave_0 removed
[  103.911609][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'.
[  104.367751][ T7548] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.385895][ T7548] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.404388][ T7548] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.447269][ T7548] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  104.568575][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.587764][ T7548] 8021q: adding VLAN 0 to HW filter on device team0
[  104.596570][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.598831][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.620327][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.622600][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.651857][ T7692] netlink: 'syz.2.645': attribute type 2 has an invalid length.
[  104.663437][ T7692] netlink: 'syz.2.645': attribute type 1 has an invalid length.
[  104.668477][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[  104.678800][ T7548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  104.682671][ T7548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.706969][ T7698] trusted_key: syz.1.648 sent an empty control message without MSG_MORE.
[  104.890983][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.972858][ T7548] veth0_vlan: entered promiscuous mode
[  104.992063][ T7712] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  104.997248][ T7548] veth1_vlan: entered promiscuous mode
[  105.048740][ T7548] veth0_macvtap: entered promiscuous mode
[  105.053569][ T7548] veth1_macvtap: entered promiscuous mode
[  105.064883][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.077152][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.087382][ T7548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.093940][ T7548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.097111][   T54] Bluetooth: hci2: command tx timeout
[  105.101022][ T7548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.106704][ T7548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.114972][ T7717] !: renamed from dummy0 (while UP)
[  105.211826][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.216919][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.248235][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.250893][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.557302][ T7591] ==================================================================
[  105.560574][ T7591] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  105.562770][ T7591] Read of size 8 at addr ffff88802b9500a0 by task khidpd_15c25886/7591
[  105.567116][ T7591] 
[  105.568116][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: khidpd_15c25886 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  105.568147][ T7591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.568157][ T7591] Call Trace:
[  105.568165][ T7591]  <TASK>
[  105.568172][ T7591]  dump_stack_lvl+0x189/0x250
[  105.568194][ T7591]  ? __virt_addr_valid+0x1c8/0x5c0
[  105.568213][ T7591]  ? rcu_is_watching+0x15/0xb0
[  105.568230][ T7591]  ? __kasan_check_byte+0x12/0x40
[  105.568247][ T7591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.568262][ T7591]  ? rcu_is_watching+0x15/0xb0
[  105.568277][ T7591]  ? lock_release+0x4b/0x3e0
[  105.568293][ T7591]  ? __virt_addr_valid+0x1c8/0x5c0
[  105.568309][ T7591]  ? __virt_addr_valid+0x4a5/0x5c0
[  105.568326][ T7591]  print_report+0xd2/0x2b0
[  105.568340][ T7591]  ? __mutex_lock+0x738/0xe80
[  105.568353][ T7591]  kasan_report+0x118/0x150
[  105.568370][ T7591]  ? __mutex_lock+0x738/0xe80
[  105.568385][ T7591]  __mutex_lock+0x738/0xe80
[  105.568398][ T7591]  ? __mutex_lock+0x51b/0xe80
[  105.568417][ T7591]  ? l2cap_unregister_user+0x6a/0x1b0
[  105.568441][ T7591]  ? __pfx___mutex_lock+0x10/0x10
[  105.568487][ T7591]  ? __pfx___timer_delete_sync+0x10/0x10
[  105.568509][ T7591]  l2cap_unregister_user+0x6a/0x1b0
