last executing test programs:

570.946959ms ago: executing program 0 (id=1996):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0)

488.369523ms ago: executing program 0 (id=1998):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
close(r0)

430.028728ms ago: executing program 0 (id=1999):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63d2030000000000000724fc60", 0x14}], 0x1}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @private0, 0x80000}}}, 0x80, 0x0}, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40)
sendmsg$inet6(r3, &(0x7f0000000280)={&(0x7f0000000080)={0xa, 0x4e21, 0x5, @mcast2, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000004c0)="289b0b68f43415f8c32a4f381cb9330e0ebab9392dc9f67c7816ea37f2ccce000ccabe60bbf58a26f1fcbfe02bb884233cb86e33d9d11b62954e4a71f8f7fbca0257c0a2b09e80d7e6e5b112de55a9d65be00900dbf6f6bdb5d0d8f397fc33f1e9b381744b102e4bf048e76f4ef12caaded612d8202f30648990b727d369f3a5768c7501241c568eac5ba9b95885e24964cea945dd0c0d9e02ee55404ad37cd0b9faab9898e6ad7975eee3c099c24d51da1198392f0dc046172ac17b27308cb6d3c552fede3a750e1db06f2a77dc0968b678bf58eea5652ccd06aac6eac573ffa61a2bb17b7455e0ca127910", 0xec}, {&(0x7f0000000100)="1769e43cae1e11331d3082bdf1221a606b7f5b3e24eb2590", 0x18}, {&(0x7f0000000140)="105f17a2807933", 0x7}, {&(0x7f00000005c0)="6308e5f5141ca6ee02efbdda59254cf1f1608c10e60799887620a0c1401f419398ac68cd86ae9c879c3b9f300ebbafe787aacda9b52e18dc392c8625db52daea7ade5b6236c02c2c8958b6b16db3da5e2bf9640405ef89fc1814349ed236ac9937c8930a7b2019715538ef7a0b92dd94b730cad6de9c27aae85fc1dfb7bd2156736d2c7c", 0x84}, {&(0x7f0000000680)="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", 0x1000}], 0x5, &(0x7f0000001680)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x100000}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x1d, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x3b, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x8289, [0x80000000, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0x10}, @jumbo={0xc2, 0x4, 0xa98}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0xff}]}}}], 0x118}, 0x8008)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148c00000000001d430000000000007a0a00fe00581c1f6114500000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x40801)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wpan4\x00'})

320.551829ms ago: executing program 1 (id=2002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000002000010300000000000700000200000000000000000000000c0014003c97c0"], 0x28}}, 0x0)

320.09267ms ago: executing program 1 (id=2004):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10)

250.579557ms ago: executing program 2 (id=2005):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x180, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@multicast2}]}, @mark={0xc, 0x15, {0x0, 0x37}}]}, 0x180}}, 0x0)

250.287485ms ago: executing program 1 (id=2006):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

250.099722ms ago: executing program 2 (id=2007):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000)

169.268068ms ago: executing program 2 (id=2008):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0)

168.895278ms ago: executing program 1 (id=2009):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

168.738831ms ago: executing program 2 (id=2010):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0)

149.994228ms ago: executing program 0 (id=2011):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)

60.063486ms ago: executing program 0 (id=2012):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x612, 0x4)

59.81546ms ago: executing program 1 (id=2013):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r0, 0x0)

59.508411ms ago: executing program 2 (id=2014):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000008c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x80, 0x0}, 0x4000040)

59.412016ms ago: executing program 0 (id=2015):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

