last executing test programs:

2.272855014s ago: executing program 1 (id=2877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

1.076157928s ago: executing program 1 (id=2879):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
listen(r0, 0x3)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket(0x22, 0x2, 0x23)
close(r1)
socket(0x23, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.075896659s ago: executing program 2 (id=2880):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000003100))

1.025686928s ago: executing program 2 (id=2881):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
accept(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

204.029933ms ago: executing program 0 (id=2902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x1c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff2, 0x5}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x404c090)

203.828069ms ago: executing program 1 (id=2903):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
close(r0)

203.680576ms ago: executing program 0 (id=2904):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

203.540489ms ago: executing program 1 (id=2905):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x8}}}}}}, 0x0)
recvfrom(r0, 0x0, 0x59, 0x40000160, 0x0, 0x0)

201.797037ms ago: executing program 2 (id=2906):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x1, 0x4)

199.66738ms ago: executing program 1 (id=2907):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)

125.310654ms ago: executing program 0 (id=2908):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140), 0x4)

125.087894ms ago: executing program 2 (id=2909):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fdc7000040", 0x6}], 0x1, 0x0, 0x0)

74.604365ms ago: executing program 0 (id=2910):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x4810)

74.171785ms ago: executing program 1 (id=2911):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0xf, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c8}, 0x20004804)

908.915µs ago: executing program 0 (id=2912):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

573.35µs ago: executing program 2 (id=2913):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

321.591µs ago: executing program 2 (id=2914):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x2, 0xa51, 0x40, @empty, @empty, 0x7800, 0x40, 0x1, 0x41}})

