last executing test programs:

690.944427ms ago: executing program 2 (id=5004):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async, rerun: 64)
recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1}, 0x20) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
connect$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000e98ca0ba5ba6f55fbe8dd79730f468d0715a1fe36588abfe5d5f0798f55990b1f3200013588be9ff501784f84ed9abf850caa3199f", @ANYRES16=r6, @ANYBLOB="010026bd7000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x40000) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x20, 0x9eaf, 0x9, 0x4, 0x800, r2, 0x7, '\x00', r5, r3, 0x2, 0x4, 0x5}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80)

685.030733ms ago: executing program 2 (id=5006):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x800000000000000, 0x0, 0x4010}, 0x4040004)

684.076194ms ago: executing program 2 (id=5008):
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYBLOB="3045ae00a2078ddd4190bbe0eb40ef27be5cdf29e39be7301210bafbb74b37c51dba092a522cb893674a3e50b464e740c52bc47e5565c24c2d128863e5e0a70503ce3b7bc2bbf9d9882f067e9873589249b741"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
connect$inet6(r2, &(0x7f0000000840)={0xa, 0x4e23, 0x8, @mcast2, 0x801}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

611.196996ms ago: executing program 2 (id=5009):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="070600000000000000002d00000008002f00feffffff0a0001007770616e3000000005002b00830000000c0005000203aaaaaaaaaaaa05002e00"], 0x44}, 0x1, 0x0, 0x0, 0x4888}, 0x20000804)

610.385895ms ago: executing program 2 (id=5011):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00002def59"], 0xfe33)

550.889978ms ago: executing program 2 (id=5012):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8)
socket$alg(0x26, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_USER_TTY(r1, 0x0, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x180d4, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r2)

459.617478ms ago: executing program 1 (id=5016):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r0 = socket$igmp6(0xa, 0x3, 0x3a)
unshare(0x20000400) (async)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0xa, 0x2) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async)
write$cgroup_subtree(r5, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x3e, &(0x7f0000000080)=0x1, 0x4) (async)
r10 = epoll_create(0x5)
epoll_wait(r10, &(0x7f0000000100), 0x0, 0x4) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001, 0x0)
bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r11, @ANYBLOB="080003"], 0x44}}, 0x0)

357.706626ms ago: executing program 1 (id=5019):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) (async, rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64)
recvfrom$unix(r1, 0x0, 0x0, 0x10000, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000010000000000000000000000ed0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048840}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x10, 0x145, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @fd}]}]}, @typed={0x4, 0x2}]}, 0x28}}, 0x4040040)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd700000ff00000a108000000000080400010014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400}) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newroute={0x15c, 0x18, 0x400, 0x70bd29, 0x25dfdbff, {0xa, 0x390adc16449f84cb, 0x24, 0xcf, 0x0, 0x2, 0xfd, 0x6, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x0, 0x8, r7}}, @RTA_PREF={0x5, 0x14, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x8c, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "c4566ec4a7eb78e1cee17ca6832dc957426e87f109f235383bb6cc001100a9d92034603e22a4a626e78fd012ce5b3fa880410ec04da60000000000000001b2036fa21421167e806bad89d728fc95b7074a7fc53dac8db41300f7e4a681fdd4448771d16457a08c0e53f0d481efde35314f356df487231abc3975f0c77c541821"}}}}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_METRICS={0x78, 0x8, 0x0, 0x1, "55c740c1d7372b57e0494c4006f47b04d25d74b35122d8ce1e217db4cf2f304b18c8b3fef2b0c81829093bf5f2d0dd48bcb9f19c37c74d2b51d1479deb12c007a06c6f7015a175e6c9d089c235c145d63a8f1210c30a3729637dbb5d997ca98cd0ca5a0d48fde1460cc4b27a6382fde0c347892c"}, @RTA_PREF={0x5, 0x14, 0x9}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0x2, r11}}, @RTA_MARK={0x8, 0x10, 0x101}]}, 0x15c}}, 0xc4818) (async)
r12 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})

209.676141ms ago: executing program 0 (id=5021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0}) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[], 0x8)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf250100000000000000014100000008001700"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x44) (async)
connect$can_j1939(r6, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x3}, 0xfd}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000010001c00128009000100766c616e000000000c00028006000100fe0f000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="6ceea844d3e260adfc3680bb695f742c9e4abbd452c887745bf7d6d8540f89e53578bbcb1862e12a3b15ab9901b08ba54a698f0fb8e7a5071d3420247d00fa226a8241d0f19d6da8799fbbd9588d5727"], 0x4c}, 0x1, 0xba01}, 0x0)

208.816196ms ago: executing program 1 (id=5022):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8)
socket$kcm(0x29, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

208.54868ms ago: executing program 0 (id=5023):
r0 = socket$igmp6(0xa, 0x3, 0x2)
pselect6(0x40, &(0x7f0000000000)={0x9, 0xd, 0x2, 0x7fff, 0x6, 0x1ff, 0xffffffffffffffff, 0x1d90f2d}, &(0x7f0000000040)={0x80000000, 0xb7, 0x14, 0x3, 0x3bf, 0x100000001, 0xbbd, 0xc}, &(0x7f0000000080)={0x8078, 0x3, 0x5, 0x0, 0x2, 0xff, 0xa643, 0xfe}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x6}, {0x0, 0x5, 0x2}, {0xffffffffffffffff, 0x2, 0x2}, 0x401, 0xe1}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0xfff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000276e305af1f495dc7ef67c944c68fc340000feffffff0000000000000000000000000000000000000000000000000000100000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x148)

138.485326ms ago: executing program 0 (id=5024):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3}]}, {0x0, [0x0, 0x2e, 0x5f, 0x1e]}}, 0x0, 0x2e}, 0x28)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3d, 0x16, &(0x7f0000000f00)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x10}, 0x94)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
close(r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet(0x2, 0x80001, 0x84)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000850000007500000085000000050000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r8}, 0x10)
listen(r7, 0x3)
close(0x4)
ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000100)={0x17fd, 0x20, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]})
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000050015000000000033a7a51c3243ac00050001002700000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500008b9615e49f3cbcb4e97970ffe60b8799b4f11f9f5e"], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x1a, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="92f6d18e0a362d9f9500f189b888de81"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x880)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

138.100243ms ago: executing program 1 (id=5025):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe(&(0x7f0000019480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001600)=[{&(0x7f0000001c40)="407d47ffd84cce4d", 0x8}], 0x1, 0x1)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6)
write(0xffffffffffffffff, &(0x7f0000000100)="3b000000010001", 0x7)

137.926979ms ago: executing program 0 (id=5026):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffe16, &(0x7f0000000140)="06f7", 0x0}, 0xffffffffffffff3a)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$FICLONE(r1, 0x40049409, r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x439, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000)
r4 = socket(0x28, 0x805, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

70.471987ms ago: executing program 1 (id=5027):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c000180"], 0x28}}, 0x0)
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000280)={'b', ' *:* ', 'rwm\x00'}, 0xa)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00 ', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="040019000800150001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
socket$inet(0x2, 0x6, 0x77)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x32, 0x11, 0xf, {0x12, @ether_spec={@empty, @random="321b287033fb", 0x4aa2}, {0x0, @remote, 0x5, 0x26a, [0x0, 0x7fffffff]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0x800, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x5, 0xfffb, [0x7, 0x8001]}, 0x7, 0x2b9}, 0x6, [0x200, 0x0, 0x7, 0x6, 0x5, 0x5]}})
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)

66.931284ms ago: executing program 0 (id=5028):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000d60000100000000000000000850000006e00000095000000000000009a4e16ff3a1833bf483b104857086a014df480dcadddb568a30a6acb37e640825ee6d0ba0da2455f602399c1b75ac3d69a19e24df209f9ad3b8d42388e6c8cea39fd2d22174aea95ec7a7c82f0738ff8d613fc7903c88b2d86b6ff177b2d557461360ebb50baa9bd09d818ae8dde9470d1c54d2e4246c769ee9ea87a2db07c83421a00"/174], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

405.114µs ago: executing program 0 (id=5029):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)="44a7691e28ee30dee9b853e0291afd78255c1b89669208b43cba7d7cc1295595419bc270019368b4fa391a471b802814343e526430535832"}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)="44a7691e28ee30dee9b853e0291afd78255c1b89669208b43cba7d7cc1295595419bc270019368b4fa391a471b802814343e526430535832"}, 0x20)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xa6, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @void, {@ipv4={0x800, @icmp={{0x13, 0x4, 0x0, 0x1c, 0x98, 0x64, 0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}, {[@lsrr={0x83, 0x7, 0xac, [@remote]}, @lsrr={0x83, 0xb, 0x79, [@dev={0xac, 0x14, 0x14, 0x1b}, @empty]}, @timestamp_prespec={0x44, 0x24, 0xcb, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfffffffe}, {@local, 0x47}, {@rand_addr=0x64010101, 0x7}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x10, 0x4, 0x2, 0x6, 0x6, 0x68, 0x400, 0x5, 0x1d, 0x5, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@timestamp_prespec={0x44, 0x2c, 0x78, 0x3, 0x2, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x8}, {@private=0xa010101, 0x81}, {@empty, 0x401}]}]}}, "29a0b14c"}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0xc14, 0x3c, 0x4c6, 0xa8b]})
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x1, 0x0) (async)
splice(r6, 0x0, r5, 0x0, 0x1, 0x0)
close(r7)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\a\a'], 0x30}, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0xffffffff, 0x1}}, 0x2e) (async)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0xffffffff, 0x1}}, 0x2e)
getsockopt(r8, 0x111, 0x2, 0x0, &(0x7f0000000080)) (async)
getsockopt(r8, 0x111, 0x2, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r11, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000540), &(0x7f0000000480)=0x8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000003"], 0x114}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r13}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r13}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

0s ago: executing program 1 (id=5030):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6(0xa, 0x400000000001, 0x0) (async)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300)="85", 0x1, 0x2000081, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000000101040000000000000080020000002400018014000180080001"], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000aac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
close(r3) (async)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)=""/73, 0x49}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}, 0x45f}], 0x2, 0x41, 0x0)
unshare(0x20000400)
ppoll(&(0x7f0000001080), 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

