last executing test programs:

2.277571287s ago: executing program 1 (id=1862):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)

2.127994976s ago: executing program 1 (id=1869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

2.080232092s ago: executing program 1 (id=1872):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
write$tun(r2, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r0, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32=r1, @ANYBLOB="51000e0080000000ffffffffffff08021100000008021100000000000000000000000000640043a00100040603077f00fc0025030034042a01013c040102b308710700000000010e08760609027fffe900000000080026006c09000008000c006400000008000d000000000018005a8014007593830080040002000700010005040b0004000200"], 0xa0}}, 0x0)

1.980301841s ago: executing program 1 (id=1876):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
sendfile(r2, r1, 0x0, 0x10000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff000)
socket(0xa, 0x3, 0x3a)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)

1.010159792s ago: executing program 1 (id=1901):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)

928.845725ms ago: executing program 0 (id=1905):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3201, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
socket$packet(0x11, 0x3, 0x300)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
close(r1)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x40014)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000)="df2d81c437896fea516477f772976906d5ad4be28f856b0977176456bce49bc02bace0a62efaa196eb3a302ada126e192675daed5fe39bfcaad1215bae281156d9870bc665075426ba03adb0d27626", 0x4f}, {&(0x7f0000000140)="448ed536c85269e062c37ea499d9a1e699b0195b56e46ebc4527feaf6e4b", 0x1e}, {&(0x7f0000000180)="6a10f5e8a667cfb4aa3908a4ec60396a088ab30650653b795486831f84e0b981deb576b841ea3fdcd088ccf4ee1fc0b31fa2ad717246530790c8f93ef1f8f0f3382bd1c5763a73ddec8e48ae52aae94dc51eb8b0c48e4f8fd112", 0x5a}, {&(0x7f0000000240)="a44c3e3846ce368d3740ea25cbe2f82db316f0f39de15e1703", 0x19}, {&(0x7f0000000280)="a3626693e5d36d294d5514995aa564d3621f3600cd22c392fe7b5dabf90f6ce0fdecd4cadac6c56ed84a3d6a26a7c3564fc492b110c1121ae8d8d5e44005bd013982a69499fdd9c062ec113481fcc478a73bbfaabd9a4e71ecf83f72398771ed50bff7", 0x63}, {&(0x7f0000000300)="095ecfa80179f4f30cfa1688ed63e9e77db00b0f765b6f818159c93834b89da6731178df90", 0x25}], 0x6)

880.482455ms ago: executing program 1 (id=1908):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)

759.893056ms ago: executing program 0 (id=1911):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4)

759.525583ms ago: executing program 0 (id=1913):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)

697.630761ms ago: executing program 0 (id=1914):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

637.840981ms ago: executing program 0 (id=1915):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x9)

560.020622ms ago: executing program 0 (id=1917):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="03000000300001802c00040014000170a4a003007f00000100000000000000001400000002000000e000000200a96d796dc544"], 0x44}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40481c0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

279.7755ms ago: executing program 2 (id=1925):
socket(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="197cc163df7ce9d0b02650c9824bb25cb9048c6fee30d513dc41d4a41a1a56ea7b1057b2cef35eaa5e6df250", 0x2c}], 0x2)

230.324342ms ago: executing program 2 (id=1926):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r0, 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000700)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20040048}, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r3, &(0x7f0000008940)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x5c, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f8000000000000002900000037"], 0xf8}}], 0x1, 0x40400e4)

179.680387ms ago: executing program 2 (id=1927):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg$unix(r1, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000000, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)

179.223693ms ago: executing program 2 (id=1928):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000180001002cbd7000000000000a000000ff02ff0000aa"], 0x30}}, 0x0)

