last executing test programs:

2.07005974s ago: executing program 1 (id=3446):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) (async)
shutdown(r0, 0x1) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=<r2=>r1, 0x20, 0x1, 0x5, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40)
getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@newchain={0x104, 0x64, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0x5}, {0xffe0, 0xfffe}, {0x3, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xed52}, @TCA_RATE={0x6, 0x5, {0xe, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x81}, @filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_POLICE={0x84, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x2, 0x1, 0x2, {0xc, 0x0, 0x5, 0xffdb, 0x4}, {0x81, 0x0, 0x9, 0x1, 0x7f, 0x365fd5d0}, 0x10000, 0x705, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x6, 0x101, 0x8, {0x7, 0x3, 0x6, 0x7, 0x7, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x685, 0x5}, 0x8, 0x2, 0x5}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x40}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xab}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x48000}, 0x48045) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000480)={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}]}, 0x18) (async)
r4 = getuid()
sendmsg$nl_xfrm(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@updsa={0x128, 0x1a, 0x800, 0x70bd28, 0x25dfdbff, {{@in=@loopback, @in6=@mcast1, 0x4e24, 0x8, 0x4e21, 0x2, 0x2, 0x20, 0x20, 0x2c, r3, r4}, {@in6=@private0, 0x4d4, 0x3c}, @in6=@loopback, {0x6f5, 0x6, 0x7, 0x6, 0x4, 0x7, 0x9, 0x6}, {0x9, 0x10, 0x9, 0x4d3d}, {0x3, 0x8001, 0xfffffffb}, 0x70bd27, 0x3506, 0x2, 0x1, 0x0, 0x85}, [@lifetime_val={0x24, 0x9, {0x8, 0x6, 0x1, 0x100000001}}, @policy_type={0xa}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2)
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x76c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x64}}, 0x4000000) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000008) (async, rerun: 64)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 64)
r8 = socket$inet(0x2, 0x80000, 0x2) (async)
r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000980)='wg2\x00', 0x4) (async)
r10 = accept(r2, &(0x7f00000009c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000a40)=0x80) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x70}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_SSID={0x16, 0x34, @random="cf82083bb6cc49be2cf238eb6049e7316549"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x5671fed043968966) (async)
bind$alg(r10, &(0x7f0000000c00)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000c80)={<r12=>r1, 0x5, 0x2, 0x5})
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r5)
sendmsg$TIPC_NL_PEER_REMOVE(r12, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xcc, r13, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d3e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x93}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5692d19e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd78}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe54d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4abf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8cd0}, 0x20000041) (async, rerun: 64)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@ifindex=r3, 0x3, 0x0, 0x5, &(0x7f0000000ec0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0], &(0x7f0000000f80)=[0x0], <r14=>0x0}, 0x40) (rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@fallback=r7, r2, 0x30, 0x8, 0x0, @void, @value=r12, @void, @void, r14}, 0x20) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001080)={0x89c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x56, 0x5, 0xf9ee, 0x79c1, 0x7, 0xff, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x401, 0x7, 0x5, 0x0, 0xe, 0x2a, 0x5]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffd, 0x9, 0xff, 0xf, 0x6, 0x1, 0xda]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x0, 0xd6a1, 0xfc01, 0x7, 0xd500, 0x200]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x101, 0x4, 0x6f, 0xf, 0x6, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x6}, {0x7, 