last executing test programs:

1m38.887691105s ago: executing program 1 (id=1793):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e23, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e22, @remote}, 'netpci0\x00'})

1m38.817520376s ago: executing program 1 (id=1795):
syz_emit_ethernet(0x106, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60f84ec000d02f0000000000000000000000ffff00000000fec800000000000000000000000000aa3a10040800000000200100000000"], 0x0)

1m38.816987146s ago: executing program 1 (id=1797):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m38.737470361s ago: executing program 1 (id=1799):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2ad9a451c4f3b7b7, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x9, @remote, 0x7}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000009, 0x8010, 0xffffffffffffffff, 0xe75d6000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)=ANY=[], 0x78)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))

1m38.417901114s ago: executing program 0 (id=1807):
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

1m38.417395736s ago: executing program 0 (id=1809):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)

1m38.35628066s ago: executing program 0 (id=1811):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1m38.296354047s ago: executing program 0 (id=1813):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/34, 0x22}], 0x1}, 0xe}], 0x1, 0x2021, 0x0)

1m38.177927578s ago: executing program 0 (id=1815):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)

1m38.034724249s ago: executing program 0 (id=1816):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, r1})

1m37.919599302s ago: executing program 32 (id=1816):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, r1})

1m37.8754921s ago: executing program 1 (id=1818):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000040)="fe8e93e452821b0f7290ab39", 0xc}, {0x0, 0x91}], 0x2}}], 0x1, 0x2000c000)

1m37.47769071s ago: executing program 1 (id=1819):
unshare(0x2040600)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0)

1m37.477523095s ago: executing program 33 (id=1819):
unshare(0x2040600)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0)

2.78672582s ago: executing program 4 (id=4221):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000001}]}}]}, 0x40}}, 0x0)

2.707152805s ago: executing program 4 (id=4223):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd)

2.645962432s ago: executing program 4 (id=4225):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twwr'], 0xa)

2.645349334s ago: executing program 4 (id=4227):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

2.587470168s ago: executing program 4 (id=4229):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000540)="a6cc04e2d8f1c38afbf14b29b86e3a")

2.468678134s ago: executing program 4 (id=4232):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11)

505.503907ms ago: executing program 2 (id=4265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r1, 0xe1a0b80db4190737, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8091}, 0x0)

436.574275ms ago: executing program 2 (id=4268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
unshare(0x2c000a00)
recvmmsg(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1}, 0xd}], 0x1, 0x40000100, 0x0)
shutdown(r3, 0x2)
write$cgroup_type(r2, &(0x7f0000000040), 0x9)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54)
r4 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f00000003c0)=0x3, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x811)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8)
accept$inet6(r4, &(0x7f0000000640)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000680)=0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x84)

436.317574ms ago: executing program 3 (id=4269):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041)
recvmmsg(r1, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1}, 0xfffffff7}], 0x2, 0x40004023, 0x0)

317.173825ms ago: executing program 3 (id=4270):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "182b71", 0x5, 0xff})

256.436555ms ago: executing program 3 (id=4271):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

256.073592ms ago: executing program 2 (id=4272):
r0 = epoll_create1(0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000640)={0xb0000005})

205.786459ms ago: executing program 3 (id=4273):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), 0x4)
listen(r0, 0x1)

147.677381ms ago: executing program 2 (id=4274):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c60407e4c21d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

147.512583ms ago: executing program 3 (id=4275):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0)

36.754077ms ago: executing program 2 (id=4276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x70}}, 0x0)

36.514211ms ago: executing program 3 (id=4277):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0)
unshare(0x24020400)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$inet6(0xa, 0x3, 0x23)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="170010df670001002cbd7000fcdbdf0f04"], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