199.566µs ago: executing program 1 (id=2016):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 2 (id=2017):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15183' (ED25519) to the list of known hosts.
syzkaller login: [   47.519440][ T5812] cgroup: Unknown subsys name 'net'
[   47.670397][ T5812] cgroup: Unknown subsys name 'cpuset'
[   47.676774][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.336090][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.493731][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.498659][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.501643][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.504482][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.506949][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.510299][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.513559][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.526605][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.540741][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.543621][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.546873][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.563673][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.566426][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.569109][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.571534][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.819281][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   53.838902][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   53.867082][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   53.967778][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.969929][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.972663][ T5839] bridge_slave_0: entered allmulticast mode
[   53.975627][ T5839] bridge_slave_0: entered promiscuous mode
[   53.995467][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.998508][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.001364][ T5839] bridge_slave_1: entered allmulticast mode
[   54.005123][ T5839] bridge_slave_1: entered promiscuous mode
[   54.047683][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.050329][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.052625][ T5830] bridge_slave_0: entered allmulticast mode
[   54.055298][ T5830] bridge_slave_0: entered promiscuous mode
[   54.059354][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.061598][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.063704][ T5835] bridge_slave_0: entered allmulticast mode
[   54.067465][ T5835] bridge_slave_0: entered promiscuous mode
[   54.083598][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.086236][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.088451][ T5830] bridge_slave_1: entered allmulticast mode
[   54.091205][ T5830] bridge_slave_1: entered promiscuous mode
[   54.102665][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.104920][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.107245][ T5835] bridge_slave_1: entered allmulticast mode
[   54.109915][ T5835] bridge_slave_1: entered promiscuous mode
[   54.115189][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.130115][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.134675][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.169760][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.175278][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.212369][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.228602][ T5839] team0: Port device team_slave_0 added
[   54.232612][ T5839] team0: Port device team_slave_1 added
[   54.245202][ T5830] team0: Port device team_slave_0 added
[   54.290982][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.293672][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.303427][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.310162][ T5830] team0: Port device team_slave_1 added
[   54.314408][ T5835] team0: Port device team_slave_0 added
[   54.344318][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.347291][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.357339][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.370910][ T5835] team0: Port device team_slave_1 added
[   54.374930][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.377653][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.387200][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.393183][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.396424][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.405680][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.464804][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.467908][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.477865][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.483581][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.486752][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.496709][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.506739][ T5839] hsr_slave_0: entered promiscuous mode
[   54.509695][ T5839] hsr_slave_1: entered promiscuous mode
[   54.550565][ T5830] hsr_slave_0: entered promiscuous mode
[   54.553199][ T5830] hsr_slave_1: entered promiscuous mode
[   54.555496][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.558429][ T5830] Cannot create hsr debugfs directory
[   54.592764][ T5835] hsr_slave_0: entered promiscuous mode
[   54.595111][ T5835] hsr_slave_1: entered promiscuous mode
[   54.598409][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.600635][ T5835] Cannot create hsr debugfs directory
[   54.827178][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.849014][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.861086][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.871351][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.904763][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.918617][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.933921][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.940915][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.988292][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.992921][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.008353][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.015089][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.092900][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.103158][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.124040][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   55.131897][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.134283][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.144669][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   55.159703][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.161888][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.165186][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.167957][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.179507][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.187624][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.189770][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.214444][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   55.240547][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.242831][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.257691][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.259946][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.401452][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.415100][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.450959][ T5839] veth0_vlan: entered promiscuous mode
[   55.464068][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.471541][ T5839] veth1_vlan: entered promiscuous mode
[   55.492193][ T5830] veth0_vlan: entered promiscuous mode
[   55.501339][ T5830] veth1_vlan: entered promiscuous mode
[   55.513988][ T5839] veth0_macvtap: entered promiscuous mode
[   55.522722][ T5839] veth1_macvtap: entered promiscuous mode
[   55.549837][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.560612][ T5830] veth0_macvtap: entered promiscuous mode
[   55.568441][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.571652][ T5835] veth0_vlan: entered promiscuous mode
[   55.576212][ T5830] veth1_macvtap: entered promiscuous mode
[   55.584414][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.588345][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.591773][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.595129][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.621127][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.626737][ T5834] Bluetooth: hci0: command tx timeout
[   55.628999][ T5834] Bluetooth: hci2: command tx timeout
[   55.631229][ T5834] Bluetooth: hci1: command tx timeout
[   55.639148][ T5835] veth1_vlan: entered promiscuous mode
[   55.647508][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.667704][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.671080][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.674331][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.679131][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.713697][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.722631][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.724876][ T5835] veth0_macvtap: entered promiscuous mode
