last executing test programs:

530.510521ms ago: executing program 1 (id=2851):
socket$key(0xf, 0x3, 0x2)
close(0x3)

530.367377ms ago: executing program 1 (id=2853):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)

470.081162ms ago: executing program 1 (id=2857):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4004)

420.705743ms ago: executing program 1 (id=2860):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0)

420.427445ms ago: executing program 1 (id=2863):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
connect$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)

291.327587ms ago: executing program 1 (id=2866):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

217.352268ms ago: executing program 2 (id=2872):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="07005aa3d49100dc6626d892b6ad436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendto$inet6(r1, &(0x7f00000002c0)="3263aae6301144f256cec58e1a61bec19d27e647c598560474ab9e3137e13040453a80754380c3b6de6c91f0e582dd61cddea3be9da59c18f07b3f1c805414b97b40f4fd2ae37c23d086419053ebfdd90f3a4f30ad7fd50740ed21fecf8a318f10aff22b84e409bdc39188c8c9ac04e01bc51d5cd8bb9693a89e853a7b144435a9323339630e51eaace70a4a212c76c37152860fae2e2c858c2177896e3c663cfd3d52c23226d11597907f319d3bc2d7cd70826ed03e271faed60838a5c1666c827d0daba35aad55f5691d75db0b0e602ff766bcaff1ffcd54", 0x10a, 0x840, 0x0, 0x0)

216.4056ms ago: executing program 2 (id=2874):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0x5, "0000000000000000000500"}}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x60}}, 0x0)

151.543962ms ago: executing program 0 (id=2875):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

151.366325ms ago: executing program 2 (id=2876):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/214, 0xd6}, 0xa}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x101}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

71.558378ms ago: executing program 0 (id=2877):
syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0xfffc, {[@fastopen={0x22, 0x8, "e72d650a8418"}]}}}}}}}}, 0x0)

71.269217ms ago: executing program 0 (id=2878):
unshare(0x4000400)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000004a800000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138)

71.175178ms ago: executing program 2 (id=2879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)

70.167666ms ago: executing program 0 (id=2880):
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0)

407.821µs ago: executing program 2 (id=2881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)

255.038µs ago: executing program 0 (id=2882):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x10)
close(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0xd75)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r3, &(0x7f0000000200)}, 0x20)

76.404µs ago: executing program 2 (id=2883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805f", @ANYRES16=r1, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf250100"], 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r5, 0x8b2c, &(0x7f0000000040))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCSPGRP(r6, 0x8902, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