[  105.568531][ T7591]  hidp_session_thread+0x3c9/0x410
[  105.568546][ T7591]  ? __pfx_hidp_session_thread+0x10/0x10
[  105.568559][ T7591]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  105.568578][ T7591]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  105.568593][ T7591]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  105.568606][ T7591]  ? __kthread_parkme+0x7b/0x200
[  105.568624][ T7591]  ? __kthread_parkme+0x1a1/0x200
[  105.568639][ T7591]  kthread+0x711/0x8a0
[  105.568654][ T7591]  ? __pfx_hidp_session_thread+0x10/0x10
[  105.568667][ T7591]  ? __pfx_kthread+0x10/0x10
[  105.568683][ T7591]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.568699][ T7591]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.568716][ T7591]  ? __pfx_kthread+0x10/0x10
[  105.568732][ T7591]  ret_from_fork+0x3fc/0x770
[  105.568745][ T7591]  ? __pfx_ret_from_fork+0x10/0x10
[  105.568759][ T7591]  ? __switch_to_asm+0x39/0x70
[  105.568774][ T7591]  ? __switch_to_asm+0x33/0x70
[  105.568788][ T7591]  ? __pfx_kthread+0x10/0x10
[  105.568805][ T7591]  ret_from_fork_asm+0x1a/0x30
[  105.568827][ T7591]  </TASK>
[  105.568832][ T7591] 
[  105.656317][ T7591] Allocated by task 7548:
[  105.658056][ T7591]  kasan_save_track+0x3e/0x80
[  105.659943][ T7591]  __kasan_kmalloc+0x93/0xb0
[  105.661786][ T7591]  __kmalloc_noprof+0x27a/0x4f0
[  105.663671][ T7591]  hci_alloc_dev_priv+0x28/0x2040
[  105.665606][ T7591]  vhci_create_device+0x120/0x6e0
[  105.667611][ T7591]  vhci_write+0x3ce/0x4a0
[  105.669335][ T7591]  vfs_write+0x54b/0xa90
[  105.670977][ T7591]  ksys_write+0x145/0x250
[  105.672699][ T7591]  do_syscall_64+0xfa/0x3b0
[  105.674523][ T7591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.676867][ T7591] 
[  105.677839][ T7591] Freed by task 7548:
[  105.679361][ T7591]  kasan_save_track+0x3e/0x80
[  105.681192][ T7591]  kasan_save_free_info+0x46/0x50
[  105.683210][ T7591]  __kasan_slab_free+0x62/0x70
[  105.685080][ T7591]  kfree+0x18e/0x440
[  105.686608][ T7591]  bt_host_release+0x82/0x90
[  105.688420][ T7591]  device_release+0x9c/0x1c0
[  105.690279][ T7591]  kobject_put+0x22b/0x480
[  105.692078][ T7591]  vhci_release+0x88/0xd0
[  105.693813][ T7591]  __fput+0x44c/0xa70
[  105.695381][ T7591]  task_work_run+0x1d4/0x260
[  105.697175][ T7591]  do_exit+0x6b5/0x22e0
[  105.698796][ T7591]  do_group_exit+0x21c/0x2d0
[  105.700582][ T7591]  __x64_sys_exit_group+0x3f/0x40
[  105.702509][ T7591]  x64_sys_call+0x21ba/0x21c0
[  105.704313][ T7591]  do_syscall_64+0xfa/0x3b0
[  105.706084][ T7591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.708410][ T7591] 
[  105.709345][ T7591] Last potentially related work creation:
[  105.711535][ T7591]  kasan_save_stack+0x3e/0x60
[  105.713384][ T7591]  kasan_record_aux_stack+0xbd/0xd0
[  105.715481][ T7591]  insert_work+0x3d/0x330
[  105.717197][ T7591]  __queue_work+0xbd9/0xfe0
[  105.719037][ T7591]  queue_work_on+0x181/0x270
[  105.720876][ T7591]  process_scheduled_works+0xae1/0x17b0
[  105.723007][ T7591]  worker_thread+0x8a0/0xda0
[  105.724919][ T7591]  kthread+0x711/0x8a0
[  105.726522][ T7591]  ret_from_fork+0x3fc/0x770
[  105.728298][ T7591]  ret_from_fork_asm+0x1a/0x30
[  105.730116][ T7591] 
[  105.731032][ T7591] Second to last potentially related work creation:
[  105.733505][ T7591]  kasan_save_stack+0x3e/0x60
[  105.735281][ T7591]  kasan_record_aux_stack+0xbd/0xd0
[  105.737312][ T7591]  insert_work+0x3d/0x330
[  105.738974][ T7591]  __queue_work+0xcfc/0xfe0
[  105.740720][ T7591]  call_timer_fn+0x17e/0x5f0
[  105.742503][ T7591]  __run_timer_base+0x646/0x860
[  105.744329][ T7591]  run_timer_softirq+0xb7/0x180
[  105.746206][ T7591]  handle_softirqs+0x286/0x870
[  105.748049][ T7591]  __irq_exit_rcu+0xca/0x1f0
[  105.749852][ T7591]  irq_exit_rcu+0x9/0x30
[  105.751477][ T7591]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  105.753620][ T7591]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  105.755937][ T7591] 
