last executing test programs:

1.042075851s ago: executing program 1 (id=1540):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x1b, @local, 0x3}, 0x1c)
getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000100))
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

941.464329ms ago: executing program 1 (id=1541):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x440, 0x350, 0x260, 0x440, 0x190, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x8, 0x1f, 0x1, 0x0, 0x9, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x38}, [0xff, 0xffffff00, 0xff000000, 0xff], [0xfffffefe, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff, 0x181ffff00], 0x4, 0x1}}, @common=@srh={{0x30}, {0x1, 0x7, 0xa, 0x0, 0x3ff, 0x800}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0xffffe0000002}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x5}, {0xffffffffffffffff, 0x0, 0x4}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'virt_wifi0\x00', {0x400}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4=@loopback, 0x3, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)

844.078573ms ago: executing program 1 (id=1543):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff) (async)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) (async)

843.543989ms ago: executing program 0 (id=1544):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x6f0, 0x550, 0x0, 0x210, 0x550, 0x130, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x7, 0x98, 0x1}}, @common=@srh={{0x30}, {0x1, 0x7, 0xa, 0x0, 0x3ff, 0x800}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x3}, {0x0, 0x0, 0x2}, 0x600}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], '\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1}, 0x0, 0x208, 0x250, 0x48000000, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x4, [0x8, 0xffa], 0xfffff001, 0xfc02ca7e8a5b20f2, 0x7, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3c}, @loopback={0x200000000000000}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'bridge_slave_0\x00', {0x400}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750)

740.660898ms ago: executing program 0 (id=1545):
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffbce4}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

523.212167ms ago: executing program 1 (id=1546):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x590, 0x130, 0x0, 0x130, 0x3f0, 0x3f0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x7, 0x98, 0x1}}, @common=@srh={{0x30}, {0x1, 0x7, 0xa, 0x0, 0x3ff, 0x800}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x600, 0x3}, {0x0, 0x0, 0x2}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'bridge_slave_0\x00', {0x400}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)

522.888167ms ago: executing program 0 (id=1547):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0x408, 0x228, 0x228, 0x408, 0x318, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@common=@ipv6header={{0x28}, {0x20, 0x61}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [0x0, 0x0, 0x0, 0x2000000], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0x2}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'veth1_to_bridge\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'bridge_slave_0\x00', {0x400}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)

517.206509ms ago: executing program 1 (id=1549):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
socket$rds(0x15, 0x5, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
r7 = socket(0x22, 0x2, 0x4)
ioctl$IMGETDEVINFO(r7, 0x80044944, &(0x7f0000000000))
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

441.656937ms ago: executing program 0 (id=1550):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828b", 0x25}, {&(0x7f0000000300)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f102140ea8", 0x18}, {&(0x7f00000005c0)="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", 0xe8b}, {&(0x7f0000001480)="c071d5aa4739301a7eae6d89", 0xc}], 0x6}, 0x40000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_RCVMTU(r1, 0x11, 0xd, 0x0, &(0x7f0000001c80))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a8080fc"], 0x44}}, 0x0)

440.833585ms ago: executing program 2 (id=1551):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x604c800}, 0x4000011)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1018, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x1004, 0x1, 0x0, 0x0, @binary="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"}]}, 0x1018}}, 0x20000080)

440.630561ms ago: executing program 2 (id=1552):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3a0, 0xe8, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f0000000640), {[{{@arp={@broadcast, @multicast2, 0xffffff00, 0xff000000, 0x4, 0xf, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9b1, 0x8000, 0x5, 0xfff5, 0x8, 0x9, 'netdevsim0\x00', 'veth0\x00', {0xa00e7ff255ca8ae8}, {0xff}, 0x0, 0x179}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@loopback, @broadcast, 0x0, 0xff000000, 0x1, 0xc, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x81, 0xf4fb, 0xf56, 0x3, 0x7b6, 0x4, 'erspan0\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x1}, 0xc0, 0xe8, 0x0, {0x700000000000000}}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x6}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x55, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)

340.473804ms ago: executing program 0 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
close(r4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
listen(0xffffffffffffffff, 0x3)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
unshare(0x20000400) (async)
getsockopt$rose(r8, 0x104, 0xc, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0xffffffffffffffff, 0x374, 0x18}, 0xc) (async)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1e, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xc7e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0xc, 0x9, 0x7, 0xffffffffffffffc0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x0, 0x0, 0x0, 0xa, 0x1, 0x2, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xf0, &(0x7f0000000980)=""/240, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x3, &(0x7f0000000e40)=[0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, r13, r14, 0x1, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x5, 0x9, 0x8, 0x7}, {0x0, 0x4, 0x4, 0x9}, {0x4, 0x1, 0x4, 0x3}], 0x10, 0x101}, 0x94) (async)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000)

340.105702ms ago: executing program 2 (id=1554):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0x190, 0x270, 0x450, 0x360, 0x450, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x8, 0x1f, 0x1, 0x0, 0x9, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x38}, [0xff000000, 0xffffff00, 0xff000000, 0xff], [0xfffffefe, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff, 0x181ffff00], 0x4, 0x1}}, @common=@srh={{0x30}, {0x1, 0x7, 0xa, 0x0, 0x3ff, 0x800}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x3}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], '\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x400}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010101, @ipv4=@loopback, 0x3, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x1000000}, {0x28}}}}, 0x650)

232.000156ms ago: executing program 2 (id=1555):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fe8000000000000000000000000000bb0a010101000000000000000000000000000003000000000a00002008000000d6e0a2e5802449ab6fcff5ad935f53ba18fd1bf8b15e3c204cb07f5856c0b2aee956c865d2b1f298a215b2dc6ffd1f4ee7616f3a6aacfc99", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000044010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000000000000001000000000000000000000000030000000000000020010000000000000000000000000002000000006c00000008000000ffffffff0000000000000000000000000000000001000000000000000f00000000000000"], 0x1fc}}, 0x0)

141.150204ms ago: executing program 0 (id=1556):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
r7 = socket$netlink(0x10, 0x3, 0xc)
write(0xffffffffffffffff, &(0x7f0000000580)="2e099b22a4d0dc6ca13f7623cf5dfd9315b0542c64beb2317e91c2e1a290c16dc8d21e902fb3a419f6be6527bb2b1ec0dca47c96df7948c9930941b9b7cd042b6b61c5991680c3f8a7c625e665861509ee207adffba9588f82bdbead00c23fe0", 0x60)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
socket(0x10, 0x803, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000101700001000000002000000000000000000000107000000000000040000"], 0x0, 0x2a, 0x0, 0x1}, 0x20)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

139.244191ms ago: executing program 2 (id=1557):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e1406020000efff0e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

363.383µs ago: executing program 2 (id=1558):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_connect\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x4800)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$unix(0x1, 0x1, 0x0)