99.665313ms ago: executing program 2 (id=1929):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 2 (id=1930):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0)
sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004)
shutdown(r1, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11230' (ED25519) to the list of known hosts.
syzkaller login: [   47.699572][ T5755] cgroup: Unknown subsys name 'net'
[   47.837898][ T5755] cgroup: Unknown subsys name 'cpuset'
[   47.841561][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.105673][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.331333][ T5851] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.766588][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   58.773220][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.946435][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.949302][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.951866][ T5859] bridge_slave_0: entered allmulticast mode
[   58.955709][ T5859] bridge_slave_0: entered promiscuous mode
[   58.959845][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.962271][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.964671][ T5859] bridge_slave_1: entered allmulticast mode
[   58.967589][ T5859] bridge_slave_1: entered promiscuous mode
[   58.988359][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.993222][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.013292][ T5859] team0: Port device team_slave_0 added
[   59.017050][ T5859] team0: Port device team_slave_1 added
[   59.041057][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.044045][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.056232][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.063030][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.066195][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.077359][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.110710][ T5859] hsr_slave_0: entered promiscuous mode
[   59.113217][ T5859] hsr_slave_1: entered promiscuous mode
[   59.202683][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.208640][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.212819][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.217572][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.237087][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.239525][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.242446][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.244846][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.278406][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.290226][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.293539][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.302969][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   59.310860][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.313674][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.327305][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.329694][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.437888][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.466828][ T5859] veth0_vlan: entered promiscuous mode
[   59.473466][ T5859] veth1_vlan: entered promiscuous mode
[   59.491190][ T5859] veth0_macvtap: entered promiscuous mode
[   59.495221][ T5859] veth1_macvtap: entered promiscuous mode
[   59.504685][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.514868][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.524108][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.530616][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.533624][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.537905][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.247340][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.387953][ T5896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.391534][ T5896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.396574][ T5896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.400831][ T5896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.406305][ T5896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.407245][ T5899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.413371][ T5899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.421378][ T5899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.426193][ T5899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.431765][ T5899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.472038][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.475926][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.479026][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.482436][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.486747][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.660076][ T5897] chnl_net:caif_netlink_parms(): no params data found
[   61.720891][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   61.789041][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.792145][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.795483][ T5897] bridge_slave_0: entered allmulticast mode
[   61.798328][ T5897] bridge_slave_0: entered promiscuous mode
[   61.819545][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.822142][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.824670][ T5897] bridge_slave_1: entered allmulticast mode
[   61.827889][ T5897] bridge_slave_1: entered promiscuous mode
[   61.857712][ T5901] chnl_net:caif_netlink_parms(): no params data found
[   61.867286][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.882939][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.885966][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.888766][ T5894] bridge_slave_0: entered allmulticast mode
[   61.892517][ T5894] bridge_slave_0: entered promiscuous mode
[   61.902463][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.921204][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.924337][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.927953][ T5894] bridge_slave_1: entered allmulticast mode
[   61.931994][ T5894] bridge_slave_1: entered promiscuous mode
[   61.979697][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.992589][ T5897] team0: Port device team_slave_0 added
[   61.999345][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.009097][ T5897] team0: Port device team_slave_1 added
[   62.048523][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.051230][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.061871][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.078692][ T5894] team0: Port device team_slave_0 added
[   62.090409][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.093355][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.103615][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.109399][ T5894] team0: Port device team_slave_1 added
[   62.137374][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.140172][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.142883][ T5901] bridge_slave_0: entered allmulticast mode
[   62.146966][ T5901] bridge_slave_0: entered promiscuous mode
[   62.167263][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.170323][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.173323][ T5901] bridge_slave_1: entered allmulticast mode
[   62.179894][ T5901] bridge_slave_1: entered promiscuous mode
[   62.203870][ T5897] hsr_slave_0: entered promiscuous mode
[   62.206557][ T5897] hsr_slave_1: entered promiscuous mode
[   62.208664][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.211456][ T5897] Cannot create hsr debugfs directory
[   62.214317][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.217915][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.227942][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.245770][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.248430][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.259038][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.284578][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.307185][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.353784][ T5901] team0: Port device team_slave_0 added
[   62.369430][ T5901] team0: Port device team_slave_1 added
[   62.375912][ T5894] hsr_slave_0: entered promiscuous mode
[   62.378624][ T5894] hsr_slave_1: entered promiscuous mode
[   62.381169][ T5894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.383972][ T5894] Cannot create hsr debugfs directory
[   62.427118][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.429967][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.440959][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.465986][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.468906][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.479352][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.551607][ T5901] hsr_slave_0: entered promiscuous mode
[   62.554640][ T5901] hsr_slave_1: entered promiscuous mode
[   62.557535][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.560397][ T5901] Cannot create hsr debugfs directory
[   62.586472][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.708809][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.713719][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.728869][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.750264][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.781731][ T5894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.791196][ T5894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.801186][ T5894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.810969][ T5894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.871889][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.899727][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.920510][ T5897] 8021q: adding VLAN 0 to HW filter on device team0
