last executing test programs:

8.44112456s ago: executing program 1 (id=1339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000180001000400000000000000020000000500ff090024000006001500020000001400168010000880070002"], 0x38}}, 0x0)

8.380188581s ago: executing program 1 (id=1341):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x103044, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000003c0)="a21f6702e185a16734191fcd63171acae4749ac4e1c6334f30058af12e0f9f43155ef0e9afd7ac24de55cac00ee8810990433f4f0206282f81eec18500d936d9a9a6d0ff901e5f7d7c0d3de5e1d5a969b8cc725b299ff3a27af8b3b2d412a50d566334bc932924741feeeaf4fbe8714bf4aafed2758505519c3cd75efb7837f72fd3fbac11df288c331e0eb2542d2b079784c7593df98911488371afb5e2de10d2a03aebfafe1af2c54ac33d38fdf861ecd5ba6069891514358f902a106682aae404776795717e1050ef6075d13ad95f7308c919", 0xd4, 0x84, &(0x7f0000000500)={0x2, 0x4e23, @loopback}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000300), 0x0}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f0000000140)=0x9700)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1}})
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x1}}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @datasec={0x9, 0x3, 0x0, 0xf, 0x2, [{0x5, 0xc3, 0xfff}, {0x2, 0x2, 0x73ee}, {0x9, 0x7, 0x3}], "0317"}, @volatile={0x9}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000280)=""/215, 0x8c, 0xd7, 0x0, 0x6}, 0x28)

8.180069652s ago: executing program 1 (id=1348):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r5, r0, 0x2, 0x0, 0x4000}, 0x10)

8.101369568s ago: executing program 1 (id=1349):
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0x6, [@multicast2]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0)

7.954989296s ago: executing program 1 (id=1353):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0xe}}}, 0x24}}, 0x40004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

1.770303491s ago: executing program 1 (id=1353):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0xe}}}, 0x24}}, 0x40004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

230.666707ms ago: executing program 0 (id=1495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)

230.513907ms ago: executing program 2 (id=1496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

180.97039ms ago: executing program 0 (id=1497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000)

180.745099ms ago: executing program 2 (id=1498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1c600}, [@IFLA_GSO_MAX_SIZE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x40)

120.898702ms ago: executing program 0 (id=1499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0)

120.208793ms ago: executing program 2 (id=1500):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

119.832477ms ago: executing program 0 (id=1501):
unshare(0x2040400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

50.303414ms ago: executing program 0 (id=1502):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)

49.897733ms ago: executing program 2 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0x24}}, 0x0)

684.878µs ago: executing program 2 (id=1504):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x17, 0x1, 0xf8, 0xf, 0xe0, @multicast}, 0x10)

263.359µs ago: executing program 0 (id=1505):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108021100000008021100000020000100000001100128828450"], 0x28)