0s ago: executing program 1 (id=1559):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001940)=@filter={'filter\x00', 0xe, 0x1, 0x21e, [0x0, 0x200000001700, 0x200000001730, 0x2000000018be], 0x0, &(0x7f00000016c0), &(0x7f0000001700)=[{0x20, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x88b5, 'bridge_slave_1\x00', 'veth0_to_hsr\x00', 'pim6reg0\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [], @remote, [0xff, 0xff, 0x0, 0xff, 0xff], 0x12e, 0x12e, 0x15e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x8}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x56, {0x0, 0x200, 0x8, @multicast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x0, 0x3, 0x3, 0xc, @link_local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x4e20, 0x4e21, 0x4, 0x2, 0xff0a, 0x5, 0x5e6, 0x100, 0x4, 0x6}, 0x200, 0x200}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x851db}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x296)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27254' (ED25519) to the list of known hosts.
syzkaller login: [   57.932204][ T5813] cgroup: Unknown subsys name 'net'
[   58.018280][ T5813] cgroup: Unknown subsys name 'cpuset'
[   58.026093][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.288897][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.890667][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.894725][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.895330][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.901482][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.901914][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.909265][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.910476][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.916658][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.916983][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.925440][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.966210][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.971646][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.975108][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.986369][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.989669][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.253488][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   66.352616][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   66.421008][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.426091][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.429310][ T5828] bridge_slave_0: entered allmulticast mode
[   66.433669][ T5828] bridge_slave_0: entered promiscuous mode
[   66.458735][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   66.468387][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.471334][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.475555][ T5828] bridge_slave_1: entered allmulticast mode
[   66.479660][ T5828] bridge_slave_1: entered promiscuous mode
[   66.571399][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.590697][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.595880][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.598761][ T5827] bridge_slave_0: entered allmulticast mode
[   66.604088][ T5827] bridge_slave_0: entered promiscuous mode
[   66.617724][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.636301][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.639197][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.642221][ T5827] bridge_slave_1: entered allmulticast mode
[   66.646912][ T5827] bridge_slave_1: entered promiscuous mode
[   66.708412][ T5828] team0: Port device team_slave_0 added
[   66.716590][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.752066][ T5828] team0: Port device team_slave_1 added
[   66.771110][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.775119][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.778049][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.780955][ T5836] bridge_slave_0: entered allmulticast mode
[   66.787030][ T5836] bridge_slave_0: entered promiscuous mode
[   66.806625][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.809302][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.819104][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.851919][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.858588][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.861726][ T5836] bridge_slave_1: entered allmulticast mode
[   66.867232][ T5836] bridge_slave_1: entered promiscuous mode
[   66.886647][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.889528][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.900460][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.910395][ T5827] team0: Port device team_slave_0 added
[   66.917098][ T5827] team0: Port device team_slave_1 added
[   66.951729][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.965826][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.999234][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.001488][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.012887][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.046249][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.049126][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.060116][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.076364][ T5836] team0: Port device team_slave_0 added
[   67.096739][ T5836] team0: Port device team_slave_1 added
[   67.136479][ T5828] hsr_slave_0: entered promiscuous mode
[   67.139827][ T5828] hsr_slave_1: entered promiscuous mode
[   67.177737][ T5827] hsr_slave_0: entered promiscuous mode
[   67.181309][ T5827] hsr_slave_1: entered promiscuous mode
[   67.185646][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.189034][ T5827] Cannot create hsr debugfs directory
[   67.192095][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.195705][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.206833][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.248880][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.251739][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.262896][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.406714][ T5836] hsr_slave_0: entered promiscuous mode
[   67.409806][ T5836] hsr_slave_1: entered promiscuous mode
[   67.413873][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.416897][ T5836] Cannot create hsr debugfs directory
[   67.639151][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.645698][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.667600][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.680044][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.714530][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.721114][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.738532][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.751284][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.819300][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.828596][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.841997][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.858743][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.901256][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.938053][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   67.949522][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.952188][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.979191][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.982077][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.985704][ T5833] Bluetooth: hci0: command tx timeout
[   67.993130][ T5833] Bluetooth: hci1: command tx timeout
[   67.996096][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.047004][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   68.062542][ T5833] Bluetooth: hci2: command tx timeout
[   68.077680][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.080497][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.106147][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.109035][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.118728][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.164464][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   68.180462][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.183410][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.210503][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.213516][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.267083][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.276100][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.330499][ T5828] veth0_vlan: entered promiscuous mode
[   68.351009][ T5828] veth1_vlan: entered promiscuous mode
[   68.400307][ T5828] veth0_macvtap: entered promiscuous mode
[   68.409838][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.415608][ T5828] veth1_macvtap: entered promiscuous mode
[   68.438621][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.444404][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.458786][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.461643][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.465897][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.469427][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.504141][ T5827] veth0_vlan: entered promiscuous mode
[   68.516745][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.530162][ T5827] veth1_vlan: entered promiscuous mode
[   68.567904][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.570481][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.614361][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.616767][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.629088][ T5827] veth0_macvtap: entered promiscuous mode
[   68.635492][ T5836] veth0_vlan: entered promiscuous mode
[   68.647555][ T5827] veth1_macvtap: entered promiscuous mode
[   68.659121][ T5836] veth1_vlan: entered promiscuous mode
[   68.661694][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.680802][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.706568][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.715325][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.718989][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.723146][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.726785][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.760014][ T5836] veth0_macvtap: entered promiscuous mode
[   68.795392][ T5836] veth1_macvtap: entered promiscuous mode
[   68.829319][ T5897] xt_socket: unknown flags 0xd0
[   68.830140][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.855370][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.861212][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.870402][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.882507][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.885673][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.899017][ T5900] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   68.940946][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.948713][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.026874][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.045443][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.060849][ T5904] Cannot find add_set index 0 as target
[   69.100078][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.109880][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.138464][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.141338][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.170973][ T5907] x_tables: duplicate underflow at hook 2
[   69.284806][ T5916] Cannot find add_set index 0 as target
[   69.379465][ T5919] netlink: 'syz.1.12': attribute type 10 has an invalid length.
[   69.389557][ T5919] team0: Device bond0 is up. Set it down before adding it as a team port
[   69.392024][ T5922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'.
[   69.506252][ T5926] Cannot find add_set index 0 as target
[   69.557034][ T5929] netlink: 244 bytes leftover after parsing attributes in process `syz.1.15'.
[   69.596471][ T5929] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET)
[   69.660843][ T5935] pim6reg1: entered promiscuous mode
[   69.666287][ T5935] pim6reg1: entered allmulticast mode
[   69.701370][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[   69.705775][ T5937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.812881][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16'.
[   70.036223][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[   70.063704][ T5833] Bluetooth: hci1: command tx timeout
[   70.063770][ T5217] Bluetooth: hci0: command tx timeout
[   70.068190][ T5945] SET target dimension over the limit!
[   70.145194][ T5217] Bluetooth: hci2: command tx timeout
[   70.228362][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.248296][ T5951] netlink: 'syz.1.22': attribute type 12 has an invalid length.
[   70.251939][ T5951] netlink: 'syz.1.22': attribute type 29 has an invalid length.
[   70.255380][ T5951] netlink: 148 bytes leftover after parsing attributes in process `syz.1.22'.
[   70.259535][ T5951] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   70.262792][ T5951] netlink: 43 bytes leftover after parsing attributes in process `syz.1.22'.
[   70.266221][ T5951] Zero length message leads to an empty skb
[   70.311023][ T5954] Cannot find del_set index 16384 as target
[   70.354526][ T5956] netlink: 'syz.1.24': attribute type 2 has an invalid length.
[   70.357572][ T5956] netlink: 64 bytes leftover after parsing attributes in process `syz.1.24'.
[   70.367262][ T5957] netlink: 'syz.1.24': attribute type 2 has an invalid length.
[   70.370209][ T5957] netlink: 64 bytes leftover after parsing attributes in process `syz.1.24'.
[   70.489412][ T5961] veth0_to_team: entered promiscuous mode
[   70.491349][ T5961] veth0_to_team: entered allmulticast mode
[   70.572083][ T5963] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   70.590516][ T5963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27'.
[   70.651078][ T5969] x_tables: duplicate underflow at hook 1
[   70.765315][ T5975] pim6reg1: entered promiscuous mode
[   70.768370][ T5975] pim6reg1: entered allmulticast mode
[   71.026682][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.029489][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.285550][ T5992] Cannot find add_set index 0 as target
[   72.143242][ T5217] Bluetooth: hci0: command tx timeout
[   72.143307][ T5833] Bluetooth: hci1: command tx timeout
[   72.223313][ T5833] Bluetooth: hci2: command tx timeout
[   72.238675][ T6033] x_tables: duplicate underflow at hook 2
[   72.254477][ T6030] netlink: 'syz.2.46': attribute type 12 has an invalid length.
[   72.336839][ T6048] Bluetooth: MGMT ver 1.23
[   73.339458][ T6073] SET target dimension over the limit!
[   73.375011][ T6077] netlink: 'syz.1.59': attribute type 5 has an invalid length.
[   73.377772][ T6077] netlink: 'syz.1.59': attribute type 5 has an invalid length.
[   73.390619][ T6077] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   73.443895][ T6080] xt_ecn: cannot match TCP bits for non-tcp packets
[   73.525018][ T6084] bond1: entered promiscuous mode
[   73.526731][ T6084] bond1: entered allmulticast mode
[   73.529617][ T6084] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.770112][ T6105] netlink: 'syz.1.69': attribute type 10 has an invalid length.
[   73.775577][ T6105] team0: Device bond0 is up. Set it down before adding it as a team port
[   73.901924][ T6112] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   73.910147][ T6115] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   74.218429][ T6126] bridge: RTM_NEWNEIGH with invalid state 0x1
[   74.227140][ T5833] Bluetooth: hci0: command tx timeout
[   74.229557][ T5833] Bluetooth: hci1: command tx timeout
[   74.305220][ T5833] Bluetooth: hci2: command tx timeout
[   74.567753][ T6140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.139150][ T6142] macvlan1: entered promiscuous mode
[   75.148236][ T6142] macvlan1: left promiscuous mode
[   75.185031][ T6145] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   75.190987][ T6145] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   75.197801][ T6145] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   75.307045][ T6153] __nla_validate_parse: 13 callbacks suppressed
[   75.307058][ T6153] netlink: 100 bytes leftover after parsing attributes in process `syz.2.82'.
[   75.312242][ T6153] netlink: 100 bytes leftover after parsing attributes in process `syz.2.82'.
[   75.329466][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   75.397414][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'.
[   75.413578][ T6157] validate_nla: 3 callbacks suppressed
[   75.413637][ T6157] netlink: 'syz.1.84': attribute type 23 has an invalid length.
[   75.436861][ T6159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.491290][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv1
[   75.495856][ T6168] SET target dimension over the limit!
[   75.501970][ T6163] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   75.505847][ T6163] team0: Failed to send options change via netlink (err -105)
[   75.511390][ T6163] team0: Port device batadv1 added
[   75.562001][ T6159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.650786][ T6159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.715729][ T6159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.834596][ T6159] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.849961][ T6159] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.858834][ T6159] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.869288][ T6159] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.977745][ T6196] Cannot find add_set index 0 as target