[  105.756917][ T7591] The buggy address belongs to the object at ffff88802b950000
[  105.756917][ T7591]  which belongs to the cache kmalloc-8k of size 8192
[  105.762099][ T7591] The buggy address is located 160 bytes inside of
[  105.762099][ T7591]  freed 8192-byte region [ffff88802b950000, ffff88802b952000)
[  105.767148][ T7591] 
[  105.768076][ T7591] The buggy address belongs to the physical page:
[  105.770521][ T7591] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b950
[  105.773743][ T7591] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  105.776944][ T7591] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  105.779889][ T7591] page_type: f5(slab)
[  105.781547][ T7591] raw: 00fff00000000040 ffff88801a442280 ffffea0000d58200 0000000000000006
[  105.784821][ T7591] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  105.788213][ T7591] head: 00fff00000000040 ffff88801a442280 ffffea0000d58200 0000000000000006
[  105.791742][ T7591] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  105.795037][ T7591] head: 00fff00000000003 ffffea0000ae5401 00000000ffffffff 00000000ffffffff
[  105.798318][ T7591] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  105.801889][ T7591] page dumped because: kasan: bad access detected
[  105.804398][ T7591] page_owner tracks the page as allocated
[  105.806670][ T7591] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5578, tgid 5578 (dhcpcd), ts 97268985527, free_ts 97265223742
[  105.814630][ T7591]  post_alloc_hook+0x240/0x2a0
[  105.816545][ T7591]  get_page_from_freelist+0x21e4/0x22c0
[  105.818679][ T7591]  __alloc_frozen_pages_noprof+0x181/0x370
[  105.820977][ T7591]  alloc_pages_mpol+0x232/0x4a0
[  105.822911][ T7591]  allocate_slab+0x8a/0x3b0
[  105.824739][ T7591]  ___slab_alloc+0xbfc/0x1480
[  105.826633][ T7591]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  105.829175][ T7591]  kmalloc_reserve+0x136/0x290
[  105.831117][ T7591]  __alloc_skb+0x142/0x2d0
[  105.832900][ T7591]  netlink_dump+0x169/0xe90
[  105.834720][ T7591]  netlink_recvmsg+0x676/0xa30
[  105.836628][ T7591]  sock_recvmsg+0x22c/0x270
[  105.838414][ T7591]  ____sys_recvmsg+0x1c9/0x460
[  105.840317][ T7591]  ___sys_recvmsg+0x1b5/0x510
[  105.842148][ T7591]  __x64_sys_recvmsg+0x198/0x260
[  105.844075][ T7591]  do_syscall_64+0xfa/0x3b0
[  105.845863][ T7591] page last free pid 7353 tgid 7352 stack trace:
[  105.848375][ T7591]  __free_frozen_pages+0xc71/0xe70
[  105.850367][ T7591]  __put_partials+0x161/0x1c0
[  105.852397][ T7591]  put_cpu_partial+0x17c/0x250
[  105.854375][ T7591]  __slab_free+0x2f7/0x400
[  105.856139][ T7591]  qlist_free_all+0x97/0x140
[  105.857925][ T7591]  kasan_quarantine_reduce+0x148/0x160
[  105.859999][ T7591]  __kasan_slab_alloc+0x22/0x80
[  105.861854][ T7591]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  105.864107][ T7591]  taskstats_exit+0x14a/0xa30
[  105.866086][ T7591]  do_exit+0x630/0x22e0
[  105.867763][ T7591]  do_group_exit+0x21c/0x2d0
[  105.869637][ T7591]  get_signal+0x1286/0x1340
[  105.871491][ T7591]  arch_do_signal_or_restart+0x9a/0x750
[  105.873693][ T7591]  exit_to_user_mode_loop+0x75/0x110
[  105.875749][ T7591]  do_syscall_64+0x2bd/0x3b0
[  105.877571][ T7591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.879863][ T7591] 
[  105.880848][ T7591] Memory state around the buggy address:
[  105.883093][ T7591]  ffff88802b94ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  105.886240][ T7591]  ffff88802b950000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.889379][ T7591] >ffff88802b950080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.892715][ T7591]                                ^
[  105.894848][ T7591]  ffff88802b950100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.898114][ T7591]  ffff88802b950180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.901251][ T7591] ==================================================================