0s ago: executing program 2 (id=1506):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20100, 0xae08}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x9, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0xba01, 0x0, 0x8000}, 0x810)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29877' (ED25519) to the list of known hosts.
syzkaller login: [   56.453597][ T5816] cgroup: Unknown subsys name 'net'
[   56.615871][ T5816] cgroup: Unknown subsys name 'cpuset'
[   56.621052][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.297202][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.148463][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160337][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.326287][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.330944][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.334442][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.337570][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.340963][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.344136][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.347435][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.353671][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.361367][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.363629][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.367055][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.370978][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.375620][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.417291][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.427434][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.895164][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   71.942077][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   72.028912][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   72.068317][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.072939][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.075976][ T5866] bridge_slave_0: entered allmulticast mode
[   72.079977][ T5866] bridge_slave_0: entered promiscuous mode
[   72.111807][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.114748][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.117710][ T5866] bridge_slave_1: entered allmulticast mode
[   72.122473][ T5866] bridge_slave_1: entered promiscuous mode
[   72.145612][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.147865][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.151015][ T5870] bridge_slave_0: entered allmulticast mode
[   72.153826][ T5870] bridge_slave_0: entered promiscuous mode
[   72.174597][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.176964][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.179376][ T5870] bridge_slave_1: entered allmulticast mode
[   72.182430][ T5870] bridge_slave_1: entered promiscuous mode
[   72.220602][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.254084][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.257353][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.262087][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.264378][ T5874] bridge_slave_0: entered allmulticast mode
[   72.267298][ T5874] bridge_slave_0: entered promiscuous mode
[   72.274348][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.302467][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.305365][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.308173][ T5874] bridge_slave_1: entered allmulticast mode
[   72.312617][ T5874] bridge_slave_1: entered promiscuous mode
[   72.334657][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.340869][ T5866] team0: Port device team_slave_0 added
[   72.358342][ T5866] team0: Port device team_slave_1 added
[   72.389266][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.412868][ T5870] team0: Port device team_slave_0 added
[   72.418024][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.445086][ T5870] team0: Port device team_slave_1 added
[   72.474281][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.477219][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.486768][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.506874][ T5874] team0: Port device team_slave_0 added
[   72.510701][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.513474][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.524848][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.545373][ T5874] team0: Port device team_slave_1 added
[   72.548234][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.551069][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.561219][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.588227][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.591578][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.602015][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.654235][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.656959][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.667402][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.701117][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.703406][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.712003][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.723256][ T5866] hsr_slave_0: entered promiscuous mode
[   72.726822][ T5866] hsr_slave_1: entered promiscuous mode
[   72.738601][ T5870] hsr_slave_0: entered promiscuous mode
[   72.742208][ T5870] hsr_slave_1: entered promiscuous mode
[   72.745354][ T5870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.748724][ T5870] Cannot create hsr debugfs directory
[   72.840338][ T5874] hsr_slave_0: entered promiscuous mode
[   72.843406][ T5874] hsr_slave_1: entered promiscuous mode
[   72.845543][ T5874] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.848177][ T5874] Cannot create hsr debugfs directory
[   73.174239][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.188190][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.196489][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.214000][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.274147][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.280088][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.298566][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.321581][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.348873][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.356599][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.367911][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.374245][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.461878][   T55] Bluetooth: hci1: command tx timeout
[   73.464305][   T55] Bluetooth: hci0: command tx timeout
[   73.466232][ T5868] Bluetooth: hci2: command tx timeout
[   73.499939][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.534078][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.555722][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   73.579369][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.582353][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.594879][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   73.613927][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.616836][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.626940][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.629337][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.634778][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.637058][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.647657][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.749285][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   73.777590][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.780535][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.799356][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.802239][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.967280][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.973475][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.042448][ T5870] veth0_vlan: entered promiscuous mode
[   74.049339][ T5870] veth1_vlan: entered promiscuous mode
[   74.097029][ T5870] veth0_macvtap: entered promiscuous mode
[   74.111217][ T5870] veth1_macvtap: entered promiscuous mode
[   74.119041][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.124424][ T5866] veth0_vlan: entered promiscuous mode
[   74.139308][ T5866] veth1_vlan: entered promiscuous mode
[   74.148752][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.163698][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.185061][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.188164][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.195589][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.199177][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.241804][ T5866] veth0_macvtap: entered promiscuous mode
