last executing test programs:

1.369259661s ago: executing program 1 (id=2281):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.278746305s ago: executing program 1 (id=2283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x94}}, 0x0)

1.208873129s ago: executing program 1 (id=2286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x14000004)

1.150475013s ago: executing program 1 (id=2290):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x1c}}, 0x0)

1.0858924s ago: executing program 1 (id=2294):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES64=r2], 0x40}}, 0x0)

1.028751399s ago: executing program 1 (id=2296):
r0 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
close(0x4)
recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)

469.987899ms ago: executing program 2 (id=2308):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

380.161149ms ago: executing program 2 (id=2310):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x1, 0xe)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad688c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df6"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0xfffffffffffffe08, 0x10008095, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007e80), 0x0, 0x0, 0x0)

299.223821ms ago: executing program 2 (id=2312):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68)

219.702432ms ago: executing program 0 (id=2313):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200)=0x112, 0x4)

219.50653ms ago: executing program 2 (id=2314):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0)

155.100445ms ago: executing program 0 (id=2315):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x2, 0x4)

154.729965ms ago: executing program 2 (id=2316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="e5e13de83db3"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

154.460884ms ago: executing program 0 (id=2317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180a1100000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="d87822a56f11ab74c878e8861ac0b0d2ff000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088}, 0x90)

75.810821ms ago: executing program 2 (id=2318):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

75.608592ms ago: executing program 0 (id=2319):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8)

281.963µs ago: executing program 0 (id=2320):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x9, @loopback}, 0x1c)

