last executing test programs:

1.577674221s ago: executing program 0 (id=1269):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2", 0x2, 0x840, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x62a}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

682.946991ms ago: executing program 0 (id=1289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

570.297093ms ago: executing program 0 (id=1291):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000)

451.861149ms ago: executing program 1 (id=1294):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x200)

380.125987ms ago: executing program 1 (id=1296):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOWNER(r0, 0x400454da, 0xffffffffffffffff)

252.105117ms ago: executing program 1 (id=1300):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xcc010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)

251.88828ms ago: executing program 2 (id=1301):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000002c0)={'a', ' *:* ', 'w\x00'}, 0x8)

233.789538ms ago: executing program 1 (id=1302):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)

226.033416ms ago: executing program 0 (id=1303):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xb0, @remote, 0x7}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x3}}, 0x24, 0x4, 0x402, 0xa, 0x2, 0x7f}, 0x9c)

151.459204ms ago: executing program 2 (id=1304):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x50}}, 0x0)

151.182276ms ago: executing program 1 (id=1305):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r4, &(0x7f0000000100), 0x0, 0x726, 0x7)
socket$netlink(0x10, 0x3, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x10001, 0x7ffd, 0x27b6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20004}, 0x50)

151.082017ms ago: executing program 2 (id=1306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

149.371912ms ago: executing program 0 (id=1307):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x79, &(0x7f0000000000)=""/121, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

71.789685ms ago: executing program 0 (id=1308):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

71.474416ms ago: executing program 2 (id=1309):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000060000000400"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="300300002400010026bd7000fedbdf251f0300800c0001"], 0x330}], 0x1}, 0x0)

479.057µs ago: executing program 2 (id=1310):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}], 0x38}, 0x0)

278.795µs ago: executing program 2 (id=1311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0)