[   74.259831][ T5866] veth1_macvtap: entered promiscuous mode
[   74.281107][ T5874] veth0_vlan: entered promiscuous mode
[   74.299709][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.309996][ T5874] veth1_vlan: entered promiscuous mode
[   74.327238][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.345583][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.348247][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.351367][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.354083][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.388194][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.396340][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.456141][ T5874] veth0_macvtap: entered promiscuous mode
[   74.465608][ T5874] veth1_macvtap: entered promiscuous mode
[   74.472916][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.475385][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.512378][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.515589][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.547429][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.549902][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.552724][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.568830][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.584032][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.586769][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.589400][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.591511][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.595059][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.729823][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.733569][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.800995][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.804010][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.400117][ T5977] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   75.554639][ T5873] Bluetooth: hci0: command tx timeout
[   75.557003][ T5873] Bluetooth: hci1: command tx timeout
[   75.559312][ T5868] Bluetooth: hci2: command tx timeout
[   75.657952][ T5987] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.47'.
[   75.758750][ T5994] netlink: 'syz.2.52': attribute type 12 has an invalid length.
[   75.848190][ T6001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'.
[   76.108587][ T6025] netlink: 'syz.2.66': attribute type 2 has an invalid length.
[   76.166582][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'.
[   76.894521][ T6105] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.103'.
[   77.052213][ T6119] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   77.165074][ T6127] warning: `syz.0.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.180621][ T6126] pim6reg1: entered allmulticast mode
[   77.213617][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.223354][ T6129] bond0: (slave rose0): Enslaving as an active interface with an up link
[   77.623557][ T5868] Bluetooth: hci2: command tx timeout
[   77.625805][ T5868] Bluetooth: hci1: command tx timeout
[   77.628188][ T5873] Bluetooth: hci0: command tx timeout
[   78.348861][ T6192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   78.351772][ T6195] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[   78.355537][ T6195] netlink: 180 bytes leftover after parsing attributes in process `syz.0.138'.
[   78.903718][ T6228] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[   79.134920][ T6248] syzkaller1: entered promiscuous mode
[   79.137296][ T6248] syzkaller1: entered allmulticast mode
[   79.174596][ T6252] syz.1.159 uses obsolete (PF_INET,SOCK_PACKET)
[   79.306856][ T6260] netlink: 'syz.1.162': attribute type 17 has an invalid length.
[   79.312384][ T6260] netlink: 2 bytes leftover after parsing attributes in process `syz.1.162'.
[   79.321582][ T6260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.531540][ T6273] tun0: tun_chr_ioctl cmd 1074025675
[   79.533334][ T6273] tun0: persist enabled
[   79.538930][ T6273] tun0: tun_chr_ioctl cmd 1074025675
[   79.543975][ T6273] tun0: persist enabled
[   79.646689][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[   79.649570][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[   79.655932][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[   79.660622][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[   79.711108][ T5873] Bluetooth: hci0: command tx timeout
[   79.713417][ T5873] Bluetooth: hci1: command tx timeout
[   79.715666][ T5873] Bluetooth: hci2: command tx timeout
[   79.904988][ T6296] trusted_key: syz.1.176 sent an empty control message without MSG_MORE.
[   80.067343][ T6304] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.089993][ T6306] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.372853][ T6329] netlink: 'syz.1.192': attribute type 10 has an invalid length.
[   81.089765][ T6362] __nla_validate_parse: 5 callbacks suppressed
[   81.089781][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   81.147149][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'.
[   81.543043][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[   81.547714][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'.
[   81.565292][ T6396] gtp0: entered promiscuous mode
[   81.567099][ T6396] gtp0: entered allmulticast mode
[   81.569038][ T6395] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   81.588997][ T6395] netlink: 172 bytes leftover after parsing attributes in process `syz.0.220'.
[   81.595285][ T6395] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   81.745509][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.227'.
[   81.771132][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'.
[   81.781964][ T6411] syz.1.226 (6411) used greatest stack depth: 19728 bytes left
[   81.823395][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'.
[   81.928333][ T6432] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   82.308457][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   82.423500][ T6470] Bluetooth: MGMT ver 1.23
[   82.467718][ T6476] netlink: 'syz.1.256': attribute type 4 has an invalid length.
[   82.479562][ T6476] netlink: 'syz.1.256': attribute type 4 has an invalid length.
[   82.921302][ T6507] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.924461][ T6507] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.927296][ T6507] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.930050][ T6507] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.935599][ T6507] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[   83.037864][   T10] cfg80211: failed to load regulatory.db
[   83.404348][ T6523] netlink: 'syz.2.278': attribute type 1 has an invalid length.
[   83.406902][ T6523] netlink: 112 bytes leftover after parsing attributes in process `syz.2.278'.
[   84.049449][ T6557] netlink: 'syz.2.295': attribute type 153 has an invalid length.
[   84.206158][ T6564] syzkaller0: entered promiscuous mode
[   84.214377][ T6564] syzkaller0: entered allmulticast mode
[   84.695896][ T6580] TCP: TCP_TX_DELAY enabled
[   86.206957][ T6598] __nla_validate_parse: 2 callbacks suppressed
[   86.206972][ T6598] netlink: 272 bytes leftover after parsing attributes in process `syz.2.311'.
[   86.823405][ T6665] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   87.013382][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'.
[   87.909307][ T6754] netlink: 176 bytes leftover after parsing attributes in process `syz.2.388'.
[   88.497312][ T6806] nbd: must specify an index to disconnect
[   88.519249][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'.
[   88.525838][ T6807] smc: net device bond0 applied user defined pnetid S
[   88.632868][ T6816] netlink: 'syz.1.405': attribute type 4 has an invalid length.
[   89.292879][ T6851] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   89.516229][ T6820] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   89.627302][ T6873] sctp: [Deprecated]: syz.0.430 (pid 6873) Use of int in max_burst socket option deprecated.
[   89.627302][ T6873] Use struct sctp_assoc_value instead