[   55.732659][ T5835] veth1_macvtap: entered promiscuous mode
[   55.770941][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.778527][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.781144][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.783033][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.815511][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.821698][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.825142][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.831671][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.843695][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.848378][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.861285][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.886745][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.893310][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.987117][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.990459][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.045327][  T954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.048769][  T954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.152247][ T5910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.157881][ T5911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.207140][ T5911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.265149][ T5917] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   56.279992][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'.
[   56.378279][ T5924] sctp: [Deprecated]: syz.0.13 (pid 5924) Use of int in max_burst socket option.
[   56.378279][ T5924] Use struct sctp_assoc_value instead
[   56.581526][ T5939] openvswitch: netlink: Key type 251 is out of range max 32
[   56.765052][ T5862] IPVS: starting estimator thread 0...
[   56.866946][ T5954] IPVS: using max 62 ests per chain, 148800 per kthread
[   57.455971][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'.
[   57.602365][ T6019] netlink: 'syz.1.57': attribute type 4 has an invalid length.
[   57.604915][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.57'.
[   57.608766][ T6024] netlink: 92 bytes leftover after parsing attributes in process `syz.2.59'.
[   57.647667][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   57.666806][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'.
[   57.674978][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'.
[   57.682565][ T6028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.61'.
[   57.686798][ T6028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.61'.
[   57.719762][ T5836] Bluetooth: hci1: command tx timeout
[   57.724171][ T5836] Bluetooth: hci2: command tx timeout
[   57.763950][ T6039] Bluetooth: MGMT ver 1.23
[   57.783036][ T6036] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET)
[   58.060642][ T6063] sit1: entered promiscuous mode
[   58.204351][ T6073] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   58.280524][ T6078] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   58.433570][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.436933][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.532206][ T6097] Zero length message leads to an empty skb
[   58.673764][ T6101] netlink: 'syz.2.94': attribute type 10 has an invalid length.
[   58.682065][ T6101] batman_adv: batadv0: Adding interface: virt_wifi0
[   58.684342][ T6101] batman_adv: batadv0: Interface activated: virt_wifi0
[   58.798304][ T6104] warning: `syz.2.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.901441][ T6106] GUP no longer grows the stack in syz.2.96 (6106): 200000006000-20000000a000 (200000005000)
[   58.909918][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.2.96 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   58.909939][ T6106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.909949][ T6106] Call Trace:
[   58.909955][ T6106]  <TASK>
[   58.909962][ T6106]  dump_stack_lvl+0x189/0x250
[   58.909988][ T6106]  ? __pfx_dump_stack_lvl+0x10/0x10
[   58.910033][ T6106]  ? __pfx__printk+0x10/0x10
[   58.910051][ T6106]  ? find_vma+0xe7/0x160
[   58.910086][ T6106]  __get_user_pages+0x2a60/0x30b0
[   58.910128][ T6106]  ? __pfx___get_user_pages+0x10/0x10
[   58.910143][ T6106]  ? __gup_longterm_locked+0xbf7/0x15b0
[   58.910158][ T6106]  ? down_read_killable+0x1d1/0x350
[   58.910173][ T6106]  ? try_get_folio+0x633/0x660
[   58.910209][ T6106]  __gup_longterm_locked+0xd66/0x15b0
[   58.910230][ T6106]  ? try_grab_folio_fast+0x1be/0x4f0
[   58.910255][ T6106]  ? gup_fast_fallback+0x1afc/0x2260
[   58.910274][ T6106]  gup_fast_fallback+0x1cd4/0x2260
[   58.910319][ T6106]  ? __pfx_gup_fast_fallback+0x10/0x10
[   58.910333][ T6106]  ? trace_contention_end+0x39/0x120
[   58.910352][ T6106]  ? __mutex_lock+0x330/0xe80
[   58.910367][ T6106]  ? futex_unqueue+0x22/0x240
[   58.910384][ T6106]  ? futex_unqueue+0x22/0x240
[   58.910399][ T6106]  ? futex_unqueue+0x22/0x240
[   58.910415][ T6106]  ? is_valid_gup_args+0x11f/0x200
[   58.910432][ T6106]  ? get_user_pages_fast+0x4d/0xb0
[   58.910449][ T6106]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   58.910472][ T6106]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   58.910491][ T6106]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   58.910511][ T6106]  ? wait_for_space+0x24d/0x2d0
[   58.910532][ T6106]  iov_iter_get_pages2+0x5e/0xa0
[   58.910552][ T6106]  __se_sys_vmsplice+0x548/0x10d0
[   58.910582][ T6106]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   58.910599][ T6106]  ? __pfx_futex_wait+0x10/0x10
[   58.910642][ T6106]  ? __lock_acquire+0xab9/0xd20
[   58.910685][ T6106]  ? do_pipe2+0xf7/0x170
[   58.910706][ T6106]  ? rcu_is_watching+0x15/0xb0
[   58.910728][ T6106]  ? do_syscall_64+0xbe/0x3b0
[   58.910745][ T6106]  do_syscall_64+0xfa/0x3b0
[   58.910758][ T6106]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.910780][ T6106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.910795][ T6106]  ? exc_page_fault+0x9f/0xf0
[   58.910816][ T6106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.910831][ T6106] RIP: 0033:0x7f31e598e929
[   58.910845][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.910857][ T6106] RSP: 002b:00007f31e68cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   58.910874][ T6106] RAX: ffffffffffffffda RBX: 00007f31e5bb5fa0 RCX: 00007f31e598e929
[   58.910885][ T6106] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   58.910894][ T6106] RBP: 00007f31e5a10b39 R08: 0000000000000000 R09: 0000000000000000
[   58.910903][ T6106] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   58.910912][ T6106] R13: 0000000000000000 R14: 00007f31e5bb5fa0 R15: 00007ffe26ec2428
[   58.910937][ T6106]  </TASK>
[   59.785943][ T5836] Bluetooth: hci2: command tx timeout
[   59.787641][ T5836] Bluetooth: hci1: command tx timeout
[   59.843054][ T6154] netlink: 'syz.2.114': attribute type 2 has an invalid length.
[   59.952025][ T6163] geneve2: entered allmulticast mode
[   59.996158][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   60.003844][    T9] IPVS: starting estimator thread 0...
[   60.032565][ T6171] netlink: 'syz.2.121': attribute type 1 has an invalid length.
[   60.036513][ T6171] netlink: 'syz.2.121': attribute type 1 has an invalid length.
[   60.088290][ T6166] IPVS: using max 62 ests per chain, 148800 per kthread
[   60.217239][ T6185] ipt_ECN: cannot use operation on non-tcp rule
[   60.253621][ T6190] Illegal XDP return value 4294967274 on prog  (id 16) dev N/A, expect packet loss!
[   60.424651][ T6207] syzkaller0: entered allmulticast mode
[   60.479724][ T6185] syzkaller0 (unregistering): left allmulticast mode
[   61.069888][ T6255] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   61.072874][ T6255] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   61.865932][ T5834] Bluetooth: hci1: command tx timeout
[   61.865996][ T5836] Bluetooth: hci2: command tx timeout
[   62.060933][ T6346] netlink: 'syz.2.190': attribute type 1 has an invalid length.
[   62.063341][ T6346] netlink: 'syz.2.190': attribute type 2 has an invalid length.
[   62.070725][ T6346] netlink: 'syz.2.190': attribute type 1 has an invalid length.
[   62.073082][ T6346] netlink: 'syz.2.190': attribute type 2 has an invalid length.
[   62.265611][ T6367] __nla_validate_parse: 13 callbacks suppressed
[   62.265621][ T6367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.198'.
[   62.508007][ T6387] Cannot find add_set index 0 as target
[   62.641549][ T6400] sctp: [Deprecated]: syz.0.212 (pid 6400) Use of int in max_burst socket option deprecated.
[   62.641549][ T6400] Use struct sctp_assoc_value instead
[   62.690444][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'.
[   62.704083][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'.
[   63.013017][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'.
[   63.318544][ T6444] netlink: 'syz.2.232': attribute type 7 has an invalid length.
[   63.398524][ T6452] netlink: 'syz.1.235': attribute type 4 has an invalid length.
[   63.400917][ T6452] netlink: 17 bytes leftover after parsing attributes in process `syz.1.235'.