0s ago: executing program 1 (id=1312):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x44}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x9804)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x4000002)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41)
ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000b80), 0x0, 0x0)
setsockopt(r4, 0x84, 0x82, &(0x7f00000002c0)="1af3050000f20800", 0x8)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48982' (ED25519) to the list of known hosts.
syzkaller login: [   49.554068][ T5752] cgroup: Unknown subsys name 'net'
[   49.639126][ T5752] cgroup: Unknown subsys name 'cpuset'
[   49.642676][ T5752] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.289192][ T5752] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.537845][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.541134][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.544314][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.547718][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.550222][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.570144][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.574701][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.580058][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.583126][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.585914][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.608045][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.611127][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.616481][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.620318][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.626954][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.800049][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   55.871522][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   55.921646][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.928032][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.931119][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.933602][ T5808] bridge_slave_0: entered allmulticast mode
[   55.936407][ T5808] bridge_slave_0: entered promiscuous mode
[   55.940493][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.942793][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.945047][ T5808] bridge_slave_1: entered allmulticast mode
[   55.948360][ T5808] bridge_slave_1: entered promiscuous mode
[   55.992571][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.019184][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.029043][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.031365][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.033706][ T5812] bridge_slave_0: entered allmulticast mode
[   56.036427][ T5812] bridge_slave_0: entered promiscuous mode
[   56.040919][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.043227][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.045564][ T5812] bridge_slave_1: entered allmulticast mode
[   56.049530][ T5812] bridge_slave_1: entered promiscuous mode
[   56.087034][ T5808] team0: Port device team_slave_0 added
[   56.128028][ T5808] team0: Port device team_slave_1 added
[   56.130345][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.133009][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.135369][ T5818] bridge_slave_0: entered allmulticast mode
[   56.138491][ T5818] bridge_slave_0: entered promiscuous mode
[   56.143247][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.153504][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.156218][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.159119][ T5818] bridge_slave_1: entered allmulticast mode
[   56.161928][ T5818] bridge_slave_1: entered promiscuous mode
[   56.166022][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.205234][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.210134][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.221091][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.229991][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.235072][ T5812] team0: Port device team_slave_0 added
[   56.238235][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.241047][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.252001][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.265502][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.277736][ T5812] team0: Port device team_slave_1 added
[   56.294614][ T5818] team0: Port device team_slave_0 added
[   56.319850][ T5818] team0: Port device team_slave_1 added
[   56.353585][ T5808] hsr_slave_0: entered promiscuous mode
[   56.357356][ T5808] hsr_slave_1: entered promiscuous mode
[   56.361071][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.363783][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.374925][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.381251][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.384193][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.395691][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.408970][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.411340][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.420841][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.444977][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.448625][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.458777][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.495563][ T5812] hsr_slave_0: entered promiscuous mode
[   56.498620][ T5812] hsr_slave_1: entered promiscuous mode
[   56.500800][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.503467][ T5812] Cannot create hsr debugfs directory
[   56.567289][ T5818] hsr_slave_0: entered promiscuous mode
[   56.569594][ T5818] hsr_slave_1: entered promiscuous mode
[   56.571738][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.574168][ T5818] Cannot create hsr debugfs directory
[   56.753997][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.760595][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.774370][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.793486][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.840205][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.851137][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.861291][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.872665][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.913994][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.926412][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.937966][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.943571][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.040498][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.054967][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.070108][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   57.078220][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.080969][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.093151][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   57.101305][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.106072][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.108917][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.119668][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.122197][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.135822][  T695] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.138248][  T695] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.147399][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   57.167627][  T695] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.170075][  T695] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.185246][  T695] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.187764][  T695] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.441144][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.458566][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.490991][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.523650][ T5812] veth0_vlan: entered promiscuous mode
[   57.535496][ T5808] veth0_vlan: entered promiscuous mode
[   57.544893][ T5812] veth1_vlan: entered promiscuous mode
[   57.567507][ T5811] Bluetooth: hci0: command tx timeout
[   57.573634][ T5808] veth1_vlan: entered promiscuous mode
[   57.578590][ T5812] veth0_macvtap: entered promiscuous mode
[   57.585951][ T5812] veth1_macvtap: entered promiscuous mode
[   57.598571][ T5818] veth0_vlan: entered promiscuous mode
[   57.609723][ T5818] veth1_vlan: entered promiscuous mode