r this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.616023][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.642597][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.662800][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.665862][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.677361][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.683996][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.692228][ T5826] hsr_slave_0: entered promiscuous mode
[   55.694735][ T5826] hsr_slave_1: entered promiscuous mode
[   55.723325][ T5832] team0: Port device team_slave_0 added
[   55.740135][ T5832] team0: Port device team_slave_1 added
[   55.796778][ T5823] hsr_slave_0: entered promiscuous mode
[   55.800496][ T5823] hsr_slave_1: entered promiscuous mode
[   55.803415][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.806943][ T5823] Cannot create hsr debugfs directory
[   55.815205][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.818909][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.830367][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.844056][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.846943][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.857125][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.970520][ T5832] hsr_slave_0: entered promiscuous mode
[   55.973197][ T5832] hsr_slave_1: entered promiscuous mode
[   55.975363][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.979277][ T5832] Cannot create hsr debugfs directory
[   56.100879][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.108899][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.145857][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.152362][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.192731][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.198709][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.208912][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.224778][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.285617][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.304120][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.314745][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.326406][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.380562][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.404034][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.425449][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.428392][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.444506][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.447601][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.472184][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.521725][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.533406][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   56.545192][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.561750][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.564846][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.573611][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.576753][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.599509][ T2257] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.601914][ T2257] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.605550][ T2257] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.607931][ T2257] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.704014][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.754198][ T5826] veth0_vlan: entered promiscuous mode
[   56.764458][ T5826] veth1_vlan: entered promiscuous mode
[   56.791651][ T5826] veth0_macvtap: entered promiscuous mode
[   56.796758][ T5826] veth1_macvtap: entered promiscuous mode
[   56.810052][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.819009][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.834197][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.836972][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.848179][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.850956][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.895115][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.907145][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.908806][ T5827] Bluetooth: hci1: command tx timeout
[   56.914258][ T5218] Bluetooth: hci0: command tx timeout
[   56.972732][ T2257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.975460][ T2257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.986187][ T5832] veth0_vlan: entered promiscuous mode
[   56.996529][ T5823] veth0_vlan: entered promiscuous mode
[   56.999366][ T5827] Bluetooth: hci2: command tx timeout
[   57.018905][ T5823] veth1_vlan: entered promiscuous mode
[   57.024500][ T5832] veth1_vlan: entered promiscuous mode
[   57.029994][ T2257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.036495][ T2257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.066598][ T5823] veth0_macvtap: entered promiscuous mode
[   57.074445][ T5823] veth1_macvtap: entered promiscuous mode
[   57.092276][ T5832] veth0_macvtap: entered promiscuous mode
[   57.105569][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.111752][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.125234][ T5832] veth1_macvtap: entered promiscuous mode
[   57.131584][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.144747][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.158326][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.162285][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.165755][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.210841][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.240123][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.250970][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.254743][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.272907][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.276634][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.392118][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.395331][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.453996][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.458086][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.480923][ T2257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.483414][ T2257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.524041][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.540378][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.713071][ T5908] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   57.716275][ T5908] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   57.815525][ T5910] raw_sendmsg: syz.2.10 forgot to set AF_INET. Fix it!
[   57.954900][ T5923] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.13'.
[   57.957833][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.126080][ T5934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.294002][ T5944] tipc: Invalid UDP bearer configuration
[   58.294048][ T5944] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   58.484266][ T5863] IPVS: starting estimator thread 0...
[   58.486266][ T5950] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   58.578233][ T5952] IPVS: using max 78 ests per chain, 187200 per kthread
[   58.983003][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.998250][ T5218] Bluetooth: hci0: command tx timeout
[   59.000680][ T5827] Bluetooth: hci1: command tx timeout
[   59.067869][ T5827] Bluetooth: hci2: command tx timeout
[   59.071077][ T5976] IPv6: NLM_F_REPLACE set, but no existing node found!
[   59.146076][ T5987] netlink: 'syz.0.41': attribute type 2 has an invalid length.
[   59.156302][ T5987] : entered promiscuous mode
[   59.351113][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   59.461043][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'.
[   60.408245][ T6021] netlink: 'syz.0.57': attribute type 13 has an invalid length.
[   60.593567][ T6038] sctp: [Deprecated]: syz.0.62 (pid 6038) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.593567][ T6038] Use struct sctp_sack_info instead
[   60.692856][ T6044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.66'.
[   60.880019][ T6060] nbd: must specify at least one socket
[   60.885936][ T6062] trusted_key: syz.1.75 sent an empty control message without MSG_MORE.
[   61.041890][ T6075] netlink: 104 bytes leftover after parsing attributes in process `syz.1.82'.
[   61.067885][ T5218] Bluetooth: hci0: command tx timeout
[   61.070115][ T5827] Bluetooth: hci1: command tx timeout
[   61.157293][ T5827] Bluetooth: hci2: command tx timeout
[   62.015081][ T6100] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   62.015388][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'.
[   62.085664][ T6108] warning: `syz.0.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.088918][ T6109] syz.1.96 uses obsolete (PF_INET,SOCK_PACKET)
[   62.304728][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   62.999301][ T6151] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   63.159604][ T5827] Bluetooth: hci1: command tx timeout
[   63.162516][ T5218] Bluetooth: hci0: command tx timeout
[   63.176878][   T10] cfg80211: failed to load regulatory.db
[   63.237790][ T5218] Bluetooth: hci2: command tx timeout
[   63.814159][ T6178] macvlan1: entered promiscuous mode
[   63.817096][ T6178] ipvlan0: entered promiscuous mode
[   63.821768][ T6178] ipvlan0: left promiscuous mode
[   63.837327][ T6178] macvlan1: left promiscuous mode
[   63.974194][ T6184] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   64.092286][ T6191] netlink: 100 bytes leftover after parsing attributes in process `syz.0.132'.
[   64.534096][ T6228] xt_CT: No such helper "snmp"
[   65.343552][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   65.915215][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.957443][ T6302] netlink: 'syz.2.182': attribute type 2 has an invalid length.
[   66.202613][ T6326] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   66.499614][ T6344] xt_CT: No such helper "snmp"
[   67.428978][ T6405] netlink: 96 bytes leftover after parsing attributes in process `syz.1.227'.
[   67.550039][ T6415] gtp0: entered promiscuous mode
[   67.564584][ T6415] gtp0: entered allmulticast mode
[   67.750525][ T6433] netlink: 'syz.1.242': attribute type 39 has an invalid length.
[   68.379484][ T6487] netlink: 316 bytes leftover after parsing attributes in process `syz.2.266'.
[   68.452395][ T6495] xt_hashlimit: size too large, truncated to 1048576
[   68.516763][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'.
[   68.745726][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.015133][ T6537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.286'.
[   69.123333][ T6546] Zero length message leads to an empty skb
[   69.126290][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'.
[   69.273957][ T6555] netlink: 'syz.0.295': attribute type 5 has an invalid length.
[   69.781430][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.311'.
[   69.984890][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[   70.432347][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   70.454922][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   70.621198][ T6625] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   70.854977][ T6643] netlink: 'syz.1.330': attribute type 21 has an invalid length.
[   70.858321][ T6643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.330'.
[   70.960536][ T6651] netlink: 'syz.2.332': attribute type 29 has an invalid length.
[   71.081850][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'.
[   71.157417][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160072][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.802890][ T6713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.357'.
[   72.323996][ T6721] netlink: 'syz.0.357': attribute type 4 has an invalid length.
[   73.142618][ T6774] netlink: 'syz.2.377': attribute type 5 has an invalid length.
[   73.201610][ T6781] ip6gre1: entered allmulticast mode
[   73.283567][ T6791] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   73.285897][ T6791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.363580][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'.
[   73.366266][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'.
[   74.272419][ T6897] netlink: 'syz.0.433': attribute type 13 has an invalid length.
[   74.275159][ T6897] netlink: 'syz.0.433': attribute type 17 has an invalid length.
[   74.418751][ T6897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.462147][ T6892] __nla_validate_parse: 2 callbacks suppressed
[   74.462157][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'.
[   74.475965][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'.
[   74.480845][ T6910] netlink: 'syz.1.438': attribute type 2 has an invalid length.
[   74.484875][ T6892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.519700][ T6914] smc: net device bond0 applied user defined pnetid SYZ2
[   74.541247][ T6892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.605583][ T6892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.683033][ T6928] netlink: 76 bytes leftover after parsing attributes in process `syz.1.446'.
[   74.768837][ T6933] netlink: 68 bytes leftover after parsing attributes in process `syz.1.448'.
[   74.777576][ T6933] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[   74.971459][ T6945] netlink: 'syz.1.454': attribute type 2 has an invalid length.
[   75.243765][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.464'.
[   75.248322][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.464'.
[   75.254189][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[   75.260398][ T6968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   75.264707][ T6968] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   75.355350][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[   76.295433][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880309c5c00: rx timeout, send abort
[   76.798632][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880309c5c00: abort rx timeout. Force session deactivation
[   76.963217][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'.
[   77.309858][ T7040] sctp: [Deprecated]: syz.2.495 (pid 7040) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.309858][ T7040] Use struct sctp_sack_info instead
[   78.374006][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[   78.404157][ T7092] netlink: 'syz.2.521': attribute type 1 has an invalid length.
[   79.067152][ T7131] Illegal XDP return value 2328607998 on prog  (id 90) dev N/A, expect packet loss!
[   79.192532][ T7135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   79.319648][ T7148] tipc: Started in network mode
[   79.321340][ T7148] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   79.325401][ T7148] tipc: Enabled bearer <eth:vlan0>, priority 18
[   79.419725][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.424042][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.510478][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.516184][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.544437][ T7152] tipc: Resetting bearer <eth:vlan0>
[   79.571694][ T7152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.574671][ T7152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.579021][ T7152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.581939][ T7152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.632771][ T7164] tipc: Started in network mode
[   79.635785][ T7164] tipc: Node identity e6a8542c8694, cluster identity 4711
[   79.639993][ T7164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.658728][ T7169] syzkaller0: entered promiscuous mode
[   79.660500][ T7169] syzkaller0: entered allmulticast mode
[   79.691152][ T7157] tipc: Resetting bearer <eth:syzkaller0>
[   79.699343][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[   79.714011][ T7156] tipc: Disabling bearer <eth:syzkaller0>
[   79.824963][ T7187] vlan3: entered allmulticast mode
[   79.826636][ T7187] macvlan0: entered allmulticast mode
[   79.828486][ T7187] veth1_vlan: entered allmulticast mode
[   79.990742][ T7201] dvmrp8: entered allmulticast mode
[   79.993272][ T7200] dvmrp8: left allmulticast mode
[   80.035029][ T7206] Bluetooth: MGMT ver 1.23
[   80.111503][ T7217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'.
[   80.121137][ T7206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.134149][ T7217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'.
[   80.175978][ T7206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.249182][ T7206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.309787][ T7206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.385867][ T7206] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.398465][ T5835] tipc: Node number set to 10005162
[   80.406375][ T7206] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.431274][ T7206] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.445940][ T7206] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.556291][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'.