[   63.635082][ T6472] netlink: 'syz.1.245': attribute type 1 has an invalid length.
[   63.650034][ T6472] netlink: 'syz.1.245': attribute type 3 has an invalid length.
[   63.655024][ T6472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.245'.
[   63.660306][ T6472] NCSI netlink: No device for ifindex 246
[   63.662270][ T6476] netlink: 'syz.2.246': attribute type 1 has an invalid length.
[   63.665848][ T6476] netlink: 'syz.2.246': attribute type 1 has an invalid length.
[   64.158180][ T6507] netlink: 'syz.2.260': attribute type 29 has an invalid length.
[   64.164357][ T6505] netlink: 'syz.2.260': attribute type 29 has an invalid length.
[   64.593468][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[   64.605765][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'.
[   64.608417][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'.
[   64.661023][ T6515] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[   64.931827][ T6534] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.272'.
[   65.113957][ T6550] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[   65.187901][ T6554] dummy0: entered promiscuous mode
[   65.190354][ T6554] macvtap1: entered promiscuous mode
[   65.192658][ T6554] macvtap1: entered allmulticast mode
[   65.194638][ T6554] dummy0: entered allmulticast mode
[   65.203467][ T6554] dummy0: left allmulticast mode
[   65.206926][ T6554] dummy0: left promiscuous mode
[   65.869993][ T6577] netlink: 'syz.1.292': attribute type 22 has an invalid length.
[   66.048293][ T6590] netlink: 'syz.0.297': attribute type 2 has an invalid length.
[   66.397710][ T6625] block nbd0: server does not support multiple connections per device.
[   66.400821][ T6625] block nbd0: shutting down sockets
[   66.558640][ T6645] syz.2.323 uses old SIOCAX25GETINFO
[   66.651557][ T6645] ip6t_srh: unknown srh invflags 4449
[   67.136903][ T6708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.189841][ T6711] ieee802154 phy0 wpan0: encryption failed: -22
[   67.459386][ T6740] __nla_validate_parse: 14 callbacks suppressed
[   67.459397][ T6740] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.369'.
[   67.522488][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.561731][ T6746] bond2: entered promiscuous mode
[   67.563369][ T6746] bond2: entered allmulticast mode
[   67.565109][ T6746] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.580221][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'.
[   67.583011][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'.
[   67.678195][ T6766] netlink: 48 bytes leftover after parsing attributes in process `syz.0.382'.
[   67.719608][ T5897] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   67.792798][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[   67.795475][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'.
[   67.878749][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'.
[   68.082977][ T6813] xt_TPROXY: Can be used only with -p tcp or -p udp
[   68.098168][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'.
[   68.108003][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'.
[   68.226360][ T6828] netlink: 308 bytes leftover after parsing attributes in process `syz.1.406'.
[   68.230823][ T6828] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   68.386303][ T6845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.998061][ T5897] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   69.002775][ T5897] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   69.199366][ T6930] syzkaller1: entered promiscuous mode
[   69.201023][ T6930] syzkaller1: entered allmulticast mode
[   69.246245][ T6934] tipc: Started in network mode
[   69.248541][ T6934] tipc: Node identity 020de238c0e2, cluster identity 4711
[   69.252722][ T6934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.255603][ T6934] syzkaller0: entered promiscuous mode
[   69.258819][ T6934] syzkaller0: entered allmulticast mode
[   69.273165][ T6934] tipc: Resetting bearer <eth:syzkaller0>
[   69.283311][ T6933] tipc: Resetting bearer <eth:syzkaller0>
[   69.297633][ T6933] tipc: Disabling bearer <eth:syzkaller0>
[   69.325356][ T6936] validate_nla: 2 callbacks suppressed
[   69.325392][ T6936] netlink: 'syz.2.447': attribute type 4 has an invalid length.
[   69.357469][ T6936] netlink: 'syz.2.447': attribute type 4 has an invalid length.
[   69.688209][ T6962] delete_channel: no stack
[   69.755676][  T970] IPVS: starting estimator thread 0...
[   69.759176][ T6958] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   69.846663][ T6967] IPVS: using max 62 ests per chain, 148800 per kthread
[   69.978663][ T6987] netlink: 'syz.2.466': attribute type 5 has an invalid length.
[   70.642613][ T7031] tap0: tun_chr_ioctl cmd 1074025677
[   70.644618][ T7031] tap0: linktype set to 825
[   70.911933][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.914504][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   72.578072][ T7152] __nla_validate_parse: 7 callbacks suppressed
[   72.578084][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[   72.690984][ T7166] netlink: 256 bytes leftover after parsing attributes in process `syz.0.546'.
[   72.711489][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'.
[   72.977022][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'.
[   73.214848][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   73.218334][ T7223] ieee802154 phy0 wpan0: encryption failed: -22
[   73.339287][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'.
[   73.550488][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'.
[   74.694399][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.597'.
[   74.819462][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.602'.
[   74.985914][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[   75.165569][ T7338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'.
[   75.171534][ T7338] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[   75.269095][ T7344] vxcan3: entered allmulticast mode
[   75.393733][  T954] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   75.553818][ T7375] netlink: 'syz.1.625': attribute type 1 has an invalid length.
[   75.650264][ T7384] netlink: 'syz.1.630': attribute type 9 has an invalid length.
[   75.655443][ T7386] syzkaller1: entered promiscuous mode
[   75.659695][ T7386] syzkaller1: entered allmulticast mode
[   75.865258][ T7397] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   76.340978][ T7440] netlink: 'syz.2.656': attribute type 11 has an invalid length.
[   76.450276][ T7452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.453598][ T7452] IPv6: NLM_F_CREATE should be set when creating new route
[   76.779633][ T7478] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   76.786606][ T7478] Cannot find add_set index 3 as target
[   76.863923][ T7487] syzkaller0: entered promiscuous mode
[   76.865624][ T7487] syzkaller0: entered allmulticast mode
[   77.069084][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[   78.410925][ T7549] netlink: 'syz.2.707': attribute type 83 has an invalid length.
[   79.205612][ T7576] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.256649][ T7578] __nla_validate_parse: 7 callbacks suppressed
[   79.256663][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'.
[   79.262953][ T7578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.281859][ T7580] netlink: 'syz.0.721': attribute type 21 has an invalid length.
[   79.506574][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[   79.509342][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'.
[   79.738353][ T7624] netlink: 'syz.0.738': attribute type 2 has an invalid length.
[   80.644094][ T7696] batman_adv: batadv0: Adding interface: dummy0
[   80.646704][ T7696] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.654279][ T7696] batman_adv: batadv0: Interface activated: dummy0
[   80.788097][    C1] IPv4: Oversized IP packet from 127.0.0.1
[   80.859288][ T7713] netlink: 'syz.1.775': attribute type 9 has an invalid length.
[   80.863001][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'.
[   81.111394][ T7745] netlink: 'syz.0.790': attribute type 4 has an invalid length.
[   81.146592][  T954] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   81.156321][   T24] cfg80211: failed to load regulatory.db
[   81.192670][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.792'.
[   81.596976][ T7796] syzkaller1: entered promiscuous mode
[   81.598784][ T7796] syzkaller1: entered allmulticast mode
[   81.745380][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'.
[   81.769070][ T7815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.821258][ T7822] netlink: 'syz.2.826': attribute type 3 has an invalid length.
[   82.142548][ T7849] netlink: 'syz.2.839': attribute type 4 has an invalid length.
[   82.157290][ T7853] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   82.212824][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'.
[   82.328252][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'.
[   82.502793][ T7890] netlink: 84 bytes leftover after parsing attributes in process `syz.2.857'.