[   57.613349][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.626412][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.637712][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.640647][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.643774][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.646472][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.647573][ T5811] Bluetooth: hci2: command tx timeout
[   57.651255][ T5814] Bluetooth: hci1: command tx timeout
[   57.660627][ T5808] veth0_macvtap: entered promiscuous mode
[   57.675371][ T5808] veth1_macvtap: entered promiscuous mode
[   57.697679][ T5818] veth0_macvtap: entered promiscuous mode
[   57.713078][ T5818] veth1_macvtap: entered promiscuous mode
[   57.729131][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.744029][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.752338][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.767554][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.773113][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.776457][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.781423][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.784385][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.800565][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.803930][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.808465][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.811234][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.821909][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.832466][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.878474][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.882393][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.936476][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.940721][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.961716][  T695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.964705][  T695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.989460][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.007825][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.011035][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.022286][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.025512][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.113720][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.324470][ T5894] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.407842][ T5899] netlink: 'syz.1.11': attribute type 11 has an invalid length.
[   58.410285][ T5899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11'.
[   58.431458][ T5901] netlink: 'syz.2.12': attribute type 10 has an invalid length.
[   58.452287][ T5901] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.12'.
[   58.542889][ T5912] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.16'.
[   58.553749][ T5912] netlink: 'syz.2.16': attribute type 4 has an invalid length.
[   58.581400][ T5912] netlink: 'syz.2.16': attribute type 4 has an invalid length.
[   58.832651][ T5927] netlink: 'syz.2.25': attribute type 58 has an invalid length.
[   58.845424][ T5927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25'.
[   58.915173][ T5932] af_packet: tpacket_rcv: packet too big, clamped from 5 to 4294967272. macoff=96
[   59.325349][ T5963] netlink: 56 bytes leftover after parsing attributes in process `syz.1.43'.
[   59.359828][ T5965] netlink: 'syz.2.44': attribute type 9 has an invalid length.
[   59.435895][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'.
[   59.471592][ T5974] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[   59.536436][ T5972] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   59.557435][ T5862] IPVS: starting estimator thread 0...
[   59.647121][ T5978] IPVS: using max 81 ests per chain, 194400 per kthread
[   59.650052][ T5814] Bluetooth: hci0: command tx timeout
[   59.727091][ T5814] Bluetooth: hci2: command tx timeout
[   59.727545][ T5811] Bluetooth: hci1: command tx timeout
[   59.885706][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.900864][ T6001] x_tables: duplicate underflow at hook 3
[   60.016974][ T5982] Bluetooth: MGMT ver 1.23
[   60.125844][ T6004] netlink: 108 bytes leftover after parsing attributes in process `syz.0.51'.
[   60.129780][ T6018] netlink: 72 bytes leftover after parsing attributes in process `syz.2.67'.
[   60.129815][ T6018] tipc: Started in network mode
[   60.134440][ T6018] tipc: Node identity , cluster identity 4711
[   60.141608][ T6018] tipc: Failed to obtain node identity
[   60.144606][ T6018] tipc: Enabling of bearer <eth:wg1> rejected, failed to enable media
[   60.350231][ T6037] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.400339][ T6042] lo speed is unknown, defaulting to 1000
[   60.404201][ T6042] lo speed is unknown, defaulting to 1000
[   60.409637][ T6042] lo speed is unknown, defaulting to 1000
[   60.587623][ T6044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.710796][ T6052] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'.
[   60.756128][ T6042] infiniband syz0: set active
[   60.758246][ T6042] infiniband syz0: added lo
[   60.775543][   T10] lo speed is unknown, defaulting to 1000
[   60.791601][ T6042] RDS/IB: syz0: added
[   60.793871][ T6042] smc: adding ib device syz0 with port count 1
[   60.796421][ T6042] smc:    ib device syz0 port 1 has pnetid 
[   60.803829][   T10] lo speed is unknown, defaulting to 1000
[   60.807568][ T6042] lo speed is unknown, defaulting to 1000
[   60.929541][ T6042] lo speed is unknown, defaulting to 1000
[   61.044188][ T6056] tipc: Started in network mode
[   61.046222][ T6056] tipc: Node identity 4afd1a655b01, cluster identity 4711
[   61.049116][ T6056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.072843][ T6056] syzkaller0: entered promiscuous mode
[   61.074782][ T6056] syzkaller0: entered allmulticast mode
[   61.078228][ T6056] tipc: Resetting bearer <eth:syzkaller0>
[   61.083564][ T6055] tipc: Resetting bearer <eth:syzkaller0>
[   61.707303][ T6055] tipc: Disabling bearer <eth:syzkaller0>
[   61.712849][ T6042] lo speed is unknown, defaulting to 1000
[   61.737824][ T5811] Bluetooth: hci0: command tx timeout
[   61.794005][   T33] audit: type=1804 audit(1751940490.797:2): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.82" name="/newroot/22/cgroup.controllers" dev="tmpfs" ino=129 res=1 errno=0
[   61.806707][ T5811] Bluetooth: hci1: command tx timeout
[   61.813906][   T33] audit: type=1800 audit(1751940490.797:3): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.82" name="cgroup.controllers" dev="tmpfs" ino=129 res=0 errno=0
[   61.821612][ T5811] Bluetooth: hci2: command tx timeout
[   61.869108][ T6042] syz.1.76 (6042) used greatest stack depth: 19496 bytes left
[   62.775917][ T6091] netlink: 'syz.2.95': attribute type 29 has an invalid length.
[   62.889125][ T6095] geneve1: entered promiscuous mode
[   62.891368][ T6095] geneve1: entered allmulticast mode
[   62.986217][ T6097] lo speed is unknown, defaulting to 1000
[   63.027401][ T6102] Zero length message leads to an empty skb
[   63.038415][ T6102] netlink: 'syz.2.99': attribute type 13 has an invalid length.
[   63.041466][ T6102] netlink: 'syz.2.99': attribute type 17 has an invalid length.
[   63.767118][ T6162] syz.1.123 uses obsolete (PF_INET,SOCK_PACKET)
[   63.816851][ T5814] Bluetooth: hci0: command tx timeout
[   63.897111][ T5814] Bluetooth: hci2: command tx timeout
[   63.897143][   T54] Bluetooth: hci1: command tx timeout
[   64.265615][ T6189] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   64.291138][ T6189] tipc: Resetting bearer <eth:syzkaller0>
[   64.300654][ T6188] tipc: Resetting bearer <eth:syzkaller0>
[   65.012034][ T6188] tipc: Disabling bearer <eth:syzkaller0>
[   65.059100][ T6203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.242885][ T6215] syz_tun: entered allmulticast mode
[   65.250124][ T6213] __nla_validate_parse: 1 callbacks suppressed
[   65.250141][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.147'.
[   65.253102][ T6214] syz_tun: left allmulticast mode
[   65.274599][ T6217] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   65.402262][ T6228] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   65.405168][ T6228] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   65.409050][ T5811] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   65.811175][ T6259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.896781][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout
[   65.922809][ T6259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.968327][ T5811] Bluetooth: hci2: command tx timeout
[   65.972818][ T6259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.056034][ T6259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.162743][ T6259] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.180634][ T6259] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.194793][ T6259] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.209348][ T6259] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.245017][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'.
[   66.480078][ T6305] netlink: 'syz.0.182': attribute type 39 has an invalid length.
[   66.735970][ T6321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.190'.
[   66.743505][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   66.891276][ T6331] lo speed is unknown, defaulting to 1000
[   66.905353][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'.
[   66.961995][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'.
[   66.989720][ T6338] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   67.009096][ T6338] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   67.295487][ T6360] Unsupported ieee802154 address type: 0
[   67.752016][ T6387] netem: change failed
[   67.762863][ T6388] tipc: Started in network mode
[   67.764994][ T6388] tipc: Node identity 6a13d1785594, cluster identity 4711
[   67.770957][ T6388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.774453][ T6388] syzkaller0: entered promiscuous mode
[   67.778868][ T6388] syzkaller0: entered allmulticast mode
[   67.794764][ T6388] tipc: Resetting bearer <eth:syzkaller0>
[   67.799113][ T6386] tipc: Resetting bearer <eth:syzkaller0>
[   67.808728][ T6386] tipc: Disabling bearer <eth:syzkaller0>
[   68.114778][ T6412] netlink: 6 bytes leftover after parsing attributes in process `syz.0.233'.
[   68.231012][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'.
[   68.361820][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'.
[   68.401670][ T6440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.246'.
[   68.490190][ T6448] Cannot find add_set index 0 as target
[   69.305804][ T6498] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   69.560419][ T6514] netlink: 'syz.1.281': attribute type 1 has an invalid length.
[   70.130659][ T6551] netlink: 'syz.1.296': attribute type 33 has an invalid length.
[   70.245524][ T6563] netlink: 'syz.2.299': attribute type 5 has an invalid length.
[   70.254337][ T6563] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   70.259568][ T6563] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   70.262342][ T6563] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   70.272635][ T6563] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   70.287725][ T6563] geneve2: entered promiscuous mode
[   70.289530][ T6563] geneve2: entered allmulticast mode
[   70.351308][ T6572] x_tables: ip6_tables: udplite match: only valid for protocol 136
[   70.354254][ T6570] __nla_validate_parse: 11 callbacks suppressed
[   70.354262][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'.
[   70.842612][ T6608] lo speed is unknown, defaulting to 1000
[   70.848612][ T6614] sit0: entered promiscuous mode
[   70.859739][ T6614] netlink: 'syz.0.325': attribute type 1 has an invalid length.
[   70.862182][ T6614] netlink: 1 bytes leftover after parsing attributes in process `syz.0.325'.
[   70.933815][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.322'.
[   70.948408][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'.
[   70.963223][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.322'.
[   70.978908][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.322'.
[   71.031085][ T6626] netlink: 34 bytes leftover after parsing attributes in process `syz.0.330'.
[   71.036302][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'.
[   71.148410][ T6632] smc: net device bond0 applied user defined pnetid SYZ2
[   71.170646][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.172825][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.274303][ T6642] netlink: 'syz.0.337': attribute type 39 has an invalid length.
[   71.466183][ T6647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.768907][ T6669] netlink: 76 bytes leftover after parsing attributes in process `syz.2.351'.
[   72.234643][ T6704] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   72.330562][ T6712] netlink: 48 bytes leftover after parsing attributes in process `syz.2.370'.
[   72.338361][ T6712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.341623][ T6712] IPv6: NLM_F_CREATE should be set when creating new route
[   72.821698][ T6742] tun0: tun_chr_ioctl cmd 2148553947
[   73.688560][ T5862] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   73.692418][ T5862] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   73.709208][ T5862] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   74.226251][ T6833] vlan0: entered promiscuous mode
[   74.359975][ T6846] netlink: 'syz.0.429': attribute type 5 has an invalid length.
[   74.412541][ T6849] bridge3: port 1(ip6gretap1) entered blocking state
[   74.414985][ T6849] bridge3: port 1(ip6gretap1) entered disabled state
[   74.415185][ T6851] netlink: 'syz.2.431': attribute type 3 has an invalid length.
[   74.417751][ T6849] ip6gretap1: entered allmulticast mode
[   74.423928][ T6849] ip6gretap1: entered promiscuous mode
[   74.468123][ T6849] veth3: entered promiscuous mode
[   74.473577][ T6849] bridge3: port 2(veth3) entered blocking state
[   74.476757][ T6849] bridge3: port 2(veth3) entered disabled state
[   74.480651][ T6849] veth3: entered allmulticast mode
[   74.639318][ T6855] nbd2: detected capacity change from 0 to 63
[   74.646412][ T6859] block nbd2: NBD_DISCONNECT
[   74.666949][ T6859] block nbd2: Disconnected due to user request.
[   74.671091][ T6859] block nbd2: shutting down sockets
[   74.683127][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.686519][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[   74.689305][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.692320][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[   74.695135][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.698276][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[   74.700957][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.704068][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[   74.717949][ T5819] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.722072][ T5819] Buffer I/O error on dev nbd2, logical block 0, async page read
[   74.725459][ T5819] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.734785][ T5819] Buffer I/O error on dev nbd2, logical block 1, async page read
[   74.747379][ T5819] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.751105][ T5819] Buffer I/O error on dev nbd2, logical block 2, async page read
[   74.769048][ T5819] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.772664][ T5819] Buffer I/O error on dev nbd2, logical block 3, async page read
[   74.775879][ T5819] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.782309][ T5819] Buffer I/O error on dev nbd2, logical block 0, async page read
[   74.785701][ T5819] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.790111][ T5819] Buffer I/O error on dev nbd2, logical block 1, async page read
[   74.795541][ T5819] ldm_validate_partition_table(): Disk read failed.
[   74.802279][ T5819] Dev nbd2: unable to read RDB block 0
[   74.806363][ T5819]  nbd2: unable to read partition table
[   74.824494][ T5819] ldm_validate_partition_table(): Disk read failed.
[   74.837777][ T5819] Dev nbd2: unable to read RDB block 0
[   74.847863][ T5819]  nbd2: unable to read partition table
[   74.852759][ T6873] sock: sock_timestamping_bind_phc: sock not bind to device
[   74.973059][ T6881] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   74.976287][ T6881] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   75.094901][ T6893] netlink: 'syz.1.450': attribute type 7 has an invalid length.
[   75.099601][ T6893] netlink: 'syz.1.450': attribute type 8 has an invalid length.
[   75.110525][ T6893] netlink: 'syz.1.450': attribute type 15 has an invalid length.
[   75.569185][ T6921] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   75.754286][ T6930] sctp: [Deprecated]: syz.0.466 (pid 6930) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.754286][ T6930] Use struct sctp_sack_info instead