[   80.560263][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.563345][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.571848][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.574887][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.359274][ T7256] netlink: 'syz.2.584': attribute type 1 has an invalid length.
[   81.442284][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'.
[   81.846701][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[   82.096979][ T7306] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   82.101692][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'.
[   82.158321][ T7307] netlink: 23932 bytes leftover after parsing attributes in process `syz.2.608'.
[   82.494889][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'.
[   82.599617][ T7341] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   82.602521][ T7341] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[   82.959264][ T7364] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[   82.995826][ T7364] bond1: (slave gretap2): making interface the new active one
[   83.000424][ T7364] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   83.144635][ T7370] netlink: 36 bytes leftover after parsing attributes in process `syz.2.634'.
[   83.438296][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[   83.492896][ T7388] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   83.496017][ T7388] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   83.502841][ T7388] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   84.646794][ T7412] vlan2: entered allmulticast mode
[   84.649728][ T7412] bond2: entered allmulticast mode
[   85.256102][ T7437] __nla_validate_parse: 1 callbacks suppressed
[   85.256112][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'.
[   85.276986][ T7437] dummy0: entered promiscuous mode
[   85.280961][ T7437] dummy0: left promiscuous mode
[   86.162440][ T7507] netlink: 724 bytes leftover after parsing attributes in process `syz.1.695'.
[   86.165554][ T7507] netlink: 83 bytes leftover after parsing attributes in process `syz.1.695'.
[   86.370385][ T7524] netlink: 'syz.2.703': attribute type 3 has an invalid length.
[   86.799993][ T7560] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   87.262898][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.732'.
[   87.286444][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'.
[   87.397441][ T7605] veth0_to_team: entered promiscuous mode
[   87.399521][ T7605] veth0_to_team: entered allmulticast mode
[   87.920980][ T7652] netlink: 56 bytes leftover after parsing attributes in process `syz.1.755'.
[   87.924272][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[   88.329623][ T7681] openvswitch: netlink: IP tunnel dst address not specified
[   88.477946][ T7697] netlink: 17 bytes leftover after parsing attributes in process `syz.2.777'.
[   88.481077][ T7697] netlink: zone id is out of range
[   88.483025][ T7697] netlink: zone id is out of range
[   88.493369][ T7697] netlink: zone id is out of range
[   88.495154][ T7697] netlink: zone id is out of range
[   88.496824][ T7697] netlink: zone id is out of range
[   88.505681][ T7697] netlink: zone id is out of range
[   88.509622][ T7697] netlink: zone id is out of range
[   88.511924][ T7697] netlink: zone id is out of range
[   88.514160][ T7697] netlink: zone id is out of range
[   88.523205][ T7699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.525818][ T7699] IPv6: NLM_F_CREATE should be set when creating new route
[   88.528258][ T7699] IPv6: NLM_F_CREATE should be set when creating new route
[   88.815111][ T7721] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[   88.818239][ T7721] netlink: 236 bytes leftover after parsing attributes in process `syz.0.789'.
[   89.825298][ T7805] @: renamed from bond_slave_0
[   90.119014][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'.
[   90.350835][ T7849] --map-set only usable from mangle table
[   91.648661][ T7884] nbd0: detected capacity change from 0 to 63
[   91.665321][   T55] block nbd0: Receive control failed (result -32)
[   91.676822][ T7323] block nbd0: Dead connection, failed to find a fallback
[   91.687572][ T7323] block nbd0: shutting down sockets
[   91.689452][ T7323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.692467][ T7323] Buffer I/O error on dev nbd0, logical block 0, async page read
[   91.694954][ T7323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.699552][ T7323] Buffer I/O error on dev nbd0, logical block 1, async page read
[   91.702053][ T7323] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.704797][ T7323] Buffer I/O error on dev nbd0, logical block 2, async page read
[   91.707736][ T5218] Bluetooth: hci2: command tx timeout
[   91.710633][ T7323] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.720352][ T7323] Buffer I/O error on dev nbd0, logical block 3, async page read
[   91.723788][ T7323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.737331][ T7323] Buffer I/O error on dev nbd0, logical block 0, async page read
[   91.740727][ T7323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.744354][ T7323] Buffer I/O error on dev nbd0, logical block 1, async page read
[   91.764729][ T7323] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.779041][ T7323] Buffer I/O error on dev nbd0, logical block 2, async page read
[   91.782248][ T7323] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.785943][ T7323] Buffer I/O error on dev nbd0, logical block 3, async page read
[   91.793424][ T7323] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.797115][ T7323] Buffer I/O error on dev nbd0, logical block 0, async page read
[   91.805565][ T7323] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.811496][ T7323] Buffer I/O error on dev nbd0, logical block 1, async page read
[   91.819083][ T7323] ldm_validate_partition_table(): Disk read failed.
[   91.823921][ T7323] Dev nbd0: unable to read RDB block 0
[   91.827714][ T7323]  nbd0: unable to read partition table
[   91.847352][ T7323] ldm_validate_partition_table(): Disk read failed.
[   91.851546][ T7323] Dev nbd0: unable to read RDB block 0
[   91.855194][ T7323]  nbd0: unable to read partition table
[   92.070718][ T7925] sctp: [Deprecated]: syz.1.840 (pid 7925) Use of int in maxseg socket option.
[   92.070718][ T7925] Use struct sctp_assoc_value instead
[   92.213940][ T7938] __nla_validate_parse: 1 callbacks suppressed
[   92.213950][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'.
[   92.221016][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'.
[   93.432582][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[   93.644320][ T8025] netlink: 'syz.0.878': attribute type 8 has an invalid length.
[   93.647149][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'.
[   93.732052][ T8031] netlink: 248 bytes leftover after parsing attributes in process `syz.0.880'.
[   93.968432][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[   93.982187][ T8044] netlink: 'syz.0.882': attribute type 13 has an invalid length.
[   93.989854][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'.
[   94.116310][ T8048] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.120655][ T8048] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.170937][ T8052] netlink: 224 bytes leftover after parsing attributes in process `syz.0.884'.
[   94.268117][ T8059] netlink: 'syz.0.885': attribute type 3 has an invalid length.
[   94.275824][ T8059] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.885'.
[   94.287834][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[   94.293491][ T8062] gtp1: entered promiscuous mode
[   94.295166][ T8062] gtp1: entered allmulticast mode
[   94.560348][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'.
[   94.600284][ T8092] tap0: tun_chr_ioctl cmd 1074025680
[   94.606009][ T8092] tipc: Started in network mode
[   94.609704][ T8092] tipc: Node identity 5a0bb2abafab, cluster identity 4711
[   94.612593][ T8092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.616701][ T8092] D: renamed from syzkaller0
[   94.622734][ T8092] tipc: Disabling bearer <eth:syzkaller0>
[   94.769665][ T8100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   94.779910][ T8100] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   95.560380][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.563589][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.154973][ T8195] xt_connbytes: Forcing CT accounting to be enabled
[   96.163081][ T8195] set match dimension is over the limit!
[   96.211944][ T8203] net_ratelimit: 75 callbacks suppressed
[   96.211953][ T8203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.474476][ T8230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   96.518506][ T8229] veth5: entered promiscuous mode
[   96.523821][ T8229] bond1: (slave veth5): Enslaving as an active interface with an up link
[   96.539959][ T8229] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.986842][ T8272] syzkaller1: entered promiscuous mode
[   96.991355][ T8272] syzkaller1: entered allmulticast mode
[   96.994235][ T8276] netlink: 'syz.1.979': attribute type 13 has an invalid length.
[   97.003901][ T8276] netlink: 'syz.1.979': attribute type 12 has an invalid length.
[   97.165139][ T8293] netlink: 'syz.2.988': attribute type 27 has an invalid length.
[   97.307586][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout
[   97.312077][ T5218] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   97.784357][ T8367] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   98.092536][ T8381] __nla_validate_parse: 12 callbacks suppressed
[   98.092545][ T8381] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1023'.
[   98.236353][ T8384] ieee802154 phy0 wpan0: encryption failed: -22
[   98.269446][ T8381] bond0 (unregistering): (slave 1@): Releasing backup interface
[   98.273540][ T8381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.277031][ T8381] bond0 (unregistering): Released all slaves
[   98.975452][ T8457] netlink: 'syz.0.1044': attribute type 45 has an invalid length.
[   99.050605][ T8460] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   99.600746][ T8510] bridge2: entered allmulticast mode
[   99.673202][ T8515] netlink: 'syz.2.1066': attribute type 2 has an invalid length.
[  100.128939][ T8547] xt_hashlimit: max too large, truncated to 1048576
[  100.131013][ T8549] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1081'.
[  100.133421][ T8547] No such timeout policy "syz1"
[  100.136635][ T8549] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1081'.
[  100.141431][ T8549] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1081'.
[  100.586942][ T8582] netlink: 'syz.2.1097': attribute type 30 has an invalid length.
[  100.931695][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[  101.450942][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'.
[  101.582132][ T8657] netlink: zone id is out of range
[  101.584031][ T8657] netlink: del zone limit has 4 unknown bytes
[  101.772198][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1135'.
[  101.775304][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1135'.
[  101.778821][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1135'.
[  101.781747][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1135'.
[  102.849162][ T8755] veth0: entered promiscuous mode
[  102.851868][ T8754] veth0: left promiscuous mode
[  103.279385][ T8805] __nla_validate_parse: 3 callbacks suppressed
[  103.279396][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1186'.
[  103.368471][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.442825][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1198'.
[  103.583939][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'.
[  103.931088][ T8845] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1207'.
[  104.874232][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'.
[  104.898172][ T8881] IPVS: Error joining to the multicast group
[  104.901174][ T8883] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1225'.
[  105.259797][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'.
[  105.346359][ T8926] netlink: 'syz.1.1246': attribute type 3 has an invalid length.
[  105.874164][ T8954] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  105.887555][ T8954] bridge_slave_0: left allmulticast mode
[  105.889909][ T8954] bridge_slave_0: left promiscuous mode
[  105.892395][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.934042][ T8958] netlink: 'syz.0.1260': attribute type 10 has an invalid length.
[  106.037981][ T8954] bridge_slave_1: left allmulticast mode
[  106.040398][ T8954] bridge_slave_1: left promiscuous mode
[  106.043449][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.055544][ T8954] bond0: (slave bond_slave_0): Releasing backup interface
[  106.062789][ T8954] bond0: (slave bond_slave_1): Releasing backup interface
[  106.072531][ T8954] team0: Port device team_slave_0 removed
[  106.081119][ T8954] team0: Port device team_slave_1 removed
[  106.090063][ T8954] bond1: (slave veth5): Releasing backup interface
[  106.095720][ T8958] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  106.103782][ T8958] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.181627][ T8970] Bluetooth: MGMT ver 1.23
[  106.361968][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1274'.
[  106.514298][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'.
[  106.652641][ T9014] netlink: 'syz.0.1282': attribute type 4 has an invalid length.
[  106.707656][ T9016] netlink: 'syz.0.1282': attribute type 4 has an invalid length.
[  107.785979][ T9062] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1306'.
[  107.823612][ T9066] macvlan2: entered allmulticast mode
[  107.825596][ T9066] veth1_vlan: entered allmulticast mode
[  107.832915][ T9066] veth1_vlan: left allmulticast mode
[  108.197581][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  108.201555][ T5218] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  108.324927][ T9093] __nla_validate_parse: 2 callbacks suppressed
[  108.324942][ T9093] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1319'.
[  108.706582][ T9130] bridge0: entered promiscuous mode
[  108.919070][ T9148] netlink: 'syz.0.1346': attribute type 2 has an invalid length.
[  108.921781][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'.
[  108.931146][ T9150] IPVS: length: 148 != 24
[  109.118156][ T9168] netlink: 'syz.0.1355': attribute type 21 has an invalid length.
[  109.121745][ T9168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1355'.
[  110.244166][ T9231] netlink: 'syz.2.1382': attribute type 8 has an invalid length.
[  110.350095][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1387'.
[  110.354374][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'.
[  110.524675][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'.
[  110.553136][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'.
[  110.725547][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'.
[  111.431711][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'.
[  111.703957][ T9337] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1431'.
[  112.023512][   T33] audit: type=1800 audit(1753123481.046:2): pid=9367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1448" name=14 dev="tmpfs" ino=2537 res=0 errno=0
[  112.100337][ T9375] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  112.105363][ T9375] xt_bpf: check failed: parse error
[  112.585649][ T9426] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  112.599441][ T9426] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  112.723849][ T9441] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  112.743425][ T9441] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  112.757528][ T9441] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  112.762772][ T9441] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  112.766967][ T9441] geneve2: entered promiscuous mode
[  112.849587][ T9454] syz.2.1484 uses old SIOCAX25GETINFO
[  112.933346][ T9468] netlink: 'syz.0.1492': attribute type 3 has an invalid length.
[  113.203359][ T9505] netlink: 'syz.2.1511': attribute type 11 has an invalid length.
[  113.232463][ T9509] IPv6: sit1: Disabled Multicast RS
[  113.237576][ T9509] 0: reclassify loop, rule prio 0, protocol 800
[  113.842508][ T9533] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1519'.
[  113.845596][ T9533] tc_dump_action: action bad kind
[  114.245715][ T9558] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1530'.
[  115.957967][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  116.231989][ T9585] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.235495][ T9585] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.238922][ T9585] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.242236][ T9585] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.352003][ T9587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.410837][ T9587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.475648][ T9587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.614124][ T9615] netlink: 'syz.2.1552': attribute type 1 has an invalid length.