0s ago: executing program 0 (id=2884):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000980)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a001000010008", 0x4d}, {&(0x7f00000004c0)="b55e75491092ed466fa64b", 0xb}], 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9405' (ED25519) to the list of known hosts.
syzkaller login: [   41.100878][ T5791] cgroup: Unknown subsys name 'net'
[   41.247317][ T5791] cgroup: Unknown subsys name 'cpuset'
[   41.250722][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.505221][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.594774][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.597698][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.604972][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.607658][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.610201][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.634395][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.637513][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.640182][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.646402][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.649232][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.673449][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.676545][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.679203][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.682507][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.685603][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.785463][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   45.874703][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.877677][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.879955][ T5825] bridge_slave_0: entered allmulticast mode
[   45.882835][ T5825] bridge_slave_0: entered promiscuous mode
[   45.894166][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.897032][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.899219][ T5825] bridge_slave_1: entered allmulticast mode
[   45.901782][ T5825] bridge_slave_1: entered promiscuous mode
[   45.932334][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   45.939022][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.945230][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.993893][ T5825] team0: Port device team_slave_0 added
[   46.003295][ T5825] team0: Port device team_slave_1 added
[   46.028405][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.030718][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.039273][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.056879][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   46.061681][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.063994][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.072520][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.089559][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.091908][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.094367][ T5829] bridge_slave_0: entered allmulticast mode
[   46.098344][ T5829] bridge_slave_0: entered promiscuous mode
[   46.104976][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.107590][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.110046][ T5829] bridge_slave_1: entered allmulticast mode
[   46.112940][ T5829] bridge_slave_1: entered promiscuous mode
[   46.157105][ T5825] hsr_slave_0: entered promiscuous mode
[   46.159489][ T5825] hsr_slave_1: entered promiscuous mode
[   46.170429][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.182517][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.196380][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.198698][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.201009][ T5834] bridge_slave_0: entered allmulticast mode
[   46.203676][ T5834] bridge_slave_0: entered promiscuous mode
[   46.225982][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.228359][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.230915][ T5834] bridge_slave_1: entered allmulticast mode
[   46.233605][ T5834] bridge_slave_1: entered promiscuous mode
[   46.238932][ T5829] team0: Port device team_slave_0 added
[   46.252164][ T5829] team0: Port device team_slave_1 added
[   46.287545][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.293829][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.296802][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.306334][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.311673][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.314992][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.317416][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.326795][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.362954][ T5834] team0: Port device team_slave_0 added
[   46.379680][ T5834] team0: Port device team_slave_1 added
[   46.415904][ T5829] hsr_slave_0: entered promiscuous mode
[   46.418109][ T5829] hsr_slave_1: entered promiscuous mode
[   46.420119][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.422678][ T5829] Cannot create hsr debugfs directory
[   46.426482][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.428735][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.438882][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.452621][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.454814][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.463259][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.522705][ T5834] hsr_slave_0: entered promiscuous mode
[   46.525456][ T5834] hsr_slave_1: entered promiscuous mode
[   46.527591][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.530038][ T5834] Cannot create hsr debugfs directory
[   46.540086][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.553193][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.568976][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.577225][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.662914][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.665436][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.668173][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.670439][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.689352][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.701148][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.705741][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.710206][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.751620][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.759018][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.761312][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.764042][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.766387][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.772562][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.777704][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.784254][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.791112][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.794038][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.801118][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.803658][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.817622][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.842842][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   46.869613][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.872014][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.875398][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.877746][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.918368][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.932364][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.944703][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   46.957398][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.959623][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.966751][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   46.976887][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.979119][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.983236][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.985655][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.989928][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.992431][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.012592][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.017924][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.059257][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.098151][ T5825] veth0_vlan: entered promiscuous mode
[   47.103955][ T5825] veth1_vlan: entered promiscuous mode
[   47.122958][ T5825] veth0_macvtap: entered promiscuous mode
[   47.131501][ T5825] veth1_macvtap: entered promiscuous mode
[   47.143286][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.151284][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.163297][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.166885][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.169674][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.172385][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.183305][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.226432][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.232903][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.237306][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.263257][ T5834] veth0_vlan: entered promiscuous mode
[   47.269498][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.272608][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.280117][ T5834] veth1_vlan: entered promiscuous mode
[   47.288895][ T5829] veth0_vlan: entered promiscuous mode
[   47.298670][ T5829] veth1_vlan: entered promiscuous mode
[   47.311182][ T5834] veth0_macvtap: entered promiscuous mode
[   47.321825][ T5834] veth1_macvtap: entered promiscuous mode
[   47.323320][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.327586][ T5829] veth0_macvtap: entered promiscuous mode
[   47.334200][ T5829] veth1_macvtap: entered promiscuous mode
[   47.342376][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.352361][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.361483][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.366841][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.369709][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.372454][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.376365][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.386680][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.390369][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.393080][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.400158][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.404433][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.480731][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.483168][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.508621][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.511190][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.551577][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.555354][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.560518][ T5898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6'.