0s ago: executing program 0 (id=2915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0xe, 0x6, "74dd16", 0x2c, 0x6, 0x0, @remote, @loopback, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x1, 0x8, 0x4, 0x1, 0x9, 0x3, 0x2, 0x4e24, 0x4e24}, 0x3, 0x3}, 0x3, 0x2}, 0x2}}}}}}}}}}, 0x66)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42234' (ED25519) to the list of known hosts.
syzkaller login: [   49.006255][ T5805] cgroup: Unknown subsys name 'net'
[   49.073998][ T5805] cgroup: Unknown subsys name 'cpuset'
[   49.077931][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.758561][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.529149][ T5855] modprobe (5855) used greatest stack depth: 20872 bytes left
[   59.536184][ T5863] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.862764][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.867306][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.870646][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.875429][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.883114][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.902775][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.917002][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.922272][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.925979][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.930144][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.930428][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.935201][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.938046][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.943843][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.958002][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.228192][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   62.394776][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.398231][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.400968][ T5873] bridge_slave_0: entered allmulticast mode
[   62.403923][ T5873] bridge_slave_0: entered promiscuous mode
[   62.408123][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.411146][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.413451][ T5873] bridge_slave_1: entered allmulticast mode
[   62.416181][ T5873] bridge_slave_1: entered promiscuous mode
[   62.420393][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   62.484585][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.487644][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   62.500213][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.571892][ T5873] team0: Port device team_slave_0 added
[   62.577752][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.580514][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.582789][ T5880] bridge_slave_0: entered allmulticast mode
[   62.585483][ T5880] bridge_slave_0: entered promiscuous mode
[   62.591148][ T5873] team0: Port device team_slave_1 added
[   62.593691][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.596335][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.599617][ T5880] bridge_slave_1: entered allmulticast mode
[   62.602523][ T5880] bridge_slave_1: entered promiscuous mode
[   62.700519][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.703705][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.706300][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.710538][ T5876] bridge_slave_0: entered allmulticast mode
[   62.713332][ T5876] bridge_slave_0: entered promiscuous mode
[   62.717880][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.721338][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.731730][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.739717][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.743375][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.745521][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.755962][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.761271][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.763475][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.766171][ T5876] bridge_slave_1: entered allmulticast mode
[   62.770362][ T5876] bridge_slave_1: entered promiscuous mode
[   62.827637][ T5880] team0: Port device team_slave_0 added
[   62.831925][ T5880] team0: Port device team_slave_1 added
[   62.854926][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.882687][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.900369][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.903157][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.915433][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.951530][ T5873] hsr_slave_0: entered promiscuous mode
[   62.954851][ T5873] hsr_slave_1: entered promiscuous mode
[   62.959738][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.962403][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.971556][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.977734][ T5876] team0: Port device team_slave_0 added
[   62.990471][ T5876] team0: Port device team_slave_1 added
[   63.052032][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.054553][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.064488][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.095811][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.099019][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.106835][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.117951][ T5880] hsr_slave_0: entered promiscuous mode
[   63.121100][ T5880] hsr_slave_1: entered promiscuous mode
[   63.123946][ T5880] debugfs: 'hsr0' already exists in 'hsr'
[   63.126311][ T5880] Cannot create hsr debugfs directory
[   63.183137][ T5876] hsr_slave_0: entered promiscuous mode
[   63.185854][ T5876] hsr_slave_1: entered promiscuous mode
[   63.189658][ T5876] debugfs: 'hsr0' already exists in 'hsr'
[   63.191938][ T5876] Cannot create hsr debugfs directory
[   63.452002][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.464381][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.476701][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.489882][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.522721][ T5880] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.528518][ T5880] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.546028][ T5880] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.551538][ T5880] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.591558][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.603234][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.615308][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.623048][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.712191][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.737113][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.758308][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   63.775031][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   63.782086][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.784495][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.796841][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.799976][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.822324][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.824601][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.837883][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.847083][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.849955][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.865014][ T5873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.868241][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.888410][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   63.915350][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.917643][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.932972][ T5874] Bluetooth: hci0: command tx timeout
[   63.941824][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.944039][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.014694][ T5874] Bluetooth: hci1: command tx timeout
[   64.015910][   T54] Bluetooth: hci2: command tx timeout
[   64.051012][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.113474][ T5873] veth0_vlan: entered promiscuous mode
[   64.128067][ T5873] veth1_vlan: entered promiscuous mode
[   64.143617][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.203675][ T5873] veth0_macvtap: entered promiscuous mode
[   64.213673][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.224640][ T5873] veth1_macvtap: entered promiscuous mode
[   64.243578][ T5880] veth0_vlan: entered promiscuous mode
[   64.255864][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.262309][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.266068][ T5880] veth1_vlan: entered promiscuous mode
[   64.289829][ T5902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.302228][ T5902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.309926][ T5902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.328789][ T5880] veth0_macvtap: entered promiscuous mode
[   64.342237][ T5902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.361900][ T5880] veth1_macvtap: entered promiscuous mode
[   64.366377][ T5876] veth0_vlan: entered promiscuous mode
[   64.386409][ T5876] veth1_vlan: entered promiscuous mode
[   64.403249][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.422456][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.437155][ T5884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.442643][ T5884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.449202][ T5884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.452150][ T5884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.458335][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.467288][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.487962][ T5876] veth0_macvtap: entered promiscuous mode
[   64.514123][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.514282][ T5876] veth1_macvtap: entered promiscuous mode
[   64.516577][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.575299][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.577817][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.581233][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.604341][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.613049][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.643747][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.654299][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.664587][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.681718][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.684780][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.688207][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.758229][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.767113][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.806328][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.814779][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.926626][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'.
[   64.932154][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'.
[   65.551938][ T5996] tipc: Started in network mode
[   65.554027][ T5996] tipc: Node identity de99b2fe8cde, cluster identity 4711
[   65.557201][ T5996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.571173][ T5996] syzkaller0: entered promiscuous mode
[   65.584576][ T5996] syzkaller0: entered allmulticast mode
[   65.626458][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'.
[   65.650067][ T5996] tipc: Resetting bearer <eth:syzkaller0>
[   65.673936][ T5993] tipc: Resetting bearer <eth:syzkaller0>
[   65.712738][ T5993] tipc: Disabling bearer <eth:syzkaller0>
[   65.941771][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.010932][   T54] Bluetooth: hci0: command tx timeout
[   66.034472][ T6028] pimreg: entered allmulticast mode
[   66.079026][   T54] Bluetooth: hci2: command tx timeout
[   66.079085][ T5874] Bluetooth: hci1: command tx timeout
[   66.238320][ T6041] netlink: 27 bytes leftover after parsing attributes in process `syz.1.67'.
[   66.273494][ T6043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.871022][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'.
[   66.916445][ T6080] openvswitch: netlink: Unknown key attributes 2
[   67.169358][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   67.956821][ T6145] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   67.988882][ T6145] netlink: 'syz.0.104': attribute type 4 has an invalid length.
[   68.112532][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.115843][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.160313][ T5874] Bluetooth: hci1: command tx timeout
[   68.161217][   T54] Bluetooth: hci2: command tx timeout
[   68.279104][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.286195][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.465481][ T6153] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.465603][ T6145] syz.0.104 (6145) used greatest stack depth: 20616 bytes left