[   75.848294][ T6936] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   76.119072][ T6947] __nla_validate_parse: 10 callbacks suppressed
[   76.119088][ T6947] netlink: 184 bytes leftover after parsing attributes in process `syz.1.474'.
[   76.295894][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'.
[   76.335826][ T6969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.483'.
[   76.423775][ T6974] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[   76.450844][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'.
[   76.953627][ T7025] ieee802154 phy0 wpan0: encryption failed: -22
[   77.000481][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[   77.004103][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'.
[   77.289399][ T7056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.492365][ T7073] netlink: 'syz.0.526': attribute type 2 has an invalid length.
[   77.523795][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'.
[   78.004393][ T7113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   78.073358][ T7119] pim6reg1: entered promiscuous mode
[   78.075364][ T7119] pim6reg1: entered allmulticast mode
[   78.162894][ T7124] batadv1: entered allmulticast mode
[   78.166475][ T7124] 8021q: adding VLAN 0 to HW filter on device batadv1
[   78.364329][ T7140] netlink: 'syz.1.552': attribute type 2 has an invalid length.
[   78.368720][ T7140] netlink: 164 bytes leftover after parsing attributes in process `syz.1.552'.
[   78.514448][ T7156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.559'.
[   78.598359][ T7161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'.
[   79.004266][ T7202] macvlan1: entered promiscuous mode
[   79.021974][ T7202] ipvlan0: entered promiscuous mode
[   79.033465][ T7202] ipvlan0: left promiscuous mode
[   79.785432][ T7202] macvlan1: left promiscuous mode
[   79.992596][ T7222] lo speed is unknown, defaulting to 1000
[   80.261792][ T7251] @: renamed from veth0_vlan (while UP)
[   80.303423][ T7255] tipc: Started in network mode
[   80.305651][ T7255] tipc: Node identity ce213f423f04, cluster identity 4711
[   80.321660][ T7255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.327458][ T7255] syzkaller0: entered promiscuous mode
[   80.336689][ T7255] syzkaller0: entered allmulticast mode
[   80.392904][ T7255] tipc: Resetting bearer <eth:syzkaller0>
[   80.422548][ T7254] tipc: Resetting bearer <eth:syzkaller0>
[   80.463478][ T7254] tipc: Disabling bearer <eth:syzkaller0>
[   80.545226][ T7269] lo speed is unknown, defaulting to 1000
[   80.806897][ T7290] validate_nla: 2 callbacks suppressed
[   80.806912][ T7290] netlink: 'syz.0.623': attribute type 9 has an invalid length.
[   80.817563][ T7290] netlink: 'syz.0.623': attribute type 7 has an invalid length.
[   80.831678][ T7290] netlink: 'syz.0.623': attribute type 8 has an invalid length.
[   80.994736][ T7296] xt_CT: No such helper "snmp"
[   81.353910][ T7327] TCP: TCP_TX_DELAY enabled
[   81.460698][    T9] cfg80211: failed to load regulatory.db
[   81.836258][ T7356] bridge_slave_0: left allmulticast mode
[   81.838865][ T7356] bridge_slave_0: left promiscuous mode
[   81.841538][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.852750][ T7356] bridge_slave_1: left allmulticast mode
[   81.855032][ T7356] bridge_slave_1: left promiscuous mode
[   81.859488][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.872495][ T7356] bond0: (slave bond_slave_0): Releasing backup interface
[   81.880537][ T7356] bond0: (slave bond_slave_1): Releasing backup interface
[   81.903903][ T7356] team0: Port device team_slave_0 removed
[   81.919290][ T7356] team0: Port device team_slave_1 removed
[   81.921884][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.929270][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.939526][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.942622][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.962375][ T5862] lo speed is unknown, defaulting to 1000
[   81.968968][ T7366] __nla_validate_parse: 6 callbacks suppressed
[   81.968978][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'.
[   82.035200][ T7368] team0: Mode changed to "broadcast"
[   82.039455][ T7356] vlan0: entered promiscuous mode
[   82.080527][ T7356] team0: Port device vlan0 added
[   82.282795][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'.
[   82.651812][ T7405] netlink: 'syz.0.673': attribute type 7 has an invalid length.
[   82.661560][ T7405] : entered promiscuous mode
[   82.773677][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'.
[   82.776982][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[   83.071220][ T7436] lo speed is unknown, defaulting to 1000
[   83.143062][ T7441] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[   83.664768][ T7468] ieee802154 phy0 wpan0: encryption failed: -22
[   84.508763][ T7514] netlink: 'syz.2.723': attribute type 6 has an invalid length.
[   84.512156][ T7514] netlink: 'syz.2.723': attribute type 7 has an invalid length.
[   84.515567][ T7514] netlink: 'syz.2.723': attribute type 8 has an invalid length.
[   84.828350][ T7526] vlan0: left promiscuous mode
[   85.064786][ T7539] lo speed is unknown, defaulting to 1000
[   85.079400][ T7539] lo speed is unknown, defaulting to 1000
[   85.082228][ T7539] lo speed is unknown, defaulting to 1000
[   85.086299][ T7539] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.097700][ T7539] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   85.124098][ T7539] lo speed is unknown, defaulting to 1000
[   85.127513][ T7539] lo speed is unknown, defaulting to 1000
[   85.130494][ T7539] lo speed is unknown, defaulting to 1000
[   85.380470][ T7565] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.744'.
[   85.426371][ T7567] lo speed is unknown, defaulting to 1000
[   85.540759][ T7567] lo speed is unknown, defaulting to 1000
[   85.675626][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[   85.712202][ T7567] netlink: 312 bytes leftover after parsing attributes in process `syz.0.745'.
[   85.962766][ T7587] netlink: 'syz.0.753': attribute type 5 has an invalid length.
[   86.010508][ T7591] netlink: 'syz.0.755': attribute type 2 has an invalid length.
[   86.126995][ T7597] netlink: 'syz.2.758': attribute type 1 has an invalid length.
[   86.130168][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'.
[   86.313173][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'.
[   86.322238][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'.
[   86.388395][ T7622] ieee802154 phy0 wpan0: encryption failed: -22
[   86.852709][ T7670] tipc: New replicast peer: 255.255.255.255
[   86.868406][ T7670] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.912151][ T7670] vxcan3: entered allmulticast mode
[   87.558107][ T7725] __nla_validate_parse: 1 callbacks suppressed
[   87.558117][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[   87.580804][ T7727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   87.912250][ T7751] lo speed is unknown, defaulting to 1000
[   87.987491][   T47] tipc: Node number set to 301734501
[   88.130240][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'.
[   88.597142][ T7771] syzkaller0: entered promiscuous mode
[   88.599584][ T7771] syzkaller0: entered allmulticast mode
[   88.603323][ T7751] lo speed is unknown, defaulting to 1000
[   89.602860][ T7788] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.759438][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.837'.
[   89.881668][ T7815] netlink: 'syz.1.838': attribute type 16 has an invalid length.
[   89.885001][ T7815] netlink: 'syz.1.838': attribute type 17 has an invalid length.
[   89.903738][ T7815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.964168][ T7817] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   89.971218][ T7817] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   90.063221][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'.
[   90.213354][ T7829] xt_connbytes: Forcing CT accounting to be enabled
[   90.215589][ T7829] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   90.222220][ T7829] xt_bpf: check failed: parse error
[   90.539284][ T7853] netlink: zone id is out of range
[   90.542072][ T7853] netlink: zone id is out of range
[   90.544743][ T7853] netlink: zone id is out of range
[   90.546729][ T7853] netlink: zone id is out of range
[   90.548916][ T7853] netlink: zone id is out of range
[   90.552369][ T7853] netlink: zone id is out of range
[   90.555234][ T7853] netlink: zone id is out of range