0s ago: executing program 0 (id=2321):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e12b0001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50016' (ED25519) to the list of known hosts.
syzkaller login: [   63.631296][ T5821] cgroup: Unknown subsys name 'net'
[   63.738130][ T5821] cgroup: Unknown subsys name 'cpuset'
[   63.744194][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.058127][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.357542][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.359746][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.495401][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.500185][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.504407][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.509190][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.514649][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.587673][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.590984][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.594821][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.599188][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.602763][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.648608][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.654283][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.658799][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.664051][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.668429][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.856085][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   71.983063][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.986546][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.990791][ T5833] bridge_slave_0: entered allmulticast mode
[   71.996031][ T5833] bridge_slave_0: entered promiscuous mode
[   72.071581][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.074944][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.079128][ T5833] bridge_slave_1: entered allmulticast mode
[   72.082986][ T5833] bridge_slave_1: entered promiscuous mode
[   72.157761][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.169563][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.179660][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   72.207240][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   72.261475][ T5833] team0: Port device team_slave_0 added
[   72.304110][ T5833] team0: Port device team_slave_1 added
[   72.410270][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.413920][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.417527][ T5837] bridge_slave_0: entered allmulticast mode
[   72.422928][ T5837] bridge_slave_0: entered promiscuous mode
[   72.428405][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.431194][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.443549][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.448974][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.451820][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.455705][ T5839] bridge_slave_0: entered allmulticast mode
[   72.460359][ T5839] bridge_slave_0: entered promiscuous mode
[   72.465390][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.467973][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.470449][ T5837] bridge_slave_1: entered allmulticast mode
[   72.474047][ T5837] bridge_slave_1: entered promiscuous mode
[   72.487088][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.490443][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.501193][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.512504][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.516194][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.519366][ T5839] bridge_slave_1: entered allmulticast mode
[   72.523676][ T5839] bridge_slave_1: entered promiscuous mode
[   72.569031][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.588841][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.595649][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.613502][ T5833] hsr_slave_0: entered promiscuous mode
[   72.616924][ T5833] hsr_slave_1: entered promiscuous mode
[   72.622033][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.702021][ T5839] team0: Port device team_slave_0 added
[   72.709366][ T5837] team0: Port device team_slave_0 added
[   72.714261][ T5839] team0: Port device team_slave_1 added
[   72.725809][ T5837] team0: Port device team_slave_1 added
[   72.790358][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.793189][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.805123][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.841957][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.845668][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.856504][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.867054][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.870431][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.883197][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.901090][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.905975][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.918443][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.971645][ T5839] hsr_slave_0: entered promiscuous mode
[   72.975260][ T5839] hsr_slave_1: entered promiscuous mode
[   72.978173][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   72.980590][ T5839] Cannot create hsr debugfs directory
[   73.065258][ T5837] hsr_slave_0: entered promiscuous mode
[   73.067769][ T5837] hsr_slave_1: entered promiscuous mode
[   73.070605][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   73.074042][ T5837] Cannot create hsr debugfs directory
[   73.245457][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.272391][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.292372][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.309088][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.380425][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.391723][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.401662][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.420515][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.486319][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.505616][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.511415][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.521819][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.563050][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.600103][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   73.604440][ T5840] Bluetooth: hci0: command tx timeout
[   73.626724][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.630417][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.645921][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.654825][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.657937][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.673484][ T5840] Bluetooth: hci1: command tx timeout
[   73.706656][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   73.734666][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.738041][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.751508][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.754142][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.763752][ T5840] Bluetooth: hci2: command tx timeout
[   73.794598][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.849664][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   73.862893][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.865989][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.883033][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.886143][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.003217][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.052469][ T5833] veth0_vlan: entered promiscuous mode
[   74.071426][ T5833] veth1_vlan: entered promiscuous mode
[   74.088158][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.107068][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.124885][ T5833] veth0_macvtap: entered promiscuous mode
[   74.132742][ T5833] veth1_macvtap: entered promiscuous mode
[   74.175506][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.191092][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.200166][ T5839] veth0_vlan: entered promiscuous mode
[   74.210158][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.228941][ T5839] veth1_vlan: entered promiscuous mode
[   74.238587][ T5837] veth0_vlan: entered promiscuous mode
[   74.245058][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.258662][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.267954][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.298191][ T5837] veth1_vlan: entered promiscuous mode
[   74.320990][ T5839] veth0_macvtap: entered promiscuous mode
[   74.337016][ T5839] veth1_macvtap: entered promiscuous mode
[   74.382549][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.398447][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.400775][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.401636][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.409582][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.421455][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.430102][ T5837] veth0_macvtap: entered promiscuous mode
[   74.441892][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.448709][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.467518][ T5837] veth1_macvtap: entered promiscuous mode
[   74.480396][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.485007][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.526885][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.552694][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.562612][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.591999][ T5695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.599585][ T5695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.603720][ T5695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.611448][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.621862][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.626613][ T5695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.630500][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   74.714947][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.720947][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.761689][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.766937][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.770834][ T5902] warning: `syz.0.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.838364][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.845659][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.889095][ T5900] IPVS: starting estimator thread 0...
[   74.935661][ T5907] Bluetooth: MGMT ver 1.23
[   74.976393][ T5911] netlink: 'syz.1.2': attribute type 3 has an invalid length.
[   74.979542][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   74.983861][ T5905] IPVS: using max 44 ests per chain, 105600 per kthread
[   75.150868][ T5922] pim6reg1: entered promiscuous mode
[   75.152754][ T5922] pim6reg1: entered allmulticast mode
[   75.218190][ T5926] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 3, id = 0
[   75.662147][ T5942] netlink: 256 bytes leftover after parsing attributes in process `syz.2.20'.
[   75.669642][ T5942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20'.
[   75.676824][ T5840] Bluetooth: hci0: command tx timeout
[   75.695591][ T5942] lo speed is unknown, defaulting to 1000
[   75.715215][ T5942] lo speed is unknown, defaulting to 1000
[   75.721119][ T5942] lo speed is unknown, defaulting to 1000
[   75.764185][ T5840] Bluetooth: hci1: command tx timeout
[   75.786027][ T5947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.834024][ T5840] Bluetooth: hci2: command tx timeout
[   75.929585][ T5942] infiniband syz0: set active
[   75.932438][ T5900] lo speed is unknown, defaulting to 1000
[   75.937256][ T5942] infiniband syz0: added lo
[   75.990673][ T5942] RDS/IB: syz0: added
[   75.992951][ T5942] smc: adding ib device syz0 with port count 1
[   76.010509][ T5942] smc:    ib device syz0 port 1 has pnetid 
[   76.020890][ T5900] lo speed is unknown, defaulting to 1000
[   76.028132][ T5942] lo speed is unknown, defaulting to 1000
[   76.195172][ T5964] tipc: Started in network mode
[   76.197546][ T5964] tipc: Node identity 7f000001, cluster identity 4711
[   76.200690][ T5964] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.332270][ T5942] lo speed is unknown, defaulting to 1000
[   76.400455][ T5973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.403786][ T5973] IPv6: NLM_F_CREATE should be set when creating new route
[   76.538481][ T5942] lo speed is unknown, defaulting to 1000
[   76.770879][ T5942] syz.2.20 (5942) used greatest stack depth: 19680 bytes left