0x5}, {0x7, 0x5}, {0x5}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x4}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x5, 0x2}, {0x5, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x3, 0x5}, {}, {0x1, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xcdc0, 0xa91b, 0xd0, 0x101, 0x7ff, 0x5, 0x3]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x8, 0x30, 0x4, 0x6, 0x1b, 0x3, 0x6, 0x12, 0x16, 0xc, 0x36, 0x24, 0xb, 0x36, 0x12, 0x2, 0x48, 0x0, 0x1, 0x1b, 0x24, 0x12, 0x16, 0x1, 0x30, 0x6, 0xc, 0x1b, 0x12, 0x2, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc11f, 0x399, 0xff00, 0x0, 0xfff7, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x6}, {0x2, 0x5}, {0x3, 0x3}, {0x7, 0x5}, {0x3, 0x4}, {0x7, 0x3}, {0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x6}, {0x6}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x1}, {0x7}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x3, 0x16}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x7}, {}, {0x2, 0x3}, {0x2, 0x2}, {0x5}, {0x7, 0x6}, {0x7}, {0x3, 0x7}, {0x2, 0x3}, {0x3, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa2c2, 0x7, 0x4, 0x9, 0x1000, 0x56e, 0x8, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7fa, 0x7, 0x4, 0x2, 0x2, 0x3, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x1, 0x6}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x4}, {0x6}, {0x7, 0x1}, {0x6, 0x4}, {0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x1}, {0x4}, {0x5, 0x4}, {0x6, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x2}, {0x1, 0x2}, {0x5}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x4}, {0x2}, {0x6, 0x5}, {0x1, 0x9}, {0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x4, 0x6, 0x60, 0x12, 0x9, 0x2]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x6c, 0x5, 0x3d, 0x3, 0xc, 0x4, 0x12, 0x1b, 0x71, 0x1b, 0x6, 0x18, 0xc, 0x36, 0x24, 0x36, 0x24, 0x5, 0x6, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0xe1, 0x3, 0x7, 0x9f9, 0x2, 0x2f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xacf, 0x9ab, 0x6, 0xf0, 0x6, 0x5, 0x72a, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x6, 0x3, 0x1, 0x3, 0x5, 0x800]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x300, 0x2, 0x7, 0x7, 0xa59, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x3, 0x48, 0x0, 0x16, 0x9, 0x18, 0x48, 0x24, 0x5, 0x3c, 0xb, 0x1b, 0x16, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x5, 0xff, 0x2, 0x3, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x800, 0x6, 0x9, 0x2, 0x4, 0x4c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x60, 0x2, 0x2, 0x24, 0x24, 0x18, 0x30, 0x48, 0x48, 0x18, 0x6c, 0x6c, 0x36, 0xb, 0x24, 0x1b, 0x36, 0x0, 0x3, 0x36, 0x30, 0x18, 0x24, 0x30, 0x1b]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7f, 0xfffd, 0xe, 0x9, 0x7, 0x0, 0xff21]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0x1}, {0x7, 0x8}, {0x5, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x9}, {0x3, 0x8}, {0x2, 0x9}, {0x2, 0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0x9}, {0x5, 0x8}, {0x7, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x1}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x0, 0xd0, 0x9a41, 0x1, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x314, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x8}, {0x2, 0xa}, {0x6, 0x4}, {0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x1}, {0x3}, {0x5, 0x9}, {}, {0x5, 0x1}, {}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x3}, {0x6}, {0x6, 0x2}, {0x3, 0x3}, {0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x6}, {0x7, 0x2}, {0x6, 0xa}, {0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x7, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x5, 0x2, 0x30, 0x9, 0x7612fbb30279e411]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x7, 0x8}, {0x2, 0x8}, {0x5}, {0x7, 0x2}, {0x7, 0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x4}, {0x5}, {0x7, 0x4}, {0x6}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x7}, {0x7, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x9}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x0, 0xd, 0x7fff, 0x6, 0x7, 0xaa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x7, 0x2, 0x401, 0x4a2, 0x1ff, 0xa9, 