last executing test programs:

1.581778839s ago: executing program 1 (id=2187):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x2a, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000028c0)={&(0x7f0000002700)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002740)="2e2800a464a9", 0x6}, {0x0}], 0x2}, 0xd4)

1.46291921s ago: executing program 1 (id=2191):
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

1.402724506s ago: executing program 1 (id=2194):
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)

1.332470909s ago: executing program 1 (id=2196):
write(0xffffffffffffffff, 0x0, 0x0)

1.252423985s ago: executing program 1 (id=2200):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r1}, &(0x7f0000000440)=0x8)

851.033362ms ago: executing program 1 (id=2214):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @initdev}, &(0x7f0000000300)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40840)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
connect$bt_rfcomm(r2, &(0x7f0000000240)={0x1f, @any, 0x6}, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000001340)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x4, 0x8000, 0x7, 0x5, 0x25, 0x42, 0x7fffffff, 0x7, 0x7, 0xffffffff, 0xfffffffc, 0xf, 0x80000000, 0x8, 0xd2, 0x4, 0xde8, 0x1, 0x4, 0xe, 0x6, 0x2, 0xc0, 0x97e, 0x6, 0xffff0000, 0x6, 0x6, 0x3ff, 0xfff, 0x3, 0x1, 0x358e, 0x3, 0x6, 0xf, 0xf, 0x1, 0xfffffff9, 0x10001, 0x0, 0x4, 0x8, 0x3, 0x9ae7, 0x80, 0xb7, 0x5, 0x2, 0x5, 0x2, 0x3ff, 0xce53, 0x2, 0xd4, 0x0, 0x0, 0x3, 0x8, 0x5, 0x7, 0x400, 0x4, 0x0, 0x2, 0x0, 0x7, 0x8001, 0x53, 0xfffffffc, 0x0, 0xbbc3, 0xfff, 0x594, 0x8315, 0x3ff, 0x5, 0x2, 0xdf, 0x3, 0x3, 0x6, 0x8000, 0xffffffff, 0x8, 0x9, 0x4, 0x7, 0x7, 0x16, 0x265, 0xb, 0x9, 0x0, 0x2, 0x14c1, 0x0, 0x8000, 0x0, 0xa6a3, 0x0, 0x6, 0x7, 0x80000001, 0x8000, 0xf48, 0x5, 0x6b9, 0xffff, 0x4, 0x100, 0x0, 0x8, 0x2, 0x62, 0x7ff, 0x5, 0x5, 0xb4d, 0xa, 0x100, 0x4fc, 0x0, 0x8, 0x0, 0x8, 0x6], "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"}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x20050800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))

572.384101ms ago: executing program 2 (id=2225):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)

522.35291ms ago: executing program 0 (id=2226):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket(0x11, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0)
close(0x4)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="3504000030000511d25a80648c63940d1124fc60040035400c0002000a00002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767306b74b4098e9e71fa51bde29f19b06fb9b3ba96da0e93d5a402dc7fe462a6cc4718c94c1747fff68092705b44bb48dd2db4f3127aab13b4af05549571a6c0e03db227b65d459fa5c1232d7b62f12b65354b7e70d32998da02ae0dc28942f682d97191d0b68697bac278c34b2972ca8ed35b61ee6831c78af85c6711cd687694ce3835a98387fcdb8616524ea04449dbedb3250fb366740d6b96307e1d2f0d85dd592ca2d8c2730ad1d16eb4d87cbb48d2f7c4eb7a490aee0493ffe3b72b508c9a8eb2ec9ed353d79ed29ffed1e48bf370bfb8af11085997d38210601155ec361cd6f3577da98c0a528a4d24ce75fbe297cb75f4b36719edd354ee6312c5527de7ea1a4233b9b0bba0ba2deac12f0257c64ceca8a0a62db179c7d9df7749da38624aab1865024e56a1b2a41e1c7e3a29c01adb31f1865bf6f44aa1e0fd6d827fbae1d57b5ff0026b580c890df83592aceb316fcd6ca200d007b786f9ae", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d0001000000000000000000040000800400"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0x15, 0x4, 0x1, 0x22, 0x54, 0x61, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xc, [{@local, 0x400}, {@loopback}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x9}]}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0x98}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r9, &(0x7f0000000040), 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)

522.034969ms ago: executing program 2 (id=2227):
r0 = socket(0x11, 0x80a, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)

450.557626ms ago: executing program 2 (id=2228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005180)={0x1c, r1, 0x109, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xb}]}, 0x1c}}, 0x84)

393.968444ms ago: executing program 0 (id=2229):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
close(r0)

390.075981ms ago: executing program 2 (id=2230):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

308.816078ms ago: executing program 0 (id=2231):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0xd0, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001300))
readv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}})
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x308, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000081)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4c800)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0xc, 0x4)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x77)

308.573196ms ago: executing program 2 (id=2232):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0)

242.334602ms ago: executing program 2 (id=2233):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000004a104c408bcb472c9c3dfcd076a7afc5848e1c6978ed0757d1f83737b2a11"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@updsa={0x13c, 0x1a, 0x20, 0x0, 0x0, {{@in=@loopback, @in6=@local}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x7}, {}, 0x0, 0x3, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5-generic\x00'}, 0x0, 0xc0}}]}, 0x13c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001180)={0x1, 0x5, @status={[0x8000, 0x7, 0x2, 0xe9e, 0xe6f, 0x9]}, [0xffffffff, 0x81, 0x4, 0xfffffffffffffffb, 0x6, 0x1, 0x4, 0x216, 0x6, 0x0, 0x3, 0x1, 0x8, 0x8000, 0x0, 0x8a, 0x0, 0x81, 0x9, 0x0, 0x100000001, 0x400, 0x6, 0x4ed51dc3, 0xfffffffffffffffd, 0x6, 0x8, 0xce5b, 0x2, 0x7b3, 0x79710883, 0x9, 0x1, 0x9, 0x5, 0x3, 0x5, 0x4, 0xf, 0x2, 0xa959, 0x8ad7, 0xfff, 0xd, 0x0, 0x8, 0x6, 0x1, 0x10, 0x1, 0x7, 0x6, 0x2, 0x9, 0x4, 0x953, 0x3, 0x5, 0x7, 0x7, 0x6, 0x1e1b, 0x0, 0x3]})
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

241.865775ms ago: executing program 0 (id=2234):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000007c0))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r3=>0x0}, 0x0)
sendmmsg$unix(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0)

112.632311ms ago: executing program 0 (id=2235):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000240)={[0x4]}, 0x8})