[   76.875442][ T5982] ieee802154 phy0 wpan0: encryption failed: -22
[   77.024259][ T5992] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   77.033054][ T5992] netlink: 224 bytes leftover after parsing attributes in process `syz.0.39'.
[   77.197325][   T52] tipc: Node number set to 2130706433
[   77.270829][ T6010] syzkaller1: entered promiscuous mode
[   77.272919][ T6010] syzkaller1: entered allmulticast mode
[   77.294860][ T6006] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   77.316853][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[   77.320104][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[   77.328749][ T6006] ip6tnl1: entered promiscuous mode
[   77.331379][ T6006] ip6tnl1: entered allmulticast mode
[   77.355731][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'.
[   77.439004][ T6018] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET)
[   77.541197][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.547979][ T6023] bridge0: entered allmulticast mode
[   77.844009][ T5836] Bluetooth: hci1: command tx timeout
[   77.913775][ T5836] Bluetooth: hci2: command tx timeout
[   77.955800][ T6044] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.146135][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.238002][ T6058] netlink: 'syz.2.70': attribute type 2 has an invalid length.
[   78.241354][ T6058] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.70'.
[   78.838566][ T6084] syzkaller1: entered promiscuous mode
[   78.840639][ T6084] syzkaller1: entered allmulticast mode
[   78.949394][ T5868] IPVS: starting estimator thread 0...
[   79.063401][ T6091] IPVS: using max 79 ests per chain, 189600 per kthread
[   79.135504][ T6098] lo speed is unknown, defaulting to 1000
[   79.355051][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   79.916511][ T5840] Bluetooth: hci1: command tx timeout
[   79.926540][ T6113] netlink: 256 bytes leftover after parsing attributes in process `syz.0.93'.
[   79.935170][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.0.93'.
[   79.966229][ T6113] rdma_rxe: rxe_newlink: failed to add lo
[   80.004669][ T5840] Bluetooth: hci2: command tx timeout
[   80.095224][ T6113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.308652][ T5426] IPVS: starting estimator thread 0...
[   80.329869][ T6123] bridge0: entered allmulticast mode
[   80.350809][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   80.364388][ T6123] bridge_slave_1: left allmulticast mode
[   80.366648][ T6123] bridge_slave_1: left promiscuous mode
[   80.371435][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.396627][ T6123] bridge_slave_0: left allmulticast mode
[   80.400056][ T6123] bridge_slave_0: left promiscuous mode
[   80.406350][ T6121] IPVS: using max 35 ests per chain, 84000 per kthread
[   80.410464][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.447453][ T6123] bridge0 (unregistering): left allmulticast mode
[   80.670392][ T6140] netlink: 844 bytes leftover after parsing attributes in process `syz.0.107'.
[   80.685415][ T6140] Zero length message leads to an empty skb
[   80.770840][ T6141] netpci0: tun_chr_ioctl cmd 1074025681
[   80.792649][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'.
[   80.854454][ T6149] netlink: 48 bytes leftover after parsing attributes in process `syz.0.110'.
[   81.000784][ T6166] veth0: entered promiscuous mode
[   81.003033][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'.
[   82.158760][ T6203] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[   82.170911][ T6203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   82.572874][ T6208] netlink: 'syz.2.131': attribute type 11 has an invalid length.
[   82.577457][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'.
[   82.588704][ T5849] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.588805][ T6208] netlink: 'syz.2.131': attribute type 11 has an invalid length.
[   82.592071][ T5849] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.592107][ T5849] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.592122][ T5849] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.605546][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'.
[   83.063099][ T6228] netlink: 'syz.2.140': attribute type 21 has an invalid length.
[   83.067463][ T6228] netlink: 128 bytes leftover after parsing attributes in process `syz.2.140'.
[   83.071389][ T6228] netlink: 'syz.2.140': attribute type 4 has an invalid length.
[   83.310125][ T6246] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   83.554482][ T6268] bond1: entered promiscuous mode
[   83.556674][ T6268] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.713798][ T6277] nbd2: detected capacity change from 0 to 63
[   83.718465][ T6280] block nbd2: Receive control failed (result -32)
[   83.718843][ T5835] block nbd2: Send control failed (result -32)
[   83.732636][ T5835] block nbd2: Request send failed, requeueing
[   83.751649][   T61] block nbd2: Dead connection, failed to find a fallback
[   83.756567][   T61] block nbd2: shutting down sockets
[   83.758951][   T61] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.762242][   T61] Buffer I/O error on dev nbd2, logical block 0, async page read
[   83.768065][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.771705][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read
[   83.774448][ T5835] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.777492][ T5835] Buffer I/O error on dev nbd2, logical block 2, async page read
[   83.786194][ T5835] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.789199][ T5835] Buffer I/O error on dev nbd2, logical block 3, async page read
[   83.803520][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.806553][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read
[   83.809230][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.812866][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read
[   83.817194][ T5835] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.820198][ T5835] Buffer I/O error on dev nbd2, logical block 2, async page read
[   83.822834][ T5835] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.827379][ T5835] Buffer I/O error on dev nbd2, logical block 3, async page read
[   83.830521][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.836023][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read
[   83.839206][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   83.842553][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read
[   83.847564][ T5835] ldm_validate_partition_table(): Disk read failed.
[   83.852240][ T5835] Dev nbd2: unable to read RDB block 0
[   83.860629][ T5835]  nbd2: unable to read partition table
[   83.874732][ T5835] ldm_validate_partition_table(): Disk read failed.
[   83.877647][ T5835] Dev nbd2: unable to read RDB block 0
[   83.880230][ T5835]  nbd2: unable to read partition table
[   84.168268][ T6315] netlink: 'syz.0.180': attribute type 1 has an invalid length.
[   84.296979][ T6321] batman_adv: batadv0: Adding interface: gretap1
[   84.300518][ T6321] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.314962][ T6321] batman_adv: batadv0: Interface activated: gretap1
[   84.346834][ T6323] vlan0: entered promiscuous mode
[   84.833759][ T6355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.991888][ T6371] __nla_validate_parse: 4 callbacks suppressed
[   84.991906][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[   85.000831][ T6371] netlink: 'syz.1.206': attribute type 21 has an invalid length.
[   85.241945][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'.
[   85.290961][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'.
[   85.351296][ T6399] netlink: 76 bytes leftover after parsing attributes in process `syz.1.218'.
[   85.549129][ T6414] tipc: Started in network mode
[   85.551308][ T6414] tipc: Node identity fa68cd0ccfd9, cluster identity 4711
[   85.559000][ T6414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.562820][ T6414] syzkaller0: entered promiscuous mode
[   85.566579][ T6414] syzkaller0: entered allmulticast mode
[   85.584273][ T6414] tipc: Resetting bearer <eth:syzkaller0>
[   85.590024][ T6412] tipc: Resetting bearer <eth:syzkaller0>
[   85.599269][ T6412] tipc: Disabling bearer <eth:syzkaller0>
[   85.717946][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'.
[   85.780428][ T6424] netlink: 'syz.2.231': attribute type 1 has an invalid length.
[   85.783389][ T6424] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.231'.
[   85.924043][ T6377] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   85.991289][ T6450] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   86.032356][ T6450] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.042758][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'.
[   86.053078][ T6450] gretap2: entered promiscuous mode
[   86.059421][ T6450] bond2: (slave gretap2): making interface the new active one
[   86.064608][ T6450] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   86.249829][ T6471] netlink: 240 bytes leftover after parsing attributes in process `syz.2.241'.
[   86.295729][ T6474] netlink: 220 bytes leftover after parsing attributes in process `syz.1.250'.
[   86.351681][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'.
[   86.561795][ T6496] vlan2: entered promiscuous mode
[   86.568150][ T6496] gretap0: entered promiscuous mode
[   86.654338][ T6510] netlink: 'syz.1.266': attribute type 6 has an invalid length.
[   86.753604][  T793] cfg80211: failed to load regulatory.db
[   86.961543][ T6527] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.968616][ T6527] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.450600][ T6553] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   87.663241][ T6563] syz.2.292 uses old SIOCAX25GETINFO
[   87.793490][ T6571] batadv0: entered promiscuous mode
[   87.998768][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.066348][ T6582] validate_nla: 2 callbacks suppressed
[   88.066363][ T6582] netlink: 'syz.1.298': attribute type 13 has an invalid length.
[   88.176511][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.181266][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.349285][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.371347][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.599207][ T5849] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.602612][ T5849] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.612810][ T6587] ip6gretap1: entered promiscuous mode
[   88.618693][ T5849] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.632276][ T5849] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.106887][ T6639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   89.363290][ T6650] lo speed is unknown, defaulting to 1000
[   89.366671][ T6650] lo speed is unknown, defaulting to 1000
[   89.370910][ T6650] lo speed is unknown, defaulting to 1000
[   89.377635][ T6650] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   89.387895][ T6650] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   89.409331][ T6650] lo speed is unknown, defaulting to 1000
[   89.412297][ T6650] lo speed is unknown, defaulting to 1000
[   89.415449][ T6650] lo speed is unknown, defaulting to 1000
[   89.861683][ T6671] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   90.649993][ T6706] __nla_validate_parse: 12 callbacks suppressed
[   90.650011][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[   90.915139][ T6724] bond0: entered promiscuous mode
[   90.917281][ T6724] bond_slave_0: entered promiscuous mode
[   90.919700][ T6724] bond_slave_1: entered promiscuous mode
[   91.149386][ T6744] netlink: 'syz.0.370': attribute type 12 has an invalid length.
[   91.641274][ T6775] sctp: [Deprecated]: syz.2.385 (pid 6775) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.641274][ T6775] Use struct sctp_sack_info instead
[   91.981725][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'.
[   92.528233][ T6866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.532863][ T6866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.665037][ T6866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.669341][ T6866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.699496][ T6877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.432'.
[   92.704853][ T6877] unsupported nlmsg_type 40
[   92.752173][ T6866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.756778][ T6866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.830757][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'.