[   47.563434][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.566762][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.644242][ T5900] syzkaller1: entered promiscuous mode
[   47.653648][ T5900] syzkaller1: entered allmulticast mode
[   47.666646][ T5219] Bluetooth: hci1: command tx timeout
[   47.666651][ T5826] Bluetooth: hci0: command tx timeout
[   47.733449][ T5910] bond1: entered promiscuous mode
[   47.735190][ T5910] bond1: entered allmulticast mode
[   47.737010][ T5910] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.745782][ T5219] Bluetooth: hci2: command tx timeout
[   47.778507][ T5913] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   47.836387][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'.
[   47.841020][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   47.843859][ T5918] bridge_slave_1: left allmulticast mode
[   47.847550][ T5918] bridge_slave_1: left promiscuous mode
[   47.849544][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.856646][ T5918] bridge_slave_0: left allmulticast mode
[   47.858551][ T5918] bridge_slave_0: left promiscuous mode
[   47.860399][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.971815][ T5924] Zero length message leads to an empty skb
[   48.045209][ T5924] nbd2: detected capacity change from 0 to 127
[   48.047821][ T5926] block nbd2: NBD_DISCONNECT
[   48.050638][ T5926] block nbd2: Disconnected due to user request.
[   48.053207][ T5926] block nbd2: shutting down sockets
[   48.057674][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.060591][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[   48.063186][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.066139][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[   48.068705][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.071648][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[   48.074313][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.077306][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[   48.083928][ T5828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.087942][ T5828] Buffer I/O error on dev nbd2, logical block 0, async page read
[   48.090632][ T5828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.093590][ T5828] Buffer I/O error on dev nbd2, logical block 1, async page read
[   48.096625][ T5828] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.099490][ T5828] Buffer I/O error on dev nbd2, logical block 2, async page read
[   48.101952][ T5828] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.104747][ T5828] Buffer I/O error on dev nbd2, logical block 3, async page read
[   48.108236][ T5828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.111240][ T5828] Buffer I/O error on dev nbd2, logical block 0, async page read
[   48.113808][ T5828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.117229][ T5828] Buffer I/O error on dev nbd2, logical block 1, async page read
[   48.120787][ T5828] ldm_validate_partition_table(): Disk read failed.
[   48.123705][ T5828] Dev nbd2: unable to read RDB block 0
[   48.127315][ T5828]  nbd2: unable to read partition table
[   48.132785][ T5828] ldm_validate_partition_table(): Disk read failed.
[   48.136429][ T5828] Dev nbd2: unable to read RDB block 0
[   48.139171][ T5828]  nbd2: unable to read partition table
[   49.002592][ T5934] delete_channel: no stack
[   49.127489][ T5946] netlink: 256 bytes leftover after parsing attributes in process `syz.2.25'.
[   49.189543][ T5950] Bluetooth: MGMT ver 1.23
[   49.251560][ T5952] netlink: 'syz.2.28': attribute type 33 has an invalid length.
[   49.254148][ T5952] netlink: 152 bytes leftover after parsing attributes in process `syz.2.28'.
[   49.440706][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   49.449694][ T5969] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   49.457557][ T5969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   49.675256][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'.
[   49.700010][ T5986] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET)
[   49.745116][ T5219] Bluetooth: hci0: command tx timeout
[   49.746994][ T5219] Bluetooth: hci1: command tx timeout
[   49.834961][ T5826] Bluetooth: hci2: command tx timeout
[   50.001174][ T5997] netlink: 92 bytes leftover after parsing attributes in process `syz.1.45'.
[   50.066960][ T6003] netlink: 300 bytes leftover after parsing attributes in process `syz.1.48'.
[   50.114700][ T6007] x_tables: duplicate underflow at hook 1
[   50.313389][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.083132][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'.
[   51.359272][ T6048] netlink: 'syz.1.66': attribute type 10 has an invalid length.
[   51.370441][ T6048] team0: Port device geneve0 added
[   51.384079][ T6048] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   51.398890][ T6048] syz.1.66 (6048) used greatest stack depth: 19744 bytes left
[   51.441681][ T6050] netlink: 'syz.1.67': attribute type 8 has an invalid length.
[   51.718901][ T6070] bridge0: port 3(erspan0) entered blocking state
[   51.721330][ T6070] bridge0: port 3(erspan0) entered disabled state
[   51.723832][ T6070] erspan0: entered allmulticast mode
[   51.729639][ T6070] erspan0: entered promiscuous mode
[   51.732337][ T6070] bridge0: port 3(erspan0) entered blocking state
[   51.734525][ T6070] bridge0: port 3(erspan0) entered forwarding state
[   51.739877][ T6070] erspan0: left allmulticast mode
[   51.741499][ T6070] erspan0: left promiscuous mode
[   51.743616][ T6070] bridge0: port 3(erspan0) entered disabled state
[   51.751865][ T6070] warning: `syz.1.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.825709][ T5826] Bluetooth: hci1: command tx timeout
[   51.827678][ T5826] Bluetooth: hci0: command tx timeout
[   51.906743][ T5219] Bluetooth: hci2: command tx timeout
[   51.929321][ T6082] netlink: 'syz.1.83': attribute type 21 has an invalid length.
[   51.931812][ T6082] netlink: 'syz.1.83': attribute type 4 has an invalid length.
[   52.031441][ T6090] GUP no longer grows the stack in syz.0.87 (6090): 200000006000-20000000a000 (200000005000)
[   52.035960][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.0.87 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   52.035971][ T6090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   52.035976][ T6090] Call Trace:
[   52.035979][ T6090]  <TASK>
[   52.035983][ T6090]  dump_stack_lvl+0x189/0x250
[   52.035997][ T6090]  ? __pfx_dump_stack_lvl+0x10/0x10
[   52.036006][ T6090]  ? __pfx__printk+0x10/0x10
[   52.036036][ T6090]  ? find_vma+0xe7/0x160
[   52.036051][ T6090]  __get_user_pages+0x2a60/0x30b0
[   52.036075][ T6090]  ? __pfx___get_user_pages+0x10/0x10
[   52.036084][ T6090]  ? __gup_longterm_locked+0xbf7/0x15b0
[   52.036093][ T6090]  ? down_read_killable+0x1d1/0x350
[   52.036101][ T6090]  ? try_get_folio+0x633/0x660
[   52.036110][ T6090]  __gup_longterm_locked+0xd66/0x15b0
[   52.036120][ T6090]  ? try_grab_folio_fast+0x1be/0x4f0
[   52.036132][ T6090]  ? gup_fast_fallback+0x1afc/0x2260
[   52.036141][ T6090]  gup_fast_fallback+0x1cd4/0x2260
[   52.036163][ T6090]  ? __pfx_gup_fast_fallback+0x10/0x10
[   52.036170][ T6090]  ? trace_contention_end+0x39/0x120
[   52.036180][ T6090]  ? __mutex_lock+0x330/0xe80
[   52.036186][ T6090]  ? update_curr_dl_se+0x107/0xa20
[   52.036195][ T6090]  ? is_valid_gup_args+0x11f/0x200
[   52.036204][ T6090]  ? get_user_pages_fast+0x4d/0xb0
[   52.036213][ T6090]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   52.036226][ T6090]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   52.036235][ T6090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   52.036244][ T6090]  ? wait_for_space+0x24d/0x2d0
[   52.036254][ T6090]  iov_iter_get_pages2+0x5e/0xa0
[   52.036264][ T6090]  __se_sys_vmsplice+0x548/0x10d0
[   52.036280][ T6090]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   52.036290][ T6090]  ? __lock_acquire+0xab9/0xd20
[   52.036297][ T6090]  ? __pfx_futex_wake+0x10/0x10
[   52.036308][ T6090]  ? __lock_acquire+0xab9/0xd20
[   52.036328][ T6090]  ? do_pipe2+0xf7/0x170
[   52.036339][ T6090]  ? rcu_is_watching+0x15/0xb0
[   52.036350][ T6090]  ? do_syscall_64+0xbe/0x3b0
[   52.036359][ T6090]  do_syscall_64+0xfa/0x3b0
[   52.036365][ T6090]  ? lockdep_hardirqs_on+0x9c/0x150
[   52.036371][ T6090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.036379][ T6090]  ? exc_page_fault+0x9f/0xf0
[   52.036390][ T6090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.036397][ T6090] RIP: 0033:0x7f219af8e929
[   52.036404][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.036410][ T6090] RSP: 002b:00007f219be40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   52.036419][ T6090] RAX: ffffffffffffffda RBX: 00007f219b1b5fa0 RCX: 00007f219af8e929
[   52.036424][ T6090] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   52.036428][ T6090] RBP: 00007f219b010b39 R08: 0000000000000000 R09: 0000000000000000
[   52.036433][ T6090] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   52.036437][ T6090] R13: 0000000000000000 R14: 00007f219b1b5fa0 R15: 00007ffd5e21b918
[   52.036448][ T6090]  </TASK>
[   52.042876][ T6093] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   52.310645][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.313950][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.468857][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.479506][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.560366][ T6114] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.563186][ T6114] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.575356][ T6114] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.578310][ T6114] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.602962][ T6139] __nla_validate_parse: 11 callbacks suppressed
[   52.602971][ T6139] netlink: 260 bytes leftover after parsing attributes in process `syz.0.107'.
[   52.613161][ T6139] netlink: 260 bytes leftover after parsing attributes in process `syz.0.107'.
[   52.879628][ T6169] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   52.882488][ T6169] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   52.885323][ T6169] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   52.887961][ T6169] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   52.968192][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.977142][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.021209][ T6165] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.024084][ T6165] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.028909][ T6165] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.031794][ T6165] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.102907][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'.