0s ago: executing program 0 (id=2236):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x40}}, 0x4000840)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35088' (ED25519) to the list of known hosts.
syzkaller login: [   58.962494][ T5832] cgroup: Unknown subsys name 'net'
[   59.093399][ T5832] cgroup: Unknown subsys name 'cpuset'
[   59.097625][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   61.262697][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.334512][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.338218][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.339153][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.343881][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.346599][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.350431][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.353607][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.357015][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.357095][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.363816][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.411887][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.415865][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.420831][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.427649][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.431909][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.604221][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   66.754050][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   66.777690][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.782896][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.786051][ T5846] bridge_slave_0: entered allmulticast mode
[   66.791217][ T5846] bridge_slave_0: entered promiscuous mode
[   66.804822][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.807930][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.811616][ T5846] bridge_slave_1: entered allmulticast mode
[   66.815036][ T5846] bridge_slave_1: entered promiscuous mode
[   66.847657][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   66.876823][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.884184][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.987045][ T5846] team0: Port device team_slave_0 added
[   66.994918][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.997897][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.001023][ T5845] bridge_slave_0: entered allmulticast mode
[   67.004922][ T5845] bridge_slave_0: entered promiscuous mode
[   67.010630][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.013566][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.016576][ T5845] bridge_slave_1: entered allmulticast mode
[   67.020719][ T5845] bridge_slave_1: entered promiscuous mode
[   67.027729][ T5846] team0: Port device team_slave_1 added
[   67.094480][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.097210][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.100075][ T5855] bridge_slave_0: entered allmulticast mode
[   67.102875][ T5855] bridge_slave_0: entered promiscuous mode
[   67.119044][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.121869][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.132478][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.139595][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.142318][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.152349][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.158066][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.160806][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.163109][ T5855] bridge_slave_1: entered allmulticast mode
[   67.165860][ T5855] bridge_slave_1: entered promiscuous mode
[   67.170577][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.183468][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.207211][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.213142][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.244433][ T5845] team0: Port device team_slave_0 added
[   67.272023][ T5855] team0: Port device team_slave_0 added
[   67.275762][ T5855] team0: Port device team_slave_1 added
[   67.287528][ T5845] team0: Port device team_slave_1 added
[   67.334487][ T5846] hsr_slave_0: entered promiscuous mode
[   67.336894][ T5846] hsr_slave_1: entered promiscuous mode
[   67.343548][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.346303][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.357380][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.365043][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.367833][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.377863][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.396675][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.399864][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.409605][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.435914][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.439403][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.449525][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.519354][ T5855] hsr_slave_0: entered promiscuous mode
[   67.523520][ T5855] hsr_slave_1: entered promiscuous mode
[   67.526549][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.530532][ T5855] Cannot create hsr debugfs directory
[   67.584857][ T5845] hsr_slave_0: entered promiscuous mode
[   67.587895][ T5845] hsr_slave_1: entered promiscuous mode
[   67.592268][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.595276][ T5845] Cannot create hsr debugfs directory
[   67.908929][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.937108][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.957788][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.965373][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.021827][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.069414][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.076642][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.095239][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.137420][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.153833][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.161962][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.179774][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.260386][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.312274][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   68.327763][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.330252][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.357558][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.359905][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.370572][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.400646][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.420134][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   68.442009][ T5220] Bluetooth: hci0: command tx timeout
[   68.442020][   T54] Bluetooth: hci1: command tx timeout
[   68.452956][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.455953][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.475101][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   68.479599][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.481971][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.515370][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.517797][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.522777][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.525059][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.531474][   T54] Bluetooth: hci2: command tx timeout
[   68.588087][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.639720][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.690411][ T5846] veth0_vlan: entered promiscuous mode
[   68.712521][ T5846] veth1_vlan: entered promiscuous mode
[   68.739520][ T5846] veth0_macvtap: entered promiscuous mode
[   68.745057][ T5846] veth1_macvtap: entered promiscuous mode
[   68.774763][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.804070][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.813784][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.827780][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.834666][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.837908][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.841627][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.844312][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.956559][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.961675][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.973437][ T5845] veth0_vlan: entered promiscuous mode
[   68.982750][ T5855] veth0_vlan: entered promiscuous mode
[   69.002982][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.003410][ T5845] veth1_vlan: entered promiscuous mode
[   69.005492][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.011188][ T5855] veth1_vlan: entered promiscuous mode
[   69.054850][ T5845] veth0_macvtap: entered promiscuous mode
[   69.064209][ T5855] veth0_macvtap: entered promiscuous mode
[   69.071411][ T5845] veth1_macvtap: entered promiscuous mode
[   69.074528][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.077426][ T5855] veth1_macvtap: entered promiscuous mode
[   69.120047][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.141258][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.158079][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.186562][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.192415][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.195799][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.202386][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.205961][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.217485][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.223016][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.226398][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.231584][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.263362][ T5915] netlink: 'syz.0.5': attribute type 10 has an invalid length.
[   69.265891][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5'.
[   69.274476][ T5915] bridge0: port 3(dummy0) entered blocking state
[   69.277037][ T5915] bridge0: port 3(dummy0) entered disabled state
[   69.281591][ T5915] dummy0: entered allmulticast mode
[   69.285934][ T5915] dummy0: entered promiscuous mode
[   69.288807][ T5915] bridge0: port 3(dummy0) entered blocking state
[   69.291131][ T5915] bridge0: port 3(dummy0) entered forwarding state
[   69.363468][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.365901][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.400841][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.403684][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.410120][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.414826][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.460313][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.462680][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.683464][ T5934] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8'.
[   69.810373][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.827594][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.827699][ T5942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.843780][ T5934] bond0 (unregistering): Released all slaves