0s ago: executing program 2 (id=4278):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39734' (ED25519) to the list of known hosts.
syzkaller login: [   48.864579][ T5753] cgroup: Unknown subsys name 'net'
[   49.004908][ T5753] cgroup: Unknown subsys name 'cpuset'
[   49.010236][ T5753] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.215130][ T5753] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.293295][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.298465][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.302492][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.309984][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.315660][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.318894][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.333186][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.352436][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.361638][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.366135][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.368270][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.370235][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.374861][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.387323][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.396042][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.723260][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   56.829770][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   56.849617][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.890813][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.894330][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.896919][ T5826] bridge_slave_0: entered allmulticast mode
[   56.899887][ T5826] bridge_slave_0: entered promiscuous mode
[   56.926377][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.929342][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.932624][ T5826] bridge_slave_1: entered allmulticast mode
[   56.936654][ T5826] bridge_slave_1: entered promiscuous mode
[   57.001691][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.046013][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.056928][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.059921][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.063171][ T5822] bridge_slave_0: entered allmulticast mode
[   57.066718][ T5822] bridge_slave_0: entered promiscuous mode
[   57.099476][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.104278][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.106756][ T5822] bridge_slave_1: entered allmulticast mode
[   57.109693][ T5822] bridge_slave_1: entered promiscuous mode
[   57.150490][ T5826] team0: Port device team_slave_0 added
[   57.176036][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.181663][ T5826] team0: Port device team_slave_1 added
[   57.199003][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.201894][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.205179][ T5828] bridge_slave_0: entered allmulticast mode
[   57.209361][ T5828] bridge_slave_0: entered promiscuous mode
[   57.216840][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.245791][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.248575][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.258820][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.265177][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.268120][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.271229][ T5828] bridge_slave_1: entered allmulticast mode
[   57.275441][ T5828] bridge_slave_1: entered promiscuous mode
[   57.303933][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.306152][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.314155][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.334249][ T5822] team0: Port device team_slave_0 added
[   57.360259][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.365727][ T5822] team0: Port device team_slave_1 added
[   57.381886][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.414507][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.417334][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.428209][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.462332][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.465138][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.475500][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.498026][ T5828] team0: Port device team_slave_0 added
[   57.505212][ T5826] hsr_slave_0: entered promiscuous mode
[   57.507647][ T5826] hsr_slave_1: entered promiscuous mode
[   57.518114][ T5828] team0: Port device team_slave_1 added
[   57.572195][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.574534][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.584939][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.603010][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.605189][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.613256][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.633831][ T5822] hsr_slave_0: entered promiscuous mode
[   57.636127][ T5822] hsr_slave_1: entered promiscuous mode
[   57.638271][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.640848][ T5822] Cannot create hsr debugfs directory
[   57.748241][ T5828] hsr_slave_0: entered promiscuous mode
[   57.751383][ T5828] hsr_slave_1: entered promiscuous mode
[   57.754876][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.757380][ T5828] Cannot create hsr debugfs directory
[   57.990424][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.019839][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.027049][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.034675][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.085938][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.092206][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.108694][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.124113][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.190672][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.206275][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.216963][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.234956][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.328000][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.365789][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   58.374671][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.389567][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.392567][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.404774][ T5829] Bluetooth: hci1: command tx timeout
[   58.407256][ T5218] Bluetooth: hci0: command tx timeout
[   58.423695][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.426618][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.437231][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   58.463521][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.466794][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.476925][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.479827][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.490545][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.495319][ T5218] Bluetooth: hci2: command tx timeout
[   58.538167][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   58.579421][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.582393][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.600363][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.603268][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.735965][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.780473][ T5826] veth0_vlan: entered promiscuous mode
[   58.790094][ T5826] veth1_vlan: entered promiscuous mode
[   58.826696][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.839303][ T5826] veth0_macvtap: entered promiscuous mode
[   58.849012][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.854705][ T5826] veth1_macvtap: entered promiscuous mode
[   58.885042][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.899325][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.917375][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.920944][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.925206][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.928640][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.959730][ T5822] veth0_vlan: entered promiscuous mode
[   58.967887][ T5828] veth0_vlan: entered promiscuous mode
[   58.995794][ T5822] veth1_vlan: entered promiscuous mode
[   59.004570][ T5828] veth1_vlan: entered promiscuous mode
[   59.054911][  T458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.058084][  T458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.107269][  T458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.109724][  T458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.133751][ T5822] veth0_macvtap: entered promiscuous mode
[   59.139331][ T5828] veth0_macvtap: entered promiscuous mode
[   59.157253][ T5822] veth1_macvtap: entered promiscuous mode
[   59.164134][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.174166][ T5828] veth1_macvtap: entered promiscuous mode
[   59.190206][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.210345][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.233667][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.239744][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.250247][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.256192][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.259572][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.263875][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.271881][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.276983][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.279974][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.282897][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.451419][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.456853][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.470168][ T5892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.477064][ T5892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.500421][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.505652][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.546043][  T458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.549168][  T458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.676507][ T5907] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xf
[   60.313576][ T5953] tipc: Started in network mode
[   60.315437][ T5953] tipc: Node identity 1af5eab2b54f, cluster identity 4711
[   60.318445][ T5953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.332640][ T5953] syzkaller0: entered promiscuous mode
[   60.334476][ T5953] syzkaller0: entered allmulticast mode
[   60.350543][ T5953] tipc: Resetting bearer <eth:syzkaller0>
[   60.355611][ T5951] tipc: Resetting bearer <eth:syzkaller0>
[   60.362953][ T5951] tipc: Disabling bearer <eth:syzkaller0>
[   60.493153][ T5218] Bluetooth: hci0: command tx timeout
[   60.495328][ T5218] Bluetooth: hci1: command tx timeout
[   60.558810][ T5969] netlink: 'syz.0.30': attribute type 1 has an invalid length.
[   60.565498][ T5971] netlink: 180 bytes leftover after parsing attributes in process `syz.2.31'.
[   60.567710][ T5969] netlink: 224 bytes leftover after parsing attributes in process `syz.0.30'.
[   60.575702][ T5829] Bluetooth: hci2: command tx timeout
[   60.670033][ T5976] Bluetooth: MGMT ver 1.23
[   60.980261][ T5994] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.225898][ T6014] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[   61.323773][ T6020] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.49'.
[   61.376900][ T6024] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96
[   61.535865][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'.
[   61.581228][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'.
[   62.540667][ T6106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.91'.
[   62.545582][ T6106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.91'.
[   62.558092][ T6109] netlink: 27 bytes leftover after parsing attributes in process `syz.1.90'.
[   62.565676][ T5829] Bluetooth: hci1: command tx timeout
[   62.567812][ T5829] Bluetooth: hci0: command tx timeout
[   62.604083][ T6112] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.93'.
[   62.607980][ T6112] openvswitch: netlink: Message has 5 unknown bytes.
[   62.642562][ T5218] Bluetooth: hci2: command tx timeout
[   62.993782][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.997787][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'.
[   63.007387][ T6141] vlan2: entered promiscuous mode
[   63.009044][ T6141] bridge0: entered promiscuous mode
[   63.079844][ T6147] warning: `syz.0.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.329416][ T6166] netlink: 'syz.1.117': attribute type 1 has an invalid length.
[   64.111301][ T6205] netlink: 'syz.2.133': attribute type 13 has an invalid length.
[   64.115046][ T6205] netlink: 'syz.2.133': attribute type 12 has an invalid length.
[   64.565683][ T6234] syzkaller0: entered promiscuous mode
[   64.572947][ T6234] syzkaller0: entered allmulticast mode
[   64.614942][ T6236] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   64.622705][ T6236] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   64.652142][ T5218] Bluetooth: hci0: command tx timeout
[   64.652830][ T5829] Bluetooth: hci1: command tx timeout
[   64.722178][ T5829] Bluetooth: hci2: command tx timeout
[   65.204986][ T6270] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.825127][ T6307] __nla_validate_parse: 9 callbacks suppressed
[   65.825138][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'.
[   66.165534][ T6321] can: request_module (can-proto-3) failed.
[   67.035567][ T6355] vxcan2: entered promiscuous mode
[   67.077985][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'.
[   67.178682][ T6366] syz.2.207 uses obsolete (PF_INET,SOCK_PACKET)
[   67.344957][ T6379] netlink: 'syz.0.212': attribute type 3 has an invalid length.
[   67.380491][ T6381] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.214'.
[   67.438817][ T6387] netlink: 3 bytes leftover after parsing attributes in process `syz.2.217'.
[   67.456604][ T6387] batadv1: entered promiscuous mode
[   67.462161][ T6387] batadv1: entered allmulticast mode
[   67.487811][ T6390] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   67.616315][ T6392] netlink: 48 bytes leftover after parsing attributes in process `syz.2.217'.
[   67.743049][ T6409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.225'.
[   67.746673][ T6409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.225'.
[   67.749803][ T6409] netlink: 2 bytes leftover after parsing attributes in process `syz.2.225'.
[   68.034907][ T6429] netlink: 96 bytes leftover after parsing attributes in process `syz.2.232'.
[   68.517065][ T6461] x_tables: duplicate underflow at hook 1
[   68.733800][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.249'.
[   70.496960][ T6553] netlink: 'syz.1.278': attribute type 2 has an invalid length.
[   70.700808][ T6558] xt_CT: No such helper "pptp"
[   71.026817][ T6586] netlink: 'syz.1.293': attribute type 1 has an invalid length.
[   71.059317][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.087501][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.089903][ T6586] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   71.104085][ T6586] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   71.153017][ T6586] gretap1: entered promiscuous mode
[   71.158969][ T6586] bond1: (slave gretap1): making interface the new active one