[   53.132069][ T6180] netlink: 'syz.0.128': attribute type 9 has an invalid length.
[   53.550232][ T6208] netlink: 'syz.1.142': attribute type 1 has an invalid length.
[   53.684226][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'.
[   53.904950][ T5219] Bluetooth: hci0: command tx timeout
[   53.906732][ T5219] Bluetooth: hci1: command tx timeout
[   53.927647][ T6239] netlink: 'syz.1.152': attribute type 16 has an invalid length.
[   53.930226][ T6239] netlink: 'syz.1.152': attribute type 17 has an invalid length.
[   53.942787][ T6239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   53.987946][ T5826] Bluetooth: hci2: command tx timeout
[   54.098048][ T6260] macsec1: entered allmulticast mode
[   54.099758][ T6260] macsec0: entered allmulticast mode
[   54.103556][ T6262] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   54.200385][ T6268] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   54.351931][ T6276] netlink: 165 bytes leftover after parsing attributes in process `syz.2.169'.
[   54.477800][ T6284] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   54.523813][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[   54.903536][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.182'.
[   54.986592][ T6313] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   55.066951][ T6321] netlink: 180 bytes leftover after parsing attributes in process `syz.1.190'.
[   55.201737][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'.
[   55.222895][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[   55.364048][ T5295] IPVS: starting estimator thread 0...
[   55.369820][ T6336] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   55.467209][ T6340] IPVS: using max 80 ests per chain, 192000 per kthread
[   55.793273][ T6388] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.840512][ T6394] xt_CT: You must specify a L4 protocol and not use inversions on it
[   56.705192][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[   57.847566][ T6552] netlink: 'syz.0.294': attribute type 10 has an invalid length.
[   57.858244][ T6552] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.012187][ T6564] netlink: 'syz.2.299': attribute type 4 has an invalid length.
[   58.211022][ T6579] __nla_validate_parse: 12 callbacks suppressed
[   58.211032][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'.
[   58.433284][ T6591] netlink: 196 bytes leftover after parsing attributes in process `syz.1.310'.
[   58.439568][ T6591] tc_dump_action: action bad kind
[   58.657059][ T6602] tipc: Started in network mode
[   58.658665][ T6602] tipc: Node identity ae9f90ad8772, cluster identity 4711
[   58.661009][ T6602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.663990][ T6602] syzkaller0: entered promiscuous mode
[   58.665858][ T6602] syzkaller0: entered allmulticast mode
[   58.681550][ T6602] tipc: Resetting bearer <eth:syzkaller0>
[   58.685763][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[   58.693792][ T6601] tipc: Disabling bearer <eth:syzkaller0>
[   59.394642][ T6667] sctp: [Deprecated]: syz.1.343 (pid 6667) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.394642][ T6667] Use struct sctp_sack_info instead
[   59.649110][ T6693] tipc: Invalid UDP bearer configuration
[   59.649135][ T6693] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   59.900005][ T6720] Illegal XDP return value 4294967294 on prog  (id 64) dev N/A, expect packet loss!
[   59.939465][ T6726] netlink: 'syz.2.374': attribute type 12 has an invalid length.
[   59.941866][ T6726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.374'.
[   59.947845][ T6728] netlink: 'syz.0.373': attribute type 27 has an invalid length.
[   60.108681][ T6743] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   60.111507][ T5295] IPVS: starting estimator thread 0...
[   60.152701][ T6755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.386'.
[   60.157733][ T6755] openvswitch: netlink: Flow actions attr not present in new flow.
[   60.163014][ T5295] IPVS: starting estimator thread 0...
[   60.205929][ T6749] IPVS: using max 81 ests per chain, 194400 per kthread
[   60.265311][ T6758] IPVS: using max 80 ests per chain, 192000 per kthread
[   60.327255][ T6772] netlink: 'syz.2.389': attribute type 16 has an invalid length.
[   60.329722][ T6772] netlink: 'syz.2.389': attribute type 17 has an invalid length.
[   60.367453][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.371688][ T6772] 8021q: adding VLAN 0 to HW filter on device team0
[   60.379562][ T6772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.417582][ T6776] netlink: 'syz.1.395': attribute type 1 has an invalid length.
[   60.420078][ T6776] netlink: 144 bytes leftover after parsing attributes in process `syz.1.395'.
[   60.423867][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'.
[   61.041138][ T6814] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   61.367033][ T6853] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   61.513883][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'.
[   61.517257][ T6869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.438'.
[   61.520230][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'.
[   61.527649][ T6869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.438'.
[   61.680376][ T6892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.697630][ T6892] syzkaller0: entered promiscuous mode
[   61.699358][ T6892] syzkaller0: entered allmulticast mode
[   61.712278][ T6892] tipc: Resetting bearer <eth:syzkaller0>
[   61.721700][ T6891] tipc: Resetting bearer <eth:syzkaller0>
[   61.738131][ T6891] tipc: Disabling bearer <eth:syzkaller0>
[   62.103338][ T6919] xt_hashlimit: size too large, truncated to 1048576
[   62.492883][ T6965] netlink: 'syz.0.479': attribute type 1 has an invalid length.
[   62.500601][ T6965] netlink: 'syz.0.479': attribute type 4 has an invalid length.
[   62.753889][ T6985] tipc: Started in network mode
[   62.758042][ T6985] tipc: Node identity f29a2f95addf, cluster identity 4711
[   62.760387][ T6985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.774279][ T6985] syzkaller0: entered promiscuous mode
[   62.778200][ T6985] syzkaller0: entered allmulticast mode
[   62.790619][ T6985] tipc: Resetting bearer <eth:syzkaller0>
[   62.793844][ T6984] tipc: Resetting bearer <eth:syzkaller0>
[   62.808128][ T6984] tipc: Disabling bearer <eth:syzkaller0>
[   63.010599][ T7005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.111125][ T7005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.187953][ T7005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.239661][ T7005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.302132][ T7005] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.309497][ T7005] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.317173][ T7005] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.323737][ T7005] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.384750][ T7011] __nla_validate_parse: 5 callbacks suppressed
[   63.384759][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'.
[   63.840678][ T7070] Cannot find set identified by id 2 to match
[   64.005636][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.526'.
[   64.041886][ T7082] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   64.207100][ T7102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.538'.
[   64.210451][ T7102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.538'.
[   64.213436][ T7102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.538'.
[   64.216451][ T7102] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   64.401391][ T7113] netlink: 'syz.0.543': attribute type 11 has an invalid length.
[   64.403803][ T7113] netlink: 'syz.0.543': attribute type 11 has an invalid length.
[   64.406233][ T7113] netlink: 224 bytes leftover after parsing attributes in process `syz.0.543'.
[   64.746246][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.553'.
[   64.864960][ T5826] Bluetooth: hci2: command 0x0405 tx timeout
[   64.957020][ T7152] netlink: 666 bytes leftover after parsing attributes in process `syz.2.560'.
[   65.152616][ T7163] netlink: 'syz.2.565': attribute type 4 has an invalid length.
[   65.204648][ T7164] netlink: 'syz.2.565': attribute type 4 has an invalid length.
[   65.516901][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[   65.587470][ T7193] netlink: 136 bytes leftover after parsing attributes in process `syz.2.579'.
[   66.228147][ T7258] netlink: 'syz.2.609': attribute type 4 has an invalid length.
[   67.530189][ T7326] netlink: 'syz.2.637': attribute type 1 has an invalid length.
[   67.532710][ T7326] netlink: 'syz.2.637': attribute type 2 has an invalid length.
[   67.617978][ T7334] netlink: 'syz.2.642': attribute type 4 has an invalid length.
[   67.816436][ T7364] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   67.886994][ T7371] vlan2: entered allmulticast mode
[   67.888588][ T7371] gretap0: entered allmulticast mode
[   68.164669][ T7401] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   68.169531][ T7401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.352787][ T7422] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   68.743997][ T7445] __nla_validate_parse: 12 callbacks suppressed
[   68.744011][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[   68.750814][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.915955][ T7460] netlink: 'syz.2.698': attribute type 6 has an invalid length.
[   68.918414][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[   69.278626][ T7505] netlink: 136 bytes leftover after parsing attributes in process `syz.2.716'.
[   69.281539][ T7505] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   69.319718][ T7511] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   69.676499][ T7552] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   69.712235][ T7556] netlink: 'syz.2.734': attribute type 9 has an invalid length.
[   69.842444][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'.
[   70.380803][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'.
[   70.415953][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.753'.
[   70.419031][ T7605] netlink: 27 bytes leftover after parsing attributes in process `syz.1.753'.
[   70.788040][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.790277][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.798375][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.842136][ T7635] netlink: 'syz.2.768': attribute type 8 has an invalid length.
[   70.844597][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[   71.381605][ T7667] netlink: 'syz.0.778': attribute type 99 has an invalid length.
[   71.421919][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.779'.
[   71.560632][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'.
[   71.569370][ T7681] macsec0: left allmulticast mode
[   72.016900][ T7695] bond1: entered promiscuous mode
[   72.018628][ T7695] bond1: entered allmulticast mode