[   68.481629][ T5884] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.496295][ T5884] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.518718][ T5884] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.521458][ T5884] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.642926][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'.
[   68.732677][ T6177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.736956][ T6177] syzkaller0: entered promiscuous mode
[   68.742136][ T6177] syzkaller0: entered allmulticast mode
[   68.764687][ T6177] tipc: Resetting bearer <eth:syzkaller0>
[   68.776530][ T6176] tipc: Resetting bearer <eth:syzkaller0>
[   68.796858][ T6176] tipc: Disabling bearer <eth:syzkaller0>
[   68.820474][ T6181] netlink: 'syz.2.116': attribute type 1 has an invalid length.
[   68.845465][ T6181] bond1: entered promiscuous mode
[   68.847524][ T6181] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.877600][ T6181] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.881164][ T6181] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   68.884994][ T6181] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   68.901491][ T6181] bond1: (slave wireguard0): making interface the new active one
[   68.904607][ T6181] wireguard0: entered promiscuous mode
[   68.908000][ T6181] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   68.923323][ T6181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   68.925749][ T6181] IPv6: NLM_F_CREATE should be set when creating new route
[   68.928207][ T6181] IPv6: NLM_F_CREATE should be set when creating new route
[   68.931968][ T6181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   68.939293][ T6181] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[   68.947347][ T6181] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[   68.950575][ T6181] Zero length message leads to an empty skb
[   69.087622][ T6198] syz.2.119 uses obsolete (PF_INET,SOCK_PACKET)
[   69.410159][ T6212] netlink: 'syz.1.126': attribute type 11 has an invalid length.
[   69.413523][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'.
[   70.240999][   T54] Bluetooth: hci1: command tx timeout
[   70.242835][   T54] Bluetooth: hci2: command tx timeout
[   70.340448][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   70.364583][ T6229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.464609][ T6238] netlink: 'syz.0.130': attribute type 5 has an invalid length.
[   70.645018][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'.
[   71.283205][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.285364][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.324541][ T6294] warning: `syz.0.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.337580][ T6291] modprobe (6291) used greatest stack depth: 20344 bytes left
[   71.482733][ T6310] netlink: 'syz.0.166': attribute type 4 has an invalid length.
[   71.487844][ T6310] netlink: 'syz.0.166': attribute type 4 has an invalid length.
[   71.584916][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'.
[   71.590259][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.640054][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.659020][ T6327] IPv6: Can't replace route, no match found
[   71.676772][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'.
[   71.847580][ T6340] wg1 speed is unknown, defaulting to 1000
[   71.852536][ T6340] wg1 speed is unknown, defaulting to 1000
[   71.856059][ T6340] wg1 speed is unknown, defaulting to 1000
[   71.870320][ T6340] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.885269][ T6340] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   71.893374][ T6345] netlink: 'syz.0.182': attribute type 4 has an invalid length.
[   71.900186][ T6345] netlink: 'syz.0.182': attribute type 4 has an invalid length.
[   71.920236][ T6340] wg1 speed is unknown, defaulting to 1000
[   71.923157][ T6340] wg1 speed is unknown, defaulting to 1000
[   71.926411][ T6340] wg1 speed is unknown, defaulting to 1000
[   72.012258][ T6356] openvswitch: netlink: Flow key attribute not present in set flow.
[   72.202896][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   72.344589][ T6384] netlink: 'syz.2.201': attribute type 4 has an invalid length.
[   72.446413][ T6392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.204'.
[   72.981265][ T6415] bridge_slave_0: left allmulticast mode
[   72.983251][ T6415] bridge_slave_0: left promiscuous mode
[   72.985232][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.993582][ T6415] bridge_slave_1: left allmulticast mode
[   72.995594][ T6415] bridge_slave_1: left promiscuous mode
[   72.997601][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.005364][ T6415] bond0: (slave bond_slave_0): Releasing backup interface
[   73.014690][ T6415] bond0: (slave bond_slave_1): Releasing backup interface
[   73.035070][ T6415] team0: Port device team_slave_0 removed
[   73.044835][ T6415] team0: Port device team_slave_1 removed
[   73.051937][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.058744][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.062590][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.065465][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.097584][ T6418] wg1 speed is unknown, defaulting to 1000
[   73.121477][ T6415] syz.1.212 (6415) used greatest stack depth: 19864 bytes left
[   73.301929][ T6428] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   73.313236][ T6428] macsec1: entered allmulticast mode
[   73.316318][ T6428] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   73.332394][ T6428] batman_adv: batadv0: Adding interface: macsec1
[   73.344567][ T6428] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.374191][ T6428] batman_adv: batadv0: Interface activated: macsec1
[   73.486813][ T6444] netlink: 'syz.1.223': attribute type 1 has an invalid length.
[   73.619328][ T6453] netlink: 36 bytes leftover after parsing attributes in process `syz.1.227'.
[   74.396088][ T6469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.428587][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'.
[   74.686497][ T6492] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.244'.
[   74.946919][ T6515] Bluetooth: MGMT ver 1.23
[   75.003067][ T6512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.072177][ T6512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.133645][ T6512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.186321][ T6512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.271373][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.287358][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.297289][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.308154][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.343476][ T6535] netlink: 68 bytes leftover after parsing attributes in process `syz.2.263'.
[   75.416749][ T6541] __nla_validate_parse: 2 callbacks suppressed
[   75.416759][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'.
[   76.221500][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'.
[   76.273104][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'.
[   76.390188][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.287'.
[   76.603266][ T6610] Illegal XDP return value 4294967274 on prog  (id 53) dev N/A, expect packet loss!
[   76.608552][ T6612] tipc: Started in network mode
[   76.611336][ T6612] tipc: Node identity 0eef24e82e85, cluster identity 4711
[   76.616021][ T6612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.657152][ T6612] syzkaller0: entered promiscuous mode
[   76.660834][ T6612] syzkaller0: entered allmulticast mode
[   76.663379][ T6612] tipc: Resetting bearer <eth:syzkaller0>
[   76.679107][ T6616] tipc: Started in network mode
[   76.681249][ T6616] tipc: Node identity e20149150548, cluster identity 4711
[   76.683661][ T6616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.686489][ T6616] syzkaller0: entered promiscuous mode
[   76.688286][ T6616] syzkaller0: entered allmulticast mode
[   76.696819][ T6618] dummy0: entered promiscuous mode
[   76.699037][ T6618] vlan2: entered promiscuous mode
[   76.710410][ T6611] tipc: Resetting bearer <eth:syzkaller0>
[   77.553413][ T6611] tipc: Disabling bearer <eth:syzkaller0>
[   77.569313][ T6620] tipc: Resetting bearer <eth:syzkaller0>
[   77.574616][ T6615] tipc: Resetting bearer <eth:syzkaller0>
[   77.585911][ T6615] tipc: Disabling bearer <eth:syzkaller0>
[   77.671557][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[   77.722776][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.303'.
[   77.823098][ T6636] wg1 speed is unknown, defaulting to 1000
[   79.708029][ T6722] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   79.755614][ T6722] netlink: 'syz.2.310': attribute type 4 has an invalid length.
[   79.814445][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.817777][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.890073][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.977606][ T6722] batman_adv: batadv0: Interface deactivated: macsec1
[   79.981228][ T6722] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   79.990360][  T792] wg1 speed is unknown, defaulting to 1000
[   79.992412][  T792] syz0: Port: 1 Link DOWN
[   79.995768][ T5902] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.002746][ T5902] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.011308][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.013959][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.067075][ T6740] netlink: 51 bytes leftover after parsing attributes in process `syz.2.318'.
[   80.231833][ T6760] IPv6: Can't replace route, no match found
[   80.307661][ T6766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.314673][ T6766] syzkaller0: entered promiscuous mode
[   80.321933][ T6766] syzkaller0: entered allmulticast mode
[   80.346723][ T6766] tipc: Resetting bearer <eth:syzkaller0>
[   80.354325][ T6765] tipc: Resetting bearer <eth:syzkaller0>
[   80.373846][ T6765] tipc: Disabling bearer <eth:syzkaller0>
[   80.697965][ T6780] netlink: 'syz.0.336': attribute type 3 has an invalid length.
[   80.701195][ T6780] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[   80.703614][ T6780] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.336'.
[   80.858784][ T6787] netlink: 'syz.0.339': attribute type 4 has an invalid length.
[   80.865835][ T6787] netlink: 'syz.0.339': attribute type 4 has an invalid length.
[   81.222714][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'.
[   81.225603][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'.
[   81.447462][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.354'.
[   81.482394][ T6820] netlink: 'syz.1.355': attribute type 9 has an invalid length.
[   81.485919][ T6820] netlink: 'syz.1.355': attribute type 7 has an invalid length.
[   81.489649][ T6820] netlink: 'syz.1.355': attribute type 8 has an invalid length.
[   81.520487][   T51] cfg80211: failed to load regulatory.db
[   81.541996][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.356'.
[   81.839643][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'.
[   81.953049][ T6854] netlink: zone id is out of range
[   81.975311][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'.
[   82.093584][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'.
[   82.136614][ T6872] netlink: 72 bytes leftover after parsing attributes in process `syz.1.381'.
[   82.621790][ T6909] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   82.625509][ T6909] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   82.670582][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'.
[   82.687953][ T6909] wg1 speed is unknown, defaulting to 1000
[   83.245547][ T6960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.260378][ T6960] syzkaller0: entered promiscuous mode
[   83.262287][ T6960] syzkaller0: entered allmulticast mode
[   83.286966][ T6960] tipc: Resetting bearer <eth:syzkaller0>
[   83.293121][ T6958] tipc: Resetting bearer <eth:syzkaller0>
[   83.309113][ T6958] tipc: Disabling bearer <eth:syzkaller0>
[   83.584040][ T6988] netlink: 'syz.0.434': attribute type 21 has an invalid length.
[   83.586459][ T6988] IPv6: NLM_F_CREATE should be specified when creating new route
[   83.590106][ T6988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.592455][ T6988] IPv6: NLM_F_CREATE should be set when creating new route
[   83.595018][ T6988] IPv6: NLM_F_CREATE should be set when creating new route
[   83.597628][ T6988] IPv6: NLM_F_CREATE should be set when creating new route
[   84.461803][ T7086] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   84.464809][ T7086] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   84.851404][ T7114] IPv6: NLM_F_CREATE should be specified when creating new route
[   84.853902][ T7114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.856325][ T7114] IPv6: NLM_F_CREATE should be set when creating new route