[   90.232609][ T6894] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[   90.505408][ T6905] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[   90.508579][ T6902] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   90.646784][ T6915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.651636][ T6915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.852180][ T6915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.856328][ T6915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.000909][ T6915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.005163][ T6915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.094229][ T6915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.100323][ T6915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.221349][ T6915] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.224561][ T6915] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.242337][ T6915] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.245409][ T6915] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.262703][ T6915] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.265943][ T6915] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.278964][ T6915] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.282449][ T6915] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.424164][ T6943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.505605][ T6946] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   91.544210][ T6948] netlink: 104 bytes leftover after parsing attributes in process `syz.2.462'.
[   91.663503][ T6958] unsupported nlmsg_type 40
[   91.874376][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'.
[   91.939200][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[   92.676545][ T7022] bridge0: entered promiscuous mode
[   92.678854][ T7022] macsec1: entered promiscuous mode
[   92.682624][ T7022] bridge0: port 3(macsec1) entered blocking state
[   92.685079][ T7022] bridge0: port 3(macsec1) entered disabled state
[   92.687506][ T7022] macsec1: entered allmulticast mode
[   92.689480][ T7022] bridge0: entered allmulticast mode
[   92.696083][ T7022] macsec1: left allmulticast mode
[   92.698592][ T7022] bridge0: left allmulticast mode
[   92.718327][ T7022] bridge0: left promiscuous mode
[   92.997309][ T7032] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   93.209769][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'.
[   93.220903][ T7040] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.237746][ T7040] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   93.362136][ T7048] xt_hashlimit: max too large, truncated to 1048576
[   93.365369][ T7048] xt_hashlimit: overflow, rate too high: 0
[   93.595337][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032404400: rx timeout, send abort
[   93.841394][ T7079] batadv_slave_0: entered promiscuous mode
[   93.849046][ T7078] batadv_slave_0: left promiscuous mode
[   93.904698][ T7083] Driver unsupported XDP return value 0 on prog  (id 96) dev N/A, expect packet loss!
[   94.098575][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032404400: abort rx timeout. Force session deactivation
[   94.273691][ T7105] No such timeout policy "syz0"
[   94.459078][ T7119] Zero length message leads to an empty skb
[   94.913588][ T7153] netem: incorrect ge model size
[   94.915621][ T7153] netem: change failed
[   95.418916][ T7189] smc: net device bond0 erased user defined pnetid S
[   96.375665][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'.
[   96.398120][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'.
[   97.368486][ T7313] netlink: 84 bytes leftover after parsing attributes in process `syz.0.631'.
[   97.371616][ T7313] netlink: 84 bytes leftover after parsing attributes in process `syz.0.631'.
[   97.651602][ T7329] block nbd0: server does not support multiple connections per device.
[   97.657888][ T7329] block nbd0: shutting down sockets
[   97.883113][ T7345] openvswitch: netlink: Missing key (keys=40, expected=80)
[   99.853595][ T7422] Cannot find add_set index 0 as target
[   99.969469][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.686'.
[  100.205057][ T7448] netlink: 'syz.1.694': attribute type 21 has an invalid length.
[  100.528038][ T7474] xt_CT: No such helper "snmp"
[  100.741307][ T7486] netlink: 'syz.1.712': attribute type 21 has an invalid length.
[  100.745776][ T7486] netlink: 'syz.1.712': attribute type 22 has an invalid length.
[  100.749061][ T7486] netlink: 'syz.1.712': attribute type 23 has an invalid length.
[  100.753496][ T7486] netlink: 'syz.1.712': attribute type 25 has an invalid length.
[  100.756717][ T7486] netlink: 'syz.1.712': attribute type 26 has an invalid length.
[  100.759844][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'.
[  100.946574][ T7498] wireguard0: entered promiscuous mode
[  100.948903][ T7498] wireguard0: entered allmulticast mode
[  101.374753][ T7515] ip6erspan0: entered allmulticast mode
[  101.489369][   T10] IPVS: starting estimator thread 0...
[  101.519442][ T7519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.590474][ T7520] IPVS: using max 61 ests per chain, 146400 per kthread
[  101.884932][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[  101.887858][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[  101.891389][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[  101.894584][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[  101.898407][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[  101.902886][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[  103.624545][  T323] wlan0: Trigger new scan to find an IBSS to join
[  104.371672][ T7580] netlink: 'syz.2.748': attribute type 3 has an invalid length.
[  104.375248][ T7580] __nla_validate_parse: 44 callbacks suppressed
[  104.375262][ T7580] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.748'.
[  104.408473][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'.
[  104.625660][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'.
[  104.746882][ T7613] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.751501][ T7613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.753969][ T7613] IPv6: NLM_F_CREATE should be set when creating new route
[  104.873760][ T7622] pim6reg: entered allmulticast mode
[  105.074222][ T7630] netlink: 'syz.1.773': attribute type 3 has an invalid length.
[  105.077190][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'.
[  105.082956][ T7630] netlink: 'syz.1.773': attribute type 3 has an invalid length.
[  105.086662][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'.
[  105.206573][ T7634] netlink: 'syz.1.775': attribute type 4 has an invalid length.
[  105.322573][ T7640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.395127][ T7646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.475235][ T7652] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  105.526690][ T7656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.786'.
[  105.750392][ T7678] netlink: 64 bytes leftover after parsing attributes in process `syz.1.794'.
[  106.050402][ T7689] dummy0: entered promiscuous mode
[  106.055329][ T7689] dummy0: left promiscuous mode
[  106.660745][  T323] wlan0: Trigger new scan to find an IBSS to join
[  106.888896][ T7706] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  106.976309][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'.
[  107.012447][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'.
[  107.022338][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'.
[  107.231965][ T7724] syzkaller0: entered promiscuous mode
[  107.234840][ T7724] syzkaller0: entered allmulticast mode
[  108.212748][ T7758] netlink: 'syz.1.824': attribute type 2 has an invalid length.
[  108.625059][ T7785] netlink: 'syz.1.831': attribute type 1 has an invalid length.
[  108.628188][ T7785] netlink: 'syz.1.831': attribute type 1 has an invalid length.
[  108.683401][ T7789] syz_tun: entered allmulticast mode
[  108.709467][ T7787] syz_tun: left allmulticast mode
[  109.032180][ T7808] syzkaller0: entered promiscuous mode
[  109.036011][ T7808] syzkaller0: entered allmulticast mode
[  109.588596][ T7826] __nla_validate_parse: 5 callbacks suppressed
[  109.588617][ T7826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.848'.
[  109.768619][ T7832] pim6reg1: entered promiscuous mode
[  109.775345][ T7832] pim6reg1: entered allmulticast mode
[  111.552476][ T7863] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.862'.
[  111.802442][ T7882] IPVS: length: 163 != 8
[  111.948480][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.878'.
[  112.325440][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.886'.
[  112.693766][ T7934] openvswitch: netlink: Missing key (keys=40, expected=80)
[  112.726401][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'.
[  112.729644][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'.
[  113.060589][ T7952] nbd0: detected capacity change from 0 to 127
[  113.063720][ T7955] block nbd0: NBD_DISCONNECT
[  113.068146][ T7955] block nbd0: Disconnected due to user request.
[  113.073246][ T7955] block nbd0: shutting down sockets
[  113.093948][ T7957] netlink: 6 bytes leftover after parsing attributes in process `syz.1.906'.