[   72.024704][ T7695] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.422343][ T7733] netlink: 'syz.0.813': attribute type 1 has an invalid length.
[   72.446376][ T7737] netlink: 'syz.1.810': attribute type 9 has an invalid length.
[   72.642489][ T7756] macsec0: entered promiscuous mode
[   72.644536][ T7756] macsec1: entered allmulticast mode
[   72.648715][ T7756] macsec0: entered allmulticast mode
[   72.650704][ T7756] veth1_macvtap: entered allmulticast mode
[   72.728555][ T7764] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   73.218205][ T7805] xt_nfacct: accounting object `syz1' does not exists
[   73.273302][ T7811] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   73.369027][ T7825] netlink: 'syz.2.853': attribute type 11 has an invalid length.
[   73.683539][ T7850] sctp: [Deprecated]: syz.0.863 (pid 7850) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.683539][ T7850] Use struct sctp_sack_info instead
[   73.986224][ T7873] netlink: 'syz.1.873': attribute type 12 has an invalid length.
[   73.995716][ T7873] __nla_validate_parse: 9 callbacks suppressed
[   73.995725][ T7873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'.
[   75.050310][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.0.893'.
[   75.117890][ T7925] tipc: Started in network mode
[   75.119679][ T7925] tipc: Node identity e26da982cce5, cluster identity 4711
[   75.122374][ T7925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.126067][ T7925] syzkaller0: entered promiscuous mode
[   75.128246][ T7925] syzkaller0: entered allmulticast mode
[   75.140788][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[   75.146313][ T7924] tipc: Resetting bearer <eth:syzkaller0>
[   75.152953][ T7924] tipc: Disabling bearer <eth:syzkaller0>
[   75.306032][ T7936] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[   75.312342][ T7936] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.315571][ T7936] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.318609][ T7936] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.321418][ T7936] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.331414][ T7936] vlan2: left allmulticast mode
[   75.332947][ T7936] gretap0: left allmulticast mode
[   75.335269][ T7936] bond1: left promiscuous mode
[   75.337156][ T7936] bond1: left allmulticast mode
[   75.443647][ T7951] netlink: 'syz.0.906': attribute type 4 has an invalid length.
[   75.458587][ T7951] netlink: 'syz.0.906': attribute type 4 has an invalid length.
[   75.685999][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[   75.688941][ T7973] bridge_slave_1: left allmulticast mode
[   75.690803][ T7973] bridge_slave_1: left promiscuous mode
[   75.692745][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.697211][ T7973] bridge_slave_0: left allmulticast mode
[   75.699283][ T7973] bridge_slave_0: left promiscuous mode
[   75.705063][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.852079][ T7982] syzkaller0: entered promiscuous mode
[   75.853786][ T7982] syzkaller0: entered allmulticast mode
[   76.610585][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.613131][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.627225][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.761287][ T8013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.934'.
[   76.764392][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'.
[   76.767888][ T8013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.934'.
[   76.771477][ T8013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.934'.
[   77.155476][ T8049] netlink: 'syz.1.951': attribute type 21 has an invalid length.
[   77.158131][ T8049] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.482524][ T8085] netlink: 'syz.1.974': attribute type 83 has an invalid length.
[   77.507310][ T8089] IPv6: addrconf: prefix option has invalid lifetime
[   77.680450][ T8109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.982'.
[   77.770951][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.985'.
[   79.123464][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1005'.
[   79.128491][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1005'.
[   79.198296][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1008'.
[   79.383508][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'.
[   79.727047][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'.
[   79.729911][ T8263] netlink: 'syz.0.1018': attribute type 1 has an invalid length.
[   79.732340][ T8263] netlink: 'syz.0.1018': attribute type 2 has an invalid length.
[   79.906075][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'.
[   79.997561][ T8290] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1031'.
[   80.071996][ T8297] nftables ruleset with unbound set
[   80.153043][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'.
[   80.156809][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'.
[   80.206155][ T8306] nbd: socks must be embedded in a SOCK_ITEM attr
[   80.211758][ T8306] block nbd0: shutting down sockets
[   80.225926][ T8316] syzkaller0: entered promiscuous mode
[   80.235032][ T8316] syzkaller0: entered allmulticast mode
[   80.588541][ T8349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.602258][ T8349] syzkaller0: MTU too low for tipc bearer
[   80.604487][ T8349] tipc: Disabling bearer <eth:syzkaller0>
[   80.652905][ T8357] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   80.998306][ T8403] netlink: 'syz.0.1086': attribute type 21 has an invalid length.
[   81.000816][ T8403] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1086'.
[   81.004439][ T8403] netlink: 'syz.0.1086': attribute type 5 has an invalid length.
[   81.007081][ T8403] netlink: 'syz.0.1086': attribute type 6 has an invalid length.
[   81.035623][  T971] cfg80211: failed to load regulatory.db
[   81.398394][ T8427] siw: device registration error -23
[   81.655609][ T8472] netlink: 'syz.2.1115': attribute type 7 has an invalid length.
[   81.847815][ T8497] sctp: [Deprecated]: syz.2.1122 (pid 8497) Use of int in maxseg socket option.
[   81.847815][ T8497] Use struct sctp_assoc_value instead
[   81.870171][ T8499] syz.1.1124 uses old SIOCAX25GETINFO
[   81.928878][ T8508] netlink: 'syz.2.1128': attribute type 10 has an invalid length.
[   81.936294][ T8508] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   82.006209][ T8522] netlink: 'syz.1.1133': attribute type 10 has an invalid length.
[   82.016271][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.019752][ T8522] bridge_slave_1: left allmulticast mode
[   82.021621][ T8522] bridge_slave_1: left promiscuous mode
[   82.023526][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.031261][ T8522] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   82.076068][ T8530] batadv1: entered promiscuous mode
[   82.077871][ T8530] batadv1: entered allmulticast mode
[   83.612727][ T8658] delete_channel: no stack
[   83.778217][ T8670] bpq0: entered promiscuous mode
[   83.779911][ T8670] bpq0: entered allmulticast mode
[   84.005608][ T8680] bond0: (slave netdevsim0): Releasing backup interface
[   84.269887][ T8714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.320392][ T8716] __nla_validate_parse: 14 callbacks suppressed
[   84.320401][ T8716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1220'.
[   84.651709][ T8733] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1228'.
[   84.700251][ T8735] lo speed is unknown, defaulting to 1000
[   84.707031][ T8735] lo speed is unknown, defaulting to 1000
[   84.709316][ T8735] lo speed is unknown, defaulting to 1000
[   84.849199][ T8735] infiniband syz0: set down
[   84.851570][  T971] lo speed is unknown, defaulting to 1000
[   84.853681][ T8735] infiniband syz0: added lo
[   84.874152][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1237'.
[   84.889629][ T8735] RDS/IB: syz0: added
[   84.891210][ T8735] smc: adding ib device syz0 with port count 1
[   84.893284][ T8735] smc:    ib device syz0 port 1 has pnetid 
[   84.912675][  T971] lo speed is unknown, defaulting to 1000
[   84.915596][ T8735] lo speed is unknown, defaulting to 1000
[   85.098710][ T8735] lo speed is unknown, defaulting to 1000
[   85.217514][ T8735] lo speed is unknown, defaulting to 1000
[   85.290441][ T8772] tipc: Enabling of bearer <et:g> rejected, media not registered
[   85.403976][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'.
[   85.436303][ T8782] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1249'.
[   85.441878][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'.
[   85.444662][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'.
[   85.531365][ T5877] hid-generic 0005:15C2:0007.0001: collection stack underflow
[   85.533802][ T5877] hid-generic 0005:15C2:0007.0001: item 0 0 0 12 parsing failed
[   85.548262][ T5877] hid-generic 0005:15C2:0007.0001: probe with driver hid-generic failed with error -22
[   85.583635][ T8805] delete_channel: no stack
[   85.658239][ T8811] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.710335][ T8811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1264'.
[   85.714977][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1264'.
[   85.728619][ T8811] dummy0: entered promiscuous mode
[   85.730924][ T8811] team0: entered promiscuous mode
[   85.732646][ T8811] team_slave_0: entered promiscuous mode
[   85.736813][ T8811] team_slave_1: entered promiscuous mode
[   85.739469][ T8811] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[   85.742659][ T8811] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[   85.844695][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[   86.072920][ T8851] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   86.716216][ T8867] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.128083][ T8907] ieee802154 phy0 wpan0: encryption failed: -22
[   87.140618][ T8911] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   87.357819][ T8942] netlink: 'syz.0.1325': attribute type 1 has an invalid length.
[   87.431485][ T8954] netlink: 'syz.2.1330': attribute type 1 has an invalid length.
[   87.477906][ T8960] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   87.616138][ T8974] nbd0: detected capacity change from 0 to 127
[   87.619469][ T8981] block nbd0: NBD_DISCONNECT
[   87.621959][ T8981] block nbd0: Disconnected due to user request.
[   87.624094][ T8981] block nbd0: shutting down sockets
[   87.632251][    C1] blk_print_req_error: 138 callbacks suppressed
[   87.632290][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.637472][    C1] buffer_io_error: 138 callbacks suppressed
[   87.637479][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.642162][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.645148][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.647970][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.650939][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.653649][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.656714][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.663908][ T8755] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.670832][ T8755] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.673451][ T8755] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.683710][ T8979] bpq0: left promiscuous mode