[  116.617526][ T9615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1552'.
[  117.034422][ T9630] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.083101][ T9632] netlink: 'syz.1.1560': attribute type 1 has an invalid length.
[  117.869265][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'.
[  117.880299][   T10] 0: reclassify loop, rule prio 0, protocol 800
[  117.885262][   T10] 0: reclassify loop, rule prio 0, protocol 800
[  119.094213][ T9699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1591'.
[  119.148486][ T5876] 0: reclassify loop, rule prio 0, protocol 800
[  119.339935][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'.
[  119.359853][ T9723] dummy0: entered promiscuous mode
[  119.369777][ T9723] dummy0: left promiscuous mode
[  119.494605][ T9736] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1608'.
[  119.533952][ T9744] netlink: 'syz.2.1612': attribute type 1 has an invalid length.
[  119.536732][ T9744] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1612'.
[  119.540465][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1612'.
[  119.630966][ T9742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.657474][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'.
[  119.684510][ T9742] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  119.703980][ T9758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1618'.
[  119.710099][ T9742] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  120.030999][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'.
[  120.314632][ T9809] netlink: 'syz.1.1637': attribute type 9 has an invalid length.
[  120.320391][ T9809] netlink: 'syz.1.1637': attribute type 7 has an invalid length.
[  120.323654][ T9809] netlink: 'syz.1.1637': attribute type 8 has an invalid length.
[  120.816267][ T9864] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1657'.
[  120.942595][ T9864] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  120.960644][ T9864] bond0 (unregistering): Released all slaves
[  120.978968][ T9870] veth1_macvtap: left promiscuous mode
[  120.981495][ T9870] macsec0: entered promiscuous mode
[  121.499971][ T9934] openvswitch: netlink: IP tunnel dst address not specified
[  121.670084][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1694'.
[  121.975730][ T9893] Bluetooth: hci1: Opcode 0x080f failed: -4
[  122.524317][ T9995] netlink: 'syz.0.1717': attribute type 1 has an invalid length.
[  122.644027][T10007] netlink: 'syz.0.1723': attribute type 8 has an invalid length.
[  122.989997][ T5876] 0: reclassify loop, rule prio 0, protocol 800
[  123.088876][T10041] netlink: 'syz.1.1737': attribute type 20 has an invalid length.
[  123.092632][T10041] netlink: 'syz.1.1737': attribute type 21 has an invalid length.
[  123.147548][ T5218] Bluetooth: hci1: command 0x080f tx timeout
[  123.261221][T10054] netlink: 'syz.2.1741': attribute type 8 has an invalid length.
[  123.394590][ T5876] 0: reclassify loop, rule prio 0, protocol 800
[  123.430732][T10062] macsec1: entered promiscuous mode
[  123.433686][T10062] macsec1: entered allmulticast mode
[  123.780815][T10096] dvmrp8: entered allmulticast mode
[  123.794930][T10090] dvmrp8: left allmulticast mode
[  123.828032][ T5876] 0: reclassify loop, rule prio 0, protocol 800
[  123.949021][T10109] bridge0: left promiscuous mode
[  123.955062][T10109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.008002][T10115] netlink: 'syz.2.1769': attribute type 1 has an invalid length.
[  124.034532][T10115] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.051164][T10115] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.054520][T10115] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  124.060470][T10115] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  124.091642][T10123] batadv_slave_1: entered promiscuous mode
[  124.096142][T10123] bond0: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  124.102003][T10123] __nla_validate_parse: 8 callbacks suppressed
[  124.102011][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1769'.
[  124.110436][T10123] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.150751][T10126] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  124.273979][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'.
[  124.706225][T10155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1786'.
[  125.542890][T10153] kthread_run failed with err -4
[  125.773455][T10178] netlink: 'syz.0.1795': attribute type 5 has an invalid length.
[  125.907145][T10191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.911791][T10191] syzkaller0: entered promiscuous mode
[  125.913573][T10191] syzkaller0: entered allmulticast mode
[  125.929801][T10191] tipc: Resetting bearer <eth:syzkaller0>
[  125.935888][T10190] tipc: Resetting bearer <eth:syzkaller0>
[  125.948269][T10190] tipc: Disabling bearer <eth:syzkaller0>
[  125.954793][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'.
[  126.176866][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'.
[  126.482344][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'.
[  126.798336][   T47] IPVS: starting estimator thread 0...
[  126.888730][T10268] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1836'.
[  126.899517][T10263] IPVS: using max 78 ests per chain, 187200 per kthread
[  127.884489][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'.
[  127.888288][T10365] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1884'.
[  127.903130][T10368] bridge: RTM_NEWNEIGH with invalid ether address
[  127.978332][T10372] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96
[  128.751281][   T10] 0: reclassify loop, rule prio 0, protocol 800
[  128.923839][T10391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1896'.
[  129.518090][T10434] __nla_validate_parse: 4 callbacks suppressed
[  129.518105][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'.
[  129.794949][T10447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.799555][T10447] syzkaller0: entered promiscuous mode
[  129.802074][T10447] syzkaller0: entered allmulticast mode
[  129.821417][T10447] tipc: Resetting bearer <eth:syzkaller0>
[  129.829119][T10446] tipc: Resetting bearer <eth:syzkaller0>
[  129.840742][T10446] tipc: Disabling bearer <eth:syzkaller0>
[  130.037738][T10453] netlink: 'syz.2.1925': attribute type 3 has an invalid length.
[  130.099226][T10457] bridge_slave_0: left allmulticast mode
[  130.108710][T10457] bridge_slave_0: left promiscuous mode
[  130.111747][T10457] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.128562][T10457] bridge_slave_1: left allmulticast mode
[  130.137328][T10457] bridge_slave_1: left promiscuous mode
[  130.140828][T10457] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.161660][T10457] team0: Port device team_slave_0 removed
[  130.171473][T10457] team0: Port device team_slave_1 removed
[  130.176183][T10457] bond0: (slave batadv_slave_1): Releasing active interface
[  130.186967][T10457] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  130.825136][T10514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.898361][T10501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.919669][T10523] rdma_op ffff8880310ea1f0 conn xmit_rdma 0000000000000000
[  130.954578][T10514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.049768][T10529] vlan2: entered promiscuous mode
[  131.051943][T10529] gretap0: entered promiscuous mode
[  131.169926][T10525] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1946'.
[  131.548822][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  131.634739][T10554] netlink: 'syz.1.1953': attribute type 3 has an invalid length.
[  131.646635][T10554] netlink: 'syz.1.1953': attribute type 3 has an invalid length.
[  132.086210][T10585] netlink: 'syz.0.1965': attribute type 2 has an invalid length.
[  132.094483][T10587] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  132.104327][T10585] : entered promiscuous mode
[  132.132285][T10590] netlink: 'syz.0.1966': attribute type 4 has an invalid length.
[  132.143026][T10590] netlink: 'syz.0.1966': attribute type 4 has an invalid length.
[  132.601737][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.604079][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  134.022876][   T47] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  134.026102][   T47] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  134.058056][   T47] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  134.105189][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'.
[  134.165240][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'.
[  134.228213][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2008'.
[  134.271792][T10713] netlink: 'syz.2.2011': attribute type 2 has an invalid length.
[  134.274505][T10713] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2011'.
[  134.279240][T10711] netlink: 'syz.1.2010': attribute type 10 has an invalid length.
[  134.283174][T10711] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.286167][T10711] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.305186][T10711] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.307964][T10711] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.311700][T10711] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.314054][T10711] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.321201][T10711] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  134.451692][T10725] netlink: 'syz.0.2014': attribute type 1 has an invalid length.
[  134.454702][T10725] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2014'.
[  134.508421][  T223] 0: reclassify loop, rule prio 0, protocol 800
[  135.892157][T10781] netlink: 'syz.2.2040': attribute type 10 has an invalid length.
[  136.076065][T10792] syz.1.2045 (10792) used obsolete PPPIOCDETACH ioctl
[  136.328625][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'.
[  136.332371][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'.
[  136.336005][T10806] netlink: 'syz.0.2051': attribute type 12 has an invalid length.
[  136.415096][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'.
[  136.423167][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'.
[  136.546438][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'.
[  136.678365][T10839] xt_hashlimit: size too large, truncated to 1048576
[  137.043801][T10871] team0: Mode changed to "activebackup"
[  137.550787][T10928] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2104'.
[  137.726926][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'.
[  137.733062][T10950] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2113'.
[  137.803686][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2112'.
[  138.113331][   T33] audit: type=1804 audit(1753123507.136:3): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2130" name="/newroot/738/cgroup.controllers" dev="tmpfs" ino=3749 res=1 errno=0
[  138.132728][   T33] audit: type=1800 audit(1753123507.136:4): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2130" name="cgroup.controllers" dev="tmpfs" ino=3749 res=0 errno=0
[  138.354980][   T26] 0: reclassify loop, rule prio 0, protocol 800
[  138.573991][T11025] team0: Unable to change to the same mode the team is in
[  138.586637][T11025] team0: Unable to change to the same mode the team is in
[  138.640138][T11027] netlink: 'syz.0.2146': attribute type 3 has an invalid length.
[  138.642964][T11027] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2146'.
[  139.641895][   T40] 0: reclassify loop, rule prio 0, protocol 800
[  139.821851][T11093] 0: reclassify loop, rule prio 0, protocol 800
[  141.074402][T11187] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  142.019510][T11252] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  142.603853][T11318] __nla_validate_parse: 5 callbacks suppressed
[  142.603862][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2237'.
[  142.620983][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'.
[  143.174786][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2266'.
[  144.419496][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'.
[  144.437341][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'.
[  144.906052][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2301'.
[  145.000911][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'.
[  145.049932][T11478] netlink: 'syz.1.2310': attribute type 1 has an invalid length.
[  145.053021][T11478] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2310'.
[  145.056210][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2310'.
[  145.110501][ T5876] IPVS: starting estimator thread 0...
[  145.209730][T11485] IPVS: using max 77 ests per chain, 184800 per kthread
[  145.395407][T11515] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  145.399499][T11515] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  146.234039][T11581] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  146.265143][T11583] netlink: 'syz.1.2361': attribute type 1 has an invalid length.
[  146.269292][T11583] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2361'.
[  147.231595][T11673] xt_CT: No such helper "snmp"
[  147.546160][   T40] wlan0: failed to finalize CSA on link 0, disconnecting
[  147.713176][T11715] netlink: 'syz.0.2420': attribute type 1 has an invalid length.
[  147.726571][T11715] __nla_validate_parse: 3 callbacks suppressed
[  147.726585][T11715] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2420'.
[  147.733585][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'.
[  148.343706][T11778] gtp0: entered promiscuous mode
[  148.345803][T11778] gtp0: entered allmulticast mode
[  148.483801][T11790] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2456'.
[  148.820587][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2468'.
[  149.078697][T11837] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2478'.
[  149.311709][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  150.494153][T11909] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2509'.
[  151.079658][T11948] netlink: 'syz.2.2526': attribute type 7 has an invalid length.
[  151.082689][T11948] netlink: 'syz.2.2526': attribute type 8 has an invalid length.
[  151.086105][T11948] netlink: 'syz.2.2526': attribute type 15 has an invalid length.
[  151.206602][T11957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.210754][T11957] syzkaller0: entered promiscuous mode
[  151.213222][T11957] syzkaller0: entered allmulticast mode
[  151.309584][T11963] tipc: Resetting bearer <eth:syzkaller0>
[  151.356319][T11957] tipc: Resetting bearer <eth:syzkaller0>
[  151.373506][T11957] tipc: Disabling bearer <eth:syzkaller0>
[  152.272867][T11997] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.2546'.
[  153.283986][T12098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.287042][T12098] syzkaller0: entered promiscuous mode
[  153.291162][T12098] syzkaller0: entered allmulticast mode
[  153.334529][T12098] tipc: Resetting bearer <eth:syzkaller0>
[  153.351400][T12097] tipc: Resetting bearer <eth:syzkaller0>
[  153.363247][T12097] tipc: Disabling bearer <eth:syzkaller0>
[  153.662517][T12133] xt_CT: No such helper "snmp"
[  154.511903][T12204] xt_CT: You must specify a L4 protocol and not use inversions on it
[  154.573379][T12214] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2636'.
[  154.599919][T12213] netlink: 'syz.0.2637': attribute type 1 has an invalid length.
[  154.602351][T12213] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2637'.
[  154.622456][T12213] xt_CT: No such helper "snmp"
[  154.650416][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'.
[  154.677108][T12222] hsr_slave_1 (unregistering): left promiscuous mode
[  155.075179][   T33] audit: type=1800 audit(1753123524.096:5): pid=12243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2647" name="memory.events" dev="tmpfs" ino=4033 res=0 errno=0
[  155.286630][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'.
[  155.290940][T12254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2651'.
[  155.354012][T12260] xt_CT: No such helper "snmp"
[  155.643394][T12279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2662'.
[  155.809303][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.883595][T12312] tipc: Cannot configure node identity twice
[  155.920314][T12316] ip6gre3: entered allmulticast mode
[  156.025357][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'.
[  156.028526][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'.
[  156.059466][T12327] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.237595][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'.
[  156.657843][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.856031][T12471] netlink: 'syz.1.2744': attribute type 1 has an invalid length.
[  158.871091][T12471] 8021q: adding VLAN 0 to HW filter on device bond3