[   62.928889][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.931473][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.957626][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.960263][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.972435][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.986661][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.022016][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   63.032619][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.035058][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.070015][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.072358][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.154205][ T5876] bridge_slave_1: left allmulticast mode
[   63.161639][ T5876] bridge_slave_1: left promiscuous mode
[   63.164673][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.173182][ T5876] bridge_slave_0: left allmulticast mode
[   63.177334][ T5876] bridge_slave_0: left promiscuous mode
[   63.180278][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.364039][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.370278][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.373905][ T5876] bond0 (unregistering): Released all slaves
[   63.474148][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.486858][ T5899] Bluetooth: hci0: command tx timeout
[   63.489345][   T54] Bluetooth: hci1: command tx timeout
[   63.502872][ T5876] hsr_slave_0: left promiscuous mode
[   63.506500][ T5876] hsr_slave_1: left promiscuous mode
[   63.509178][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.512228][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.516422][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.519364][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.531887][ T5876] veth1_macvtap: left promiscuous mode
[   63.533961][ T5876] veth0_macvtap: left promiscuous mode
[   63.536588][ T5876] veth1_vlan: left promiscuous mode
[   63.538861][ T5876] veth0_vlan: left promiscuous mode
[   63.555732][   T54] Bluetooth: hci2: command tx timeout
[   63.734616][ T5876] team0 (unregistering): Port device team_slave_1 removed
[   63.751904][ T5876] team0 (unregistering): Port device team_slave_0 removed
[   63.960760][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.063041][ T5897] veth0_vlan: entered promiscuous mode
[   64.112193][ T5897] veth1_vlan: entered promiscuous mode
[   64.117530][ T5894] veth0_vlan: entered promiscuous mode
[   64.122615][ T5894] veth1_vlan: entered promiscuous mode
[   64.153902][ T5897] veth0_macvtap: entered promiscuous mode
[   64.184350][ T5897] veth1_macvtap: entered promiscuous mode
[   64.233815][ T5901] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.242071][ T5901] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.261209][ T5901] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.271464][ T5901] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.281163][ T5894] veth0_macvtap: entered promiscuous mode
[   64.291590][ T5894] veth1_macvtap: entered promiscuous mode
[   64.302821][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.317132][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.343483][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.414150][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.418154][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.421723][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.460341][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.500575][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.571145][ T5921] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.587522][ T5921] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.599720][ T5921] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.620845][ T5921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.676223][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.679429][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.708916][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.768562][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.776408][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.808744][ T5901] 8021q: adding VLAN 0 to HW filter on device team0
[   64.843776][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.849374][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.852575][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.860348][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.869289][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.872298][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.905530][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.913376][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.216739][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.284489][ T5901] veth0_vlan: entered promiscuous mode
[   65.290536][ T5901] veth1_vlan: entered promiscuous mode
[   65.330079][ T5901] veth0_macvtap: entered promiscuous mode
[   65.337275][ T5901] veth1_macvtap: entered promiscuous mode
[   65.350364][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.366426][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.382230][ T5921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.395023][ T5921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.415039][ T5921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.421250][ T5921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.514220][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.524078][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.552581][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.558526][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.566513][   T54] Bluetooth: hci1: command tx timeout
[   65.568852][ T5899] Bluetooth: hci0: command tx timeout
[   65.622423][ T6007] delete_channel: no stack
[   65.636476][   T54] Bluetooth: hci2: command tx timeout
[   65.676519][ T6012] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[   65.790027][ T6018] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET)
[   65.943818][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'.
[   66.607071][ T6065] netlink: 'syz.0.57': attribute type 4 has an invalid length.
[   66.899480][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'.
[   67.005752][ T6091] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   67.016703][ T6091] netlink: 172 bytes leftover after parsing attributes in process `syz.2.69'.
[   67.391900][ T6121] netlink: 'syz.1.84': attribute type 8 has an invalid length.
[   67.489288][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.492107][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.593550][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'.
[   67.645718][ T5899] Bluetooth: hci0: command tx timeout
[   67.648817][   T54] Bluetooth: hci1: command tx timeout
[   67.670377][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.683423][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.716018][   T54] Bluetooth: hci2: command tx timeout
[   67.796053][ T5921] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.822453][ T5921] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.849124][ T5921] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.854201][ T5921] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.934332][ T6134] syz.1.88 (6134) used greatest stack depth: 18008 bytes left
[   68.374524][ T6158] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   68.380040][ T5883] IPVS: starting estimator thread 0...
[   68.397168][ T6163] tipc: Started in network mode
[   68.399422][ T6163] tipc: Node identity ba9eb1dc9499, cluster identity 4711
[   68.403054][ T6163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.410063][ T6163] syzkaller0: entered promiscuous mode
[   68.412615][ T6163] syzkaller0: entered allmulticast mode
[   68.431277][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'.
[   68.440861][ T6163] tipc: Resetting bearer <eth:syzkaller0>
[   68.448972][ T6161] tipc: Resetting bearer <eth:syzkaller0>
[   68.466933][ T6164] IPVS: using max 36 ests per chain, 86400 per kthread
[   68.474094][ T6161] tipc: Disabling bearer <eth:syzkaller0>
[   68.707633][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.102'.
[   68.711649][ T6178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.711707][ T6179] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   68.917308][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'.
[   69.437060][ T6226] netlink: 104 bytes leftover after parsing attributes in process `syz.2.126'.
[   69.664600][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[   69.713446][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'.
[   69.719248][ T5899] Bluetooth: hci0: command tx timeout
[   69.721805][   T54] Bluetooth: hci1: command tx timeout
[   69.730226][ T6247] bond0: invalid ARP target 0.0.0.0 specified for addition
[   69.735336][ T6247] bond0: option arp_ip_target: invalid value (0)
[   69.796099][   T54] Bluetooth: hci2: command tx timeout
[   70.113376][ T6281] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   70.484404][ T6295] netlink: 'syz.0.159': attribute type 1 has an invalid length.
[   70.771663][ T6304] vcan0: tx drop: invalid sa for name 0x0100000000000000
[   71.034758][ T6306] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[   71.079813][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.084384][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   72.238917][ T6338] __nla_validate_parse: 3 callbacks suppressed