[   71.163859][ T6586] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   71.185178][ T6586] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   71.216773][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.219899][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.608780][ T6615] tipc: Failed to remove unknown binding: 66,1,1/0:3509880631/3509880633
[   71.615683][ T6615] tipc: Failed to remove unknown binding: 66,1,1/0:3509880631/3509880633
[   71.669610][ T6619] ieee802154 phy0 wpan0: encryption failed: -90
[   72.103032][ T6651] Zero length message leads to an empty skb
[   72.108494][ T6646] xt_CT: No such helper "snmp"
[   72.256972][   T24] IPVS: starting estimator thread 0...
[   72.352271][ T6662] IPVS: using max 62 ests per chain, 148800 per kthread
[   72.971560][ T6691] __nla_validate_parse: 3 callbacks suppressed
[   72.971570][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.
[   73.273816][ T6699] xfrm1: entered promiscuous mode
[   73.275896][ T6699] xfrm1: entered allmulticast mode
[   73.828624][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'.
[   73.838093][ T6719] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.841681][ T6719] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.845659][ T6719] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.849125][ T6719] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.943207][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'.
[   74.154127][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'.
[   74.157931][ T6744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.364'.
[   75.071577][ T6795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.383'.
[   75.078577][ T6791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.383'.
[   75.286103][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   75.289887][ T6805] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   75.296227][ T6805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.729873][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.733864][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.919864][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.937745][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.101736][ T6827] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.106076][ T6827] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.110014][ T6827] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.115004][ T6827] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.180584][ T6827] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.184426][ T6827] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.187869][ T6827] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.191263][ T6827] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.504438][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'.
[   76.510568][ T6850] netlink: 7 bytes leftover after parsing attributes in process `syz.2.411'.
[   76.918131][ T6890] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   77.657229][ T6947] netlink: 'syz.0.456': attribute type 13 has an invalid length.
[   77.960057][ T6972] netlink: 'syz.1.468': attribute type 29 has an invalid length.
[   78.600775][ T7003] __nla_validate_parse: 8 callbacks suppressed
[   78.600793][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'.
[   78.715675][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'.
[   79.223538][ T7040] netlink: zone id is out of range
[   79.225976][ T7040] netlink: zone id is out of range
[   79.229113][ T7040] netlink: zone id is out of range
[   79.231601][ T7040] netlink: zone id is out of range
[   79.234425][ T7040] netlink: zone id is out of range
[   79.236760][ T7040] netlink: zone id is out of range
[   79.238761][ T7040] netlink: zone id is out of range
[   79.244941][ T7040] netlink: zone id is out of range
[   79.471307][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'.
[   79.475568][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.503'.
[   79.479339][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'.
[   79.484336][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.503'.
[   79.487938][ T7052] netlink: 'syz.2.503': attribute type 6 has an invalid length.
[   80.577576][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'.
[   80.686676][ T7120] sctp: [Deprecated]: syz.0.533 (pid 7120) Use of int in max_burst socket option.
[   80.686676][ T7120] Use struct sctp_assoc_value instead
[   80.778437][ T7123] net_ratelimit: 5 callbacks suppressed
[   80.778451][ T7123] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   80.784035][   T24] IPVS: starting estimator thread 0...
[   80.873362][ T7130] IPVS: using max 39 ests per chain, 93600 per kthread
[   80.941323][ T7141] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   81.139415][ T7151] syzkaller1: entered promiscuous mode
[   81.141692][ T7151] syzkaller1: entered allmulticast mode
[   81.178632][ T7155] xt_CT: You must specify a L4 protocol and not use inversions on it
[   81.453530][    T9] cfg80211: failed to load regulatory.db
[   81.720098][ T7187] netlink: 148 bytes leftover after parsing attributes in process `syz.2.560'.
[   82.286116][ T7222] tipc: Started in network mode
[   82.287986][ T7222] tipc: Node identity 7f000001, cluster identity 4711
[   82.291260][ T7222] tipc: Enabled bearer <udp:syz2>, priority 10
[   83.314195][   T24] tipc: Node number set to 2130706433
[   85.092341][ T7218] Set syz1 is full, maxelem 65536 reached
[   85.322428][ T7287] netlink: 'syz.0.607': attribute type 4 has an invalid length.
[   85.464483][ T7293] tc_dump_action: action bad kind
[   86.042661][ T7317] ieee802154 phy0 wpan0: encryption failed: -90
[   86.784023][ T7338] netlink: 'syz.2.629': attribute type 13 has an invalid length.
[   86.784109][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[   86.899098][ T7344] netlink: 'syz.2.632': attribute type 3 has an invalid length.
[   87.425341][ T7354] netlink: 248 bytes leftover after parsing attributes in process `syz.1.637'.
[   87.750608][ T7378] netlink: 'syz.0.643': attribute type 13 has an invalid length.
[   87.766834][ T7378] netlink: 'syz.0.643': attribute type 17 has an invalid length.
[   88.047936][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.071646][ T7378] 8021q: adding VLAN 0 to HW filter on device team0
[   88.206967][ T7378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.767346][ T7416] netlink: 'syz.0.656': attribute type 1 has an invalid length.
[   88.771795][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'.
[   89.226498][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[   89.370404][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[   89.400907][ T7445] bridge0: entered promiscuous mode
[   89.404300][ T7445] macvtap1: entered promiscuous mode
[   89.406756][ T7445] macvtap1: entered allmulticast mode
[   89.408811][ T7445] bridge0: entered allmulticast mode
[   89.426059][ T7445] bridge0: left allmulticast mode
[   89.428761][ T7445] bridge0: left promiscuous mode
[   90.061656][ T7472] netlink: 136 bytes leftover after parsing attributes in process `syz.0.678'.
[   90.065800][ T7472] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   90.284203][ T7490] bridge0: port 3(syz_tun) entered blocking state
[   90.287328][ T7490] bridge0: port 3(syz_tun) entered disabled state
[   90.290751][ T7490] syz_tun: entered allmulticast mode
[   90.306334][ T7490] syz_tun: entered promiscuous mode
[   90.309396][ T7490] bridge0: port 3(syz_tun) entered blocking state
[   90.312528][ T7490] bridge0: port 3(syz_tun) entered forwarding state
[   90.618730][ T7520] netlink: 'syz.0.693': attribute type 4 has an invalid length.
[   91.354859][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'.
[   91.741594][ T7579] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   92.024844][ T7595] netlink: 'syz.0.731': attribute type 1 has an invalid length.
[   92.107296][ T7598] bond2: entered promiscuous mode
[   92.109230][ T7598] bond2: entered allmulticast mode
[   92.119952][ T7598] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.262718][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'.
[   92.278580][ T7604] batadv0: entered promiscuous mode
[   92.290854][ T7604] batadv0: left promiscuous mode
[   92.767132][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[   92.950104][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'.
[   93.204988][ T7642] netlink: 'syz.0.750': attribute type 3 has an invalid length.
[   94.021128][ T5277] udevd[5277]: worker [5827] terminated by signal 33 (Unknown signal 33)
[   94.028786][ T5277] udevd[5277]: worker [5827] failed while handling '/devices/virtual/block/loop2'
[   94.674092][ T7698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.774'.
[   94.715992][ T7701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.719888][ T7701] syzkaller0: entered promiscuous mode
[   94.725452][ T7701] syzkaller0: entered allmulticast mode
[   94.763593][ T7701] tipc: Resetting bearer <eth:syzkaller0>
[   94.788547][ T7699] tipc: Resetting bearer <eth:syzkaller0>
[   94.814873][ T7699] tipc: Disabling bearer <eth:syzkaller0>
[   94.955278][ T7719] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   95.151361][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'.
[   95.252443][ T7739] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.256235][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.291495][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'.
[   95.400078][ T7739] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.428972][ T7739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.547466][ T7739] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.551380][ T7739] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.555794][ T7739] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.559215][ T7739] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.606038][ T7739] xfrm1: left promiscuous mode
[   95.608205][ T7739] xfrm1: left allmulticast mode
[   95.856483][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.811'.
[   95.878458][ T7383] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.881627][ T7383] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.912331][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.945811][ T7783] netlink: 'syz.1.813': attribute type 5 has an invalid length.
[   96.359625][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.372997][ T7830] batadv_slave_0: entered promiscuous mode
[   96.406296][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.433761][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   96.462287][ T7838] netlink: 'syz.1.838': attribute type 7 has an invalid length.
[   96.465386][ T7838] netlink: 'syz.1.838': attribute type 8 has an invalid length.
[   96.886158][ T7876] netlink: 92 bytes leftover after parsing attributes in process `syz.1.856'.
[   97.388831][ T7901] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.863'.
[   97.766323][ T7922] xt_CT: No such helper "snmp_trap"
[   98.096397][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'.
[   98.591002][ T7965] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   98.853771][ T7975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.987699][ T7967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'.
[   98.994299][ T7967] netlink: 'syz.0.892': attribute type 12 has an invalid length.
[   99.130058][ T7988] xt_hashlimit: size too large, truncated to 1048576
[   99.243194][ T7984] netlink: 14 bytes leftover after parsing attributes in process `syz.1.899'.
[   99.631618][ T8009] netlink: 'syz.2.906': attribute type 1 has an invalid length.
[   99.861884][ T7984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.866749][ T7984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.871081][ T7984] bond0 (unregistering): Released all slaves
[   99.886516][ T8015] openvswitch: netlink: IP tunnel TTL not specified.
[   99.986156][ T8022] @: renamed from bond_slave_0
[  100.082203][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  100.375937][ T8056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.927'.
[  100.490635][ T8071] netlink: 68 bytes leftover after parsing attributes in process `syz.0.931'.
[  100.502340][ T8071] netlink: 'syz.0.931': attribute type 1 has an invalid length.
[  100.596506][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.933'.
[  100.599370][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.933'.
[  100.849718][ T8103] ieee802154 phy0 wpan0: encryption failed: -22
[  100.960509][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'.
[  100.972032][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.946'.
[  100.977056][ T8113] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  101.910407][ T8193] netlink: 'syz.1.979': attribute type 10 has an invalid length.
[  101.914635][ T8193] batadv0: entered promiscuous mode
[  101.916990][ T8193] bridge0: port 3(batadv0) entered blocking state
[  101.919894][ T8193] bridge0: port 3(batadv0) entered disabled state
[  101.930060][ T8193] batadv0: entered allmulticast mode
[  101.936268][ T8193] bridge0: port 3(batadv0) entered blocking state
[  101.938990][ T8193] bridge0: port 3(batadv0) entered forwarding state
[  102.116564][ T8210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.352631][ T5855] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  102.356424][ T5855] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  103.533427][ T8290] __nla_validate_parse: 4 callbacks suppressed
[  103.533446][ T8290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1022'.
[  103.540546][ T8290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1022'.
[  103.684592][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'.
[  103.759730][ T8308] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  103.951352][ T8335] netlink: 'syz.2.1042': attribute type 8 has an invalid length.
[  104.111890][ T8351] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1048'.
[  104.145246][ T8353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.885406][ T8412] bridge0: port 4(gretap0) entered blocking state
[  104.894079][ T8412] bridge0: port 4(gretap0) entered disabled state
[  104.896276][ T8412] gretap0: entered allmulticast mode
[  104.899552][ T8412] gretap0: entered promiscuous mode
[  104.901751][ T8412] bridge0: port 4(gretap0) entered blocking state
[  104.904368][ T8412] bridge0: port 4(gretap0) entered forwarding state
[  105.155963][ T8436] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1089'.
[  105.158958][ T8436] tc_dump_action: action bad kind
[  105.214070][ T8443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1092'.
[  105.358641][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'.
[  105.372426][ T8461] netlink: 'syz.0.1100': attribute type 10 has an invalid length.
[  105.771828][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'.
[  105.849261][ T8511] xt_hashlimit: size too large, truncated to 1048576
[  105.855549][ T8511] xt_hashlimit: overflow, try lower: 3/0
[  105.946274][ T8519] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1126'.
[  105.949270][ T8519] netlink: zone id is out of range
[  105.950980][ T8519] netlink: zone id is out of range
[  105.953798][ T8519] netlink: zone id is out of range
[  105.956120][ T8519] netlink: zone id is out of range
[  105.958296][ T8519] netlink: zone id is out of range
[  105.960074][ T8519] netlink: zone id is out of range
[  105.965140][ T8519] netlink: zone id is out of range
[  105.972242][ T8519] netlink: zone id is out of range
[  106.072467][ T8535] hsr0: entered allmulticast mode
[  106.075168][ T8535] hsr_slave_0: entered allmulticast mode
[  106.077241][ T8535] hsr_slave_1: entered allmulticast mode
[  106.422186][ T8568] IPv6: NLM_F_REPLACE set, but no existing node found!
[  106.516201][ T8576] netlink: 'syz.2.1149': attribute type 1 has an invalid length.
[  106.551562][ T8576] bond1: (slave gretap1): making interface the new active one