[   70.281520][ T5952] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   70.519194][   T54] Bluetooth: hci0: command tx timeout
[   70.519506][ T5220] Bluetooth: hci1: command tx timeout
[   70.599548][ T5220] Bluetooth: hci2: command tx timeout
[   71.094907][ T5975] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.163995][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.166780][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.201097][ T5984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'.
[   71.208771][ T5984] netlink: 'syz.2.26': attribute type 32 has an invalid length.
[   71.787672][ T6010] netlink: 76 bytes leftover after parsing attributes in process `syz.0.39'.
[   72.131118][ T6029] netlink: 'syz.2.48': attribute type 11 has an invalid length.
[   72.134186][ T6029] netlink: 140 bytes leftover after parsing attributes in process `syz.2.48'.
[   72.604137][ T5220] Bluetooth: hci0: command tx timeout
[   72.604228][   T54] Bluetooth: hci1: command tx timeout
[   72.675939][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.59'.
[   72.680916][   T54] Bluetooth: hci2: command tx timeout
[   72.686232][ T6055] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   74.220374][ T6120] netlink: 60 bytes leftover after parsing attributes in process `syz.0.82'.
[   74.461428][ T6137] netlink: 128 bytes leftover after parsing attributes in process `syz.0.89'.
[   74.551560][ T6140] xt_l2tp: missing protocol rule (udp|l2tpip)
[   74.678342][   T54] Bluetooth: hci0: command tx timeout
[   74.690505][   T54] Bluetooth: hci1: command tx timeout
[   74.769500][   T54] Bluetooth: hci2: command tx timeout
[   74.788887][ T6147] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET)
[   74.915393][ T6149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'.
[   75.481471][ T6169] pimreg: tun_chr_ioctl cmd 2147767506
[   75.763092][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[   76.035656][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'.
[   76.327344][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.443271][ T6223] Bluetooth: MGMT ver 1.23
[   76.630518][ T6227] netlink: 96 bytes leftover after parsing attributes in process `syz.0.120'.
[   76.773825][ T6233] netem: change failed
[   76.825704][ T6235] wg1 speed is unknown, defaulting to 1000
[   76.829415][ T6235] wg1 speed is unknown, defaulting to 1000
[   76.837280][ T6235] wg1 speed is unknown, defaulting to 1000
[   76.850248][ T6235] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.866285][ T6235] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   76.903439][ T6235] wg1 speed is unknown, defaulting to 1000
[   76.908023][ T6235] wg1 speed is unknown, defaulting to 1000
[   76.912669][ T6235] wg1 speed is unknown, defaulting to 1000
[   77.268857][ T6259] netlink: 'syz.0.136': attribute type 29 has an invalid length.
[   77.271880][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   77.490349][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'.
[   77.494160][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'.
[   77.515749][ T6275] Zero length message leads to an empty skb
[   77.788237][ T6299] syzkaller0: entered promiscuous mode
[   77.801097][ T6299] syzkaller0: entered allmulticast mode
[   78.288968][ T6311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.622715][ T6325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.650154][ T6323] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   78.716722][ T6329] netlink: 64 bytes leftover after parsing attributes in process `syz.1.168'.
[   78.783403][ T6331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.883523][ T6331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.945681][ T6331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.962736][ T6346] netlink: 'syz.1.175': attribute type 3 has an invalid length.
[   79.011603][ T6331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.092341][ T6331] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.110658][ T6331] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.120314][ T6331] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.130882][ T6331] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.358007][ T6366] wg1 speed is unknown, defaulting to 1000
[   79.373929][ T6370] veth0_to_bond: entered allmulticast mode
[   80.022159][ T1272] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[   80.025784][ T1272] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   80.570343][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[   80.663003][ T6451] tipc: Started in network mode
[   80.667501][ T6451] tipc: Node identity 1ad8863d7143, cluster identity 4711
[   80.672409][ T6451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.676000][ T6451] syzkaller0: entered promiscuous mode
[   80.677811][ T6451] syzkaller0: entered allmulticast mode
[   80.705929][ T6454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.713962][ T6451] tipc: Resetting bearer <eth:syzkaller0>
[   80.732544][ T6450] tipc: Resetting bearer <eth:syzkaller0>
[   80.748606][ T6450] tipc: Disabling bearer <eth:syzkaller0>
[   81.000559][ T6484] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.236'.
[   81.318537][   T54] Bluetooth: hci2: command tx timeout
[   81.355902][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   81.883446][ T6526] netlink: 108 bytes leftover after parsing attributes in process `syz.1.256'.
[   81.890331][ T6526] netlink: 108 bytes leftover after parsing attributes in process `syz.1.256'.
[   82.351510][ T6550] netlink: 'syz.1.268': attribute type 1 has an invalid length.
[   82.625727][ T6566] netlink: 'syz.1.276': attribute type 4 has an invalid length.
[   82.668059][ T6568] netlink: 'syz.1.277': attribute type 1 has an invalid length.
[   82.671668][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'.
[   82.824253][ T6578] netlink: 172 bytes leftover after parsing attributes in process `syz.1.282'.
[   82.846552][ T6576] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   82.852535][ T6576] netlink: 208 bytes leftover after parsing attributes in process `syz.2.281'.
[   83.126304][ T6592] netlink: 'syz.1.289': attribute type 1 has an invalid length.
[   84.662898][ T6674] trusted_key: syz.1.325 sent an empty control message without MSG_MORE.
[   85.078526][ T5703] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[   85.437730][ T6729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'.
[   85.497667][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'.
[   85.676896][ T6753] __nla_validate_parse: 1 callbacks suppressed
[   85.676907][ T6753] netlink: 56 bytes leftover after parsing attributes in process `syz.1.364'.
[   85.685707][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   85.803083][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.806639][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.812106][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.815670][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.819726][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.823409][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.829324][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.832755][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   86.075160][ T6776] wg1 speed is unknown, defaulting to 1000
[   86.405822][ T6807] batadv_slave_0: entered promiscuous mode
[   86.412637][ T6806] batadv_slave_0: left promiscuous mode
[   86.526816][  T971] cfg80211: failed to load regulatory.db
[   86.543320][ T6815] ip6gretap0: entered promiscuous mode
[   86.545491][ T6815] macsec1: entered allmulticast mode
[   86.555795][ T6815] ip6gretap0: entered allmulticast mode
[   86.566276][ T6815] ip6gretap0: left allmulticast mode
[   86.568248][ T6815] ip6gretap0: left promiscuous mode
[   88.156778][ T6938] netlink: 'syz.0.436': attribute type 1 has an invalid length.
[   88.298514][ T6944] batadv0: entered promiscuous mode
[   88.301898][ T6944] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.304641][ T6944] bridge0: port 4(macvlan2) entered blocking state
[   88.306882][ T6944] bridge0: port 4(macvlan2) entered disabled state
[   88.309455][ T6944] macvlan2: entered allmulticast mode
[   88.311665][ T6944] batadv0: entered allmulticast mode
[   88.315012][ T6944] macvlan2: entered promiscuous mode
[   88.319332][ T6944] bridge0: port 4(macvlan2) entered blocking state
[   88.322558][ T6944] bridge0: port 4(macvlan2) entered forwarding state
[   88.461211][ T6953] tipc: Started in network mode
[   88.464472][ T6953] tipc: Node identity de47d9ba1bca, cluster identity 4711
[   88.467787][ T6953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.473113][ T6953] syzkaller0: entered promiscuous mode
[   88.476081][ T6953] syzkaller0: entered allmulticast mode
[   88.504740][ T6953] tipc: Resetting bearer <eth:syzkaller0>
[   88.509992][ T6952] tipc: Resetting bearer <eth:syzkaller0>
[   88.534758][ T6952] tipc: Disabling bearer <eth:syzkaller0>
[   88.638596][ T6961] sctp: [Deprecated]: syz.0.446 (pid 6961) Use of int in max_burst socket option.
[   88.638596][ T6961] Use struct sctp_assoc_value instead
[   89.113074][ T6985] xt_CT: No such helper "syz1"
[   89.257239][ T5876] IPVS: starting estimator thread 0...
[   89.377721][ T7007] netlink: 'syz.1.468': attribute type 2 has an invalid length.
[   89.378406][ T6997] IPVS: using max 53 ests per chain, 127200 per kthread
[   89.475644][ T7015] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   89.539694][ T7021] netlink: 'syz.2.475': attribute type 7 has an invalid length.
[   89.543261][ T7021] netlink: 'syz.2.475': attribute type 3 has an invalid length.
[   89.851174][ T7046] netlink: 'syz.1.486': attribute type 2 has an invalid length.
[   89.854303][ T7046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.520440][ T7102] SET target dimension over the limit!
[   90.724471][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.911085][ T7135] __nla_validate_parse: 61 callbacks suppressed
[   90.911096][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'.
[   91.045363][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[   91.138233][ T7145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.159288][ T7145] syzkaller0: entered promiscuous mode
[   91.166403][ T7145] syzkaller0: entered allmulticast mode
[   91.191298][ T7152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   91.194287][ T7152] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   91.203680][ T7145] tipc: Resetting bearer <eth:syzkaller0>
[   91.210521][ T7144] tipc: Resetting bearer <eth:syzkaller0>
[   91.225451][ T7144] tipc: Disabling bearer <eth:syzkaller0>
[   91.461992][ T7173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'.
[   91.510704][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.547'.
[   91.562552][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'.
[   91.566408][  T971] IPVS: starting estimator thread 0...
[   91.658598][ T7182] IPVS: using max 61 ests per chain, 146400 per kthread
[   91.673246][ T7188] netlink: 'syz.1.548': attribute type 6 has an invalid length.
[   91.787999][ T7197] xt_CONNSECMARK: invalid mode: 254
[   91.902722][ T7203] netlink: 240 bytes leftover after parsing attributes in process `syz.0.554'.