[   76.060430][ T6195] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   76.189232][ T6206] ipvlan2: entered promiscuous mode
[   76.194068][ T6206] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   76.209366][ T6205] ipvlan3: entered promiscuous mode
[   76.212156][ T6205] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   76.554804][ T6226] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   76.621218][ T6228] xt_ecn: cannot match TCP bits for non-tcp packets
[   76.623791][ T6230] ip6_vti0 speed is unknown, defaulting to 1000
[   76.628759][ T6230] ip6_vti0 speed is unknown, defaulting to 1000
[   76.631683][ T6230] ip6_vti0 speed is unknown, defaulting to 1000
[   76.808811][ T6230] infiniband syz2: set active
[   76.811971][  T791] ip6_vti0 speed is unknown, defaulting to 1000
[   76.813247][ T6230] infiniband syz2: added ip6_vti0
[   76.865984][ T6230] RDS/IB: syz2: added
[   76.868250][ T6230] smc: adding ib device syz2 with port count 1
[   76.870986][ T6230] smc:    ib device syz2 port 1 has pnetid 
[   76.874937][  T792] ip6_vti0 speed is unknown, defaulting to 1000
[   76.880078][ T6230] ip6_vti0 speed is unknown, defaulting to 1000
[   76.964717][ T6236] Cannot find add_set index 0 as target
[   77.014923][ T6238] Cannot find add_set index 0 as target
[   77.079207][ T6240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.188979][ T6230] ip6_vti0 speed is unknown, defaulting to 1000
[   77.206156][ T6244] netlink: 508 bytes leftover after parsing attributes in process `syz.0.116'.
[   77.210710][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'.
[   77.396977][ T6230] ip6_vti0 speed is unknown, defaulting to 1000
[   77.651471][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   77.770918][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'.
[   77.777675][ T6275] nft_compat: unsupported protocol 0
[   77.781163][ T6274] IPVS: Error joining to the multicast group
[   77.916913][ T6282] tipc: Started in network mode
[   77.919074][ T6282] tipc: Node identity 866504062213, cluster identity 4711
[   77.924327][ T6282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.932760][ T6282] syzkaller0: entered promiscuous mode
[   77.936324][ T6282] syzkaller0: entered allmulticast mode
[   78.214380][ T6285] tipc: Resetting bearer <eth:syzkaller0>
[   78.404751][ T6280] tipc: Resetting bearer <eth:syzkaller0>
[   78.585976][ T6280] tipc: Disabling bearer <eth:syzkaller0>
[   78.950835][ T6291] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[   78.994518][ T6294] x_tables: duplicate underflow at hook 3
[   79.031793][ T6296] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.128'.
[   79.309724][ T6310] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[   79.399103][ T6318] ip6t_srh: unknown srh match flags  4000
[   79.468390][ T6322] ip6_vti0 speed is unknown, defaulting to 1000
[   79.557448][    C0] vcan0: j1939_tp_rxtimer: 0xffff888121022800: rx timeout, send abort
[   79.561700][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023109000: rx timeout, send abort
[   79.564651][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888121022800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   79.570499][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023109000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   79.647317][ T6328] Cannot find add_set index 0 as target
[   79.895535][ T6339] ip6_vti0 speed is unknown, defaulting to 1000
[   79.958185][ T6354] netlink: 84 bytes leftover after parsing attributes in process `syz.0.145'.
[   80.035912][ T6359] x_tables: duplicate underflow at hook 3
[   80.152708][ T6366] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[   80.345575][ T6368] tipc: Invalid UDP bearer configuration
[   80.345618][ T6368] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   80.355511][ T6370] tipc: Invalid UDP bearer configuration
[   80.355539][ T6370] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   80.361672][ T6368] netlink: 'syz.0.151': attribute type 21 has an invalid length.
[   80.372392][ T6368] __nla_validate_parse: 2 callbacks suppressed
[   80.372405][ T6368] netlink: 128 bytes leftover after parsing attributes in process `syz.0.151'.
[   80.382600][ T6368] netlink: 'syz.0.151': attribute type 5 has an invalid length.
[   80.385179][ T6368] netlink: 3 bytes leftover after parsing attributes in process `syz.0.151'.
[   80.572951][ T6377] netlink: 152 bytes leftover after parsing attributes in process `syz.0.153'.
[   80.629521][ T6379] Cannot find add_set index 0 as target
[   80.646832][ T6381] x_tables: duplicate underflow at hook 1
[   80.687677][ T6383] vlan0: entered promiscuous mode
[   80.691709][ T6383] bridge0: entered promiscuous mode
[   80.700966][ T6383] vlan0: entered allmulticast mode
[   80.706812][ T6383] bridge0: entered allmulticast mode
[   80.755889][ T6386] batman_adv: batadv0: Adding interface: dummy0
[   80.758424][ T6386] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.764130][ T6387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.156'.
[   80.767647][ T6386] batman_adv: batadv0: Interface activated: dummy0
[   80.783286][ T6386] batadv0: mtu less than device minimum
[   80.786844][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.792135][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.796606][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.801788][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.807095][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.811166][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.814981][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.818768][ T6386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.958583][ T6391] x_tables: duplicate underflow at hook 2
[   81.267399][   T10] cfg80211: failed to load regulatory.db
[   81.562935][ T6417] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   81.612474][ T6417] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[   81.633254][ T6417] bond1: (slave vxcan1): Error -95 calling set_mac_address
[   81.660240][ T6421] gretap1: entered promiscuous mode
[   81.669749][ T6421] bond1: (slave gretap1): making interface the new active one
[   81.675849][ T6421] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   81.685628][ T6421] macvlan2: entered promiscuous mode
[   81.687736][ T6421] macvlan2: entered allmulticast mode
[   81.692939][ T6421] bond1: entered promiscuous mode
[   81.695709][ T6421] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   81.703049][ T6421] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   81.722724][ T6421] bond1: left promiscuous mode
[   81.824386][ T6437] ip6t_srh: unknown srh match flags  4000
[   81.830111][ T6438] netlink: 76 bytes leftover after parsing attributes in process `syz.1.175'.
[   81.840210][ T6438] nbd: illegal input index 65508
[   81.935386][ T6440] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   82.245784][ T6463] netlink: 'syz.0.184': attribute type 9 has an invalid length.
[   82.248221][ T6463] netlink: 224 bytes leftover after parsing attributes in process `syz.0.184'.
[   82.274692][ T6465] Cannot find add_set index 0 as target
[   82.287483][ T6461] lo speed is unknown, defaulting to 1000
[   82.289859][ T6461] lo speed is unknown, defaulting to 1000
[   82.320906][ T6461] lo speed is unknown, defaulting to 1000
[   82.489280][ T6471] netlink: 48 bytes leftover after parsing attributes in process `syz.0.186'.
[   82.568427][ T6461] infiniband syz0: set active
[   82.570413][ T6461] infiniband syz0: added lo
[   82.588702][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.186'.
[   82.633354][ T5295] lo speed is unknown, defaulting to 1000
[   82.709949][ T6461] RDS/IB: syz0: added
[   82.715346][ T6461] smc: adding ib device syz0 with port count 1
[   82.717670][ T6461] smc:    ib device syz0 port 1 has pnetid 
[   82.723419][ T6461] lo speed is unknown, defaulting to 1000
[   82.744753][ T5295] lo speed is unknown, defaulting to 1000
[   82.911670][ T6461] lo speed is unknown, defaulting to 1000
[   83.160040][ T6461] lo speed is unknown, defaulting to 1000
[   83.371437][ T6492] netlink: 'syz.0.187': attribute type 2 has an invalid length.
[   83.428098][ T6489] Illegal XDP return value 4294967274 on prog  (id 24) dev N/A, expect packet loss!
[   83.437347][ T6489] netlink: 'syz.0.187': attribute type 13 has an invalid length.
[   83.440456][ T6489] netlink: 'syz.0.187': attribute type 17 has an invalid length.
[   83.539189][ T6489] net_ratelimit: 13 callbacks suppressed
[   83.539198][ T6489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.617155][ T6504] netlink: 104 bytes leftover after parsing attributes in process `syz.0.191'.
[   83.671705][ T6507] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   83.735582][ T6516] Cannot find add_set index 0 as target
[   83.779673][ T6518] ip6t_srh: unknown srh match flags  4000
[   83.784426][    C1] vcan0: j1939_tp_rxtimer: 0xffff888121433000: rx timeout, send abort
[   83.786960][    C1] vcan0: j1939_tp_rxtimer: 0xffff888121433400: rx timeout, send abort
[   83.789526][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888121433000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   83.793924][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888121433400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   84.122948][ T6541] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   84.131574][ T6543] vcan0: tx drop: invalid da for name 0x0000000000000001
[   84.421452][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.212'.
[   84.512427][ T6569] xt_ecn: cannot match TCP bits for non-tcp packets
[   84.575994][ T6575] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   84.609823][ T6579] warning: `syz.0.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.654791][ T6583] wg1: entered promiscuous mode
[   84.659372][ T6583] wg1: entered allmulticast mode
[   84.735653][ T6582] syz.0.219 (6582) used greatest stack depth: 18952 bytes left
[   85.007428][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.042241][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.158583][ T6594] Cannot find add_set index 0 as target
[   85.311202][ T6599] team0: Device sit1 is of different type
[   85.427526][ T6602] Cannot find add_set index 0 as target
[   85.541531][ T6608] No such timeout policy "syz1"
[   85.718891][ T6624] netlink: 'syz.2.231': attribute type 10 has an invalid length.
[   85.729074][ T6624] team0: Device bond0 is up. Set it down before adding it as a team port
[   85.788601][ T6631] __nla_validate_parse: 4 callbacks suppressed
[   85.788611][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'.
[   85.794075][ T6628] netlink: 104 bytes leftover after parsing attributes in process `syz.2.234'.
[   85.839613][ T6631] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   85.843930][ T6631] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   85.846726][ T6631] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   85.849512][ T6631] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   85.866744][ T6635] netlink: 'syz.2.237': attribute type 11 has an invalid length.
[   85.926671][ T6637] vti0: entered promiscuous mode
[   85.928244][ T6637] vti0: entered allmulticast mode
[   85.970573][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'.
[   85.977979][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'.
[   85.989872][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'.
[   85.993713][ T6643] netlink: 'syz.0.241': attribute type 14 has an invalid length.
[   86.003676][ T6643] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.006615][ T6643] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.009270][ T6643] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.012030][ T6643] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.022004][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'.
[   86.024846][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'.
[   86.028019][ T6643] netlink: 'syz.0.241': attribute type 14 has an invalid length.
[   86.037023][ T6649] x_tables: duplicate underflow at hook 2
[   86.085353][ T6651] tipc: Started in network mode
[   86.087117][ T6651] tipc: Node identity d60a93df053f, cluster identity 4711
[   86.089611][ T6651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.096995][ T6655] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   86.097071][ T6651] syzkaller0: entered promiscuous mode
[   86.102026][ T6651] syzkaller0: entered allmulticast mode
[   86.125828][ T6651] sch_fq: defrate 257 ignored.
[   86.133916][ T6651] tipc: Resetting bearer <eth:syzkaller0>
[   86.137928][ T6650] tipc: Resetting bearer <eth:syzkaller0>
[   86.150622][ T6650] tipc: Disabling bearer <eth:syzkaller0>
[   86.180041][ T6662] netlink: 'syz.0.248': attribute type 12 has an invalid length.
[   86.184290][ T6662] netlink: 148 bytes leftover after parsing attributes in process `syz.0.248'.
[   86.187318][ T6662] netlink: 47 bytes leftover after parsing attributes in process `syz.0.248'.
[   86.214636][ T6666] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   86.226298][ T6666] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   86.276144][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'.
[   86.297081][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.301746][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.411306][ T6680] xt_ecn: cannot match TCP bits for non-tcp packets
[   86.431991][ T6682] x_tables: duplicate underflow at hook 1
[   86.580888][ T6693] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.674963][ T6701] validate_nla: 1 callbacks suppressed
[   86.674974][ T6701] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   86.686278][ T6703] Cannot find add_set index 0 as target
[   86.755323][ T6709] x_tables: duplicate underflow at hook 3
[   86.790519][ T6711] netlink: 'syz.2.271': attribute type 20 has an invalid length.
[   86.797777][ T6711] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.800698][ T6711] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.804678][ T6711] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.808078][ T6711] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.812885][ T6711] netlink: 'syz.2.271': attribute type 20 has an invalid length.
[   86.815594][ T6713] x_tables: duplicate underflow at hook 2
[   86.877411][ T6717] Cannot find add_set index 0 as target
[   86.948075][ T6726] netlink: 'syz.2.278': attribute type 10 has an invalid length.
[   86.955880][ T6726] team0: Device ipvlan1 failed to register rx_handler
[   86.963831][ T6726] netlink: 'syz.2.278': attribute type 15 has an invalid length.
[   87.065325][ T6738] Cannot find add_set index 0 as target
[   87.072896][ T6735] netlink: 'syz.1.280': attribute type 7 has an invalid length.
[   87.250471][ T6753] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   87.254507][ T6753] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   88.029293][ T6749] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   88.087400][ T6765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.094567][ T6765] syzkaller0: entered promiscuous mode
[   88.100288][ T6765] syzkaller0: entered allmulticast mode
[   88.146825][ T6765] tipc: Resetting bearer <eth:syzkaller0>
[   88.162163][ T6764] tipc: Resetting bearer <eth:syzkaller0>
[   88.198669][ T6764] tipc: Disabling bearer <eth:syzkaller0>
[   88.323257][ T6778] syzkaller0: refused to change device tx_queue_len
[   88.466600][ T6782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.539906][ T6795] netem: incorrect ge model size
[   88.543100][ T6795] netem: change failed
[   88.547742][ T6795] netlink: 'syz.1.302': attribute type 10 has an invalid length.
[   88.558976][ T6797] xt_ecn: cannot match TCP bits for non-tcp packets
[   88.577385][ T6795] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   88.601698][ T6795] bridge_slave_0: left allmulticast mode
[   88.610382][ T6795] bridge_slave_0: left promiscuous mode
[   88.617040][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.626608][ T6795] bridge_slave_1: left allmulticast mode
[   88.628419][ T6795] bridge_slave_1: left promiscuous mode
[   88.630218][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.637423][ T6799] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[   88.649303][ T6795] bond0: (slave bond_slave_0): Releasing backup interface
[   88.667681][ T6795] bond0: (slave bond_slave_1): Releasing backup interface
[   88.698147][ T6795] team0: Port device team_slave_0 removed
[   88.709645][ T6795] team0: Port device team_slave_1 removed
[   88.716303][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.721699][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.735442][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.737805][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.766031][ T6795] bond0: (slave wlan1): Releasing backup interface
[   88.890412][ T6818] ip6t_srh: unknown srh match flags  4000
[   88.945857][ T6821] pim6reg1: entered promiscuous mode
[   88.947961][ T6821] pim6reg1: entered allmulticast mode
[   89.076609][ T6834] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   89.079609][ T6834] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   89.286116][ T6859] Cannot find add_set index 0 as target
[   89.480850][ T6879] x_tables: duplicate underflow at hook 3
[   89.557020][ T6881] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   89.590451][ T6884] Cannot find add_set index 0 as target
[   89.599244][ T6881] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.621279][ T6881] bond2: (slave gretap2): making interface the new active one
[   89.636549][ T6881] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   89.714641][ T6889] netlink: 'syz.0.330': attribute type 7 has an invalid length.