[  106.555722][ T8576] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  106.571083][ T8576] vlan2: entered allmulticast mode
[  106.573562][ T8576] bond1: entered allmulticast mode
[  106.575690][ T8576] gretap1: entered allmulticast mode
[  106.580475][ T8576] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  106.877309][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'.
[  107.940861][ T8641] netlink: 'syz.0.1178': attribute type 3 has an invalid length.
[  107.947720][ T8640] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  108.260324][ T8665] netlink: 'syz.0.1188': attribute type 39 has an invalid length.
[  108.673063][ T8689] netlink: 'syz.2.1196': attribute type 39 has an invalid length.
[  108.738350][ T8698] __nla_validate_parse: 3 callbacks suppressed
[  108.738369][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'.
[  108.805468][ T8698] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1199'.
[  108.894324][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'.
[  108.962098][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.003599][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'.
[  109.328674][ T8767] netlink: 'syz.0.1232': attribute type 14 has an invalid length.
[  109.378173][ T8769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.380485][ T8769] IPv6: NLM_F_CREATE should be set when creating new route
[  109.774141][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'.
[  109.782474][ T8807] vlan2: entered promiscuous mode
[  110.032462][ T8834] netlink: 'syz.0.1265': attribute type 23 has an invalid length.
[  110.104888][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'.
[  110.334906][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'.
[  110.433275][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'.
[  110.446919][ T8874] macvtap1: entered promiscuous mode
[  110.450483][ T8874] veth1: entered promiscuous mode
[  110.453017][ T8874] macvtap1: entered allmulticast mode
[  110.455266][ T8874] veth1: entered allmulticast mode
[  110.469256][ T8874] veth1: left allmulticast mode
[  110.473924][ T8874] veth1: left promiscuous mode
[  110.496559][ T8877] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1284'.
[  110.536058][ T8879] netlink: 'syz.0.1286': attribute type 11 has an invalid length.
[  110.538549][ T8879] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1286'.
[  110.819479][ T8905] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.202544][ T8934] net_ratelimit: 12 callbacks suppressed
[  111.202558][ T8934] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  111.271436][ T8942] netlink: 'syz.0.1315': attribute type 2 has an invalid length.
[  111.277150][ T8942] netlink: 'syz.0.1315': attribute type 1 has an invalid length.
[  111.515750][ T8960] syzkaller0: refused to change device tx_queue_len
[  112.627558][ T9034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.029209][ T9056] netlink: 'syz.1.1365': attribute type 21 has an invalid length.
[  113.033522][ T9056] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  113.543703][ T9084] tipc: Enabled bearer <udp:syz2>, priority 10
[  114.552090][ T5815] tipc: Node number set to 2948262578
[  114.860037][ T9127] __nla_validate_parse: 4 callbacks suppressed
[  114.860058][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'.
[  114.877156][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'.
[  115.403950][ T9166] bridge2: entered allmulticast mode
[  116.432177][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  116.605939][ T9280] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  116.718775][ T9291] syz_tun: entered allmulticast mode
[  116.725994][ T9290] syz_tun: left allmulticast mode
[  116.805526][ T9299] tap0: tun_chr_ioctl cmd 1074025677
[  116.811295][ T9299] tap0: linktype set to 769
[  117.647975][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  117.651644][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'.
[  117.734057][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'.
[  117.748826][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.753292][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.772367][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.812182][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  118.034474][ T9371] netlink: 'syz.0.1479': attribute type 1 has an invalid length.
[  118.060845][ T9371] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.084116][ T9371] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.087027][ T9371] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  118.094584][ T9371] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  118.147713][ T9371] veth3: entered promiscuous mode
[  118.153370][ T9371] bond3: (slave veth3): Enslaving as an active interface with a down link
[  118.158797][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'.
[  118.164959][ T9371] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.482308][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.156422][ T5879] hid-generic 0005:046D:0007.0001: collection stack underflow
[  119.160325][ T5879] hid-generic 0005:046D:0007.0001: item 0 0 0 12 parsing failed
[  119.166372][ T5879] hid-generic 0005:046D:0007.0001: probe with driver hid-generic failed with error -22
[  119.224628][ T9424] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1501'.
[  119.239497][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  119.399887][ T9426] netlink: 724 bytes leftover after parsing attributes in process `syz.1.1502'.
[  119.479440][ T9430] netlink: 'syz.0.1504': attribute type 3 has an invalid length.
[  119.760848][ T9444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.984432][ T9490] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[  122.002195][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  122.129980][ T9580] netlink: 'syz.0.1569': attribute type 25 has an invalid length.
[  122.147406][ T9580] __nla_validate_parse: 3 callbacks suppressed
[  122.147421][ T9580] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1569'.
[  123.132836][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'.
[  123.136344][ T9655] netlink: 'syz.2.1592': attribute type 1 has an invalid length.
[  123.139639][ T9655] netlink: 'syz.2.1592': attribute type 1 has an invalid length.
[  124.894741][ T9787] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  125.059805][ T9802] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1643'.
[  125.089402][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'.
[  125.631529][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'.
[  126.386159][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'.
[  126.882233][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  126.930341][ T9922] syzkaller0: entered promiscuous mode
[  126.933734][ T9922] syzkaller0: entered allmulticast mode
[  127.520899][ T9933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1700'.
[  127.526535][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'.
[  129.059457][ T9943] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  129.499866][ T9998] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  129.569217][T10004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  129.970044][T10031] netlink: 'syz.2.1744': attribute type 3 has an invalid length.
[  130.082141][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.647992][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'.
[  130.659147][T10076] macvtap1: entered promiscuous mode
[  130.661370][T10076] bond0: entered promiscuous mode
[  130.666516][T10076] bond_slave_0: entered promiscuous mode
[  130.669465][T10076] bond_slave_1: entered promiscuous mode
[  130.672610][T10076] macvtap1: entered allmulticast mode
[  130.674861][T10076] bond0: entered allmulticast mode
[  130.676902][T10076] bond_slave_0: entered allmulticast mode
[  130.679062][T10076] bond_slave_1: entered allmulticast mode
[  130.681679][T10076] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  130.688782][T10076] bond0: left allmulticast mode
[  130.702187][T10076] bond_slave_0: left allmulticast mode
[  130.704423][T10076] bond_slave_1: left allmulticast mode
[  130.706656][T10076] bond0: left promiscuous mode
[  130.708638][T10076] bond_slave_0: left promiscuous mode
[  130.711032][T10076] bond_slave_1: left promiscuous mode
[  131.338408][T10087] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1769'.
[  131.819303][T10118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1782'.
[  131.977449][T10127] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  131.987525][T10126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1785'.
[  132.645133][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.647816][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.711926][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1794'.
[  132.720160][T10143] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  132.754201][T10147] netlink: 'syz.0.1796': attribute type 11 has an invalid length.
[  133.158125][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1808'.
[  133.466848][T10194] bridge0: port 3(syz_tun) entered disabled state
[  133.484100][T10194] syz_tun (unregistering): left allmulticast mode
[  133.486376][T10194] syz_tun (unregistering): left promiscuous mode
[  133.489462][T10194] bridge0: port 3(syz_tun) entered disabled state
[  134.849957][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.855644][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.859063][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.862726][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.867048][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.883797][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.888451][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.892928][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.898198][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.901462][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.160892][T10211] chnl_net:caif_netlink_parms(): no params data found
[  135.340755][T10211] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.352229][T10211] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.356044][T10211] bridge_slave_0: entered allmulticast mode
[  135.359904][T10211] bridge_slave_0: entered promiscuous mode
[  135.378803][T10211] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.381622][T10211] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.392394][T10211] bridge_slave_1: entered allmulticast mode
[  135.396156][T10211] bridge_slave_1: entered promiscuous mode
[  135.450260][T10213] chnl_net:caif_netlink_parms(): no params data found
[  135.465976][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.490738][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.544079][T10211] team0: Port device team_slave_0 added
[  135.571707][T10211] team0: Port device team_slave_1 added
[  135.574352][T10213] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.576937][T10213] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.579324][T10213] bridge_slave_0: entered allmulticast mode
[  135.582826][T10213] bridge_slave_0: entered promiscuous mode
[  135.624699][T10213] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.627186][T10213] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.629413][T10213] bridge_slave_1: entered allmulticast mode
[  135.632516][T10213] bridge_slave_1: entered promiscuous mode
[  135.738875][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.741049][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.753956][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.759142][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.766271][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.768438][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.777801][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.782950][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.834624][T10211] hsr_slave_0: entered promiscuous mode
[  135.837855][T10211] hsr_slave_1: entered promiscuous mode
[  135.840805][T10211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.844982][T10211] Cannot create hsr debugfs directory
[  135.866534][T10246] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  135.877892][T10213] team0: Port device team_slave_0 added
[  135.915877][T10213] team0: Port device team_slave_1 added
[  136.017230][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.019944][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.035120][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.057028][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.059839][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.070726][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.090929][T10252] pim6reg: entered allmulticast mode
[  136.202200][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.229520][T10213] hsr_slave_0: entered promiscuous mode
[  136.232939][T10213] hsr_slave_1: entered promiscuous mode
[  136.235729][T10213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.238690][T10213] Cannot create hsr debugfs directory
[  136.315044][T10262] netem: change failed
[  136.335636][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.393134][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.406751][T10211] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  136.413961][T10211] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  136.437911][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.447492][T10211] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  136.461247][T10211] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  136.603837][ T5855] batadv0: left allmulticast mode
[  136.607045][ T5855] bridge0: port 3(batadv0) entered disabled state
[  136.611296][ T5855] bridge_slave_1: left allmulticast mode
[  136.613229][ T5855] bridge_slave_1: left promiscuous mode
[  136.615106][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.619287][ T5855] bridge_slave_0: left allmulticast mode
[  136.621238][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.785004][ T5855] bond1 (unregistering): (slave gretap1): Releasing active interface
[  136.882161][ T5833] Bluetooth: hci0: command tx timeout
[  136.964485][ T5833] Bluetooth: hci1: command tx timeout
[  136.977522][ T5855] bond1 (unregistering): Released all slaves
[  136.986446][ T5855] bond2 (unregistering): Released all slaves
[  137.023591][T10213] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  137.029631][T10213] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  137.040087][T10213] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  137.048011][T10211] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.050862][T10213] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  137.082309][ T5855] tipc: Disabling bearer <udp:syz2>
[  137.084114][ T5855] tipc: Left network mode
[  137.097791][T10211] 8021q: adding VLAN 0 to HW filter on device team0
[  137.115819][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.118220][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.135457][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.137789][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.291260][T10213] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.324460][T10213] 8021q: adding VLAN 0 to HW filter on device team0
[  137.356851][  T458] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.359170][  T458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.374396][  T458] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.377176][  T458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.399247][T10211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.438115][ T5855] hsr_slave_0: left promiscuous mode
[  137.440911][ T5855] hsr_slave_1: left promiscuous mode
[  137.444777][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.448467][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.451178][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.472643][ T5855] veth1_macvtap: left promiscuous mode