[   84.858766][ T7114] IPv6: NLM_F_CREATE should be set when creating new route
[   84.861441][ T7114] IPv6: NLM_F_CREATE should be set when creating new route
[   85.205351][ T7129] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   85.391710][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.574241][ T7172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.654766][ T7178] netlink: 'syz.0.526': attribute type 1 has an invalid length.
[   85.686595][ T7181] netlink: 'syz.0.527': attribute type 20 has an invalid length.
[   85.700805][ T5884] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.700882][ T7181] netlink: 'syz.0.527': attribute type 20 has an invalid length.
[   85.703584][ T5884] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.703620][ T5884] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.703635][ T5884] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.074720][ T7197] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   86.252773][ T7211] __nla_validate_parse: 17 callbacks suppressed
[   86.252786][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'.
[   86.255747][ T7210] netlink: 'syz.2.542': attribute type 3 has an invalid length.
[   86.304180][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[   86.308481][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[   86.312816][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[   86.327704][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'.
[   86.553348][ T7239] ieee802154 phy0 wpan0: encryption failed: -90
[   86.789316][ T7247] infiniband syz2: set down
[   86.791003][ T7247] infiniband syz2: added syzkaller0
[   86.814872][ T7247] RDS/IB: syz2: added
[   86.816768][ T7247] smc: adding ib device syz2 with port count 1
[   86.820281][ T7247] smc:    ib device syz2 port 1 has pnetid 
[   86.885866][ T7266] netlink: 'syz.0.563': attribute type 9 has an invalid length.
[   86.889557][ T7266] netlink: 184 bytes leftover after parsing attributes in process `syz.0.563'.
[   86.956842][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.565'.
[   86.985137][ T7272] netlink: 172 bytes leftover after parsing attributes in process `syz.0.566'.
[   87.218755][   T35] smc: removing ib device syz2
[   87.287381][    T9] IPVS: starting estimator thread 0...
[   87.388869][ T7282] IPVS: using max 32 ests per chain, 76800 per kthread
[   87.853376][ T7310] IPv6: NLM_F_REPLACE set, but no existing node found!
[   89.081639][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[   89.085712][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.603'.
[   89.345619][ T7376] netlink: 'syz.0.615': attribute type 4 has an invalid length.
[   89.372367][ T7378] wg1 speed is unknown, defaulting to 1000
[   89.710355][ T7399] netlink: 'syz.0.623': attribute type 3 has an invalid length.
[   90.215030][ T7437] macvtap2: entered promiscuous mode
[   90.216990][ T7437] macvtap2: entered allmulticast mode
[   90.218975][ T7437] dummy0: entered allmulticast mode
[   90.227785][ T7437] dummy0: left allmulticast mode
[   90.267541][ T7439] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   90.773113][ T7472] bond0 (unregistering): Released all slaves
[   91.410725][ T7542] syzkaller1: entered allmulticast mode
[   91.459141][ T7546] netlink: 'syz.0.690': attribute type 1 has an invalid length.
[   91.461676][ T7546] __nla_validate_parse: 7 callbacks suppressed
[   91.461685][ T7546] netlink: 208 bytes leftover after parsing attributes in process `syz.0.690'.
[   92.985923][ T7673] netlink: 68 bytes leftover after parsing attributes in process `syz.1.725'.
[   93.242124][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'.
[   93.357633][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'.
[   93.634201][ T7702] veth5: entered promiscuous mode
[   93.652351][ T7702] netlink: 120 bytes leftover after parsing attributes in process `syz.2.739'.
[   93.909974][ T7711] nbd2: detected capacity change from 0 to 63
[   93.951513][   T55] block nbd2: Receive control failed (result -104)
[   94.018344][ T7719] netlink: 'syz.0.744': attribute type 13 has an invalid length.
[   94.021391][ T7719] netlink: 'syz.0.744': attribute type 17 has an invalid length.
[   94.097344][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.102326][ T7719] 8021q: adding VLAN 0 to HW filter on device team0
[   94.110806][ T7719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.196847][ T7719] wg1 speed is unknown, defaulting to 1000
[   94.298384][ T7745] openvswitch: netlink: IP tunnel dst address not specified
[   94.306038][ T7747] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   94.701495][ T7778] netlink: 'syz.2.771': attribute type 4 has an invalid length.
[   94.948110][ T7803] netlink: 104 bytes leftover after parsing attributes in process `syz.0.782'.
[   95.323294][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.794'.
[   96.337509][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'.
[   96.561225][ T7879] sctp: [Deprecated]: syz.2.815 (pid 7879) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.561225][ T7879] Use struct sctp_sack_info instead
[   96.612955][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'.
[   96.804631][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'.
[   96.807600][ T7901] netlink: 'syz.2.826': attribute type 7 has an invalid length.
[   96.815572][ T7901] netlink: 'syz.2.826': attribute type 8 has an invalid length.
[   96.818978][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'.
[   96.827446][ T7901] gretap0: entered promiscuous mode
[   96.831315][ T7901] batadv_slave_1: entered promiscuous mode
[   96.834680][ T7901] erspan0: entered promiscuous mode
[   96.837464][ T7901] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[   96.840882][ T7901] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.844324][ T7901] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[   96.996088][ T7919] wg1 speed is unknown, defaulting to 1000
[   97.061260][ T7927] netlink: 'syz.2.838': attribute type 9 has an invalid length.
[   97.063814][ T7927] netlink: 'syz.2.838': attribute type 7 has an invalid length.
[   97.071672][ T7927] netlink: 'syz.2.838': attribute type 8 has an invalid length.
[   97.697751][ T7972] wg1 speed is unknown, defaulting to 1000
[   98.494530][ T8023] tc_dump_action: action bad kind
[   98.497419][ T8025] tipc: Enabled bearer <eth:gre0>, priority 10
[   98.753622][ T8046] wg1 speed is unknown, defaulting to 1000
[   98.837782][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'.
[   98.841327][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.907725][ T8066] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[   99.493155][ T5312] tipc: Node number set to 3880339733
[   99.509254][ T8138] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[   99.636352][ T8153] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   99.882382][ T8182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.885205][ T8182] syzkaller0: entered promiscuous mode
[   99.887174][ T8182] syzkaller0: entered allmulticast mode
[   99.907415][ T8182] tipc: Resetting bearer <eth:syzkaller0>
[   99.913423][ T8181] tipc: Resetting bearer <eth:syzkaller0>
[   99.922778][ T8181] tipc: Disabling bearer <eth:syzkaller0>
[  100.004339][ T8190] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  100.006913][ T8190] netlink: 228 bytes leftover after parsing attributes in process `syz.2.949'.
[  100.011615][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'.
[  100.599962][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  100.664834][ T8200] netlink: 'syz.0.954': attribute type 7 has an invalid length.
[  101.113973][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'.
[  101.117755][ T8213] openvswitch: netlink: Flow key attr not present in new flow.
[  101.166113][ T8218] IPv6: sit1: Disabled Multicast RS
[  101.168531][ T8218] sit1: entered allmulticast mode
[  101.220715][ T8222] netlink: 'syz.2.965': attribute type 16 has an invalid length.
[  101.223218][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.965'.
[  101.272026][ T8227] netlink: 364 bytes leftover after parsing attributes in process `syz.1.968'.
[  101.275231][ T8227] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  101.637390][ T8260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.660588][ T8263] wg1 speed is unknown, defaulting to 1000
[  101.727539][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  102.267965][ T8278] netlink: 228 bytes leftover after parsing attributes in process `syz.0.989'.
[  102.277405][ T8278] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  102.682695][ T8286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.991'.
[  102.722481][ T8289] wg1 speed is unknown, defaulting to 1000
[  102.884138][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'.
[  102.888053][ T8289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'.
[  102.913735][ T8289] validate_nla: 2 callbacks suppressed
[  102.913771][ T8289] netlink: 'syz.2.993': attribute type 13 has an invalid length.
[  102.919808][ T8289] netlink: 'syz.2.993': attribute type 17 has an invalid length.
[  102.928549][ T8289] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  103.200594][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'.
[  103.701459][ T8317] netlink: 'syz.0.1004': attribute type 1 has an invalid length.
[  103.704705][ T8317] netlink: 'syz.0.1004': attribute type 2 has an invalid length.
[  103.707659][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'.
[  103.751078][ T8320] netlink: 'syz.0.1005': attribute type 1 has an invalid length.
[  103.847135][ T8326] netlink: 'syz.1.1008': attribute type 13 has an invalid length.
[  103.850620][ T8326] netlink: 'syz.1.1008': attribute type 17 has an invalid length.
[  103.861612][ T8326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.906470][ T8331] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  103.910072][ T8326] wg1 speed is unknown, defaulting to 1000
[  104.017604][ T8339] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  104.174267][ T8351] ip6gretap0: entered promiscuous mode
[  104.176376][ T8351] macsec1: entered promiscuous mode
[  104.178149][ T8351] macsec1: entered allmulticast mode
[  104.180047][ T8351] ip6gretap0: entered allmulticast mode
[  104.211132][ T8354] Bluetooth: hci1: Opcode 0x080f failed: -4
[  104.706611][ T8392] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1036'.
[  104.721777][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'.
[  105.025533][ T8422] netlink: 'syz.2.1049': attribute type 12 has an invalid length.
[  105.817644][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1062'.
[  106.224974][ T8503] netlink: 'syz.0.1085': attribute type 3 has an invalid length.
[  106.248874][ T5874] Bluetooth: hci1: command 0x080f tx timeout
[  106.261569][ T8507] openvswitch: netlink: Multiple metadata blocks provided
[  106.826534][ T8478] delete_channel: no stack
[  106.838747][ T8541] netlink: 'syz.0.1103': attribute type 21 has an invalid length.
[  106.841267][ T8541] __nla_validate_parse: 1 callbacks suppressed
[  106.841275][ T8541] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1103'.
[  106.922837][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'.
[  106.977447][ T8553] openvswitch: netlink: Duplicate or invalid key (type 0).
[  106.980482][ T8553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.039626][ T8555] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  107.053382][ T5884] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  107.066126][ T8555] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.090730][ T8555] veth7: entered promiscuous mode
[  107.095224][ T8555] bond2: (slave veth7): Enslaving as a backup interface with a down link
[  107.106426][ T8555] bridge_slave_0: left allmulticast mode
[  107.108549][ T8555] bridge_slave_0: left promiscuous mode
[  107.111648][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.116675][ T8555] bridge_slave_1: left allmulticast mode
[  107.119342][ T8555] bridge_slave_1: left promiscuous mode
[  107.121443][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.127389][ T8555] bond0: (slave bond_slave_0): Releasing backup interface
[  107.132865][ T8555] bond0: (slave bond_slave_1): Releasing backup interface
[  107.137603][ T8555] team0: Port device team_slave_0 removed
[  107.142014][ T8555] team0: Port device team_slave_1 removed
[  107.144306][ T8555] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.148092][ T8555] bond1: (slave wireguard0): Releasing backup interface
[  107.151216][ T8555] wireguard0: left promiscuous mode
[  107.153363][ T8555] bond1: (slave wireguard1): making interface the new active one
[  107.156169][ T8555] wireguard1: entered promiscuous mode
[  107.164952][ T8555] bond1: (slave wireguard1): Releasing backup interface
[  107.167399][ T8555] wireguard1: left promiscuous mode