[   89.728202][ T6890] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[   89.784260][ T6892] netlink: 'syz.2.332': attribute type 7 has an invalid length.
[   89.938891][ T6903] ip6t_srh: unknown srh match flags  4000
[   89.997013][ T6909] x_tables: duplicate underflow at hook 2
[   90.069198][ T6912] Cannot find del_set index 0 as target
[   90.095279][ T6916] SET target dimension over the limit!
[   90.208753][  T791] IPVS: starting estimator thread 0...
[   90.216010][ T6920] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   90.306088][ T6930] IPVS: using max 62 ests per chain, 148800 per kthread
[   91.520420][ T6969] veth1_macvtap: left promiscuous mode
[   91.522755][ T6969] macsec0: entered allmulticast mode
[   91.528167][ T6969] veth1_macvtap: entered promiscuous mode
[   91.529888][ T6969] veth1_macvtap: entered allmulticast mode
[   91.532138][ T6969] macsec0: left allmulticast mode
[   91.537034][ T6969] veth1_macvtap: left allmulticast mode
[   92.041792][ T6987] openvswitch: netlink: IP tunnel TTL not specified.
[   92.048512][ T6987] Cannot find add_set index 0 as target
[   92.219047][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880320e9c00: rx timeout, send abort
[   92.222438][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880320ea000: rx timeout, send abort
[   92.225952][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880320e9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   92.231548][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880320ea000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   92.271157][ T6998] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   92.303707][ T6998] validate_nla: 4 callbacks suppressed
[   92.303722][ T6998] netlink: 'syz.1.362': attribute type 10 has an invalid length.
[   92.308998][ T6998] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   92.320425][ T6998] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.327260][ T6998] sctp: [Deprecated]: syz.1.362 (pid 6998) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.327260][ T6998] Use struct sctp_sack_info instead
[   92.397602][ T7000] ieee802154 phy0 wpan0: encryption failed: -22
[   92.400169][ T7000] __nla_validate_parse: 25 callbacks suppressed
[   92.400177][ T7000] netlink: 196 bytes leftover after parsing attributes in process `syz.1.363'.
[   92.530143][ T7002] netlink: 248 bytes leftover after parsing attributes in process `syz.1.364'.
[   92.537650][ T7002] netlink: 248 bytes leftover after parsing attributes in process `syz.1.364'.
[   92.587574][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'.
[   92.771555][    C1] vcan0: j1939_tp_rxtimer: 0xffff888121022400: rx timeout, send abort
[   92.774889][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812189a800: rx timeout, send abort
[   92.778156][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888121022400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   92.784557][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812189a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   92.876462][ T7015] netlink: 'syz.1.368': attribute type 10 has an invalid length.
[   92.879651][ T7015] team0: Device bond0 is up. Set it down before adding it as a team port
[   92.904623][ T7017] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.369'.
[   92.967523][ T7021] Cannot find add_set index 0 as target
[   93.082239][ T7027] pim6reg1: entered promiscuous mode
[   93.084565][ T7027] pim6reg1: entered allmulticast mode
[   93.190361][ T7037] SET target dimension over the limit!
[   93.220241][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'.
[   93.279848][ T7040] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.291797][ T7040] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   93.297181][ T7040] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   93.302112][ T7040] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   93.319831][ T7040] bond0: (slave wlan1): Releasing backup interface
[   93.323111][ T7040] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   93.337976][ T7040] bond2: (slave macvlan2): Releasing backup interface
[   94.859827][ T7084] Cannot find add_set index 0 as target
[   94.947351][ T7088] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[   94.993106][ T7090] erspan0: entered promiscuous mode
[   94.997406][ T7090] batman_adv: batadv0: Adding interface: macvlan2
[   94.999561][ T7090] batman_adv: batadv0: Interface activated: macvlan2
[   95.001861][ T7090] batadv0: mtu less than device minimum
[   95.007401][ T7090] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.011790][ T7090] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.016486][ T7090] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.020427][ T7090] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.024902][ T7090] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.028914][ T7090] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.033865][ T7090] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.090289][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'.
[   95.423824][ T7112] Cannot find add_set index 0 as target
[   95.460182][ T7114] net_ratelimit: 12 callbacks suppressed
[   95.460194][ T7114] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   95.513520][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032ebec00: rx timeout, send abort
[   95.516363][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032ebf000: rx timeout, send abort
[   95.519189][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032ebec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   95.523751][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032ebf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   95.559147][ T7117] netlink: 100 bytes leftover after parsing attributes in process `syz.1.403'.
[   95.848649][ T7126] netlink: 64 bytes leftover after parsing attributes in process `syz.1.407'.
[   96.195700][ T7150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.261096][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[   96.344069][ T7161] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   96.604053][ T7172] veth0_to_team: entered promiscuous mode
[   96.612386][ T7172] veth0_to_team: entered allmulticast mode
[   97.021722][ T7192] bridge0: port 3(syz_tun) entered blocking state
[   97.031468][ T7192] bridge0: port 3(syz_tun) entered disabled state
[   97.049114][ T7192] syz_tun: entered allmulticast mode
[   97.068526][ T7192] syz_tun: entered promiscuous mode
[   97.072967][ T7192] bridge0: port 3(syz_tun) entered blocking state
[   97.075440][ T7192] bridge0: port 3(syz_tun) entered forwarding state
[   97.193941][ T7196] ip6t_srh: unknown srh match flags  4000
[   97.295952][ T7198] SET target dimension over the limit!
[   97.483154][ T7203] Cannot find add_set index 0 as target
[   97.531863][ T7205] __nla_validate_parse: 4 callbacks suppressed
[   97.531906][ T7205] netlink: 248 bytes leftover after parsing attributes in process `syz.0.428'.
[   97.666485][ T7213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.836152][ T7225] SET target dimension over the limit!
[   97.929296][ T7231] netlink: 208 bytes leftover after parsing attributes in process `syz.1.435'.
[   98.012947][ T7235] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   98.130606][ T7252] macsec2: entered promiscuous mode
[   98.137095][ T7252] macvlan1: entered promiscuous mode
[   98.138947][ T7252] macsec2: entered allmulticast mode
[   98.140602][ T7252] macvlan1: entered allmulticast mode
[   98.142190][ T7252] veth1_vlan: entered allmulticast mode
[   98.150992][ T7252] macvlan1: left allmulticast mode
[   98.152887][ T7252] veth1_vlan: left allmulticast mode
[   98.154499][ T7252] macvlan1: left promiscuous mode
[   98.234200][    C0] vcan0: j1939_tp_rxtimer: 0xffff888121379800: rx timeout, send abort
[   98.236759][    C0] vcan0: j1939_tp_rxtimer: 0xffff888121384c00: rx timeout, send abort
[   98.239389][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888121379800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   98.244145][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888121384c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   98.321056][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'.
[   98.378385][ T7267] nbd: must specify an index to disconnect
[   98.484335][ T7285] xt_ecn: cannot match TCP bits for non-tcp packets
[   98.509480][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.451'.
[   98.518115][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.451'.
[   98.537230][ T7289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.452'.
[   98.540542][ T7289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.550856][ T7289] syzkaller0: entered promiscuous mode
[   98.552826][ T7289] syzkaller0: entered allmulticast mode
[   98.607517][ T7289] tipc: Resetting bearer <eth:syzkaller0>
[   98.611069][ T7288] tipc: Resetting bearer <eth:syzkaller0>
[   98.621709][ T7288] tipc: Disabling bearer <eth:syzkaller0>
[   98.750072][ T7313] x_tables: duplicate underflow at hook 1
[   98.793569][ T7317] netlink: 104 bytes leftover after parsing attributes in process `syz.1.462'.
[   98.855229][ T7323] netlink: 'syz.2.465': attribute type 11 has an invalid length.
[   98.858800][ T7323] netlink: 'syz.2.465': attribute type 4 has an invalid length.
[   98.862019][ T7323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.465'.
[   98.907460][ T7329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.467'.
[   98.960004][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'.
[   98.979883][ T7334] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   99.004051][ T7334] Cannot find add_set index 0 as target
[   99.194313][ T7353] ip6_vti0 speed is unknown, defaulting to 1000
[   99.311679][ T7356] Cannot find add_set index 0 as target
[   99.329175][ T7353] lo speed is unknown, defaulting to 1000
[   99.907648][ T7375] pim6reg1: entered promiscuous mode
[   99.909876][ T7375] pim6reg1: entered allmulticast mode
[  100.201481][ T7390] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  100.331542][ T7392] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.421887][ T7392] wg2: entered promiscuous mode
[  100.431975][ T7392] wg2: entered allmulticast mode
[  100.659603][ T7402] netlink: 'syz.1.489': attribute type 4 has an invalid length.
[  100.729309][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801f3aec00: rx timeout, send abort
[  100.731932][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801f3ae800: rx timeout, send abort
[  100.734919][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f3aec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  100.739354][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f3ae800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  100.819434][ T7410] ieee802154 phy0 wpan0: encryption failed: -22
[  100.824912][   T10] hid-generic 0005:07C0:5505.0001: item fetching failed at offset 0/1
[  100.827934][   T10] hid-generic 0005:07C0:5505.0001: probe with driver hid-generic failed with error -22
[  100.911684][ T7415] x_tables: duplicate underflow at hook 3
[  100.926812][ T7414] netlink: 'syz.0.494': attribute type 10 has an invalid length.
[  100.935702][ T7414] team0: Device bond0 is up. Set it down before adding it as a team port
[  101.250525][ T7426] Cannot find add_set index 0 as target
[  101.639492][ T7438] pim6reg1: entered promiscuous mode
[  101.641197][ T7438] pim6reg1: entered allmulticast mode
[  101.757394][ T7443] macsec2: entered promiscuous mode
[  101.759207][ T7443] macvlan1: entered promiscuous mode
[  101.761122][ T7443] macsec2: entered allmulticast mode
[  101.763528][ T7443] macvlan1: entered allmulticast mode
[  101.765237][ T7443] veth1_vlan: entered allmulticast mode
[  101.768846][ T7443] macvlan1: left allmulticast mode
[  101.770551][ T7443] veth1_vlan: left allmulticast mode
[  101.773812][ T7443] macvlan1: left promiscuous mode
[  101.915701][ T7446] netlink: 'syz.2.507': attribute type 10 has an invalid length.
[  101.934192][ T7446] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  102.457588][ T7453] bond0: down delay (5) is not a multiple of miimon (33271), value rounded to 0 ms
[  102.461224][ T7453] bond0: option all_slaves_active: invalid value (7)
[  102.474617][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113146400: rx timeout, send abort
[  102.477684][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810ea0b000: rx timeout, send abort
[  102.480540][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888113146400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  102.485120][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810ea0b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  102.744610][ T7463] nbd0: detected capacity change from 0 to 127
[  102.749646][   T56] block nbd0: Receive control failed (result -32)
[  102.751424][ T5837] block nbd0: Send control failed (result -32)
[  102.763236][ T5837] block nbd0: Request send failed, requeueing
[  102.768751][ T5837] block nbd0: Dead connection, failed to find a fallback
[  102.771880][ T5837] block nbd0: shutting down sockets
[  102.783639][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.787398][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.794075][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.797809][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read
[  102.802510][ T5837] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.806900][ T5837] Buffer I/O error on dev nbd0, logical block 2, async page read
[  102.810902][ T5837] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.816176][ T5837] Buffer I/O error on dev nbd0, logical block 3, async page read
[  102.821150][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.832549][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.838088][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.845054][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read
[  102.847916][ T5837] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.850987][ T5837] Buffer I/O error on dev nbd0, logical block 2, async page read
[  102.857059][ T5837] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.861831][ T5837] Buffer I/O error on dev nbd0, logical block 3, async page read
[  102.878459][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.884059][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.887506][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.891294][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read
[  102.905271][ T5837] ldm_validate_partition_table(): Disk read failed.
[  102.908805][ T7481] x_tables: duplicate underflow at hook 2
[  102.919122][ T5837] Dev nbd0: unable to read RDB block 0
[  102.936423][ T5837]  nbd0: unable to read partition table
[  102.957613][ T5837] ldm_validate_partition_table(): Disk read failed.
[  102.966473][ T7483] __nla_validate_parse: 6 callbacks suppressed
[  102.966489][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.518'.
[  102.970210][ T5837] Dev nbd0: unable to read RDB block 0
[  102.987651][ T5837]  nbd0: unable to read partition table
[  103.059454][ T7487] Cannot find add_set index 0 as target
[  103.174876][ T7497] x_tables: duplicate underflow at hook 1
[  103.370544][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[  103.382411][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'.
[  103.393145][ T7508] netlink: 'syz.1.528': attribute type 13 has an invalid length.
[  103.395932][ T7508] netlink: 'syz.1.528': attribute type 12 has an invalid length.
[  103.474923][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'.
[  103.486528][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'.
[  103.638475][ T7535] Cannot find add_set index 0 as target
[  103.816586][ T7549] pim6reg1: entered promiscuous mode
[  103.818300][ T7549] pim6reg1: entered allmulticast mode
[  103.908766][ T7560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.545'.
[  103.909786][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'.
[  103.954438][ T7557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.542'.
[  103.968755][ T7564] x_tables: duplicate underflow at hook 1
[  104.016925][ T7566] x_tables: duplicate underflow at hook 3
[  104.169479][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.549'.
[  104.178784][ T7573] sctp: [Deprecated]: syz.0.549 (pid 7573) Use of int in maxseg socket option.
[  104.178784][ T7573] Use struct sctp_assoc_value instead
[  104.455667][ T7593] ip6_vti0 speed is unknown, defaulting to 1000
[  104.497694][ T7596] netlink: 'syz.0.553': attribute type 21 has an invalid length.
[  104.509435][ T7596] netlink: 'syz.0.553': attribute type 6 has an invalid length.
[  104.514966][ T7596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.553'.
[  104.639704][ T7593] lo speed is unknown, defaulting to 1000
[  104.851481][ T7612] SET target dimension over the limit!
[  105.248908][ T7630] netlink: 'syz.0.560': attribute type 4 has an invalid length.
[  105.341920][ T7648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.363300][ T7648] syzkaller0: entered promiscuous mode
[  105.366251][ T7648] syzkaller0: entered allmulticast mode
[  105.405096][ T7648] tipc: Resetting bearer <eth:syzkaller0>
[  105.445561][ T7647] tipc: Resetting bearer <eth:syzkaller0>
[  105.459357][ T7647] tipc: Disabling bearer <eth:syzkaller0>
[  105.594701][ T7660] netlink: 'syz.1.568': attribute type 10 has an invalid length.
[  105.604007][ T7660] team0: Device bond0 is up. Set it down before adding it as a team port
[  106.066069][ T7689] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  106.086734][ T7694] netlink: 'syz.1.577': attribute type 2 has an invalid length.