[   90.559400][ T7853] netlink: zone id is out of range
[   90.563072][ T7853] netlink: zone id is out of range
[   90.819410][ T7879] netlink: 'syz.2.872': attribute type 7 has an invalid length.
[   90.919613][ T7890] netlink: 'syz.0.875': attribute type 4 has an invalid length.
[   90.940509][ T5875] lo speed is unknown, defaulting to 1000
[   90.943050][ T5875] syz2: Port: 1 Link DOWN
[   90.951458][ T7890] netlink: 'syz.0.875': attribute type 4 has an invalid length.
[   90.958676][ T5875] lo speed is unknown, defaulting to 1000
[   90.961210][ T5875] syz2: Port: 1 Link ACTIVE
[   91.375763][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'.
[   91.393141][ T7931] lo speed is unknown, defaulting to 1000
[   91.613917][ T7931] lo speed is unknown, defaulting to 1000
[   91.705106][ T7954] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   91.823301][ T7964] Illegal XDP return value 4294967294 on prog  (id 135) dev N/A, expect packet loss!
[   91.875742][ T7968] xt_TCPMSS: Only works on TCP SYN packets
[   91.902258][ T7970] x_tables: duplicate entry at hook 1
[   92.161847][ T7996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.926'.
[   92.164947][ T7996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.926'.
[   92.184582][ T7996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.926'.
[   92.188968][ T7996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.926'.
[   92.192310][ T7996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.926'.
[   92.396525][ T8004] syzkaller0: entered promiscuous mode
[   92.415807][ T8004] syzkaller0: entered allmulticast mode
[   93.503843][ T8040] bridge_slave_0: left allmulticast mode
[   93.505646][ T8040] bridge_slave_0: left promiscuous mode
[   93.509737][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.513875][ T8040] bridge_slave_1: left allmulticast mode
[   93.515661][ T8040] bridge_slave_1: left promiscuous mode
[   93.518050][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.546407][ T8040] bond0: (slave bond_slave_0): Releasing backup interface
[   93.553742][ T8040] bond0: (slave bond_slave_1): Releasing backup interface
[   93.574383][ T8040] team0: Port device team_slave_0 removed
[   93.598889][ T8040] team0: Port device team_slave_1 removed
[   93.601467][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.604327][ T8040] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.614151][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.617286][ T8040] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.632057][ T8040] ip6gretap1: left allmulticast mode
[   93.633789][ T8040] ip6gretap1: left promiscuous mode
[   93.635522][ T8040] bridge3: port 1(ip6gretap1) entered disabled state
[   93.641203][ T8040] veth3: left allmulticast mode
[   93.642881][ T8040] bridge3: port 2(veth3) entered disabled state
[   93.674655][ T8049] team0: Mode changed to "broadcast"
[   93.723220][ T8040] vlan0: entered promiscuous mode
[   93.732043][ T8040] team0: Port device vlan0 added
[   93.884974][ T8067] lo speed is unknown, defaulting to 1000
[   94.021927][ T8067] lo speed is unknown, defaulting to 1000
[   94.051470][ T8083] veth0: entered promiscuous mode
[   94.054442][ T8083] __nla_validate_parse: 20 callbacks suppressed
[   94.054453][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'.
[   94.172958][ T8088] bridge_slave_0: left allmulticast mode
[   94.176088][ T8088] bridge_slave_0: left promiscuous mode
[   94.178361][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.183394][ T8088] bridge_slave_1: left allmulticast mode
[   94.188250][ T8088] bridge_slave_1: left promiscuous mode
[   94.190577][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.216177][ T8088] bond0: (slave bond_slave_0): Releasing backup interface
[   94.229042][ T8088] bond0: (slave bond_slave_1): Releasing backup interface
[   94.252334][ T8088] team0: Port device team_slave_0 removed
[   94.274431][ T8088] team0: Port device team_slave_1 removed
[   94.279909][ T8088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.282873][ T8088] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.295345][ T8088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.303323][ T8088] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.316893][ T8089] team0: Mode changed to "broadcast"
[   94.359832][ T8101] vlan0: entered promiscuous mode
[   94.422250][ T8101] team0: Port device vlan0 added
[   94.868072][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'.
[   94.922249][ T8148] netlink: 9 bytes leftover after parsing attributes in process `syz.0.993'.
[   94.929490][ T8148] gretap0: entered promiscuous mode
[   95.095378][ T8159] netlink: 'syz.0.999': attribute type 1 has an invalid length.
[   95.765771][ T8220] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1024'.
[   96.732007][ T8281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.737964][ T8281] syzkaller0: entered promiscuous mode
[   96.756702][ T8281] syzkaller0: entered allmulticast mode
[   96.778390][ T8281] tipc: Resetting bearer <eth:syzkaller0>
[   96.781617][ T8280] tipc: Resetting bearer <eth:syzkaller0>
[   96.795784][ T8280] tipc: Disabling bearer <eth:syzkaller0>
[   97.193508][ T8305] net_ratelimit: 7 callbacks suppressed
[   97.193519][ T8305] netlink: zone id is out of range
[   97.204384][ T8305] netlink: zone id is out of range
[   97.206184][ T8305] netlink: zone id is out of range
[   97.208260][ T8305] netlink: zone id is out of range
[   97.209954][ T8305] netlink: zone id is out of range
[   97.211777][ T8305] netlink: zone id is out of range
[   97.213439][ T8305] netlink: zone id is out of range
[   97.215208][ T8305] netlink: zone id is out of range
[   97.219406][ T8305] netlink: zone id is out of range
[   97.221681][ T8305] netlink: zone id is out of range
[   97.282099][ T8312] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.284997][ T8312] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.287856][ T8312] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.290682][ T8312] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.293447][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'.
[   97.300689][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[   97.304486][ T8314] netlink: 'syz.0.1068': attribute type 18 has an invalid length.
[   97.353400][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[   97.637079][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   97.886935][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   98.280926][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1099'.
[   98.333947][ T8385] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1100'.
[   98.783398][ T8427] netlink: 'syz.2.1120': attribute type 13 has an invalid length.
[   98.882663][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'.
[   98.968260][ T8449] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[   99.564552][ T8489] netlink: 'syz.1.1149': attribute type 4 has an invalid length.
[   99.591510][   T24] lo speed is unknown, defaulting to 1000
[   99.594787][   T24] syz0: Port: 1 Link DOWN
[   99.596392][ T8489] netlink: 'syz.1.1149': attribute type 4 has an invalid length.
[   99.603308][   T24] lo speed is unknown, defaulting to 1000
[   99.611072][   T24] lo speed is unknown, defaulting to 1000
[   99.616332][   T24] syz0: Port: 1 Link ACTIVE
[   99.629437][   T24] lo speed is unknown, defaulting to 1000
[   99.635899][ T5875] lo speed is unknown, defaulting to 1000
[   99.642421][ T5875] syz0: Port: 1 Link DOWN
[  100.047437][ T8514] lo speed is unknown, defaulting to 1000
[  100.116433][ T8518] __nla_validate_parse: 1 callbacks suppressed
[  100.116449][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'.
[  100.157785][ T8518] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1161'.
[  100.239095][ T8514] lo speed is unknown, defaulting to 1000
[  100.240127][ T8515] lo speed is unknown, defaulting to 1000
[  100.295123][ T8521] xt_CT: No such helper "syz1"
[  100.383616][ T8519] xt_CT: No such helper "snmp"
[  100.426280][ T8528] smc: net device bond0 erased user defined pnetid SYZ2
[  100.508355][ T8515] lo speed is unknown, defaulting to 1000
[  100.602338][ T5862] lo speed is unknown, defaulting to 1000
[  100.604764][ T5862] syz2: Port: 1 Link DOWN
[  100.748402][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'.
[  101.180411][ T8573] xt_l2tp: v2 sid > 0xffff: 4294901760
[  101.224334][ T8575] xt_hashlimit: size too large, truncated to 1048576