[   82.507232][ T7890] netlink: 84 bytes leftover after parsing attributes in process `syz.2.857'.
[   82.878102][ T7924] netlink: 'syz.0.874': attribute type 1 has an invalid length.
[   82.889038][ T7924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.027773][ T7932] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   83.071610][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   83.076506][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.763051][ T7978] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[   84.352041][  T970] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   84.467050][ T8037] __nla_validate_parse: 1 callbacks suppressed
[   84.467061][ T8037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.925'.
[   84.793536][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'.
[   84.801720][ T5875] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   85.210119][ T8075] netlink: 44 bytes leftover after parsing attributes in process `syz.2.941'.
[   85.214083][ T8075] netlink: 43 bytes leftover after parsing attributes in process `syz.2.941'.
[   85.218577][ T8075] netlink: 'syz.2.941': attribute type 6 has an invalid length.
[   85.221959][ T8075] netlink: 'syz.2.941': attribute type 5 has an invalid length.
[   85.225150][ T8075] netlink: 43 bytes leftover after parsing attributes in process `syz.2.941'.
[   85.270356][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[   85.840327][ T8103] netlink: 'syz.0.952': attribute type 16 has an invalid length.
[   85.843661][ T8105] netlink: 'syz.2.953': attribute type 12 has an invalid length.
[   85.847812][ T8105] netlink: 'syz.2.953': attribute type 29 has an invalid length.
[   85.850903][ T8105] netlink: 148 bytes leftover after parsing attributes in process `syz.2.953'.
[   85.854547][ T8105] netlink: 51 bytes leftover after parsing attributes in process `syz.2.953'.
[   85.968856][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'.
[   86.123220][ T8138] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   86.230295][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'.
[   86.277175][ T5897] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   86.578113][ T8176] tipc: Started in network mode
[   86.580086][ T8176] tipc: Node identity e6c32e3daa63, cluster identity 4711
[   86.585505][ T8176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.597782][ T8176] syzkaller0: entered promiscuous mode
[   86.599943][ T8176] syzkaller0: entered allmulticast mode
[   86.637094][ T8176] tipc: Resetting bearer <eth:syzkaller0>
[   86.644952][ T8175] tipc: Resetting bearer <eth:syzkaller0>
[   86.664614][ T8175] tipc: Disabling bearer <eth:syzkaller0>
[   86.909253][ T1086] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   88.054953][ T8268] ksmbd: Unknown IPC event: 3, ignore.
[   88.093381][ T8270] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   88.183668][ T8282] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[   88.189481][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   88.216104][ T8282] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.232951][ T8282] bond1: (slave bridge3): making interface the new active one
[   88.238113][ T8282] bond1: (slave bridge3): Enslaving as an active interface with an up link
[   88.249469][ T8282] gretap1: entered promiscuous mode
[   88.253193][ T8282] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   88.257153][ T8280] nbd0: detected capacity change from 0 to 127
[   88.269332][ T8282] macvlan2: entered promiscuous mode
[   88.271018][ T8282] macvlan2: entered allmulticast mode
[   88.273252][ T8282] bond1: entered promiscuous mode
[   88.274933][ T8282] bridge3: entered promiscuous mode
[   88.278634][ T8282] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.281143][ T8282] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   88.287682][ T8282] bond1: left promiscuous mode
[   88.289188][ T8282] bridge3: left promiscuous mode
[   88.298866][   T56] block nbd0: Receive control failed (result -104)
[   88.714209][ T8318] sctp: [Deprecated]: syz.0.1050 (pid 8318) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.714209][ T8318] Use struct sctp_sack_info instead
[   89.203833][ T8362] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   89.601657][ T8404] netlink: 'syz.1.1088': attribute type 1 has an invalid length.
[   89.685129][ T8416] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   89.885153][ T8436] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   89.898076][ T8436] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.028234][ T8449] syzkaller0: entered promiscuous mode
[   90.030022][ T8449] syzkaller0: entered allmulticast mode
[   90.101894][ T8449] __nla_validate_parse: 6 callbacks suppressed
[   90.101905][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'.
[   90.158182][ T8462] netlink: 'syz.2.1115': attribute type 9 has an invalid length.
[   90.160814][ T8462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1115'.
[   90.234042][ T8467] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.1117'.
[   90.557740][ T8491] netlink: 'syz.2.1123': attribute type 1 has an invalid length.
[   91.591998][ T8539] netlink: 'syz.2.1144': attribute type 2 has an invalid length.
[   91.634041][ T8541] netlink: 'syz.2.1145': attribute type 3 has an invalid length.
[   91.753522][ T8549] netlink: 'syz.2.1149': attribute type 3 has an invalid length.
[   91.756734][ T8549] netlink: 'syz.2.1149': attribute type 3 has an invalid length.
[   91.841714][ T8555] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1154'.
[   91.946462][ T1086] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   92.001907][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'.
[   92.134179][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1172'.
[   92.457174][ T8598] netlink: 'syz.2.1173': attribute type 7 has an invalid length.
[   92.617659][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.621174][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.829422][ T8600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.841486][ T8600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.970931][ T8600] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   92.985906][ T8600] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.988844][ T8600] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.991709][ T8600] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.994532][ T8600] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.998743][ T8600] geneve2: left allmulticast mode
[   93.001730][ T8600] macvtap1: left promiscuous mode
[   93.004057][ T8600] macvtap1: left allmulticast mode
[   93.064535][ T8600] gretap1: left promiscuous mode
[   94.567272][ T8632] netlink: 'syz.2.1182': attribute type 1 has an invalid length.
[   94.569738][ T8632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1182'.
[   94.625528][ T8638] Cannot find del_set index 1 as target
[   94.632752][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'.
[   94.899175][ T8667] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1199'.
[   95.039569][ T8678] netlink: 'syz.1.1203': attribute type 21 has an invalid length.
[   95.042011][ T8678] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1203'.
[   95.052783][ T8678] netlink: 'syz.1.1203': attribute type 5 has an invalid length.
[   95.094404][ T8681] trusted_key: syz.1.1204 sent an empty control message without MSG_MORE.
[   95.144681][ T8685] netlink: 'syz.1.1206': attribute type 33 has an invalid length.
[   95.147813][ T8685] __nla_validate_parse: 1 callbacks suppressed
[   95.147823][ T8685] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1206'.
[   95.508314][ T8713] dummy0: entered promiscuous mode
[   95.510224][ T8713] dummy0: entered allmulticast mode
[   95.578552][ T8717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1221'.
[   95.989842][ T8740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.002852][ T8743] batadv_slave_1: entered promiscuous mode
[   96.027297][ T8745] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   96.068240][ T8740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.124406][ T8740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.133239][ T8746] batadv_slave_0: entered promiscuous mode
[   96.140030][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'.
[   96.147507][ T8745] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1234'.
[   96.150852][ T8745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'.
[   96.208070][ T8740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.310971][ T8740] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.327306][ T8740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.342227][ T8740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.353569][ T8740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.431828][ T8739] batadv_slave_1: left promiscuous mode
[   96.493379][ T8758] netlink: 'syz.2.1240': attribute type 83 has an invalid length.
[   96.501038][ T8761] xt_nfacct: accounting object `syz1' does not exists
[   96.501278][ T8762] netlink: 'syz.1.1241': attribute type 7 has an invalid length.
[   96.718704][ T8786] bridge0: port 3(gretap0) entered blocking state