[  113.539822][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'.
[  114.420871][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.933'.
[  114.763846][ T8028] netlink: 'syz.1.939': attribute type 11 has an invalid length.
[  114.766888][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.939'.
[  115.118937][ T8051] 8021q: VLANs not supported on wg0
[  115.400766][ T8072] tipc: Started in network mode
[  115.404385][ T8072] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  115.407328][ T8072] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  115.627652][ T8093] netlink: 3 bytes leftover after parsing attributes in process `syz.1.970'.
[  115.638537][ T8093] batadv1: entered promiscuous mode
[  115.645010][ T8093] batadv1: entered allmulticast mode
[  115.803053][ T8093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.970'.
[  116.502055][ T8140] netlink: 'syz.0.990': attribute type 3 has an invalid length.
[  116.521399][ T5934] tipc: Node number set to 10136234
[  117.880492][ T8199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.365815][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  118.369453][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  119.028181][ T8252] bridge0: port 3(vxlan0) entered blocking state
[  119.035820][ T8252] bridge0: port 3(vxlan0) entered disabled state
[  119.045012][ T8252] vxlan0: entered allmulticast mode
[  119.052477][ T8252] vxlan0: entered promiscuous mode
[  119.203764][ T8255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.217255][ T8263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1039'.
[  119.320847][ T8255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.413541][ T8255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.494148][ T8255] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.553533][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'.
[  119.618551][ T8255] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.632283][ T8255] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.645969][ T8255] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.663052][ T8255] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.023946][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'.
[  120.071594][ T8312] ip6t_srh: unknown srh match flags  4000
[  120.265742][ T8328] netlink: 'syz.0.1072': attribute type 11 has an invalid length.
[  120.269253][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'.
[  120.567237][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'.
[  120.571271][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'.
[  120.639829][ T8366] netlink: 'syz.1.1090': attribute type 1 has an invalid length.
[  120.643314][ T8366] netlink: 'syz.1.1090': attribute type 3 has an invalid length.
[  120.646273][ T8366] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1090'.
[  120.649680][ T8366] NCSI netlink: No device for ifindex 246
[  120.662445][ T5873] Bluetooth: hci2: command 0x0405 tx timeout
[  121.724547][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'.
[  122.098507][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'.
[  122.102905][ T8425] pim6reg: left allmulticast mode
[  122.215922][ T8432] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1119'.
[  122.218939][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'.
[  122.222096][ T8432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1119'.
[  123.304875][ T8480] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  123.314388][ T8480] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  123.317510][ T8480] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  123.337793][ T8480] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  123.347583][ T8480] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  123.351513][ T8480] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  123.354483][ T8480] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  123.608234][ T8492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.562328][ T8515] xt_bpf: check failed: parse error
[  125.420071][ T8524] openvswitch: netlink: IPv4 tun info is not correct
[  125.686077][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.689172][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.782403][ T8542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.805992][ T8542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.848880][ T8542] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.858583][ T8542] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.863175][ T8542] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.867309][ T8542] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.906084][ T8542] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  125.924529][ T8555] veth1_to_bond: entered allmulticast mode
[  125.936433][ T8555] bond_slave_1: entered promiscuous mode
[  125.939394][ T8554] bond_slave_1: left promiscuous mode
[  125.944233][ T8554] veth1_to_bond: left allmulticast mode
[  126.075207][ T8565] __nla_validate_parse: 1 callbacks suppressed
[  126.075222][ T8565] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1177'.
[  126.316178][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1185'.
[  126.319338][ T8582] validate_nla: 42 callbacks suppressed
[  126.319373][ T8582] netlink: 'syz.1.1185': attribute type 1 has an invalid length.
[  126.340371][ T8582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1185'.
[  126.428377][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'.
[  126.599280][ T8606] xt_TCPMSS: Only works on TCP SYN packets
[  126.783242][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'.
[  126.969901][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'.
[  127.256461][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1212'.
[  127.352516][ T8646] tipc: Started in network mode
[  127.354172][ T8646] tipc: Node identity ac1414aa, cluster identity 4711
[  127.357708][ T8646] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.362747][ T8646] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  127.392489][ T8648] netlink: 'syz.0.1216': attribute type 10 has an invalid length.
[  127.503719][ T8662] netlink: 'syz.1.1222': attribute type 2 has an invalid length.
[  127.834931][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'.
[  127.837767][ T8702] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1244'.
[  127.965846][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'.
[  128.099798][ T8732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.158189][ T8734] pimreg: entered allmulticast mode
[  128.200965][ T8734] pimreg: left allmulticast mode
[  128.274187][ T8744] syzkaller1: entered promiscuous mode
[  128.276105][ T8744] syzkaller1: entered allmulticast mode
[  128.491468][ T1270] tipc: Node number set to 2886997162
[  130.627026][ T8864] netlink: 'syz.2.1315': attribute type 10 has an invalid length.
[  130.636459][ T8864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.649148][ T8864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.656934][ T8864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.663239][ T8864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.675919][ T8864] team0: Port device geneve0 added
[  131.969141][ T8944] syzkaller1: entered promiscuous mode
[  131.980409][ T8944] syzkaller1: entered allmulticast mode
[  132.082946][ T5727] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.086926][ T5727] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.152535][ T5727] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.155878][ T5727] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.214798][ T5727] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.220396][ T5727] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.252187][ T8955] __nla_validate_parse: 5 callbacks suppressed
[  132.252197][ T8955] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1354'.
[  132.284130][ T8955] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1354'.
[  132.289164][ T5727] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.300283][ T5727] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.348871][ T8959] veth3: entered promiscuous mode
[  132.442330][ T5727] bridge_slave_1: left allmulticast mode
[  132.444428][ T5727] bridge_slave_1: left promiscuous mode
[  132.447593][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.472261][ T5727] bridge_slave_0: left allmulticast mode
[  132.474419][ T5727] bridge_slave_0: left promiscuous mode