[  137.475112][ T5855] veth0_macvtap: left promiscuous mode
[  137.477414][ T5855] veth1_vlan: left promiscuous mode
[  137.480426][ T5855] veth0_vlan: left promiscuous mode
[  137.834989][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  137.863250][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  138.289017][T10211] veth0_vlan: entered promiscuous mode
[  138.329933][T10211] veth1_vlan: entered promiscuous mode
[  138.466333][T10211] veth0_macvtap: entered promiscuous mode
[  138.492829][T10211] veth1_macvtap: entered promiscuous mode
[  138.522172][ T5855] IPVS: stop unused estimator thread 0...
[  138.540339][T10211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.558817][T10211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.575565][T10211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.579045][T10211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.583760][T10211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.587218][T10211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.606551][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.751110][  T458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.761113][  T458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.800501][ T5892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.809135][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.963014][ T5833] Bluetooth: hci0: command tx timeout
[  139.017801][T10213] veth0_vlan: entered promiscuous mode
[  139.023864][T10301] IPv6: addrconf: prefix option has invalid lifetime
[  139.040947][T10213] veth1_vlan: entered promiscuous mode
[  139.042634][ T5833] Bluetooth: hci1: command tx timeout
[  139.107684][T10213] veth0_macvtap: entered promiscuous mode
[  139.116590][T10213] veth1_macvtap: entered promiscuous mode
[  139.163139][T10213] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.171580][T10213] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.177599][T10213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.180287][T10213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.184166][T10213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.186934][T10213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.246958][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.249420][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.271560][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.281800][T10313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1847'.
[  139.285680][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.290347][T10313] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1847'.
[  139.358164][T10320] netlink: 'syz.4.1820': attribute type 16 has an invalid length.
[  139.360602][T10320] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1820'.
[  139.703800][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1862'.
[  139.733344][T10351] xt_CT: You must specify a L4 protocol and not use inversions on it
[  139.766485][T10355] tipc: Started in network mode
[  139.768119][T10355] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711
[  139.771773][T10355] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.820397][T10357] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1866'.
[  141.042204][ T5218] Bluetooth: hci0: command tx timeout
[  141.123279][ T5218] Bluetooth: hci1: command tx timeout
[  141.382204][T10454] IPVS: Error connecting to the multicast addr
[  141.593463][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'.
[  142.508161][T10526] netlink: 'syz.2.1944': attribute type 3 has an invalid length.
[  143.133348][ T5218] Bluetooth: hci0: command tx timeout
[  143.219352][ T5218] Bluetooth: hci1: command tx timeout
[  143.326833][T10549] netlink: 'syz.2.1953': attribute type 3 has an invalid length.
[  144.084583][T10604] batadv1: entered allmulticast mode
[  144.087004][T10604] 8021q: adding VLAN 0 to HW filter on device batadv1
[  144.424492][T10617] sctp: [Deprecated]: syz.3.1985 (pid 10617) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.424492][T10617] Use struct sctp_sack_info instead
[  144.436243][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'.
[  144.439298][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'.
[  144.444460][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'.
[  144.659823][T10631] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  144.711108][T10633] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1993'.
[  145.027051][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'.
[  145.375113][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'.
[  145.679681][T10701] netlink: 'syz.3.2026': attribute type 1 has an invalid length.
[  145.683181][T10701] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2026'.
[  146.876102][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'.
[  146.943879][T10721] macsec1: entered allmulticast mode
[  146.945620][T10721] macsec0: entered allmulticast mode
[  147.085651][T10739] Bluetooth: MGMT ver 1.23
[  147.126676][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'.
[  147.251427][T10761] trusted_key: syz.4.2056 sent an empty control message without MSG_MORE.
[  147.512000][   T33] audit: type=1800 audit(1752174672.659:2): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2061" name="memory.events" dev="tmpfs" ino=3348 res=0 errno=0
[  147.902750][T10808] batman_adv: batadv0: Adding interface: macvlan2
[  147.904717][T10808] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.915645][T10808] batman_adv: batadv0: Interface activated: macvlan2
[  147.935838][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2075'.
[  148.006696][T10818] IPv6: NLM_F_REPLACE set, but no existing node found!
[  148.539259][T10882] vlan0: entered promiscuous mode
[  148.774858][T10899] macvtap2: entered promiscuous mode
[  148.777132][T10899] bond0: entered promiscuous mode
[  148.779091][T10899] bond_slave_0: entered promiscuous mode
[  148.781470][T10899] bond_slave_1: entered promiscuous mode
[  148.784742][T10899] macvtap2: entered allmulticast mode
[  148.786869][T10899] bond0: entered allmulticast mode
[  148.789883][T10899] bond_slave_0: entered allmulticast mode
[  148.792794][T10899] bond_slave_1: entered allmulticast mode
[  148.799902][T10899] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  148.807454][T10899] bond0: left allmulticast mode
[  148.809398][T10899] bond_slave_0: left allmulticast mode
[  148.811533][T10899] bond_slave_1: left allmulticast mode
[  148.822432][T10899] bond0: left promiscuous mode
[  148.824361][T10899] bond_slave_0: left promiscuous mode
[  148.826557][T10899] bond_slave_1: left promiscuous mode
[  149.112059][T10915] block nbd0: server does not support multiple connections per device.
[  149.116685][T10915] block nbd0: shutting down sockets
[  149.318556][T10933] team_slave_0: entered promiscuous mode
[  149.320996][T10933] team_slave_1: entered promiscuous mode
[  149.326709][T10933] macvtap1: entered promiscuous mode
[  149.328590][T10933] team0: entered promiscuous mode
[  149.330901][T10933] macvtap1: entered allmulticast mode
[  149.334549][T10933] team0: entered allmulticast mode
[  149.336189][T10933] team_slave_0: entered allmulticast mode
[  149.338646][T10933] team_slave_1: entered allmulticast mode
[  149.341102][T10933] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  149.349308][T10933] team0: left allmulticast mode
[  149.355719][T10933] team_slave_0: left allmulticast mode
[  149.357907][T10933] team_slave_1: left allmulticast mode
[  149.359642][T10933] team0: left promiscuous mode
[  149.362379][T10933] team_slave_0: left promiscuous mode
[  149.364559][T10933] team_slave_1: left promiscuous mode
[  149.496362][T10945] veth0: entered promiscuous mode
[  149.499260][T10944] veth0: left promiscuous mode
[  149.887288][T10984] netlink: 'syz.3.2157': attribute type 1 has an invalid length.
[  149.931550][T10988] dummy0: entered promiscuous mode
[  149.934104][T10987] dummy0: left promiscuous mode
[  149.998590][T10993] __nla_validate_parse: 2 callbacks suppressed
[  149.998600][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'.
[  150.187374][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'.
[  150.229536][T11018] bridge3: entered promiscuous mode
[  150.894261][T11075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2196'.
[  151.073046][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'.
[  151.076124][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'.
[  151.181762][T11091] netlink: 'syz.3.2205': attribute type 1 has an invalid length.
[  151.208272][T11091] bond1: entered promiscuous mode
[  151.210239][T11091] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.228845][T11091] bond1: (slave dummy0): making interface the new active one
[  151.231226][T11091] dummy0: entered promiscuous mode
[  151.234290][T11091] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  151.274171][T11096] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2207'.
[  151.510869][T11113] IPv6: addrconf: prefix option has invalid lifetime
[  151.669709][T11129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2220'.
[  151.735902][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2223'.
[  151.739743][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2223'.
[  151.934356][T11140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.039253][T11140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.052066][T11140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.356149][T11175] netlink: 'syz.4.2239': attribute type 11 has an invalid length.
[  152.359324][T11175] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2239'.
[  152.445855][T11179] tipc: Started in network mode
[  152.447539][T11179] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[  152.450338][T11179] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  152.480534][T11181] netlink: 'syz.4.2242': attribute type 1 has an invalid length.
[  152.815207][T11201] gtp0: entered promiscuous mode
[  152.821237][T11201] gtp0: entered allmulticast mode
[  153.362382][T11259] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  153.746952][T11285] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  153.796952][T11285] tipc: Resetting bearer <eth:syzkaller0>
[  153.807299][T11284] tipc: Resetting bearer <eth:syzkaller0>
[  154.332199][ T5218] Bluetooth: hci1: command tx timeout
[  155.034853][T11284] tipc: Disabling bearer <eth:syzkaller0>
[  155.480518][T11338] netlink: 'syz.4.2304': attribute type 29 has an invalid length.
[  155.490025][T11338] netlink: 'syz.4.2304': attribute type 29 has an invalid length.
[  155.896111][T11366] netlink: 'syz.3.2320': attribute type 1 has an invalid length.
[  155.899283][T11366] __nla_validate_parse: 2 callbacks suppressed
[  155.899294][T11366] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2320'.
[  155.907678][T11366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2320'.
[  156.250960][T11387] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  156.310200][T11394] ip6gre2: entered promiscuous mode
[  156.397378][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2335'.
[  156.400827][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2335'.
[  156.638269][T11420] C: renamed from team_slave_0
[  156.644933][T11420] netlink: 'syz.2.2345': attribute type 3 has an invalid length.
[  156.653208][T11420] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2345'.
[  156.656857][T11420] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  156.744765][T11426] nbd: must specify a size in bytes for the device
[  158.086278][T11499] netlink: 'syz.2.2381': attribute type 8 has an invalid length.
[  158.527767][T11531] ieee802154 phy0 wpan0: encryption failed: -22
[  159.029185][T11546] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.031723][T11546] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.084186][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2408'.
[  159.086819][T11546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.087036][T11559] openvswitch: netlink: Missing key (keys=40, expected=80)
[  159.096028][T11546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.129722][T11561] ieee802154 phy0 wpan0: encryption failed: -22
[  159.139602][T11546] vlan0: left promiscuous mode
[  159.161600][T11546] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.164918][T11546] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.167799][T11546] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.170749][T11546] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.213495][T11546] batadv1: left allmulticast mode
[  159.216597][T11546] macvtap1: left promiscuous mode
[  159.218250][T11546] macvtap1: left allmulticast mode
[  159.221582][T11546] bond1: left promiscuous mode
[  159.226561][T11546] dummy0: left promiscuous mode
[  159.477547][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'.
[  159.498300][T11592] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  159.501408][T11592] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  159.625230][T11604] ieee802154 phy0 wpan0: encryption failed: -22
[  160.228313][T11652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2449'.
[  160.233374][T11652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.293004][T11652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.348465][T11652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.800890][T11693] netlink: 'syz.2.2467': attribute type 1 has an invalid length.
[  160.803408][T11693] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2467'.
[  161.340544][T11727] Cannot find add_set index 2 as target
[  161.442089][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  162.062793][T11781] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2508'.
[  162.066492][T11781] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2508'.
[  162.367096][T11802] netlink: 'syz.2.2518': attribute type 1 has an invalid length.
[  162.974716][T11834] bridge0: port 3(gretap0) entered blocking state
[  162.977120][T11834] bridge0: port 3(gretap0) entered disabled state
[  162.979207][T11834] gretap0: entered allmulticast mode
[  162.981869][T11834] gretap0: entered promiscuous mode
[  163.030034][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2534'.
[  163.035066][T11836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2534'.
[  163.051686][T11836] netlink: 'syz.2.2534': attribute type 1 has an invalid length.
[  163.062213][T11836] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2534'.
[  163.409674][T11863] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  163.516055][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2549'.
[  163.830996][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'.
[  164.125969][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'.
[  164.129581][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2564'.
[  164.136162][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'.
[  164.640597][T11942] IPVS: Scheduler module ip_vs_ not found
[  165.088406][T11978] sctp: [Deprecated]: syz.3.2594 (pid 11978) Use of int in max_burst socket option deprecated.
[  165.088406][T11978] Use struct sctp_assoc_value instead
[  165.423225][ T5900] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  165.426467][ T5900] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  165.430333][ T5900] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  165.437519][ T5900] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  165.441524][ T5900] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  165.445008][ T5900] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  165.448504][ T5900] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3