[   92.876509][ T6866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.881297][ T6866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.002368][ T5695] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.013473][ T5695] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.036421][ T5695] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.039887][ T5695] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.067166][ T5695] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.076199][ T5695] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.108681][ T5695] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.112530][ T5695] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.161182][ T6894] geneve2: entered promiscuous mode
[   93.184510][ T5695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   93.187974][ T5695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   93.192801][ T6901] netlink: 'syz.0.443': attribute type 1 has an invalid length.
[   93.197367][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'.
[   93.202779][ T5695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   93.217043][ T5695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   93.295699][ T6908] netlink: 'syz.0.446': attribute type 10 has an invalid length.
[   93.311625][ T6908] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.694982][ T6944] netlink: 'syz.2.460': attribute type 10 has an invalid length.
[   93.710762][ T6944] 8021q: adding VLAN 0 to HW filter on device team0
[   93.719186][ T6944] team0: entered promiscuous mode
[   93.722966][ T6944] team_slave_0: entered promiscuous mode
[   93.728333][ T6944] team_slave_1: entered promiscuous mode
[   93.731600][ T6944] bond0: (slave team0): Enslaving as an active interface with an up link
[   93.735461][ T6948] netlink: 'syz.0.461': attribute type 5 has an invalid length.
[   93.830917][ T6953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.840514][ T5426] lo speed is unknown, defaulting to 1000
[   93.953117][ T6962] lo speed is unknown, defaulting to 1000
[   94.152878][ T6962] lo speed is unknown, defaulting to 1000
[   95.157324][ T7001] lo speed is unknown, defaulting to 1000
[   95.271038][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[   95.509874][ T7001] lo speed is unknown, defaulting to 1000
[   95.516655][ T7018] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.520183][ T7018] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.568678][ T7016] netlink: 'syz.2.489': attribute type 5 has an invalid length.
[   95.640087][ T7018] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.646161][ T7018] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.702219][ T7018] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.709495][ T7018] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.756461][ T7018] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.760798][ T7018] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.075614][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'.
[   96.093500][ T7034] vlan2: entered promiscuous mode
[   96.095482][ T7034] gretap0: entered promiscuous mode
[   97.295594][ T7099] pimreg: entered allmulticast mode
[   97.441815][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'.
[   97.457344][ T7109] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.474617][ T7109] macvlan2: entered promiscuous mode
[   97.476899][ T7109] macvlan2: entered allmulticast mode
[   97.480215][ T7109] bond0: entered allmulticast mode
[   97.482000][ T7109] bond_slave_0: entered allmulticast mode
[   97.484259][ T7109] bond_slave_1: entered allmulticast mode
[   97.486152][ T7109] bond0: entered promiscuous mode
[   97.487769][ T7109] bond_slave_0: entered promiscuous mode
[   97.489663][ T7109] bond_slave_1: entered promiscuous mode
[   97.491904][ T7109] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   97.496344][ T7109] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[   97.617503][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'.
[   97.642444][ T5895] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.648519][ T5895] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.658722][ T5895] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.661987][ T5895] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.676973][ T5895] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.680349][ T5895] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.689061][ T5895] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.691736][ T5895] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.912477][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.546'.
[   98.022987][ T7148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.027378][ T7148] syzkaller0: entered promiscuous mode
[   98.029875][ T7148] syzkaller0: entered allmulticast mode
[   98.053642][ T7148] tipc: Resetting bearer <eth:syzkaller0>
[   98.057357][ T7147] tipc: Resetting bearer <eth:syzkaller0>
[   98.071790][ T7147] tipc: Disabling bearer <eth:syzkaller0>
[   98.197514][ T7162] netlink: 'syz.2.556': attribute type 142 has an invalid length.
[   98.349713][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   98.432046][ T7177] netlink: 'syz.0.561': attribute type 3 has an invalid length.
[   98.437412][ T7177] netlink: 'syz.0.561': attribute type 1 has an invalid length.
[   98.440820][ T7177] netlink: 220 bytes leftover after parsing attributes in process `syz.0.561'.
[   98.696062][ T7189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.699844][ T7189] syzkaller0: entered promiscuous mode
[   98.702587][ T7189] syzkaller0: entered allmulticast mode
[   98.717067][ T7189] tipc: Resetting bearer <eth:syzkaller0>
[   98.721307][ T7188] tipc: Resetting bearer <eth:syzkaller0>
[   98.737919][ T7188] tipc: Disabling bearer <eth:syzkaller0>
[   99.030019][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'.
[   99.090712][ T7207] GUP no longer grows the stack in syz.1.576 (7207): 200000006000-20000000a000 (200000005000)
[   99.095446][ T7207] CPU: 1 UID: 0 PID: 7207 Comm: syz.1.576 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[   99.095463][ T7207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.095470][ T7207] Call Trace:
[   99.095475][ T7207]  <TASK>
[   99.095480][ T7207]  dump_stack_lvl+0x189/0x250
[   99.095500][ T7207]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.095511][ T7207]  ? __pfx__printk+0x10/0x10
[   99.095523][ T7207]  ? find_vma+0xe7/0x160
[   99.095545][ T7207]  __get_user_pages+0x2a60/0x30b0
[   99.095581][ T7207]  ? __pfx___get_user_pages+0x10/0x10
[   99.095592][ T7207]  ? __gup_longterm_locked+0xbf7/0x15b0
[   99.095605][ T7207]  ? down_read_killable+0x1d1/0x350
[   99.095618][ T7207]  ? try_get_folio+0x633/0x660
[   99.095633][ T7207]  __gup_longterm_locked+0xd66/0x15b0
[   99.095651][ T7207]  ? try_grab_folio_fast+0x1be/0x4f0
[   99.095671][ T7207]  ? gup_fast_fallback+0x1afc/0x2260
[   99.095686][ T7207]  gup_fast_fallback+0x1cd4/0x2260
[   99.095722][ T7207]  ? __pfx_gup_fast_fallback+0x10/0x10
[   99.095734][ T7207]  ? __mutex_lock+0x335/0x1340
[   99.095752][ T7207]  ? is_valid_gup_args+0x11f/0x200
[   99.095766][ T7207]  ? get_user_pages_fast+0x4d/0xb0
[   99.095780][ T7207]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   99.095796][ T7207]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   99.095812][ T7207]  ? wait_for_space+0x24d/0x2d0
[   99.095826][ T7207]  iov_iter_get_pages2+0x5e/0xa0
[   99.095839][ T7207]  __se_sys_vmsplice+0x548/0x10d0
[   99.095865][ T7207]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   99.095883][ T7207]  ? __pfx_futex_wait+0x10/0x10
[   99.095905][ T7207]  ? __lock_acquire+0xab9/0xd20
[   99.095967][ T7207]  ? do_pipe2+0xf7/0x170
[   99.095985][ T7207]  ? rcu_is_watching+0x15/0xb0
[   99.096005][ T7207]  ? do_syscall_64+0xbe/0x3b0
[   99.096020][ T7207]  do_syscall_64+0xfa/0x3b0
[   99.096032][ T7207]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.096044][ T7207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.096055][ T7207]  ? exc_page_fault+0x9f/0xf0
[   99.096068][ T7207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.096078][ T7207] RIP: 0033:0x7fe6ead8ebe9
[   99.096088][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.096096][ T7207] RSP: 002b:00007fe6e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   99.096108][ T7207] RAX: ffffffffffffffda RBX: 00007fe6eafb5fa0 RCX: 00007fe6ead8ebe9
[   99.096115][ T7207] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[   99.096122][ T7207] RBP: 00007fe6eae11e19 R08: 0000000000000000 R09: 0000000000000000
[   99.096128][ T7207] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   99.096133][ T7207] R13: 00007fe6eafb6038 R14: 00007fe6eafb5fa0 R15: 00007fffdde60508
[   99.096151][ T7207]  </TASK>
[   99.354686][ T5840] Bluetooth: hci2: command tx timeout
[   99.434239][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  100.239068][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'.
[  100.274270][ T7229] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.584'.
[  100.754576][ T7270] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  100.834392][ T7280] netlink: 'syz.1.609': attribute type 8 has an invalid length.
[  100.842208][ T7279] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  100.875088][ T7279] tipc: Resetting bearer <eth:syzkaller0>
[  100.888513][ T7277] tipc: Resetting bearer <eth:syzkaller0>
[  100.918498][ T7284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'.
[  101.847597][ T7277] tipc: Disabling bearer <eth:syzkaller0>
[  101.943038][ T7294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.429719][   T33] audit: type=1800 audit(1754500470.010:2): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.625" name="cgroup.controllers" dev="tmpfs" ino=989 res=0 errno=0
[  102.569699][ T7334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.632'.
[  102.664113][ T7342] lo speed is unknown, defaulting to 1000
[  102.709718][ T7346] netlink: 'syz.1.636': attribute type 13 has an invalid length.
[  102.731965][ T7346] netlink: 'syz.1.636': attribute type 17 has an invalid length.
[  102.853786][ T7346] bridge0: left allmulticast mode
[  102.863831][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.868186][ T7346] 8021q: adding VLAN 0 to HW filter on device team0
[  102.877224][ T7346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.906689][ T7342] lo speed is unknown, defaulting to 1000
[  103.371577][ T7377] syzkaller0: entered promiscuous mode
[  103.375012][ T7377] syzkaller0: entered allmulticast mode
[  103.409906][ T7383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.006713][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  104.453010][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'.
[  104.623813][ T7432] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.674'.
[  104.658376][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'.
[  104.661410][ T7434] netlink: 'syz.2.677': attribute type 14 has an invalid length.
[  104.668203][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'.
[  104.671552][ T7434] netlink: 'syz.2.677': attribute type 14 has an invalid length.
[  104.735652][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.678'.
[  104.738573][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.678'.
[  104.741928][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.678'.
[  104.748065][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.678'.
[  104.849204][ T7428] lo speed is unknown, defaulting to 1000
[  104.957401][ T7428] lo speed is unknown, defaulting to 1000
[  105.071687][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'.
[  105.083993][ T7457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  105.136360][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.139310][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.169246][ T7461] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  106.506254][ T7513] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  106.577256][ T7516] pim6reg: entered allmulticast mode
[  106.582723][ T7516] pim6reg: left allmulticast mode
[  107.272226][ T7562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.281469][ T7562] syzkaller0: entered promiscuous mode
[  107.285796][ T7562] syzkaller0: entered allmulticast mode
[  107.308807][ T7562] tipc: Resetting bearer <eth:syzkaller0>
[  107.315157][ T7561] tipc: Resetting bearer <eth:syzkaller0>
[  107.336597][ T7561] tipc: Disabling bearer <eth:syzkaller0>
[  107.495036][ T5895] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.499221][ T5895] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.504589][ T5895] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.509191][ T5895] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.650338][ T7581] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  107.906211][ T7605] ip6erspan0: entered allmulticast mode
[  108.172827][ T7626] __nla_validate_parse: 4 callbacks suppressed
[  108.172837][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'.
[  108.296607][ T7636] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  108.720833][ T7663] lo speed is unknown, defaulting to 1000
[  108.818741][ T7663] lo speed is unknown, defaulting to 1000