[  132.476702][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.488242][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.495668][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.499280][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.506205][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.510501][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.583290][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.743082][ T5727] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  132.970712][ T5727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.978370][ T5727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.985009][ T5727] bond0 (unregistering): Released all slaves
[  133.064169][ T5727] tipc: Disabling bearer <eth:ipvlan1>
[  133.079065][ T5727] tipc: Left network mode
[  133.128499][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'.
[  133.258680][ T8968] chnl_net:caif_netlink_parms(): no params data found
[  133.442226][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.445123][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.449581][ T8968] bridge_slave_0: entered allmulticast mode
[  133.460610][ T8968] bridge_slave_0: entered promiscuous mode
[  133.464663][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.466858][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.470018][ T8968] bridge_slave_1: entered allmulticast mode
[  133.475076][ T8968] bridge_slave_1: entered promiscuous mode
[  133.553542][ T5727] hsr_slave_0: left promiscuous mode
[  133.565426][ T9016] xt_hashlimit: size too large, truncated to 1048576
[  133.572724][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'.
[  133.576368][ T5727] hsr_slave_1: left promiscuous mode
[  133.595265][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.597725][ T5727] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.609921][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.619907][ T5727] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.637985][ T9020] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1379'.
[  133.666504][ T5727] veth1_macvtap: left promiscuous mode
[  133.669059][ T5727] veth0_macvtap: left promiscuous mode
[  133.680948][ T5727] veth1_vlan: left promiscuous mode
[  133.683891][ T5727] veth0_vlan: left promiscuous mode
[  134.204922][ T5727] team0 (unregistering): Port device team_slave_1 removed
[  134.236294][ T5727] team0 (unregistering): Port device team_slave_0 removed
[  134.592029][   T55] Bluetooth: hci0: command tx timeout
[  134.602612][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.729944][ T9020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.735703][ T9020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.743009][ T9020] bond0 (unregistering): Released all slaves
[  134.762144][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.833249][ T8968] team0: Port device team_slave_0 added
[  134.837230][ T8968] team0: Port device team_slave_1 added
[  134.907647][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.911574][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.923086][ T8968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.947670][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.951073][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.959418][ T8968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.014359][ T8968] hsr_slave_0: entered promiscuous mode
[  135.017243][ T8968] hsr_slave_1: entered promiscuous mode
[  135.389975][ T9049] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1393'.
[  135.393924][ T9049] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1393'.
[  135.397516][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1393'.
[  135.433220][ T8968] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  135.444101][ T8968] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  135.456908][ T8968] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  135.464095][ T8968] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  135.514379][ T9062] netlink: 'syz.0.1394': attribute type 10 has an invalid length.
[  135.542088][ T9062] team0: Port device dummy0 added
[  135.559770][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.588954][ T8968] 8021q: adding VLAN 0 to HW filter on device team0
[  135.599764][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.602120][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.614297][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.616754][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.692514][ T8968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.784182][ T9073] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  135.924293][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.000650][ T8968] veth0_vlan: entered promiscuous mode
[  136.015475][ T8968] veth1_vlan: entered promiscuous mode
[  136.054864][ T9090] dummy0: entered promiscuous mode
[  136.057191][ T9090] vlan2: entered promiscuous mode
[  136.104730][ T8968] veth0_macvtap: entered promiscuous mode
[  136.114816][ T8968] veth1_macvtap: entered promiscuous mode
[  136.126737][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.136728][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.153460][ T8968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.159722][ T8968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.181060][ T8968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.184558][ T8968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.193408][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'.
[  136.330015][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.338705][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.375822][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.381364][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.680100][ T9120] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1423'.
[  136.730453][ T9122] openvswitch: netlink: Message has 20 unknown bytes.
[  136.733608][ T9122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.928909][ T9132] netlink: 'syz.2.1429': attribute type 1 has an invalid length.
[  137.308102][ T9149] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1437'.
[  137.311088][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'.
[  137.473342][ T9162] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1442'.
[  137.634641][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'.
[  137.926282][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'.
[  138.257367][ T5884] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.617734][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.622289][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.625289][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.631529][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.634328][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.854220][ T9215] chnl_net:caif_netlink_parms(): no params data found
[  138.950130][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.954790][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.958504][ T9215] bridge_slave_0: entered allmulticast mode
[  138.963055][ T9215] bridge_slave_0: entered promiscuous mode
[  138.968246][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.971461][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.974063][ T9215] bridge_slave_1: entered allmulticast mode
[  138.977142][ T9215] bridge_slave_1: entered promiscuous mode
[  139.035774][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.047885][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.100929][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'.
[  139.113369][ T9242] vxlan0: left allmulticast mode
[  139.113807][ T9244] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1476'.
[  139.115375][ T9242] vxlan0: left promiscuous mode
[  139.115641][ T9242] bridge0: port 3(vxlan0) entered disabled state
[  139.128442][ T9242] bridge_slave_1: left allmulticast mode
[  139.133239][ T9242] bridge_slave_1: left promiscuous mode
[  139.135791][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.142884][ T9242] bridge_slave_0: left allmulticast mode
[  139.145201][ T9242] bridge_slave_0: left promiscuous mode
[  139.147647][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.223731][ T9215] team0: Port device team_slave_0 added
[  139.242360][ T9215] team0: Port device team_slave_1 added
[  139.276481][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.278696][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.295833][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.303585][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.306168][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.319150][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.369043][ T9215] hsr_slave_0: entered promiscuous mode
[  139.373535][ T9215] hsr_slave_1: entered promiscuous mode
[  139.375997][ T9215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.378502][ T9215] Cannot create hsr debugfs directory