[  158.887771][T12471] bond3: (slave veth3): Enslaving as an active interface with a down link
[  158.896211][T12471] vlan3: entered allmulticast mode
[  158.899265][T12471] veth1: entered allmulticast mode
[  158.902941][T12471] veth1: entered promiscuous mode
[  158.905957][T12471] veth1: left promiscuous mode
[  158.911439][T12471] bond3: (slave vlan3): making interface the new active one
[  158.915366][T12471] veth1: entered promiscuous mode
[  158.919976][T12471] vlan3: entered promiscuous mode
[  158.922513][T12471] bond3: (slave vlan3): Enslaving as an active interface with an up link
[  159.319316][T12502] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2758'.
[  159.469219][T12514] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  159.561624][T12520] netlink: 'syz.1.2764': attribute type 10 has an invalid length.
[  159.582728][T12520] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  160.051642][T12549] netlink: 'syz.2.2777': attribute type 2 has an invalid length.
[  160.054618][T12549] __nla_validate_parse: 1 callbacks suppressed
[  160.054626][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'.
[  160.081194][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'.
[  160.089000][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2778'.
[  161.088251][T12605] netlink: 'syz.2.2797': attribute type 1 has an invalid length.
[  161.092064][T12605] NCSI netlink: No device for ifindex 0
[  162.049786][T12650] gre0: entered allmulticast mode
[  162.304212][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'.
[  162.352167][T12681] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2825'.
[  162.845187][T12723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2844'.
[  163.090755][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'.
[  163.250199][T12757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.253183][T12757] syzkaller0: entered promiscuous mode
[  163.255151][T12757] syzkaller0: entered allmulticast mode
[  163.271726][T12757] tipc: Resetting bearer <eth:syzkaller0>
[  163.275153][T12756] tipc: Resetting bearer <eth:syzkaller0>
[  163.285198][T12756] tipc: Disabling bearer <eth:syzkaller0>
[  163.290289][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'.
[  163.628614][T12787] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2873'.
[  163.631694][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2873'.
[  164.100481][T12837] netlink: 'syz.2.2891': attribute type 13 has an invalid length.
[  164.103558][T12837] netlink: 'syz.2.2891': attribute type 17 has an invalid length.
[  164.188540][T12837] 8021q: adding VLAN 0 to HW filter on device team0
[  164.207802][T12837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.231020][ T5854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  164.393483][T12837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.457891][T12843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.519340][T12843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.850733][T12876] netlink: 'syz.1.2908': attribute type 1 has an invalid length.
[  165.779971][T12924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.891484][T12924] syzkaller0: entered promiscuous mode
[  165.893842][T12924] syzkaller0: entered allmulticast mode
[  165.901521][T12924] tipc: Resetting bearer <eth:syzkaller0>
[  165.929703][T12923] tipc: Resetting bearer <eth:syzkaller0>
[  167.043577][T12923] tipc: Disabling bearer <eth:syzkaller0>
[  167.098703][   T33] audit: type=1800 audit(1753123536.126:6): pid=12938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2936" name="memory.events" dev="tmpfs" ino=5256 res=0 errno=0
[  167.491738][T12971] __nla_validate_parse: 2 callbacks suppressed
[  167.491747][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'.
[  167.825420][T12982] syzkaller0: entered promiscuous mode
[  167.828146][T12982] syzkaller0: entered allmulticast mode
[  168.349653][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  169.184137][T13009] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2968'.
[  169.218970][ T5832] cgroup: fork rejected by pids controller in /syz2
[  169.227812][ T5218] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  169.233927][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2970'.
[  169.988106][ T5840] vlan3: left promiscuous mode
[  169.999837][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  170.004079][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  170.009019][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  170.014201][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  170.023809][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  170.225697][T13033] chnl_net:caif_netlink_parms(): no params data found
[  170.326542][T13033] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.336487][T13033] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.340870][T13033] bridge_slave_0: entered allmulticast mode
[  170.345083][T13033] bridge_slave_0: entered promiscuous mode
[  170.351278][T13033] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.354506][T13033] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.358454][T13033] bridge_slave_1: entered allmulticast mode
[  170.362538][T13033] bridge_slave_1: entered promiscuous mode
[  170.397792][T13033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.403403][T13033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.445699][T13033] team0: Port device team_slave_0 added
[  170.454087][T13033] team0: Port device team_slave_1 added
[  170.498456][T13033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.501800][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.515032][T13033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.522006][T13033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.525155][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.537092][T13033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.586626][T13033] hsr_slave_0: entered promiscuous mode
[  170.594680][T13033] hsr_slave_1: entered promiscuous mode
[  170.598866][T13033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.602245][T13033] Cannot create hsr debugfs directory
[  170.754044][T13033] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.759900][T13033] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  170.829425][T13033] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.833754][T13033] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  170.882299][T13033] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.886779][T13033] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  170.946909][T13033] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.950765][T13033] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.149094][T13033] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  171.161014][T13033] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  171.169537][T13033] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  171.180950][T13033] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  171.275312][T13033] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.314617][T13033] 8021q: adding VLAN 0 to HW filter on device team0
[  171.338551][  T223] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.341540][  T223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.346435][  T223] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.349015][  T223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.383366][T13033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.531166][T13033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.566606][T13033] veth0_vlan: entered promiscuous mode
[  171.575655][T13033] veth1_vlan: entered promiscuous mode
[  171.599464][T13033] veth0_macvtap: entered promiscuous mode
[  171.605423][T13033] veth1_macvtap: entered promiscuous mode
[  171.624606][T13033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.634918][T13033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.651192][T13033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.654526][T13033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.659867][T13033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.663655][T13033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.762861][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.765953][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.801989][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.806502][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.114705][ T5218] Bluetooth: hci2: command tx timeout
[  172.440966][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'.
[  172.913736][T13183] ieee802154 phy1 wpan1: encryption failed: -22
[  173.116787][T13191] xt_socket: unknown flags 0x8
[  173.232287][T13200] netlink: 'syz.2.3044': attribute type 39 has an invalid length.
[  173.423656][T13211] netlink: 'syz.1.3047': attribute type 49 has an invalid length.
[  173.751324][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'.
[  173.782462][T13241] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3062'.
[  174.204002][ T5218] Bluetooth: hci2: command tx timeout
[  174.695249][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3069'.
[  174.764096][T13263] netlink: 'syz.2.3072': attribute type 11 has an invalid length.
[  174.767132][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3072'.
[  174.986638][T13284] syzkaller0: entered allmulticast mode
[  175.892263][T13292] IPVS: length: 209 != 24
[  175.946299][T13295] netlink: 'syz.2.3086': attribute type 5 has an invalid length.
[  175.961490][T13298] ieee802154 phy1 wpan1: encryption failed: -22
[  175.962507][T13295] ip6erspan0: entered promiscuous mode
[  176.080803][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  176.268422][ T5218] Bluetooth: hci2: command tx timeout
[  176.304038][T13322] syzkaller1: entered promiscuous mode
[  176.306504][T13322] syzkaller1: entered allmulticast mode
[  176.720417][T13341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3107'.
[  176.803113][T13343] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3108'.
[  176.925166][T13348] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  176.939671][T13348] macsec2: entered allmulticast mode
[  176.946474][T13348] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  177.387596][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.602465][T13388] IPv6: NLM_F_REPLACE set, but no existing node found!
[  177.785923][T13404] @: renamed from veth0_vlan (while UP)
[  178.347566][ T5218] Bluetooth: hci2: command tx timeout
[  179.092101][T13483] syzkaller1: entered promiscuous mode
[  179.094524][T13483] syzkaller1: entered allmulticast mode
[  179.525942][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'.
[  179.533566][T13513] bridge_slave_1: left allmulticast mode
[  179.536287][T13513] bridge_slave_1: left promiscuous mode
[  179.542034][T13513] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.550823][T13513] bridge_slave_0: left allmulticast mode
[  179.553825][T13513] bridge_slave_0: left promiscuous mode
[  179.559780][T13513] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.135298][T13532] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3192'.
[  180.220758][T13538] nbd: must specify a size in bytes for the device
[  180.276582][T13542] netlink: 'syz.0.3198': attribute type 25 has an invalid length.
[  180.333820][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'.
[  180.352771][T13550] batadv_slave_0: entered promiscuous mode
[  180.356830][T13549] batadv_slave_0: left promiscuous mode
[  180.501028][T13562] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  180.749352][ T5827] Bluetooth: hci1: command 0x080f tx timeout
[  181.029895][T13600] vxcan3: entered allmulticast mode
[  181.255072][T13617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3225'.
[  181.267435][T13617] netlink: 245 bytes leftover after parsing attributes in process `syz.2.3225'.
[  182.221320][T13683] netlink: 'syz.2.3246': attribute type 1 has an invalid length.
[  182.224586][T13683] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3246'.
[  182.532773][T13702] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3253'.
[  182.602129][T13706] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3256'.
[  183.029922][T13726] x_tables: duplicate underflow at hook 4
[  184.076311][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'.
[  184.462358][T13803] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  184.902839][T13839] netlink: 'syz.0.3311': attribute type 29 has an invalid length.
[  184.970066][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'.
[  184.986218][T13845] syz_tun: entered allmulticast mode
[  185.223064][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'.
[  185.295729][T13875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.695221][T13947] tipc: Started in network mode
[  186.715820][T13947] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  186.720712][T13947] tipc: Enabled bearer <eth:team0>, priority 0
[  187.144757][T13994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3376'.
[  187.837653][ T5828] tipc: Node number set to 11578026
[  188.532455][T14053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.614579][T14053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.679891][T14053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.737722][T14053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.831074][T14053] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.844699][T14053] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.856102][T14053] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.875226][T14053] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.030527][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3406'.
[  189.034431][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3406'.
[  189.532407][T14111] netlink: 'syz.2.3423': attribute type 1 has an invalid length.
[  189.579441][T14111] bond1: (slave gretap1): making interface the new active one
[  189.592874][T14111] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  189.747847][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3437'.
[  189.953855][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'.
[  191.674261][T14226] openvswitch: netlink: IP tunnel dst address not specified
[  191.786035][T14240] netlink: 'syz.1.3483': attribute type 9 has an invalid length.
[  191.966216][T14252] veth1_to_bond: entered allmulticast mode
[  191.972448][T14252] bond_slave_1: entered promiscuous mode
[  191.975386][T14251] bond_slave_1: left promiscuous mode
[  191.981281][T14251] veth1_to_bond: left allmulticast mode
[  192.159958][T14262] @: renamed from bond_slave_0
[  192.854726][T14326] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  192.911392][T14331] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  193.274415][T14359] sctp: [Deprecated]: syz.2.3536 (pid 14359) Use of int in maxseg socket option.
[  193.274415][T14359] Use struct sctp_assoc_value instead
[  193.711013][T14404] bridge2: entered promiscuous mode
[  193.859605][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3561'.
[  194.035657][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.215054][T14460] vcan0: tx drop: invalid da for name 0x0000000000000001
[  194.270498][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3581'.
[  194.276189][T14464] netlink: 'syz.1.3580': attribute type 3 has an invalid length.
[  194.278597][T14463] gtp0: entered promiscuous mode
[  194.280465][T14464] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3580'.
[  194.281131][T14463] gtp0: entered allmulticast mode
[  194.304101][T14466] bridge4: entered promiscuous mode
[  194.415771][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'.
[  194.546309][T14492] xt_hashlimit: size too large, truncated to 1048576
[  194.599254][T14498] : renamed from bridge_slave_0 (while UP)
[  194.667364][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.847964][T14537] netlink: 'syz.0.3616': attribute type 1 has an invalid length.
[  194.850799][T14537] netlink: 'syz.0.3616': attribute type 1 has an invalid length.
[  194.961210][T14549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.195326][T14566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.476125][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3641'.
[  195.480215][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3641'.
[  195.486064][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'.
[  195.491892][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'.
[  195.535108][T14598] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[  195.863282][T14634] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3660'.
[  196.039075][T14651] netlink: 'syz.0.3666': attribute type 1 has an invalid length.
[  196.055598][T14651] bond2: entered promiscuous mode
[  196.060364][T14651] bond2: entered allmulticast mode
[  196.069768][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'.
[  196.083860][T14651] bridge5: the hash_elasticity option has been deprecated and is always 16