[   92.351655][ T7237] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.574'.
[   92.412071][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'.
[   92.668728][ T7270] tipc: Cannot configure node identity twice
[   92.681827][ T7272] gretap1: entered promiscuous mode
[   92.683882][ T7272] gretap1: entered allmulticast mode
[   92.945067][ T7291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.970346][ T7293] netlink: 1 bytes leftover after parsing attributes in process `syz.0.601'.
[   93.010640][ T7295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.602'.
[   93.315544][ T7309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   93.320151][ T7309] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   94.444522][ T7372] netlink: 'syz.2.637': attribute type 29 has an invalid length.
[   94.449067][ T7372] netlink: 'syz.2.637': attribute type 29 has an invalid length.
[   95.066504][ T7389] netlink: 'syz.2.644': attribute type 322 has an invalid length.
[   95.184264][ T7394] netlink: 'syz.1.645': attribute type 10 has an invalid length.
[   95.219355][ T7394] team0: Port device geneve0 added
[   95.272248][ T7394] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   95.405233][ T7406] IPv6: NLM_F_REPLACE set, but no existing node found!
[   96.234465][ T7449] netlink: 'syz.1.670': attribute type 10 has an invalid length.
[   96.237378][ T7449] __nla_validate_parse: 7 callbacks suppressed
[   96.237389][ T7449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.670'.
[   96.243757][ T7449] dummy0: entered promiscuous mode
[   96.246116][ T7449] dummy0: entered allmulticast mode
[   96.249733][ T7449] bridge0: port 3(dummy0) entered blocking state
[   96.252352][ T7449] bridge0: port 3(dummy0) entered disabled state
[   96.256356][ T7449] bridge0: port 3(dummy0) entered blocking state
[   96.258636][ T7449] bridge0: port 3(dummy0) entered forwarding state
[   96.474791][ T7460] xt_TPROXY: Can be used only with -p tcp or -p udp
[   96.642815][ T7466] netlink: 88 bytes leftover after parsing attributes in process `syz.2.679'.
[   96.645577][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'.
[   96.736270][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'.
[   96.861549][ T7485] veth1_to_team: entered allmulticast mode
[   96.874790][ T7485] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   96.886915][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'.
[   96.918021][ T7487] xt_bpf: check failed: parse error
[   96.996745][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'.
[   97.397610][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[   97.405526][ T7514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.467539][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'.
[   97.758657][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'.
[   98.263323][ T7555] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   98.331223][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'.
[   98.614067][ T7575] syzkaller0: entered promiscuous mode
[   98.616305][ T7575] syzkaller0: entered allmulticast mode
[  101.102175][ T7649] tipc: Failed to remove unknown binding: 66,1,1/0:586073718/586073720
[  101.107565][ T7649] tipc: Failed to remove unknown binding: 66,1,1/0:586073718/586073720
[  101.118976][ T7649] tipc: Failed to remove unknown binding: 66,1,1/0:586073718/586073720
[  101.175301][ T7653] syzkaller1: entered promiscuous mode
[  101.177495][ T7653] syzkaller1: entered allmulticast mode
[  101.320818][ T7667] __nla_validate_parse: 3 callbacks suppressed
[  101.320829][ T7667] netlink: 104 bytes leftover after parsing attributes in process `syz.0.767'.
[  101.478347][   T54] Bluetooth: hci2: command tx timeout
[  101.543157][ T7684] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  101.592280][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'.
[  101.595937][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[  101.599402][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'.
[  101.905978][ T7716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.789'.
[  102.051463][ T7723] syzkaller0: entered promiscuous mode
[  102.053858][ T7723] syzkaller0: entered allmulticast mode
[  102.674281][ T7744] wg1 speed is unknown, defaulting to 1000
[  102.725858][ T7747] netlink: 'syz.0.799': attribute type 21 has an invalid length.
[  102.764500][ T7747] netlink: 'syz.0.799': attribute type 6 has an invalid length.
[  102.767536][ T7747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.799'.
[  102.811716][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'.
[  102.823518][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'.
[  102.832859][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'.
[  103.062233][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  103.075770][ T7762] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  103.231825][ T7769] vlan2: entered promiscuous mode
[  103.233627][ T7769] bond0: entered promiscuous mode
[  103.235531][ T7769] bond_slave_0: entered promiscuous mode
[  103.237773][ T7769] bond_slave_1: entered promiscuous mode
[  103.241681][ T7769] vlan2: entered allmulticast mode
[  103.243537][ T7769] bond0: entered allmulticast mode
[  103.245700][ T7769] bond_slave_0: entered allmulticast mode
[  103.248101][ T7769] bond_slave_1: entered allmulticast mode
[  103.558335][   T54] Bluetooth: hci0: command tx timeout
[  104.700608][ T7829] bond_slave_0: entered promiscuous mode
[  104.703158][ T7829] bond_slave_1: entered promiscuous mode
[  104.705624][ T7829] macsec1: entered allmulticast mode
[  104.707903][ T7829] bond0: entered allmulticast mode
[  104.711006][ T7829] bond_slave_0: entered allmulticast mode
[  104.713339][ T7829] bond_slave_1: entered allmulticast mode
[  104.728925][ T7829] bond0: left allmulticast mode
[  104.730926][ T7829] bond_slave_0: left allmulticast mode
[  104.733101][ T7829] bond_slave_1: left allmulticast mode
[  104.735375][ T7829] bond_slave_0: left promiscuous mode
[  104.737562][ T7829] bond_slave_1: left promiscuous mode
[  104.845176][ T7838] netlink: 'syz.0.839': attribute type 27 has an invalid length.
[  105.233479][ T7874] openvswitch: netlink: IP tunnel dst address not specified
[  105.715019][ T7904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.717803][ T7904] syzkaller0: entered promiscuous mode
[  105.722498][ T7904] syzkaller0: entered allmulticast mode
[  105.737641][ T7904] tipc: Resetting bearer <eth:syzkaller0>
[  105.746559][ T7903] tipc: Resetting bearer <eth:syzkaller0>
[  105.757924][ T7903] tipc: Disabling bearer <eth:syzkaller0>
[  105.896641][ T7914] netlink: 'syz.0.874': attribute type 1 has an invalid length.
[  106.146706][ T7930] syzkaller0: entered promiscuous mode
[  106.151479][ T7930] syzkaller0: entered allmulticast mode
[  108.109380][ T7972] xt_nat: multiple ranges no longer supported
[  108.172357][ T7975] bridge2: entered promiscuous mode
[  108.174445][ T7975] bridge2: entered allmulticast mode
[  108.182684][ T7975] team0: Port device bridge2 added
[  108.207237][ T7975] rdma_rxe: rxe_newlink: failed to add macvlan1
[  108.332042][ T7985] __nla_validate_parse: 7 callbacks suppressed
[  108.332054][ T7985] netlink: 136 bytes leftover after parsing attributes in process `syz.1.902'.
[  108.336834][ T7985] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  108.349578][ T7989] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  108.551101][ T8008] netlink: 'syz.1.913': attribute type 3 has an invalid length.
[  108.617477][ T8014] netlink: 'syz.1.915': attribute type 1 has an invalid length.
[  108.622816][ T8014] netlink: 236 bytes leftover after parsing attributes in process `syz.1.915'.
[  108.664557][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  109.153697][ T8055] netlink: 'syz.2.936': attribute type 21 has an invalid length.
[  109.157022][ T8055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.936'.
[  110.304678][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'.
[  110.482765][ T8144] netlink: 'syz.0.976': attribute type 4 has an invalid length.
[  110.595312][ T8152] netlink: 'syz.2.980': attribute type 1 has an invalid length.
[  110.670365][ T8158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.833236][ T8171] bridge0: port 3(dummy0) entered disabled state
[  110.849472][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.865586][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.143681][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.154429][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.213419][ T8177] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.216495][ T8177] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.220050][ T8177] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.222992][ T8177] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.264619][ T8181] tipc: MTU too low for tipc bearer
[  111.385195][ T8196] netlink: 'syz.2.1000': attribute type 5 has an invalid length.
[  111.440814][ T8201] xt_connbytes: Forcing CT accounting to be enabled
[  111.443350][ T8201] set match dimension is over the limit!
[  111.591560][ T8215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1010'.
[  112.169879][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'.
[  112.175122][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'.
[  112.506290][ T8258] wg1 speed is unknown, defaulting to 1000
[  112.788554][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'.
[  112.819201][ T8282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  112.913089][ T8290] netlink: 'syz.1.1041': attribute type 1 has an invalid length.
[  113.160995][ T1272] IPVS: starting estimator thread 0...
[  113.207806][ T8312] blkio.reset_stats is deprecated
[  113.248368][ T8309] IPVS: using max 47 ests per chain, 112800 per kthread
[  113.287741][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'.
[  113.701617][ T8332] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1057'.
[  114.075279][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  114.310907][ T8375] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1078'.
[  114.314655][ T8375] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  114.429823][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1081'.
[  114.709608][ T8391] bridge0: port 4(macvlan2) entered disabled state
[  114.712228][ T8391] bridge0: port 3(dummy0) entered disabled state
[  114.714589][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.717533][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.789935][ T8391] dummy0: left allmulticast mode
[  114.791901][ T8391] dummy0: left promiscuous mode
[  114.794365][ T8391] bridge0: port 3(dummy0) entered disabled state
[  114.876623][ T8391] bridge_slave_0: left allmulticast mode
[  114.884264][ T8391] bridge_slave_0: left promiscuous mode
[  114.887985][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.902383][ T8391] bridge_slave_1: left allmulticast mode
[  114.905478][ T8391] bridge_slave_1: left promiscuous mode
[  114.910632][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.931026][ T8391] bond0: (slave bond_slave_0): Releasing backup interface
[  114.936224][ T8391] bond_slave_0: left promiscuous mode
[  114.945983][ T8391] bond_slave_0: left allmulticast mode