[  108.909673][ T7663] netlink: 'syz.0.770': attribute type 4 has an invalid length.
[  108.913072][ T7663] netlink: 17 bytes leftover after parsing attributes in process `syz.0.770'.
[  109.250682][ T7672] lo speed is unknown, defaulting to 1000
[  109.328477][ T7678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.373177][ T7682] ieee802154 phy1 wpan1: encryption failed: -22
[  109.536191][ T7672] lo speed is unknown, defaulting to 1000
[  109.538433][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.783'.
[  109.662181][ T7699] netlink: 'syz.2.783': attribute type 9 has an invalid length.
[  109.977681][ T7706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.990709][ T7706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.046322][ T7706] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  110.064562][ T7706] bond0 (unregistering): Released all slaves
[  110.249391][ T7727] netlink: 'syz.0.792': attribute type 1 has an invalid length.
[  110.252242][ T7727] netlink: 'syz.0.792': attribute type 2 has an invalid length.
[  110.282570][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.793'.
[  110.389953][ T7731] lo speed is unknown, defaulting to 1000
[  110.414547][ T7721] IPv6: Can't replace route, no match found
[  110.424408][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'.
[  110.428134][ T7741] netlink: 64 bytes leftover after parsing attributes in process `syz.0.797'.
[  110.432449][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'.
[  110.465356][ T7741] team0: Port device team_slave_0 removed
[  110.483973][ T7741] team0: Port device team_slave_1 removed
[  110.487234][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.490598][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.505839][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.516129][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.537715][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'.
[  110.605284][ T7731] lo speed is unknown, defaulting to 1000
[  110.701268][ T7748] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  110.724643][ T7720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.739936][ T7748] bridge_slave_0: left allmulticast mode
[  110.742400][ T7748] bridge_slave_0: left promiscuous mode
[  110.746268][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.756293][ T7748] bridge_slave_1: left allmulticast mode
[  110.758741][ T7748] bridge_slave_1: left promiscuous mode
[  110.761507][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.770561][ T7748] bond0: (slave bond_slave_0): Releasing backup interface
[  110.774853][ T7748] bond_slave_0: left promiscuous mode
[  110.777186][ T7748] bond_slave_0: left allmulticast mode
[  110.781821][ T7748] bond0: (slave bond_slave_1): Releasing backup interface
[  110.782762][ T7751] netlink: 'syz.1.799': attribute type 10 has an invalid length.
[  110.791935][ T7748] bond_slave_1: left promiscuous mode
[  110.796998][ T7748] bond_slave_1: left allmulticast mode
[  110.806989][ T7748] team0: Port device team_slave_0 removed
[  110.815820][ T7748] team0: Port device team_slave_1 removed
[  110.818975][ T7748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.825680][ T7748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.831703][ T7748] bond1: (slave macvlan2): Releasing backup interface
[  110.837700][ T7748] bond0: left allmulticast mode
[  110.840382][ T7748] bond0: left promiscuous mode
[  110.852827][ T7751] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  110.874588][ T7751] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  110.939028][ T7748] syzkaller0: entered promiscuous mode
[  110.941646][ T7748] syzkaller0: entered allmulticast mode
[  112.361173][ T7796] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  112.406441][ T7807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.825'.
[  112.456694][ T7810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  112.518733][ T7817] netlink: 'syz.0.829': attribute type 2 has an invalid length.
[  112.569481][ T7821] netlink: 'syz.2.832': attribute type 11 has an invalid length.
[  112.572044][ T7821] netlink: 'syz.2.832': attribute type 4 has an invalid length.
[  112.575279][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'.
[  113.470044][ T7907] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  113.505485][ T7910] syzkaller1: tun_chr_ioctl cmd 1074025672
[  113.508125][ T7910] syzkaller1: ignored: set checksum disabled
[  113.585133][ T7917] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  114.142925][ T7947] netlink: 'syz.0.889': attribute type 13 has an invalid length.
[  114.154062][ T7947] __nla_validate_parse: 1 callbacks suppressed
[  114.154073][ T7947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'.
[  114.185030][ T7947] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  114.344829][ T7954] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  114.385172][ T7957] netlink: 516 bytes leftover after parsing attributes in process `syz.2.893'.
[  114.395448][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  114.423410][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'.
[  114.427705][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'.
[  114.477255][ T7963] bridge_slave_1: default FDB implementation only supports local addresses
[  114.494779][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'.
[  114.706861][ T7988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.909'.
[  114.803210][ T7997] netlink: 'syz.2.910': attribute type 13 has an invalid length.
[  114.811027][ T7997] netlink: 'syz.2.910': attribute type 17 has an invalid length.
[  114.856301][ T7997] bond0: left promiscuous mode
[  114.858390][ T7997] bond_slave_0: left promiscuous mode
[  114.860904][ T7997] bond_slave_1: left promiscuous mode
[  114.865703][ T7997] team0: left promiscuous mode
[  114.867565][ T7997] team_slave_0: left promiscuous mode
[  114.870927][ T7997] team_slave_1: left promiscuous mode
[  114.881337][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.891793][ T7997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.947562][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.017108][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.148833][ T8017] netlink: 'syz.1.921': attribute type 12 has an invalid length.
[  115.160775][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.922'.
[  115.387385][ T8033] netlink: 'syz.1.929': attribute type 2 has an invalid length.
[  115.459374][ T8037] syzkaller1: entered promiscuous mode
[  115.462162][ T8037] syzkaller1: entered allmulticast mode
[  115.656481][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.936'.
[  115.668378][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.936'.
[  115.698076][ T8053] tipc: Enabled bearer <udp:syz0>, priority 10
[  116.140496][ T8096] netlink: 'syz.0.958': attribute type 1 has an invalid length.
[  116.144423][ T8096] netlink: 144 bytes leftover after parsing attributes in process `syz.0.958'.
[  116.148276][ T8096] netlink: 'syz.0.958': attribute type 2 has an invalid length.
[  117.400249][ T8206] geneve2: entered promiscuous mode
[  117.598754][ T8213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  117.598999][ T5895] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  118.651108][ T5895] bond0: (slave wlan1): interface is now down
[  118.656600][ T8255] bond0: option arp_validate: invalid value (18446744073491447809)
[  118.662211][ T5895] bond0: now running without any active interface!
[  119.007630][ T8276] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  119.126204][ T8294] sctp: [Deprecated]: syz.0.1047 (pid 8294) Use of int in max_burst socket option.
[  119.126204][ T8294] Use struct sctp_assoc_value instead
[  119.208913][ T8307] netlink: 'syz.1.1053': attribute type 21 has an invalid length.
[  119.211569][ T8307] __nla_validate_parse: 8 callbacks suppressed
[  119.211580][ T8307] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1053'.
[  119.466434][ T8333] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1066'.
[  119.520000][ T8341] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1068'.
[  119.587751][ T8348] sch_tbf: burst 240 is lower than device lo mtu (65511) !
[  119.632489][ T8350] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1074'.
[  119.646374][ T8346] block nbd0: server does not support multiple connections per device.
[  119.649959][ T8346] block nbd0: shutting down sockets
[  119.850578][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'.
[  119.853886][ T8367] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1082'.
[  120.378970][ T8396] netlink: 'syz.1.1094': attribute type 10 has an invalid length.
[  120.390751][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1094'.
[  120.415131][ T8396] dummy0: entered promiscuous mode
[  120.417663][ T8396] bridge0: port 1(dummy0) entered blocking state
[  120.419798][ T8396] bridge0: port 1(dummy0) entered disabled state
[  120.422853][ T8396] dummy0: entered allmulticast mode
[  120.428432][ T8396] bridge0: port 1(dummy0) entered blocking state
[  120.430672][ T8396] bridge0: port 1(dummy0) entered forwarding state
[  120.568802][ T8412] raw_sendmsg: syz.1.1098 forgot to set AF_INET. Fix it!
[  120.824728][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'.
[  120.910232][ T8450] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  121.152056][ T8486] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1125'.
[  121.156170][ T8486] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1125'.
[  121.158906][ T8486] netlink: 'syz.1.1125': attribute type 6 has an invalid length.
[  121.161543][ T8486] netlink: 'syz.1.1125': attribute type 5 has an invalid length.
[  122.386125][ T8536] chnl_net:caif_netlink_parms(): no params data found
[  122.439195][ T8544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.449510][ T8546] openvswitch: netlink: Actions may not be safe on all matching packets
[  123.849175][ T8642] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.852284][ T8642] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.909498][ T8642] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.915353][ T8642] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.977573][ T8642] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.981689][ T8642] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.030083][ T8642] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.034067][ T8642] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.101315][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.112396][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.166689][ T5895] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.170625][ T5895] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.189959][ T5895] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.195901][ T5895] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.223297][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.235490][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.336505][ T8680] __nla_validate_parse: 10 callbacks suppressed
[  124.336518][ T8680] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1218'.
[  124.619631][   T33] audit: type=1804 audit(1754500492.200:3): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1227" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1856 res=1 errno=0
[  124.637367][   T33] audit: type=1800 audit(1754500492.200:4): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1227" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1856 res=0 errno=0
[  124.716398][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'.
[  124.720444][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'.
[  124.880188][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'.
[  124.891385][ T8723] vlan3: entered promiscuous mode
[  124.893157][ T8723] batadv0: entered promiscuous mode
[  125.197968][ T8741] lo speed is unknown, defaulting to 1000
[  125.391802][ T8741] lo speed is unknown, defaulting to 1000
[  125.751221][ T8728] lo speed is unknown, defaulting to 1000
[  125.917082][ T8728] lo speed is unknown, defaulting to 1000
[  126.219392][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  126.264732][ T8805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.279828][ T8805] syzkaller0: entered promiscuous mode
[  126.281860][ T8805] syzkaller0: entered allmulticast mode
[  126.317321][ T8805] tipc: Resetting bearer <eth:syzkaller0>
[  126.325292][ T8804] tipc: Resetting bearer <eth:syzkaller0>
[  126.350411][ T8804] tipc: Disabling bearer <eth:syzkaller0>
[  126.586449][ T8843] macsec0: entered promiscuous mode
[  126.588367][ T8843] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  126.591235][ T8843] macsec0: entered allmulticast mode
[  126.595329][ T8843] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  126.659334][ T8848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.661869][ T8848] syzkaller0: entered promiscuous mode