[  139.544695][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1481'.
[  139.548069][ T9254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1481'.
[  139.561549][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1484'.
[  139.661718][ T9273] wg1 speed is unknown, defaulting to 1000
[  139.663800][ T9273] wg1 speed is unknown, defaulting to 1000
[  139.665958][ T9273] wg1 speed is unknown, defaulting to 1000
[  139.675049][ T9273] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  139.688859][ T9273] wg1 speed is unknown, defaulting to 1000
[  139.692731][ T9273] wg1 speed is unknown, defaulting to 1000
[  139.695428][ T9273] wg1 speed is unknown, defaulting to 1000
[  139.698015][ T9273] wg1 speed is unknown, defaulting to 1000
[  139.789726][ T9286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.923454][ T5884] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.015205][ T5884] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.077027][ T9304] netlink: 'syz.0.1505': attribute type 13 has an invalid length.
[  140.082678][ T5884] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.091301][ T9304] netlink: 'syz.0.1505': attribute type 17 has an invalid length.
[  140.135190][ T9304] 
[  140.136024][ T9304] ======================================================
[  140.138219][ T9304] WARNING: possible circular locking dependency detected
[  140.140388][ T9304] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  140.142892][ T9304] ------------------------------------------------------
[  140.145812][ T9304] syz.0.1505/9304 is trying to acquire lock:
[  140.147663][ T9304] ffff888030fb0e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[  140.151128][ T9304] 
[  140.151128][ T9304] but task is already holding lock:
[  140.153642][ T9304] ffff88803113cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  140.157301][ T9304] 
[  140.157301][ T9304] which lock already depends on the new lock.
[  140.157301][ T9304] 
[  140.160579][ T9304] 
[  140.160579][ T9304] the existing dependency chain (in reverse order) is:
[  140.163409][ T9304] 
[  140.163409][ T9304] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  140.166460][ T9304]        lock_acquire+0x120/0x360
[  140.168472][ T9304]        __mutex_lock+0x182/0xe80
[  140.170410][ T9304]        dev_set_mtu+0x10e/0x260
[  140.172304][ T9304]        team_add_slave+0x8b8/0x2840
[  140.174027][ T9304]        do_set_master+0x533/0x6d0
[  140.175864][ T9304]        do_setlink+0xcf0/0x41c0
[  140.177477][ T9304]        rtnl_newlink+0x160b/0x1c70
[  140.179469][ T9304]        rtnetlink_rcv_msg+0x7cf/0xb70
[  140.181283][ T9304]        netlink_rcv_skb+0x208/0x470
[  140.183231][ T9304]        netlink_unicast+0x75c/0x8e0
[  140.185027][ T9304]        netlink_sendmsg+0x805/0xb30
[  140.186789][ T9304]        __sock_sendmsg+0x21c/0x270
[  140.188479][ T9304]        ____sys_sendmsg+0x505/0x830
[  140.190418][ T9304]        ___sys_sendmsg+0x21f/0x2a0
[  140.192226][ T9304]        __x64_sys_sendmsg+0x19b/0x260
[  140.193987][ T9304]        do_syscall_64+0xfa/0x3b0
[  140.195804][ T9304]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.198025][ T9304] 
[  140.198025][ T9304] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  140.200889][ T9304]        validate_chain+0xb9b/0x2140
[  140.202634][ T9304]        __lock_acquire+0xab9/0xd20
[  140.204336][ T9304]        lock_acquire+0x120/0x360
[  140.206006][ T9304]        __mutex_lock+0x182/0xe80
[  140.207590][ T9304]        team_device_event+0x544/0xa20
[  140.209331][ T9304]        notifier_call_chain+0x1b6/0x3e0
[  140.211154][ T9304]        __dev_notify_flags+0x21b/0x2e0
[  140.212900][ T9304]        netif_change_flags+0xe8/0x1a0
[  140.214717][ T9304]        do_setlink+0xc55/0x41c0
[  140.216356][ T9304]        rtnl_newlink+0x149f/0x1c70
[  140.218049][ T9304]        rtnetlink_rcv_msg+0x7cf/0xb70
[  140.219816][ T9304]        netlink_rcv_skb+0x208/0x470
[  140.221551][ T9304]        netlink_unicast+0x75c/0x8e0
[  140.223182][ T9304]        netlink_sendmsg+0x805/0xb30
[  140.224898][ T9304]        __sock_sendmsg+0x21c/0x270
[  140.226625][ T9304]        ____sys_sendmsg+0x505/0x830
[  140.228377][ T9304]        ___sys_sendmsg+0x21f/0x2a0
[  140.229939][ T9304]        __x64_sys_sendmsg+0x19b/0x260
[  140.231818][ T9304]        do_syscall_64+0xfa/0x3b0
[  140.233398][ T9304]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.235360][ T9304] 
[  140.235360][ T9304] other info that might help us debug this:
[  140.235360][ T9304] 
[  140.238706][ T9304]  Possible unsafe locking scenario:
[  140.238706][ T9304] 
[  140.241556][ T9304]        CPU0                    CPU1
[  140.243480][ T9304]        ----                    ----
[  140.245417][ T9304]   lock(&dev_instance_lock_key#3);
[  140.247275][ T9304]                                lock(team->team_lock_key#3);
[  140.249759][ T9304]                                lock(&dev_instance_lock_key#3);
[  140.252466][ T9304]   lock(team->team_lock_key#3);
[  140.254152][ T9304] 
[  140.254152][ T9304]  *** DEADLOCK ***
[  140.254152][ T9304] 
[  140.257022][ T9304] 2 locks held by syz.0.1505/9304:
[  140.258885][ T9304]  #0: ffffffff8f51da88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  140.261559][ T9304]  #1: ffff88803113cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  140.264642][ T9304] 
[  140.264642][ T9304] stack backtrace:
[  140.266436][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.0.1505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  140.266448][ T9304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.266456][ T9304] Call Trace:
[  140.266461][ T9304]  <TASK>
[  140.266469][ T9304]  dump_stack_lvl+0x189/0x250
[  140.266498][ T9304]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.266509][ T9304]  ? __pfx__printk+0x10/0x10
[  140.266523][ T9304]  ? print_lock_name+0xde/0x100
[  140.266533][ T9304]  print_circular_bug+0x2ee/0x310
[  140.266545][ T9304]  check_noncircular+0x134/0x160
[  140.266558][ T9304]  validate_chain+0xb9b/0x2140
[  140.266573][ T9304]  __lock_acquire+0xab9/0xd20
[  140.266581][ T9304]  ? team_device_event+0x544/0xa20
[  140.266592][ T9304]  lock_acquire+0x120/0x360
[  140.266599][ T9304]  ? team_device_event+0x544/0xa20
[  140.266613][ T9304]  __mutex_lock+0x182/0xe80
[  140.266622][ T9304]  ? team_device_event+0x544/0xa20
[  140.266633][ T9304]  ? __lock_acquire+0xab9/0xd20
[  140.266640][ T9304]  ? team_device_event+0x544/0xa20
[  140.266650][ T9304]  ? fib_rebalance+0x8e/0x9a0
[  140.266660][ T9304]  ? __pfx___mutex_lock+0x10/0x10
[  140.266669][ T9304]  ? fib_sync_up+0x76d/0x7b0
[  140.266680][ T9304]  team_device_event+0x544/0xa20
[  140.266692][ T9304]  notifier_call_chain+0x1b6/0x3e0
[  140.266706][ T9304]  __dev_notify_flags+0x21b/0x2e0
[  140.266716][ T9304]  ? __pfx___dev_notify_flags+0x10/0x10
[  140.266726][ T9304]  ? __dev_change_flags+0x4cc/0x6d0
[  140.266737][ T9304]  ? netif_state_change+0x29e/0x3a0
[  140.266750][ T9304]  netif_change_flags+0xe8/0x1a0
[  140.266765][ T9304]  do_setlink+0xc55/0x41c0
[  140.266782][ T9304]  ? trace_sched_exit_tp+0x38/0x120
[  140.266795][ T9304]  ? __pfx_do_setlink+0x10/0x10
[  140.266815][ T9304]  ? __lock_acquire+0xab9/0xd20
[  140.266833][ T9304]  ? do_raw_spin_lock+0x121/0x290
[  140.266853][ T9304]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  140.266872][ T9304]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.266893][ T9304]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.266911][ T9304]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.266931][ T9304]  ? rcu_is_watching+0x15/0xb0
[  140.266949][ T9304]  ? __mutex_lock+0xa6d/0xe80
[  140.266956][ T9304]  ? __mutex_lock+0x51b/0xe80
[  140.266964][ T9304]  ? rtnl_newlink+0x8db/0x1c70
[  140.266973][ T9304]  ? __pfx___mutex_lock+0x10/0x10
[  140.266982][ T9304]  ? ns_capable+0x8a/0xf0
[  140.266992][ T9304]  ? rtnl_link_get_net_capable+0x16a/0x350
[  140.267001][ T9304]  rtnl_newlink+0x149f/0x1c70
[  140.267009][ T9304]  ? netlink_sendmsg+0x805/0xb30
[  140.267022][ T9304]  ? __pfx_rtnl_newlink+0x10/0x10
[  140.267034][ T9304]  ? kasan_quarantine_put+0xdd/0x220
[  140.267044][ T9304]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.267057][ T9304]  ? nlmon_xmit+0xb0/0x100
[  140.267065][ T9304]  ? kmem_cache_free+0x18f/0x400
[  140.267077][ T9304]  ? __local_bh_enable_ip+0x12d/0x1c0
[  140.267088][ T9304]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.267099][ T9304]  ? __local_bh_enable_ip+0x12d/0x1c0
[  140.267108][ T9304]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  140.267117][ T9304]  ? __dev_queue_xmit+0x27e/0x3a70
[  140.267130][ T9304]  ? __lock_acquire+0xab9/0xd20