[  107.171261][ T8555] batman_adv: batadv0: Removing interface: macsec1
[  107.175678][ T8555] bond2: (slave ip6gretap1): Removing an active aggregator
[  107.181373][ T5884] bond2: Warning: Found an uninitialized port
[  107.183591][ T8555] bond2: (slave ip6gretap1): Releasing backup interface
[  107.185750][ T8555] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 8a:91:5a:a6:c5:3d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  107.196481][ T8555] bond2: (slave veth7): Releasing backup interface
[  107.722304][   T33] audit: type=1800 audit(1755004914.733:2): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1122" name="cgroup.controllers" dev="tmpfs" ino=1643 res=0 errno=0
[  107.972712][ T8603] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1129'.
[  108.082420][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'.
[  108.115765][ T8615] validate_nla: 2 callbacks suppressed
[  108.115779][ T8615] netlink: 'syz.2.1135': attribute type 1 has an invalid length.
[  108.164245][ T8621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.167209][ T8621] syzkaller0: entered promiscuous mode
[  108.172261][ T8621] syzkaller0: entered allmulticast mode
[  108.174427][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'.
[  108.177132][ T8621] tipc: Resetting bearer <eth:syzkaller0>
[  108.184035][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  108.197885][ T8620] tipc: Disabling bearer <eth:syzkaller0>
[  108.384462][ T8640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1147'.
[  108.459361][ T8646] delete_channel: no stack
[  108.537175][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1154'.
[  108.599070][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'.
[  108.601848][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'.
[  108.604959][ T8663] netlink: 'syz.2.1156': attribute type 13 has an invalid length.
[  108.713451][ T8669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1159'.
[  108.847749][ T8683] : renamed from batadv_slave_1 (while UP)
[  108.951281][ T8695] trusted_key: syz.2.1172 sent an empty control message without MSG_MORE.
[  108.991153][ T8701] netlink: 'syz.2.1175': attribute type 1 has an invalid length.
[  109.162021][ T8638] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  110.212319][   T55] block nbd0: Wrong magic (0x0)
[  110.263428][ T8747] IPVS: Error joining to the multicast group
[  110.286357][ T8745] gre2: entered allmulticast mode
[  110.601037][ T8776] wg1 speed is unknown, defaulting to 1000
[  110.626982][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.639938][ T8784] netlink: 'syz.0.1207': attribute type 13 has an invalid length.
[  110.644811][ T8784] netlink: 'syz.0.1207': attribute type 17 has an invalid length.
[  110.651684][ T8784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.673773][ T8787] netlink: 'syz.2.1211': attribute type 5 has an invalid length.
[  110.741547][ T8787] wg1 speed is unknown, defaulting to 1000
[  111.028081][ T8804] syz.0.1218 (8804) used greatest stack depth: 19352 bytes left
[  111.377292][ T8844] tap0: tun_chr_ioctl cmd 1074025677
[  111.380454][ T8844] tap0: linktype set to 776
[  111.728929][ T8869] block nbd1: server does not support multiple connections per device.
[  111.733838][ T8869] block nbd1: shutting down sockets
[  111.770860][ T8878] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  111.774558][ T8878] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  111.777318][ T8878] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  111.780155][ T8878] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  111.784305][ T8878] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  112.012172][ T8904] __nla_validate_parse: 40 callbacks suppressed
[  112.012185][ T8904] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1264'.
[  112.087542][ T8912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.092806][ T8912] syzkaller0: entered promiscuous mode
[  112.094773][ T8912] syzkaller0: entered allmulticast mode
[  112.107088][ T8914] syzkaller1: entered promiscuous mode
[  112.109280][ T8914] syzkaller1: entered allmulticast mode
[  112.115406][ T8912] tipc: Resetting bearer <eth:syzkaller0>
[  112.129964][ T8911] tipc: Resetting bearer <eth:syzkaller0>
[  112.137085][ T8911] tipc: Disabling bearer <eth:syzkaller0>
[  112.323350][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.325865][ T8924] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  112.370559][ T8926] block nbd1: server does not support multiple connections per device.
[  112.380645][ T8926] block nbd1: shutting down sockets
[  112.420373][ T8936] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  112.469711][ T8940] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.566895][ T9029] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  113.670910][ T9037] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1327'.
[  113.674018][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'.
[  113.796630][ T9049] IPVS: length: 100 != 8
[  113.871127][ T9058] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1337'.
[  113.959009][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'.
[  114.036654][ T9082] erspan0: entered promiscuous mode
[  114.096476][ T9088] validate_nla: 26 callbacks suppressed
[  114.096489][ T9088] netlink: 'syz.0.1351': attribute type 1 has an invalid length.
[  114.106200][ T9088] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1351'.
[  114.345336][ T9111] batadv_slave_1: entered promiscuous mode
[  114.358857][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'.
[  114.423372][ T5874] Bluetooth: hci2: link tx timeout
[  114.426256][ T5874] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.465643][   T54] Bluetooth: hci2: link tx timeout
[  114.467258][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.489368][   T54] Bluetooth: hci2: link tx timeout
[  114.491119][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.814160][   T54] Bluetooth: hci2: link tx timeout
[  114.815900][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.980430][   T54] Bluetooth: hci2: link tx timeout
[  114.982119][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.987740][ T9168] veth1_macvtap: left promiscuous mode
[  115.000031][ T9168] macsec0: entered allmulticast mode
[  115.028879][ T9168] veth1_macvtap: entered promiscuous mode
[  115.038970][ T9168] veth1_macvtap: entered allmulticast mode
[  115.041105][ T9168] macsec0: left allmulticast mode
[  115.048773][ T9168] veth1_macvtap: left allmulticast mode
[  115.119285][   T54] Bluetooth: hci2: link tx timeout
[  115.120973][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.692166][ T9199] vlan2: entered allmulticast mode
[  115.696262][ T9199] dummy0: entered allmulticast mode
[  115.812821][ T9206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'.
[  115.848295][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'.
[  115.868435][ T9210] tipc: Resetting bearer <eth:gre0>
[  115.966048][ T9210] bond1: left promiscuous mode
[  115.967843][ T9210] macsec1: left allmulticast mode
[  115.973727][ T9210] veth5: left promiscuous mode
[  115.987705][ T9210] veth7: left promiscuous mode
[  115.991894][ T9210] gre2: left allmulticast mode
[  116.000046][   T54] Bluetooth: hci2: link tx timeout
[  116.001693][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.004076][   T54] Bluetooth: hci2: link tx timeout
[  116.005754][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.008832][ T9223] vxcan1 speed is unknown, defaulting to 1000
[  116.012228][ T9223] vxcan1 speed is unknown, defaulting to 1000
[  116.017112][ T9223] vxcan1 speed is unknown, defaulting to 1000
[  116.174736][  T793] IPVS: starting estimator thread 0...
[  116.176856][ T9233] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  116.204534][ T9239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.210555][   T54] Bluetooth: hci2: link tx timeout
[  116.212224][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.216592][ T9223] infiniband syz2: set down
[  116.219425][ T9223] infiniband syz2: added vxcan1
[  116.224391][ T5312] vxcan1 speed is unknown, defaulting to 1000
[  116.259833][ T9223] RDS/IB: syz2: added
[  116.267203][ T9223] smc: adding ib device syz2 with port count 1
[  116.268683][ T9238] IPVS: using max 61 ests per chain, 146400 per kthread
[  116.271126][ T9223] smc:    ib device syz2 port 1 has pnetid 
[  116.273292][ T5312] vxcan1 speed is unknown, defaulting to 1000
[  116.276184][ T9223] vxcan1 speed is unknown, defaulting to 1000
[  116.301962][ T9245] netlink: 'syz.2.1412': attribute type 13 has an invalid length.
[  116.369826][ T9250] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  116.478714][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  116.493795][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'.
[  116.495842][ T9223] vxcan1 speed is unknown, defaulting to 1000
[  116.641021][ T9223] vxcan1 speed is unknown, defaulting to 1000
[  116.701904][ T9271] !: renamed from dummy0
[  116.775379][ T9276] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  116.809102][ T9276] wg1 speed is unknown, defaulting to 1000
[  116.820971][ T9276] vxcan1 speed is unknown, defaulting to 1000
[  117.041857][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'.
[  117.243072][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'.
[  117.284018][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'.
[  117.286952][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'.
[  117.341254][ T9336] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  117.702696][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'.
[  118.063439][ T9366] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  118.386550][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  118.459844][  T793] tipc: Node number set to 1380430590
[  118.835685][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'.
[  119.464921][ T9470] netlink: 'syz.0.1503': attribute type 2 has an invalid length.
[  119.472566][ T9470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1503'.
[  119.581239][ T9474] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  119.731246][ T9487] netlink: 'syz.2.1511': attribute type 1 has an invalid length.
[  119.733632][ T9487] NCSI netlink: No device for ifindex 0
[  119.933648][ T9508] netlink: 'syz.0.1521': attribute type 1 has an invalid length.
[  119.936380][ T9508] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1521'.
[  119.940588][ T9508] netlink: 'syz.0.1521': attribute type 1 has an invalid length.
[  119.943114][ T9508] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1521'.
[  120.041204][ T9516] wg1 speed is unknown, defaulting to 1000
[  120.046022][ T9516] vxcan1 speed is unknown, defaulting to 1000
[  120.048449][ T9522] netlink: 'syz.0.1527': attribute type 41 has an invalid length.
[  120.509553][ T9557] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  120.514205][ T9557] gretap1: entered promiscuous mode
[  120.728282][ T9577] netlink: 'syz.0.1552': attribute type 5 has an invalid length.
[  120.732530][ T9577] netlink: 'syz.0.1552': attribute type 5 has an invalid length.
[  122.365627][ T9665] netlink: 'syz.0.1590': attribute type 303 has an invalid length.
[  122.461644][ T9660] __nla_validate_parse: 3 callbacks suppressed
[  122.461657][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1588'.
[  122.825868][ T9701] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1607'.
[  123.092921][ T9727] netlink: 'syz.0.1619': attribute type 6 has an invalid length.
[  123.104145][ T9727] netlink: 'syz.0.1619': attribute type 6 has an invalid length.
[  123.183909][ T9737] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1624'.
[  123.217453][ T9739] : entered promiscuous mode
[  123.276094][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'.
[  123.285927][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'.
[  123.910811][ T9779] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1643'.
[  123.961351][ T9785] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1646'.
[  124.402279][   T60] block nbd2: Possible stuck request ffff888022608000: control (read@0,1024B). Runtime 30 seconds
[  124.406565][   T60] block nbd2: Possible stuck request ffff888022608200: control (read@1024,1024B). Runtime 30 seconds
[  124.411147][   T60] block nbd2: Possible stuck request ffff888022608400: control (read@2048,1024B). Runtime 30 seconds
[  124.415724][   T60] block nbd2: Possible stuck request ffff888022608600: control (read@3072,1024B). Runtime 30 seconds
[  125.042182][ T9823] tipc: New replicast peer: 255.255.255.255
[  125.044454][ T9823] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.058949][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'.
[  125.061777][ T9823] tipc: Disabling bearer <udp:syz2>
[  126.150396][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1675'.
[  126.372848][ T9895] netlink: 'syz.2.1687': attribute type 1 has an invalid length.