[   72.238932][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'.
[   72.322026][ T6349] tipc: Started in network mode
[   72.323810][ T6349] tipc: Node identity 0624f2b7da0e, cluster identity 4711
[   72.327241][ T6349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.337294][ T6349] syzkaller0: entered promiscuous mode
[   72.339209][ T6349] syzkaller0: entered allmulticast mode
[   72.369097][ T6349] tipc: Resetting bearer <eth:syzkaller0>
[   72.382684][ T6348] tipc: Resetting bearer <eth:syzkaller0>
[   72.393543][ T6348] tipc: Disabling bearer <eth:syzkaller0>
[   72.578532][ T6364] syzkaller1: entered promiscuous mode
[   72.580396][ T6364] syzkaller1: entered allmulticast mode
[   72.597526][ T6364] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   72.625080][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.188'.
[   72.659297][ T6360] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.810594][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.193'.
[   72.953068][ T6382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.953394][ T5962] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   73.178575][ T6393] netlink: 240 bytes leftover after parsing attributes in process `syz.0.198'.
[   73.670086][ T6402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.687449][ T6402] syzkaller0: entered promiscuous mode
[   73.689425][ T6402] syzkaller0: entered allmulticast mode
[   73.792470][ T6402] tipc: Resetting bearer <eth:syzkaller0>
[   73.807340][ T6401] tipc: Resetting bearer <eth:syzkaller0>
[   73.821225][ T6401] tipc: Disabling bearer <eth:syzkaller0>
[   73.831455][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   73.865555][ T6410] netlink: 220 bytes leftover after parsing attributes in process `syz.2.206'.
[   74.018479][ T6423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.089001][ T6421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.179019][ T6421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.238639][ T6421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.330607][ T6421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.347868][ T6453] netlink: 'syz.1.222': attribute type 1 has an invalid length.
[   74.447471][ T5921] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.471567][ T5921] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.480831][ T5921] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.488483][ T5921] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.809163][ T6476] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   74.812489][ T6476] netlink: 132 bytes leftover after parsing attributes in process `syz.1.232'.
[   74.821119][ T6476] netlink: 'syz.1.232': attribute type 2 has an invalid length.
[   74.824340][ T6476] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   74.829145][ T6476] netlink: 2 bytes leftover after parsing attributes in process `syz.1.232'.
[   74.942800][ T6482] netlink: 56 bytes leftover after parsing attributes in process `syz.1.236'.
[   75.265212][ T6509] netlink: 'syz.1.247': attribute type 21 has an invalid length.
[   75.272447][ T6509] netlink: 'syz.1.247': attribute type 6 has an invalid length.
[   75.277166][ T6509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.247'.
[   75.598807][ T6529] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[   75.636602][ T6529] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.664694][ T6529] bond1: (slave bridge1): making interface the new active one
[   75.672477][ T6529] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   75.703071][ T6529] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   75.971451][ T6552] nbd: must specify an index to disconnect
[   76.269279][ T6571] netlink: 'syz.1.276': attribute type 21 has an invalid length.
[   76.272744][ T6571] netlink: 'syz.1.276': attribute type 5 has an invalid length.
[   76.639345][ T6589] syzkaller0: entered promiscuous mode
[   76.641568][ T6589] syzkaller0: entered allmulticast mode
[   77.078029][ T6606] netlink: zone id is out of range
[   77.080390][ T6606] netlink: zone id is out of range
[   77.082626][ T6606] netlink: set zone limit has 4 unknown bytes
[   77.489147][ T6626] netlink: 'syz.2.303': attribute type 15 has an invalid length.
[   77.769349][ T6650] __nla_validate_parse: 7 callbacks suppressed
[   77.769364][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'.
[   78.330969][ T6692] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   78.334257][ T6692] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   78.339110][ T6692] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   78.639420][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'.
[   78.868005][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.871668][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.949177][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.958736][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.052412][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.056479][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.063026][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.067428][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.907048][ T6750] ipvlan2: entered promiscuous mode
[   79.909422][ T6750] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   80.180834][ T6752] netlink: 180 bytes leftover after parsing attributes in process `syz.1.360'.
[   81.198517][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'.
[   81.629876][ T6828] trusted_key: syz.2.396 sent an empty control message without MSG_MORE.
[   81.857899][ T6847] netlink: 'syz.2.402': attribute type 3 has an invalid length.
[   81.861280][ T6847] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   81.864683][ T6847] netlink: 192 bytes leftover after parsing attributes in process `syz.2.402'.
[   81.871306][ T6847] NCSI netlink: No device for ifindex 0
[   82.072149][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'.
[   82.162256][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[   83.107517][ T6921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.437'.
[   83.121963][ T6921] Zero length message leads to an empty skb
[   83.678700][ T6931] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   83.682150][ T6931] netlink: 224 bytes leftover after parsing attributes in process `syz.2.441'.
[   83.803079][ T6937] netlink: 'syz.2.444': attribute type 8 has an invalid length.
[   83.914865][ T6941] syzkaller1: entered promiscuous mode
[   83.921736][ T6941] syzkaller1: entered allmulticast mode
[   84.056595][ T6950] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   84.438873][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'.
[   84.488904][ T6970] dummy0: entered promiscuous mode
[   84.491415][ T6970] vlan2: entered promiscuous mode
[   84.788157][ T6976] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.462'.
[   85.148554][ T6999] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   85.224678][ T7005] syzkaller1: entered promiscuous mode
[   85.227379][ T7005] syzkaller1: entered allmulticast mode
[   85.693490][ T7031] netlink: 'syz.2.489': attribute type 83 has an invalid length.
[   85.862101][ T7031] syz_tun: entered promiscuous mode
[   85.865967][ T7031] batadv_slave_0: entered promiscuous mode
[   85.869518][ T7031] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   85.874022][ T7031] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   85.880205][ T7031] hsr1: entered allmulticast mode
[   85.882481][ T7031] syz_tun: entered allmulticast mode
[   85.885853][ T7031] batadv_slave_0: entered allmulticast mode
[   85.895789][ T7031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.098701][ T7047] sctp: [Deprecated]: syz.1.495 (pid 7047) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.098701][ T7047] Use struct sctp_sack_info instead
[   86.181441][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'.
[   86.332313][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'.
[   86.440483][  T790] cfg80211: failed to load regulatory.db
[   86.462188][ T7061] "syz.1.502" (7061) uses obsolete ecb(arc4) skcipher
[   86.493065][ T7066] netlink: 'syz.1.503': attribute type 16 has an invalid length.
[   86.497155][ T7066] netlink: 'syz.1.503': attribute type 3 has an invalid length.
[   86.499943][ T7066] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.503'.
[   86.698906][ T7084] netlink: 'syz.0.511': attribute type 4 has an invalid length.
[   86.819578][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'.
[   86.823363][ T7098] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   87.200157][ T7126] vlan2: entered promiscuous mode
[   87.202336][ T7126] gretap0: entered promiscuous mode
[   87.857536][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.865395][ T7186] bond0: (slave rose0): Enslaving as an active interface with an up link
[   88.479576][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.562'.
[   88.551453][ T7217] netlink: 'syz.1.564': attribute type 1 has an invalid length.
[   88.574458][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'.
[   88.640079][ T7225] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   88.954560][ T7251] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   88.992547][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'.
[   89.017000][ T7258] Bluetooth: MGMT ver 1.23
[   89.256201][ T7281] netlink: 'syz.0.592': attribute type 4 has an invalid length.
[   89.278641][ T7281] netlink: 25 bytes leftover after parsing attributes in process `syz.0.592'.