[   96.721043][ T8786] bridge0: port 3(gretap0) entered disabled state
[   96.723867][ T8786] gretap0: entered allmulticast mode
[   96.734920][ T8786] gretap0: entered promiscuous mode
[   96.737559][ T8786] bridge0: port 3(gretap0) entered blocking state
[   96.739679][ T8786] bridge0: port 3(gretap0) entered forwarding state
[   96.788727][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'.
[   96.817482][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1258'.
[   96.910210][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[   96.920847][ T8804] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1262'.
[   97.051446][ T8815] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   97.389608][ T8841] netlink: 'syz.0.1280': attribute type 3 has an invalid length.
[   97.425592][ T5835] cgroup: fork rejected by pids controller in /syz2
[   97.569949][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1284'.
[   98.045095][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.049929][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.052921][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.057804][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.060744][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.244832][ T8876] chnl_net:caif_netlink_parms(): no params data found
[   98.409219][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.412246][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.415199][ T8876] bridge_slave_0: entered allmulticast mode
[   98.428459][ T8876] bridge_slave_0: entered promiscuous mode
[   98.438357][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.441503][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.444402][ T8876] bridge_slave_1: entered allmulticast mode
[   98.461093][ T8876] bridge_slave_1: entered promiscuous mode
[   98.524102][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.537184][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.593139][ T8876] team0: Port device team_slave_0 added
[   98.601314][ T8876] team0: Port device team_slave_1 added
[   98.649582][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.652270][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.665430][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.672207][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.674929][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.687857][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.716252][ T8911] netlink: 'syz.0.1309': attribute type 8 has an invalid length.
[   98.777785][ T8876] hsr_slave_0: entered promiscuous mode
[   98.780933][ T8876] hsr_slave_1: entered promiscuous mode
[   98.783796][ T8876] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.793216][ T8876] Cannot create hsr debugfs directory
[   99.091658][ T8876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.204319][ T8876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.291435][ T8876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.361490][ T8876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.525488][ T8939] openvswitch: netlink: IP tunnel dst address not specified
[   99.551131][ T8876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.558544][ T8876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.585121][ T8876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.598134][ T8876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.740181][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.748813][ T8949] xt_CT: No such helper "snmp"
[   99.763494][ T8876] 8021q: adding VLAN 0 to HW filter on device team0
[   99.775674][ T4594] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.779703][ T4594] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.808055][ T4594] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.810596][ T4594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.037637][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.104332][ T8876] veth0_vlan: entered promiscuous mode
[  100.107282][ T5834] Bluetooth: hci1: command tx timeout
[  100.128730][ T8876] veth1_vlan: entered promiscuous mode
[  100.164362][ T8980] syzkaller0: entered allmulticast mode
[  100.201466][ T8876] veth0_macvtap: entered promiscuous mode
[  100.208066][ T8876] veth1_macvtap: entered promiscuous mode
[  100.224005][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.235335][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.248996][ T8876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.252492][ T8876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.257965][ T8876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.282997][ T8876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.292211][ T8986] netlink: 'syz.1.1337': attribute type 7 has an invalid length.
[  100.440735][ T4594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.444197][ T4594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.471834][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.474322][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.507039][ T8992] __nla_validate_parse: 11 callbacks suppressed
[  100.507051][ T8992] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1341'.
[  100.613860][ T9000] tap0: tun_chr_ioctl cmd 1074025676
[  100.617175][ T9000] tap0: owner set to 0
[  101.680119][ T9085] netlink: zone id is out of range
[  101.681902][ T9085] netlink: zone id is out of range
[  101.683810][ T9085] netlink: zone id is out of range
[  101.691578][ T9085] netlink: zone id is out of range
[  101.693417][ T9085] netlink: zone id is out of range
[  101.711006][ T9085] netlink: set zone limit has 4 unknown bytes
[  101.982747][ T9105] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  102.062303][ T9114] netlink: 'syz.1.1398': attribute type 2 has an invalid length.
[  102.064715][ T9114] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1398'.
[  102.197382][ T5834] Bluetooth: hci1: command tx timeout
[  103.744850][ T9233] netlink: 'syz.2.1455': attribute type 1 has an invalid length.
[  103.748292][ T9233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1455'.
[  103.999534][ T9249] netlink: 'syz.2.1463': attribute type 1 has an invalid length.
[  104.006555][ T9249] netlink: 'syz.2.1463': attribute type 4 has an invalid length.
[  104.020471][ T9249] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1463'.
[  104.024761][ T9249] NCSI netlink: No device for ifindex 3088861696
[  104.160038][ T9261] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1469'.
[  104.282869][ T5834] Bluetooth: hci1: command tx timeout
[  104.691358][ T9300] netlink: 'syz.1.1481': attribute type 1 has an invalid length.
[  104.720703][ T9303] Bluetooth: hci1: Opcode 0x080f failed: -4
[  104.734316][ T9300] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  104.741122][ T9300] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  104.746245][ T9300] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  104.750293][ T9300] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  104.759916][ T9300] bond4: (slave geneve2): making interface the new active one
[  104.770085][ T9300] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  104.788956][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1481'.
[  104.795379][ T9300] 8021q: adding VLAN 0 to HW filter on device bond4
[  105.383213][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'.
[  106.128888][ T9399] netlink: 'syz.0.1524': attribute type 7 has an invalid length.
[  106.211657][ T9405] netlink: 'syz.0.1526': attribute type 1 has an invalid length.
[  106.283350][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'.
[  106.314764][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1533'.
[  106.355987][ T5834] Bluetooth: hci1: command tx timeout
[  107.497305][ T9455] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.501172][ T9455] 8021q: adding VLAN 0 to HW filter on device team0
[  107.518467][ T9455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.612765][ T9461] netlink: 'syz.0.1551': attribute type 1 has an invalid length.
[  107.617028][ T9461] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1551'.
[  107.621189][ T9461] netlink: 'syz.0.1551': attribute type 1 has an invalid length.
[  107.625181][ T9461] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1551'.
[  108.043199][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'.
[  108.050079][ T9485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1561'.
[  108.092084][ T9490] ip6gretap1: entered promiscuous mode
[  108.116276][ T9492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1564'.
[  108.277823][ T9504] syz.0.1570 (9504) used obsolete PPPIOCDETACH ioctl
[  108.427022][ T5834] Bluetooth: hci1: command 0x080f tx timeout
[  108.469044][ T9516] netlink: 'syz.2.1575': attribute type 9 has an invalid length.
[  109.014510][ T9563] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  109.334913][ T9596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1609'.
[  109.672737][ T9636] netlink: 'syz.0.1627': attribute type 30 has an invalid length.
[  109.675600][ T9636] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  109.679221][ T9636] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  109.958777][ T9645] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1630'.