[  126.664908][ T8848] syzkaller0: entered allmulticast mode
[  126.686514][ T8848] tipc: Resetting bearer <eth:syzkaller0>
[  126.697337][ T8847] tipc: Resetting bearer <eth:syzkaller0>
[  126.713910][ T8847] tipc: Disabling bearer <eth:syzkaller0>
[  126.849057][ T8866] lo speed is unknown, defaulting to 1000
[  126.997303][ T8881] blkio.reset_stats is deprecated
[  127.077602][ T8866] lo speed is unknown, defaulting to 1000
[  127.236837][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1303'.
[  127.467802][ T8915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.493518][ T8947] veth1_macvtap: left promiscuous mode
[  128.495996][ T8947] macsec0: entered allmulticast mode
[  128.527393][ T8947] veth1_macvtap: entered promiscuous mode
[  128.529810][ T8947] veth1_macvtap: entered allmulticast mode
[  128.533292][ T8947] macsec0: left allmulticast mode
[  128.535167][ T8947] veth1_macvtap: left allmulticast mode
[  128.675386][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'.
[  128.712441][ T8965] Driver unsupported XDP return value 0 on prog  (id 209) dev N/A, expect packet loss!
[  128.802044][ T8974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.830089][ T8974] syzkaller0: entered promiscuous mode
[  128.832143][ T8974] syzkaller0: entered allmulticast mode
[  128.834598][ T8974] tipc: Resetting bearer <eth:syzkaller0>
[  128.839230][ T8973] tipc: Resetting bearer <eth:syzkaller0>
[  128.906739][ T8976] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1343'.
[  129.536011][ T8989] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  129.833816][ T5868] tipc: Node number set to 900844812
[  129.925311][ T8973] tipc: Disabling bearer <eth:syzkaller0>
[  130.006501][ T8995] netlink: 'syz.0.1351': attribute type 2 has an invalid length.
[  130.172184][ T9011] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1359'.
[  130.177435][ T9011] NCSI netlink: No device for ifindex 0
[  130.238895][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.274778][ T9019] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1363'.
[  130.329597][ T9023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1365'.
[  130.340061][ T9023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1365'.
[  130.354115][ T9023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1365'.
[  130.405476][ T9027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1367'.
[  130.486605][ T9034] batman_adv: batadv0: Adding interface: ip6gretap2
[  130.489134][ T9034] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.500888][ T9034] batman_adv: batadv0: Interface activated: ip6gretap2
[  130.637918][ T9044] netlink: 'syz.1.1375': attribute type 1 has an invalid length.
[  130.746431][ T9050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.759362][ T9050] syzkaller0: entered promiscuous mode
[  130.761606][ T9050] syzkaller0: entered allmulticast mode
[  130.792681][ T9050] tipc: Resetting bearer <eth:syzkaller0>
[  130.799651][ T9049] tipc: Resetting bearer <eth:syzkaller0>
[  130.811697][ T9049] tipc: Disabling bearer <eth:syzkaller0>
[  131.337374][ T9095] netlink: 'syz.0.1398': attribute type 1 has an invalid length.
[  131.392392][ T9099] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1400'.
[  131.457207][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1401'.
[  131.536641][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'.
[  131.941206][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1411'.
[  132.005403][ T9127] 8021q: adding VLAN 0 to HW filter on device bond3
[  132.042463][ T9127] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  132.048276][ T9127] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  132.055404][ T9127] bond3: (slave macvlan3): Enslaving as an active interface with an up link
[  132.353644][   T33] audit: type=1800 audit(1754500499.930:5): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1415" name="memory.events" dev="tmpfs" ino=2248 res=0 errno=0
[  132.459163][ T9144] netlink: 'syz.2.1417': attribute type 4 has an invalid length.
[  132.929964][ T9172] netlink: zone id is out of range
[  133.475438][ T9202] netlink: 'syz.2.1443': attribute type 1 has an invalid length.
[  133.896954][ T9214] netlink: 'syz.2.1448': attribute type 16 has an invalid length.
[  133.900454][ T9214] netlink: 'syz.2.1448': attribute type 17 has an invalid length.
[  133.921948][ T9214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.930984][ T9224] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  133.935891][ T9224] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  134.612260][ T9253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.626639][ T9253] syzkaller0: entered promiscuous mode
[  134.632582][ T9253] syzkaller0: entered allmulticast mode
[  134.669433][ T9253] tipc: Resetting bearer <eth:syzkaller0>
[  134.672264][ T9253] syzkaller0: tun_net_xmit 134
[  134.691222][ T9251] tipc: Resetting bearer <eth:syzkaller0>
[  134.734202][ T9251] tipc: Disabling bearer <eth:syzkaller0>
[  134.838346][ T9271] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  134.864727][ T9271] team0: Port device dummy0 added
[  134.873860][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  134.878219][ T9271] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  134.891006][ T9271] team0: Port device dummy0 removed
[  134.897210][ T9271] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  135.706896][ T9286] netlink: 'syz.2.1480': attribute type 4 has an invalid length.
[  135.716738][ T9286] netlink: 'syz.2.1480': attribute type 4 has an invalid length.
[  135.772326][  T793] lo speed is unknown, defaulting to 1000
[  135.781135][  T793] syz2: Port: 1 Link DOWN
[  135.921327][ T9298] netlink: 'syz.2.1485': attribute type 1 has an invalid length.
[  136.936728][ T9352] netlink: 'syz.1.1509': attribute type 4 has an invalid length.
[  136.956369][ T9352] netlink: 'syz.1.1509': attribute type 4 has an invalid length.
[  137.148630][ T9365] bridge0: port 3(ipvlan2) entered blocking state
[  137.152462][ T9365] bridge0: port 3(ipvlan2) entered disabled state
[  137.162593][ T9365] ipvlan2: entered allmulticast mode
[  137.172574][ T9365] bridge0: entered allmulticast mode
[  137.177487][ T9365] ipvlan2: left allmulticast mode
[  137.179892][ T9365] bridge0: left allmulticast mode
[  137.276113][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  137.277690][ T9374] bridge2: entered promiscuous mode
[  137.283503][ T9374] bridge2: entered allmulticast mode
[  137.570375][ T9400] __nla_validate_parse: 4 callbacks suppressed
[  137.570390][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'.
[  137.615841][ T9405] netlink: 'syz.0.1535': attribute type 10 has an invalid length.
[  137.761165][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'.
[  137.777108][ T9419] IPv6: sit1: Disabled Multicast RS
[  137.780098][ T9419] sit1: entered allmulticast mode
[  137.785203][ T9421] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  137.952585][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'.
[  138.002656][ T9439] macsec1: entered allmulticast mode
[  138.005336][ T9439] macsec0: entered allmulticast mode
[  138.007658][ T9439] veth1_macvtap: entered allmulticast mode
[  138.120567][ T5895] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  139.167517][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'.
[  139.429034][ T9498] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  139.451511][ T5695] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  139.481907][ T9503] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  139.486871][ T9503] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  139.793049][ T9522] Unsupported ieee802154 address type: 0
[  140.324559][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'.
[  140.453795][ T9554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1600'.
[  140.459713][ T9554] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  140.564413][ T9554] bond3: (slave macvlan3): Releasing backup interface
[  140.579982][ T9554] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  140.589923][ T9554] bond0 (unregistering): Released all slaves
[  140.671082][ T9567] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  141.008129][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  141.011058][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'.
[  141.128399][ T9591] netlink: 'syz.0.1616': attribute type 8 has an invalid length.
[  142.878122][ T9675] bridge0: port 2(erspan0) entered blocking state
[  142.882701][ T9675] bridge0: port 2(erspan0) entered disabled state
[  142.993831][ T9675] erspan0: entered allmulticast mode
[  142.998907][ T9675] erspan0: entered promiscuous mode
[  143.002783][ T9675] bridge0: port 2(erspan0) entered blocking state
[  143.006128][ T9675] bridge0: port 2(erspan0) entered forwarding state
[  143.017043][ T9681] erspan0: left allmulticast mode
[  143.019244][ T9681] erspan0: left promiscuous mode
[  143.026724][ T9681] bridge0: port 2(erspan0) entered disabled state
[  143.178685][ T9691] netlink: 'syz.2.1659': attribute type 7 has an invalid length.
[  143.469708][ T9715] netlink: 'syz.0.1669': attribute type 1 has an invalid length.
[  143.545323][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'.
[  143.550575][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1672'.
[  143.636692][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'.
[  143.871722][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'.
[  144.251857][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1695'.
[  144.361230][ T9778] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1697'.
[  145.061225][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  145.066933][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  145.312858][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'.
[  145.637220][ T9834] lo speed is unknown, defaulting to 1000
[  146.020257][ T9834] lo speed is unknown, defaulting to 1000
[  146.047983][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  146.297712][ T9864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1734'.
[  146.384023][ T9866] geneve3: entered promiscuous mode
[  146.387178][ T9866] geneve3: entered allmulticast mode
[  146.391430][ T5895] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 49947 - 0
[  146.396962][ T5895] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 50904 - 0
[  146.400086][ T5895] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 49947 - 0
[  146.405067][ T5895] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 50904 - 0
[  146.416409][ T5895] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 49947 - 0
[  146.420781][ T5895] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 50904 - 0
[  146.435064][ T5895] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 49947 - 0
[  146.440269][ T5895] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 50904 - 0
[  147.137211][ T9913] netlink: 'syz.0.1756': attribute type 2 has an invalid length.
[  147.189799][ T9915] xfrm1: entered allmulticast mode
[  147.461140][ T9942] tipc: Started in network mode
[  147.469512][ T9942] tipc: Node identity ae6b67ace27e, cluster identity 4711
[  147.489187][ T9942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.510120][ T9942] syzkaller0: entered promiscuous mode
[  147.512586][ T9942] syzkaller0: entered allmulticast mode
[  147.570888][ T9942] tipc: Resetting bearer <eth:syzkaller0>
[  147.581756][ T9941] tipc: Resetting bearer <eth:syzkaller0>
[  147.610407][ T9941] tipc: Disabling bearer <eth:syzkaller0>
[  147.791642][ T9962] bridge0: port 1(dummy0) entered disabled state
[  147.829397][ T9962] batadv0: left promiscuous mode
[  147.850818][ T9962] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  147.869188][ T9962] geneve2: left promiscuous mode
[  147.891021][ T9962] ip6erspan0: left allmulticast mode
[  147.898979][ T9962] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  147.902771][ T9962] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  147.911306][ T9962] macsec0: left promiscuous mode
[  147.921783][ T9962] macsec0: left allmulticast mode
[  147.931165][ T9962] xfrm1: left allmulticast mode
[  147.937098][ T5895] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.941368][ T5895] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  147.947260][ T5895] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.954979][ T5895] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  147.961369][ T5895] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.983471][ T5895] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  147.987525][ T5895] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.990919][ T5895] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  148.762956][T10005] syzkaller0: entered promiscuous mode
[  148.765508][T10005] syzkaller0: entered allmulticast mode