[  140.267142][ T9304]  ? __pfx_rtnl_newlink+0x10/0x10
[  140.267150][ T9304]  rtnetlink_rcv_msg+0x7cf/0xb70
[  140.267159][ T9304]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  140.267166][ T9304]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  140.267174][ T9304]  ? ref_tracker_free+0x63a/0x7d0
[  140.267187][ T9304]  ? __copy_skb_header+0xa7/0x550
[  140.267199][ T9304]  ? __pfx_ref_tracker_free+0x10/0x10
[  140.267212][ T9304]  netlink_rcv_skb+0x208/0x470
[  140.267221][ T9304]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  140.267230][ T9304]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  140.267267][ T9304]  ? netlink_deliver_tap+0x2e/0x1b0
[  140.267277][ T9304]  ? netlink_deliver_tap+0x2e/0x1b0
[  140.267287][ T9304]  netlink_unicast+0x75c/0x8e0
[  140.267297][ T9304]  netlink_sendmsg+0x805/0xb30
[  140.267314][ T9304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.267323][ T9304]  ? aa_sock_msg_perm+0x94/0x160
[  140.267338][ T9304]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  140.267352][ T9304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.267361][ T9304]  __sock_sendmsg+0x21c/0x270
[  140.267369][ T9304]  ____sys_sendmsg+0x505/0x830
[  140.267380][ T9304]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.267391][ T9304]  ? import_iovec+0x74/0xa0
[  140.267402][ T9304]  ___sys_sendmsg+0x21f/0x2a0
[  140.267413][ T9304]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.267429][ T9304]  ? __fget_files+0x2a/0x420
[  140.267442][ T9304]  ? __fget_files+0x3a0/0x420
[  140.267453][ T9304]  __x64_sys_sendmsg+0x19b/0x260
[  140.267463][ T9304]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  140.267475][ T9304]  ? rcu_is_watching+0x15/0xb0
[  140.267484][ T9304]  ? do_syscall_64+0xbe/0x3b0
[  140.267493][ T9304]  do_syscall_64+0xfa/0x3b0
[  140.267500][ T9304]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.267511][ T9304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.267518][ T9304]  ? exc_page_fault+0x9f/0xf0
[  140.267529][ T9304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.267537][ T9304] RIP: 0033:0x7f6c8ad8e929
[  140.267548][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.267557][ T9304] RSP: 002b:00007f6c8bb33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.267567][ T9304] RAX: ffffffffffffffda RBX: 00007f6c8afb5fa0 RCX: 00007f6c8ad8e929
[  140.267572][ T9304] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008
[  140.267577][ T9304] RBP: 00007f6c8ae10b39 R08: 0000000000000000 R09: 0000000000000000
[  140.267582][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.267586][ T9304] R13: 0000000000000000 R14: 00007f6c8afb5fa0 R15: 00007ffca030fdf8
[  140.267595][ T9304]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  140.466598][ T9304] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  140.469415][ T9304] caif:caif_disconnect_client(): nothing to disconnect
[  140.481752][ T9304] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  140.484405][ T9304] chnl_net:chnl_net_open(): state disconnected
[  140.486252][ T9304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.507650][ T5884] bridge_slave_1: left allmulticast mode
[  140.509462][ T5884] bridge_slave_1: left promiscuous mode
[  140.513091][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.517192][ T5884] bridge_slave_0: left allmulticast mode
[  140.518928][ T5884] bridge_slave_0: left promiscuous mode
[  140.521942][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.630085][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.635893][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.639750][ T5884] bond0 (unregistering): Released all slaves
[  140.661161][   T55] Bluetooth: hci0: command tx timeout
[  140.891250][ T5884] hsr_slave_0: left promiscuous mode
[  140.901017][ T5884] hsr_slave_1: left promiscuous mode
[  140.903441][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.905780][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.920135][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.923477][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.934293][ T5884] veth1_macvtap: left promiscuous mode
[  140.936630][ T5884] veth0_macvtap: left promiscuous mode
[  140.938884][ T5884] veth1_vlan: left promiscuous mode
[  140.941325][ T5884] veth0_vlan: left promiscuous mode
[  141.146760][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  141.179005][ T5884] team0 (unregistering): Port device team_slave_0 removed
[  141.731816][ T5884] bridge_slave_1: left allmulticast mode
[  141.734042][ T5884] bridge_slave_1: left promiscuous mode
[  141.736320][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.739827][ T5884] bridge_slave_0: left allmulticast mode
[  141.742323][ T5884] bridge_slave_0: left promiscuous mode
[  141.744510][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.830801][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.834408][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.837959][ T5884] bond0 (unregistering): Released all slaves
[  141.893315][ T5884] hsr_slave_0: left promiscuous mode
[  141.895789][ T5884] hsr_slave_1: left promiscuous mode
[  141.897858][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.901006][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.975884][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  141.993833][ T5884] team0 (unregistering): Port device team_slave_0 removed
[  143.144243][ T5934] wg1 speed is unknown, defaulting to 1000
[  143.146154][ T5934] syz0: Port: 1 Link DOWN
[  143.149034][ T5884] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.213930][ T5884] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.254253][ T5884] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.294460][ T5884] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.348140][ T5884] bridge_slave_1: left allmulticast mode
[  143.350831][ T5884] bridge_slave_1: left promiscuous mode
[  143.352660][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.356897][ T5884] bridge_slave_0: left allmulticast mode
[  143.358852][ T5884] bridge_slave_0: left promiscuous mode
[  143.361106][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.740386][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.745220][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.749749][ T5884] bond0 (unregistering): Released all slaves
[  143.756838][ T5884] bond1 (unregistering): Released all slaves
[  144.036479][ T5884] hsr_slave_0: left promiscuous mode
[  144.039226][ T5884] hsr_slave_1: left promiscuous mode
[  144.042137][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.045153][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.048729][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.051995][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.058321][ T5884] veth1_macvtap: left promiscuous mode
[  144.061062][ T5884] veth0_macvtap: left promiscuous mode
[  144.063769][ T5884] veth1_vlan: left promiscuous mode
[  144.065897][ T5884] veth0_vlan: left promiscuous mode
[  144.218448][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  144.249304][ T5884] team0 (unregistering): Port device team_slave_0 removed
[  144.369409][ T5884] team0 (unregistering): Port device dummy0 removed
[  144.777238][ T5884] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
23:51:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000009 RCX=0000000000000098 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff8880113bab40 RBP=1ffffffff1b77087 RSP=ffffc90007107110
R8 =ffffffff8fa1f5f7 R9 =0000000000000000 R10=ffffed1002240000 R11=fffffbfff1f43ebf
R12=fffa8000113ba000 R13=fffa800000000000 R14=1ffffffff1b77085 R15=0000000000000046
RIP=ffffffff8b6e108b RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6c8bb126c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6c8bb11fc8 CR3=000000010fed2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f18d4411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000005c3be RDI=000000000005c3bf RBP=00000000000003f8 RSP=ffffc9000676df10
R8 =ffff8881071d8237 R9 =1ffff11020e3b046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98a6 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6c8bb336c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3290cff8 CR3=000000010fed2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff823cd57c ffffffff823cd4f4
XMM02=ffffffff894c05d9 ffffffff894c0491 XMM03=ffffffff823ce044 ffffffff823cdedd
XMM04=00007f6c8baed100 00007f6c8af85440 XMM05=00007f6c8af85458 00007f6c8af854a0
XMM06=00007f6c8af85498 00007f6c8af85490 XMM07=00007f6c8af85488 00007f6c8af85480
XMM08=07c6a7151ba41403 0912340256624a03 XMM09=0000000000000000 00007f6c8ae11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