[  106.185184][ T7702] x_tables: duplicate underflow at hook 3
[  106.200716][ T7699] netlink: 'syz.0.581': attribute type 10 has an invalid length.
[  106.217413][ T7699] team0: Device ipvlan1 failed to register rx_handler
[  106.229732][ T7706] xt_ecn: cannot match TCP bits for non-tcp packets
[  106.343194][ T7717] pim6reg1: entered promiscuous mode
[  106.344955][ T7717] pim6reg1: entered allmulticast mode
[  106.353226][ T7719] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  106.477368][ T7726] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  106.495820][ T7726] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  106.510235][ T7728] netlink: 'syz.0.590': attribute type 10 has an invalid length.
[  106.514635][ T7728] team0: Device bond0 is up. Set it down before adding it as a team port
[  106.669257][ T7734] x_tables: duplicate underflow at hook 1
[  106.675713][ T7736] Cannot find add_set index 0 as target
[  106.758312][ T7743] veth1_macvtap: left promiscuous mode
[  107.652023][ T7747] netlink: 'syz.2.598': attribute type 4 has an invalid length.
[  107.799521][ T7758] netlink: 'syz.1.603': attribute type 29 has an invalid length.
[  108.375873][ T7778] xt_ecn: cannot match TCP bits for non-tcp packets
[  108.514996][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801e486400: rx timeout, send abort
[  108.518423][    C0] vcan0: j1939_tp_rxtimer: 0xffff888036910000: rx timeout, send abort
[  108.521755][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e486400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  108.527505][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036910000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  108.854431][ T7787] wg2: left promiscuous mode
[  108.857671][ T7787] wg2: left allmulticast mode
[  108.931710][ T7787] veth0_to_team: left promiscuous mode
[  108.938044][ T7787] veth0_to_team: left allmulticast mode
[  109.080167][ T7787] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.084683][ T7787] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.088338][ T7787] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.091806][ T7787] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.141109][ T7787] bond1: left promiscuous mode
[  109.143939][ T7787] bond1: left allmulticast mode
[  109.147372][ T7787] vti0: left promiscuous mode
[  109.149333][ T7787] vti0: left allmulticast mode
[  109.170668][ T7799] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  109.181480][ T7799] __nla_validate_parse: 23 callbacks suppressed
[  109.181496][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'.
[  109.192648][ T5295] syz1: Port: 1 Link DOWN
[  109.195467][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.200065][ T7811] batadv_slave_0: entered promiscuous mode
[  109.266333][ T7800] netlink: 428 bytes leftover after parsing attributes in process `syz.0.619'.
[  109.520269][ T7826] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.524934][ T7827] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.606661][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'.
[  109.646909][ T7829] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  109.651704][ T7829] bond3: (slave vcan1): Error -95 calling set_mac_address
[  109.848959][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'.
[  109.859282][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'.
[  109.879776][ T7837] x_tables: duplicate underflow at hook 1
[  109.957962][ T7842] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  110.012422][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  110.023910][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  110.028201][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  110.087410][ T7847] netlink: 180 bytes leftover after parsing attributes in process `syz.0.634'.
[  110.091573][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'.
[  110.161192][ T7853] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  110.202396][ T7855] x_tables: duplicate underflow at hook 3
[  110.414803][ T7871] xt_TPROXY: Can be used only with -p tcp or -p udp
[  110.522105][ T7881] SET target dimension over the limit!
[  110.764148][ T7909] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[  110.789487][ T7913] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  110.910441][ T7930] ip6t_srh: unknown srh match flags  4000
[  110.910753][ T7928] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[  110.975213][ T7936] Cannot find add_set index 0 as target
[  111.001799][ T7939] x_tables: duplicate underflow at hook 3
[  111.078169][ T7941] netlink: 'syz.2.671': attribute type 9 has an invalid length.
[  112.183423][ T7987] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  112.188168][ T7988] x_tables: duplicate underflow at hook 1
[  112.246670][ T7994] x_tables: duplicate underflow at hook 3
[  112.307565][ T7998] pim6reg1: entered promiscuous mode
[  112.309227][ T7998] pim6reg1: entered allmulticast mode
[  112.313311][ T8000] xt_ecn: cannot match TCP bits for non-tcp packets
[  112.405708][ T8007] sctp: [Deprecated]: syz.1.698 (pid 8007) Use of int in maxseg socket option.
[  112.405708][ T8007] Use struct sctp_assoc_value instead
[  112.750967][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a66fc00: rx timeout, send abort
[  112.753991][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030871400: rx timeout, send abort
[  112.756910][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a66fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  112.761427][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030871400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  112.981966][ T8047] netlink: 'syz.2.711': attribute type 1 has an invalid length.
[  112.988197][ T8047] netlink: 'syz.2.711': attribute type 1 has an invalid length.
[  113.060329][ T8056] x_tables: duplicate underflow at hook 2
[  113.208708][ T8068] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  113.216450][ T8063] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[  113.246308][ T8063] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.265754][ T8063] ipvlan2: entered allmulticast mode
[  113.267971][ T8063] bond4: entered allmulticast mode
[  113.284890][ T8063] bond4: (slave gretap3): making interface the new active one
[  113.287929][ T8063] gretap3: entered allmulticast mode
[  113.288486][ T8074] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  113.291664][ T8063] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  113.395845][ T8081] x_tables: duplicate underflow at hook 1
[  113.440608][ T8087] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  113.500186][ T8096] openvswitch: netlink: Multiple metadata blocks provided
[  113.511875][ T8098] netlink: 'syz.0.724': attribute type 10 has an invalid length.
[  113.529643][ T8098] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  113.542490][ T8087] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  113.545673][ T8087] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  113.595553][ T8098] openvswitch: netlink: Flow key attribute not present in set flow.
[  113.747654][ T8117] openvswitch: netlink: IP tunnel TTL not specified.
[  113.835844][ T8127] netlink: 'syz.1.731': attribute type 21 has an invalid length.
[  113.836463][ T8128] netlink: 'syz.1.731': attribute type 21 has an invalid length.
[  113.841514][ T8128] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  114.076692][ T8146] pim6reg1: entered promiscuous mode
[  114.078608][ T8146] pim6reg1: entered allmulticast mode
[  114.233522][ T8151] __nla_validate_parse: 24 callbacks suppressed
[  114.233540][ T8151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.735'.
[  114.452070][ T8186] Cannot find add_set index 0 as target
[  114.508347][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'.
[  114.511532][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  114.520386][ T8191] netlink: 128 bytes leftover after parsing attributes in process `syz.0.739'.
[  114.718065][ T8207] ip6t_srh: unknown srh match flags  4000
[  114.792719][ T8219] netlink: 3 bytes leftover after parsing attributes in process `syz.0.749'.
[  114.831368][ T8223] x_tables: duplicate underflow at hook 3
[  114.885214][ T8228] pim6reg1: entered promiscuous mode
[  114.887473][ T8228] pim6reg1: entered allmulticast mode
[  114.923320][  T791] IPVS: starting estimator thread 0...
[  115.008557][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.753'.
[  115.025938][ T8230] IPVS: using max 62 ests per chain, 148800 per kthread
[  115.084448][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'.
[  115.239066][ T8251] Cannot find add_set index 0 as target
[  115.321013][ T8263] veth0: entered promiscuous mode
[  115.349275][ T8262] veth0: left promiscuous mode
[  115.494422][ T8279] Cannot find add_set index 0 as target
[  115.566512][ T8288] x_tables: duplicate underflow at hook 2
[  115.617305][ T8294] netlink: 104 bytes leftover after parsing attributes in process `syz.1.775'.
[  115.681331][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'.
[  115.719398][ T8299] hsr_slave_1 (unregistering): left promiscuous mode
[  115.895166][ T8316] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  115.903237][    C1] vcan0: j1939_tp_rxtimer: 0xffff888121023000: rx timeout, send abort
[  116.155213][ T8348] x_tables: duplicate underflow at hook 1
[  116.297197][ T8357] validate_nla: 9 callbacks suppressed
[  116.297210][ T8357] netlink: 'syz.0.793': attribute type 12 has an invalid length.
[  116.301381][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.793'.
[  116.316877][ T8361] ip6_vti0 speed is unknown, defaulting to 1000
[  116.406634][    C1] vcan0: j1939_tp_rxtimer: 0xffff888121023000: abort rx timeout. Force session deactivation
[  116.460693][ T8361] lo speed is unknown, defaulting to 1000
[  117.171145][ T8382] syz.0.797: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  117.179894][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.0.797 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  117.179913][ T8382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.179921][ T8382] Call Trace:
[  117.179927][ T8382]  <TASK>
[  117.179960][ T8382]  dump_stack_lvl+0x189/0x250
[  117.179984][ T8382]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.179998][ T8382]  ? __pfx__printk+0x10/0x10
[  117.180015][ T8382]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.180031][ T8382]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.180046][ T8382]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  117.180063][ T8382]  warn_alloc+0x214/0x310
[  117.180080][ T8382]  ? __pfx_warn_alloc+0x10/0x10
[  117.180097][ T8382]  ? __get_vm_area_node+0x28f/0x300
[  117.180114][ T8382]  ? xskq_create+0xbf/0x170
[  117.180130][ T8382]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  117.180166][ T8382]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  117.180187][ T8382]  ? __kasan_kmalloc+0x93/0xb0
[  117.180211][ T8382]  vmalloc_user_noprof+0xad/0xf0
[  117.180227][ T8382]  ? xskq_create+0xbf/0x170
[  117.180239][ T8382]  xskq_create+0xbf/0x170
[  117.180253][ T8382]  xsk_init_queue+0xb0/0x110
[  117.180266][ T8382]  xsk_setsockopt+0x4de/0x710
[  117.180286][ T8382]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.180305][ T8382]  ? __fget_files+0x2a/0x420
[  117.180316][ T8382]  ? aa_sock_opt_perm+0x74/0x110
[  117.180331][ T8382]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  117.180344][ T8382]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.180362][ T8382]  do_sock_setsockopt+0x17c/0x1b0
[  117.180412][ T8382]  __x64_sys_setsockopt+0x13f/0x1b0
[  117.180435][ T8382]  do_syscall_64+0xfa/0x3b0
[  117.180448][ T8382]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.180460][ T8382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.180472][ T8382]  ? exc_page_fault+0x9f/0xf0
[  117.180485][ T8382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.180496][ T8382] RIP: 0033:0x7fee27f8e9a9
[  117.180509][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.180520][ T8382] RSP: 002b:00007fee28d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  117.180533][ T8382] RAX: ffffffffffffffda RBX: 00007fee281b5fa0 RCX: 00007fee27f8e9a9
[  117.180541][ T8382] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  117.180548][ T8382] RBP: 00007fee28010d69 R08: 0000000000000004 R09: 0000000000000000
[  117.180555][ T8382] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  117.180562][ T8382] R13: 0000000000000000 R14: 00007fee281b5fa0 R15: 00007ffdc7b4ce88
[  117.180581][ T8382]  </TASK>
[  117.180586][ T8382] Mem-Info:
[  117.288370][ T8382] active_anon:5118 inactive_anon:0 isolated_anon:0
[  117.288370][ T8382]  active_file:1221 inactive_file:38232 isolated_file:0
[  117.288370][ T8382]  unevictable:1768 dirty:241 writeback:0
[  117.288370][ T8382]  slab_reclaimable:9536 slab_unreclaimable:72221
[  117.288370][ T8382]  mapped:20525 shmem:2418 pagetables:939
[  117.288370][ T8382]  sec_pagetables:0 bounce:0
[  117.288370][ T8382]  kernel_misc_reclaimable:0
[  117.288370][ T8382]  free:277221 free_pcp:17519 free_cma:0
[  117.310874][ T8382] Node 0 active_anon:10244kB inactive_anon:0kB active_file:2896kB inactive_file:5180kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29388kB dirty:396kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7248kB pagetables:1444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.327622][ T8382] Node 1 active_anon:10228kB inactive_anon:0kB active_file:1988kB inactive_file:147748kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52712kB dirty:568kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4960kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.341560][ T8382] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.357718][ T8382] lowmem_reserve[]: 0 812 812 812 812
[  117.360111][ T8382] Node 0 DMA32 free:346500kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10244kB inactive_anon:0kB active_file:2896kB inactive_file:5180kB unevictable:3536kB writepending:396kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:42144kB local_pcp:24616kB free_cma:0kB
[  117.375906][ T8382] lowmem_reserve[]: 0 0 0 0 0
[  117.378024][ T8382] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.389290][ T8382] lowmem_reserve[]: 0 0 854 854 854
[  117.392044][ T8382] Node 1 Normal free:288348kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10228kB inactive_anon:0kB active_file:1988kB inactive_file:147748kB unevictable:3536kB writepending:568kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:29740kB local_pcp:17604kB free_cma:0kB
[  117.408228][ T8382] lowmem_reserve[]: 0 0 0 0 0
[  117.410325][ T8382] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  117.415719][ T8382] Node 0 DMA32: 203*4kB (ME) 323*8kB (UME) 200*16kB (UM) 26*32kB (ME) 22*64kB (UM) 28*128kB (UME) 5*256kB (UME) 12*512kB (UME) 3*1024kB (UM) 4*2048kB (UM) 77*4096kB (UM) = 346500kB
[  117.421837][ T8382] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  117.431092][ T8382] Node 1 Normal: 321*4kB (UM) 195*8kB (UME) 518*16kB (UME) 181*32kB (UME) 123*64kB (UME) 47*128kB (UM) 18*256kB (UM) 6*512kB (UME) 6*1024kB (UM) 5*2048kB (UM) 57*4096kB (M) = 288348kB
[  117.439141][ T8382] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  117.446202][ T8382] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  117.450231][ T8382] 41871 total pagecache pages
[  117.452490][ T8382] 0 pages in swap cache
[  117.454483][ T8382] Free swap  = 124996kB
[  117.456252][ T8382] Total swap = 124996kB
[  117.457964][ T8382] 786301 pages RAM
[  117.459550][ T8382] 0 pages HighMem/MovableOnly
[  117.461518][ T8382] 241058 pages reserved
[  117.466034][ T8382] 0 pages cma reserved
[  117.468935][ T8389] SET target dimension over the limit!
[  117.854934][ T8423] x_tables: duplicate underflow at hook 2
[  117.922111][ T8438] netlink: 'syz.1.815': attribute type 1 has an invalid length.
[  117.986473][ T8440] batadv1: entered promiscuous mode
[  118.001358][ T8440] batadv1: entered allmulticast mode
[  118.004062][ T8438] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  118.149750][ T8450] netlink: 'syz.0.818': attribute type 1 has an invalid length.
[  118.257337][ T8457] SET target dimension over the limit!
[  118.285797][ T8459] netlink: 'syz.2.822': attribute type 21 has an invalid length.
[  118.534192][ T8477] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  118.783043][ T8494] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  119.263560][ T8537] SET target dimension over the limit!
[  119.321308][ T8541] ip6_vti0 speed is unknown, defaulting to 1000
[  119.378739][ T8549] Cannot find add_set index 0 as target
[  119.467673][ T8556] Cannot find add_set index 0 as target
[  119.568467][ T8561] netlink: 'syz.0.848': attribute type 83 has an invalid length.
[  119.630113][ T8541] lo speed is unknown, defaulting to 1000
[  119.714447][ T8546] ip6_vti0 speed is unknown, defaulting to 1000
[  119.851193][ T8581] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  120.048572][ T8546] lo speed is unknown, defaulting to 1000
[  120.326922][ T8618] netlink: 'syz.1.855': attribute type 1 has an invalid length.
[  120.329480][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.518790][ T8633] x_tables: duplicate underflow at hook 2
[  120.846468][ T8651] Cannot find add_set index 0 as target
[  120.896806][ T8650] ip6_vti0 speed is unknown, defaulting to 1000
[  120.921068][ T8647] lo: entered promiscuous mode
[  120.923070][ T8647] tunl0: entered promiscuous mode
[  120.924897][ T8647] gre0: entered promiscuous mode
[  120.926620][ T8647] gretap0: entered promiscuous mode
[  120.928361][ T8647] erspan0: entered promiscuous mode