[   87.684313][ T8755] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.685467][ T8979] bpq0: left allmulticast mode
[   87.688146][ T8755] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.692293][ T8755] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.705077][ T8755] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.708524][ T8755] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.711232][ T8755] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.714253][ T8755] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.720399][ T8755] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   87.723372][ T8755] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.726840][ T8985] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   87.728319][ T8755] ldm_validate_partition_table(): Disk read failed.
[   87.732983][ T8755] Dev nbd0: unable to read RDB block 0
[   87.735844][ T8755]  nbd0: unable to read partition table
[   87.742230][ T8755] ldm_validate_partition_table(): Disk read failed.
[   87.745921][ T8755] Dev nbd0: unable to read RDB block 0
[   87.748544][ T8755]  nbd0: unable to read partition table
[   87.759151][ T8987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.481762][ T9077] netlink: 'syz.2.1385': attribute type 3 has an invalid length.
[   89.236867][ T9130] netlink: 'syz.1.1410': attribute type 1 has an invalid length.
[   89.772251][ T9191] nbd1: detected capacity change from 0 to 127
[   89.774809][ T9197] block nbd1: NBD_DISCONNECT
[   89.779030][ T9197] block nbd1: Disconnected due to user request.
[   89.784366][ T8755] ldm_validate_partition_table(): Disk read failed.
[   89.787657][ T9197] block nbd1: shutting down sockets
[   89.790184][ T8755] Dev nbd1: unable to read RDB block 0
[   89.800943][ T8755]  nbd1: unable to read partition table
[   89.809506][ T8755] ldm_validate_partition_table(): Disk read failed.
[   89.812382][ T8755] Dev nbd1: unable to read RDB block 0
[   89.817508][ T8755]  nbd1: unable to read partition table
[   89.838553][ T9208] __nla_validate_parse: 17 callbacks suppressed
[   89.838562][ T9208] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1446'.
[   89.859545][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'.
[   90.012219][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'.
[   90.277861][ T9250] netlink: 'syz.2.1465': attribute type 10 has an invalid length.
[   90.280348][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1465'.
[   90.283372][ T9250] dummy0: entered promiscuous mode
[   90.286279][ T9250] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   90.436614][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1471'.
[   90.542461][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'.
[   90.595615][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'.
[   90.653054][ T9282] netlink: 'syz.2.1481': attribute type 4 has an invalid length.
[   90.671578][ T9284] netlink: 'syz.1.1482': attribute type 1 has an invalid length.
[   90.674089][ T9284] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1482'.
[   90.785456][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'.
[   90.834333][ T9302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1491'.
[   90.857461][ T9306] xt_bpf: check failed: parse error
[   90.860790][ T9308] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   90.925685][ T9316] nbd: illegal input index -381222912
[   90.946277][ T9320] netlink: 'syz.2.1500': attribute type 2 has an invalid length.
[   90.958687][ T9322] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   90.982534][ T9324] netlink: 'syz.2.1502': attribute type 1 has an invalid length.
[   91.002533][ T9324] bond2: (slave gretap1): making interface the new active one
[   91.006999][ T9324] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   91.051925][ T9333] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   91.091423][ T9341] netlink: 'syz.0.1510': attribute type 1 has an invalid length.
[   91.176923][ T5877] hid-generic 0005:0B57:0007.0002: collection stack underflow
[   91.179470][ T5877] hid-generic 0005:0B57:0007.0002: item 0 0 0 12 parsing failed
[   91.182393][ T5877] hid-generic 0005:0B57:0007.0002: probe with driver hid-generic failed with error -22
[   91.328144][ T9379] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   91.351586][ T9381] Unsupported ieee802154 address type: 0
[   91.921967][ T9458] Bluetooth: MGMT ver 1.23
[   91.979474][ T9467] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.982175][ T9467] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.984724][ T9467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.987986][ T9467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.990651][ T9467] geneve2: entered promiscuous mode
[   92.021567][ T9473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.080902][ T9482] bond0: (slave bond_slave_0): Releasing backup interface
[   92.084324][ T9482] bond0: (slave bond_slave_1): Releasing backup interface
[   92.092510][ T9482] team0: Port device team_slave_0 removed
[   92.096957][ T9482] team0: Port device team_slave_1 removed
[   92.100274][ T9482] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.105464][ T9482] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.110535][ T9482] bond2: (slave gretap1): Releasing active interface
[   92.118261][ T5295] syz1: Port: 1 Link DOWN
[   92.152031][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.158783][ T9482] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   92.166927][ T5877] lo speed is unknown, defaulting to 1000
[   92.172268][ T5877] syz0: Port: 1 Link ACTIVE
[   92.175194][ T5877] lo speed is unknown, defaulting to 1000
[   92.503655][ T9529] syzkaller0: entered promiscuous mode
[   92.505672][ T9529] syzkaller0: entered allmulticast mode
[   93.390962][ T9557] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   93.699068][ T9593] validate_nla: 4 callbacks suppressed
[   93.699078][ T9593] netlink: 'syz.0.1628': attribute type 1 has an invalid length.
[   93.703892][ T9593] netlink: 'syz.0.1628': attribute type 2 has an invalid length.
[   93.822352][ T9604] netlink: 'syz.0.1633': attribute type 10 has an invalid length.
[   93.863634][ T9607] set match dimension is over the limit!
[   94.279406][ T9637] ipt_rpfilter: unknown options
[   94.393098][ T9651] lo speed is unknown, defaulting to 1000
[   94.731896][ T9679] netlink: 'syz.2.1665': attribute type 3 has an invalid length.
[   94.958973][ T9699] delete_channel: no stack
[   95.154708][ T9718] __nla_validate_parse: 16 callbacks suppressed
[   95.154718][ T9718] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1684'.
[   95.596398][ T9747] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1697'.
[   95.608284][ T9747] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1697'.
[   95.754318][ T9756] openvswitch: netlink: Message has 1 unknown bytes.
[   95.761333][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.143996][ T9788] bond3: entered promiscuous mode
[   96.146072][ T9788] bond3: entered allmulticast mode
[   96.148083][ T9788] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.818236][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'.
[   96.858189][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[   96.861989][ T9844] tipc: Enabled bearer <eth:vlan0>, priority 18
[   96.878167][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'.
[   96.921522][ T9852] netlink: 'syz.2.1744': attribute type 11 has an invalid length.
[   97.128393][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'.
[   97.131274][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'.
[   97.241971][ T9887] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1761'.
[   97.388184][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'.
[   97.413211][ T9901] netlink: 'syz.2.1768': attribute type 29 has an invalid length.
[   97.417143][ T9901] netlink: 'syz.2.1768': attribute type 29 has an invalid length.
[   97.420314][ T9901] unsupported nla_type 58
[   97.707870][ T9926] netlink: 'syz.2.1779': attribute type 9 has an invalid length.
[   97.710405][ T9926] netlink: 'syz.2.1779': attribute type 7 has an invalid length.
[   97.712749][ T9926] netlink: 'syz.2.1779': attribute type 8 has an invalid length.
[   97.975831][  T971] tipc: Node number set to 703434925
[   99.117639][ T9977] validate_nla: 1 callbacks suppressed
[   99.117685][ T9977] netlink: 'syz.0.1804': attribute type 4 has an invalid length.
[   99.421543][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.424413][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.595775][T10046] xt_hashlimit: size too large, truncated to 1048576
[   99.803540][T10058] ip6t_srh: unknown srh invflags 4449
[   99.838995][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.925867][T10089] sctp: [Deprecated]: syz.1.1855 (pid 10089) Use of int in max_burst socket option.
[   99.925867][T10089] Use struct sctp_assoc_value instead
[   99.990670][T10097] netlink: 'syz.1.1858': attribute type 29 has an invalid length.
[  100.206847][T10113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.209401][T10116] __nla_validate_parse: 9 callbacks suppressed
[  100.209409][T10116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1866'.
[  100.844574][T10138] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1875'.
[  100.880551][T10141] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  101.010276][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  101.013182][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  101.016700][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  101.020707][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  101.023611][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  101.283675][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'.
[  101.489474][   T33] audit: type=1800 audit(1752227973.018:2): pid=10221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1915" name=25705320202020 dev="tmpfs" ino=2772 res=0 errno=0
[  101.641329][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'.
[  101.662792][T10251] xt_connbytes: Forcing CT accounting to be enabled
[  101.667176][T10251] xt_bpf: check failed: parse error
[  101.739248][T10254] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.827835][T10254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.833459][T10254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.877545][T10254] tipc: Resetting bearer <eth:vlan0>
[  101.905892][T10254] veth1_macvtap: left allmulticast mode
[  101.916404][T10254] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.919163][T10254] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.921877][T10254] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.924555][T10254] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.946958][T10254] macsec0: left allmulticast mode