[  101.897951][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'.
[  102.097777][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1211'.
[  102.323593][ T8656] netlink: 'syz.0.1222': attribute type 1 has an invalid length.
[  102.329364][ T8656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1222'.
[  102.772467][ T8694] netdevsim netdevsim1: Direct firmware load for .
[  102.772467][ T8694]  failed with error -2
[  102.776429][ T8694] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  102.776429][ T8694] 
[  103.009124][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  103.081955][ T8702] trusted_key: syz.2.1243 sent an empty control message without MSG_MORE.
[  103.501566][ T8726] netlink: 'syz.0.1251': attribute type 1 has an invalid length.
[  103.541628][ T8726] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.546357][ T8726] bond2: (slave bond3): making interface the new active one
[  103.550178][ T8726] bond2: (slave bond3): Enslaving as an active interface with an up link
[  103.564979][ T8726] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  103.571034][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'.
[  103.576066][ T8726] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.690851][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'.
[  103.721571][ T8738] bridge_slave_0: default FDB implementation only supports local addresses
[  103.875835][ T8750] netlink: 'syz.0.1259': attribute type 10 has an invalid length.
[  103.889105][ T8750] team0: Port device dummy0 added
[  104.296314][ T8778] lo speed is unknown, defaulting to 1000
[  104.519568][ T8778] lo speed is unknown, defaulting to 1000
[  104.649161][ T8795] netlink: 'syz.1.1280': attribute type 11 has an invalid length.
[  104.974481][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1287'.
[  105.001643][ T8809] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  105.312305][ T8831] net_ratelimit: 8 callbacks suppressed
[  105.312319][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.437230][ T8837] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1300'.
[  105.514004][ T8843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1304'.
[  105.518293][ T8843] unsupported nlmsg_type 40
[  105.641293][ T8856] netlink: 'syz.2.1309': attribute type 1 has an invalid length.
[  105.644044][ T8856] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1309'.
[  105.708637][ T8862] netlink: 'syz.0.1308': attribute type 13 has an invalid length.
[  105.712393][ T8862] netlink: 'syz.0.1308': attribute type 17 has an invalid length.
[  105.734428][ T8862] gretap0: left promiscuous mode
[  105.754702][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'.
[  105.773252][ T8862] sit0: left promiscuous mode
[  105.812027][ T8862] 
[  105.813096][ T8862] ======================================================
[  105.815446][ T8862] WARNING: possible circular locking dependency detected
[  105.817761][ T8862] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  105.821486][ T8862] ------------------------------------------------------
[  105.824171][ T8862] syz.0.1308/8862 is trying to acquire lock:
[  105.826609][ T8862] ffff88803ab3ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[  105.830491][ T8862] 
[  105.830491][ T8862] but task is already holding lock:
[  105.833182][ T8862] ffff88810a61cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  105.837019][ T8862] 
[  105.837019][ T8862] which lock already depends on the new lock.
[  105.837019][ T8862] 
[  105.841260][ T8862] 
[  105.841260][ T8862] the existing dependency chain (in reverse order) is:
[  105.844614][ T8862] 
[  105.844614][ T8862] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  105.847399][ T8862]        lock_acquire+0x120/0x360
[  105.849139][ T8862]        __mutex_lock+0x182/0xe80
[  105.850788][ T8862]        dev_set_mtu+0x10e/0x260
[  105.852410][ T8862]        team_add_slave+0x8b8/0x2840
[  105.854184][ T8862]        do_set_master+0x533/0x6d0
[  105.855866][ T8862]        do_setlink+0xcf0/0x41c0
[  105.857510][ T8862]        rtnl_newlink+0x160b/0x1c70
[  105.859171][ T8862]        rtnetlink_rcv_msg+0x7cf/0xb70
[  105.861078][ T8862]        netlink_rcv_skb+0x208/0x470
[  105.863237][ T8862]        netlink_unicast+0x75b/0x8d0
[  105.864991][ T8862]        netlink_sendmsg+0x805/0xb30
[  105.866668][ T8862]        __sock_sendmsg+0x21c/0x270
[  105.868402][ T8862]        ____sys_sendmsg+0x505/0x830
[  105.870183][ T8862]        ___sys_sendmsg+0x21f/0x2a0
[  105.871941][ T8862]        __x64_sys_sendmsg+0x19b/0x260
[  105.873729][ T8862]        do_syscall_64+0xfa/0x3b0
[  105.875402][ T8862]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.877425][ T8862] 
[  105.877425][ T8862] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[  105.880105][ T8862]        validate_chain+0xb9b/0x2140
[  105.882221][ T8862]        __lock_acquire+0xab9/0xd20
[  105.884070][ T8862]        lock_acquire+0x120/0x360
[  105.885911][ T8862]        __mutex_lock+0x182/0xe80
[  105.887685][ T8862]        team_device_event+0x544/0xa20
[  105.889413][ T8862]        notifier_call_chain+0x1b6/0x3e0
[  105.891233][ T8862]        __dev_notify_flags+0x21b/0x2e0
[  105.892967][ T8862]        netif_change_flags+0xe8/0x1a0
[  105.894640][ T8862]        do_setlink+0xc55/0x41c0
[  105.896289][ T8862]        rtnl_newlink+0x149f/0x1c70
[  105.897972][ T8862]        rtnetlink_rcv_msg+0x7cf/0xb70
[  105.899713][ T8862]        netlink_rcv_skb+0x208/0x470
[  105.901735][ T8862]        netlink_unicast+0x75b/0x8d0
[  105.903695][ T8862]        netlink_sendmsg+0x805/0xb30
[  105.905438][ T8862]        __sock_sendmsg+0x21c/0x270
[  105.907178][ T8862]        ____sys_sendmsg+0x505/0x830
[  105.908925][ T8862]        ___sys_sendmsg+0x21f/0x2a0
[  105.910653][ T8862]        __x64_sys_sendmsg+0x19b/0x260
[  105.912386][ T8862]        do_syscall_64+0xfa/0x3b0
[  105.914047][ T8862]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.916143][ T8862] 
[  105.916143][ T8862] other info that might help us debug this:
[  105.916143][ T8862] 
[  105.919327][ T8862]  Possible unsafe locking scenario:
[  105.919327][ T8862] 
[  105.921799][ T8862]        CPU0                    CPU1
[  105.923598][ T8862]        ----                    ----
[  105.925358][ T8862]   lock(&dev_instance_lock_key#3);
[  105.927343][ T8862]                                lock(team->team_lock_key#2);
[  105.930434][ T8862]                                lock(&dev_instance_lock_key#3);
[  105.933632][ T8862]   lock(team->team_lock_key#2);
[  105.935756][ T8862] 
[  105.935756][ T8862]  *** DEADLOCK ***
[  105.935756][ T8862] 
[  105.939106][ T8862] 2 locks held by syz.0.1308/8862:
[  105.941199][ T8862]  #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  105.945059][ T8862]  #1: ffff88810a61cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  105.949229][ T8862] 
[  105.949229][ T8862] stack backtrace:
[  105.951671][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz.0.1308 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  105.951688][ T8862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.951696][ T8862] Call Trace:
[  105.951702][ T8862]  <TASK>
[  105.951709][ T8862]  dump_stack_lvl+0x189/0x250
[  105.951732][ T8862]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.951750][ T8862]  ? __pfx__printk+0x10/0x10
[  105.951763][ T8862]  ? print_lock_name+0xde/0x100
[  105.951775][ T8862]  print_circular_bug+0x2ee/0x310
[  105.951789][ T8862]  check_noncircular+0x134/0x160
[  105.951802][ T8862]  validate_chain+0xb9b/0x2140
[  105.951820][ T8862]  __lock_acquire+0xab9/0xd20
[  105.951838][ T8862]  ? team_device_event+0x544/0xa20
[  105.951851][ T8862]  lock_acquire+0x120/0x360
[  105.951866][ T8862]  ? team_device_event+0x544/0xa20
[  105.951883][ T8862]  __mutex_lock+0x182/0xe80
[  105.951927][ T8862]  ? team_device_event+0x544/0xa20
[  105.951942][ T8862]  ? __lock_acquire+0xab9/0xd20
[  105.951957][ T8862]  ? team_device_event+0x544/0xa20
[  105.951970][ T8862]  ? fib_rebalance+0x8e/0x9a0
[  105.951983][ T8862]  ? __pfx___mutex_lock+0x10/0x10
[  105.952007][ T8862]  ? fib_sync_up+0x76d/0x7b0
[  105.952023][ T8862]  team_device_event+0x544/0xa20
[  105.952038][ T8862]  notifier_call_chain+0x1b6/0x3e0
[  105.952058][ T8862]  __dev_notify_flags+0x21b/0x2e0
[  105.952072][ T8862]  ? __pfx___dev_notify_flags+0x10/0x10
[  105.952084][ T8862]  ? __dev_change_flags+0x4cc/0x6d0
[  105.952099][ T8862]  ? netif_state_change+0x29e/0x3a0
[  105.952113][ T8862]  netif_change_flags+0xe8/0x1a0