[  126.376274][ T9895] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1687'.
[  126.818053][ T9944] syzkaller1: entered promiscuous mode
[  126.820048][ T9944] syzkaller1: entered allmulticast mode
[  126.874952][ T9947] xt_policy: neither incoming nor outgoing policy selected
[  127.329687][ T9993] nbd: nbd2 already in use
[  127.450405][T10007] netlink: 'syz.2.1740': attribute type 2 has an invalid length.
[  127.501906][T10013] __nla_validate_parse: 2 callbacks suppressed
[  127.501917][T10013] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1743'.
[  127.650896][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'.
[  127.653722][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'.
[  127.793323][T10038] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1755'.
[  127.796569][T10038] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1755'.
[  127.799841][T10038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1755'.
[  127.803580][T10038] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1755'.
[  127.808690][T10038] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1755'.
[  127.811572][T10038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1755'.
[  127.821800][T10040] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  128.105055][T10072] pim6reg1: entered promiscuous mode
[  128.106819][T10072] pim6reg1: entered allmulticast mode
[  128.322851][T10102] netlink: 'syz.0.1786': attribute type 1 has an invalid length.
[  128.325669][T10102] netlink: 'syz.0.1786': attribute type 2 has an invalid length.
[  128.332537][T10102] netlink: 'syz.0.1786': attribute type 1 has an invalid length.
[  128.335134][T10102] netlink: 'syz.0.1786': attribute type 2 has an invalid length.
[  128.635730][T10133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1801'.
[  129.213816][T10173] wg1 speed is unknown, defaulting to 1000
[  129.218164][T10173] vxcan1 speed is unknown, defaulting to 1000
[  129.547418][T10185] netlink: 'syz.2.1823': attribute type 4 has an invalid length.
[  129.690018][T10200] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  129.720399][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  129.744079][T10206] netlink: 'syz.2.1832': attribute type 6 has an invalid length.
[  129.769151][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  129.798395][T10210] team0: entered promiscuous mode
[  129.800873][T10210] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  129.804355][T10210] team0: left promiscuous mode
[  130.048068][T10237] openvswitch: netlink: Missing key (keys=40, expected=80)
[  130.198242][T10247] syzkaller0: entered promiscuous mode
[  130.200747][T10247] syzkaller0: entered allmulticast mode
[  130.222653][T10249] netlink: 'syz.1.1852': attribute type 1 has an invalid length.
[  130.330482][T10254] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  131.286389][T10254] wg1 speed is unknown, defaulting to 1000
[  131.290738][T10254] vxcan1 speed is unknown, defaulting to 1000
[  132.379171][T10357] block nbd1: server does not support multiple connections per device.
[  132.383827][T10357] block nbd1: shutting down sockets
[  132.523635][T10370] __nla_validate_parse: 14 callbacks suppressed
[  132.523646][T10370] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1900'.
[  132.721655][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  133.171344][T10424] netlink: 'syz.0.1916': attribute type 1 has an invalid length.
[  133.273528][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'.
[  133.416608][T10446] syzkaller0: entered promiscuous mode
[  133.418450][T10446] syzkaller0: entered allmulticast mode
[  134.539568][T10470] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  134.753344][T10487] netlink: 'syz.0.1940': attribute type 11 has an invalid length.
[  135.990128][T10562] wg1 speed is unknown, defaulting to 1000
[  135.993724][T10562] vxcan1 speed is unknown, defaulting to 1000
[  136.266052][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'.
[  136.634059][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'.
[  136.771126][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'.
[  136.774001][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'.
[  136.881307][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'.
[  136.972413][T10612] tun0: tun_chr_ioctl cmd 2147767507
[  137.092371][T10624] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  137.113878][T10626] : entered promiscuous mode
[  137.128525][T10628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2000'.
[  137.366006][T10647] netlink: 'syz.0.2001': attribute type 3 has an invalid length.
[  138.132337][T10651] wg1 speed is unknown, defaulting to 1000
[  138.136861][T10651] vxcan1 speed is unknown, defaulting to 1000
[  138.480178][T10680] Bluetooth: MGMT ver 1.23
[  138.483432][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2019'.
[  138.486429][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2019'.
[  139.434184][T10679] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  139.468995][T10684] wg1 speed is unknown, defaulting to 1000
[  139.473000][T10684] vxcan1 speed is unknown, defaulting to 1000
[  139.702140][T10702] syz.0.2026 uses old SIOCAX25GETINFO
[  139.976802][T10718] netlink: 'syz.0.2034': attribute type 7 has an invalid length.
[  139.990209][T10718] netlink: 'syz.0.2034': attribute type 8 has an invalid length.
[  140.274670][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2043'.
[  140.536945][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'.
[  140.558866][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  140.560861][ T5874] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  140.561746][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'.
[  140.727095][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2061'.
[  140.743623][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2063'.
[  140.746422][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  140.753992][T10782] netlink: 'syz.1.2064': attribute type 3 has an invalid length.
[  140.754598][T10781] netlink: 'syz.2.2063': attribute type 5 has an invalid length.
[  140.757435][T10782] netlink: 'syz.1.2064': attribute type 3 has an invalid length.
[  141.031050][T10808] netlink: 'syz.0.2076': attribute type 2 has an invalid length.
[  141.033463][T10808] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2076'.
[  141.122197][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'.
[  142.476218][T10868] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  142.479777][T10868] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  142.482604][T10868] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  144.073351][T10974] __nla_validate_parse: 7 callbacks suppressed
[  144.073369][T10974] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2154'.
[  144.219800][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2160'.
[  144.223527][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2160'.
[  144.282929][T10989] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  144.404573][T10990] ip6gretap0: left allmulticast mode
[  144.416935][ T5902] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.420324][ T5902] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.422900][ T5902] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.425374][ T5902] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.787444][T10997] syzkaller0: entered promiscuous mode
[  144.789638][T10997] syzkaller0: entered allmulticast mode
[  145.851638][T10999] sch_fq: defrate 0 ignored.
[  146.003326][T11010] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  147.017493][T11026] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2175'.
[  147.121361][T11039] netlink: 'syz.0.2181': attribute type 1 has an invalid length.
[  147.123820][T11039] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2181'.
[  147.345053][T11067] netlink: 'syz.0.2195': attribute type 1 has an invalid length.
[  147.347502][T11067] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2195'.
[  147.607977][T11093] dvmrp8: entered allmulticast mode
[  147.626927][T11085] dvmrp8: left allmulticast mode
[  147.675220][T11098] delete_channel: no stack
[  147.853307][T11119] netlink: 'syz.0.2219': attribute type 29 has an invalid length.
[  147.855974][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'.
[  148.020765][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'.
[  148.326738][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'.
[  149.126863][T11215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2264'.
[  149.132976][T11215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2264'.
[  149.187318][T11219] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2266'.
[  149.287293][T11225] syzkaller0: entered promiscuous mode
[  149.294775][T11225] syzkaller0: entered allmulticast mode
[  149.821129][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'.
[  149.881680][T11250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2281'.
[  150.554499][T11259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2284'.
[  150.594927][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'.
[  150.652316][T11267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'.
[  150.707444][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'.
[  151.121653][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'.
[  151.327818][T11298] netlink: 'syz.2.2298': attribute type 13 has an invalid length.
[  152.000650][T11345] x_tables: ip_tables: udp match: only valid for protocol 17
[  152.161260][T11361] batadv_slave_0: entered promiscuous mode
[  152.361298][T11354] batadv_slave_0: left promiscuous mode
[  152.496740][T11393] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  152.504148][T11393] ieee802154 phy0 wpan0: encryption failed: -22
[  152.573232][ T5923] IPVS: starting estimator thread 0...
[  152.656234][T11405] wg1 speed is unknown, defaulting to 1000
[  152.661284][T11405] vxcan1 speed is unknown, defaulting to 1000
[  152.673910][T11402] IPVS: using max 62 ests per chain, 148800 per kthread
[  153.590871][T11469] netlink: 'syz.2.2364': attribute type 10 has an invalid length.
[  153.593692][T11469] batadv0: entered promiscuous mode
[  153.595495][T11469] batadv0: entered allmulticast mode
[  153.597475][T11469] bridge0: port 1(batadv0) entered blocking state
[  153.599638][T11469] bridge0: port 1(batadv0) entered disabled state
[  154.049389][T11517] netlink: 'syz.1.2389': attribute type 39 has an invalid length.
[  154.072685][T11515] tipc: New replicast peer: 255.255.255.255
[  154.074971][ T5902] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  154.077865][ T5902] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  154.079025][T11515] tipc: Enabled bearer <udp:syz2>, priority 10
[  154.091829][T11515] tipc: Disabling bearer <udp:syz2>
[  154.268122][T11528] __nla_validate_parse: 5 callbacks suppressed
[  154.268133][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'.
[  154.276114][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'.
[  154.282012][T11528] netlink: 'syz.2.2394': attribute type 5 has an invalid length.
[  154.297596][T11530] netlink: 'syz.1.2395': attribute type 1 has an invalid length.
[  154.302168][T11530] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2395'.
[  154.452179][T11543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2401'.
[  154.481741][   T60] block nbd2: Possible stuck request ffff888022608000: control (read@0,1024B). Runtime 60 seconds
[  154.485560][   T60] block nbd2: Possible stuck request ffff888022608200: control (read@1024,1024B). Runtime 60 seconds
[  154.489582][   T60] block nbd2: Possible stuck request ffff888022608400: control (read@2048,1024B). Runtime 60 seconds
[  154.493737][   T60] block nbd2: Possible stuck request ffff888022608600: control (read@3072,1024B). Runtime 60 seconds
[  154.674878][T11562] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2409'.
[  154.701352][T11566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2411'.
[  154.861810][T11585] netlink: 'syz.2.2420': attribute type 1 has an invalid length.
[  155.046181][T11607] netlink: 'syz.2.2430': attribute type 10 has an invalid length.
[  155.056576][T11607] batman_adv: batadv0: Adding interface: team0
[  155.059814][T11607] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.067344][T11607] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  155.076438][T11607] netlink: 'syz.2.2430': attribute type 10 has an invalid length.
[  155.081773][T11607] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2430'.
[  155.085083][T11607] team0: entered promiscuous mode
[  155.087551][T11607] 8021q: adding VLAN 0 to HW filter on device team0
[  155.090366][T11607] batman_adv: batadv0: Interface activated: team0
[  155.092473][T11607] batman_adv: batadv0: Interface deactivated: team0
[  155.094532][T11607] batman_adv: batadv0: Removing interface: team0