[   89.867766][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[   89.870850][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[   89.908570][ T7306] netlink: 'syz.1.605': attribute type 1 has an invalid length.
[   90.369110][ T7325] netlink: 732 bytes leftover after parsing attributes in process `syz.1.613'.
[   90.552507][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[   90.663854][ T7352] warning: `syz.1.626' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   90.820038][ T7367] vxcan3: entered allmulticast mode
[   91.156404][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   91.159639][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   91.181480][ T7399] lo speed is unknown, defaulting to 1000
[   91.184255][ T7399] lo speed is unknown, defaulting to 1000
[   91.190289][ T7399] lo speed is unknown, defaulting to 1000
[   91.198936][ T7399] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.211254][ T7399] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.271010][ T7399] lo speed is unknown, defaulting to 1000
[   91.277179][ T7399] lo speed is unknown, defaulting to 1000
[   91.281959][ T7399] lo speed is unknown, defaulting to 1000
[   91.484301][ T7412] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   92.085955][ T7445] "syz.2.670" (7445) uses obsolete ecb(arc4) skcipher
[   92.312778][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'.
[   92.424081][ T7477] netlink: 168 bytes leftover after parsing attributes in process `syz.1.685'.
[   93.042066][ T7517] netlink: 'syz.1.701': attribute type 12 has an invalid length.
[   93.364539][ T7523] netlink: 'syz.1.703': attribute type 4 has an invalid length.
[   93.393220][ T7523] netlink: 'syz.1.703': attribute type 4 has an invalid length.
[   93.593500][ T7530] netlink: 'syz.0.707': attribute type 1 has an invalid length.
[   93.761455][ T7545] netlink: 'syz.1.713': attribute type 1 has an invalid length.
[   93.781029][ T7545] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.824541][ T7545] bond2: (slave veth3): Enslaving as an active interface with a down link
[   93.854350][ T7545] 8021q: adding VLAN 0 to HW filter on device batadv1
[   93.873370][ T7545] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   94.021916][ T7555] netlink: 'syz.0.716': attribute type 20 has an invalid length.
[   94.423005][ T7558] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   94.428179][ T7558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.676015][ T7571] syzkaller0: MTU too low for tipc bearer
[   94.678508][ T7571] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.924641][ T7586] __nla_validate_parse: 1 callbacks suppressed
[   94.924658][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'.
[   94.933507][ T7586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.380869][ T7602] openvswitch: netlink: IP tunnel dst address not specified
[   95.483002][ T7608] Bluetooth: MGMT ver 1.23
[   95.575293][ T7612] bridge1: entered promiscuous mode
[   95.878967][ T7626] netlink: 168 bytes leftover after parsing attributes in process `syz.0.748'.
[   96.826639][ T7658] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.762'.
[   96.999202][ T7673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.770'.
[   97.059954][ T7679] netlink: 96 bytes leftover after parsing attributes in process `syz.0.773'.
[   97.328918][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[   97.435865][ T7706] netlink: 'syz.1.787': attribute type 1 has an invalid length.
[   97.439066][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[   97.494615][ T7709] netlink: 'syz.0.786': attribute type 3 has an invalid length.
[   97.557946][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   97.561599][ T5899] Bluetooth: hci2: command 0x0401 tx timeout
[   97.817903][ T7730] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   97.964758][ T7738] syz_tun: entered allmulticast mode
[   97.971108][ T7737] syz_tun: left allmulticast mode
[   98.034841][ T7742] bridge0: port 3(gretap0) entered blocking state
[   98.050207][ T7742] bridge0: port 3(gretap0) entered disabled state
[   98.053030][ T7742] gretap0: entered allmulticast mode
[   98.342439][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'.
[   99.421001][ T7805] netlink: 'syz.0.827': attribute type 1 has an invalid length.
[   99.423884][ T7805] netlink: 'syz.0.827': attribute type 2 has an invalid length.
[   99.511306][ T7817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.519953][ T7817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.023269][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'.
[  100.029214][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  100.290484][ T7873] IPVS: length: 163 != 8
[  100.398636][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'.
[  100.649769][ T7903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.696733][ T7905] netlink: 'syz.0.863': attribute type 6 has an invalid length.
[  100.777326][ T7909] netlink: 'syz.0.864': attribute type 83 has an invalid length.
[  101.108671][ T7923] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  101.111743][ T7923] netlink: 'syz.0.870': attribute type 3 has an invalid length.
[  101.114336][ T7923] netlink: 224 bytes leftover after parsing attributes in process `syz.0.870'.
[  101.298309][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'.
[  101.852927][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'.
[  102.017822][ T7957] syzkaller1: entered promiscuous mode
[  102.019843][ T7957] syzkaller1: entered allmulticast mode
[  102.142220][ T7969] netlink: 'syz.1.891': attribute type 10 has an invalid length.
[  102.153062][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.170273][ T7969] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  102.407428][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'.
[  103.563627][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'.
[  104.138115][ T8056] syzkaller1: entered promiscuous mode
[  104.140086][ T8056] syzkaller1: entered allmulticast mode
[  104.260417][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'.
[  104.379405][ T8066] netlink: 'syz.2.932': attribute type 2 has an invalid length.
[  104.382740][ T8066] netlink: 'syz.2.932': attribute type 1 has an invalid length.
[  104.412420][ T8066] netlink: 152 bytes leftover after parsing attributes in process `syz.2.932'.
[  105.034095][ T8103] __nla_validate_parse: 2 callbacks suppressed
[  105.034111][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.950'.
[  105.041460][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.950'.
[  105.111301][ T8107] netlink: 'syz.1.952': attribute type 5 has an invalid length.
[  105.187657][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'.
[  105.234114][ T8123] pim6reg9: entered allmulticast mode
[  105.534794][ T8140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.543551][ T8140] syzkaller0: entered promiscuous mode
[  105.547204][ T8140] syzkaller0: entered allmulticast mode
[  105.574137][ T8140] tipc: Resetting bearer <eth:syzkaller0>
[  105.579927][ T8139] tipc: Resetting bearer <eth:syzkaller0>
[  105.593408][ T8139] tipc: Disabling bearer <eth:syzkaller0>
[  105.701805][ T8144] netlink: 'syz.1.969': attribute type 1 has an invalid length.
[  105.837913][ T8150] tipc: Started in network mode
[  105.840038][ T8150] tipc: Node identity ee344c9d1895, cluster identity 4711
[  105.844144][ T8150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.850347][ T8150] syzkaller0: entered promiscuous mode
[  105.852738][ T8150] syzkaller0: entered allmulticast mode
[  105.872217][ T8150] tipc: Resetting bearer <eth:syzkaller0>
[  105.889860][ T8149] tipc: Resetting bearer <eth:syzkaller0>
[  105.907943][ T8149] tipc: Disabling bearer <eth:syzkaller0>
[  106.063578][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'.
[  106.423653][ T8187] lo speed is unknown, defaulting to 1000
[  106.790080][ T8208] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  107.059045][ T8230] netlink: 'syz.1.1003': attribute type 30 has an invalid length.
[  107.330584][ T8257] netlink: 'syz.0.1011': attribute type 11 has an invalid length.
[  107.336459][ T8257] netlink: 'syz.0.1011': attribute type 4 has an invalid length.
[  107.343925][ T8257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1011'.
[  107.513169][ T8270] lo speed is unknown, defaulting to 1000
[  107.520264][ T8270] lo speed is unknown, defaulting to 1000
[  107.522522][ T8270] lo speed is unknown, defaulting to 1000
[  107.744079][ T8270] infiniband syz0: set active
[  107.747228][ T5883] lo speed is unknown, defaulting to 1000
[  107.752171][ T8270] infiniband syz0: added lo
[  107.783441][ T8270] RDS/IB: syz0: added
[  107.785622][ T8270] smc: adding ib device syz0 with port count 1
[  107.787932][ T8270] smc:    ib device syz0 port 1 has pnetid 
[  107.797878][ T8270] lo speed is unknown, defaulting to 1000
[  107.913741][ T5939] lo speed is unknown, defaulting to 1000
[  107.956013][ T8270] lo speed is unknown, defaulting to 1000
[  108.188849][ T8270] lo speed is unknown, defaulting to 1000
[  108.342843][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1038'.
[  108.408514][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.022279][ T8351] netlink: 'syz.2.1055': attribute type 1 has an invalid length.
[  109.038786][ T8351] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.041397][ T8350] batadv_slave_1: entered promiscuous mode