[  196.903519][T14717] netlink: 'syz.0.3698': attribute type 1 has an invalid length.
[  197.562474][T14702] Set syz1 is full, maxelem 65536 reached
[  197.770958][T14775] xt_hashlimit: max too large, truncated to 1048576
[  197.774095][T14775] No such timeout policy "syz1"
[  199.061825][T14802] __nla_validate_parse: 3 callbacks suppressed
[  199.061842][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3734'.
[  199.382384][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3740'.
[  199.431345][T14817] netlink: 'syz.0.3741': attribute type 21 has an invalid length.
[  199.434657][T14817] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3741'.
[  199.467716][T14817] netlink: 'syz.0.3741': attribute type 5 has an invalid length.
[  199.471021][T14817] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3741'.
[  199.970873][T14845] netlink: 'syz.2.3753': attribute type 20 has an invalid length.
[  200.112885][T14860] xt_TCPMSS: Only works on TCP SYN packets
[  200.514666][T14878] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3769'.
[  200.665663][T14882] netlink: 'syz.2.3771': attribute type 10 has an invalid length.
[  200.669537][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3771'.
[  201.172685][T14910] netlink: 'syz.1.3783': attribute type 10 has an invalid length.
[  201.801850][T14907] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  201.832936][T14909] bond0: (slave bridge0): Releasing backup interface
[  201.844812][T14909] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.847473][T14909] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.863902][T14909] bridge_slave_0: left allmulticast mode
[  201.865836][T14909] bridge_slave_0: left promiscuous mode
[  201.868186][T14909] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.876146][T14909] bridge_slave_1: left allmulticast mode
[  201.880927][T14909] bridge_slave_1: left promiscuous mode
[  201.888559][T14909] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.908212][T14909] bond0: (slave bond_slave_0): Releasing backup interface
[  201.916434][T14909] bond0: (slave bond_slave_1): Releasing backup interface
[  201.940892][T14909] team0: Port device team_slave_0 removed
[  201.949279][T14909] team0: Port device team_slave_1 removed
[  201.952183][T14909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.955010][T14909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.960017][T14909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.968306][T14909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.989684][T14909] bond3: (slave veth3): Releasing active interface
[  201.992469][T14909] bond3: (slave veth3): the permanent HWaddr of slave - 1a:7e:60:2f:06:9b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  202.003986][T14909] vlan3: entered promiscuous mode
[  202.015893][T14909] bond3: (slave vlan3): Releasing active interface
[  202.019225][T14909] vlan3: left promiscuous mode
[  202.023031][T14909] veth1: left promiscuous mode
[  202.026784][T14910] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  202.038815][T14910] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  202.046046][T14921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3788'.
[  202.113168][T14933] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  202.260296][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3802'.
[  203.694505][T15041] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  204.573286][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'.
[  205.133824][T15113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.142524][T15113] syzkaller0: entered promiscuous mode
[  205.144323][T15113] syzkaller0: entered allmulticast mode
[  205.167636][T15113] tipc: Resetting bearer <eth:syzkaller0>
[  205.175305][T15112] tipc: Resetting bearer <eth:syzkaller0>
[  205.199376][T15112] tipc: Disabling bearer <eth:syzkaller0>
[  206.035472][T15208] xt_CONNSECMARK: invalid mode: 254
[  206.341312][T15228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.348002][T15228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.415623][T15222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.397129][T15276] netlink: 'syz.1.3937': attribute type 1 has an invalid length.
[  207.449789][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3940'.
[  207.920399][T15329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.103044][T15351] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3972'.
[  208.200706][T15360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.734724][T15411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3998'.
[  208.880744][T15421] netlink: 'syz.1.4003': attribute type 3 has an invalid length.
[  210.250107][T15491] ip6t_srh: unknown srh match flags  4000
[  210.255340][T15493] @: renamed from bond_slave_0 (while UP)
[  210.736442][T15525] netlink: 'syz.1.4053': attribute type 9 has an invalid length.
[  210.741943][T15525] netlink: 'syz.1.4053': attribute type 7 has an invalid length.
[  210.745278][T15525] netlink: 'syz.1.4053': attribute type 8 has an invalid length.
[  211.539452][T15577] openvswitch: netlink: IP tunnel dst address not specified
[  211.580032][T15585] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4078'.
[  211.583452][T15585] unsupported nla_type 65024
[  211.628227][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'.
[  211.719275][T15598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4086'.
[  211.762950][T15600] netlink: 'syz.0.4087': attribute type 18 has an invalid length.
[  211.842096][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'.
[  211.906042][T15609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4091'.
[  212.265709][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4098'.
[  212.269930][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4098'.
[  212.273618][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'.
[  212.371113][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4099'.
[  212.381768][T15626] IPVS: Unknown mcast interface: vcan0
[  212.589311][T15631] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4100'.
[  212.873326][T15661] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  213.686661][T15691] tipc: Enabled bearer <eth:vlan0>, priority 18
[  213.795550][T15703] netlink: 'syz.1.4133': attribute type 1 has an invalid length.
[  213.889873][T15701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.929433][T15701] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  213.999543][T15715] netlink: 'syz.1.4138': attribute type 25 has an invalid length.
[  214.807636][ T5876] tipc: Node number set to 1614566444
[  214.895301][T15782] netlink: 'syz.2.4157': attribute type 3 has an invalid length.
[  215.275578][   T33] audit: type=1800 audit(1753123584.296:7): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4173" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1873 res=0 errno=0
[  215.537425][T15836] syzkaller0: entered promiscuous mode
[  215.539478][T15836] syzkaller0: entered allmulticast mode
[  216.692319][T15842] hsr_slave_0: left promiscuous mode
[  216.695387][T15842] hsr_slave_1: left promiscuous mode
[  216.800166][T15852] __nla_validate_parse: 11 callbacks suppressed
[  216.800183][T15852] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4191'.
[  216.988613][T15865] pimreg: entered allmulticast mode
[  216.996008][T15865] pimreg: left allmulticast mode
[  217.310026][T15893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.313295][T15893] batadv_slave_1: entered promiscuous mode
[  217.486029][T15911] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4219'.
[  217.492684][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'.
[  217.600244][T15921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4223'.
[  218.135252][T15956] netlink: 'syz.1.4240': attribute type 4 has an invalid length.
[  218.225616][T15969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.257104][T15973] netlink: 'syz.2.4249': attribute type 13 has an invalid length.
[  218.260262][T15973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4249'.
[  218.271543][T15973] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  218.301402][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'.
[  218.824563][T16014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.042387][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4275'.
[  219.251434][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4284'.
[  219.308876][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  219.541651][T16070] syzkaller1: entered promiscuous mode
[  219.543652][T16070] syzkaller1: entered allmulticast mode
[  219.966617][T16094] netlink: 'syz.2.4302': attribute type 10 has an invalid length.
[  219.971119][T16095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4304'.
[  220.240673][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4312'.
[  220.470772][T16131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.487395][T16133] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  220.532698][T16115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.591450][T16115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.610252][T16183] IPv6: syztnl1: Disabled Multicast RS
[  221.979481][T16202] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  222.031191][T16207] xt_CT: You must specify a L4 protocol and not use inversions on it
[  222.034918][T16197] netlink: 'syz.0.4348': attribute type 1 has an invalid length.
[  222.047427][T16197] netlink: 'syz.0.4348': attribute type 1 has an invalid length.
[  222.056377][T16197] __nla_validate_parse: 1 callbacks suppressed
[  222.056393][T16197] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4348'.
[  222.282305][T16227] pim6reg: entered allmulticast mode
[  223.059701][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4381'.
[  223.442735][T16292] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4388'.
[  223.493740][T16292] hsr_slave_0: left promiscuous mode
[  223.496801][T16292] hsr_slave_1: left promiscuous mode
[  223.642358][T16300] team0: No ports can be present during mode change
[  223.670288][T16304] netlink: 'syz.2.4394': attribute type 1 has an invalid length.
[  223.807082][T16316] ip6t_srh: unknown srh invflags 4449
[  224.512154][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4403'.
[  224.646954][T16335] netlink: 'syz.0.4408': attribute type 1 has an invalid length.
[  224.651356][T16335] netlink: 'syz.0.4408': attribute type 1 has an invalid length.
[  225.320530][T16387] tipc: Disabling bearer <eth:vlan0>
[  225.954833][T16426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'.
[  225.962621][T16426] Timeout policy `syz0' can only be used by L3 protocol number 34984
[  226.083096][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4452'.
[  226.091752][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4452'.
[  226.095765][T16430] netlink: 'syz.1.4452': attribute type 4 has an invalid length.
[  226.250412][T16434] netlink: 'syz.2.4454': attribute type 1 has an invalid length.
[  226.301202][T16438] No such timeout policy "syz1"
[  226.518536][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4465'.
[  226.529602][T16456] vlan2: entered promiscuous mode
[  226.531594][T16456] gretap0: entered promiscuous mode
[  227.096942][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4485'.
[  227.115472][T16499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4485'.
[  227.191029][T16506] @: renamed from veth0_vlan (while UP)
[  227.320109][T16513] netlink: 'syz.2.4490': attribute type 64 has an invalid length.
[  227.357003][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4490'.
[  227.517770][T16535] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4492'.
[  227.645227][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'.
[  227.652470][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'.
[  227.685407][T16554] nbd: must specify a device to reconfigure
[  227.884622][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'.
[  227.890801][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'.
[  227.895823][T16576] netlink: 'syz.2.4501': attribute type 14 has an invalid length.
[  227.899240][T16576] netlink: 'syz.2.4501': attribute type 13 has an invalid length.
[  228.085402][T16587] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  228.091624][T16587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4504'.
[  228.100407][T16587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4504'.
[  228.132163][T16591] netlink: 'syz.2.4505': attribute type 1 has an invalid length.
[  228.302200][T16609] smc: net device bond0 erased user defined pnetid SYZ2
[  228.346197][T16609] bond0 (unregistering): (slave 0@): Releasing backup interface
[  228.353293][T16609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.361245][T16609] bond0 (unregistering): Released all slaves
[  228.690603][T16637] netlink: 'syz.1.4516': attribute type 4 has an invalid length.
[  228.736279][T16644] syzkaller0: entered promiscuous mode
[  228.746195][T16644] syzkaller0: entered allmulticast mode
[  228.923312][T16660] netlink: 'syz.0.4525': attribute type 3 has an invalid length.
[  228.927749][T16660] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  229.227511][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  229.586954][T16699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.590135][T16699] syzkaller0: entered promiscuous mode
[  229.592187][T16699] syzkaller0: entered allmulticast mode
[  229.598927][T16698] tipc: Resetting bearer <eth:syzkaller0>
[  229.612234][T16698] tipc: Disabling bearer <eth:syzkaller0>
[  229.845576][T16716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.091771][T16731] netlink: 'syz.2.4547': attribute type 1 has an invalid length.
[  230.126855][T16732] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  230.496119][T16746] netlink: 'syz.2.4549': attribute type 1 has an invalid length.
[  230.751751][T16764] xt_time: invalid argument - start or stop time greater than 23:59:59
[  230.828964][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  231.077823][T16776] nbd: socks must be embedded in a SOCK_ITEM attr
[  231.081179][T16776] block nbd1: shutting down sockets
[  231.088989][T16785] GUP no longer grows the stack in syz.2.4560 (16785): 200000004000-200000008000 (200000002000)
[  231.094377][T16785] CPU: 1 UID: 0 PID: 16785 Comm: syz.2.4560 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  231.094398][T16785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.094406][T16785] Call Trace:
[  231.094413][T16785]  <TASK>
[  231.094420][T16785]  dump_stack_lvl+0x189/0x250
[  231.094445][T16785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.094461][T16785]  ? __pfx__printk+0x10/0x10
[  231.094478][T16785]  ? find_vma+0xe7/0x160
[  231.094506][T16785]  __get_user_pages+0x2a60/0x30b0
[  231.094546][T16785]  ? __pfx___get_user_pages+0x10/0x10
[  231.094561][T16785]  ? __gup_longterm_locked+0x309/0x15b0
[  231.094576][T16785]  ? down_read_killable+0x1d1/0x350
[  231.094590][T16785]  ? try_get_folio+0x633/0x660
[  231.094609][T16785]  __gup_longterm_locked+0x3e3/0x15b0
[  231.094643][T16785]  gup_fast_fallback+0x1cd4/0x2260
[  231.094688][T16785]  ? __pfx_gup_fast_fallback+0x10/0x10
[  231.094705][T16785]  ? rcu_is_watching+0x15/0xb0
[  231.094723][T16785]  ? is_valid_gup_args+0x11f/0x200
[  231.094741][T16785]  ? pin_user_pages_fast+0x4d/0xb0
[  231.094759][T16785]  rds_cmsg_rdma_args+0x8f4/0x1240
[  231.094802][T16785]  rds_cmsg_send+0x33d/0x5c0
[  231.094830][T16785]  rds_sendmsg+0x1129/0x1f00
[  231.094859][T16785]  ? __pfx_rds_sendmsg+0x10/0x10
[  231.094874][T16785]  ? aa_sk_perm+0x81e/0x950
[  231.094897][T16785]  ? __pfx_aa_sk_perm+0x10/0x10
[  231.094943][T16785]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  231.094965][T16785]  ? aa_sock_msg_perm+0x94/0x160
[  231.094981][T16785]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  231.094995][T16785]  ? __pfx_rds_sendmsg+0x10/0x10
[  231.095012][T16785]  __sock_sendmsg+0x21c/0x270
[  231.095031][T16785]  ____sys_sendmsg+0x505/0x830
[  231.095055][T16785]  ? __pfx_____sys_sendmsg+0x10/0x10
[  231.095081][T16785]  ? import_iovec+0x74/0xa0
[  231.095102][T16785]  ___sys_sendmsg+0x21f/0x2a0
[  231.095124][T16785]  ? __pfx____sys_sendmsg+0x10/0x10
[  231.095171][T16785]  ? __fget_files+0x2a/0x420
[  231.095182][T16785]  ? __fget_files+0x3a0/0x420
[  231.095200][T16785]  __x64_sys_sendmsg+0x19b/0x260
[  231.095219][T16785]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  231.095244][T16785]  ? rcu_is_watching+0x15/0xb0
[  231.095260][T16785]  ? do_syscall_64+0xbe/0x3b0
[  231.095274][T16785]  do_syscall_64+0xfa/0x3b0
[  231.095285][T16785]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.095295][T16785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.095307][T16785]  ? exc_page_fault+0x9f/0xf0
[  231.095320][T16785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.095332][T16785] RIP: 0033:0x7fa860f8e9a9