[  114.956917][ T8391] bond0: (slave bond_slave_1): Releasing backup interface
[  114.960319][ T8391] bond_slave_1: left promiscuous mode
[  114.962375][ T8391] bond_slave_1: left allmulticast mode
[  114.968043][ T8391] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  114.981939][ T8391] team0: Failed to send options change via netlink (err -105)
[  114.984744][ T8391] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  114.990160][ T8391] team0: Port device team_slave_0 removed
[  114.992739][ T8391] veth1_to_team: left allmulticast mode
[  115.006482][ T8391] team0: Failed to send options change via netlink (err -105)
[  115.011077][ T8391] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  115.020604][ T8391] team0: Port device team_slave_1 removed
[  115.034946][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.048790][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.076018][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.087566][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.273244][ T8391] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.276169][ T8391] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.280929][ T8391] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.284478][ T8391] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.369234][ T8391] batadv0: left promiscuous mode
[  115.381872][ T8391] macvlan2: left allmulticast mode
[  115.383525][ T8391] macvlan2: left promiscuous mode
[  115.385209][ T8391] bridge0: port 4(macvlan2) entered disabled state
[  115.429529][ T8391] vlan2: left promiscuous mode
[  115.434581][ T8391] bond0: left promiscuous mode
[  115.447617][ T8391] vlan2: left allmulticast mode
[  115.457684][ T8391] bond0: left allmulticast mode
[  115.568785][ T8391] bridge2: left promiscuous mode
[  115.570786][ T8391] bridge2: left allmulticast mode
[  115.580592][ T8391] team0: Port device bridge2 removed
[  115.583618][ T5876] wg1 speed is unknown, defaulting to 1000
[  115.589805][ T5876] syz1: Port: 1 Link DOWN
[  116.560474][ T8440] bridge: RTM_NEWNEIGH with invalid ether address
[  116.791438][ T8458] ip6t_srh: unknown srh invflags 4449
[  118.147467][ T8402] Set syz1 is full, maxelem 65536 reached
[  118.332627][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'.
[  118.749829][ T8509] netlink: 'syz.0.1139': attribute type 2 has an invalid length.
[  119.722968][ T8542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1153'.
[  119.726482][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'.
[  119.758295][ T8542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1153'.
[  120.512314][ T8568] bond0: up delay (65536) is not a multiple of miimon (100), value rounded to 65500 ms
[  120.704272][ T8574] wg1 speed is unknown, defaulting to 1000
[  120.741145][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'.
[  120.744597][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1168'.
[  120.779564][ T8575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.784293][ T8575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.787881][ T8575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.793034][ T8575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.799535][ T8575] geneve2: entered allmulticast mode
[  120.814860][ T8577] netlink: 'syz.2.1169': attribute type 15 has an invalid length.
[  120.969840][ T8585] netlink: 'syz.0.1173': attribute type 33 has an invalid length.
[  120.972433][ T8585] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1173'.
[  121.076597][ T8592] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[  121.179165][ T8600] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1179'.
[  121.603060][ T8635] netlink: 'syz.2.1195': attribute type 1 has an invalid length.
[  121.750675][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'.
[  121.753635][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'.
[  121.762182][ T8647] gretap0: entered promiscuous mode
[  121.765961][ T8647] gretap0: left promiscuous mode
[  121.916816][ T8661] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1206'.
[  122.033510][ T8671] netlink: 'syz.1.1211': attribute type 12 has an invalid length.
[  122.093351][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.096758][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.286957][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.320309][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.511458][ T8667] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.514675][ T8667] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.518072][ T8667] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.521680][ T8667] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.579350][ T8667] gretap1: left promiscuous mode
[  122.606334][ T8683] wg1 speed is unknown, defaulting to 1000
[  122.796786][ T8690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.309919][ T8720] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  123.635091][ T8746] netlink: 'syz.0.1245': attribute type 7 has an invalid length.
[  123.646234][ T8746] netlink: 'syz.0.1245': attribute type 8 has an invalid length.
[  124.075444][ T8787] No such timeout policy "syz1"
[  124.246887][ T8803] wg1 speed is unknown, defaulting to 1000
[  124.795496][ T8826] netlink: 'syz.0.1281': attribute type 3 has an invalid length.
[  125.496690][ T8862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.509239][ T8862] syzkaller0: entered promiscuous mode
[  125.512884][ T8862] syzkaller0: entered allmulticast mode
[  125.528101][ T8862] tipc: Resetting bearer <eth:syzkaller0>
[  125.535399][ T8861] tipc: Resetting bearer <eth:syzkaller0>
[  125.546872][ T8861] tipc: Disabling bearer <eth:syzkaller0>
[  125.733861][ T8872] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  125.761980][ T8872] tipc: Resetting bearer <eth:syzkaller0>
[  125.780451][ T8870] tipc: Resetting bearer <eth:syzkaller0>
[  126.763467][   T10] tipc: Node number set to 3314407866
[  126.917937][ T8870] tipc: Disabling bearer <eth:syzkaller0>
[  126.923348][ T8876] batadv_slave_1: entered promiscuous mode
[  126.930870][ T8881] batadv_slave_1: left promiscuous mode
[  127.021156][ T8885] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  127.024489][ T8885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  127.050859][ T8887] __nla_validate_parse: 17 callbacks suppressed
[  127.050874][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'.
[  127.252336][ T8905] tipc: Started in network mode
[  127.254565][ T8905] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  127.258001][ T8905] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  127.313995][ T8908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.324425][ T8910] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  127.495621][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1325'.
[  127.512431][ T8922] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.515571][ T8922] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.523139][ T8922] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.526364][ T8922] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.634479][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'.
[  129.149538][ T9002] nbd: must specify an index to disconnect
[  129.244560][ T9009] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  129.247732][ T9009] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1364'.
[  129.416808][ T9021] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1370'.
[  129.774598][ T9049] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1383'.
[  129.892803][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'.
[  129.935384][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'.
[  129.980763][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1392'.
[  130.045126][ T9073] netlink: 'syz.0.1396': attribute type 83 has an invalid length.
[  130.356342][ T9102] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  130.363359][ T9104] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  130.364874][ T9102] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1408'.
[  130.512733][ T9119] netlink: 'syz.2.1415': attribute type 2 has an invalid length.
[  130.641741][ T9129] netlink: 'syz.0.1412': attribute type 16 has an invalid length.
[  130.649739][ T9129] netlink: 'syz.0.1412': attribute type 17 has an invalid length.
[  130.697932][ T9129] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.706516][ T9129] 8021q: adding VLAN 0 to HW filter on device team0
[  130.716864][ T9129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.936130][ T9143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.974867][ T9143] syzkaller0: entered promiscuous mode
[  130.976784][ T9143] syzkaller0: entered allmulticast mode
[  130.979275][ T9143] tipc: Resetting bearer <eth:syzkaller0>
[  131.019294][ T9142] tipc: Resetting bearer <eth:syzkaller0>
[  131.998417][   T10] tipc: Node number set to 1805354557
[  132.613251][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.885813][ T9142] tipc: Disabling bearer <eth:syzkaller0>
[  132.892331][ T9150] __nla_validate_parse: 1 callbacks suppressed
[  132.892347][ T9150] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1424'.
[  132.992591][ T9181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1430'.
[  133.427743][ T9211] wg1 speed is unknown, defaulting to 1000
[  134.201374][ T9246] netlink: 'syz.0.1458': attribute type 30 has an invalid length.
[  134.347986][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'.
[  134.376761][ T9254] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  134.391904][ T9254] team0: Device ipvlan2 is already an upper device of the team interface
[  134.625292][ T9266] wg1 speed is unknown, defaulting to 1000
[  134.646264][ T9268] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  134.755660][ T9274] netlink: 'syz.1.1470': attribute type 2 has an invalid length.
[  134.760554][ T9274] netlink: 'syz.1.1470': attribute type 1 has an invalid length.
[  134.802342][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'.
[  134.850433][ T9278] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  135.718787][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv1
[  135.723378][ T9330] team0: Port device batadv1 added
[  135.902663][ T9355] ieee802154 phy0 wpan0: encryption failed: -22
[  136.047400][ T9369] bridge0: entered allmulticast mode
[  136.049880][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'.
[  136.054293][ T9369] bridge0: port 3(dummy0) entered disabled state
[  136.059904][ T9369] bridge_slave_1: left allmulticast mode
[  136.061713][ T9369] bridge_slave_1: left promiscuous mode
[  136.063700][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.067394][ T9369] bridge_slave_0: left promiscuous mode
[  136.070419][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.086097][ T9369] bridge0 (unregistering): left allmulticast mode
[  136.257113][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'.
[  136.447360][ T9396] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1525'.
[  136.485329][ T9398] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1526'.
[  136.561061][ T9402] netlink: 'syz.1.1528': attribute type 10 has an invalid length.
[  136.564956][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1528'.