0x2]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x3}, {0x1}, {0x5, 0x9}, {0x0, 0xa}, {0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0xa}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x6}, {0x6, 0x3}, {0x3, 0x7}, {0x2, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x4}, {0x4, 0x3}, {0x6, 0x2}, {0x3, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x5, 0x6}, {0x5, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x2, 0x9}, {0x4, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x9}, {0x4, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0xa}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {0x3, 0x7}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x1}, {}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc69, 0xede, 0x8, 0x8, 0x4, 0xe1fb, 0x2]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0xffc0, 0x644, 0x800, 0xb, 0x2, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x81, 0x9, 0x3, 0x9, 0x2, 0x81, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x8}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x2}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x1}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x7, 0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x5, 0x7}, {0x6, 0x4}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x7}, {0x6, 0x2}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4000, 0x4, 0x0, 0x4, 0x4741, 0x7, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x8, 0x1, 0x7, 0xb6, 0x5, 0x5]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x2}, {0x3, 0x7}, {0x5}, {0x5, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x12, 0x60, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x48, 0x24, 0x1, 0x6c, 0x1b, 0x1b, 0xb, 0x60, 0x24, 0xc, 0x60, 0x1b, 0x9, 0xc, 0x36, 0x60, 0x12, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x2, 0xa0d4, 0x3, 0x4, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x2, 0x48, 0x12, 0x36, 0x36, 0x5, 0x6, 0xb, 0x1]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x16, 0x4, 0x18, 0x6, 0x48, 0x2, 0x4, 0x36, 0x30, 0x0, 0x6, 0xb, 0x30, 0x0, 0x4, 0x1, 0x24, 0x30, 0x1, 0xb, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0xd, 0x2, 0x9c36, 0x5, 0xd881, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x5, 0x4fa9, 0x1, 0xcc, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2, 0x1, 0xfa00, 0x7, 0xe596, 0x3, 0x6, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x3, 0x94fd, 0x57c9, 0x2, 0x8001, 0xf6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x8, 0x5, 0x3, 0x7, 0x4, 0x340]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x36, 0x4b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf94b, 0xfff, 0x81, 0x613, 0x6, 0x2d3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x3, 0x0, 0x4d3, 0xba43, 0xea8, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x60, 0x1, 0x60, 0x1b, 0x1, 0x3, 0x9, 0xb, 0x1, 0x6, 0x1b, 0x3, 0x60, 0x3, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x0, 0x401, 0x7, 0x7ff, 0xeaad]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0xf000, 0x3, 0x1, 0x45, 0x2a05, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0xb, 0x9, 0x4, 0x1, 0x3, 0x16, 0x0, 0x2, 0x3, 0x3, 0x5, 0x6c, 0x25, 0x60, 0x24, 0x9, 0x12, 0x9, 0x16, 0x1b, 0x30, 0x4, 0x4, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x9, 0x2, 0x7, 0x719, 0xf5, 0x5f2c]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x5, 0x6, 0x5, 0x48, 0x5, 0x20]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x6, 0x1}, {0x4, 0x3}, {0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x6}, {0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x7, 0x6}, {0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0x4}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x6, 0x9}]}]}]}]}, 0x89c}, 0x1, 0x0, 0x0, 0x40040080}, 0x40) (rerun: 64)
r15 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r15, &(0x7f0000001ec0)={&(0x7f00000019c0)=@xdp, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001a40)=""/23, 0x17}, {&(0x7f0000001a80)=""/197, 0xc5}, {&(0x7f0000001b80)=""/26, 0x1a}, {&(0x7f0000001bc0)=""/82, 0x52}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/156, 0x9c}, {&(0x7f0000001d40)=""/92, 0x5c}], 0x7, &(0x7f0000001e40)=""/101, 0x65}, 0x20)