[  105.952128][ T8862]  do_setlink+0xc55/0x41c0
[  105.952145][ T8862]  ? __pfx_do_setlink+0x10/0x10
[  105.952158][ T8862]  ? _printk+0xcf/0x120
[  105.952169][ T8862]  ? __pfx____ratelimit+0x10/0x10
[  105.952189][ T8862]  ? __lock_acquire+0xab9/0xd20
[  105.952207][ T8862]  ? __mutex_trylock_common+0x153/0x260
[  105.952219][ T8862]  ? __pfx___mutex_trylock_common+0x10/0x10
[  105.952232][ T8862]  ? rcu_is_watching+0x15/0xb0
[  105.952250][ T8862]  ? trace_contention_end+0x39/0x120
[  105.952261][ T8862]  ? __mutex_lock+0x330/0xe80
[  105.952278][ T8862]  ? __pfx_aa_get_newest_label+0x10/0x10
[  105.952294][ T8862]  ? rtnl_newlink+0x8db/0x1c70
[  105.952305][ T8862]  ? rcu_is_watching+0x15/0xb0
[  105.952322][ T8862]  ? __pfx___mutex_lock+0x10/0x10
[  105.952342][ T8862]  ? ns_capable+0x8a/0xf0
[  105.952359][ T8862]  ? rtnl_link_get_net_capable+0x16a/0x350
[  105.952373][ T8862]  rtnl_newlink+0x149f/0x1c70
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  105.952384][ T8862]  ? netlink_sendmsg+0x805/0xb30
[  105.952400][ T8862]  ? __pfx_rtnl_newlink+0x10/0x10
[  105.952418][ T8862]  ? kasan_quarantine_put+0xdd/0x220
[  105.952435][ T8862]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.952453][ T8862]  ? nlmon_xmit+0xb0/0x100
[  105.952469][ T8862]  ? kmem_cache_free+0x18f/0x400
[  105.952483][ T8862]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.952501][ T8862]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.952517][ T8862]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.952533][ T8862]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  105.952551][ T8862]  ? __dev_queue_xmit+0x27e/0x3a70
[  105.952570][ T8862]  ? __lock_acquire+0xab9/0xd20
[  105.952592][ T8862]  ? __pfx_rtnl_newlink+0x10/0x10
[  105.952603][ T8862]  rtnetlink_rcv_msg+0x7cf/0xb70
[  105.952615][ T8862]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  105.952626][ T8862]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  105.952636][ T8862]  ? ref_tracker_free+0x63a/0x7d0
[  105.952650][ T8862]  ? __copy_skb_header+0xa7/0x550
[  105.952665][ T8862]  ? __pfx_ref_tracker_free+0x10/0x10
[  105.952683][ T8862]  netlink_rcv_skb+0x208/0x470
[  105.952696][ T8862]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  105.952707][ T8862]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.952724][ T8862]  ? netlink_deliver_tap+0x2e/0x1b0
[  105.952735][ T8862]  ? netlink_deliver_tap+0x2e/0x1b0
[  105.952749][ T8862]  netlink_unicast+0x75b/0x8d0
[  105.952763][ T8862]  netlink_sendmsg+0x805/0xb30
[  105.952779][ T8862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.952793][ T8862]  ? aa_sock_msg_perm+0x94/0x160
[  105.952808][ T8862]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  105.952823][ T8862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.952836][ T8862]  __sock_sendmsg+0x21c/0x270
[  105.952855][ T8862]  ____sys_sendmsg+0x505/0x830
[  105.952870][ T8862]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.952886][ T8862]  ? import_iovec+0x74/0xa0
[  105.952924][ T8862]  ___sys_sendmsg+0x21f/0x2a0
[  105.952938][ T8862]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.952963][ T8862]  ? __fget_files+0x2a/0x420
[  105.952975][ T8862]  ? __fget_files+0x3a0/0x420
[  105.952990][ T8862]  __x64_sys_sendmsg+0x19b/0x260
[  105.953010][ T8862]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.953030][ T8862]  ? do_syscall_64+0xbe/0x3b0
[  105.953040][ T8862]  do_syscall_64+0xfa/0x3b0
[  105.953050][ T8862]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.953066][ T8862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.953078][ T8862]  ? exc_page_fault+0x9f/0xf0
[  105.953092][ T8862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.953102][ T8862] RIP: 0033:0x7f076eb8e929
[  105.953115][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.953125][ T8862] RSP: 002b:00007f076fa59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.953138][ T8862] RAX: ffffffffffffffda RBX: 00007f076edb6080 RCX: 00007f076eb8e929
[  105.953146][ T8862] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008
[  105.953154][ T8862] RBP: 00007f076ec10b39 R08: 0000000000000000 R09: 0000000000000000
[  105.953161][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.953167][ T8862] R13: 0000000000000000 R14: 00007f076edb6080 R15: 00007ffcfc936138
[  105.953181][ T8862]  </TASK>
[  105.956354][ T8874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.969673][ T8862] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  106.161870][ T8862] caif:caif_disconnect_client(): nothing to disconnect
[  106.164496][ T8862] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  106.167505][ T8862] chnl_net:chnl_net_open(): state disconnected
[  106.169614][ T8862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.175085][ T5862] lo speed is unknown, defaulting to 1000
[  106.179797][ T5862] syz2: Port: 1 Link ACTIVE
[  106.181713][ T8873] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1313'.
[  106.188711][ T8853] lo speed is unknown, defaulting to 1000
[  106.239229][ T8853] lo speed is unknown, defaulting to 1000
[  106.521546][ T5840] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.524812][ T5840] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  106.582157][ T5840] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.586485][ T5840] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  106.643821][ T5840] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.648367][ T5840] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  106.679288][ T5840] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.683493][ T5840] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  106.982558][ T5840] bond0 (unregistering): Released all slaves
[  106.986350][ T5840] bond1 (unregistering): Released all slaves
[  106.990609][ T5840] bond2 (unregistering): Released all slaves
[  107.048809][ T5840] tipc: Left network mode
[  107.058764][ T5840] IPVS: stopping backup sync thread 7954 ...
[  107.283436][ T5840] hsr_slave_0: left promiscuous mode
[  107.286072][ T5840] hsr_slave_1: left promiscuous mode
[  107.366793][ T5840] team0 (unregistering): Port device vlan0 removed
[  108.005600][ T5840] IPVS: stop unused estimator thread 0...
[  108.772451][ T5840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.831725][ T5840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.891047][ T5840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.961326][ T5840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.131679][ T5840] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  109.494487][ T5840] bond0 (unregistering): Released all slaves
[  109.500706][ T5840] bond1 (unregistering): Released all slaves
[  109.509434][ T5840] bond2 (unregistering): (slave bond3): Releasing backup interface
[  109.513153][ T5840] bond2 (unregistering): Released all slaves
[  109.580622][ T5840] bond3 (unregistering): Released all slaves
[  109.634126][ T5840] : left promiscuous mode
[  109.670446][ T5840] tipc: Disabling bearer <udp:syz2>
[  109.673046][ T5840] tipc: Left network mode
[  109.875961][ T5840] hsr_slave_0: left promiscuous mode
[  109.878973][ T5840] hsr_slave_1: left promiscuous mode
[  109.883663][ T5840] veth1_macvtap: left promiscuous mode
[  109.886068][ T5840] veth0_macvtap: left promiscuous mode
[  109.888004][ T5840] veth1_vlan: left promiscuous mode
[  109.958206][ T5840] team0 (unregistering): Port device vlan0 removed
[  110.106290][ T5840] team0 (unregistering): Port device dummy0 removed
[  110.180775][   T24] lo speed is unknown, defaulting to 1000
[  110.183594][   T24] infiniband syz2: ib_query_port failed (-19)
[  113.406952][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!

VM DIAGNOSIS:
02:08:54  Registers:
info registers vcpu 0

CPU#0
RAX=777875aa23fd4700 RBX=ffffffff81974d58 RCX=777875aa23fd4700 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c354a3c CR3=000000003f57a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fa3aca11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc90009095f10
R8 =ffff88801f6e0237 R9 =1ffff11003edc046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fc R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f076fa596c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003700 CR3=000000003d384000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff00ff XMM03=ffffffffffffff00 ffffffffffff00ff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa78f611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