[  110.040860][ T9648] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1631'.
[  110.191645][ T9660] netlink: 'syz.2.1634': attribute type 5 has an invalid length.
[  110.294529][ T9671] netlink: 'syz.2.1640': attribute type 5 has an invalid length.
[  110.356173][ T9680] netlink: 'syz.2.1644': attribute type 5 has an invalid length.
[  110.358566][ T9680] netlink: 'syz.2.1644': attribute type 7 has an invalid length.
[  110.369357][ T9680] : entered promiscuous mode
[  110.597818][ T9698] xt_limit: Overflow, try lower: 262144/524288
[  111.497346][   T33] audit: type=1800 audit(1752508848.575:2): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1674" name=25705320202020 dev="tmpfs" ino=2785 res=0 errno=0
[  111.738464][ T9752] xt_l2tp: missing protocol rule (udp|l2tpip)
[  112.001501][ T9766] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  112.051461][ T9772] __nla_validate_parse: 5 callbacks suppressed
[  112.051471][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'.
[  112.173203][ T9775] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  112.346019][ T5836] Bluetooth: hci1: command 0x080f tx timeout
[  112.466711][ T9803] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  113.567440][ T9837] sctp: [Deprecated]: syz.2.1707 (pid 9837) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.567440][ T9837] Use struct sctp_sack_info instead
[  114.401076][ T9851] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  114.839619][ T9873] SET target dimension over the limit!
[  114.913236][ T9886] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1727'.
[  115.072876][ T9894] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  115.530697][ T9934] macvlan3: entered allmulticast mode
[  115.533377][ T9934] veth1_vlan: entered allmulticast mode
[  115.548767][ T9934] team0: Port device macvlan3 added
[  115.621767][ T9936] syzkaller1: entered promiscuous mode
[  115.624002][ T9936] syzkaller1: entered allmulticast mode
[  115.695712][ T9924] validate_nla: 1 callbacks suppressed
[  115.700501][ T9924] netlink: 'syz.1.1738': attribute type 6 has an invalid length.
[  115.747231][ T9942] tipc: New replicast peer: 255.255.255.255
[  115.751345][ T9942] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.869518][   T24] tipc: Node number set to 3270500920
[  117.472958][T10028] bridge0: entered promiscuous mode
[  117.893271][T10061] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1806'.
[  117.921512][T10073] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551500)
[  117.925115][T10073] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  118.035540][T10081] netlink: 'syz.0.1815': attribute type 2 has an invalid length.
[  118.039522][T10081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.283496][   T11] block nbd0: Possible stuck request ffff88801fdb8000: control (read@0,1024B). Runtime 30 seconds
[  118.287995][   T11] block nbd0: Possible stuck request ffff88801fdb8200: control (read@1024,1024B). Runtime 30 seconds
[  118.291999][   T11] block nbd0: Possible stuck request ffff88801fdb8400: control (read@2048,1024B). Runtime 30 seconds
[  118.296359][   T11] block nbd0: Possible stuck request ffff88801fdb8600: control (read@3072,1024B). Runtime 30 seconds
[  118.337047][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'.
[  118.491776][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'.
[  118.500406][T10105] IPVS: Error joining to the multicast group
[  118.985159][T10121] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1833'.
[  119.296583][T10134] syzkaller1: entered promiscuous mode
[  119.298819][T10134] syzkaller1: entered allmulticast mode
[  120.054579][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'.
[  120.157743][T10167] syz_tun: entered allmulticast mode
[  120.174693][T10167] dvmrp8: entered allmulticast mode
[  120.215600][T10166] syz_tun: left allmulticast mode
[  120.460092][T10178] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1858'.
[  120.702572][T10199] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1869'.
[  120.722168][T10201] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1870'.
[  120.843426][   T33] audit: type=1800 audit(1752508857.925:3): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1877" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3137 res=0 errno=0
[  120.862632][   T33] audit: type=1800 audit(1752508857.925:4): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1877" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3137 res=0 errno=0
[  121.041048][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'.
[  121.304312][T10273] lo: entered allmulticast mode
[  121.327042][T10273] lo: left allmulticast mode
[  121.382021][T10279] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1908'.
[  121.384884][T10279] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  121.808177][T10311] block nbd1: server does not support multiple connections per device.
[  121.811133][T10311] block nbd1: shutting down sockets
[  122.021705][T10335] netlink: 'syz.1.1925': attribute type 27 has an invalid length.
[  122.185083][T10351] netlink: 'syz.1.1930': attribute type 1 has an invalid length.
[  122.189403][T10351] netlink: 'syz.1.1930': attribute type 1 has an invalid length.
[  122.193841][T10346] xt_CT: No such helper "pptp"
[  122.206347][T10346] --map-set only usable from mangle table
[  123.014463][T10403] openvswitch: netlink: IP tunnel dst address not specified
[  123.460139][T10438] ieee802154 phy0 wpan0: encryption failed: -22
[  123.669319][T10450] Cannot find add_set index 0 as target
[  123.782953][T10459] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  123.793998][T10459] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  123.810927][T10461] tipc: Started in network mode
[  123.812703][T10461] tipc: Node identity 1ab582de9ffe, cluster identity 4711
[  123.815515][T10461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.837565][T10461] syzkaller0: entered promiscuous mode
[  123.839783][T10461] syzkaller0: entered allmulticast mode
[  123.856325][T10461] tipc: Resetting bearer <eth:syzkaller0>
[  123.875271][T10460] tipc: Resetting bearer <eth:syzkaller0>
[  123.920931][T10460] tipc: Disabling bearer <eth:syzkaller0>
[  123.931287][T10471] netlink: 'syz.1.1966': attribute type 1 has an invalid length.
[  123.943598][T10471] __nla_validate_parse: 1 callbacks suppressed
[  123.943617][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'.
[  124.025230][T10475] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  124.075169][T10478] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  124.132986][T10482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1967'.
[  124.140519][T10482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1967'.
[  124.328775][T10493] IPVS: Error joining to the multicast group
[  124.958299][T10513] netlink: 'syz.2.1982': attribute type 10 has an invalid length.
[  124.999199][T10513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.017019][T10513] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  125.129369][T10527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.270673][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'.
[  125.450789][T10542] bridge6: entered promiscuous mode
[  125.559677][T10551] Bluetooth: MGMT ver 1.23
[  125.783860][T10566] netlink: 'syz.2.2007': attribute type 1 has an invalid length.
[  125.788097][T10566] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2007'.
[  125.971974][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2015'.
[  126.000777][T10587] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2016'.
[  126.071622][ T1087] 
[  126.072662][ T1087] ======================================================
[  126.075342][ T1087] WARNING: possible circular locking dependency detected
[  126.078056][ T1087] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  126.082152][ T1087] ------------------------------------------------------
[  126.084854][ T1087] kworker/u9:4/1087 is trying to acquire lock:
[  126.087274][ T1087] ffff8881126d8358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  126.090800][ T1087] 
[  126.090800][ T1087] but task is already holding lock:
[  126.093507][ T1087] ffff888119d75188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  126.097195][ T1087] 
[  126.097195][ T1087] which lock already depends on the new lock.
[  126.097195][ T1087] 
[  126.101127][ T1087] 
[  126.101127][ T1087] the existing dependency chain (in reverse order) is:
[  126.104530][ T1087] 
[  126.104530][ T1087] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  126.107639][ T1087]        lock_acquire+0x120/0x360
[  126.109610][ T1087]        down_write+0x96/0x1f0
[  126.111442][ T1087]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  126.113881][ T1087]        nbd_start_device+0x16c/0xac0
[  126.115976][ T1087]        nbd_genl_connect+0x1250/0x1930
[  126.118089][ T1087]        genl_family_rcv_msg_doit+0x215/0x300
[  126.120435][ T1087]        genl_rcv_msg+0x60e/0x790
[  126.122429][ T1087]        netlink_rcv_skb+0x208/0x470
[  126.124520][ T1087]        genl_rcv+0x28/0x40
[  126.126321][ T1087]        netlink_unicast+0x75c/0x8e0