[  102.011922][T10255] lo speed is unknown, defaulting to 1000
[  102.257950][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1946'.
[  102.703689][T10336] netlink: 'syz.1.1971': attribute type 3 has an invalid length.
[  103.297916][T10403] lo speed is unknown, defaulting to 1000
[  103.677562][T10441] tipc: Cannot configure node identity twice
[  104.249902][T10519] syzkaller1: entered promiscuous mode
[  104.251833][T10519] syzkaller1: entered allmulticast mode
[  104.981729][T10596] netlink: 'syz.0.2095': attribute type 1 has an invalid length.
[  104.985360][T10596] netlink: 'syz.0.2095': attribute type 1 has an invalid length.
[  105.188098][T10620] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  105.528110][T10662] pim6reg: entered allmulticast mode
[  105.530822][T10662] pim6reg: left allmulticast mode
[  105.637865][T10676] __nla_validate_parse: 10 callbacks suppressed
[  105.637875][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'.
[  105.685956][T10680] netlink: 'syz.2.2135': attribute type 6 has an invalid length.
[  105.711460][T10684] netlink: 'syz.2.2137': attribute type 29 has an invalid length.
[  105.714940][T10684] netlink: 'syz.2.2137': attribute type 29 has an invalid length.
[  105.718192][T10684] netlink: 488 bytes leftover after parsing attributes in process `syz.2.2137'.
[  105.907282][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2151'.
[  106.036685][T10730] can: request_module (can-proto-3) failed.
[  106.314134][T10770] ieee802154 phy0 wpan0: encryption failed: -90
[  106.367679][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'.
[  106.387978][T10781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.390457][T10781] syzkaller0: entered promiscuous mode
[  106.392235][T10781] syzkaller0: entered allmulticast mode
[  106.407987][T10783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2185'.
[  106.408213][T10781] tipc: Resetting bearer <eth:syzkaller0>
[  106.416195][T10780] tipc: Resetting bearer <eth:syzkaller0>
[  106.423266][T10780] tipc: Disabling bearer <eth:syzkaller0>
[  106.493864][T10791] netlink: 'syz.0.2188': attribute type 4 has an invalid length.
[  106.604171][T10804] netlink: 'syz.0.2194': attribute type 2 has an invalid length.
[  106.608955][T10804] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.2194'.
[  106.787133][T10824] openvswitch: netlink: IP tunnel dst address not specified
[  107.628191][T10852] netlink: 'syz.1.2211': attribute type 1 has an invalid length.
[  107.630888][T10852] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2211'.
[  107.656691][T10854] xt_time: invalid argument - start or stop time greater than 23:59:59
[  107.859775][T10869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2219'.
[  108.027426][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'.
[  108.237684][ T5219] Bluetooth: hci2: link tx timeout
[  108.239564][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.243311][ T5826] Bluetooth: hci2: link tx timeout
[  108.246013][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.301950][ T5826] Bluetooth: hci2: link tx timeout
[  108.303629][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.326222][ T5826] Bluetooth: hci2: link tx timeout
[  108.328452][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.478045][T10911] netlink: 'syz.1.2232': attribute type 1 has an invalid length.
[  108.499517][T10911] bond3: (slave bridge6): making interface the new active one
[  108.502305][T10911] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  108.565375][T10917] lo speed is unknown, defaulting to 1000
[  108.568024][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'.
[  108.619626][T10924] netlink: 'syz.1.2237': attribute type 1 has an invalid length.
[  108.648708][T10924] bond4: (slave gretap2): making interface the new active one
[  108.651751][T10924] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  108.813302][T10933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.085326][ T5826] Bluetooth: hci2: link tx timeout
[  109.087226][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.107350][ T5826] Bluetooth: hci2: link tx timeout
[  109.109217][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.197958][ T5826] Bluetooth: hci2: link tx timeout
[  109.199761][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.681900][T10962] SET target dimension over the limit!
[  110.036179][ T5826] Bluetooth: hci2: link tx timeout
[  110.037924][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.040361][ T5826] Bluetooth: hci2: link tx timeout
[  110.042150][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.044653][ T5826] Bluetooth: hci2: link tx timeout
[  110.046928][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.049437][ T5826] Bluetooth: hci2: link tx timeout
[  110.051131][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.227258][ T5826] Bluetooth: hci2: link tx timeout
[  110.228937][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.232188][ T5826] Bluetooth: hci2: link tx timeout
[  110.233898][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.294316][T11026] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  110.305952][ T5826] Bluetooth: hci2: command 0x0405 tx timeout
[  110.426143][T11043] IPv6: sit2: Disabled Multicast RS
[  110.547200][T11049] validate_nla: 1 callbacks suppressed
[  110.547210][T11049] netlink: 'syz.2.2292': attribute type 4 has an invalid length.
[  110.607948][T11067] trusted_key: syz.2.2298 sent an empty control message without MSG_MORE.
[  111.352414][T11106] openvswitch: netlink: IPv4 tunnel dst address is zero
[  111.603983][T11134] __nla_validate_parse: 7 callbacks suppressed
[  111.603992][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2331'.
[  111.682721][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2335'.
[  111.697495][T11146] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  111.813076][T11166] netlink: 'syz.2.2347': attribute type 1 has an invalid length.
[  111.913407][T11182] netlink: 'syz.2.2355': attribute type 3 has an invalid length.
[  111.947196][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2357'.
[  111.949999][T11186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2357'.
[  111.952851][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2357'.
[  111.958053][T11186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2357'.
[  111.991176][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'.
[  112.146288][T11218] netlink: 'syz.0.2372': attribute type 1 has an invalid length.
[  112.303429][   T33] audit: type=1107 audit(1752227983.828:3): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  112.526855][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'.
[  112.561728][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'.
[  112.661680][T11281] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  112.918778][T11309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2415'.
[  113.064299][T11328] bridge0: port 1(gretap0) entered blocking state
[  113.070632][T11328] bridge0: port 1(gretap0) entered disabled state
[  113.072901][T11328] gretap0: entered allmulticast mode
[  113.077033][T11328] gretap0: entered promiscuous mode
[  113.085470][T11328] bridge0: port 1(gretap0) entered blocking state
[  113.087512][T11328] bridge0: port 1(gretap0) entered forwarding state
[  113.093721][T11331] bridge0: port 2(syz_tun) entered blocking state
[  113.097560][T11331] bridge0: port 2(syz_tun) entered disabled state
[  113.101674][T11331] syz_tun: entered allmulticast mode
[  113.104034][T11331] syz_tun: entered promiscuous mode
[  113.257743][T11355] netlink: 'syz.0.2438': attribute type 3 has an invalid length.
[  113.348060][T11365] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  113.444052][T11381] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  113.544139][T11388] tap0: tun_chr_ioctl cmd 1074025677
[  113.546077][T11388] tap0: linktype set to 768
[  113.917333][T11402] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  113.921277][T11402] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  114.001136][T11409] netlink: 'syz.0.2461': attribute type 8 has an invalid length.
[  114.346013][T11423] sctp: [Deprecated]: syz.2.2465 (pid 11423) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.346013][T11423] Use struct sctp_sack_info instead
[  114.516929][T11448] xt_bpf: check failed: parse error
[  114.633563][T11464] veth0: entered promiscuous mode
[  114.645397][T11464] veth0 (unregistering): left promiscuous mode
[  115.507070][T11542] vlan3: entered promiscuous mode
[  115.508708][T11542] vlan2: entered promiscuous mode
[  115.510262][T11542] gretap0: entered promiscuous mode
[  115.626552][T11546] lo speed is unknown, defaulting to 1000
[  116.161013][T11593] sit2: entered promiscuous mode
[  116.164207][T11591] lo speed is unknown, defaulting to 1000
[  116.679930][T11618] lo speed is unknown, defaulting to 1000
[  116.819724][T11631] __nla_validate_parse: 5 callbacks suppressed
[  116.819733][T11631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2538'.
[  116.824622][T11631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2538'.
[  116.970310][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'.
[  116.973457][T11641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2543'.
[  117.369686][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2551'.
[  117.372616][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2551'.
[  117.375850][T11659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2551'.
[  117.427420][T11661] syzkaller0: mtu greater than device maximum
[  117.482075][T11665] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  117.753707][T11691] xt_hashlimit: max too large, truncated to 1048576
[  117.756169][T11691] Cannot find add_set index 3 as target
[  117.765324][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2568'.
[  117.858468][T11709] macsec1: left allmulticast mode
[  117.872066][T11709] sit2: left promiscuous mode
[  117.911342][T11717] netlink: 'syz.2.2580': attribute type 32 has an invalid length.
[  117.980465][T11724] netlink: 'syz.2.2583': attribute type 1 has an invalid length.
[  117.983037][T11724] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2583'.
[  118.009900][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'.
[  118.113997][T11736] lo speed is unknown, defaulting to 1000
[  118.162806][T11737] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.391876][T11748] xt_CT: No such helper "syz0"
[  118.576340][T11761] xt_hashlimit: max too large, truncated to 1048576
[  118.889764][T11774] wireguard0: entered promiscuous mode
[  118.891623][T11774] wireguard0: entered allmulticast mode
[  119.201072][T11826] netlink: 'syz.0.2630': attribute type 1 has an invalid length.
[  119.371007][T11843] set match dimension is over the limit!