[  149.292755][T10027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.404900][T10038] __nla_validate_parse: 8 callbacks suppressed
[  149.404910][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'.
[  149.492723][T10044] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  149.678381][T10062] netlink: 'syz.0.1815': attribute type 1 has an invalid length.
[  149.681587][T10062] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1815'.
[  149.754926][T10064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.766177][T10064] syzkaller0: entered promiscuous mode
[  149.768555][T10064] syzkaller0: entered allmulticast mode
[  149.793994][T10064] tipc: Resetting bearer <eth:syzkaller0>
[  149.802026][T10063] tipc: Resetting bearer <eth:syzkaller0>
[  149.821634][T10063] tipc: Disabling bearer <eth:syzkaller0>
[  150.116878][T10092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1829'.
[  150.469144][T10117] syzkaller1: entered promiscuous mode
[  150.471643][T10117] syzkaller1: entered allmulticast mode
[  151.591123][T10192] syzkaller1: entered promiscuous mode
[  151.595168][T10192] syzkaller1: entered allmulticast mode
[  152.110373][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1882'.
[  152.217318][T10220] netlink: 'syz.1.1883': attribute type 1 has an invalid length.
[  152.220620][T10220] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1883'.
[  152.229178][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1883'.
[  152.236041][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1883'.
[  152.240057][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1883'.
[  153.049887][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1901'.
[  153.058450][T10272] netlink: 'syz.1.1901': attribute type 1 has an invalid length.
[  153.069377][T10272] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1901'.
[  153.092597][T10272] siw: device registration error -23
[  153.181893][T10276] netem: incorrect ge model size
[  153.185486][T10276] netem: change failed
[  153.591277][T10290] netlink: 'syz.1.1909': attribute type 4 has an invalid length.
[  153.950816][T10317] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.960683][T10317] bond0: (slave bond4): Enslaving as an active interface with an up link
[  154.106848][T10335] tipc: Bearer <eth:macvtap0>: already 2 bearers with priority 10
[  154.110957][T10335] tipc: Bearer <eth:macvtap0>: trying with adjusted priority
[  154.114989][T10335] tipc: Enabled bearer <eth:macvtap0>, priority 9
[  154.452413][T10364] __nla_validate_parse: 1 callbacks suppressed
[  154.452429][T10364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1944'.
[  154.733232][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'.
[  154.774806][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'.
[  154.797715][T10389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.817866][T10389] syzkaller0: entered promiscuous mode
[  154.820019][T10389] syzkaller0: entered allmulticast mode
[  154.848374][T10389] tipc: Resetting bearer <eth:syzkaller0>
[  154.852392][T10387] tipc: Resetting bearer <eth:syzkaller0>
[  154.889116][T10387] tipc: Disabling bearer <eth:syzkaller0>
[  154.999413][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'.
[  155.004597][T10401] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1961'.
[  155.097376][T10404] pim6reg1: entered promiscuous mode
[  155.099651][T10404] pim6reg1: entered allmulticast mode
[  155.317897][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1964'.
[  155.431472][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'.
[  155.667941][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1969'.
[  155.892101][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'.
[  156.254722][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  156.265870][T10470] netlink: 'syz.0.1989': attribute type 46 has an invalid length.
[  156.469845][T10478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.481435][T10478] syzkaller0: entered promiscuous mode
[  156.485208][T10478] syzkaller0: entered allmulticast mode
[  156.507660][T10478] tipc: Resetting bearer <eth:syzkaller0>
[  156.515424][T10477] tipc: Resetting bearer <eth:syzkaller0>
[  156.529620][T10477] tipc: Disabling bearer <eth:syzkaller0>
[  156.670757][T10485] lo speed is unknown, defaulting to 1000
[  156.974701][T10485] lo speed is unknown, defaulting to 1000
[  157.254323][T10521] lo speed is unknown, defaulting to 1000
[  157.618829][T10540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.646096][T10542] trusted_key: syz.0.2017 sent an empty control message without MSG_MORE.
[  157.709189][T10521] lo speed is unknown, defaulting to 1000
[  157.904677][T10557] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  157.910124][T10557] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  158.151767][T10566] sctp: [Deprecated]: syz.1.2028 (pid 10566) Use of struct sctp_assoc_value in delayed_ack socket option.
[  158.151767][T10566] Use struct sctp_sack_info instead
[  159.022976][T10630] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  159.544051][T10656] netlink: 'syz.1.2068': attribute type 5 has an invalid length.
[  159.547500][T10656] __nla_validate_parse: 4 callbacks suppressed
[  159.547512][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'.
[  160.148308][T10709] lo speed is unknown, defaulting to 1000
[  160.188249][T10719] netlink: 4608 bytes leftover after parsing attributes in process `syz.1.2098'.
[  160.199770][T10719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2098'.
[  160.211186][T10719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2098'.
[  160.376567][T10709] lo speed is unknown, defaulting to 1000
[  160.389630][T10729] openvswitch: netlink: IPv4 tunnel dst address is zero
[  161.209131][T10777] netlink: 'syz.0.2124': attribute type 2 has an invalid length.
[  161.256377][T10779] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2125'.
[  161.304138][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'.
[  161.652302][T10806] sctp: [Deprecated]: syz.1.2138 (pid 10806) Use of int in max_burst socket option deprecated.
[  161.652302][T10806] Use struct sctp_assoc_value instead
[  161.792649][T10815] netlink: 'syz.1.2142': attribute type 3 has an invalid length.
[  161.796672][T10815] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2142'.
[  162.045723][T10833] sctp: [Deprecated]: syz.2.2152 (pid 10833) Use of int in maxseg socket option.
[  162.045723][T10833] Use struct sctp_assoc_value instead
[  162.560521][T10854] netlink: 'syz.2.2161': attribute type 1 has an invalid length.
[  162.605408][T10854] bond5 (unregistering): Released all slaves
[  163.452093][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'.
[  163.579398][T10897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2178'.
[  163.579516][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'.
[  163.761573][T10915] lo speed is unknown, defaulting to 1000
[  163.964541][T10936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.077320][T10915] lo speed is unknown, defaulting to 1000
[  164.373278][T10954] netlink: 'syz.2.2196': attribute type 1 has an invalid length.
[  165.364642][T10972] netlink: 'syz.2.2208': attribute type 13 has an invalid length.
[  165.520886][T10974] __nla_validate_parse: 5 callbacks suppressed
[  165.520901][T10974] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2209'.
[  165.808994][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'.
[  166.140641][T11013] sctp: [Deprecated]: syz.2.2225 (pid 11013) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.140641][T11013] Use struct sctp_sack_info instead
[  166.270166][T11025] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  166.542115][T11046] sctp: [Deprecated]: syz.2.2242 (pid 11046) Use of int in max_burst socket option deprecated.
[  166.542115][T11046] Use struct sctp_assoc_value instead
[  166.572578][T11043] lo speed is unknown, defaulting to 1000
[  166.738464][T11043] lo speed is unknown, defaulting to 1000
[  167.138533][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'.
[  167.382006][T11073] syzkaller1: entered promiscuous mode
[  167.389585][T11073] syzkaller1: entered allmulticast mode
[  167.472121][T11081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.569786][T11089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.122968][T11118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2273'.
[  169.219714][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'.
[  169.428066][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2285'.
[  169.578630][T11161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2294'.
[  169.590306][T11163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2293'.
[  169.596808][T11165] netlink: 'syz.2.2295': attribute type 9 has an invalid length.
[  169.600510][T11165] netlink: 'syz.2.2295': attribute type 7 has an invalid length.
[  169.603878][T11163] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2293'.
[  169.607928][T11165] netlink: 'syz.2.2295': attribute type 8 has an invalid length.
[  169.695969][T11171] gretap1: entered promiscuous mode
[  169.702441][T11171] gretap1: entered allmulticast mode
[  169.757818][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2299'.
[  170.143810][T11193] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  170.226100][T11196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.609126][T11220] sctp: [Deprecated]: syz.0.2319 (pid 11220) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.609126][T11220] Use struct sctp_sack_info instead
[  170.702769][T11224] netlink: 'syz.0.2321': attribute type 30 has an invalid length.
[  170.718812][    C1] ==================================================================
[  170.721784][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  170.724683][    C1] Write of size 8 at addr ffff88810fbf84b0 by task kworker/1:2/793
[  170.728606][    C1] 
[  170.729924][    C1] CPU: 1 UID: 0 PID: 793 Comm: kworker/1:2 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  170.729940][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.729946][    C1] Workqueue:  0x0 (events)
[  170.729963][    C1] Call Trace:
[  170.729997][    C1]  <IRQ>
[  170.730003][    C1]  dump_stack_lvl+0x189/0x250
[  170.730018][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  170.730027][    C1]  ? rcu_is_watching+0x15/0xb0
[  170.730037][    C1]  ? __kasan_check_byte+0x12/0x40
[  170.730048][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.730056][    C1]  ? rcu_is_watching+0x15/0xb0
[  170.730072][    C1]  ? lock_release+0x4b/0x3e0
[  170.730089][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  170.730101][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  170.730113][    C1]  print_report+0xca/0x240
[  170.730132][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  170.730146][    C1]  kasan_report+0x118/0x150
[  170.730161][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  170.730170][    C1]  __xfrm_state_delete+0x696/0xca0
[  170.730184][    C1]  xfrm_timer_handler+0x18f/0xa00
[  170.730200][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  170.730214][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  170.730227][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.730240][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.730252][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  170.730265][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  170.730279][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  170.730293][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  170.730313][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  170.730328][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  170.730347][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  170.730365][    C1]  handle_softirqs+0x286/0x870
[  170.730383][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  170.730399][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  170.730416][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  170.730431][    C1]  __irq_exit_rcu+0xca/0x1f0
[  170.730447][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  170.730465][    C1]  irq_exit_rcu+0x9/0x30
[  170.730480][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  170.730493][    C1]  </IRQ>
[  170.730497][    C1]  <TASK>
[  170.730501][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  170.730513][    C1] RIP: 0010:lock_is_held_type+0x68/0x190
[  170.730524][    C1] Code: 00 00 65 4c 8b 2c 25 08 70 9a 92 41 83 bd ec 0a 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 <4c> 8b 24 24 fa 48 c7 c7 a4 f2 98 8d e8 17 17 00 00 65 ff 05 00 84
[  170.730533][    C1] RSP: 0018:ffffc9000498f9d8 EFLAGS: 00000246
[  170.730542][    C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff8881075ad640
[  170.730550][    C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e139ea0