[  231.095345][T16785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.095355][T16785] RSP: 002b:00007fa861eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.095369][T16785] RAX: ffffffffffffffda RBX: 00007fa8611b6080 RCX: 00007fa860f8e9a9
[  231.095379][T16785] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000009
[  231.095387][T16785] RBP: 00007fa861010d69 R08: 0000000000000000 R09: 0000000000000000
[  231.095395][T16785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.095424][T16785] R13: 0000000000000000 R14: 00007fa8611b6080 R15: 00007ffc5e128cf8
[  231.095447][T16785]  </TASK>
[  231.953406][T16841] netlink: 'syz.0.4574': attribute type 1 has an invalid length.
[  232.114055][T16861] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001
[  232.189479][T16864] netlink: 'syz.1.4580': attribute type 14 has an invalid length.
[  232.251446][T16873] bond0: entered promiscuous mode
[  232.253219][T16873] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  232.259618][T16873] batadv0: entered promiscuous mode
[  232.264676][T16873] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  232.282950][T16873] hsr1: entered allmulticast mode
[  232.285085][T16873] bond0: entered allmulticast mode
[  232.287806][T16873] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  232.290801][T16873] batadv0: entered allmulticast mode
[  232.295445][T16873] bond0: left promiscuous mode
[  232.300889][T16873] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  232.307876][T16873] batadv0: left promiscuous mode
[  232.322052][T16880] __nla_validate_parse: 16 callbacks suppressed
[  232.322065][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'.
[  232.326374][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4585'.
[  232.332350][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4585'.
[  232.425854][T16892] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4589'.
[  232.509538][T16903] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4591'.
[  232.511086][T16905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4592'.
[  232.513799][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'.
[  232.536616][T16905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4592'.
[  232.550025][T16908] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4593'.
[  232.646743][T16903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4591'.
[  232.654581][T16908] SET target dimension over the limit!
[  232.886451][T16931] netlink: 'syz.1.4600': attribute type 4 has an invalid length.
[  232.949369][T16935] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  235.064343][T16991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.136265][T16998] can: request_module (can-proto-5) failed.
[  235.404851][T17023] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  235.474056][T17023] batadv_slave_0: entered promiscuous mode
[  235.704839][T17035] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  235.831814][T17037] netlink: del zone limit has 4 unknown bytes
[  236.418147][T17065] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  236.472218][T17069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  236.559702][T17073] netlink: 'syz.2.4645': attribute type 23 has an invalid length.
[  236.719350][T17093] ip6tnl4: entered promiscuous mode
[  236.721587][T17093] ip6tnl4: entered allmulticast mode
[  236.725936][T17093] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  236.745600][T17091] nbd: must specify at least one socket
[  236.902210][T17104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.041427][T17105] IPv6: NLM_F_REPLACE set, but no existing node found!
[  237.562624][T17135] __nla_validate_parse: 22 callbacks suppressed
[  237.562635][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4661'.
[  237.568519][T17135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.623978][T17140] batman_adv: batadv0: Adding interface: dummy0
[  237.630394][T17140] batman_adv: batadv0: Interface activated: dummy0
[  237.758525][T17145] pim6reg1: entered promiscuous mode
[  237.760514][T17145] pim6reg1: entered allmulticast mode
[  237.926258][T17167] netlink: 'syz.2.4670': attribute type 10 has an invalid length.
[  237.941519][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4671'.
[  237.943243][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'.
[  237.944637][T17169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4671'.
[  237.948981][T17169] gtp1: entered promiscuous mode
[  237.956509][T17169] gtp1: entered allmulticast mode
[  238.016348][T17171] netlink: 'syz.1.4672': attribute type 1 has an invalid length.
[  238.164097][T17187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.170169][T17185] netlink: 'syz.0.4677': attribute type 9 has an invalid length.
[  238.172703][T17185] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.4677'.
[  238.218832][T17187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.274374][T17187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.282929][T17187] set match dimension is over the limit!
[  238.351317][ T5876] IPVS: starting estimator thread 0...
[  238.390644][T17206] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4684'.
[  238.434586][T17208] veth1_macvtap: entered promiscuous mode
[  238.437906][T17204] IPVS: using max 78 ests per chain, 187200 per kthread
[  238.441168][T17208] macsec2: entered promiscuous mode
[  238.450999][T17208] veth1_macvtap: left promiscuous mode
[  238.472349][T17210] netlink: 'syz.2.4686': attribute type 2 has an invalid length.
[  238.475701][T17210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4686'.
[  238.601893][T17215] pim6reg1: entered promiscuous mode
[  238.604251][T17215] pim6reg1: entered allmulticast mode
[  238.614534][T17215] xt_l2tp: invalid flags combination: 8
[  238.672644][T17222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4689'.
[  238.676393][T17222] netlink: 'syz.0.4689': attribute type 7 has an invalid length.
[  238.681954][T17222] netlink: 'syz.0.4689': attribute type 8 has an invalid length.
[  238.686522][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4689'.
[  238.722208][   T13] IPVS: stop unused estimator thread 0...
[  238.753231][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4691'.
[  238.821469][T17239] netlink: 'syz.1.4695': attribute type 10 has an invalid length.
[  238.848091][T17239] 8021q: adding VLAN 0 to HW filter on device team0
[  238.854958][T17239] team0: entered allmulticast mode
[  238.859879][T17239] bond0: (slave team0): Enslaving as an active interface with an up link
[  238.990131][T17256] bond0: Unable to set down delay as MII monitoring is disabled
[  239.009798][T17250] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  239.330612][T17315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.450588][T17324] tipc: New replicast peer: 255.255.255.255
[  239.453156][T17324] tipc: Enabled bearer <udp:syz2>, priority 26
[  242.479430][T17339] netlink: 'syz.2.4722': attribute type 1 has an invalid length.
[  242.526541][T17344] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  242.632560][T17356] tipc: Can't bind to reserved service type 1
[  242.658648][T17356] openvswitch: netlink: Flow actions attr not present in new flow.
[  242.725185][T17365] __nla_validate_parse: 10 callbacks suppressed
[  242.725197][T17365] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4726'.
[  242.731854][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4726'.
[  242.852558][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4729'.
[  242.862569][T17381] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  242.870972][T17382] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  242.950305][T17387] netlink: 'syz.0.4730': attribute type 1 has an invalid length.
[  243.051271][T17394] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4732'.
[  243.187559][T17407] syzkaller1: entered promiscuous mode
[  243.194285][T17407] syzkaller1: entered allmulticast mode
[  243.202589][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4739'.
[  243.203504][T17407] netlink: 'syz.2.4738': attribute type 1 has an invalid length.
[  243.210921][T17407] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4738'.
[  243.432872][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'.
[  243.439764][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4744'.
[  243.441926][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'.
[  243.478754][T17434] IPv6: syztnl1: Disabled Multicast RS
[  243.513259][T17432] netlink: 'syz.1.4745': attribute type 1 has an invalid length.
[  243.515753][T17432] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4745'.
[  243.584719][T17441] syzkaller0: entered promiscuous mode
[  243.586661][T17441] syzkaller0: entered allmulticast mode
[  243.720464][T17449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.801771][T17446] netlink: 'syz.2.4750': attribute type 8 has an invalid length.
[  243.815447][T17458] bond0: (slave team0): Releasing backup interface
[  243.822319][T17458] team0: left allmulticast mode
[  243.825718][T17458] batman_adv: batadv0: Interface deactivated: dummy0
[  243.828612][T17458] batman_adv: batadv0: Removing interface: dummy0
[  243.844946][T17458] bond0: (slave wlan1): Releasing backup interface
[  243.891101][T17458] netlink: 'syz.1.4753': attribute type 10 has an invalid length.
[  243.897478][T17458] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  243.908612][T17458] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  243.911574][T17458] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  243.932403][T17458] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  243.936467][T17458] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  244.374428][T17496] Cannot find add_set index 3 as target
[  244.406012][T17504] netlink: 'syz.2.4768': attribute type 6 has an invalid length.
[  244.413724][T17504] netlink: 'syz.2.4768': attribute type 6 has an invalid length.
[  244.706689][T17534] xt_CT: You must specify a L4 protocol and not use inversions on it
[  245.186585][T17570] netlink: 'syz.2.4783': attribute type 9 has an invalid length.
[  245.235432][T17573] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  245.351479][   T24] hid-generic 0005:07C0:5505.0002: item fetching failed at offset 0/1
[  245.354793][   T24] hid-generic 0005:07C0:5505.0002: probe with driver hid-generic failed with error -22
[  245.686747][T17639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  245.698701][T17639] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  245.981912][T17659] netlink: 'syz.0.4802': attribute type 4 has an invalid length.
[  245.990141][T17659] netlink: 'syz.0.4802': attribute type 4 has an invalid length.
[  246.135446][T17664] IPv6: syztnl1: Disabled Multicast RS
[  246.443018][T17682] xt_hashlimit: size too large, truncated to 1048576
[  246.701947][T17697] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.761932][T17697] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.825539][T17697] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.866231][T17705] team0: Port device team_slave_0 removed
[  246.871394][T17705] team0: Port device team_slave_1 removed
[  246.873737][T17705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.876126][T17705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.890685][T17705] bond1: (slave gretap1): Releasing active interface
[  246.896310][T17705] bond0: (slave ip6gretap1): Releasing backup interface
[  246.903540][   T28] tipc: Resetting bearer <eth:team0>
[  246.909708][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.913832][T17697] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.927149][T17705] tipc: Resetting bearer <eth:team0>
[  246.953254][T17705] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  246.978451][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.982681][T17705] netdevsim0: mtu less than device minimum
[  247.025440][T17697] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.039569][T17708] team0: Port device geneve0 added
[  247.049082][T17697] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.064473][T17697] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.077790][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.086249][T17697] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.143013][T17714] x_tables: duplicate underflow at hook 1
[  247.184899][T17714] pimreg3: entered allmulticast mode
[  247.189363][T17713] pimreg3: left allmulticast mode
[  247.229191][T17717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.232541][T17717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.239403][T17717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.246971][T17721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.296647][T17726] delete_channel: no stack
[  247.496595][T17742] xt_hashlimit: size too large, truncated to 1048576
[  247.756961][T17747] __nla_validate_parse: 28 callbacks suppressed
[  247.756978][T17747] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4822'.
[  247.898777][T17759] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4826'.
[  247.904870][T17759] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4826'.
[  247.991209][T17764] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4828'.
[  247.994906][T17764] net_ratelimit: 6 callbacks suppressed
[  247.994918][T17764] openvswitch: netlink: Flow key attr not present in new flow.
[  248.028452][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.608123][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.676368][T17797] ipt_ECN: cannot use operation on non-tcp rule
[  248.681917][T17797] validate_nla: 4 callbacks suppressed
[  248.681927][T17797] netlink: 'syz.2.4836': attribute type 21 has an invalid length.
[  248.686539][T17797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4836'.
[  248.795787][T17797] syzkaller0: entered allmulticast mode
[  248.802947][T17797] syzkaller0 (unregistering): left allmulticast mode
[  248.995543][ T5828] IPVS: starting estimator thread 0...
[  249.111699][T17806] IPVS: using max 46 ests per chain, 110400 per kthread
[  249.120650][T17812] bond0 (unregistering): Released all slaves
[  249.276251][T17820] netlink: 'syz.0.4843': attribute type 1 has an invalid length.
[  249.280065][T17820] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4843'.
[  249.284737][T17820] netlink: 'syz.0.4843': attribute type 10 has an invalid length.
[  249.363298][T17826] syzkaller1: entered promiscuous mode
[  249.365135][T17826] syzkaller1: entered allmulticast mode
[  249.421453][T17825] bond0: entered promiscuous mode
[  249.427814][T17825] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  249.430660][T17825] hsr0: entered promiscuous mode
[  249.450806][T17840] delete_channel: no stack
[  249.452937][T17840] delete_channel: no stack
[  249.455148][T17840] delete_channel: no stack
[  249.457121][T17840] delete_channel: no stack
[  249.465344][T17840] delete_channel: no stack
[  249.467594][T17840] delete_channel: no stack
[  249.469657][T17840] delete_channel: no stack
[  249.471460][T17840] delete_channel: no stack
[  249.473392][T17840] delete_channel: no stack
[  249.475067][T17840] delete_channel: no stack
[  249.476790][T17840] delete_channel: no stack
[  249.481079][T17840] delete_channel: no stack
[  249.482748][T17840] delete_channel: no stack
[  249.484254][T17840] delete_channel: no stack
[  249.485795][T17840] delete_channel: no stack
[  249.487671][T17840] delete_channel: no stack
[  249.489241][T17840] delete_channel: no stack
[  249.490841][T17840] delete_channel: no stack
[  249.492350][T17840] delete_channel: no stack
[  249.493857][T17840] delete_channel: no stack
[  249.495397][T17840] delete_channel: no stack
[  249.497130][T17840] delete_channel: no stack
[  249.499612][T17840] delete_channel: no stack
[  249.501320][T17840] delete_channel: no stack
[  249.502781][T17845] unknown channel width for channel at 909000KHz?
[  249.503185][T17840] delete_channel: no stack
[  249.506689][T17840] delete_channel: no stack
[  249.509220][T17840] delete_channel: no stack
[  249.510767][T17840] delete_channel: no stack
[  249.512233][T17840] delete_channel: no stack
[  249.513732][T17840] delete_channel: no stack
[  249.515259][T17840] delete_channel: no stack
[  249.516915][T17840] delete_channel: no stack
[  249.519738][T17840] delete_channel: no stack
[  249.521338][T17840] delete_channel: no stack
[  249.522876][T17840] delete_channel: no stack
[  249.524498][T17840] delete_channel: no stack
[  249.526108][T17840] delete_channel: no stack
[  249.528803][T17840] delete_channel: no stack
[  249.531252][T17840] delete_channel: no stack
[  249.533113][T17840] delete_channel: no stack
[  249.534831][T17840] delete_channel: no stack
[  249.536555][T17840] delete_channel: no stack
[  249.538805][T17840] delete_channel: no stack
[  249.540346][T17840] delete_channel: no stack
[  249.542062][T17840] delete_channel: no stack
[  249.543548][T17840] delete_channel: no stack
[  249.545063][T17840] delete_channel: no stack
[  249.546711][T17840] delete_channel: no stack
[  249.549486][T17840] delete_channel: no stack
[  249.551151][T17840] delete_channel: no stack