[  119.503825][T11846] netlink: 'syz.0.2639': attribute type 1 has an invalid length.
[  120.646982][T11908] netlink: 'syz.0.2662': attribute type 3 has an invalid length.
[  121.232339][T11966] bond0: entered promiscuous mode
[  121.706112][T12008] block nbd0: server does not support multiple connections per device.
[  121.709377][T12008] block nbd0: shutting down sockets
[  121.784731][T12021] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  122.667563][T12033] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  122.670487][T12033] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  123.098605][T12066] __nla_validate_parse: 14 callbacks suppressed
[  123.098621][T12066] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2734'.
[  123.267814][T12076] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2739'.
[  123.515572][T12089] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2744'.
[  123.520009][T12086] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2744'.
[  123.534760][T12086] tap0: tun_chr_ioctl cmd 1074025677
[  123.542005][T12086] tap0: linktype set to 823
[  124.078728][T12147] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.243569][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'.
[  124.247655][T12177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2785'.
[  124.661252][T12222] netlink: 'syz.2.2800': attribute type 1 has an invalid length.
[  125.219593][T12251] netlink: 'syz.2.2814': attribute type 1 has an invalid length.
[  125.222162][T12251] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2814'.
[  125.397381][T12275] bridge2: the hash_elasticity option has been deprecated and is always 16
[  125.400050][T12275] bridge2: entered allmulticast mode
[  125.511648][T12286] netlink: 'syz.0.2829': attribute type 4 has an invalid length.
[  125.516306][T12286] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2829'.
[  125.580659][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'.
[  125.618875][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2837'.
[  125.672778][T12309] IPv6: sit1: Disabled Multicast RS
[  125.721045][T12318] netlink: 'syz.2.2844': attribute type 5 has an invalid length.
[  125.723600][T12319] netlink: 'syz.1.2846': attribute type 1 has an invalid length.
[  126.379342][ T1097] 
[  126.380134][ T1097] ======================================================
[  126.382851][ T1097] WARNING: possible circular locking dependency detected
[  126.384990][ T1097] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  126.388199][ T1097] ------------------------------------------------------
[  126.390951][ T1097] kworker/u9:9/1097 is trying to acquire lock:
[  126.393356][ T1097] ffff88802224c358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  126.396900][ T1097] 
[  126.396900][ T1097] but task is already holding lock:
[  126.399783][ T1097] ffff8880222c9988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  126.403504][ T1097] 
[  126.403504][ T1097] which lock already depends on the new lock.
[  126.403504][ T1097] 
[  126.407521][ T1097] 
[  126.407521][ T1097] the existing dependency chain (in reverse order) is:
[  126.410988][ T1097] 
[  126.410988][ T1097] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  126.414225][ T1097]        lock_acquire+0x120/0x360
[  126.416215][ T1097]        down_write+0x96/0x1f0
[  126.418092][ T1097]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  126.420560][ T1097]        nbd_start_device+0x16c/0xac0
[  126.422725][ T1097]        nbd_genl_connect+0x1250/0x1930
[  126.424961][ T1097]        genl_family_rcv_msg_doit+0x215/0x300
[  126.427399][ T1097]        genl_rcv_msg+0x60e/0x790
[  126.429460][ T1097]        netlink_rcv_skb+0x208/0x470
[  126.431584][ T1097]        genl_rcv+0x28/0x40
[  126.433461][ T1097]        netlink_unicast+0x75b/0x8d0
[  126.435597][ T1097]        netlink_sendmsg+0x805/0xb30
[  126.437710][ T1097]        __sock_sendmsg+0x21c/0x270
[  126.439795][ T1097]        ____sys_sendmsg+0x505/0x830
[  126.441915][ T1097]        ___sys_sendmsg+0x21f/0x2a0
[  126.444055][ T1097]        __x64_sys_sendmsg+0x19b/0x260
[  126.446211][ T1097]        do_syscall_64+0xfa/0x3b0
[  126.448222][ T1097]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.450809][ T1097] 
[  126.450809][ T1097] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  126.453881][ T1097]        lock_acquire+0x120/0x360
[  126.455917][ T1097]        __mutex_lock+0x182/0xe80
[  126.457945][ T1097]        refcount_dec_and_mutex_lock+0x30/0xa0
[  126.459881][ T1097]        nbd_config_put+0x2c/0x790
[  126.461502][ T1097]        nbd_release+0xfe/0x140
[  126.463074][ T1097]        bdev_release+0x536/0x650
[  126.464630][ T1097]        blkdev_release+0x15/0x20
[  126.466180][ T1097]        __fput+0x44c/0xa70
[  126.467600][ T1097]        fput_close_sync+0x119/0x200
[  126.469197][ T1097]        __x64_sys_close+0x7f/0x110
[  126.470942][ T1097]        do_syscall_64+0xfa/0x3b0
[  126.472565][ T1097]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.475168][ T1097] 
[  126.475168][ T1097] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  126.477664][ T1097]        validate_chain+0xb9b/0x2140
[  126.479298][ T1097]        __lock_acquire+0xab9/0xd20
[  126.480906][ T1097]        lock_acquire+0x120/0x360
[  126.482510][ T1097]        __mutex_lock+0x182/0xe80
[  126.484087][ T1097]        __del_gendisk+0x129/0x9e0
[  126.485716][ T1097]        del_gendisk+0xe8/0x160
[  126.487209][ T1097]        nbd_dev_remove_work+0x47/0xe0
[  126.488903][ T1097]        process_scheduled_works+0xae1/0x17b0
[  126.490760][ T1097]        worker_thread+0x8a0/0xda0
[  126.492318][ T1097]        kthread+0x711/0x8a0
[  126.494147][ T1097]        ret_from_fork+0x3fc/0x770
[  126.496207][ T1097]        ret_from_fork_asm+0x1a/0x30
[  126.498316][ T1097] 
[  126.498316][ T1097] other info that might help us debug this:
[  126.498316][ T1097] 
[  126.502345][ T1097] Chain exists of:
[  126.502345][ T1097]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  126.502345][ T1097] 
[  126.507854][ T1097]  Possible unsafe locking scenario:
[  126.507854][ T1097] 
[  126.510752][ T1097]        CPU0                    CPU1
[  126.512793][ T1097]        ----                    ----
[  126.514833][ T1097]   rlock(&set->update_nr_hwq_lock);
[  126.516941][ T1097]                                lock(&nbd->config_lock);
[  126.519704][ T1097]                                lock(&set->update_nr_hwq_lock);
[  126.522760][ T1097]   lock(&disk->open_mutex);
[  126.524455][ T1097] 
[  126.524455][ T1097]  *** DEADLOCK ***
[  126.524455][ T1097] 
[  126.526881][ T1097] 3 locks held by kworker/u9:9/1097:
[  126.528516][ T1097]  #0: ffff8880222c9148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  126.531795][ T1097]  #1: ffffc90007267bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  126.535713][ T1097]  #2: ffff8880222c9988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  126.538711][ T1097] 
[  126.538711][ T1097] stack backtrace:
[  126.540514][ T1097] CPU: 0 UID: 0 PID: 1097 Comm: kworker/u9:9 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  126.540523][ T1097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.540528][ T1097] Workqueue: nbd-del nbd_dev_remove_work
[  126.540538][ T1097] Call Trace:
[  126.540542][ T1097]  <TASK>
[  126.540546][ T1097]  dump_stack_lvl+0x189/0x250
[  126.540556][ T1097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.540564][ T1097]  ? __pfx__printk+0x10/0x10
[  126.540574][ T1097]  ? print_lock_name+0xde/0x100
[  126.540583][ T1097]  print_circular_bug+0x2ee/0x310
[  126.540593][ T1097]  check_noncircular+0x134/0x160
[  126.540602][ T1097]  validate_chain+0xb9b/0x2140
[  126.540612][ T1097]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  126.540622][ T1097]  ? arch_stack_walk+0x11c/0x150
[  126.540632][ T1097]  __lock_acquire+0xab9/0xd20
[  126.540639][ T1097]  ? __del_gendisk+0x129/0x9e0
[  126.540646][ T1097]  lock_acquire+0x120/0x360
[  126.540653][ T1097]  ? __del_gendisk+0x129/0x9e0
[  126.540661][ T1097]  ? check_path+0x21/0x40
[  126.540670][ T1097]  __mutex_lock+0x182/0xe80
[  126.540677][ T1097]  ? __del_gendisk+0x129/0x9e0
[  126.540685][ T1097]  ? __del_gendisk+0x129/0x9e0
[  126.540693][ T1097]  ? __pfx___mutex_lock+0x10/0x10
[  126.540699][ T1097]  ? __pfx___might_resched+0x10/0x10
[  126.540708][ T1097]  ? del_gendisk+0xe0/0x160
[  126.540715][ T1097]  ? __pfx_hlock_conflict+0x10/0x10
[  126.540722][ T1097]  ? disk_del_events+0xb5/0x210
[  126.540730][ T1097]  ? __del_gendisk+0xc1/0x9e0
[  126.540737][ T1097]  __del_gendisk+0x129/0x9e0
[  126.540746][ T1097]  ? __pfx___del_gendisk+0x10/0x10
[  126.540754][ T1097]  ? down_read+0x1ad/0x2e0
[  126.540761][ T1097]  del_gendisk+0xe8/0x160
[  126.540769][ T1097]  nbd_dev_remove_work+0x47/0xe0
[  126.540776][ T1097]  ? process_scheduled_works+0x9ef/0x17b0
[  126.540784][ T1097]  process_scheduled_works+0xae1/0x17b0
[  126.540795][ T1097]  ? __pfx_process_scheduled_works+0x10/0x10
[  126.540805][ T1097]  worker_thread+0x8a0/0xda0
[  126.540814][ T1097]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.540824][ T1097]  ? __kthread_parkme+0x7b/0x200
[  126.540834][ T1097]  kthread+0x711/0x8a0
[  126.540843][ T1097]  ? __pfx_worker_thread+0x10/0x10
[  126.540851][ T1097]  ? __pfx_kthread+0x10/0x10
[  126.540860][ T1097]  ? _raw_spin_unlock_irq+0x23/0x50
[  126.540869][ T1097]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.540875][ T1097]  ? __pfx_kthread+0x10/0x10
[  126.540884][ T1097]  ret_from_fork+0x3fc/0x770
[  126.540891][ T1097]  ? __pfx_ret_from_fork+0x10/0x10
[  126.540899][ T1097]  ? __switch_to_asm+0x39/0x70
[  126.540907][ T1097]  ? __switch_to_asm+0x33/0x70
[  126.540915][ T1097]  ? __pfx_kthread+0x10/0x10
[  126.540923][ T1097]  ret_from_fork_asm+0x1a/0x30
[  126.540934][ T1097]  </TASK>

VM DIAGNOSIS:
09:59:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007266e10
R8 =ffff888021148237 R9 =1ffff11004229046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78f9 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc733da804 CR3=000000003c230000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 00ff00000000ff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=0000000000022f51 000000000000302d
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffff000000 ffffffffffff0000 XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81f73a82 RBX=dffffc0000000000 RCX=0000000000080000 RDX=ffffc90007369000
RSI=000000000007c156 RDI=000000000007c157 RBP=ffffea000443ce40 RSP=ffffc900041cf508
R8 =ffffea000443ce37 R9 =1ffffd40008879c6 R10=dffffc0000000000 R11=fffff940008879c7
R12=1ffff92000839ee1 R13=ffffc900041cf708 R14=0000000000000000 R15=ffff8881122e65a0
RIP=ffffffff81c05ec5 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f278c91d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555fcca3df18 CR3=00000001119f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f219b011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