[  165.459029][ T5900] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  165.566439][T11998]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  165.914547][T12011] syz.4.2610: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  165.919222][T12010] gretap1: entered promiscuous mode
[  165.921034][T12011] CPU: 0 UID: 0 PID: 12011 Comm: syz.4.2610 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  165.921057][T12011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.921068][T12011] Call Trace:
[  165.921076][T12011]  <TASK>
[  165.921107][T12011]  dump_stack_lvl+0x189/0x250
[  165.921135][T12011]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.921152][T12011]  ? __pfx__printk+0x10/0x10
[  165.921174][T12011]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  165.921194][T12011]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  165.921215][T12011]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  165.921236][T12011]  warn_alloc+0x214/0x310
[  165.921257][T12011]  ? stack_depot_save_flags+0x40/0x900
[  165.921284][T12011]  ? __pfx_warn_alloc+0x10/0x10
[  165.921305][T12011]  ? kasan_save_track+0x4f/0x80
[  165.921322][T12011]  ? xskq_create+0x56/0x170
[  165.921334][T12011]  ? xsk_init_queue+0xb0/0x110
[  165.921353][T12011]  ? xsk_setsockopt+0x43f/0x710
[  165.921371][T12011]  ? do_sock_setsockopt+0x25a/0x3e0
[  165.921389][T12011]  ? __x64_sys_setsockopt+0x18b/0x220
[  165.921413][T12011]  ? do_syscall_64+0xfa/0x3b0
[  165.921428][T12011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.921450][T12011]  __vmalloc_node_range_noprof+0x125/0x12f0
[  165.921494][T12011]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  165.921519][T12011]  ? __kasan_kmalloc+0x93/0xb0
[  165.921539][T12011]  vmalloc_user_noprof+0xad/0xf0
[  165.921558][T12011]  ? xskq_create+0xbf/0x170
[  165.921572][T12011]  xskq_create+0xbf/0x170
[  165.921588][T12011]  xsk_init_queue+0xb0/0x110
[  165.921647][T12011]  xsk_setsockopt+0x43f/0x710
[  165.921672][T12011]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.921693][T12011]  ? __lock_acquire+0xab9/0xd20
[  165.921716][T12011]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  165.921730][T12011]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.921752][T12011]  do_sock_setsockopt+0x25a/0x3e0
[  165.921773][T12011]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  165.921795][T12011]  ? __fget_files+0x2a/0x420
[  165.921822][T12011]  __x64_sys_setsockopt+0x18b/0x220
[  165.921846][T12011]  do_syscall_64+0xfa/0x3b0
[  165.921860][T12011]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.921874][T12011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.921889][T12011]  ? exc_page_fault+0x9f/0xf0
[  165.921937][T12011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.921953][T12011] RIP: 0033:0x7fe46878e929
[  165.921968][T12011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.921982][T12011] RSP: 002b:00007fe469592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  165.922001][T12011] RAX: ffffffffffffffda RBX: 00007fe4689b5fa0 RCX: 00007fe46878e929
[  165.922012][T12011] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  165.922023][T12011] RBP: 00007fe468810b39 R08: 0000000000000004 R09: 0000000000000000
[  165.922033][T12011] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.922043][T12011] R13: 0000000000000000 R14: 00007fe4689b5fa0 R15: 00007ffe4d00d8a8
[  165.922066][T12011]  </TASK>
[  165.925728][T12011] Mem-Info:
[  166.048478][T12011] active_anon:4376 inactive_anon:0 isolated_anon:0
[  166.048478][T12011]  active_file:972 inactive_file:38247 isolated_file:0
[  166.048478][T12011]  unevictable:1768 dirty:101 writeback:0
[  166.048478][T12011]  slab_reclaimable:9704 slab_unreclaimable:64840
[  166.048478][T12011]  mapped:18056 shmem:2412 pagetables:898
[  166.048478][T12011]  sec_pagetables:0 bounce:0
[  166.048478][T12011]  kernel_misc_reclaimable:0
[  166.048478][T12011]  free:286388 free_pcp:15336 free_cma:0
[  166.067982][T12011] Node 0 active_anon:11460kB inactive_anon:0kB active_file:2584kB inactive_file:100848kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38980kB dirty:284kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9408kB pagetables:2024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  166.083278][T12011] Node 1 active_anon:6044kB inactive_anon:0kB active_file:1304kB inactive_file:52140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33040kB dirty:120kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2448kB pagetables:1568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  166.096543][T12011] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  166.106258][T12011] lowmem_reserve[]: 0 812 812 812 812
[  166.107956][T12011] Node 0 DMA32 free:264324kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11460kB inactive_anon:0kB active_file:2584kB inactive_file:100848kB unevictable:3536kB writepending:284kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:31604kB local_pcp:16500kB free_cma:0kB
[  166.117355][T12011] lowmem_reserve[]: 0 0 0 0 0
[  166.118859][T12011] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  166.128628][T12011] lowmem_reserve[]: 0 0 854 854 854
[  166.130295][T12011] Node 1 Normal free:407376kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6112kB inactive_anon:0kB active_file:1304kB inactive_file:52140kB unevictable:3536kB writepending:120kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30096kB local_pcp:15984kB free_cma:0kB
[  166.141354][T12011] lowmem_reserve[]: 0 0 0 0 0
[  166.143696][T12011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  166.148530][T12011] Node 0 DMA32: 581*4kB (UM) 394*8kB (UME) 206*16kB (UME) 278*32kB (UME) 108*64kB (UME) 37*128kB (UME) 38*256kB (UME) 34*512kB (UME) 13*1024kB (UM) 1*2048kB (E) 47*4096kB (M) = 264324kB
[  166.155534][T12011] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  166.161293][T12011] Node 1 Normal: 350*4kB (UME) 177*8kB (UME) 205*16kB (UME) 252*32kB (UME) 146*64kB (UME) 35*128kB (UM) 10*256kB (UME) 6*512kB (M) 27*1024kB (UME) 9*2048kB (UM) 80*4096kB (UM) = 407376kB
[  166.168091][T12011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  166.171446][T12011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  166.174508][T12011] 41631 total pagecache pages
[  166.178073][T12011] 0 pages in swap cache
[  166.179796][T12011] Free swap  = 124996kB
[  166.181741][T12011] Total swap = 124996kB
[  166.183993][T12011] 786301 pages RAM
[  166.185285][T12011] 0 pages HighMem/MovableOnly
[  166.186825][T12011] 241078 pages reserved
[  166.188193][T12011] 0 pages cma reserved
[  166.963678][T12054] vlan2: entered promiscuous mode
[  166.965402][T12054] vlan2: entered allmulticast mode
[  166.967166][T12054] hsr_slave_1: entered allmulticast mode
[  167.268296][T12072] __nla_validate_parse: 5 callbacks suppressed
[  167.268306][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2636'.
[  167.551235][T12089] raw_sendmsg: syz.3.2645 forgot to set AF_INET. Fix it!
[  168.074014][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2662'.
[  168.102007][T12130] netlink: 'syz.4.2664': attribute type 10 has an invalid length.
[  168.159412][T12136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.429058][T12208] vlan0: entered promiscuous mode
[  169.547706][T12217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2701'.
[  169.921100][T12251] bridge0: port 1(bridge_slave_0) entered listening state
[  172.189019][T12385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.251186][T12385] syzkaller0: entered promiscuous mode
[  172.253149][T12385] syzkaller0: entered allmulticast mode
[  172.256804][T12385] tipc: Resetting bearer <eth:syzkaller0>
[  172.268196][T12383] tipc: Resetting bearer <eth:syzkaller0>
[  173.264093][ T5900] tipc: Node number set to 20905985
[  173.955839][T12383] tipc: Disabling bearer <eth:syzkaller0>
[  174.137381][T12449] netlink: 'syz.2.2795': attribute type 21 has an invalid length.
[  174.140317][T12449] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2795'.
[  174.145057][T12449] netlink: 'syz.2.2795': attribute type 4 has an invalid length.
[  174.148070][T12449] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2795'.
[  174.842043][   T33] audit: type=1800 audit(1752174699.989:3): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2812" name=14 dev="tmpfs" ino=1625 res=0 errno=0
[  175.194183][T12496] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  175.442174][T12510] bridge5: entered promiscuous mode
[  175.444495][T12510] bridge5: entered allmulticast mode
[  175.645234][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'.
[  175.694528][T12527] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2830'.
[  176.336447][T12581] netlink: 'syz.4.2855': attribute type 1 has an invalid length.
[  176.356711][T12581] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.358991][T12584] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2856'.
[  176.374063][T12581] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.376576][T12581] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  176.381300][T12581] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  176.417632][T12587] gretap1: entered promiscuous mode
[  176.426026][T12587] bond1: (slave gretap1): making interface the new active one
[  176.431016][T12587] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  176.836765][T12602] netlink: 'syz.2.2862': attribute type 1 has an invalid length.
[  176.840919][T12602] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2862'.
[  176.847536][T12602] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  177.158198][   T33] audit: type=1804 audit(1752174702.309:4): pid=12625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2872" name="memory.events" dev="tmpfs" ino=1741 res=1 errno=0
[  177.170172][   T33] audit: type=1800 audit(1752174702.309:5): pid=12625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2872" name="memory.events" dev="tmpfs" ino=1741 res=0 errno=0
[  177.341760][T12637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2878'.
[  177.503156][T12645] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2881'.
[  177.512409][T12645] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2881'.
[  177.585954][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'.
[  177.878121][T12671] netlink: 'syz.4.2894': attribute type 1 has an invalid length.
[  178.192182][T12687] nbd3: detected capacity change from 0 to 63
[  178.195549][T12693] block nbd3: NBD_DISCONNECT
[  178.199489][T12693] block nbd3: Disconnected due to user request.
[  178.204094][T12693] block nbd3: shutting down sockets
[  179.746097][T12798] netlink: 'syz.3.2955': attribute type 1 has an invalid length.
[  180.208949][T12845] __nla_validate_parse: 5 callbacks suppressed
[  180.208974][T12845] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2979'.
[  180.227388][T12845] batadv1: entered promiscuous mode
[  180.229097][T12845] batadv1: entered allmulticast mode
[  180.310891][T12857] netlink: 'syz.2.2984': attribute type 1 has an invalid length.
[  180.313581][T12857] netlink: 'syz.2.2984': attribute type 1 has an invalid length.
[  180.362402][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2983'.
[  180.406963][T12854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2979'.
[  180.834653][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2993'.
[  180.864437][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2993'.
[  181.000639][T12902] wireguard0: entered promiscuous mode
[  181.003109][T12902] wireguard0: entered allmulticast mode
[  181.072435][T12904] block nbd0: server does not support multiple connections per device.
[  181.079894][T12904] block nbd0: shutting down sockets
[  182.284244][T12996] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.287761][T12996] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.291255][T12996] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.294858][T12996] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.531100][T13008] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3036'.
[  182.535106][T13008] netlink: zone id is out of range
[  182.536810][T13008] netlink: zone id is out of range
[  182.538540][T13008] netlink: zone id is out of range
[  182.540390][T13008] netlink: zone id is out of range
[  182.545106][T13008] netlink: zone id is out of range
[  182.547191][T13008] netlink: zone id is out of range
[  182.548869][T13008] netlink: zone id is out of range
[  182.550543][T13008] netlink: zone id is out of range
[  182.554675][T13008] netlink: zone id is out of range
[  182.556661][T13008] netlink: zone id is out of range
[  182.930805][T13039] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3051'.
[  183.169822][T13059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.177219][T13059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.205809][T13064] 8021q: adding VLAN 0 to HW filter on device batadv1
[  183.216220][T13064] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  183.220019][T13064] team0: Failed to send options change via netlink (err -105)
[  183.223761][T13064] team0: Port device batadv1 added
[  183.269988][T13059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.275528][T13059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.358808][T13059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.362454][T13059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.458523][T13059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.463395][T13059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.526702][T13080] xt_CT: No such helper "snmp"
[  183.576644][T13059] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.579361][T13059] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.593913][T13059] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.596834][T13059] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.610396][T13059] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.613963][T13059] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.627429][T13059] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.630638][T13059] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.825295][T13103] veth1_to_team: entered allmulticast mode
[  184.038838][T13125] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  184.399264][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'.
[  184.523570][ T5218] Bluetooth: hci1: link tx timeout
[  184.525687][ T5218] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  185.466187][T13180] netlink: 'syz.2.3114': attribute type 10 has an invalid length.
[  185.484148][T13180] team0: Device veth0_vlan failed to register rx_handler
[  185.509532][T13180] tipc: Resetting bearer <eth:ipvlan1>
[  185.844981][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3126'.
[  185.985935][T13223] tipc: Can't bind to reserved service type 2
[  186.190675][T13241] netlink: 'syz.3.3141': attribute type 1 has an invalid length.
[  186.562252][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  187.891273][T13323] IPv6: NLM_F_REPLACE set, but no existing node found!
[  188.277660][T13333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3179'.
[  188.448644][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'.
[  188.491377][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3184'.
[  188.667490][T13351] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.671011][T13351] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.830445][T13354] xt_hashlimit: size too large, truncated to 1048576
[  188.841247][T13354] xt_hashlimit: max too large, truncated to 1048576
[  188.850964][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.861132][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.962863][T13351] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.965799][T13351] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.971821][T13351] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.982514][T13351] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.057649][T13351] gtp0: left promiscuous mode