[  109.064304][ T8351] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.067249][ T8351] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.071441][ T8351] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  109.399015][ T8374] netlink: 'syz.2.1063': attribute type 10 has an invalid length.
[  109.403333][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.413282][ T8374] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  109.579582][ T8385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.582677][ T8385] syzkaller0: entered promiscuous mode
[  109.586088][ T8385] syzkaller0: entered allmulticast mode
[  109.602020][ T8385] tipc: Resetting bearer <eth:syzkaller0>
[  109.609492][ T8383] tipc: Resetting bearer <eth:syzkaller0>
[  109.622778][ T8383] tipc: Disabling bearer <eth:syzkaller0>
[  109.777027][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  109.846967][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'.
[  109.881979][ T8404] openvswitch: netlink: IP tunnel dst address not specified
[  110.445319][ T5962] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  112.615500][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1122'.
[  112.674436][ T8502] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  112.683531][ T8502] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  112.729641][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  112.745670][ T8504] macvtap1: entered allmulticast mode
[  112.748109][ T8504] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  112.927330][ T8515] netlink: 'syz.0.1130': attribute type 1 has an invalid length.
[  112.930877][ T8515] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1130'.
[  112.934719][ T8515] netlink: 'syz.0.1130': attribute type 1 has an invalid length.
[  113.232091][ T8525] IPv6: NLM_F_REPLACE set, but no existing node found!
[  113.415605][ T8533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1139'.
[  113.654609][ T8546] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.658206][ T8546] bond0: (slave bond4): Enslaving as an active interface with an up link
[  113.713274][ T8550] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  113.717475][ T8550] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  114.620295][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'.
[  114.661017][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'.
[  114.666935][ T8568] hsr_slave_1 (unregistering): left promiscuous mode
[  114.897192][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'.
[  114.903136][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'.
[  114.910146][ T8587] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  114.920957][ T8587] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  114.963134][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'.
[  114.970636][ T8591] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1163'.
[  115.155923][ T8600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.158626][ T8600] syzkaller0: entered promiscuous mode
[  115.160786][ T8600] syzkaller0: entered allmulticast mode
[  115.171573][ T8600] tipc: Resetting bearer <eth:syzkaller0>
[  115.174507][ T8599] tipc: Resetting bearer <eth:syzkaller0>
[  115.181519][ T8599] tipc: Disabling bearer <eth:syzkaller0>
[  115.945657][ T8632] bond6: entered promiscuous mode
[  115.950111][ T8632] 8021q: adding VLAN 0 to HW filter on device bond6
[  116.000619][ T8637] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  116.009089][ T8637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.427314][ T8674] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  116.434221][ T8674] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  116.438734][ T8674] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  117.246640][ T8714] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  117.724131][ T8753] netlink: 'syz.0.1234': attribute type 12 has an invalid length.
[  117.824316][ T8756] geneve2: entered promiscuous mode
[  117.830661][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.834792][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.842248][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.852379][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.904227][ T8765] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  118.017145][ T8775] netlink: 'syz.1.1245': attribute type 4 has an invalid length.
[  118.041295][   T95] lo speed is unknown, defaulting to 1000
[  118.045208][   T95] syz0: Port: 1 Link DOWN
[  118.050246][ T8775] netlink: 'syz.1.1245': attribute type 4 has an invalid length.
[  118.053260][   T95] lo speed is unknown, defaulting to 1000
[  118.058797][   T95] lo speed is unknown, defaulting to 1000
[  118.061028][   T95] syz0: Port: 1 Link ACTIVE
[  118.077747][   T95] lo speed is unknown, defaulting to 1000
[  118.438748][ T8800] __nla_validate_parse: 6 callbacks suppressed
[  118.438763][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'.
[  118.520108][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1257'.
[  118.524008][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1257'.
[  118.560235][ T8805] netlink: 'syz.1.1256': attribute type 1 has an invalid length.
[  118.563848][ T8805] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  119.063940][ T8842] lo speed is unknown, defaulting to 1000
[  119.071082][ T8842] lo speed is unknown, defaulting to 1000
[  119.106487][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'.
[  119.130995][ T8848] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.158883][ T8848] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.162053][ T8848] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  119.168112][ T8848] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  119.983388][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'.
[  120.393557][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'.
[  120.819798][ T8969] netlink: 'syz.2.1326': attribute type 83 has an invalid length.
[  120.954547][ T8979] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1331'.
[  120.982447][ T8981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.016921][ T8983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1333'.
[  121.141954][ T8996] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1338'.
[  121.594301][ T9028] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1353'.
[  121.656472][ T9030] netlink: 'syz.0.1354': attribute type 13 has an invalid length.
[  121.696134][ T9030] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  121.709491][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.713135][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.717169][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.720716][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.988623][ T9041] netlink: 'syz.1.1358': attribute type 11 has an invalid length.
[  122.104025][ T5939] IPVS: starting estimator thread 0...
[  122.131326][ T9049] lo speed is unknown, defaulting to 1000
[  122.135975][ T9049] lo speed is unknown, defaulting to 1000
[  122.182050][ T9055] lo speed is unknown, defaulting to 1000
[  122.205034][ T9052] IPVS: using max 48 ests per chain, 115200 per kthread
[  122.288407][ T9055] lo speed is unknown, defaulting to 1000
[  123.105404][ T9107] lo speed is unknown, defaulting to 1000
[  123.108178][ T9107] lo speed is unknown, defaulting to 1000
[  123.253755][ T5939] IPVS: starting estimator thread 0...
[  123.338027][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.340788][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.351358][ T9123] IPVS: using max 76 ests per chain, 182400 per kthread
[  123.376384][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.641063][ T9140] __nla_validate_parse: 2 callbacks suppressed
[  123.641116][ T9140] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1394'.
[  123.750612][ T9140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.784364][ T9140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.798293][ T9140] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  123.861343][ T9140] bond0 (unregistering): (slave bond4): Releasing backup interface
[  123.865892][ T9140] bond0 (unregistering): Released all slaves
[  123.875506][ T9141] veth1_macvtap: left promiscuous mode
[  123.877674][ T9141] macsec0: entered promiscuous mode
[  124.398046][ T9166] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  124.603375][ T9183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.656522][ T9188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  124.919613][ T9210] syzkaller1: entered promiscuous mode
[  124.921631][ T9210] syzkaller1: entered allmulticast mode
[  125.110695][ T9225] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1433'.
[  125.275625][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'.
[  125.606433][   T10] tipc: Node number set to 772256220
[  126.513012][ T9324] netlink: 'syz.0.1471': attribute type 13 has an invalid length.
[  126.527106][ T9324] netlink: 'syz.0.1471': attribute type 17 has an invalid length.
[  126.592766][ T9337] netlink: 'syz.2.1474': attribute type 1 has an invalid length.
[  126.632308][ T9324] bridge0: port 3(gretap0) entered blocking state
[  126.635340][ T9324] bridge0: port 3(gretap0) entered forwarding state
[  126.642021][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.646864][ T9324] 8021q: adding VLAN 0 to HW filter on device team0
[  126.657224][ T9324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.669564][ T5883] lo speed is unknown, defaulting to 1000
[  126.672165][ T5883] syz1: Port: 1 Link ACTIVE
[  126.707458][ T9341] bond2: (slave gretap1): making interface the new active one
[  126.711739][ T9341] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  126.734532][ T9340] lo speed is unknown, defaulting to 1000