[  136.643498][   T33] audit: type=1804 audit(1752850586.997:2): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1530" name="/newroot/542/cgroup.controllers" dev="tmpfs" ino=2751 res=1 errno=0
[  136.653010][   T33] audit: type=1800 audit(1752850586.997:3): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1530" name="cgroup.controllers" dev="tmpfs" ino=2751 res=0 errno=0
[  137.101021][ T9435] pim6reg1: entered promiscuous mode
[  137.103190][ T9435] pim6reg1: entered allmulticast mode
[  137.105958][ T9437] vlan0: entered promiscuous mode
[  137.344597][ T9451] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  137.639376][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'.
[  137.686135][ T9466] netlink: 'syz.2.1559': attribute type 2 has an invalid length.
[  138.050896][ T9444] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  138.133458][ T9500] openvswitch: netlink: Flow key attribute not present in set flow.
[  138.236561][ T9508] wg1 speed is unknown, defaulting to 1000
[  138.429926][ T9527] __nla_validate_parse: 2 callbacks suppressed
[  138.429936][ T9527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1588'.
[  138.740743][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1600'.
[  139.348549][ T9585] block nbd0: server does not support multiple connections per device.
[  139.352166][ T9585] block nbd0: shutting down sockets
[  139.404820][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1614'.
[  139.407952][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1614'.
[  139.622774][ T9612] sctp: [Deprecated]: syz.0.1623 (pid 9612) Use of int in max_burst socket option deprecated.
[  139.622774][ T9612] Use struct sctp_assoc_value instead
[  139.656951][ T9616] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  139.687415][ T9620] netlink: 'syz.1.1628': attribute type 1 has an invalid length.
[  139.692347][ T9620] netlink: 'syz.1.1628': attribute type 2 has an invalid length.
[  140.569753][ T9645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1639'.
[  140.825311][ T9663] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  140.887868][ T9663] netlink: 'syz.2.1647': attribute type 10 has an invalid length.
[  141.285455][ T9694] batadv_slave_0: entered promiscuous mode
[  141.289499][ T9693] batadv_slave_0: left promiscuous mode
[  141.402299][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'.
[  141.406192][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'.
[  141.417202][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'.
[  141.422557][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'.
[  141.427099][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'.
[  142.277489][ T9716] netlink: 'syz.1.1668': attribute type 13 has an invalid length.
[  142.317815][ T9716] wg1 speed is unknown, defaulting to 1000
[  142.364379][ T9721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.400891][ T9716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.541119][ T9734] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  142.585780][ T9736] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  144.088834][ T9790] x_tables: ip6_tables: mh match: only valid for protocol 135
[  144.216299][ T9796] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.304134][ T9799] dvmrp8: entered allmulticast mode
[  144.349739][ T9793] dvmrp8: left allmulticast mode
[  144.387016][ T9805] __nla_validate_parse: 1 callbacks suppressed
[  144.387031][ T9805] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1707'.
[  144.426093][ T9807] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  144.781081][ T9830] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  144.849969][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'.
[  144.951491][ T9842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1725'.
[  144.955479][ T9842] unsupported nlmsg_type 40
[  145.025794][ T9844] gretap1: left allmulticast mode
[  145.038797][ T9844] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.042117][ T9844] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.045530][ T9844] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.049494][ T9844] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.204295][ T9863] wg1 speed is unknown, defaulting to 1000
[  145.514787][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1734'.
[  145.766193][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1743'.
[  145.963329][ T9901] syz.0.1748: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  146.001174][ T9901] CPU: 0 UID: 0 PID: 9901 Comm: syz.0.1748 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  146.001202][ T9901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.001211][ T9901] Call Trace:
[  146.001220][ T9901]  <TASK>
[  146.001267][ T9901]  dump_stack_lvl+0x189/0x250
[  146.001300][ T9901]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.001318][ T9901]  ? __pfx__printk+0x10/0x10
[  146.001340][ T9901]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  146.001361][ T9901]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  146.001382][ T9901]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  146.001402][ T9901]  warn_alloc+0x214/0x310
[  146.001421][ T9901]  ? stack_depot_save_flags+0x40/0x900
[  146.001440][ T9901]  ? __pfx_warn_alloc+0x10/0x10
[  146.001457][ T9901]  ? kasan_save_track+0x4f/0x80
[  146.001477][ T9901]  ? xskq_create+0x56/0x170
[  146.001490][ T9901]  ? xsk_init_queue+0xb0/0x110
[  146.001539][ T9901]  ? xsk_setsockopt+0x43f/0x710
[  146.001559][ T9901]  ? do_sock_setsockopt+0x17c/0x1b0
[  146.001579][ T9901]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  146.001599][ T9901]  ? do_syscall_64+0xfa/0x3b0
[  146.001613][ T9901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.001633][ T9901]  __vmalloc_node_range_noprof+0x125/0x12f0
[  146.001681][ T9901]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  146.001705][ T9901]  ? __kasan_kmalloc+0x93/0xb0
[  146.001729][ T9901]  vmalloc_user_noprof+0xad/0xf0
[  146.001751][ T9901]  ? xskq_create+0xbf/0x170
[  146.001767][ T9901]  xskq_create+0xbf/0x170
[  146.001786][ T9901]  xsk_init_queue+0xb0/0x110
[  146.001802][ T9901]  xsk_setsockopt+0x43f/0x710
[  146.001829][ T9901]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.001855][ T9901]  ? __fget_files+0x2a/0x420
[  146.001870][ T9901]  ? aa_sock_opt_perm+0x74/0x110
[  146.001891][ T9901]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  146.001906][ T9901]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.001930][ T9901]  do_sock_setsockopt+0x17c/0x1b0
[  146.001957][ T9901]  __x64_sys_setsockopt+0x13f/0x1b0
[  146.001984][ T9901]  do_syscall_64+0xfa/0x3b0
[  146.002001][ T9901]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.002039][ T9901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.002056][ T9901]  ? exc_page_fault+0x9f/0xf0
[  146.002072][ T9901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.002089][ T9901] RIP: 0033:0x7f3f4398e9a9
[  146.002108][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.002147][ T9901] RSP: 002b:00007f3f447a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  146.002166][ T9901] RAX: ffffffffffffffda RBX: 00007f3f43bb6080 RCX: 00007f3f4398e9a9
[  146.002178][ T9901] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  146.002188][ T9901] RBP: 00007f3f43a10d69 R08: 0000000000000004 R09: 0000000000000000
[  146.002198][ T9901] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.002207][ T9901] R13: 0000000000000000 R14: 00007f3f43bb6080 R15: 00007fffa78ba428
[  146.002234][ T9901]  </TASK>
[  146.002460][ T9901] Mem-Info:
[  146.149330][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'.
[  146.153221][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'.
[  146.156984][ T9901] active_anon:5441 inactive_anon:0 isolated_anon:0
[  146.156984][ T9901]  active_file:946 inactive_file:38235 isolated_file:0
[  146.156984][ T9901]  unevictable:1768 dirty:303 writeback:0
[  146.156984][ T9901]  slab_reclaimable:9484 slab_unreclaimable:54722
[  146.156984][ T9901]  mapped:18309 shmem:2478 pagetables:993
[  146.156984][ T9901]  sec_pagetables:0 bounce:0
[  146.156984][ T9901]  kernel_misc_reclaimable:0
[  146.156984][ T9901]  free:298773 free_pcp:17332 free_cma:0
[  146.210808][ T9901] Node 0 active_anon:11228kB inactive_anon:0kB active_file:1780kB inactive_file:20348kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28760kB dirty:332kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7860kB pagetables:1928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  146.225234][ T9901] Node 1 active_anon:10604kB inactive_anon:0kB active_file:2004kB inactive_file:132592kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44476kB dirty:880kB writeback:0kB shmem:5204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3648kB pagetables:1908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  146.279269][ T9901] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  146.285363][ T9918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1757'.
[  146.335890][ T9901] lowmem_reserve[]: 0 812 812 812 812
[  146.338742][ T9901] Node 0 DMA32 free:414328kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11228kB inactive_anon:0kB active_file:1780kB inactive_file:20348kB unevictable:3536kB writepending:332kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:31176kB local_pcp:15468kB free_cma:0kB
[  146.356635][ T9901] lowmem_reserve[]: 0 0 0 0 0
[  146.363884][ T9901] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  146.390140][ T9901] lowmem_reserve[]: 0 0 854 854 854
[  146.391908][ T9901] Node 1 Normal free:311884kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10536kB inactive_anon:0kB active_file:2004kB inactive_file:132592kB unevictable:3536kB writepending:880kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30276kB local_pcp:14472kB free_cma:0kB
[  146.416418][ T9901] lowmem_reserve[]: 0 0 0 0 0
[  146.426734][ T9901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  146.434635][ T9901] Node 0 DMA32: 1159*4kB (UM) 620*8kB (UM) 299*16kB (UME) 249*32kB (UM) 181*64kB (UME) 65*128kB (UM) 19*256kB (UM) 16*512kB (UM) 11*1024kB (UME) 9*2048kB (UME) 80*4096kB (UM) = 412684kB
[  146.441661][ T9901] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  146.447096][ T9901] Node 1 Normal: 662*4kB (UME) 700*8kB (UE) 439*16kB (U) 331*32kB (UE) 290*64kB (UE) 141*128kB (UME) 74*256kB (UME) 41*512kB (UM) 28*1024kB (UM) 7*2048kB (UME) 39*4096kB (UM) = 305160kB
[  146.460444][ T9901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.463919][ T9901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.467388][ T9901] 41693 total pagecache pages
[  146.474692][ T9901] 0 pages in swap cache
[  146.476986][ T9901] Free swap  = 124996kB
[  146.480986][ T9901] Total swap = 124996kB
[  146.482677][ T9901] 786301 pages RAM
[  146.484044][ T9901] 0 pages HighMem/MovableOnly
[  146.485597][ T9901] 241056 pages reserved
[  146.487228][ T9901] 0 pages cma reserved
[  146.695545][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'.
[  146.700875][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'.
[  146.723657][ T9938] veth0_to_team: entered promiscuous mode
[  146.726348][ T9938] veth0_to_team: entered allmulticast mode
[  147.501189][T10003] batadv2: entered allmulticast mode
[  147.504550][T10003] 8021q: adding VLAN 0 to HW filter on device batadv2