2.067878612s ago: executing program 1 (id=3447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x4841, 0x0)
write$rfkill(r3, &(0x7f0000000140)={0xa1, 0x5, 0x1, 0x1}, 0x8)

2.001924926s ago: executing program 1 (id=3448):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804000000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x80000)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000001c0)=0x7, 0x4)
unshare(0x6a040000)
r2 = socket(0x37, 0xa, 0xfbd)
recvmsg$qrtr(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100}, 0x38, 0x40002042)

1.830931912s ago: executing program 1 (id=3452):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x40000, @rand_addr, 0x80000001}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20040815}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001e000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x1c, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x107, 0x200, 0x6, 0x7fff}}], 0x38, 0x20000890}, 0x4000041)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000e80)={0x18, 0x13, 0x821, 0x0, 0x0, "", [@generic="46c820cdb5eaaad32808b8766193e7179b34dc47f8d881eb2723b78ccfd46d8903d246a8df748943a77e9f5e4df1c386af164a8229773f9499e233b62f785805661103f3ddc66b82fabf595ada4d99121d273ddc4b3e601a7f052528cefe9932612880ca9df79827163e857c05afe2371a75205a3b35b0bde76c534be409981c70e1acfb249f50b3ba9170632b8f9e424e7a239bb8eb4e576ca1973e69729691e15b2aa0ac44d2293248e1d2080f73b232fa61403312c470546a1ac53f70e6a7b90d676d7ab4bf09fe73ea1fc85fb8e6170695ef00c331e5f5f3fe", @generic="69febed0cadc0c210117294877e92192951b18638af0387bb97ee48a76a37481975118e8a2a08a07e63b69bdc71c923831fd9307d02e575f7df60f41dce14318a3d96bdedbf90e0729b75da6895714f7e4c73280f5fb4a5810a16828c7dced2231d81a684f0aaa02e54b06e2782780405755aa424d2c9f73e3dc2dec0609e28285708f4027357f2ee8f78cbbebe9e2b372074871dcb3e691e5c029423182f4e88e4db66a5fd689b4763c9a73c2803149ef92a7e6a88011f2f3c75ef09f05632be188842b821288ddfecd8600375071147677194bb0878fcba54ea2fb48ad2fba2e0d7da428"]}, 0xffffffa7}], 0x1, 0x0, 0x0, 0x24004001}, 0x0)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r7, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c)
r8 = accept4$unix(r3, 0x0, 0x0, 0x0)
recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x40000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c)

931.254607ms ago: executing program 1 (id=3464):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0xfffffff9, 0x24, 0x1}, 0x50)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r2, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/133, 0x85}, 0x1}], 0x1, 0x0, 0x0)
close(r1)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r1)

450.673648ms ago: executing program 2 (id=3466):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x50}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
unshare(0x2c060000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x3, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2b0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x1e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1e0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x3, 0x0, 0x0, {{0xfff9, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="069c9ef4b9", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c4e3e637cc4eb562f2", @TCF_META_TYPE_VAR="536f0c1dbb57d3", @TCF_META_TYPE_VAR="cc985a29577e30e9", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x6, 0x1}, {0x80, 0xd, 0x1}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="03d9bb6f", @TCF_META_TYPE_VAR="7ae679", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="90f595f5df"]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x8}, {{0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0xf, 0x0, 0x4}, "1fc9c37ed2a9c8844ae00fdce5d7a7b73bb6d0a2a9e2812f5392db6be53ddaa3b4dca4991b6e3b8926fcc2bf6af140d19b9c4003b842453f44333cb6a674bd389a720cc7e46bbf68fee2cb1d38b6dd4a5bc2b3baf9e16403c10dba0d38917aae6ae2f5fa8fc7a26483b9d3fc"}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7ca6", @TCF_META_TYPE_VAR="ebe6e0c8bb96e050021e"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="adeea61f248167375f", @TCF_META_TYPE_VAR="a3", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="7919c2b38c955623", @TCF_META_TYPE_VAR="c7a6fb5c5cdb8f"]}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x952f, 0x9, 0x1ff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x4}, "6a7fb4fdc8b1bba09bd6a1f72c7c5f4d3588c23ec035156f7ec10e50255af5798c7d20c461d4d6407743b0fb75c84cd0fbe93bdb9c0b908f5fdc116cf7d322d88f0e7e9fcd48e0c54aa6d1fce0a05eb5d66834ac4883bf709b9720d08f9a01e09716c4f83eeb233b2f83c63cc07a8bd7b4363d4e32579a31226c05113e1db815"}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x2, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x2e0}}, 0x2000c800)