[  120.930167][ T8647] ip_vti0: entered promiscuous mode
[  120.932045][ T8647] ip6_vti0: entered promiscuous mode
[  120.936676][ T8647] sit0: entered promiscuous mode
[  120.938576][ T8647] ip6tnl0: entered promiscuous mode
[  120.940361][ T8647] ip6gre0: entered promiscuous mode
[  120.942143][ T8647] ip6gretap0: entered promiscuous mode
[  120.944848][ T8647] bridge0: entered promiscuous mode
[  120.947946][ T8647] bond0: entered promiscuous mode
[  120.949673][ T8647] team0: entered promiscuous mode
[  120.951423][ T8647] dummy0: entered promiscuous mode
[  120.954783][ T8647] nlmon0: entered promiscuous mode
[  120.957162][ T8647] caif0: entered promiscuous mode
[  120.959107][ T8647] batadv0: entered promiscuous mode
[  120.960889][ T8647] veth0: entered promiscuous mode
[  120.963721][ T8647] veth1: entered promiscuous mode
[  120.966266][ T8647] wg0: entered promiscuous mode
[  120.968714][ T8647] wg1: entered promiscuous mode
[  120.970492][ T8647] wg2: entered promiscuous mode
[  120.973313][ T8647] veth0_to_bridge: entered promiscuous mode
[  120.976118][ T8647] bridge_slave_0: entered promiscuous mode
[  120.978212][ T8647] veth1_to_bridge: entered promiscuous mode
[  120.980307][ T8647] bridge_slave_1: entered promiscuous mode
[  120.982800][ T8647] veth0_to_bond: entered promiscuous mode
[  120.984879][ T8647] bond_slave_0: entered promiscuous mode
[  120.986892][ T8647] veth1_to_bond: entered promiscuous mode
[  120.988827][ T8647] bond_slave_1: entered promiscuous mode
[  120.990875][ T8647] veth0_to_team: entered promiscuous mode
[  120.997474][ T8647] team_slave_0: entered promiscuous mode
[  120.999434][ T8647] veth1_to_team: entered promiscuous mode
[  121.012144][ T8647] team_slave_1: entered promiscuous mode
[  121.022653][ T8647] veth0_to_batadv: entered promiscuous mode
[  121.027660][ T8647] batadv_slave_0: entered promiscuous mode
[  121.029962][ T8647] veth1_to_batadv: entered promiscuous mode
[  121.042803][ T8647] batadv_slave_1: entered promiscuous mode
[  121.048223][ T8647] xfrm0: entered promiscuous mode
[  121.050472][ T8647] veth0_to_hsr: entered promiscuous mode
[  121.053477][ T8647] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  121.057312][ T8656] __nla_validate_parse: 13 callbacks suppressed
[  121.057320][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'.
[  121.130598][ T8650] lo speed is unknown, defaulting to 1000
[  121.163680][ T8670] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  121.201704][ T8672] x_tables: duplicate underflow at hook 3
[  121.409638][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.874'.
[  121.653845][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'.
[  121.764123][ T8696] netlink: 'syz.0.879': attribute type 23 has an invalid length.
[  122.029690][ T8727] netlink: 104 bytes leftover after parsing attributes in process `syz.2.886'.
[  122.069070][ T8730] x_tables: duplicate underflow at hook 2
[  122.235185][ T8748] xt_ecn: cannot match TCP bits for non-tcp packets
[  122.419530][ T8764] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  122.477682][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[  122.481311][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'.
[  122.489908][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[  122.494667][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'.
[  122.587321][ T8773] pim6reg1: entered promiscuous mode
[  122.589088][ T8773] pim6reg1: entered allmulticast mode
[  122.711074][ T8785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.897'.
[  122.831664][ T8797] bond0: Unable to set down delay as MII monitoring is disabled
[  122.842233][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'.
[  122.958779][ T8806] delete_channel: no stack
[  123.030595][ T8807] netlink: 'syz.0.900': attribute type 10 has an invalid length.
[  123.040692][ T8807] team0: Device dummy0 failed to register rx_handler
[  123.103553][ T8809] SET target dimension over the limit!
[  123.705961][ T8516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.708885][ T8516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.760866][ T8875] xt_ecn: cannot match TCP bits for non-tcp packets
[  123.760899][ T8876] Cannot find add_set index 0 as target
[  123.878080][ T8888] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  124.084845][ T8910] x_tables: duplicate underflow at hook 3
[  124.336874][ T8927] bridge_slave_0: invalid flags given to default FDB implementation
[  124.426066][ T8931] pim6reg1: entered promiscuous mode
[  124.427747][ T8931] pim6reg1: entered allmulticast mode
[  124.479422][ T8935] ip6t_srh: unknown srh match flags  4000
[  124.616253][ T8948] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  124.741481][ T8956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.746663][ T8956] syzkaller0: entered promiscuous mode
[  124.748431][ T8956] syzkaller0: entered allmulticast mode
[  124.771218][ T8955] tipc: Resetting bearer <eth:syzkaller0>
[  124.796097][ T8955] tipc: Disabling bearer <eth:syzkaller0>
[  124.838436][ T8969] SET target dimension over the limit!
[  124.959590][ T8979] netlink: 'syz.0.943': attribute type 10 has an invalid length.
[  124.962032][ T8979] team0: Device bond0 is up. Set it down before adding it as a team port
[  125.054984][ T8989] x_tables: duplicate underflow at hook 2
[  125.506363][ T9014] team0 (unregistering): Port device team_slave_0 removed
[  125.516480][ T9014] team0 (unregistering): Port device team_slave_1 removed
[  125.527968][ T9014] team0 (unregistering): Port device batadv1 removed
[  125.560609][ T9015] netlink: 'syz.2.954': attribute type 11 has an invalid length.
[  125.661399][ T9018] vlan2: entered promiscuous mode
[  125.673105][ T9018] vlan2: entered allmulticast mode
[  125.675559][ T9018] hsr_slave_1: entered allmulticast mode
[  125.978233][ T9027] netlink: 'syz.1.958': attribute type 1 has an invalid length.
[  126.551856][ T9084] __nla_validate_parse: 5 callbacks suppressed
[  126.551871][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'.
[  126.558158][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'.
[  126.564871][ T9084] netlink: 'syz.0.971': attribute type 7 has an invalid length.
[  126.670692][ T9101] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  126.720300][ T9108] pim6reg1: entered promiscuous mode
[  126.721980][ T9108] pim6reg1: entered allmulticast mode
[  126.725118][ T9102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.974'.
[  126.837843][ T9108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.977'.
[  126.994690][ T9124] netlink: 52 bytes leftover after parsing attributes in process `syz.1.981'.
[  127.074740][ T9126] Cannot find add_set index 0 as target
[  127.129599][ T9128] netlink: 56 bytes leftover after parsing attributes in process `syz.0.983'.
[  127.137633][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'.
[  127.205163][ T9130] Cannot find add_set index 0 as target
[  127.362926][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'.
[  127.365949][ T9132] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  127.714146][ T9137] netlink: 'syz.0.987': attribute type 10 has an invalid length.
[  127.716871][ T9137] team0: Device bond0 is up. Set it down before adding it as a team port
[  127.830032][ T9145] x_tables: duplicate underflow at hook 2
[  127.884711][ T9149] netlink: 244 bytes leftover after parsing attributes in process `syz.0.992'.
[  127.923867][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'.
[  127.927706][ T9149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.124723][ T9156] ip6gretap1: entered promiscuous mode
[  128.246941][ T9162] x_tables: duplicate underflow at hook 1
[  128.455442][ T9186] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  128.489686][ T9191] x_tables: duplicate underflow at hook 3
[  128.524109][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e7ea400: rx timeout, send abort
[  128.526885][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811250bc00: rx timeout, send abort
[  128.529577][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810e7ea400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  128.534198][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811250bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  128.871547][   T33] audit: type=1800 audit(1753695308.325:2): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1022" name=35FFFF dev="tmpfs" ino=1659 res=0 errno=0
[  128.924916][ T9239] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  129.044675][ T9247] ip6t_srh: unknown srh match flags  4000
[  129.140664][ T9249] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  129.144593][ T9249] bond1: (slave vcan1): Error -95 calling set_mac_address
[  129.151713][ T9252] pim6reg1: entered promiscuous mode
[  129.156109][ T9252] pim6reg1: entered allmulticast mode
[  129.497036][ T9271] netlink: 'syz.0.1034': attribute type 10 has an invalid length.
[  129.500258][ T9270] netlink: 'syz.0.1034': attribute type 10 has an invalid length.
[  129.510786][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.516651][ T9271] team0: Port device bond0 added
[  129.654552][ T9285] netlink: 'syz.1.1039': attribute type 10 has an invalid length.
[  129.669167][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.671846][ T9285] team0: Device bond0 failed to register rx_handler
[  130.148540][ T9313] x_tables: duplicate underflow at hook 1
[  130.270214][ T9316] tipc: Started in network mode
[  130.272685][ T9316] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  130.278163][ T9316] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  130.440568][ T9341] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  130.719320][ T9370] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  130.894916][ T9379] netlink: 'syz.2.1066': attribute type 8 has an invalid length.
[  130.898052][ T9380] netlink: 'syz.2.1066': attribute type 8 has an invalid length.
[  130.985478][ T9384] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  132.011840][ T9398] __nla_validate_parse: 27 callbacks suppressed
[  132.011854][ T9398] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1072'.
[  132.053487][ T9400] xt_ecn: cannot match TCP bits for non-tcp packets
[  132.081094][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'.
[  132.230649][ T9410] netlink: 'syz.1.1077': attribute type 10 has an invalid length.
[  132.234628][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.236952][ T9410] team0: Device bond0 failed to register rx_handler
[  132.340812][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e5a9400: rx timeout, send abort
[  132.344650][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811250ac00: rx timeout, send abort
[  132.348294][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e5a9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  132.354126][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811250ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  132.385166][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'.
[  132.388312][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'.
[  132.392118][ T9424] netlink: 'syz.2.1080': attribute type 4 has an invalid length.
[  132.404210][ T9424] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1080'.
[  132.465693][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.484616][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'.
[  132.487317][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'.
[  132.584393][ T9448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1089'.
[  132.690086][ T9458] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  132.737757][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'.
[  132.770640][ T9466] x_tables: duplicate underflow at hook 3
[  132.771228][ T9467] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1095'.
[  133.002245][ T9486] netlink: 'syz.1.1102': attribute type 1 has an invalid length.
[  133.601388][ T9530] xt_ecn: cannot match TCP bits for non-tcp packets
[  133.630909][ T9536] x_tables: duplicate underflow at hook 2
[  133.702096][ T9540] netlink: 'syz.2.1114': attribute type 10 has an invalid length.
[  133.713214][ T9540] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  133.990286][ T9557] ip6_vti0 speed is unknown, defaulting to 1000
[  134.133035][ T9557] lo speed is unknown, defaulting to 1000
[  134.325462][ T9593] netlink: 'syz.0.1128': attribute type 1 has an invalid length.
[  134.580425][ T9601] pim6reg: entered allmulticast mode
[  134.584259][ T9601] pim6reg: left allmulticast mode
[  134.771642][ T9604] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  134.821940][ T9607] netlink: 'syz.2.1132': attribute type 3 has an invalid length.
[  135.282077][ T9628] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  135.317651][ T9632] SET target dimension over the limit!
[  135.326878][ T9630] pim6reg1: entered promiscuous mode
[  135.328530][ T9630] pim6reg1: entered allmulticast mode
[  135.359195][ T9636] SET target dimension over the limit!
[  135.377194][ T9635] tipc: Enabled bearer <ib:batadv_slave_1>, priority 10
[  135.780888][ T9665] netlink: 'syz.0.1152': attribute type 10 has an invalid length.
[  135.904944][ T9679] netlink: 'syz.2.1155': attribute type 7 has an invalid length.
[  136.316175][ T9722] macvlan3: entered allmulticast mode
[  136.319057][ T9722] hsr0: entered allmulticast mode
[  136.322032][ T9722] hsr_slave_0: entered allmulticast mode
[  136.328930][ T9722] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  136.336229][ T9722] hsr0: left allmulticast mode
[  136.340282][ T9722] hsr_slave_0: left allmulticast mode
[  136.415704][ T9730] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  136.514079][ T5879] tipc: Node number set to 3543503839
[  137.341043][ T9757] __nla_validate_parse: 20 callbacks suppressed
[  137.341064][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'.
[  137.429041][ T9760] x_tables: duplicate underflow at hook 3
[  137.650512][ T9772] x_tables: duplicate underflow at hook 1
[  138.100806][ T9797] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  138.545711][ T9809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1190'.
[  138.881978][ T9829] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  138.894930][ T9830] netlink: 'syz.0.1197': attribute type 10 has an invalid length.
[  139.019891][ T9839] rdma_rxe: rxe_newlink: failed to add lo
[  139.051303][ T9845] pim6reg1: entered promiscuous mode
[  139.059809][ T9845] pim6reg1: entered allmulticast mode
[  139.225632][ T9850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1199'.
[  139.474939][ T9864] xt_ecn: cannot match TCP bits for non-tcp packets
[  139.851841][ T9877] netlink: 'syz.2.1210': attribute type 11 has an invalid length.
[  139.855049][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[  139.858834][ T9877] netlink: 'syz.2.1210': attribute type 11 has an invalid length.
[  139.861755][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[  139.940001][   T33] audit: type=1800 audit(1753695319.395:3): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1213" name="memory.events" dev="tmpfs" ino=2016 res=0 errno=0
[  139.971117][ T9890] netlink: 'syz.0.1213': attribute type 2 has an invalid length.
[  139.976199][ T9890] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1213'.
[  139.987352][ T9896] x_tables: duplicate underflow at hook 3
[  140.051328][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'.
[  140.070598][ T9901] netlink: 'syz.1.1218': attribute type 10 has an invalid length.
[  140.108406][ T9901] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  140.113207][ T9901] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  140.125653][ T9901] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  141.035000][ T9920] ipvlan3: entered promiscuous mode
[  141.109848][ T9925] syzkaller0: entered promiscuous mode
[  141.111741][ T9925] syzkaller0: entered allmulticast mode
[  141.116891][ T9924] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1225'.
[  141.120515][ T9924] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1225'.
[  141.614135][ T9954] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1232'.
[  142.215218][ T9956] SET target dimension over the limit!
[  142.514221][ T9963] __nla_validate_parse: 1 callbacks suppressed
[  142.514239][ T9963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1234'.
[  142.521304][ T9963] netem: unknown loss type 13
[  142.526985][ T9963] netem: change failed
[  142.537300][ T9958] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1234'.
[  142.650229][ T9968] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  142.727219][ T9974] vxcan0: entered promiscuous mode
[  142.951402][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'.
[  142.955183][ T9991] netlink: 'syz.1.1244': attribute type 10 has an invalid length.
[  142.961868][ T9986] cgroup: fork rejected by pids controller in /syz2
[  143.100138][T10101] wlan1: mtu greater than device maximum
[  143.267489][T10103] bond0: (slave wlan1): Releasing backup interface
[  143.270248][T10103] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  143.559332][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.562648][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.565474][ T5217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.569393][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.573610][ T5217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.597568][T10105] ip6_vti0 speed is unknown, defaulting to 1000
[  143.688596][T10105] lo speed is unknown, defaulting to 1000
[  143.849599][T10108] ip6_vti0 speed is unknown, defaulting to 1000
[  143.863150][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'.