[  149.235094][T10086] ipt_REJECT: ECHOREPLY no longer supported.
[  150.113723][T10109] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.117161][T10109] bridge0: port 1(bond1) entered blocking state
[  150.120610][T10109] bridge0: port 1(bond1) entered disabled state
[  150.123475][T10109] bond1: entered allmulticast mode
[  150.130768][T10109] bond1: entered promiscuous mode
[  150.149505][T10109] __nla_validate_parse: 5 callbacks suppressed
[  150.149524][T10109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1844'.
[  150.155328][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1844'.
[  150.169603][T10109] dummy0: entered promiscuous mode
[  150.174368][T10109] team0: entered promiscuous mode
[  150.176622][T10109] batadv1: entered promiscuous mode
[  150.182317][T10109] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  150.187873][T10109] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  150.194000][T10109] bridge0: port 2(hsr1) entered blocking state
[  150.196758][T10109] bridge0: port 2(hsr1) entered disabled state
[  150.200316][T10109] hsr1: entered allmulticast mode
[  150.202619][T10109] dummy0: entered allmulticast mode
[  150.204732][T10109] team0: entered allmulticast mode
[  150.206795][T10109] batadv1: entered allmulticast mode
[  150.212045][T10109] hsr1: entered promiscuous mode
[  150.563519][T10126] netlink: 'syz.2.1851': attribute type 1 has an invalid length.
[  150.605609][T10126] bond2: entered promiscuous mode
[  150.607509][T10126] 8021q: adding VLAN 0 to HW filter on device bond2
[  150.659580][T10126] bond2: (slave bridge1): making interface the new active one
[  150.663960][T10126] bridge1: entered promiscuous mode
[  150.672432][T10126] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  151.432806][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'.
[  151.961616][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'.
[  151.996927][T10183] wg1 speed is unknown, defaulting to 1000
[  152.155014][T10192] netlink: 'syz.1.1881': attribute type 4 has an invalid length.
[  152.164434][T10192] netlink: 'syz.1.1881': attribute type 4 has an invalid length.
[  153.097753][T10205] wg1 speed is unknown, defaulting to 1000
[  153.306347][T10220] tipc: Can't bind to reserved service type 2
[  153.534139][T10235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'.
[  153.573138][T10238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.753228][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1906'.
[  153.811469][T10250] xt_hashlimit: max too large, truncated to 1048576
[  153.815041][T10250] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  154.121784][T10262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1912'.
[  154.127616][T10262] netem: unknown loss type 13
[  154.130594][T10262] netem: change failed
[  154.514349][T10285] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1922'.
[  154.574880][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1923'.
[  155.260822][T10316] wg1 speed is unknown, defaulting to 1000
[  155.320250][T10318] wg1 speed is unknown, defaulting to 1000
[  155.677045][T10332] nbd: must specify at least one socket
[  155.733628][T10334] xt_connbytes: Forcing CT accounting to be enabled
[  155.736547][T10334] x_tables: ip_tables: ah match: only valid for protocol 51
[  155.886685][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'.
[  155.993611][T10350] mac80211_hwsim hwsim2 ": renamed from wlan0
[  156.120118][T10360] syzkaller1: entered promiscuous mode
[  156.122428][T10360] syzkaller1: entered allmulticast mode
[  156.302033][T10376] netlink: 'syz.2.1961': attribute type 58 has an invalid length.
[  156.304461][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1961'.
[  156.551873][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'.
[  156.666762][T10405] dummy0: left promiscuous mode
[  156.690886][T10405] dummy0: left allmulticast mode
[  156.693700][T10405] bridge_slave_0: left allmulticast mode
[  156.696129][T10405] veth0_to_bond: left allmulticast mode
[  156.723345][T10405] bond0: (slave bond_slave_0): Releasing backup interface
[  156.746886][T10405] bond0: (slave bond_slave_1): Releasing backup interface
[  156.750343][T10405] veth0_to_team: left promiscuous mode
[  156.752367][T10405] veth0_to_team: left allmulticast mode
[  156.764731][T10405] team0: Port device team_slave_0 removed
[  156.772059][T10405] team0: Port device team_slave_1 removed
[  156.774943][T10405] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.784128][T10405] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.793352][T10405] team0: Port device geneve0 removed
[  156.796094][T10405] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  156.798769][T10409] netlink: 'syz.0.1973': attribute type 1 has an invalid length.
[  156.803867][T10405] geneve2: left allmulticast mode
[  156.827579][T10409] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.861769][T10409] bond2: (slave ip6gretap1): making interface the new active one
[  156.872711][T10409] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  156.930307][T10409] veth3: entered promiscuous mode
[  156.937267][T10409] bond2: (slave veth3): Enslaving as an active interface with a down link
[  156.954692][T10409] erspan0: entered allmulticast mode
[  156.964746][T10409] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  157.048673][T10417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.057967][T10417] syzkaller0: entered promiscuous mode
[  157.067798][T10417] syzkaller0: entered allmulticast mode
[  157.111144][T10420] netlink: 'syz.0.1978': attribute type 303 has an invalid length.
[  157.111515][T10417] tipc: Resetting bearer <eth:syzkaller0>
[  157.128638][T10420] ieee802154 phy0 wpan0: encryption failed: -22
[  157.202258][T10415] tipc: Resetting bearer <eth:syzkaller0>
[  157.217485][T10415] tipc: Disabling bearer <eth:syzkaller0>
[  157.297068][T10422] !: renamed from dummy0
[  158.089134][T10433] wg1 speed is unknown, defaulting to 1000
[  159.056398][T10511] netlink: 'syz.1.1996': attribute type 3 has an invalid length.
[  159.153056][T10511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1996'.
[  159.545943][T10545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2003'.
[  159.766708][T10560] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  160.003533][T10574] netlink: 'syz.0.2016': attribute type 5 has an invalid length.
[  160.027772][T10574] ip6erspan0: entered promiscuous mode
[  160.034948][T10576] netlink: 'syz.2.2015': attribute type 4 has an invalid length.
[  160.042564][T10574] syz_tun: entered allmulticast mode
[  160.068398][T10573] syz_tun: left allmulticast mode
[  160.133842][T10581] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  160.352945][T10603] netlink: 'syz.0.2027': attribute type 13 has an invalid length.
[  160.563335][T10617] ip6t_REJECT: ECHOREPLY is not supported
[  161.093830][T10656] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 46546 - 0
[  161.102519][T10656] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 46546 - 0
[  161.117227][T10656] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 46546 - 0
[  161.128257][T10656] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 46546 - 0
[  161.132135][T10656] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 40327 - 0
[  161.135685][T10656] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 40327 - 0
[  161.148640][T10656] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 40327 - 0
[  161.152268][T10656] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 40327 - 0
[  161.167794][T10656] geneve3: entered promiscuous mode
[  161.170256][T10656] geneve3: entered allmulticast mode
[  161.315199][   T33] audit: type=1800 audit(1752850611.667:4): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2058" name="memory.events" dev="tmpfs" ino=3284 res=0 errno=0
[  161.341329][   T33] audit: type=1804 audit(1752850611.697:5): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2058" name="/newroot/647/memory.events" dev="tmpfs" ino=3284 res=1 errno=0
[  161.365304][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'.
[  161.467463][T10682] bond_slave_1: mtu greater than device maximum
[  161.473651][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'.
[  161.536093][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'.
[  161.711464][T10702] netlink: 'syz.2.2071': attribute type 26 has an invalid length.
[  161.714056][T10698] ksmbd: Unknown IPC event: 3, ignore.
[  162.043205][T10725] netlink: 'syz.0.2080': attribute type 3 has an invalid length.
[  162.293654][T10748] bridge_slave_0: entered promiscuous mode
[  162.843981][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2108'.
[  162.961488][T10801] wg1 speed is unknown, defaulting to 1000
[  163.671666][T10822] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  163.713755][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'.
[  163.782717][T10828] netlink: 'syz.1.2122': attribute type 1 has an invalid length.
[  163.785899][T10828] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2122'.
[  164.126970][T10842] xt_NFQUEUE: number of total queues is 0
[  164.173278][T10841] IPVS: Error connecting to the multicast addr
[  164.297427][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'.
[  164.516810][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'.
[  164.630537][T10876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2144'.
[  164.680969][T10878] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2146'.
[  164.728649][T10883] netlink: 'syz.2.2149': attribute type 1 has an invalid length.
[  165.566867][T10953] syzkaller1: entered promiscuous mode
[  165.568741][T10953] syzkaller1: entered allmulticast mode
[  166.073283][T11001] wg1 speed is unknown, defaulting to 1000
[  166.194346][T11013] xt_policy: output policy not valid in PREROUTING and INPUT
[  166.643403][T11047] __nla_validate_parse: 3 callbacks suppressed
[  166.643418][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2222'.
[  166.777177][T11055] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2226'.
[  167.199323][T11081] netlink: 'syz.2.2233': attribute type 10 has an invalid length.
[  167.275693][T11081] team0: Port device dummy0 added
[  167.303734][T11086] netlink: 'syz.2.2233': attribute type 10 has an invalid length.
[  167.307371][T11086] 
[  167.308458][T11086] ======================================================
[  167.311545][T11086] WARNING: possible circular locking dependency detected
[  167.314680][T11086] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  167.318420][T11086] ------------------------------------------------------
[  167.321800][T11086] syz.2.2233/11086 is trying to acquire lock:
[  167.324862][T11086] ffff888111620e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  167.329521][T11086] 
[  167.329521][T11086] but task is already holding lock:
[  167.332403][T11086] ffff8881248f2d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  167.336159][T11086] 
[  167.336159][T11086] which lock already depends on the new lock.
[  167.336159][T11086] 
[  167.340172][T11086] 
[  167.340172][T11086] the existing dependency chain (in reverse order) is:
[  167.343693][T11086] 
[  167.343693][T11086] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  167.347012][T11086]        lock_acquire+0x120/0x360