[  105.905636][ T7591] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  105.908617][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: khidpd_15c25886 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  105.913639][ T7591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.917614][ T7591] Call Trace:
[  105.918934][ T7591]  <TASK>
[  105.920108][ T7591]  dump_stack_lvl+0x99/0x250
[  105.921970][ T7591]  ? __asan_memcpy+0x40/0x70
[  105.923775][ T7591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.925854][ T7591]  ? __pfx__printk+0x10/0x10
[  105.927718][ T7591]  panic+0x2db/0x790
[  105.929234][ T7591]  ? __pfx_panic+0x10/0x10
[  105.930961][ T7591]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  105.933302][ T7591]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  105.935621][ T7591]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.938059][ T7591]  ? print_memory_metadata+0x314/0x400
[  105.940169][ T7591]  ? __mutex_lock+0x738/0xe80
[  105.942039][ T7591]  check_panic_on_warn+0x89/0xb0
[  105.944027][ T7591]  ? __mutex_lock+0x738/0xe80
[  105.945992][ T7591]  end_report+0x78/0x160
[  105.947722][ T7591]  kasan_report+0x129/0x150
[  105.949564][ T7591]  ? __mutex_lock+0x738/0xe80
[  105.951387][ T7591]  __mutex_lock+0x738/0xe80
[  105.953119][ T7591]  ? __mutex_lock+0x51b/0xe80
[  105.954943][ T7591]  ? l2cap_unregister_user+0x6a/0x1b0
[  105.957023][ T7591]  ? __pfx___mutex_lock+0x10/0x10
[  105.958972][ T7591]  ? __pfx___timer_delete_sync+0x10/0x10
[  105.960880][ T7591]  l2cap_unregister_user+0x6a/0x1b0
[  105.962492][ T7591]  hidp_session_thread+0x3c9/0x410
[  105.964215][ T7591]  ? __pfx_hidp_session_thread+0x10/0x10
[  105.966113][ T7591]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  105.968365][ T7591]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  105.970740][ T7591]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  105.973083][ T7591]  ? __kthread_parkme+0x7b/0x200
[  105.975013][ T7591]  ? __kthread_parkme+0x1a1/0x200
[  105.977004][ T7591]  kthread+0x711/0x8a0
[  105.978640][ T7591]  ? __pfx_hidp_session_thread+0x10/0x10
[  105.980862][ T7591]  ? __pfx_kthread+0x10/0x10
[  105.982711][ T7591]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.984702][ T7591]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.986733][ T7591]  ? __pfx_kthread+0x10/0x10
[  105.988615][ T7591]  ret_from_fork+0x3fc/0x770
[  105.990446][ T7591]  ? __pfx_ret_from_fork+0x10/0x10
[  105.992416][ T7591]  ? __switch_to_asm+0x39/0x70
[  105.994310][ T7591]  ? __switch_to_asm+0x33/0x70
[  105.996226][ T7591]  ? __pfx_kthread+0x10/0x10
[  105.998116][ T7591]  ret_from_fork_asm+0x1a/0x30
[  105.999657][ T7591]  </TASK>
[  106.001192][ T7591] Kernel Offset: disabled
[  106.002732][ T7591] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:18:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003537370
R8 =ffff888107898237 R9 =1ffff11020f13046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98bb R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b308ecff8 CR3=0000000110bc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133a4fe ffffffff8133a4fe
XMM02=00007f6c40585478 ffffffff8133a4fe XMM03=00007f6c40585488 00007f6c40585480
XMM04=00007f6c410ed100 00007f6c40585440 XMM05=00007f6c40585458 00007f6c405854a0
XMM06=00007f6c40585498 00007f6c40585490 XMM07=00007f6c40585488 00007f6c40585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6c40411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b6825db RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88801fa08000
RSI=0000000000000001 RDI=0000000000000004 RBP=ffffc9000263f610 RSP=ffffc9000263f438
R8 =ffff88801fa08000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000
R12=ffff88810f7e1200 R13=dffffc0000000000 R14=ffff88810ce35a00 R15=0000000000000001
RIP=ffffffff81c03b33 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8ba68efba8 CR3=0000000122588000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