[  155.097145][T11607] bridge0: port 2(team0) entered blocking state
[  155.102679][T11607] bridge0: port 2(team0) entered disabled state
[  155.104743][T11607] team0: entered allmulticast mode
[  155.250958][T11627] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  155.438318][T11648] netlink: 'syz.2.2450': attribute type 10 has an invalid length.
[  155.443119][T11648] team0: left allmulticast mode
[  155.444690][T11648] team0: left promiscuous mode
[  155.446262][T11648] bridge0: port 2(team0) entered disabled state
[  155.453669][T11648] 8021q: adding VLAN 0 to HW filter on device team0
[  155.456743][T11648] bond0: (slave team0): Enslaving as an active interface with an up link
[  155.626772][T11672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2460'.
[  156.683557][T11686] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  156.685958][ T5295] udevd[5295]: worker [5845] /devices/virtual/block/nbd2 is taking a long time
[  156.916392][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2479'.
[  157.037917][T11732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.042266][T11732] syzkaller0: entered promiscuous mode
[  157.044787][T11732] syzkaller0: entered allmulticast mode
[  157.060955][T11732] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  157.079203][T11732] tipc: Resetting bearer <eth:syzkaller0>
[  157.090559][T11731] tipc: Resetting bearer <eth:syzkaller0>
[  157.110875][T11731] tipc: Disabling bearer <eth:syzkaller0>
[  157.146080][T11738] wg1 speed is unknown, defaulting to 1000
[  157.150481][T11738] vxcan1 speed is unknown, defaulting to 1000
[  157.208755][T11744] netlink: 'syz.1.2490': attribute type 13 has an invalid length.
[  157.211273][T11744] netlink: 'syz.1.2490': attribute type 17 has an invalid length.
[  157.242463][T11744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.951258][T11805] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  157.954634][T11805] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  158.439950][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  158.667513][T11867] netlink: 'syz.0.2537': attribute type 10 has an invalid length.
[  158.671780][T11867] batman_adv: batadv0: Adding interface: team0
[  158.674587][T11867] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.682484][T11867] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  158.686914][T11867] netlink: 'syz.0.2537': attribute type 10 has an invalid length.
[  158.689788][T11867] team0: entered promiscuous mode
[  158.691498][T11867] team_slave_0: entered promiscuous mode
[  158.693551][T11867] team_slave_1: entered promiscuous mode
[  158.696310][T11867] 8021q: adding VLAN 0 to HW filter on device team0
[  158.698502][T11867] batman_adv: batadv0: Interface activated: team0
[  158.703656][T11867] batman_adv: batadv0: Interface deactivated: team0
[  158.705761][T11867] batman_adv: batadv0: Removing interface: team0
[  158.709150][T11867] bridge0: port 3(team0) entered blocking state
[  158.711685][T11867] bridge0: port 3(team0) entered disabled state
[  158.713955][T11867] team0: entered allmulticast mode
[  158.715693][T11867] team_slave_0: entered allmulticast mode
[  158.717712][T11867] team_slave_1: entered allmulticast mode
[  158.984470][T11884] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  158.987116][T11884] netlink: 'syz.0.2545': attribute type 3 has an invalid length.
[  159.552788][T11931] __nla_validate_parse: 3 callbacks suppressed
[  159.552799][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2567'.
[  159.582113][T11933] bridge: RTM_NEWNEIGH with invalid ether address
[  159.637714][T11940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.980100][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2583'.
[  160.107425][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'.
[  160.143534][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'.
[  160.226725][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2596'.
[  160.288379][T11999] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2599'.
[  160.347678][T12004] tipc: New replicast peer: 255.255.255.255
[  160.353515][T12004] tipc: Enabled bearer <udp:syz2>, priority 10
[  160.362853][T12000] syzkaller1: entered promiscuous mode
[  160.364720][T12000] syzkaller1: entered allmulticast mode
[  160.371854][T12000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2600'.
[  160.473421][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2605'.
[  160.571632][T12011] tipc: Resetting bearer <eth:macvtap0>
[  160.592073][T12011] tipc: Disabling bearer <eth:macvtap0>
[  160.973910][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'.
[  161.012578][T12066] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2629'.
[  161.234660][   T56] block nbd0: Receive control failed (result -107)
[  161.238849][T12082] block nbd0: reconnected socket
[  161.242380][T12082] block nbd0: reconnected socket
[  161.266977][   T56] block nbd0: Receive control failed (result -32)
[  161.435995][T12102] IPv6: sit1: Disabled Multicast RS
[  161.441607][T12102] sit1: entered allmulticast mode
[  161.774595][T12142] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  161.776923][T12142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.135051][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.142074][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.145042][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.154622][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.217829][T12195] veth1: entered promiscuous mode
[  162.220900][T12195] bridge5: entered promiscuous mode
[  162.223341][T12195] debugfs: 'hsr1' already exists in 'hsr'
[  162.225404][T12195] Cannot create hsr debugfs directory
[  162.227170][T12195] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[  162.230746][T12195] hsr1: entered promiscuous mode
[  162.664892][T12218] wg1 speed is unknown, defaulting to 1000
[  162.668470][T12218] vxcan1 speed is unknown, defaulting to 1000
[  162.982254][T12233] veth1_to_team: entered allmulticast mode
[  163.927481][T12281] openvswitch: netlink: Multiple metadata blocks provided
[  164.477296][T12327] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  164.480501][T12327] openvswitch: netlink: Message has 1 unknown bytes.
[  164.511279][T12329] dvmrp0: entered allmulticast mode
[  164.555275][T12338] netlink: 'syz.0.2745': attribute type 1 has an invalid length.
[  164.570245][T12339] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  164.665725][T12351] __nla_validate_parse: 24 callbacks suppressed
[  164.665737][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2753'.
[  164.670783][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2753'.
[  164.715648][T12354] netlink: 'syz.1.2754': attribute type 1 has an invalid length.
[  164.752381][T12354] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.768237][T12354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.782400][T12354] bond1: (slave batadv0): making interface the new active one
[  164.786953][T12354] bond1: (slave batadv0): Enslaving as an active interface with an up link
[  164.853200][T12372] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2763'.
[  164.920707][T12382] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.246530][ T5874] Bluetooth: hci2: link tx timeout
[  165.248220][ T5874] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.833524][T12469] netlink: 'syz.2.2807': attribute type 1 has an invalid length.
[  165.836146][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'.
[  166.332933][T12486] netlink: 'syz.0.2815': attribute type 2 has an invalid length.
[  166.420885][T12495] netlink: 'syz.0.2819': attribute type 10 has an invalid length.
[  166.423448][T12495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2819'.
[  166.426176][T12495] dummy0: entered promiscuous mode
[  166.430834][T12495] bridge0: port 4(dummy0) entered blocking state
[  166.432852][T12495] bridge0: port 4(dummy0) entered disabled state
[  166.674844][T12517] sctp: [Deprecated]: syz.1.2829 (pid 12517) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.674844][T12517] Use struct sctp_sack_info instead
[  166.680773][T12517] sctp: [Deprecated]: syz.1.2829 (pid 12517) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.680773][T12517] Use struct sctp_sack_info instead
[  166.977923][T12549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.278874][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  167.795712][T12616] wg1 speed is unknown, defaulting to 1000
[  167.802383][T12616] vxcan1 speed is unknown, defaulting to 1000
[  168.154293][T12639] syzkaller0: entered promiscuous mode
[  168.156033][T12639] syzkaller0: entered allmulticast mode
[  169.334466][T12665] delete_channel: no stack
[  169.631587][T12687] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  169.730331][T12693] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  169.867992][T12701] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2896'.
[  169.943145][T12701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.947225][T12701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.951929][T12701] bond0 (unregistering): Released all slaves
[  170.064312][T12706] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2898'.
[  170.094032][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'.
[  170.131396][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'.
[  170.265105][T12723] netlink: zone id is out of range
[  170.266973][T12723] netlink: zone id is out of range
[  170.269185][T12723] netlink: zone id is out of range
[  170.270932][T12723] netlink: zone id is out of range
[  170.272612][T12723] netlink: zone id is out of range
[  170.274420][T12723] netlink: zone id is out of range
[  170.276168][T12723] netlink: zone id is out of range
[  170.281034][T12723] netlink: zone id is out of range
[  170.283436][T12723] netlink: zone id is out of range
[  170.285222][T12723] netlink: zone id is out of range
[  170.461251][T12746] ==================================================================
[  170.464102][T12746] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  170.466607][T12746] Read of size 4 at addr ffff8881122ac544 by task syz.1.2916/12746
[  170.470520][T12746] 
[  170.471323][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.1.2916 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  170.471336][T12746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.471342][T12746] Call Trace:
[  170.471347][T12746]  <TASK>
[  170.471353][T12746]  dump_stack_lvl+0x189/0x250
[  170.471373][T12746]  ? __kasan_check_byte+0x12/0x40
[  170.471386][T12746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.471396][T12746]  ? lock_release+0x4b/0x3e0
[  170.471410][T12746]  ? __virt_addr_valid+0x4a5/0x5c0
[  170.471422][T12746]  print_report+0xca/0x240
[  170.471452][T12746]  ? xfrm_alloc_spi+0x570/0xf30
[  170.471465][T12746]  kasan_report+0x118/0x150
[  170.471476][T12746]  ? xfrm_alloc_spi+0x570/0xf30
[  170.471490][T12746]  xfrm_alloc_spi+0x570/0xf30
[  170.471502][T12746]  ? xfrm_alloc_spi+0x2a0/0xf30
[  170.471516][T12746]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  170.471526][T12746]  ? xfrm_find_acq+0x87/0xa0
[  170.471538][T12746]  xfrm_alloc_userspi+0x70b/0xc90
[  170.471549][T12746]  ? apparmor_capable+0x137/0x1b0
[  170.471558][T12746]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  170.471566][T12746]  ? __nla_parse+0x40/0x60
[  170.471577][T12746]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.471585][T12746]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.471599][T12746]  ? __pfx___mutex_trylock_common+0x10/0x10
[  170.471609][T12746]  ? rcu_is_watching+0x15/0xb0
[  170.471617][T12746]  ? trace_contention_end+0x39/0x120
[  170.471625][T12746]  ? __mutex_lock+0x335/0x1360
[  170.471636][T12746]  netlink_rcv_skb+0x208/0x470
[  170.471647][T12746]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.471654][T12746]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  170.471666][T12746]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.471675][T12746]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.471685][T12746]  xfrm_netlink_rcv+0x79/0x90
[  170.471692][T12746]  netlink_unicast+0x82f/0x9e0
[  170.471702][T12746]  ? __pfx_netlink_unicast+0x10/0x10
[  170.471710][T12746]  ? netlink_sendmsg+0x642/0xb30
[  170.471718][T12746]  ? skb_put+0x11b/0x210
[  170.471729][T12746]  netlink_sendmsg+0x805/0xb30
[  170.471740][T12746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.471750][T12746]  ? aa_sock_msg_perm+0xf1/0x1d0
[  170.471760][T12746]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  170.471769][T12746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.471778][T12746]  __sock_sendmsg+0x21c/0x270
[  170.471787][T12746]  ____sys_sendmsg+0x505/0x830
[  170.471799][T12746]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.471811][T12746]  ? import_iovec+0x74/0xa0
[  170.471819][T12746]  ___sys_sendmsg+0x21f/0x2a0