[  167.349032][T11086]        __mutex_lock+0x182/0xe80
[  167.351013][T11086]        dev_set_mtu+0x10e/0x260
[  167.353043][T11086]        team_add_slave+0x8b8/0x2840
[  167.355101][T11086]        do_set_master+0x533/0x6d0
[  167.357143][T11086]        do_setlink+0xcf0/0x41c0
[  167.359168][T11086]        rtnl_newlink+0x160b/0x1c70
[  167.361274][T11086]        rtnetlink_rcv_msg+0x7cf/0xb70
[  167.363443][T11086]        netlink_rcv_skb+0x208/0x470
[  167.365546][T11086]        netlink_unicast+0x75c/0x8e0
[  167.367751][T11086]        netlink_sendmsg+0x805/0xb30
[  167.369905][T11086]        __sock_sendmsg+0x21c/0x270
[  167.371912][T11086]        ____sys_sendmsg+0x505/0x830
[  167.374011][T11086]        ___sys_sendmsg+0x21f/0x2a0
[  167.376265][T11086]        __x64_sys_sendmsg+0x19b/0x260
[  167.378445][T11086]        do_syscall_64+0xfa/0x3b0
[  167.380453][T11086]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.382904][T11086] 
[  167.382904][T11086] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  167.385955][T11086]        validate_chain+0xb9b/0x2140
[  167.388108][T11086]        __lock_acquire+0xab9/0xd20
[  167.390122][T11086]        lock_acquire+0x120/0x360
[  167.392159][T11086]        __mutex_lock+0x182/0xe80
[  167.394157][T11086]        team_device_event+0x182/0xa20
[  167.396311][T11086]        notifier_call_chain+0x1b6/0x3e0
[  167.398553][T11086]        __dev_notify_flags+0x18d/0x2e0
[  167.400771][T11086]        netif_change_flags+0xe8/0x1a0
[  167.402866][T11086]        do_setlink+0xc55/0x41c0
[  167.404890][T11086]        rtnl_newlink+0x160b/0x1c70
[  167.407024][T11086]        rtnetlink_rcv_msg+0x7cf/0xb70
[  167.409247][T11086]        netlink_rcv_skb+0x208/0x470
[  167.411356][T11086]        netlink_unicast+0x75c/0x8e0
[  167.413408][T11086]        netlink_sendmsg+0x805/0xb30
[  167.415638][T11086]        __sock_sendmsg+0x21c/0x270
[  167.417860][T11086]        ____sys_sendmsg+0x505/0x830
[  167.420099][T11086]        ___sys_sendmsg+0x21f/0x2a0
[  167.422287][T11086]        __x64_sys_sendmsg+0x19b/0x260
[  167.424575][T11086]        do_syscall_64+0xfa/0x3b0
[  167.426565][T11086]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.428960][T11086] 
[  167.428960][T11086] other info that might help us debug this:
[  167.428960][T11086] 
[  167.432259][T11086]  Possible unsafe locking scenario:
[  167.432259][T11086] 
[  167.434684][T11086]        CPU0                    CPU1
[  167.436787][T11086]        ----                    ----
[  167.438659][T11086]   lock(&dev_instance_lock_key#3);
[  167.440852][T11086]                                lock(team->team_lock_key#3);
[  167.443572][T11086]                                lock(&dev_instance_lock_key#3);
[  167.446099][T11086]   lock(team->team_lock_key#3);
[  167.447719][T11086] 
[  167.447719][T11086]  *** DEADLOCK ***
[  167.447719][T11086] 
[  167.450452][T11086] 2 locks held by syz.2.2233/11086:
[  167.452250][T11086]  #0: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  167.455268][T11086]  #1: ffff8881248f2d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  167.458667][T11086] 
[  167.458667][T11086] stack backtrace:
[  167.460843][T11086] CPU: 1 UID: 0 PID: 11086 Comm: syz.2.2233 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  167.460859][T11086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.460866][T11086] Call Trace:
[  167.460873][T11086]  <TASK>
[  167.460880][T11086]  dump_stack_lvl+0x189/0x250
[  167.460898][T11086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.460908][T11086]  ? __pfx__printk+0x10/0x10
[  167.460921][T11086]  ? print_lock_name+0xde/0x100
[  167.460931][T11086]  print_circular_bug+0x2ee/0x310
[  167.460943][T11086]  check_noncircular+0x134/0x160
[  167.460954][T11086]  validate_chain+0xb9b/0x2140
[  167.460965][T11086]  ? __lock_acquire+0xab9/0xd20
[  167.460975][T11086]  __lock_acquire+0xab9/0xd20
[  167.460984][T11086]  ? team_device_event+0x182/0xa20
[  167.460992][T11086]  lock_acquire+0x120/0x360
[  167.460999][T11086]  ? team_device_event+0x182/0xa20
[  167.461007][T11086]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  167.461024][T11086]  __mutex_lock+0x182/0xe80
[  167.461034][T11086]  ? team_device_event+0x182/0xa20
[  167.461042][T11086]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  167.461055][T11086]  ? team_device_event+0x182/0xa20
[  167.461062][T11086]  ? __pfx___mutex_lock+0x10/0x10
[  167.461075][T11086]  ? __timer_delete_sync+0x218/0x2d0
[  167.461091][T11086]  team_device_event+0x182/0xa20
[  167.461100][T11086]  notifier_call_chain+0x1b6/0x3e0
[  167.461113][T11086]  __dev_notify_flags+0x18d/0x2e0
[  167.461126][T11086]  ? __pfx___dev_notify_flags+0x10/0x10
[  167.461137][T11086]  ? __dev_change_flags+0x4cc/0x6d0
[  167.461149][T11086]  ? __pfx___dev_change_flags+0x10/0x10
[  167.461161][T11086]  ? __pfx_console_unlock+0x10/0x10
[  167.461172][T11086]  netif_change_flags+0xe8/0x1a0
[  167.461184][T11086]  do_setlink+0xc55/0x41c0
[  167.461199][T11086]  ? __pfx_do_setlink+0x10/0x10
[  167.461210][T11086]  ? _printk+0xcf/0x120
[  167.461219][T11086]  ? __pfx____ratelimit+0x10/0x10
[  167.461229][T11086]  ? __lock_acquire+0xab9/0xd20
[  167.461238][T11086]  ? __mutex_trylock_common+0x153/0x260
[  167.461248][T11086]  ? __pfx___mutex_trylock_common+0x10/0x10
[  167.461259][T11086]  ? rcu_is_watching+0x15/0xb0
[  167.461268][T11086]  ? trace_contention_end+0x39/0x120
[  167.461278][T11086]  ? __mutex_lock+0x330/0xe80
[  167.461286][T11086]  ? __pfx_aa_get_newest_label+0x10/0x10
[  167.461296][T11086]  ? rtnl_newlink+0x8db/0x1c70
[  167.461305][T11086]  ? rcu_is_watching+0x15/0xb0
[  167.461314][T11086]  ? __pfx___mutex_lock+0x10/0x10
[  167.461324][T11086]  ? ns_capable+0x8a/0xf0
[  167.461333][T11086]  ? rtnl_link_get_net_capable+0x16a/0x350
[  167.461344][T11086]  rtnl_newlink+0x160b/0x1c70
[  167.461356][T11086]  ? __pfx_rtnl_newlink+0x10/0x10
[  167.461367][T11086]  ? __lock_acquire+0xab9/0xd20
[  167.461377][T11086]  ? __lock_acquire+0xab9/0xd20
[  167.461388][T11086]  ? is_bpf_text_address+0x26/0x2b0
[  167.461399][T11086]  ? is_bpf_text_address+0x292/0x2b0
[  167.461407][T11086]  ? is_bpf_text_address+0x26/0x2b0
[  167.461415][T11086]  ? kernel_text_address+0xa5/0xe0
[  167.461424][T11086]  ? __lock_acquire+0xab9/0xd20
[  167.461436][T11086]  ? __pfx_rtnl_newlink+0x10/0x10
[  167.461445][T11086]  rtnetlink_rcv_msg+0x7cf/0xb70
[  167.461456][T11086]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  167.461465][T11086]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  167.461509][T11086]  netlink_rcv_skb+0x208/0x470
[  167.461522][T11086]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  167.461532][T11086]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.461545][T11086]  ? netlink_deliver_tap+0x2e/0x1b0
[  167.461555][T11086]  ? netlink_deliver_tap+0x2e/0x1b0
[  167.461566][T11086]  netlink_unicast+0x75c/0x8e0
[  167.461577][T11086]  netlink_sendmsg+0x805/0xb30
[  167.461589][T11086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.461600][T11086]  ? aa_sock_msg_perm+0x94/0x160
[  167.461608][T11086]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.461617][T11086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.461627][T11086]  __sock_sendmsg+0x21c/0x270
[  167.461637][T11086]  ____sys_sendmsg+0x505/0x830
[  167.461650][T11086]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.461662][T11086]  ? import_iovec+0x74/0xa0
[  167.461673][T11086]  ___sys_sendmsg+0x21f/0x2a0
[  167.461685][T11086]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.461703][T11086]  ? __fget_files+0x2a/0x420
[  167.461710][T11086]  ? __fget_files+0x3a0/0x420
[  167.461718][T11086]  __x64_sys_sendmsg+0x19b/0x260
[  167.461730][T11086]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.461744][T11086]  ? do_user_addr_fault+0xc8a/0x1390
[  167.461752][T11086]  ? do_syscall_64+0xbe/0x3b0
[  167.461762][T11086]  do_syscall_64+0xfa/0x3b0
[  167.461771][T11086]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.461778][T11086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.461786][T11086]  ? exc_page_fault+0x9f/0xf0
[  167.461793][T11086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.461802][T11086] RIP: 0033:0x7f2269b8e9a9
[  167.461813][T11086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.461821][T11086] RSP: 002b:00007f226a96a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.461832][T11086] RAX: ffffffffffffffda RBX: 00007f2269db6240 RCX: 00007f2269b8e9a9
[  167.461838][T11086] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007
[  167.461843][T11086] RBP: 00007f2269c10d69 R08: 0000000000000000 R09: 0000000000000000
[  167.461849][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.461854][T11086] R13: 0000000000000001 R14: 00007f2269db6240 R15: 00007fff770f0d18
[  167.461863][T11086]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  167.818997][T11086] team0: Port device dummy0 removed
[  167.947910][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.959322][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46546 - 0
[  167.963454][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 40327 - 0
[  168.086551][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.096159][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46546 - 0
[  168.100850][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 40327 - 0
[  168.165983][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.171524][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46546 - 0
[  168.175695][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 40327 - 0
[  168.241883][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.246357][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46546 - 0
[  168.252093][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 40327 - 0
[  168.518493][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  168.840129][   T13] bond0 (unregistering): Released all slaves
[  168.846733][   T13] bond1 (unregistering): Released all slaves
[  168.910887][   T13] tipc: Left network mode
[  169.184618][   T13] hsr_slave_0: left promiscuous mode
[  169.187581][   T13] hsr_slave_1: left promiscuous mode
[  170.415073][   T13] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
14:56:57  Registers:
info registers vcpu 0

CPU#0
RAX=28063516ff9b8500 RBX=ffffffff81976c78 RCX=28063516ff9b8500 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3141dff8 CR3=000000010fdee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3f43a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002f82 RDI=0000000000002f83 RBP=00000000000003f8 RSP=ffffc90002f1df10
R8 =ffff8881087d8237 R9 =1ffff110210fb046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee884 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f226a96a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f226a969fc8 CR3=0000000107272000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2269d86478 00007f2269d86450 XMM03=00007f2269d86488 00007f2269d86480
XMM04=00007f226a8ed100 00007f2269d86440 XMM05=00007f2269d86458 00007f2269d864a0
XMM06=00007f2269d86498 00007f2269d86490 XMM07=00007f2269d86488 00007f2269d86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2269c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