[  189.060582][T13351] gtp0: left allmulticast mode
[  189.068120][T13351] gretap1: left promiscuous mode
[  189.071083][T13351] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.074313][T13351] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.076992][T13351] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.079764][T13351] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.835765][T13405] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3207'.
[  189.908284][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3209'.
[  190.324171][T13437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'.
[  190.327995][T13437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3222'.
[  190.427307][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3226'.
[  190.430868][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3226'.
[  190.699511][T13465] batadv_slave_0: entered promiscuous mode
[  190.701793][T13465] batadv_slave_0: entered allmulticast mode
[  191.038161][T13493] netlink: 'syz.3.3249': attribute type 11 has an invalid length.
[  191.189461][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3256'.
[  191.195778][ T5900] IPVS: starting estimator thread 0...
[  191.292121][T13508] IPVS: using max 37 ests per chain, 88800 per kthread
[  192.245800][T13552] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  192.350873][T13562] netlink: 270 bytes leftover after parsing attributes in process `syz.4.3283'.
[  192.515136][T13576] vlan2: entered promiscuous mode
[  192.517420][T13576] team0: entered promiscuous mode
[  192.519523][T13576] team_slave_0: entered promiscuous mode
[  192.523202][T13576] team_slave_1: entered promiscuous mode
[  192.528306][T13576] batadv1: entered promiscuous mode
[  192.886693][T13596] netlink: 'syz.4.3299': attribute type 1 has an invalid length.
[  193.461380][T13628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3314'.
[  193.465116][T13628] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3314'.
[  193.994669][T13661] netlink: 'syz.2.3329': attribute type 2 has an invalid length.
[  194.015659][T13661] : entered promiscuous mode
[  194.086678][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.351526][T13685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3341'.
[  194.481207][T13694] net_ratelimit: 74 callbacks suppressed
[  194.481220][T13694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.536667][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3347'.
[  195.160977][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3369'.
[  195.274746][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'.
[  195.379416][T13765] lo: entered allmulticast mode
[  195.383976][T13764] lo: left allmulticast mode
[  195.409276][T13767] vlan2: entered promiscuous mode
[  195.411434][T13767] dummy0: entered promiscuous mode
[  195.439017][T13769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.539077][T13777] netlink: 'syz.4.3386': attribute type 29 has an invalid length.
[  195.548744][T13777] netlink: 'syz.4.3386': attribute type 29 has an invalid length.
[  195.679860][T13789] Cannot find set identified by id 0 to match
[  195.886239][T13804] nbd: socks must be embedded in a SOCK_ITEM attr
[  195.888823][T13804] block nbd0: shutting down sockets
[  196.073851][T13825] xt_hashlimit: size too large, truncated to 1048576
[  196.509155][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3426'.
[  196.859589][T13875] syzkaller0: entered promiscuous mode
[  196.861870][T13875] syzkaller0: entered allmulticast mode
[  198.299895][ T5815] IPVS: starting estimator thread 0...
[  198.383980][T13886] IPVS: using max 62 ests per chain, 148800 per kthread
[  199.062707][T13948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3465'.
[  199.065503][T13948] netlink: 'syz.3.3465': attribute type 32 has an invalid length.
[  199.068194][T13948] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  199.163842][T13958] syzkaller0: entered allmulticast mode
[  199.191346][T13958] syzkaller0 (unregistering): left allmulticast mode
[  199.736332][T13998] netlink: 'syz.2.3482': attribute type 1 has an invalid length.
[  199.800750][T14005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.810437][T14005] syzkaller0: entered promiscuous mode
[  199.813250][T14005] syzkaller0: entered allmulticast mode
[  199.828963][T14005] tipc: Resetting bearer <eth:syzkaller0>
[  199.831866][T14004] tipc: Resetting bearer <eth:syzkaller0>
[  199.853071][T14004] tipc: Disabling bearer <eth:syzkaller0>
[  199.965154][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3489'.
[  200.104993][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3494'.
[  200.128483][T14027] Bluetooth: MGMT ver 1.23
[  200.264389][T14035] netlink: 'syz.2.3499': attribute type 2 has an invalid length.
[  200.273862][T14035] : entered promiscuous mode
[  201.923141][T14108] netlink: 'syz.2.3527': attribute type 18 has an invalid length.
[  202.263487][T14130] vxcan1 speed is unknown, defaulting to 1000
[  202.267832][T14130] vxcan1 speed is unknown, defaulting to 1000
[  202.275187][T14130] vxcan1 speed is unknown, defaulting to 1000
[  202.433398][T14130] infiniband syz2: set down
[  202.435284][T14130] infiniband syz2: added vxcan1
[  202.442900][ T5900] vxcan1 speed is unknown, defaulting to 1000
[  202.483696][T14130] RDS/IB: syz2: added
[  202.486209][T14130] smc: adding ib device syz2 with port count 1
[  202.488493][T14130] smc:    ib device syz2 port 1 has pnetid 
[  202.494962][T14130] vxcan1 speed is unknown, defaulting to 1000
[  202.500482][ T5900] vxcan1 speed is unknown, defaulting to 1000
[  202.671590][T14130] vxcan1 speed is unknown, defaulting to 1000
[  202.790908][T14130] vxcan1 speed is unknown, defaulting to 1000
[  202.974225][T14130] vxcan1 speed is unknown, defaulting to 1000
[  203.954608][T14197] netlink: 'syz.4.3570': attribute type 4 has an invalid length.
[  204.090799][T14210] dvmrp8: entered allmulticast mode
[  204.095335][T14209] dvmrp8: left allmulticast mode
[  205.116800][T14255] netlink: 'syz.2.3596': attribute type 1 has an invalid length.
[  205.859156][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'.
[  206.759229][T14345] vxcan1 speed is unknown, defaulting to 1000
[  207.512140][T14403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.039433][T14441] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3675'.
[  208.169382][T14449] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3683'.
[  208.966451][T14510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3711'.
[  209.182613][T14530] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  209.610342][T14568] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  209.747342][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3743'.
[  209.749986][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3743'.
[  209.966672][T14601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.970073][T14601] syzkaller0: entered promiscuous mode
[  209.974952][T14601] syzkaller0: entered allmulticast mode
[  209.987619][T14601] tipc: Resetting bearer <eth:syzkaller0>
[  209.991385][T14600] tipc: Resetting bearer <eth:syzkaller0>
[  210.006462][T14600] tipc: Disabling bearer <eth:syzkaller0>
[  210.185548][T14605] vxcan1 speed is unknown, defaulting to 1000
[  210.336075][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3759'.
[  210.339138][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'.
[  210.537320][T14630] netlink: 'syz.3.3766': attribute type 12 has an invalid length.
[  210.568316][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'.
[  211.279709][T14700] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3794'.
[  211.713791][T14725] vxcan1 speed is unknown, defaulting to 1000
[  213.546646][T14855] xt_hashlimit: size too large, truncated to 1048576
[  213.549083][T14855] xt_hashlimit: overflow, try lower: 3/0
[  213.839667][T14862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  213.894873][T14866] !: renamed from dummy0
[  214.097676][T14872] vxcan1 speed is unknown, defaulting to 1000
[  214.768462][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3879'.
[  214.885864][T14921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3882'.
[  214.888875][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3882'.
[  214.948129][T14926] xt_TCPMSS: Only works on TCP SYN packets
[  215.105124][T14942] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3890'.
[  215.152875][T14945] macvlan3: entered promiscuous mode
[  215.154980][T14945] macvlan3: entered allmulticast mode
[  215.239712][T14951] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  215.316315][T14957] netlink: 'syz.3.3896': attribute type 1 has an invalid length.
[  215.319028][T14957] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3896'.
[  215.368123][T14960] xfrm1: entered promiscuous mode
[  215.371669][T14960] xfrm1: entered allmulticast mode
[  215.421295][T14964] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3899'.
[  215.426422][T14964] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3899'.
[  215.429228][T14964] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3899'.
[  215.434942][T14964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3899'.
[  215.741723][T14984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.944377][T14998] netlink: 'syz.2.3914': attribute type 1 has an invalid length.
[  216.081149][T15012] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  216.552286][T15049] vxcan1 speed is unknown, defaulting to 1000
[  216.952044][T15073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.156379][T15080] netlink: 'syz.2.3950': attribute type 13 has an invalid length.
[  217.739716][T15114] __nla_validate_parse: 4 callbacks suppressed
[  217.739731][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'.
[  217.757013][T15114] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  217.759975][T15114] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  218.198682][T15139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.201457][T15139] IPv6: NLM_F_CREATE should be set when creating new route
[  218.204431][T15139] IPv6: NLM_F_CREATE should be set when creating new route
[  218.207159][T15139] IPv6: NLM_F_CREATE should be set when creating new route
[  218.210971][T15139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.377213][T15149] netlink: 'syz.4.3981': attribute type 2 has an invalid length.
[  218.380333][T15149] netlink: 5356 bytes leftover after parsing attributes in process `syz.4.3981'.
[  218.590932][T15168] netlink: 'syz.4.3990': attribute type 11 has an invalid length.
[  218.593705][T15168] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3990'.
[  218.625192][T15171] netlink: 'syz.4.3992': attribute type 1 has an invalid length.
[  218.750040][T15182] xt_bpf: check failed: parse error
[  219.430668][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'.
[  219.435648][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4017'.
[  219.438908][T15229] netlink: 'syz.2.4017': attribute type 18 has an invalid length.
[  219.606390][T15239] IPVS: length: 163 != 8
[  219.617831][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4020'.
[  219.778586][T15253] batadv_slave_1: entered promiscuous mode
[  219.783089][T15252] batadv_slave_1: left promiscuous mode
[  221.224884][T15338] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  221.878183][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4083'.
[  222.417756][T15398] netlink: 'syz.4.4094': attribute type 1 has an invalid length.
[  222.438020][T15398] 8021q: adding VLAN 0 to HW filter on device bond2
[  222.460481][T15398] bond2: (slave veth5): Enslaving as an active interface with a down link
[  222.469226][T15398] vlan2: entered allmulticast mode
[  222.470841][T15398] bond2: entered allmulticast mode
[  222.473352][T15398] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  223.335048][T15424] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  223.395738][T15424] tipc: Resetting bearer <eth:syzkaller0>
[  223.429831][T15423] tipc: Resetting bearer <eth:syzkaller0>
[  225.218486][T15423] tipc: Disabling bearer <eth:syzkaller0>
[  225.230023][T15444] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  225.230881][T15447] veth0_to_bond: entered allmulticast mode
[  225.340558][T15456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.347033][T15456] syzkaller0: entered promiscuous mode
[  225.349275][T15456] syzkaller0: entered allmulticast mode
[  225.375465][T15456] tipc: Resetting bearer <eth:syzkaller0>
[  225.386319][T15455] tipc: Resetting bearer <eth:syzkaller0>
[  225.406174][T15455] tipc: Disabling bearer <eth:syzkaller0>
[  225.515405][T15468] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  225.556987][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4127'.
[  225.571122][T15473] ieee802154 phy1 wpan1: encryption failed: -90
[  226.717216][T15516] vlan0: entered promiscuous mode
[  226.719784][T15516] gretap0: entered promiscuous mode
[  226.834806][T15527] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.4156'.
[  226.838659][T15527] openvswitch: netlink: Message has 5 unknown bytes.
[  227.582625][T15591] netlink: 'syz.3.4183': attribute type 25 has an invalid length.
[  227.906870][T15602] xt_TPROXY: Can be used only with -p tcp or -p udp
[  227.973655][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4189'.
[  227.986997][T15604] vlan0: entered promiscuous mode
[  227.988843][T15604] bridge0: entered promiscuous mode
[  228.425608][T15635] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4204'.
[  229.521792][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  229.525548][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  229.529365][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  229.532194][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  229.534649][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  229.558974][T15712] vxcan1 speed is unknown, defaulting to 1000
[  229.787643][T15712] chnl_net:caif_netlink_parms(): no params data found
[  229.901160][T15712] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.912326][T15712] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.915633][T15712] bridge_slave_0: entered allmulticast mode
[  229.919716][T15712] bridge_slave_0: entered promiscuous mode
[  229.928425][T15712] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.932235][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  229.934670][T15712] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.940259][T15712] bridge_slave_1: entered allmulticast mode
[  229.942791][T15733] xt_TCPMSS: Only works on TCP SYN packets
[  229.947717][T15712] bridge_slave_1: entered promiscuous mode
[  229.990105][T15712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.996208][T15712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.034164][T15712] team0: Port device team_slave_0 added
[  230.044273][T15712] team0: Port device team_slave_1 added
[  230.079934][T15712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.082527][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.093174][T15712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.106805][T15712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.109071][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.117402][T15712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.193837][T15712] hsr_slave_0: entered promiscuous mode
[  230.196338][T15712] hsr_slave_1: entered promiscuous mode
[  230.198533][T15712] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.201686][T15712] Cannot create hsr debugfs directory
[  230.216048][T15742] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  230.218931][T15742] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  230.221582][T15742] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  230.498776][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4253'.