[  249.552700][T17840] delete_channel: no stack
[  249.554236][T17840] delete_channel: no stack
[  249.555794][T17840] delete_channel: no stack
[  249.558381][T17840] delete_channel: no stack
[  249.560005][T17840] delete_channel: no stack
[  249.561638][T17840] delete_channel: no stack
[  249.563163][T17840] delete_channel: no stack
[  249.564694][T17840] delete_channel: no stack
[  249.566262][T17840] delete_channel: no stack
[  249.568215][T17840] delete_channel: no stack
[  249.569819][T17840] delete_channel: no stack
[  249.628674][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.643927][T17860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4854'.
[  249.649056][T17860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  250.347931][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.350934][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.492469][T17867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4855'.
[  250.701386][T17872] netlink: 'syz.0.4857': attribute type 1 has an invalid length.
[  250.783575][T17889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.863173][T17906] netlink: 'syz.0.4865': attribute type 1 has an invalid length.
[  250.865569][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4865'.
[  251.083919][T17913] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4867'.
[  252.026201][T17936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.052937][T17938] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  252.213872][T17950] tipc: Resetting bearer <eth:team0>
[  252.292114][T17950] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.295052][T17950] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.300328][T17950] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.303168][T17950] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.386376][T17958] netlink: 'syz.1.4876': attribute type 12 has an invalid length.
[  252.576571][T17969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.580170][T17969] syzkaller0: entered promiscuous mode
[  252.582618][T17969] syzkaller0: entered allmulticast mode
[  252.597041][T17969] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  252.602434][T17969] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  252.610000][T17968] tipc: Resetting bearer <eth:syzkaller0>
[  252.623676][T17968] tipc: Disabling bearer <eth:syzkaller0>
[  252.804225][T17971] __nla_validate_parse: 4 callbacks suppressed
[  252.804241][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4880'.
[  252.875892][T17976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.915369][T17980] netlink: 'syz.0.4883': attribute type 1 has an invalid length.
[  252.918806][T17980] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4883'.
[  253.050478][T17988] syzkaller1: entered promiscuous mode
[  253.052232][T17988] syzkaller1: entered allmulticast mode
[  253.200564][T17994] netlink: 'syz.0.4890': attribute type 1 has an invalid length.
[  253.335466][T18005] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.4893'.
[  254.691758][T18055] lo: entered allmulticast mode
[  254.775505][T18064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4908'.
[  254.802066][T18066] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4909'.
[  254.809362][T18060] netlink: 'syz.1.4907': attribute type 21 has an invalid length.
[  254.811902][T18060] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4907'.
[  254.814851][T18060] netlink: 'syz.1.4907': attribute type 5 has an invalid length.
[  254.819917][T18060] netlink: 'syz.1.4907': attribute type 6 has an invalid length.
[  254.822296][T18060] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4907'.
[  254.982265][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4911'.
[  254.985150][T18078] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4911'.
[  254.991866][T18078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.995794][T18078] syzkaller0: entered promiscuous mode
[  254.998563][T18078] syzkaller0: entered allmulticast mode
[  255.014568][T18077] tipc: Resetting bearer <eth:syzkaller0>
[  255.028534][T18077] tipc: Disabling bearer <eth:syzkaller0>
[  255.341338][T18091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4914'.
[  255.421676][T18097] netlink: 'syz.0.4917': attribute type 10 has an invalid length.
[  255.425775][T18097] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  255.606163][T18109] netlink: 'syz.1.4921': attribute type 83 has an invalid length.
[  256.684600][ T5827] Bluetooth: hci2: link tx timeout
[  256.687125][ T5827] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  256.779452][ T5218] Bluetooth: hci2: link tx timeout
[  256.781667][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  256.800472][ T5218] Bluetooth: hci2: link tx timeout
[  256.802810][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  256.855251][T18186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.859391][T18186] syzkaller0: entered promiscuous mode
[  256.861230][T18186] syzkaller0: entered allmulticast mode
[  256.879723][T18186] tipc: Resetting bearer <eth:syzkaller0>
[  256.900565][T18190] tipc: Resetting bearer <eth:syzkaller0>
[  256.919481][T18190] tipc: Disabling bearer <eth:syzkaller0>
[  256.927086][ T5218] Bluetooth: hci2: link tx timeout
[  256.929442][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  257.468689][ T5218] Bluetooth: hci2: link tx timeout
[  257.471032][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  257.657354][ T5218] Bluetooth: hci2: link tx timeout
[  257.659573][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  257.741506][T18276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  257.841367][T18285] __nla_validate_parse: 13 callbacks suppressed
[  257.841377][T18285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4967'.
[  257.876025][T18287] dvmrp0: entered allmulticast mode
[  257.952344][ T5218] Bluetooth: hci2: link tx timeout
[  257.954179][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  257.956191][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4967'.
[  257.962581][ T5218] Bluetooth: hci2: link tx timeout
[  257.964384][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  258.041688][T18295] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4967'.
[  258.102739][T18305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4971'.
[  258.105909][T18305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4971'.
[  258.195118][T18312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4972'.
[  258.303179][T18321] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4974'.
[  258.474818][T18332] IPVS: Error connecting to the multicast addr
[  258.536237][T18342] netlink: 'syz.2.4982': attribute type 6 has an invalid length.
[  258.561169][T18344] netlink: 'syz.0.4983': attribute type 1 has an invalid length.
[  258.564041][T18344] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4983'.
[  258.569231][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'.
[  258.572698][T18348] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  258.575657][T18348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.581004][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'.
[  258.584238][T18350] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  258.586724][T18350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.649108][T18357] bond0 (unregistering): Released all slaves
[  258.653349][T18359] ksmbd: Unknown IPC event: 3, ignore.
[  258.663675][T18359] gretap0: entered promiscuous mode
[  258.672017][T18359] 0{X: renamed from gretap0
[  258.674946][T18359] 0{X: left promiscuous mode
[  258.676577][T18359] 0{X: entered allmulticast mode
[  258.685433][T18359] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  258.747548][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  258.770039][T18366] xt_cgroup: path and classid specified
[  258.774777][T18366] xt_cgroup: path and classid specified
[  258.818819][T18373] netlink: 'syz.0.4991': attribute type 8 has an invalid length.
[  259.058390][T18389] xt_CT: No such helper "pptp"
[  259.770220][T18456] openvswitch: netlink: Flow key attribute not present in set flow.
[  259.873678][T18464] bridge0: port 1(vlan4) entered blocking state
[  259.876101][T18464] bridge0: port 1(vlan4) entered disabled state
[  259.878575][T18464] vlan4: entered allmulticast mode
[  259.880386][T18464] bond0: entered allmulticast mode
[  259.883191][T18464] vlan4: entered promiscuous mode
[  259.911205][T18468] Cannot find del_set index 0 as target
[  260.060199][T18480] netlink: 'syz.1.5027': attribute type 1 has an invalid length.
[  260.109124][   T27] 
[  260.110076][   T27] ======================================================
[  260.112726][   T27] WARNING: possible circular locking dependency detected
[  260.115721][   T27] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  260.120054][   T27] ------------------------------------------------------
[  260.122413][   T27] kworker/u10:0/27 is trying to acquire lock:
[  260.124519][   T27] ffff888020673358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  260.127722][   T27] 
[  260.127722][   T27] but task is already holding lock:
[  260.130334][   T27] ffff888020587988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  260.133553][   T27] 
[  260.133553][   T27] which lock already depends on the new lock.
[  260.133553][   T27] 
[  260.137046][   T27] 
[  260.137046][   T27] the existing dependency chain (in reverse order) is:
[  260.139970][   T27] 
[  260.139970][   T27] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  260.143046][   T27]        lock_acquire+0x120/0x360
[  260.144970][   T27]        down_write+0x96/0x1f0
[  260.146822][   T27]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  260.149095][   T27]        nbd_start_device+0x16c/0xac0
[  260.151201][   T27]        nbd_genl_connect+0x1250/0x1930
[  260.153019][   T27]        genl_family_rcv_msg_doit+0x215/0x300
[  260.155515][   T27]        genl_rcv_msg+0x60e/0x790
[  260.157154][   T27]        netlink_rcv_skb+0x208/0x470
[  260.158892][   T27]        genl_rcv+0x28/0x40
[  260.160406][   T27]        netlink_unicast+0x75c/0x8e0
[  260.162321][   T27]        netlink_sendmsg+0x805/0xb30
[  260.164070][   T27]        __sock_sendmsg+0x21c/0x270
[  260.165811][   T27]        ____sys_sendmsg+0x505/0x830
[  260.167622][   T27]        ___sys_sendmsg+0x21f/0x2a0
[  260.169564][   T27]        __x64_sys_sendmsg+0x19b/0x260
[  260.171403][   T27]        do_syscall_64+0xfa/0x3b0
[  260.173042][   T27]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.175272][   T27] 
[  260.175272][   T27] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  260.177810][   T27]        lock_acquire+0x120/0x360
[  260.179647][   T27]        __mutex_lock+0x182/0xe80
[  260.181526][   T27]        refcount_dec_and_mutex_lock+0x30/0xa0
[  260.183554][   T27]        nbd_config_put+0x2c/0x790
[  260.185285][   T27]        nbd_release+0xfe/0x140
[  260.186924][   T27]        bdev_release+0x536/0x650
[  260.188624][   T27]        blkdev_release+0x15/0x20
[  260.190284][   T27]        __fput+0x44c/0xa70
[  260.191789][   T27]        fput_close_sync+0x119/0x200
[  260.193514][   T27]        __x64_sys_close+0x7f/0x110
[  260.195218][   T27]        do_syscall_64+0xfa/0x3b0
[  260.196869][   T27]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.198970][   T27] 
[  260.198970][   T27] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  260.201789][   T27]        validate_chain+0xb9b/0x2140
[  260.203546][   T27]        __lock_acquire+0xab9/0xd20
[  260.205267][   T27]        lock_acquire+0x120/0x360
[  260.206918][   T27]        __mutex_lock+0x182/0xe80
[  260.208672][   T27]        __del_gendisk+0x129/0x9e0
[  260.210383][   T27]        del_gendisk+0xe8/0x160
[  260.212017][   T27]        nbd_dev_remove_work+0x47/0xe0
[  260.213879][   T27]        process_scheduled_works+0xae1/0x17b0
[  260.216012][   T27]        worker_thread+0x8a0/0xda0
[  260.218057][   T27]        kthread+0x711/0x8a0
[  260.219861][   T27]        ret_from_fork+0x3fc/0x770
[  260.221787][   T27]        ret_from_fork_asm+0x1a/0x30
[  260.223651][   T27] 
[  260.223651][   T27] other info that might help us debug this:
[  260.223651][   T27] 
[  260.227299][   T27] Chain exists of:
[  260.227299][   T27]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  260.227299][   T27] 
[  260.232693][   T27]  Possible unsafe locking scenario:
[  260.232693][   T27] 
[  260.235660][   T27]        CPU0                    CPU1
[  260.237882][   T27]        ----                    ----
[  260.239741][   T27]   rlock(&set->update_nr_hwq_lock);
[  260.241461][   T27]                                lock(&nbd->config_lock);
[  260.243767][   T27]                                lock(&set->update_nr_hwq_lock);
[  260.246254][   T27]   lock(&disk->open_mutex);
[  260.247779][   T27] 
[  260.247779][   T27]  *** DEADLOCK ***
[  260.247779][   T27] 
[  260.250420][   T27] 3 locks held by kworker/u10:0/27:
[  260.252112][   T27]  #0: ffff888020580948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  260.255626][   T27]  #1: ffffc9000060fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  260.259647][   T27]  #2: ffff888020587988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  260.263050][   T27] 
[  260.263050][   T27] stack backtrace:
[  260.265003][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  260.265014][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.265020][   T27] Workqueue: nbd-del nbd_dev_remove_work
[  260.265031][   T27] Call Trace:
[  260.265036][   T27]  <TASK>
[  260.265040][   T27]  dump_stack_lvl+0x189/0x250
[  260.265051][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.265059][   T27]  ? __pfx__printk+0x10/0x10
[  260.265069][   T27]  ? print_lock_name+0xde/0x100
[  260.265078][   T27]  print_circular_bug+0x2ee/0x310
[  260.265088][   T27]  check_noncircular+0x134/0x160
[  260.265098][   T27]  validate_chain+0xb9b/0x2140
[  260.265108][   T27]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  260.265118][   T27]  ? arch_stack_walk+0x11c/0x150
[  260.265129][   T27]  __lock_acquire+0xab9/0xd20
[  260.265136][   T27]  ? __del_gendisk+0x129/0x9e0
[  260.265145][   T27]  lock_acquire+0x120/0x360
[  260.265151][   T27]  ? __del_gendisk+0x129/0x9e0
[  260.265160][   T27]  ? lockdep_unlock+0x89/0x120
[  260.265167][   T27]  __mutex_lock+0x182/0xe80
[  260.265175][   T27]  ? __del_gendisk+0x129/0x9e0
[  260.265185][   T27]  ? __del_gendisk+0x129/0x9e0
[  260.265194][   T27]  ? __pfx___mutex_lock+0x10/0x10
[  260.265201][   T27]  ? __pfx___might_resched+0x10/0x10
[  260.265210][   T27]  ? __lock_acquire+0xab9/0xd20
[  260.265217][   T27]  ? disk_del_events+0xb5/0x210
[  260.265226][   T27]  ? __del_gendisk+0xc1/0x9e0
[  260.265240][   T27]  __del_gendisk+0x129/0x9e0
[  260.265249][   T27]  ? del_gendisk+0xe0/0x160
[  260.265258][   T27]  ? __pfx___del_gendisk+0x10/0x10
[  260.265267][   T27]  ? down_read+0x1ad/0x2e0
[  260.265275][   T27]  del_gendisk+0xe8/0x160
[  260.265284][   T27]  nbd_dev_remove_work+0x47/0xe0
[  260.265293][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  260.265301][   T27]  process_scheduled_works+0xae1/0x17b0
[  260.265313][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  260.265323][   T27]  worker_thread+0x8a0/0xda0
[  260.265335][   T27]  kthread+0x711/0x8a0
[  260.265345][   T27]  ? __pfx_worker_thread+0x10/0x10
[  260.265353][   T27]  ? __pfx_kthread+0x10/0x10
[  260.265363][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  260.265373][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.265380][   T27]  ? __pfx_kthread+0x10/0x10
[  260.265389][   T27]  ret_from_fork+0x3fc/0x770
[  260.265397][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  260.265405][   T27]  ? __switch_to_asm+0x39/0x70
[  260.265414][   T27]  ? __switch_to_asm+0x33/0x70
[  260.265423][   T27]  ? __pfx_kthread+0x10/0x10
[  260.265432][   T27]  ret_from_fork_asm+0x1a/0x30
[  260.265444][   T27]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  261.193966][ T5840] team0: Port device geneve0 removed
[  261.201620][ T5840] bond1 (unregistering): Released all slaves
[  262.824607][ T5840] tipc: Disabling bearer <eth:team0>
[  262.826995][ T5840] tipc: Disabling bearer <udp:syz2>
[  262.829878][ T5840] tipc: Left network mode
[  262.858198][ T5840] IPVS: stopping backup sync thread 14933 ...
[  263.593808][ T5840] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
18:47:09  Registers:
info registers vcpu 0

CPU#0
RAX=0a9d34cc18361400 RBX=ffffffff81976c78 RCX=0a9d34cc18361400 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d64d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6505d6f095 CR3=0000000029536000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f7652611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000060ee10
R8 =ffff888108690237 R9 =1ffff110210d2046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8b6 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f76503f5fc8 CR3=000000012a9c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