[  126.746914][ T9340] lo speed is unknown, defaulting to 1000
[  126.819514][ T9324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.902915][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1479'.
[  126.974046][ T9358] netlink: 'syz.2.1480': attribute type 21 has an invalid length.
[  126.978454][ T9358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1480'.
[  127.022988][ T9360] netlink: 'syz.2.1481': attribute type 4 has an invalid length.
[  127.063264][ T9362] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  127.230114][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'.
[  127.677832][   T54] Bluetooth: hci2: link tx timeout
[  127.680297][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.080393][ T9413] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1504'.
[  128.776336][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'.
[  129.180162][ T9519] netlink: 'syz.2.1546': attribute type 1 has an invalid length.
[  129.206505][ T9519] bond3: entered promiscuous mode
[  129.208277][ T9519] bond3: entered allmulticast mode
[  129.228158][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'.
[  129.238109][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1547'.
[  129.253197][ T9519] bridge1: the hash_elasticity option has been deprecated and is always 16
[  129.381537][ T9535] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1552'.
[  129.431484][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'.
[  129.614686][ T9556] netlink: 'syz.2.1563': attribute type 1 has an invalid length.
[  129.618831][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'.
[  129.716748][ T5899] Bluetooth: hci2: command 0x0401 tx timeout
[  129.745999][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'.
[  129.749114][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'.
[  129.886081][ T9573] lo: entered promiscuous mode
[  129.890007][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'.
[  129.980272][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  129.984113][ T9579] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  130.077339][ T9589] netlink: 'syz.0.1577': attribute type 3 has an invalid length.
[  130.140947][ T9572] lo: left promiscuous mode
[  131.655524][ T9638] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  131.745428][ T9638] nbd0: detected capacity change from 0 to 127
[  131.751682][   T56] block nbd0: Receive control failed (result -104)
[  132.167827][ T9692] lo speed is unknown, defaulting to 1000
[  132.176515][ T9692] lo speed is unknown, defaulting to 1000
[  132.179556][ T9692] lo speed is unknown, defaulting to 1000
[  132.201413][ T9692] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  132.248706][ T9692] lo speed is unknown, defaulting to 1000
[  132.261121][ T9692] lo speed is unknown, defaulting to 1000
[  132.267409][ T9692] lo speed is unknown, defaulting to 1000
[  132.519149][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.521380][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.527345][ T9712] veth0_to_bond: entered allmulticast mode
[  133.876262][ T9759] netlink: 'syz.2.1656': attribute type 1 has an invalid length.
[  133.876499][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  133.931452][ T9763] netlink: 'syz.2.1658': attribute type 1 has an invalid length.
[  133.934129][ T9763] __nla_validate_parse: 3 callbacks suppressed
[  133.934135][ T9763] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1658'.
[  133.940887][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  134.064676][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'.
[  134.148468][ T9775] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  134.150930][ T9775] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  134.351939][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  134.401176][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  134.649580][ T9815] netlink: 'syz.0.1682': attribute type 4 has an invalid length.
[  135.547866][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'.
[  135.995271][ T9884] sctp: [Deprecated]: syz.0.1714 (pid 9884) Use of int in max_burst socket option.
[  135.995271][ T9884] Use struct sctp_assoc_value instead
[  136.012328][ T9881] lo speed is unknown, defaulting to 1000
[  136.015275][ T9881] lo speed is unknown, defaulting to 1000
[  136.119351][ T9881] lo speed is unknown, defaulting to 1000
[  136.272153][ T9902] netlink: 'syz.0.1721': attribute type 7 has an invalid length.
[  136.274860][ T9902] netlink: 'syz.0.1721': attribute type 3 has an invalid length.
[  136.286448][ T9902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1721'.
[  136.732199][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  136.744192][ T9920] siw: device registration error -23
[  136.776967][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'.
[  136.924265][ T9930] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.1732'.
[  137.090092][ T9943] netlink: 'syz.1.1736': attribute type 1 has an invalid length.
[  137.535652][ T9952] block nbd1: server does not support multiple connections per device.
[  137.539325][ T9952] block nbd1: shutting down sockets
[  138.054093][ T9999] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  139.051350][T10055] netlink: 'syz.2.1784': attribute type 1 has an invalid length.
[  139.073753][T10055] netlink: 'syz.2.1784': attribute type 1 has an invalid length.
[  140.228206][T10072] bond0: (slave batadv0): Releasing backup interface
[  140.232092][T10072] bridge_slave_0: left allmulticast mode
[  140.233990][T10072] bridge_slave_0: left promiscuous mode
[  140.236544][T10072] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.241109][T10072] bridge_slave_1: left allmulticast mode
[  140.242963][T10072] bridge_slave_1: left promiscuous mode
[  140.244855][T10072] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.253747][T10072] bond0: (slave bond_slave_0): Releasing backup interface
[  140.269091][T10072] bond0: (slave bond_slave_1): Releasing backup interface
[  140.274861][T10072] team0: Port device team_slave_0 removed
[  140.289213][T10072] team0: Port device team_slave_1 removed
[  140.292094][T10072] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.298458][T10072] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.303291][T10072] bond2: (slave gretap1): Releasing active interface
[  140.452511][T10088] syzkaller0: entered promiscuous mode
[  140.454352][T10088] syzkaller0: entered allmulticast mode
[  140.534329][T10094] __nla_validate_parse: 2 callbacks suppressed
[  140.534385][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[  140.788219][T10110] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1804'.
[  141.299077][T10146] netlink: 'syz.2.1819': attribute type 13 has an invalid length.
[  141.320877][T10146] netlink: 'syz.2.1819': attribute type 17 has an invalid length.
[  141.495825][T10146] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.499552][T10146] 8021q: adding VLAN 0 to HW filter on device team0
[  141.508102][T10146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.517643][   T95] lo speed is unknown, defaulting to 1000
[  141.519636][   T95] syz2: Port: 1 Link ACTIVE
[  141.649939][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'.
[  141.752197][T10168] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  141.763817][T10168] gretap0: left allmulticast mode
[  141.767898][T10168] bridge0: port 3(gretap0) entered disabled state
[  141.774533][T10168] bridge_slave_0: left allmulticast mode
[  141.779388][T10168] bridge_slave_0: left promiscuous mode
[  141.782022][T10168] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.791126][T10168] bridge_slave_1: left allmulticast mode
[  141.793034][T10168] bridge_slave_1: left promiscuous mode
[  141.796507][T10168] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.801946][T10168] bond0: (slave bond_slave_0): Releasing backup interface
[  141.806323][T10168] bond0: (slave bond_slave_1): Releasing backup interface
[  141.810743][T10168] team0: Port device team_slave_0 removed
[  141.814170][T10168] team0: Port device team_slave_1 removed
[  141.819494][T10168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.823994][T10168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.843741][T10168] netlink: 'syz.0.1829': attribute type 10 has an invalid length.
[  141.847994][T10168] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  141.853901][T10168] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.862721][T10168] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  141.874432][T10168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.878002][T10168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.142750][   T10] lo speed is unknown, defaulting to 1000
[  142.155004][   T10] syz2: Port: 1 Link DOWN
[  142.192601][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1834'.
[  142.277910][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'.
[  143.410356][T10236] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1858'.
[  143.413446][T10236] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  143.564322][T10260] netlink: 'syz.2.1867': attribute type 1 has an invalid length.
[  143.574308][T10260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1867'.
[  143.656999][T10268] xt_policy: neither incoming nor outgoing policy selected
[  143.739397][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'.
[  144.136934][T10304] netlink: 'syz.0.1886': attribute type 1 has an invalid length.
[  144.204155][T10307] netlink: 'syz.2.1888': attribute type 10 has an invalid length.