[  143.900212][T10110] bond5: entered promiscuous mode
[  143.903010][T10110] 8021q: adding VLAN 0 to HW filter on device bond5
[  144.129504][T10110] bond5 (unregistering): Released all slaves
[  144.159717][T10108] lo speed is unknown, defaulting to 1000
[  144.368819][T10124] raw_sendmsg: syz.1.1253 forgot to set AF_INET. Fix it!
[  144.397252][T10128] x_tables: duplicate underflow at hook 1
[  144.426410][T10105] chnl_net:caif_netlink_parms(): no params data found
[  144.445833][T10130] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  144.655648][T10105] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.657937][T10105] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.660159][T10105] bridge_slave_0: entered allmulticast mode
[  144.692044][T10105] bridge_slave_0: entered promiscuous mode
[  144.717677][T10105] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.720313][T10105] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.723066][T10105] bridge_slave_1: entered allmulticast mode
[  144.727467][T10105] bridge_slave_1: entered promiscuous mode
[  144.825920][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.830614][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.878325][T10105] team0: Port device team_slave_0 added
[  144.882174][T10105] team0: Port device team_slave_1 added
[  144.901319][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.903691][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.911765][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.917102][T10154] tipc: Cannot configure node identity twice
[  144.919888][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.922118][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.930366][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.969926][T10105] hsr_slave_0: entered promiscuous mode
[  144.972930][T10105] hsr_slave_1: entered promiscuous mode
[  144.974929][T10156] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1264'.
[  144.978761][T10105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.981426][T10105] Cannot create hsr debugfs directory
[  145.083779][T10105] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.088011][T10105] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.120494][T10160] netlink: 'syz.1.1265': attribute type 3 has an invalid length.
[  145.129686][T10160] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1265'.
[  145.147085][T10105] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.150460][T10105] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.198933][T10105] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.202018][T10105] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.258568][T10162] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  145.281014][T10105] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.286130][T10105] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.346842][T10166] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1268'.
[  145.447813][T10105] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  145.455729][T10105] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  145.466192][T10105] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  145.474078][T10105] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  145.570996][T10105] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.585894][ T5217] Bluetooth: hci2: command tx timeout
[  145.599064][T10180] pim6reg1: entered promiscuous mode
[  145.601003][T10180] pim6reg1: entered allmulticast mode
[  145.647065][T10105] 8021q: adding VLAN 0 to HW filter on device team0
[  145.672846][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.675085][ T8517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.689699][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.692002][ T8517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.715887][T10180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1271'.
[  145.780376][T10189] Cannot find add_set index 1010 as target
[  145.878395][T10196] netlink: 'syz.0.1277': attribute type 10 has an invalid length.
[  145.887212][T10198] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1278'.
[  145.915212][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.930958][T10200] SET target dimension over the limit!
[  145.972027][T10105] veth0_vlan: entered promiscuous mode
[  145.987620][T10105] veth1_vlan: entered promiscuous mode
[  146.024268][T10105] veth0_macvtap: entered promiscuous mode
[  146.026417][T10208] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1281'.
[  146.038018][T10105] veth1_macvtap: entered promiscuous mode
[  146.060409][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.080320][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.098603][T10105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.101336][T10105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.106860][T10105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.109594][T10105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.144193][T10215] pim6reg1: entered promiscuous mode
[  146.146614][T10215] pim6reg1: entered allmulticast mode
[  146.251736][ T8516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.263686][ T8516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.295266][ T8516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.298599][ T8516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.319489][T10219] bridge0: port 3(syz_tun) entered disabled state
[  146.327055][T10219] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.329576][T10219] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.366101][T10219] wg1: left promiscuous mode
[  146.367707][T10219] wg1: left allmulticast mode
[  146.386317][T10219] veth0_to_team: left promiscuous mode
[  146.388300][T10219] veth0_to_team: left allmulticast mode
[  146.399062][T10219] batadv_slave_0: left promiscuous mode
[  146.436020][T10219] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.440061][T10219] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.444790][T10219] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.447755][T10219] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.461343][T10219] vlan0: left promiscuous mode
[  146.464455][T10219] bridge0: left promiscuous mode
[  146.466245][T10219] vlan0: left allmulticast mode
[  146.468070][T10219] bridge0: left allmulticast mode
[  146.470361][T10219] gretap1: left promiscuous mode
[  146.474013][T10219] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  146.476762][T10219] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  146.479454][T10219] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  146.482103][T10219] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  146.488411][T10219] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.491935][T10219] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.495066][T10219] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.498374][T10219] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.517361][T10219] ipvlan2: left allmulticast mode
[  146.519320][T10219] bond4: left allmulticast mode
[  146.521025][T10219] gretap3: left allmulticast mode
[  146.524304][T10219] ip6gretap1: left promiscuous mode
[  146.534528][T10225] netlink: 'syz.1.1286': attribute type 29 has an invalid length.
[  146.537838][T10228] netlink: 'syz.1.1286': attribute type 29 has an invalid length.
[  146.585829][T10230] x_tables: duplicate underflow at hook 2
[  146.644561][T10239] xt_ecn: cannot match TCP bits for non-tcp packets
[  146.680749][T10238] ip6_vti0 speed is unknown, defaulting to 1000
[  146.879465][T10238] lo speed is unknown, defaulting to 1000
[  147.523264][T10293] netlink: 'syz.2.1306': attribute type 160 has an invalid length.
[  147.661503][T10301] __nla_validate_parse: 4 callbacks suppressed
[  147.661519][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'.
[  147.669138][ T5833] Bluetooth: hci2: command tx timeout
[  147.684941][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'.
[  147.697676][T10303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1310'.
[  147.750907][T10307] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1312'.
[  147.761278][T10309] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1313'.
[  147.770427][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'.
[  147.824207][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'.
[  147.828402][T10309] IPVS: Error joining to the multicast group
[  147.838357][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1314'.
[  147.892131][T10316] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  148.030771][T10324] x_tables: duplicate underflow at hook 1
[  148.086898][T10329] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1320'.
[  148.098286][T10329] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1320'.
[  148.526909][T10344] delete_channel: no stack
[  148.590922][T10346] netlink: 'syz.1.1326': attribute type 10 has an invalid length.
[  148.594971][T10346] dummy0: left promiscuous mode
[  148.606950][T10346] dummy0: entered promiscuous mode
[  148.610105][T10346] team0: Port device dummy0 added
[  148.955888][T10348] netlink: 'syz.0.1327': attribute type 83 has an invalid length.
[  149.350441][T10358] sctp: [Deprecated]: syz.2.1330 (pid 10358) Use of int in maxseg socket option.
[  149.350441][T10358] Use struct sctp_assoc_value instead
[  149.515024][T10369] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  149.744804][ T5833] Bluetooth: hci2: command 0x040f tx timeout
[  149.807402][T10384] netlink: 'syz.1.1341': attribute type 10 has an invalid length.
[  149.849939][T10387] Cannot find add_set index 1536 as target
[  149.966464][T10393] netlink: 'syz.1.1344': attribute type 10 has an invalid length.
[  149.969675][T10393] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.971921][T10393] team0: Device bond0 failed to register rx_handler
[  150.124750][T10403] netlink: 'syz.1.1346': attribute type 1 has an invalid length.
[  150.481678][T10407] Cannot find add_set index 0 as target
[  150.978216][T10421] x_tables: duplicate underflow at hook 2
[  151.021140][T10424] xt_ecn: cannot match TCP bits for non-tcp packets
[  151.047709][T10425] bond0: entered promiscuous mode
[  151.049929][T10425] bond_slave_0: entered promiscuous mode
[  151.058879][T10425] bond_slave_1: entered promiscuous mode
[  151.074556][T10425] bond0: left promiscuous mode
[  151.076538][T10425] bond_slave_0: left promiscuous mode
[  151.078866][T10425] bond_slave_1: left promiscuous mode
[  151.096020][T10428] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  151.439879][T10438] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  151.516706][T10439] veth3: entered promiscuous mode
[  151.686187][T10445] tipc: Started in network mode
[  151.688163][T10445] tipc: Node identity , cluster identity 4711
[  151.690554][T10445] tipc: Failed to obtain node identity
[  151.696096][T10445] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.822651][ T5217] Bluetooth: hci2: command 0x040f tx timeout
[  151.898863][T10451] delete_channel: no stack
[  151.988163][ T8516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.990555][ T8516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.010162][T10456] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  152.668627][T10470] pimreg: entered allmulticast mode
[  152.698184][T10472] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  152.721647][T10474] ieee802154 phy0 wpan0: encryption failed: -22
[  152.736963][T10476] Cannot find add_set index 0 as target
[  152.770949][T10480] netlink: 'syz.2.1375': attribute type 10 has an invalid length.
[  152.773693][T10480] team0: Device bond0 is up. Set it down before adding it as a team port
[  152.803080][T10482] __nla_validate_parse: 49 callbacks suppressed
[  152.803091][T10482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1376'.
[  152.815530][T10484] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1377'.
[  153.016560][T10502] net veth1_virt_wifi : renamed from virt_wifi0
[  153.038595][T10507] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1385'.
[  153.057206][T10510] netlink: 'syz.2.1387': attribute type 1 has an invalid length.
[  153.060124][T10510] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1387'.
[  153.148631][T10516] netlink: 'syz.1.1388': attribute type 2 has an invalid length.
[  153.171135][T10522] x_tables: duplicate underflow at hook 2
[  153.221768][T10526] xt_ecn: cannot match TCP bits for non-tcp packets
[  153.231430][T10524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.237729][T10524] syzkaller0: entered promiscuous mode
[  153.239454][T10524] syzkaller0: entered allmulticast mode
[  153.279918][T10524] tipc: Resetting bearer <eth:syzkaller0>
[  153.282142][T10524] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1392'.
[  153.293691][T10523] tipc: Resetting bearer <eth:syzkaller0>
[  153.316861][T10523] tipc: Disabling bearer <eth:syzkaller0>
[  153.341833][T10533] netlink: 'syz.2.1396': attribute type 1 has an invalid length.
[  153.345544][T10533] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1396'.
[  153.355999][T10533] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  153.516768][T10550] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  153.542094][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'.
[  153.702436][T10563] veth4: entered allmulticast mode
[  153.875132][T10573] netlink: 'syz.0.1413': attribute type 13 has an invalid length.
[  153.878280][T10573] netlink: 'syz.0.1413': attribute type 17 has an invalid length.
[  153.908996][T10573] bridge0: port 3(syz_tun) entered blocking state
[  153.911744][T10573] bridge0: port 3(syz_tun) entered forwarding state
[  153.912462][ T5217] Bluetooth: hci2: command 0x040f tx timeout
[  153.923533][T10573] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.928087][T10573] 8021q: adding VLAN 0 to HW filter on device team0
[  153.936028][T10573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.953482][ T7628] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  153.957374][ T7628] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  153.962053][ T7628] bond0: now running without any active interface!
[  154.065715][T10581] netlink: 'syz.0.1415': attribute type 1 has an invalid length.
[  154.068196][T10581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.218420][T10588] delete_channel: no stack
[  154.513884][T10591] ip6_vti0 speed is unknown, defaulting to 1000
[  154.536575][T10595] x_tables: duplicate underflow at hook 1
[  154.592011][T10599] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1419'.
[  154.598883][T10599] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1419'.
[  154.669383][T10603] netlink: 'syz.2.1420': attribute type 10 has an invalid length.
[  154.678668][T10603] team0: Device ipvlan1 failed to register rx_handler
[  154.696826][T10591] lo speed is unknown, defaulting to 1000
[  155.171783][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1426'.
[  155.374566][T10633] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  155.586747][T10638] Cannot find add_set index 0 as target
[  155.796756][T10642] delete_channel: no stack
[  156.164753][T10654] netlink: 'syz.1.1434': attribute type 1 has an invalid length.
[  156.168032][T10654] NCSI netlink: No device for ifindex 0
[  156.892985][T10685] tipc: Enabling of bearer <et:g> rejected, media not registered
[  156.938317][T10687] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  157.231876][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880319abc00: rx timeout, send abort
[  157.235358][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880314dac00: rx timeout, send abort
[  157.238834][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880319abc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  157.244464][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880314dac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  157.365064][T10691] SET target dimension over the limit!
[  157.493288][T10702] x_tables: duplicate underflow at hook 1
[  157.595119][T10711] ip6t_srh: unknown srh match flags  4000
[  157.720374][T10723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.819491][T10730] Cannot find add_set index 61955 as target
[  157.826502][T10728] Cannot find add_set index 0 as target
[  157.910603][T10740] __nla_validate_parse: 6 callbacks suppressed
[  157.910621][T10740] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1459'.
[  158.057926][T10754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'.
[  158.060962][T10756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'.
[  158.129178][T10765] netlink: 'syz.2.1466': attribute type 10 has an invalid length.
[  158.131635][T10765] team0: Device bond0 is up. Set it down before adding it as a team port
[  158.170662][T10754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  158.176013][T10756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  158.258418][T10776] dummy0: left promiscuous mode
[  158.274514][T10776] team0: Port device dummy0 removed
[  158.277116][T10774] netlink: 'syz.2.1468': attribute type 1 has an invalid length.
[  158.314276][T10776] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  158.366474][T10785] xt_ecn: cannot match TCP bits for non-tcp packets
[  158.465132][T10794] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1476'.
[  158.753603][T10824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1482'.
[  158.756566][T10824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1482'.
[  158.766400][T10824] gretap0: entered promiscuous mode
[  158.768932][T10824] batadv_slave_1: entered promiscuous mode
[  158.794313][T10827] x_tables: duplicate underflow at hook 2
[  158.849760][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'.