[  170.730557][    C1] RBP: 00000000ffffffff R08: ffffffff8fa07237 R09: 1ffffffff1f40e46
[  170.730564][    C1] R10: dffffc0000000000 R11: fffffbfff1f40e47 R12: ffff8881a3c79000
[  170.730572][    C1] R13: ffff8881075ad640 R14: ffffffff8e139ea0 R15: 1ffff11026cc7549
[  170.730587][    C1]  __schedule+0x290/0x4cc0
[  170.730605][    C1]  ? __lock_acquire+0xab9/0xd20
[  170.730620][    C1]  ? __pfx___schedule+0x10/0x10
[  170.730636][    C1]  ? schedule+0x91/0x360
[  170.730649][    C1]  schedule+0x165/0x360
[  170.730660][    C1]  worker_thread+0xa82/0xda0
[  170.730672][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  170.730684][    C1]  ? __kthread_parkme+0x7b/0x200
[  170.730697][    C1]  kthread+0x711/0x8a0
[  170.730718][    C1]  ? __pfx_worker_thread+0x10/0x10
[  170.730733][    C1]  ? __pfx_kthread+0x10/0x10
[  170.730746][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.730757][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.730769][    C1]  ? __pfx_kthread+0x10/0x10
[  170.730776][    C1]  ret_from_fork+0x3fc/0x770
[  170.730787][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  170.730797][    C1]  ? __switch_to_asm+0x39/0x70
[  170.730805][    C1]  ? __switch_to_asm+0x33/0x70
[  170.730812][    C1]  ? __pfx_kthread+0x10/0x10
[  170.730819][    C1]  ret_from_fork_asm+0x1a/0x30
[  170.730834][    C1]  </TASK>
[  170.730838][    C1] 
[  170.892158][    C1] Allocated by task 9569:
[  170.893952][    C1]  kasan_save_track+0x3e/0x80
[  170.896280][    C1]  __kasan_slab_alloc+0x6c/0x80
[  170.898626][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  170.901836][    C1]  xfrm_state_alloc+0x24/0x2f0
[  170.904036][    C1]  __find_acq_core+0x8a7/0x1c00
[  170.906070][    C1]  xfrm_find_acq+0x78/0xa0
[  170.907913][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  170.909906][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.912027][    C1]  netlink_rcv_skb+0x208/0x470
[  170.914410][    C1]  xfrm_netlink_rcv+0x79/0x90
[  170.917122][    C1]  netlink_unicast+0x82f/0x9e0
[  170.919219][    C1]  netlink_sendmsg+0x805/0xb30
[  170.921201][    C1]  __sock_sendmsg+0x21c/0x270
[  170.923111][    C1]  ____sys_sendmsg+0x505/0x830
[  170.925021][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  170.926990][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  170.929236][    C1]  do_syscall_64+0xfa/0x3b0
[  170.931563][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.934258][    C1] 
[  170.935229][    C1] Freed by task 793:
[  170.936948][    C1]  kasan_save_track+0x3e/0x80
[  170.938798][    C1]  kasan_save_free_info+0x46/0x50
[  170.940844][    C1]  __kasan_slab_free+0x62/0x70
[  170.942637][    C1]  kmem_cache_free+0x18f/0x400
[  170.944288][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  170.946540][    C1]  process_scheduled_works+0xae1/0x17b0
[  170.948666][    C1]  worker_thread+0x8a0/0xda0
[  170.950090][    C1]  kthread+0x711/0x8a0
[  170.951337][    C1]  ret_from_fork+0x3fc/0x770
[  170.952730][    C1]  ret_from_fork_asm+0x1a/0x30
[  170.954274][    C1] 
[  170.955060][    C1] The buggy address belongs to the object at ffff88810fbf8480
[  170.955060][    C1]  which belongs to the cache xfrm_state of size 928
[  170.960051][    C1] The buggy address is located 48 bytes inside of
[  170.960051][    C1]  freed 928-byte region [ffff88810fbf8480, ffff88810fbf8820)
[  170.965239][    C1] 
[  170.966004][    C1] The buggy address belongs to the physical page:
[  170.968049][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810fbf9680 pfn:0x10fbf8
[  170.971160][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  170.974880][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  170.977783][    C1] page_type: f5(slab)
[  170.979288][    C1] raw: 057ff00000000040 ffff888104795c80 dead000000000122 0000000000000000
[  170.982527][    C1] raw: ffff88810fbf9680 00000000800e0008 00000000f5000000 0000000000000000
[  170.985559][    C1] head: 057ff00000000040 ffff888104795c80 dead000000000122 0000000000000000
[  170.988850][    C1] head: ffff88810fbf9680 00000000800e0008 00000000f5000000 0000000000000000
[  170.992863][    C1] head: 057ff00000000002 ffffea00043efe01 00000000ffffffff 00000000ffffffff
[  170.996240][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  170.998907][    C1] page dumped because: kasan: bad access detected
[  171.001127][    C1] page_owner tracks the page as allocated
[  171.002952][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6657, tgid 6656 (syz.2.332), ts 89615232110, free_ts 89454775119
[  171.010246][    C1]  post_alloc_hook+0x240/0x2a0
[  171.012369][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  171.014497][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  171.016933][    C1]  alloc_pages_mpol+0x232/0x4a0
[  171.018564][    C1]  allocate_slab+0x8a/0x370
[  171.020167][    C1]  ___slab_alloc+0xbeb/0x1410
[  171.021940][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  171.023867][    C1]  xfrm_state_alloc+0x24/0x2f0
[  171.025409][    C1]  xfrm_add_sa+0x17d1/0x4070
[  171.026873][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  171.028573][    C1]  netlink_rcv_skb+0x208/0x470
[  171.030147][    C1]  xfrm_netlink_rcv+0x79/0x90
[  171.031840][    C1]  netlink_unicast+0x82f/0x9e0
[  171.033863][    C1]  netlink_sendmsg+0x805/0xb30
[  171.035944][    C1]  __sock_sendmsg+0x21c/0x270
[  171.037941][    C1]  ____sys_sendmsg+0x505/0x830
[  171.039525][    C1] page last free pid 5839 tgid 5839 stack trace:
[  171.041717][    C1]  __free_frozen_pages+0xc71/0xe70
[  171.043516][    C1]  __put_partials+0x156/0x1a0
[  171.045232][    C1]  put_cpu_partial+0x17c/0x250
[  171.046957][    C1]  __slab_free+0x2d5/0x3c0
[  171.048605][    C1]  qlist_free_all+0x97/0x140
[  171.050330][    C1]  kasan_quarantine_reduce+0x148/0x160
[  171.052488][    C1]  __kasan_slab_alloc+0x22/0x80
[  171.054880][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  171.057671][    C1]  getname_flags+0xb8/0x540
[  171.059192][    C1]  __x64_sys_unlink+0x3a/0x50
[  171.060620][    C1]  do_syscall_64+0xfa/0x3b0
[  171.062209][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.064313][    C1] 
[  171.065342][    C1] Memory state around the buggy address:
[  171.067474][    C1]  ffff88810fbf8380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  171.071029][    C1]  ffff88810fbf8400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  171.074322][    C1] >ffff88810fbf8480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.077157][    C1]                                      ^
[  171.079160][    C1]  ffff88810fbf8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.081652][    C1]  ffff88810fbf8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.084519][    C1] ==================================================================
[  171.087659][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  171.090729][    C1] CPU: 1 UID: 0 PID: 793 Comm: kworker/1:2 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  171.095308][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.099087][    C1] Workqueue:  0x0 (events)
[  171.100888][    C1] Call Trace:
[  171.102355][    C1]  <IRQ>
[  171.103612][    C1]  dump_stack_lvl+0x99/0x250
[  171.105837][    C1]  ? __asan_memcpy+0x40/0x70
[  171.108215][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.110733][    C1]  ? __pfx__printk+0x10/0x10
[  171.112601][    C1]  vpanic+0x27a/0x730
[  171.114260][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.116323][    C1]  ? __pfx_vpanic+0x10/0x10
[  171.118163][    C1]  ? irqentry_exit+0x74/0x90
[  171.120362][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.122905][    C1]  panic+0xb9/0xc0
[  171.124279][    C1]  ? __pfx_panic+0x10/0x10
[  171.126178][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  171.128622][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.131178][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  171.133325][    C1]  check_panic_on_warn+0x89/0xb0
[  171.135429][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  171.137687][    C1]  end_report+0x78/0x160
[  171.139644][    C1]  kasan_report+0x129/0x150
[  171.142261][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  171.144498][    C1]  __xfrm_state_delete+0x696/0xca0
[  171.146306][    C1]  xfrm_timer_handler+0x18f/0xa00
[  171.148105][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  171.150035][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  171.152253][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.155323][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.158036][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.161400][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  171.163919][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  171.166188][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  171.168331][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  171.170740][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  171.173266][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  171.175563][    C1]  handle_softirqs+0x286/0x870
[  171.177735][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  171.179803][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  171.181936][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  171.184108][    C1]  __irq_exit_rcu+0xca/0x1f0
[  171.186124][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  171.188608][    C1]  irq_exit_rcu+0x9/0x30
[  171.190484][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  171.193026][    C1]  </IRQ>
[  171.194314][    C1]  <TASK>
[  171.195539][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  171.197988][    C1] RIP: 0010:lock_is_held_type+0x68/0x190
[  171.200436][    C1] Code: 00 00 65 4c 8b 2c 25 08 70 9a 92 41 83 bd ec 0a 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 <4c> 8b 24 24 fa 48 c7 c7 a4 f2 98 8d e8 17 17 00 00 65 ff 05 00 84
[  171.208934][    C1] RSP: 0018:ffffc9000498f9d8 EFLAGS: 00000246
[  171.211475][    C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff8881075ad640
[  171.214514][    C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e139ea0
[  171.218228][    C1] RBP: 00000000ffffffff R08: ffffffff8fa07237 R09: 1ffffffff1f40e46
[  171.221228][    C1] R10: dffffc0000000000 R11: fffffbfff1f40e47 R12: ffff8881a3c79000
[  171.224149][    C1] R13: ffff8881075ad640 R14: ffffffff8e139ea0 R15: 1ffff11026cc7549
[  171.227058][    C1]  __schedule+0x290/0x4cc0
[  171.228881][    C1]  ? __lock_acquire+0xab9/0xd20
[  171.230490][    C1]  ? __pfx___schedule+0x10/0x10
[  171.232412][    C1]  ? schedule+0x91/0x360
[  171.234434][    C1]  schedule+0x165/0x360
[  171.236802][    C1]  worker_thread+0xa82/0xda0
[  171.239093][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.241752][    C1]  ? __kthread_parkme+0x7b/0x200
[  171.243841][    C1]  kthread+0x711/0x8a0
[  171.245563][    C1]  ? __pfx_worker_thread+0x10/0x10
[  171.247953][    C1]  ? __pfx_kthread+0x10/0x10
[  171.250214][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.252493][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.254736][    C1]  ? __pfx_kthread+0x10/0x10
[  171.256668][    C1]  ret_from_fork+0x3fc/0x770
[  171.258656][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  171.261151][    C1]  ? __switch_to_asm+0x39/0x70
[  171.263505][    C1]  ? __switch_to_asm+0x33/0x70
[  171.265549][    C1]  ? __pfx_kthread+0x10/0x10
[  171.267464][    C1]  ret_from_fork_asm+0x1a/0x30
[  171.269498][    C1]  </TASK>
[  171.271687][    C1] Kernel Offset: disabled
[  171.273934][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:15:38  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4217b RBX=1ffff11026cc7f59 RCX=ffff88801c2a0000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000065f7e0 RSP=ffffc9000065f660
R8 =ffffffff8fa07237 R9 =1ffffffff1f40e46 R10=dffffc0000000000 R11=fffffbfff1f40e47
R12=ffff88813663fac8 R13=dffffc0000000000 R14=ffff88804b03b180 R15=0000000000000001
RIP=ffffffff81b42161 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 0000000000000000 ffffffff 00c00100
GS =0000 ffff8880b8679000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc0f284ec0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33b4060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99da0730 RSP=ffffc900001e0350
R8 =ffff888020790237 R9 =1ffff110040f2046 R10=dffffc0000000000 R11=ffffffff854bde30
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99da04a0 R15=0000000000000000
RIP=ffffffff854bdea7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c79000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000e6b030 CR3=00000000339ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0f7dc12e53
XMM06=0000000000000000 00007f0f7dc12e4d XMM07=0000000000000000 00007f0f7dc12e61
XMM08=0000000000000000 00007f0f7dc12ee7 XMM09=0000000000000000 00007f0f7dc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