[  144.227454][T10307] 8021q: adding VLAN 0 to HW filter on device team0
[  144.231980][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1890'.
[  144.243515][T10307] bond0: (slave team0): Enslaving as an active interface with an up link
[  144.336322][T10306] delete_channel: no stack
[  144.459277][T10316] netlink: 'syz.0.1893': attribute type 1 has an invalid length.
[  144.461964][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'.
[  144.523404][T10322] netlink: 'syz.0.1895': attribute type 1 has an invalid length.
[  144.531668][T10322] netlink: 'syz.0.1895': attribute type 1 has an invalid length.
[  144.768668][T10340] netlink: 'syz.1.1901': attribute type 4 has an invalid length.
[  145.316669][T10409] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  145.417783][T10420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.551457][T10434] __nla_validate_parse: 2 callbacks suppressed
[  145.551468][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1928'.
[  145.598998][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1929'.
[  145.628588][T10439] nbd: socks must be embedded in a SOCK_ITEM attr
[  145.654493][ T5861] block nbd64: NBD_DISCONNECT
[  145.746258][   T26] 
[  145.747439][   T26] ======================================================
[  145.750478][   T26] WARNING: possible circular locking dependency detected
[  145.753532][   T26] 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 Not tainted
[  145.757875][   T26] ------------------------------------------------------
[  145.760950][   T26] kworker/u9:0/26 is trying to acquire lock:
[  145.763598][   T26] ffff88811cb41358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  145.767704][   T26] 
[  145.767704][   T26] but task is already holding lock:
[  145.770911][   T26] ffff8881200dc988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  145.775072][   T26] 
[  145.775072][   T26] which lock already depends on the new lock.
[  145.775072][   T26] 
[  145.779633][   T26] 
[  145.779633][   T26] the existing dependency chain (in reverse order) is:
[  145.783498][   T26] 
[  145.783498][   T26] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  145.787137][   T26]        lock_acquire+0x120/0x360
[  145.789353][   T26]        down_write+0x96/0x1f0
[  145.791443][   T26]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  145.794211][   T26]        nbd_start_device+0x16c/0xac0
[  145.796581][   T26]        nbd_genl_connect+0x135b/0x18f0
[  145.799029][   T26]        genl_family_rcv_msg_doit+0x215/0x300
[  145.801744][   T26]        genl_rcv_msg+0x60e/0x790
[  145.803960][   T26]        netlink_rcv_skb+0x208/0x470
[  145.806246][   T26]        genl_rcv+0x28/0x40
[  145.808376][   T26]        netlink_unicast+0x82f/0x9e0
[  145.810737][   T26]        netlink_sendmsg+0x805/0xb30
[  145.813059][   T26]        __sock_sendmsg+0x21c/0x270
[  145.815355][   T26]        ____sys_sendmsg+0x505/0x830
[  145.817635][   T26]        ___sys_sendmsg+0x21f/0x2a0
[  145.819934][   T26]        __x64_sys_sendmsg+0x19b/0x260
[  145.822429][   T26]        do_syscall_64+0xfa/0x3b0
[  145.824679][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.827443][   T26] 
[  145.827443][   T26] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  145.830716][   T26]        lock_acquire+0x120/0x360
[  145.832929][   T26]        __mutex_lock+0x182/0xe80
[  145.835122][   T26]        refcount_dec_and_mutex_lock+0x30/0xa0
[  145.837816][   T26]        nbd_config_put+0x2c/0x790
[  145.839988][   T26]        nbd_release+0xfe/0x140
[  145.842097][   T26]        bdev_release+0x536/0x650
[  145.844265][   T26]        blkdev_release+0x15/0x20
[  145.846486][   T26]        __fput+0x44c/0xa70
[  145.848453][   T26]        fput_close_sync+0x119/0x200
[  145.850794][   T26]        __x64_sys_close+0x7f/0x110
[  145.853000][   T26]        do_syscall_64+0xfa/0x3b0
[  145.855196][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.857985][   T26] 
[  145.857985][   T26] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  145.861354][   T26]        validate_chain+0xb9b/0x2140
[  145.863654][   T26]        __lock_acquire+0xab9/0xd20
[  145.865937][   T26]        lock_acquire+0x120/0x360
[  145.868145][   T26]        __mutex_lock+0x182/0xe80
[  145.870338][   T26]        __del_gendisk+0x129/0x9e0
[  145.872566][   T26]        del_gendisk+0xe8/0x160
[  145.874725][   T26]        nbd_dev_remove_work+0x47/0xe0
[  145.877122][   T26]        process_scheduled_works+0xae1/0x17b0
[  145.879720][   T26]        worker_thread+0x8a0/0xda0
[  145.881957][   T26]        kthread+0x711/0x8a0
[  145.883985][   T26]        ret_from_fork+0x3fc/0x770
[  145.886156][   T26]        ret_from_fork_asm+0x1a/0x30
[  145.888426][   T26] 
[  145.888426][   T26] other info that might help us debug this:
[  145.888426][   T26] 
[  145.892848][   T26] Chain exists of:
[  145.892848][   T26]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  145.892848][   T26] 
[  145.898884][   T26]  Possible unsafe locking scenario:
[  145.898884][   T26] 
[  145.902033][   T26]        CPU0                    CPU1
[  145.904330][   T26]        ----                    ----
[  145.906666][   T26]   rlock(&set->update_nr_hwq_lock);
[  145.908970][   T26]                                lock(&nbd->config_lock);
[  145.912023][   T26]                                lock(&set->update_nr_hwq_lock);
[  145.915332][   T26]   lock(&disk->open_mutex);
[  145.917388][   T26] 
[  145.917388][   T26]  *** DEADLOCK ***
[  145.917388][   T26] 
[  145.920962][   T26] 3 locks held by kworker/u9:0/26:
[  145.923188][   T26]  #0: ffff888020860948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  145.927992][   T26]  #1: ffffc900001efbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  145.933260][   T26]  #2: ffff8881200dc988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  145.937626][   T26] 
[  145.937626][   T26] stack backtrace:
[  145.940253][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  145.940269][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.940278][   T26] Workqueue: nbd-del nbd_dev_remove_work
[  145.940297][   T26] Call Trace:
[  145.940304][   T26]  <TASK>
[  145.940310][   T26]  dump_stack_lvl+0x189/0x250
[  145.940326][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.940339][   T26]  ? __pfx__printk+0x10/0x10
[  145.940353][   T26]  ? print_lock_name+0xde/0x100
[  145.940368][   T26]  print_circular_bug+0x2ee/0x310
[  145.940383][   T26]  check_noncircular+0x134/0x160
[  145.940398][   T26]  validate_chain+0xb9b/0x2140
[  145.940412][   T26]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  145.940428][   T26]  ? arch_stack_walk+0x11c/0x150
[  145.940443][   T26]  __lock_acquire+0xab9/0xd20
[  145.940455][   T26]  ? __del_gendisk+0x129/0x9e0
[  145.940468][   T26]  lock_acquire+0x120/0x360
[  145.940478][   T26]  ? __del_gendisk+0x129/0x9e0
[  145.940492][   T26]  ? check_path+0x21/0x40
[  145.940505][   T26]  __mutex_lock+0x182/0xe80
[  145.940517][   T26]  ? __del_gendisk+0x129/0x9e0
[  145.940532][   T26]  ? __del_gendisk+0x129/0x9e0
[  145.940546][   T26]  ? __pfx___mutex_lock+0x10/0x10
[  145.940557][   T26]  ? __pfx___might_resched+0x10/0x10
[  145.940571][   T26]  ? __lock_acquire+0xab9/0xd20
[  145.940581][   T26]  ? disk_del_events+0xb5/0x210
[  145.940594][   T26]  ? __del_gendisk+0xc1/0x9e0
[  145.940637][   T26]  __del_gendisk+0x129/0x9e0
[  145.940650][   T26]  ? del_gendisk+0xe0/0x160
[  145.940664][   T26]  ? __pfx___del_gendisk+0x10/0x10
[  145.940679][   T26]  ? down_read+0x1ad/0x2e0
[  145.940691][   T26]  del_gendisk+0xe8/0x160
[  145.940705][   T26]  nbd_dev_remove_work+0x47/0xe0
[  145.940718][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  145.940736][   T26]  process_scheduled_works+0xae1/0x17b0
[  145.940755][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.940771][   T26]  worker_thread+0x8a0/0xda0
[  145.940790][   T26]  kthread+0x711/0x8a0
[  145.940805][   T26]  ? __pfx_worker_thread+0x10/0x10
[  145.940817][   T26]  ? __pfx_kthread+0x10/0x10
[  145.940831][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.940846][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.940856][   T26]  ? __pfx_kthread+0x10/0x10
[  145.940870][   T26]  ret_from_fork+0x3fc/0x770
[  145.940882][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  145.940894][   T26]  ? __switch_to_asm+0x39/0x70
[  145.940908][   T26]  ? __switch_to_asm+0x33/0x70
[  145.940920][   T26]  ? __pfx_kthread+0x10/0x10
[  145.940934][   T26]  ret_from_fork_asm+0x1a/0x30
[  145.940953][   T26]  </TASK>

VM DIAGNOSIS:
23:13:39  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001eee10
R8 =ffff888108a48237 R9 =1ffff11021149046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18a8 R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f879b2d73b0 CR3=0000000026f8e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffff0000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff920006a5e65 RBX=00007ffedbd69190 RCX=dffffc0000000000 RDX=ffffffff9028ae06
RSI=0000000000000000 RDI=ffffc9000352ff78 RBP=dffffc0000000000 RSP=ffffc9000352f218
R8 =0000000000000022 R9 =0000000000000000 R10=ffffc9000352f338 R11=ffffffff81acfe40
R12=ffffc9000352ff58 R13=ffffc9000352f338 R14=ffffc9000352f2e8 R15=ffffc9000352f328
RIP=ffffffff8172bc86 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f86ebd96020 CR3=0000000034692000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000ff0000000000 0000000000000000
XMM02=0000000000000000 ff00000000000000 XMM03=ffff000000000000 00000000ff000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