[  158.983376][T10847] delete_channel: no stack
[  159.008835][T10849] netlink: 'syz.2.1487': attribute type 1 has an invalid length.
[  159.011901][T10849] netlink: 'syz.2.1487': attribute type 2 has an invalid length.
[  159.017554][T10849] netlink: 'syz.2.1487': attribute type 8 has an invalid length.
[  159.020752][T10849] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1487'.
[  159.022585][ T5833] Bluetooth: hci2: command 0x040f tx timeout
[  159.086055][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'.
[  159.089844][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1489'.
[  159.129790][T10858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.523084][T10885] netlink: 'syz.1.1493': attribute type 1 has an invalid length.
[  159.548599][T10885] 8021q: adding VLAN 0 to HW filter on device bond5
[  159.561136][T10885] ipvlan2: entered allmulticast mode
[  159.566682][T10885] bond5: entered allmulticast mode
[  159.589285][T10885] bond5: (slave gretap1): making interface the new active one
[  159.593838][T10885] gretap1: entered allmulticast mode
[  159.597452][T10885] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  159.868531][T10902] Cannot find del_set index 634 as target
[  160.043528][T10913] netlink: 'syz.0.1504': attribute type 9 has an invalid length.
[  160.047145][T10913] netlink: 'syz.0.1504': attribute type 6 has an invalid length.
[  160.058401][T10915] delete_channel: no stack
[  160.150510][ T5295] IPVS: starting estimator thread 0...
[  160.242604][T10918] IPVS: using max 42 ests per chain, 100800 per kthread
[  160.286857][T10921] netlink: 'syz.2.1506': attribute type 10 has an invalid length.
[  160.289688][T10921] team0: Device bond0 is up. Set it down before adding it as a team port
[  160.932453][T10935] xt_ecn: cannot match TCP bits for non-tcp packets
[  161.070271][T10941] sctp: [Deprecated]: syz.1.1514 (pid 10941) Use of int in maxseg socket option.
[  161.070271][T10941] Use struct sctp_assoc_value instead
[  161.125023][T10943] tap0: tun_chr_ioctl cmd 35108
[  161.287913][T10947] IPVS: Unknown mcast interface: netdevsim0
[  161.484394][T10960] Cannot find add_set index 0 as target
[  161.597780][T10962] veth1_macvtap: default FDB implementation only supports local addresses
[  161.997143][T10977] ip6_vti0 speed is unknown, defaulting to 1000
[  162.096437][T10977] lo speed is unknown, defaulting to 1000
[  162.459876][T10990] ip6t_srh: unknown srh match flags  4000
[  162.506411][T10992] netlink: 'syz.2.1532': attribute type 2 has an invalid length.
[  162.511039][T10993] netlink: 'syz.2.1532': attribute type 2 has an invalid length.
[  162.800682][T11003] netlink: 'syz.1.1535': attribute type 16 has an invalid length.
[  162.896659][T11009] netlink: 'syz.1.1539': attribute type 1 has an invalid length.
[  162.899267][T11009] netlink: 'syz.1.1539': attribute type 1 has an invalid length.
[  162.952214][T11014] x_tables: duplicate underflow at hook 2
[  163.062639][T11017] SET target dimension over the limit!
[  163.101379][T11020] netlink: 'syz.1.1543': attribute type 1 has an invalid length.
[  163.140944][T11023] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  163.146999][T11020] 8021q: adding VLAN 0 to HW filter on device bond6
[  163.164543][T11024] bond6: (slave ip6gretap2): making interface the new active one
[  163.167797][T11024] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link
[  163.206310][T11020] veth5: entered promiscuous mode
[  163.209773][T11020] bond6: (slave veth5): Enslaving as an active interface with a down link
[  163.366843][T11020] erspan0: left promiscuous mode
[  163.368652][T11020] erspan0: entered allmulticast mode
[  163.373217][T11020] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  163.418253][T11031] Cannot find del_set index 1536 as target
[  163.459655][T11036] netlink: 'syz.2.1548': attribute type 1 has an invalid length.
[  163.462534][T11035] netlink: 'syz.2.1548': attribute type 1 has an invalid length.
[  163.492669][T11040] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  163.515158][T11038] netlink: 'syz.1.1549': attribute type 1 has an invalid length.
[  163.550564][T11045] x_tables: duplicate underflow at hook 1
[  163.556220][T11038] bond7: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  163.561501][ T5840] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  163.563297][T11038] 8021q: adding VLAN 0 to HW filter on device bond7
[  163.766638][T11054] __nla_validate_parse: 11 callbacks suppressed
[  163.766652][T11054] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1555'.
[  163.802166][T11038] bond7 (unregistering): (slave ip6gretap3): Removing an active aggregator
[  163.807877][T11038] bond7 (unregistering): (slave ip6gretap3): Releasing backup interface
[  163.831409][T11038] bond7 (unregistering): Released all slaves
[  163.876357][T11062] team0: Device bond0 is up. Set it down before adding it as a team port
[  164.017630][ T5840] 
[  164.018796][ T5840] ============================================
[  164.021378][ T5840] WARNING: possible recursive locking detected
[  164.023975][ T5840] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[  164.028108][ T5840] --------------------------------------------
[  164.030677][ T5840] kworker/u8:2/5840 is trying to acquire lock:
[  164.033253][ T5840] ffff888109ec4158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  164.037332][ T5840] 
[  164.037332][ T5840] but task is already holding lock:
[  164.040408][ T5840] ffff8881215bf158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  164.044501][ T5840] 
[  164.044501][ T5840] other info that might help us debug this:
[  164.047712][ T5840]  Possible unsafe locking scenario:
[  164.047712][ T5840] 
[  164.050705][ T5840]        CPU0
[  164.052110][ T5840]        ----
[  164.053519][ T5840]   lock(&qdisc_xmit_lock_key#4);
[  164.055538][ T5840]   lock(&qdisc_xmit_lock_key#4);
[  164.057525][ T5840] 
[  164.057525][ T5840]  *** DEADLOCK ***
[  164.057525][ T5840] 
[  164.060811][ T5840]  May be due to missing lock nesting notation
[  164.060811][ T5840] 
[  164.064298][ T5840] 10 locks held by kworker/u8:2/5840:
[  164.066540][ T5840]  #0: ffff888124956948 ((wq_completion)bond5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  164.070991][ T5840]  #1: ffffc90003c5fbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  164.076248][ T5840]  #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800
[  164.080147][ T5840]  #3: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  164.084206][ T5840]  #4: ffff8880316f8258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  164.089357][ T5840]  #5: ffff8881215bf158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  164.092617][ T5840]  #6: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  164.095741][ T5840]  #7: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  164.098514][ T5840]  #8: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  164.101592][ T5840]  #9: ffff888124826258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  164.105547][ T5840] 
[  164.105547][ T5840] stack backtrace:
[  164.107408][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: kworker/u8:2 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  164.107420][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.107428][ T5840] Workqueue: bond5 bond_alb_monitor
[  164.107441][ T5840] Call Trace:
[  164.107445][ T5840]  <TASK>
[  164.107450][ T5840]  dump_stack_lvl+0x189/0x250
[  164.107462][ T5840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.107476][ T5840]  ? __pfx__printk+0x10/0x10
[  164.107486][ T5840]  ? __kasan_check_byte+0x12/0x40
[  164.107499][ T5840]  ? print_lock_name+0xde/0x100
[  164.107508][ T5840]  print_deadlock_bug+0x28b/0x2a0
[  164.107519][ T5840]  validate_chain+0x1a3f/0x2140
[  164.107527][ T5840]  ? validate_xmit_xfrm+0xbf/0x1130
[  164.107537][ T5840]  ? unwind_next_frame+0xa5/0x2390
[  164.107547][ T5840]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  164.107556][ T5840]  __lock_acquire+0xab9/0xd20
[  164.107565][ T5840]  ? sch_direct_xmit+0x153/0x4b0
[  164.107575][ T5840]  lock_acquire+0x120/0x360
[  164.107582][ T5840]  ? sch_direct_xmit+0x153/0x4b0
[  164.107592][ T5840]  _raw_spin_lock+0x2e/0x40
[  164.107605][ T5840]  ? sch_direct_xmit+0x153/0x4b0
[  164.107613][ T5840]  sch_direct_xmit+0x153/0x4b0
[  164.107622][ T5840]  ? __pfx_sch_direct_xmit+0x10/0x10
[  164.107632][ T5840]  __dev_queue_xmit+0x17b6/0x3a70
[  164.107660][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.107670][ T5840]  ? __dev_queue_xmit+0x27e/0x3a70
[  164.107678][ T5840]  ? arpt_do_table+0x1dc4/0x1fd0
[  164.107691][ T5840]  ? __pfx___dev_queue_xmit+0x10/0x10
[  164.107700][ T5840]  ? arpt_do_table+0x238/0x1fd0
[  164.107710][ T5840]  ? __pfx_arpt_do_table+0x10/0x10
[  164.107723][ T5840]  ? NF_HOOK+0x9e/0x3a0
[  164.107732][ T5840]  NF_HOOK+0x310/0x3a0
[  164.107740][ T5840]  ? __pfx_arp_xmit_finish+0x10/0x10
[  164.107747][ T5840]  ? NF_HOOK+0x9e/0x3a0
[  164.107753][ T5840]  ? __pfx_NF_HOOK+0x10/0x10
[  164.107761][ T5840]  ? __pfx_arp_xmit_finish+0x10/0x10
[  164.107770][ T5840]  arp_xmit+0x16c/0x270
[  164.107777][ T5840]  ? arp_xmit+0x23/0x270
[  164.107784][ T5840]  arp_solicit+0xc1d/0xe60
[  164.107793][ T5840]  ? arp_solicit+0x11a/0xe60
[  164.107801][ T5840]  ? __pfx_arp_solicit+0x10/0x10
[  164.107810][ T5840]  ? __neigh_event_send+0xf08/0x1560
[  164.107823][ T5840]  ? __pfx_arp_solicit+0x10/0x10
[  164.107831][ T5840]  __neigh_event_send+0xf70/0x1560
[  164.107842][ T5840]  neigh_resolve_output+0x198/0x750
[  164.107852][ T5840]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  164.107862][ T5840]  ip_finish_output2+0xd40/0x1160
[  164.107870][ T5840]  ? ip_skb_dst_mtu+0x147/0xc50
[  164.107878][ T5840]  ? ip_finish_output2+0x452/0x1160
[  164.107886][ T5840]  ? __pfx_ip_finish_output2+0x10/0x10
[  164.107894][ T5840]  ? ip_skb_dst_mtu+0x147/0xc50
[  164.107900][ T5840]  ? ip_skb_dst_mtu+0x147/0xc50
[  164.107907][ T5840]  ? ip_skb_dst_mtu+0x970/0xc50
[  164.107914][ T5840]  ? ip_finish_output+0x33a/0x3f0
[  164.107922][ T5840]  iptunnel_xmit+0x571/0xa00
[  164.107935][ T5840]  ip_tunnel_xmit+0x1c3c/0x2380
[  164.107947][ T5840]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  164.107954][ T5840]  ? gre_build_header+0x3fd/0xa40
[  164.107963][ T5840]  ? __pfx_gre_build_header+0x10/0x10
[  164.107969][ T5840]  ? iptunnel_handle_offloads+0x2fd/0x630
[  164.107979][ T5840]  gre_tap_xmit+0x590/0x7a0
[  164.107992][ T5840]  ? __pfx_gre_tap_xmit+0x10/0x10
[  164.108001][ T5840]  ? __lock_acquire+0xab9/0xd20
[  164.108010][ T5840]  dev_hard_start_xmit+0x2d7/0x830
[  164.108020][ T5840]  sch_direct_xmit+0x241/0x4b0
[  164.108029][ T5840]  ? __pfx_sch_direct_xmit+0x10/0x10
[  164.108040][ T5840]  __dev_queue_xmit+0x17b6/0x3a70
[  164.108048][ T5840]  ? __dev_queue_xmit+0x27e/0x3a70
[  164.108058][ T5840]  ? __pfx___dev_queue_xmit+0x10/0x10
[  164.108065][ T5840]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  164.108076][ T5840]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  164.108087][ T5840]  ? __build_skb_around+0x257/0x3e0
[  164.108100][ T5840]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  164.108110][ T5840]  ? alb_send_lp_vid+0x139/0x510
[  164.108119][ T5840]  alb_send_lp_vid+0x324/0x510
[  164.108128][ T5840]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  164.108137][ T5840]  ? __lock_acquire+0xab9/0xd20
[  164.108145][ T5840]  alb_send_learning_packets+0x10d/0x2c0
[  164.108154][ T5840]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  164.108164][ T5840]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  164.108176][ T5840]  bond_alb_monitor+0x3e4/0x1800
[  164.108184][ T5840]  ? bond_alb_monitor+0xf1/0x1800
[  164.108191][ T5840]  ? process_scheduled_works+0x9ef/0x17b0
[  164.108201][ T5840]  ? __pfx_bond_alb_monitor+0x10/0x10
[  164.108208][ T5840]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.108219][ T5840]  ? process_scheduled_works+0x9ef/0x17b0
[  164.108226][ T5840]  ? process_scheduled_works+0x9ef/0x17b0
[  164.108234][ T5840]  process_scheduled_works+0xae1/0x17b0
[  164.108247][ T5840]  ? __pfx_process_scheduled_works+0x10/0x10
[  164.108261][ T5840]  worker_thread+0x8a0/0xda0
[  164.108274][ T5840]  kthread+0x711/0x8a0
[  164.108285][ T5840]  ? __pfx_worker_thread+0x10/0x10
[  164.108292][ T5840]  ? __pfx_kthread+0x10/0x10
[  164.108302][ T5840]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.108312][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.108319][ T5840]  ? __pfx_kthread+0x10/0x10
[  164.108328][ T5840]  ret_from_fork+0x3fc/0x770
[  164.108338][ T5840]  ? __pfx_ret_from_fork+0x10/0x10
[  164.108346][ T5840]  ? __switch_to_asm+0x39/0x70
[  164.108355][ T5840]  ? __switch_to_asm+0x33/0x70
[  164.108364][ T5840]  ? __pfx_kthread+0x10/0x10
[  164.108373][ T5840]  ret_from_fork_asm+0x1a/0x30
[  164.108385][ T5840]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  164.405153][ T5827] bridge0: port 3(syz_tun) entered disabled state
[  164.426941][ T5827] syz_tun (unregistering): left allmulticast mode
[  164.428974][ T5827] syz_tun (unregistering): left promiscuous mode
[  164.430965][ T5827] bridge0: port 3(syz_tun) entered disabled state
[  164.796356][   T12] bridge_slave_1: left allmulticast mode
[  164.798709][   T12] bridge_slave_1: left promiscuous mode
[  164.801141][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.814298][   T12] bridge_slave_0: left allmulticast mode
[  164.816788][   T12] bridge_slave_0: left promiscuous mode
[  164.819357][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.929759][   T12] bond1 (unregistering): (slave gretap1): Releasing active interface
[  164.947647][   T12] bond2 (unregistering): (slave gretap2): Releasing active interface
[  164.965022][   T12] bond4 (unregistering): (slave gretap3): Releasing active interface
[  165.197395][   T12] team0: Port device bond0 removed
[  165.200888][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.205345][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.209214][   T12] bond0 (unregistering): Released all slaves
[  165.215509][   T12] bond1 (unregistering): Released all slaves
[  165.287347][   T12] bond2 (unregistering): Released all slaves
[  165.291691][   T12] bond3 (unregistering): Released all slaves
[  165.358233][   T12] bond4 (unregistering): Released all slaves
[  165.418680][   T12] tipc: Left network mode
[  165.632603][   T12] hsr_slave_0: left promiscuous mode
[  165.634639][   T12] hsr_slave_1: left promiscuous mode
[  165.636567][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.840328][   T12] team0 (unregistering): Port device team_slave_1 removed
[  165.866845][   T12] team0 (unregistering): Port device team_slave_0 removed
[  166.367676][   T12] IPVS: stop unused estimator thread 0...
[  166.419815][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.488524][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.547774][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.608037][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.659896][   T12] bridge_slave_1: left allmulticast mode
[  166.664727][   T12] bridge_slave_1: left promiscuous mode
[  166.666599][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.670466][   T12] bridge_slave_0: left allmulticast mode
[  166.672668][   T12] bridge_slave_0: left promiscuous mode
[  166.674757][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.703419][   T12] gretap0 (unregistering): left promiscuous mode
[  166.777653][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.781668][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.785798][   T12] bond0 (unregistering): Released all slaves
[  167.066623][   T12] batadv_slave_1: left promiscuous mode
[  167.094924][   T12] hsr_slave_0: left promiscuous mode
[  167.097171][   T12] hsr_slave_1: left promiscuous mode
[  167.099105][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.101509][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.107106][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.110007][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.116537][   T12] veth1_macvtap: left promiscuous mode
[  167.118738][   T12] veth0_macvtap: left promiscuous mode
[  167.120981][   T12] veth1_vlan: left promiscuous mode
[  167.123791][   T12] veth0_vlan: left promiscuous mode
[  167.315384][   T12] team0 (unregistering): Port device team_slave_1 removed
[  167.345467][   T12] team0 (unregistering): Port device team_slave_0 removed
[  167.717060][   T12] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
09:35:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000004 RBX=ffff88801fa86f70 RCX=ffffffff99ab1203 RDX=0000000000000000
RSI=0000000000000008 RDI=0000000000000001 RBP=ffffc9000258f8f8 RSP=ffffc9000258f820
R8 =ffff88801fa86f7f R9 =1ffff11003f50def R10=dffffc0000000000 R11=ffffed1003f50df0
R12=ffff88801fa86fd8 R13=1ffff11003f50dee R14=1ffff11003f50dfb R15=dffffc0000000000
RIP=ffffffff8190e316 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fee28d316c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000002f5000 CR3=0000000036f1c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=ffff353030303030 3030303030303030
XMM06=3030783066666666 6666666666666666 XMM07=6666666678302326 b8b46c07dca49433
XMM08=c6fb7b197d63ff5a feff84fac60e19e0 XMM09=0000000000000000 00007fee28011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003c5dc70
R8 =ffff888108560237 R9 =1ffff110210ac046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18c5 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fee28d0ffc8 CR3=000000011d048000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc5fea11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