[  126.128486][ T1087]        netlink_sendmsg+0x805/0xb30
[  126.130519][ T1087]        __sock_sendmsg+0x21c/0x270
[  126.132519][ T1087]        ____sys_sendmsg+0x505/0x830
[  126.134608][ T1087]        ___sys_sendmsg+0x21f/0x2a0
[  126.136676][ T1087]        __x64_sys_sendmsg+0x19b/0x260
[  126.138775][ T1087]        do_syscall_64+0xfa/0x3b0
[  126.140705][ T1087]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.143126][ T1087] 
[  126.143126][ T1087] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  126.146083][ T1087]        lock_acquire+0x120/0x360
[  126.148015][ T1087]        __mutex_lock+0x182/0xe80
[  126.149531][ T1087]        refcount_dec_and_mutex_lock+0x30/0xa0
[  126.151597][ T1087]        nbd_config_put+0x2c/0x790
[  126.153563][ T1087]        nbd_release+0xfe/0x140
[  126.155394][ T1087]        bdev_release+0x536/0x650
[  126.157334][ T1087]        blkdev_release+0x15/0x20
[  126.159389][ T1087]        __fput+0x44c/0xa70
[  126.161254][ T1087]        fput_close_sync+0x119/0x200
[  126.163368][ T1087]        __x64_sys_close+0x7f/0x110
[  126.165380][ T1087]        do_syscall_64+0xfa/0x3b0
[  126.167364][ T1087]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.169960][ T1087] 
[  126.169960][ T1087] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  126.173092][ T1087]        validate_chain+0xb9b/0x2140
[  126.175147][ T1087]        __lock_acquire+0xab9/0xd20
[  126.177112][ T1087]        lock_acquire+0x120/0x360
[  126.179039][ T1087]        __mutex_lock+0x182/0xe80
[  126.180934][ T1087]        __del_gendisk+0x129/0x9e0
[  126.182852][ T1087]        del_gendisk+0xe8/0x160
[  126.184730][ T1087]        nbd_dev_remove_work+0x47/0xe0
[  126.186787][ T1087]        process_scheduled_works+0xae1/0x17b0
[  126.188996][ T1087]        worker_thread+0x8a0/0xda0
[  126.190525][ T1087]        kthread+0x711/0x8a0
[  126.191942][ T1087]        ret_from_fork+0x3fc/0x770
[  126.193944][ T1087]        ret_from_fork_asm+0x1a/0x30
[  126.195933][ T1087] 
[  126.195933][ T1087] other info that might help us debug this:
[  126.195933][ T1087] 
[  126.199840][ T1087] Chain exists of:
[  126.199840][ T1087]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  126.199840][ T1087] 
[  126.205194][ T1087]  Possible unsafe locking scenario:
[  126.205194][ T1087] 
[  126.208070][ T1087]        CPU0                    CPU1
[  126.210115][ T1087]        ----                    ----
[  126.212185][ T1087]   rlock(&set->update_nr_hwq_lock);
[  126.214218][ T1087]                                lock(&nbd->config_lock);
[  126.216947][ T1087]                                lock(&set->update_nr_hwq_lock);
[  126.219980][ T1087]   lock(&disk->open_mutex);
[  126.221841][ T1087] 
[  126.221841][ T1087]  *** DEADLOCK ***
[  126.221841][ T1087] 
[  126.224912][ T1087] 3 locks held by kworker/u9:4/1087:
[  126.226903][ T1087]  #0: ffff88801fd16948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  126.231088][ T1087]  #1: ffffc90007047bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  126.235521][ T1087]  #2: ffff888119d75188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  126.238702][ T1087] 
[  126.238702][ T1087] stack backtrace:
[  126.240629][ T1087] CPU: 0 UID: 0 PID: 1087 Comm: kworker/u9:4 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  126.240641][ T1087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.240649][ T1087] Workqueue: nbd-del nbd_dev_remove_work
[  126.240664][ T1087] Call Trace:
[  126.240671][ T1087]  <TASK>
[  126.240677][ T1087]  dump_stack_lvl+0x189/0x250
[  126.240690][ T1087]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.240699][ T1087]  ? __pfx__printk+0x10/0x10
[  126.240710][ T1087]  ? print_lock_name+0xde/0x100
[  126.240720][ T1087]  print_circular_bug+0x2ee/0x310
[  126.240733][ T1087]  check_noncircular+0x134/0x160
[  126.240744][ T1087]  validate_chain+0xb9b/0x2140
[  126.240754][ T1087]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  126.240766][ T1087]  ? arch_stack_walk+0x11c/0x150
[  126.240778][ T1087]  __lock_acquire+0xab9/0xd20
[  126.240787][ T1087]  ? __del_gendisk+0x129/0x9e0
[  126.240796][ T1087]  lock_acquire+0x120/0x360
[  126.240803][ T1087]  ? __del_gendisk+0x129/0x9e0
[  126.240811][ T1087]  ? check_path+0x21/0x40
[  126.240821][ T1087]  __mutex_lock+0x182/0xe80
[  126.240830][ T1087]  ? __del_gendisk+0x129/0x9e0
[  126.240839][ T1087]  ? __del_gendisk+0x129/0x9e0
[  126.240847][ T1087]  ? __pfx___mutex_lock+0x10/0x10
[  126.240854][ T1087]  ? __pfx___might_resched+0x10/0x10
[  126.240865][ T1087]  ? __lock_acquire+0xab9/0xd20
[  126.240872][ T1087]  ? disk_del_events+0xb5/0x210
[  126.240881][ T1087]  ? __del_gendisk+0xc1/0x9e0
[  126.240889][ T1087]  __del_gendisk+0x129/0x9e0
[  126.240897][ T1087]  ? del_gendisk+0xe0/0x160
[  126.240905][ T1087]  ? __pfx___del_gendisk+0x10/0x10
[  126.240914][ T1087]  ? down_read+0x1ad/0x2e0
[  126.240922][ T1087]  del_gendisk+0xe8/0x160
[  126.240930][ T1087]  nbd_dev_remove_work+0x47/0xe0
[  126.240937][ T1087]  ? process_scheduled_works+0x9ef/0x17b0
[  126.240946][ T1087]  process_scheduled_works+0xae1/0x17b0
[  126.240960][ T1087]  ? __pfx_process_scheduled_works+0x10/0x10
[  126.240971][ T1087]  worker_thread+0x8a0/0xda0
[  126.240983][ T1087]  kthread+0x711/0x8a0
[  126.240995][ T1087]  ? __pfx_worker_thread+0x10/0x10
[  126.241003][ T1087]  ? __pfx_kthread+0x10/0x10
[  126.241013][ T1087]  ? _raw_spin_unlock_irq+0x23/0x50
[  126.241023][ T1087]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.241035][ T1087]  ? __pfx_kthread+0x10/0x10
[  126.241044][ T1087]  ret_from_fork+0x3fc/0x770
[  126.241053][ T1087]  ? __pfx_ret_from_fork+0x10/0x10
[  126.241062][ T1087]  ? __switch_to_asm+0x39/0x70
[  126.241071][ T1087]  ? __switch_to_asm+0x33/0x70
[  126.241080][ T1087]  ? __pfx_kthread+0x10/0x10
[  126.241089][ T1087]  ret_from_fork_asm+0x1a/0x30
[  126.241102][ T1087]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  126.828460][   T12] bridge_slave_1: left allmulticast mode
[  126.830799][   T12] bridge_slave_1: left promiscuous mode
[  126.833092][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.838905][   T12] bridge_slave_0: left allmulticast mode
[  126.841796][   T12] bridge_slave_0: left promiscuous mode
[  126.844138][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.934830][   T12] bond1 (unregistering): (slave gretap1): Releasing active interface
[  126.937657][   T12] bridge3 (unregistering): entered promiscuous mode
[  127.113628][   T12] bond1 (unregistering): (slave bridge3): Releasing active interface
[  127.117057][   T12] bridge3 (unregistering): left promiscuous mode
[  127.346749][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.350889][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.354571][   T12] bond0 (unregistering): Released all slaves
[  127.433033][   T12] bond1 (unregistering): Released all slaves
[  127.484671][   T12] tipc: Disabling bearer <udp:syz2>
[  127.493548][   T12] tipc: Left network mode
[  127.696836][   T12] hsr_slave_0: left promiscuous mode
[  127.698941][   T12] hsr_slave_1: left promiscuous mode
[  127.700786][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.703240][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.708169][   T12] veth1_vlan: left allmulticast mode
[  127.714997][   T12] team0 (unregistering): Port device macvlan3 removed
[  127.899542][   T12] team0 (unregistering): Port device team_slave_1 removed
[  127.919268][   T12] team0 (unregistering): Port device team_slave_0 removed
[  128.338325][   T12] IPVS: stop unused estimator thread 0...
[  132.348693][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.351125][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
16:01:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007046e10
R8 =ffff888108d68237 R9 =1ffff110211ad046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ad R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555568e95808 CR3=000000010edae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000101 000055650e657571
XMM06=ffffffffff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff000000000000 XMM09=0000000000302d78 742f736575657571
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff899ff1eb RBX=00007f4ed7e11370 RCX=ffffffff899ff1eb RDX=ffffffff899ff1eb
RSI=ffffffff899ff1eb RDI=00007f4ed7e11370 RBP=00007f4ed7e112e8 RSP=00007ffcfa98b180
R8 =00007f4ed7e11328 R9 =00007f4ed89a2000 R10=00007f4ed7dff008 R11=0000000000000002
R12=00007f4ed7e112e0 R13=0000000000000012 R14=00007ffcfa98b3f8 R15=00007f4ed7dff008
RIP=00007f4ed8667ded RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555568e95500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2db1cff8 CR3=000000010a5e3000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff899ff1eb ffffffff899ff1eb XMM01=ffffffff899ff1eb ffffffff899ff1eb
XMM02=0001000a80010060 ffffffff899ff1eb XMM03=4001000c80020050 00000074696d696c
XMM04=0100000040040008 0800000000000000 XMM05=0100110000001407 0000000000000040
XMM06=01000c0000000000 0000004002000cba XMM07=0f00004003000809 0000000000000040
XMM08=02000c0180000000 0000004001000c01 XMM09=0000000000000000 00007f4ed8811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