[  230.594106][T15712] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  230.600579][T15712] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  230.615032][T15712] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  230.625308][T15712] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  230.684097][T15712] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.686961][T15712] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.766565][T15712] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.785638][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.811735][T15712] 8021q: adding VLAN 0 to HW filter on device team0
[  230.820574][T15774] smc: net device bond0 applied user defined pnetid SYZ0
[  230.843560][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.845802][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.864549][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.866745][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.066261][T15712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.287397][T15712] veth0_vlan: entered promiscuous mode
[  231.295672][T15712] veth1_vlan: entered promiscuous mode
[  231.339234][T15712] veth0_macvtap: entered promiscuous mode
[  231.344653][T15712] veth1_macvtap: entered promiscuous mode
[  231.360864][T15712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.369941][T15712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.389128][T15712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.395965][T15712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.401790][T15712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.405043][T15712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.512786][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.520123][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.550793][ T7683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.555925][ T7683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.602169][    C0] ------------[ cut here ]------------
[  231.604909][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci1
[  231.607647][    C0] WARNING: CPU: 0 PID: 15825 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  231.611310][    C0] Modules linked in:
[  231.613440][    C0] CPU: 0 UID: 0 PID: 15825 Comm: syz.3.4277 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  231.618563][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.621588][    C0] RIP: 0010:__queue_work+0xd62/0xfe0
[  231.623213][    C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  231.629317][    C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046
[  231.631349][    C0] RAX: 29bc64e0b85d9700 RBX: 0000000000000100 RCX: ffff88811885b980
[  231.633939][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  231.636381][    C0] RBP: 1ffff110058a2c38 R08: ffff88804b024293 R09: 1ffff11009604852
[  231.638811][    C0] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  231.641248][    C0] R13: ffff888118674988 R14: 0000000000000008 R15: ffff88802c516178
[  231.643735][    C0] FS:  00007f66fc78b6c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  231.646522][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  231.648534][    C0] CR2: 000000110c39e56c CR3: 000000000df38000 CR4: 00000000000006f0
[  231.651011][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  231.653843][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  231.656826][    C0] Call Trace:
[  231.658129][    C0]  <IRQ>
[  231.659323][    C0]  call_timer_fn+0x17e/0x5f0
[  231.660841][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  231.663425][    C0]  ? call_timer_fn+0xbe/0x5f0
[  231.665171][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  231.667118][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  231.668740][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  231.670587][    C0]  __run_timer_base+0x646/0x860
[  231.672115][    C0]  ? ktime_get+0x3e/0x1f0
[  231.673484][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  231.675109][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  231.677115][    C0]  run_timer_softirq+0xb7/0x180
[  231.678884][    C0]  handle_softirqs+0x286/0x870
[  231.680678][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  231.682392][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  231.684499][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  231.686226][    C0]  __irq_exit_rcu+0xca/0x1f0
[  231.687801][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  231.689869][    C0]  irq_exit_rcu+0x9/0x30
[  231.691615][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  231.693883][    C0]  </IRQ>
[  231.695112][    C0]  <TASK>
[  231.696159][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.698345][    C0] RIP: 0010:__tlb_remove_folio_pages_size+0xf5/0x5a0
[  231.700393][    C0] Code: 00 89 c0 4d 8d 2c c4 49 83 c5 10 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4b c8 14 00 <49> 89 5d 00 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 48 bb 00 00 00 00
[  231.707534][    C0] RSP: 0018:ffffc9000480f348 EFLAGS: 00000246
[  231.709940][    C0] RAX: 1ffff110074cba94 RBX: ffffea0000a60640 RCX: dffffc0000000000
[  231.713010][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  231.716314][    C0] RBP: 0000000000000001 R08: ffffea0000a60673 R09: 1ffffd400014c0ce
[  231.719363][    C0] R10: dffffc0000000000 R11: fffff9400014c0cf R12: ffff88803a65d000
[  231.722428][    C0] R13: ffff88803a65d4a0 R14: 1ffff92000901f11 R15: ffffc9000480f860
[  231.725400][    C0]  ? __tlb_remove_folio_pages_size+0x9f/0x5a0
[  231.727752][    C0]  ? page_table_check_clear+0x4f3/0x700
[  231.729908][    C0]  unmap_page_range+0x1f5e/0x41c0
[  231.731903][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  231.734027][    C0]  ? unmap_vmas+0x144/0x580
[  231.735839][    C0]  unmap_vmas+0x399/0x580
[  231.737543][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  231.739468][    C0]  exit_mmap+0x248/0xb50
[  231.741149][    C0]  ? uprobe_clear_state+0x20f/0x290
[  231.743171][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  231.745025][    C0]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  231.747219][    C0]  ? __pfx_exit_aio+0x10/0x10
[  231.749101][    C0]  ? uprobe_clear_state+0x274/0x290
[  231.751161][    C0]  __mmput+0x118/0x420
[  231.752745][    C0]  exit_mm+0x1da/0x2c0
[  231.754398][    C0]  ? __pfx_exit_mm+0x10/0x10
[  231.756189][    C0]  ? rcu_is_watching+0x15/0xb0
[  231.758060][    C0]  do_exit+0x648/0x22e0
[  231.759681][    C0]  ? do_raw_spin_lock+0x121/0x290
[  231.761646][    C0]  ? __pfx_do_exit+0x10/0x10
[  231.763451][    C0]  do_group_exit+0x21c/0x2d0
[  231.765254][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.767289][    C0]  get_signal+0x1286/0x1340
[  231.769128][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  231.771301][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  231.773754][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  231.775899][    C0]  exit_to_user_mode_loop+0x75/0x110
[  231.778035][    C0]  do_syscall_64+0x2bd/0x3b0
[  231.779804][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.781828][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.784197][    C0]  ? exc_page_fault+0x9f/0xf0
[  231.786120][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.788437][    C0] RIP: 0033:0x7f66fb98e929
[  231.790261][    C0] Code: Unable to access opcode bytes at 0x7f66fb98e8ff.
[  231.792982][    C0] RSP: 002b:00007f66fc78b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  231.796178][    C0] RAX: 0000000000000001 RBX: 00007f66fbbb5fa8 RCX: 00007f66fb98e929
[  231.799309][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66fbbb5fac
[  231.802352][    C0] RBP: 00007f66fbbb5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  231.805496][    C0] R10: 0000000000000014 R11: 0000000000000246 R12: 00007f66fbbb5fac
[  231.808618][    C0] R13: 0000000000000000 R14: 00007ffd43ca52a0 R15: 00007ffd43ca5388
[  231.811728][    C0]  </TASK>
[  231.812988][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  231.815812][    C0] CPU: 0 UID: 0 PID: 15825 Comm: syz.3.4277 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  231.820625][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.824638][    C0] Call Trace:
[  231.826035][    C0]  <IRQ>
[  231.827195][    C0]  dump_stack_lvl+0x99/0x250
[  231.829028][    C0]  ? __asan_memcpy+0x40/0x70
[  231.830816][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.832905][    C0]  ? __pfx__printk+0x10/0x10
[  231.834784][    C0]  panic+0x2db/0x790
[  231.836363][    C0]  ? __pfx_panic+0x10/0x10
[  231.838174][    C0]  ? show_trace_log_lvl+0x4fb/0x550
[  231.840272][    C0]  __warn+0x31b/0x4b0
[  231.841883][    C0]  ? __queue_work+0xd62/0xfe0
[  231.843778][    C0]  ? __queue_work+0xd62/0xfe0
[  231.845650][    C0]  report_bug+0x2be/0x4f0
[  231.847493][    C0]  ? __queue_work+0xd62/0xfe0
[  231.849277][    C0]  ? __queue_work+0xd62/0xfe0
[  231.850810][    C0]  ? __queue_work+0xd64/0xfe0
[  231.852334][    C0]  handle_bug+0x84/0x160
[  231.853706][    C0]  exc_invalid_op+0x1a/0x50
[  231.855176][    C0]  asm_exc_invalid_op+0x1a/0x20
[  231.856791][    C0] RIP: 0010:__queue_work+0xd62/0xfe0
[  231.858472][    C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  231.864264][    C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046
[  231.866188][    C0] RAX: 29bc64e0b85d9700 RBX: 0000000000000100 RCX: ffff88811885b980
[  231.868576][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  231.871153][    C0] RBP: 1ffff110058a2c38 R08: ffff88804b024293 R09: 1ffff11009604852
[  231.873682][    C0] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  231.876182][    C0] R13: ffff888118674988 R14: 0000000000000008 R15: ffff88802c516178
[  231.878692][    C0]  ? __queue_work+0xd61/0xfe0
[  231.880231][    C0]  call_timer_fn+0x17e/0x5f0
[  231.881855][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  231.883632][    C0]  ? call_timer_fn+0xbe/0x5f0
[  231.885056][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  231.886669][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  231.888252][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  231.890124][    C0]  __run_timer_base+0x646/0x860
[  231.891806][    C0]  ? ktime_get+0x3e/0x1f0
[  231.893254][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  231.895004][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  231.896992][    C0]  run_timer_softirq+0xb7/0x180
[  231.898536][    C0]  handle_softirqs+0x286/0x870
[  231.900372][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  231.901896][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  231.903573][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  231.905275][    C0]  __irq_exit_rcu+0xca/0x1f0
[  231.906922][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  231.908850][    C0]  irq_exit_rcu+0x9/0x30
[  231.910184][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  231.912041][    C0]  </IRQ>
[  231.913098][    C0]  <TASK>
[  231.914296][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.916243][    C0] RIP: 0010:__tlb_remove_folio_pages_size+0xf5/0x5a0
[  231.918355][    C0] Code: 00 89 c0 4d 8d 2c c4 49 83 c5 10 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4b c8 14 00 <49> 89 5d 00 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 48 bb 00 00 00 00
[  231.925073][    C0] RSP: 0018:ffffc9000480f348 EFLAGS: 00000246
[  231.927440][    C0] RAX: 1ffff110074cba94 RBX: ffffea0000a60640 RCX: dffffc0000000000
[  231.930643][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  231.933712][    C0] RBP: 0000000000000001 R08: ffffea0000a60673 R09: 1ffffd400014c0ce
[  231.936891][    C0] R10: dffffc0000000000 R11: fffff9400014c0cf R12: ffff88803a65d000
[  231.940138][    C0] R13: ffff88803a65d4a0 R14: 1ffff92000901f11 R15: ffffc9000480f860
[  231.943312][    C0]  ? __tlb_remove_folio_pages_size+0x9f/0x5a0
[  231.945748][    C0]  ? page_table_check_clear+0x4f3/0x700
[  231.947981][    C0]  unmap_page_range+0x1f5e/0x41c0
[  231.950063][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  231.952297][    C0]  ? unmap_vmas+0x144/0x580
[  231.954202][    C0]  unmap_vmas+0x399/0x580
[  231.956087][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  231.958159][    C0]  exit_mmap+0x248/0xb50
[  231.959903][    C0]  ? uprobe_clear_state+0x20f/0x290
[  231.962039][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  231.964095][    C0]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  231.966582][    C0]  ? __pfx_exit_aio+0x10/0x10
[  231.968594][    C0]  ? uprobe_clear_state+0x274/0x290
[  231.970983][    C0]  __mmput+0x118/0x420
[  231.972722][    C0]  exit_mm+0x1da/0x2c0
[  231.974511][    C0]  ? __pfx_exit_mm+0x10/0x10
[  231.976453][    C0]  ? rcu_is_watching+0x15/0xb0
[  231.978396][    C0]  do_exit+0x648/0x22e0
[  231.980104][    C0]  ? do_raw_spin_lock+0x121/0x290
[  231.982118][    C0]  ? __pfx_do_exit+0x10/0x10
[  231.984123][    C0]  do_group_exit+0x21c/0x2d0
[  231.985995][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.988171][    C0]  get_signal+0x1286/0x1340
[  231.990055][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  231.992319][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  231.994805][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  231.996996][    C0]  exit_to_user_mode_loop+0x75/0x110
[  231.999066][    C0]  do_syscall_64+0x2bd/0x3b0
[  232.000973][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.003104][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.005582][    C0]  ? exc_page_fault+0x9f/0xf0
[  232.007646][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.010050][    C0] RIP: 0033:0x7f66fb98e929
[  232.011732][    C0] Code: Unable to access opcode bytes at 0x7f66fb98e8ff.
[  232.014237][    C0] RSP: 002b:00007f66fc78b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  232.017657][    C0] RAX: 0000000000000001 RBX: 00007f66fbbb5fa8 RCX: 00007f66fb98e929
[  232.022048][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66fbbb5fac
[  232.025386][    C0] RBP: 00007f66fbbb5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  232.028687][    C0] R10: 0000000000000014 R11: 0000000000000246 R12: 00007f66fbbb5fac
[  232.031796][    C0] R13: 0000000000000000 R14: 00007ffd43ca52a0 R15: 00007ffd43ca5388
[  232.034996][    C0]  </TASK>
[  232.036902][    C0] Kernel Offset: disabled
[  232.038676][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:12:36  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000072b0
R8 =ffff888107ce0237 R9 =1ffff11020f9c046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78e2 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f66fc78b6c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c39e56c CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=040fdfdbfc0070bd 2c00010067df1000
XMM02=9500000006000000 0000000005000036 XMM03=1800000000000000 0000000000000005
XMM04=00007f66fc6ed100 00007f66fbb85440 XMM05=00007f66fbb85458 00007f66fbb854a0
XMM06=00007f66fbb85498 00007f66fbb85490 XMM07=00007f66fbb85488 00007f66fbb85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f66fba11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88813663b1c0 RCX=ffff8880297bd640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002eef700 RSP=ffffc90002eef5a0
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e90e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f711a6e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f7119b856a3 00007f7119b856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055556dfc9165 000055556dfc8f70
XMM06=000055556dfbed94 000055556dfbed90 XMM07=8004010000000806 06010498bbbbbbbb
XMM08=bbbb01ffffffffff fffffff308069003 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