[  170.471829][T12746]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.471847][T12746]  ? __fget_files+0x2a/0x420
[  170.471862][T12746]  ? __fget_files+0x3a0/0x420
[  170.471874][T12746]  __x64_sys_sendmsg+0x19b/0x260
[  170.471885][T12746]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  170.471898][T12746]  ? rcu_is_watching+0x15/0xb0
[  170.471907][T12746]  ? do_syscall_64+0xbe/0x3b0
[  170.471918][T12746]  do_syscall_64+0xfa/0x3b0
[  170.471927][T12746]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.471935][T12746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.471943][T12746]  ? exc_page_fault+0x9f/0xf0
[  170.471952][T12746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.471960][T12746] RIP: 0033:0x7f459af8ebe9
[  170.471980][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.471988][T12746] RSP: 002b:00007f459bdec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.471997][T12746] RAX: ffffffffffffffda RBX: 00007f459b1b5fa0 RCX: 00007f459af8ebe9
[  170.472004][T12746] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  170.472009][T12746] RBP: 00007f459b011e19 R08: 0000000000000000 R09: 0000000000000000
[  170.472014][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.472018][T12746] R13: 00007f459b1b6038 R14: 00007f459b1b5fa0 R15: 00007ffd6e6449f8
[  170.472028][T12746]  </TASK>
[  170.472031][T12746] 
[  170.593310][T12746] Allocated by task 10276:
[  170.594739][T12746]  kasan_save_track+0x3e/0x80
[  170.596224][T12746]  __kasan_slab_alloc+0x6c/0x80
[  170.597951][T12746]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  170.599742][T12746]  xfrm_state_alloc+0x24/0x2f0
[  170.601285][T12746]  xfrm_add_sa+0x17d1/0x4070
[  170.602938][T12746]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.604675][T12746]  netlink_rcv_skb+0x208/0x470
[  170.606416][T12746]  xfrm_netlink_rcv+0x79/0x90
[  170.607903][T12746]  netlink_unicast+0x82f/0x9e0
[  170.609387][T12746]  netlink_sendmsg+0x805/0xb30
[  170.610905][T12746]  __sock_sendmsg+0x21c/0x270
[  170.612375][T12746]  ____sys_sendmsg+0x505/0x830
[  170.613891][T12746]  ___sys_sendmsg+0x21f/0x2a0
[  170.615360][T12746]  __x64_sys_sendmsg+0x19b/0x260
[  170.616902][T12746]  do_syscall_64+0xfa/0x3b0
[  170.618386][T12746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.620220][T12746] 
[  170.621055][T12746] Freed by task 5312:
[  170.622306][T12746]  kasan_save_track+0x3e/0x80
[  170.623809][T12746]  kasan_save_free_info+0x46/0x50
[  170.625370][T12746]  __kasan_slab_free+0x5b/0x80
[  170.626998][T12746]  kmem_cache_free+0x18f/0x400
[  170.628709][T12746]  xfrm_state_gc_task+0x52d/0x6b0
[  170.630592][T12746]  process_scheduled_works+0xae1/0x17b0
[  170.632497][T12746]  worker_thread+0x8a0/0xda0
[  170.633970][T12746]  kthread+0x711/0x8a0
[  170.635224][T12746]  ret_from_fork+0x3fc/0x770
[  170.636740][T12746]  ret_from_fork_asm+0x1a/0x30
[  170.638316][T12746] 
[  170.639119][T12746] The buggy address belongs to the object at ffff8881122ac480
[  170.639119][T12746]  which belongs to the cache xfrm_state of size 928
[  170.643513][T12746] The buggy address is located 196 bytes inside of
[  170.643513][T12746]  freed 928-byte region [ffff8881122ac480, ffff8881122ac820)
[  170.647767][T12746] 
[  170.648615][T12746] The buggy address belongs to the physical page:
[  170.650797][T12746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881122ac480 pfn:0x1122ac
[  170.654122][T12746] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  170.656736][T12746] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  170.659073][T12746] page_type: f5(slab)
[  170.660443][T12746] raw: 057ff00000000040 ffff88801cb47b40 dead000000000122 0000000000000000
[  170.663191][T12746] raw: ffff8881122ac480 00000000800e0008 00000000f5000000 0000000000000000
[  170.665882][T12746] head: 057ff00000000040 ffff88801cb47b40 dead000000000122 0000000000000000
[  170.668596][T12746] head: ffff8881122ac480 00000000800e0008 00000000f5000000 0000000000000000
[  170.671260][T12746] head: 057ff00000000002 ffffea000448ab01 00000000ffffffff 00000000ffffffff
[  170.673940][T12746] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  170.676607][T12746] page dumped because: kasan: bad access detected
[  170.678545][T12746] page_owner tracks the page as allocated
[  170.680249][T12746] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6107, tgid 6106 (syz.2.94), ts 67251368841, free_ts 67249555259
[  170.685977][T12746]  post_alloc_hook+0x240/0x2a0
[  170.687496][T12746]  get_page_from_freelist+0x21e4/0x22c0
[  170.689200][T12746]  __alloc_frozen_pages_noprof+0x181/0x370
[  170.691007][T12746]  alloc_pages_mpol+0x232/0x4a0
[  170.692507][T12746]  allocate_slab+0x8a/0x370
[  170.693917][T12746]  ___slab_alloc+0xbeb/0x1410
[  170.695372][T12746]  kmem_cache_alloc_noprof+0x283/0x3c0
[  170.697061][T12746]  xfrm_state_alloc+0x24/0x2f0
[  170.698694][T12746]  xfrm_add_sa+0x17d1/0x4070
[  170.700127][T12746]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.701657][T12746]  netlink_rcv_skb+0x208/0x470
[  170.703131][T12746]  xfrm_netlink_rcv+0x79/0x90
[  170.704744][T12746]  netlink_unicast+0x82f/0x9e0
[  170.706386][T12746]  netlink_sendmsg+0x805/0xb30
[  170.707914][T12746]  __sock_sendmsg+0x21c/0x270
[  170.709375][T12746]  ____sys_sendmsg+0x505/0x830
[  170.710863][T12746] page last free pid 6107 tgid 6106 stack trace:
[  170.712822][T12746]  __free_frozen_pages+0xbc4/0xd30
[  170.714425][T12746]  __slab_free+0x303/0x3c0
[  170.715818][T12746]  qlist_free_all+0x97/0x140
[  170.717251][T12746]  kasan_quarantine_reduce+0x148/0x160
[  170.718942][T12746]  __kasan_slab_alloc+0x22/0x80
[  170.720454][T12746]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  170.722245][T12746]  sock_alloc_inode+0x28/0xc0
[  170.723699][T12746]  alloc_inode+0x6a/0x1b0
[  170.725064][T12746]  __sock_create+0x12d/0x9f0
[  170.726507][T12746]  __sys_socket+0xd7/0x1b0
[  170.727898][T12746]  __x64_sys_socket+0x7a/0x90
[  170.729306][T12746]  do_syscall_64+0xfa/0x3b0
[  170.730722][T12746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.732532][T12746] 
[  170.733271][T12746] Memory state around the buggy address:
[  170.734945][T12746]  ffff8881122ac400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  170.737271][T12746]  ffff8881122ac480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.739625][T12746] >ffff8881122ac500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.741975][T12746]                                            ^
[  170.743883][T12746]  ffff8881122ac580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.746344][T12746]  ffff8881122ac600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.748825][T12746] ==================================================================
[  170.751567][T12746] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  170.753810][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.1.2916 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  170.757571][T12746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.760856][T12746] Call Trace:
[  170.761933][T12746]  <TASK>
[  170.762880][T12746]  dump_stack_lvl+0x99/0x250
[  170.764327][T12746]  ? __asan_memcpy+0x40/0x70
[  170.765753][T12746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.767312][T12746]  ? __pfx__printk+0x10/0x10
[  170.768727][T12746]  vpanic+0x281/0x750
[  170.769938][T12746]  ? __pfx_vpanic+0x10/0x10
[  170.771270][T12746]  ? irqentry_exit+0x74/0x90
[  170.772636][T12746]  panic+0xb9/0xc0
[  170.773814][T12746]  ? __pfx_panic+0x10/0x10
[  170.775258][T12746]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  170.777140][T12746]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.778999][T12746]  ? xfrm_alloc_spi+0x570/0xf30
[  170.780557][T12746]  check_panic_on_warn+0x89/0xb0
[  170.782075][T12746]  ? xfrm_alloc_spi+0x570/0xf30
[  170.783534][T12746]  end_report+0x78/0x160
[  170.784808][T12746]  kasan_report+0x129/0x150
[  170.786167][T12746]  ? xfrm_alloc_spi+0x570/0xf30
[  170.787656][T12746]  xfrm_alloc_spi+0x570/0xf30
[  170.789180][T12746]  ? xfrm_alloc_spi+0x2a0/0xf30
[  170.790666][T12746]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  170.792289][T12746]  ? xfrm_find_acq+0x87/0xa0
[  170.793751][T12746]  xfrm_alloc_userspi+0x70b/0xc90
[  170.795321][T12746]  ? apparmor_capable+0x137/0x1b0
[  170.796896][T12746]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  170.798620][T12746]  ? __nla_parse+0x40/0x60
[  170.800010][T12746]  xfrm_user_rcv_msg+0x7a3/0xab0
[  170.801564][T12746]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.803258][T12746]  ? __pfx___mutex_trylock_common+0x10/0x10
[  170.805087][T12746]  ? rcu_is_watching+0x15/0xb0
[  170.806584][T12746]  ? trace_contention_end+0x39/0x120
[  170.808226][T12746]  ? __mutex_lock+0x335/0x1360
[  170.809742][T12746]  netlink_rcv_skb+0x208/0x470
[  170.811265][T12746]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  170.812897][T12746]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  170.814450][T12746]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.816007][T12746]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.817593][T12746]  xfrm_netlink_rcv+0x79/0x90
[  170.819064][T12746]  netlink_unicast+0x82f/0x9e0
[  170.820572][T12746]  ? __pfx_netlink_unicast+0x10/0x10
[  170.822204][T12746]  ? netlink_sendmsg+0x642/0xb30
[  170.823749][T12746]  ? skb_put+0x11b/0x210
[  170.825120][T12746]  netlink_sendmsg+0x805/0xb30
[  170.826549][T12746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.828125][T12746]  ? aa_sock_msg_perm+0xf1/0x1d0
[  170.829664][T12746]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  170.831317][T12746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.832920][T12746]  __sock_sendmsg+0x21c/0x270
[  170.834361][T12746]  ____sys_sendmsg+0x505/0x830
[  170.835959][T12746]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.837651][T12746]  ? import_iovec+0x74/0xa0
[  170.839097][T12746]  ___sys_sendmsg+0x21f/0x2a0
[  170.840667][T12746]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.842293][T12746]  ? __fget_files+0x2a/0x420
[  170.843764][T12746]  ? __fget_files+0x3a0/0x420
[  170.845236][T12746]  __x64_sys_sendmsg+0x19b/0x260
[  170.846813][T12746]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  170.848527][T12746]  ? rcu_is_watching+0x15/0xb0
[  170.850012][T12746]  ? do_syscall_64+0xbe/0x3b0
[  170.851495][T12746]  do_syscall_64+0xfa/0x3b0
[  170.852910][T12746]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.854533][T12746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.856399][T12746]  ? exc_page_fault+0x9f/0xf0
[  170.857890][T12746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.859716][T12746] RIP: 0033:0x7f459af8ebe9
[  170.861106][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.867021][T12746] RSP: 002b:00007f459bdec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.869572][T12746] RAX: ffffffffffffffda RBX: 00007f459b1b5fa0 RCX: 00007f459af8ebe9
[  170.871919][T12746] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  170.874327][T12746] RBP: 00007f459b011e19 R08: 0000000000000000 R09: 0000000000000000
[  170.876691][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.879124][T12746] R13: 00007f459b1b6038 R14: 00007f459b1b5fa0 R15: 00007ffd6e6449f8
[  170.881478][T12746]  </TASK>
[  170.882962][T12746] Kernel Offset: disabled
[  170.884323][T12746] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:22:57  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b7a1b4 RBX=ffff88802070d640 RCX=ffff88801c2fb980 RDX=0000000000000100
RSI=0000000000000001 RDI=ffff88802070d640 RBP=0000000000000000 RSP=ffffc900001278c0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000024f04
R12=dffffc0000000000 R13=ffffffff81a7f847 R14=ffff88802070df50 R15=ffff88802070edd8
RIP=ffffffff819295f4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d0633 CR3=000000003a2ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f754f987498 00007f754f987470 XMM03=00007f754f9874a8 00007f754f9874a0
XMM04=00007f75504ed100 00007f754f987460 XMM05=00007f754f987478 00007f754f9874c0
XMM06=00007f754f9874b8 00007f754f9874b0 XMM07=00007f754f9874a8 00007f754f9874a0
XMM08=0000000000000000 00007f754f812ee7 XMM09=0000000000000000 00007f754f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013e9 RDI=00000000000013ea RBP=00000000000003f8 RSP=ffffc900039fe9f0
R8 =ffff888021b38237 R9 =1ffff11004367046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af1914 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f459bdec6c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34022ff8 CR3=000000003a2b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f459b187498 00007f459b187470 XMM03=00007f459b1874a8 00007f459b1874a0
XMM04=00007f459bced100 00007f459b187460 XMM05=00007f459b187478 00007f459b1874c0
XMM06=00007f459b1874b8 00007f459b1874b0 XMM07=00007f459b1874a8 00007f459b1874a0
XMM08=0000000000000000 00007f459b012ee7 XMM09=0000000000000000 00007f459b012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