358.591968ms ago: executing program 2 (id=3467):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0xc252, 0x2, 0x4}, 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000006840), 0x0}, 0x20)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) (async)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
listen(r2, 0x7) (async)
listen(r2, 0x7)
socket(0x22, 0x2, 0x22)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x8)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
r7 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000080)={r10, 0x3}, &(0x7f00000000c0)=0x8)

220.690419ms ago: executing program 0 (id=3469):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x7, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
r1 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0x3, 0x3, 0x5, 0x4, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x8, 0x9}})
sendto$packet(r1, &(0x7f00000002c0)="89ac534444a8ce756121c5554d59b813ffcde9ee1a69f61fd13d9681c3526c2e2a8d46084611dd99a62d77a894d23f79d86f2dd4bd2fc20dd3437243dbaed229acada7e9f5374b3f5aaa8aaf66", 0x4d, 0x4000000, &(0x7f0000000400)={0x11, 0x10, r2, 0x1, 0x4, 0x6, @multicast}, 0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8)

216.906671ms ago: executing program 2 (id=3470):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
recvmsg(r2, &(0x7f0000000100)={0x0, 0x5, 0x0}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00'}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x58}}, 0x48040)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2b000cf0", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250e00000008000500d70a000008000400bde60000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r8 = socket(0x10, 0x80003, 0x6)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000f0000000000000f00000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x4800)
recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'vlan1\x00'})
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x1000})
socket$nl_route(0x10, 0x3, 0x0)

139.856843ms ago: executing program 0 (id=3471):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000005283f273677f022c753c5661d1a00000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000000540)=""/4088, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xa00}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0xa, 0x2)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x200, 0xfffffff8, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8004)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r0, 0x0, 0x60, 0xb, &(0x7f0000000300)="7bc7c39e62865afb724f42b3c8c2dbe8647c4eaa865b889eed849dad172549cec1d44369e33d9b79e36d9090ce39a3cc05495d41d920c0ea2712c6424faf07a6bbefbc1a50071ab6e8a0b00f39f609f2a5c2ff89dd766e2535f8d995b2017c50", &(0x7f00000004c0)=""/11, 0x5e7, 0x0, 0x98, 0x7d, &(0x7f0000001540)="b876f476bea5620717b7e5221681f0d41c213713da8d6610cf90bac10598b9e217e5cec2da26d1045496431c67d162267d96a60b8d284056267a31ab9992bb33bdae40bf4bc06f793a7565687740fe55b95a50ffd5fc5296d5f62d1527a2898a22c576b687d908a60a8d87ac3dff351823a5d24f98718764613e46e61918c47cdc436366f635e432f1fddbd370d6719f27564fc1458e21aa", &(0x7f0000001600)="5f6a05b9ea86a951b9a92f28bd502fbb6bbf1df639495158df6ce7b1bf23554cd437529875c92f785ef9fc4b1571240b68aa31ed275f575f44f384a345072985d22df47c0d1895c2362e1e6c555379446373e193e6e283fe89b7e43f6f984a9f376c81f6c070552d40ae2aca1c45f3861c13e2d45cea3b6968de3ea78e", 0x0, 0x0, 0x7}, 0x50)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000005283f273677f022c753c5661d1a00000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000000540)=""/4088, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xa00}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
socket$inet(0x2, 0xa, 0x2) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x200, 0xfffffff8, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async)
close(0x3) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r0, 0x0, 0x60, 0xb, &(0x7f0000000300)="7bc7c39e62865afb724f42b3c8c2dbe8647c4eaa865b889eed849dad172549cec1d44369e33d9b79e36d9090ce39a3cc05495d41d920c0ea2712c6424faf07a6bbefbc1a50071ab6e8a0b00f39f609f2a5c2ff89dd766e2535f8d995b2017c50", &(0x7f00000004c0)=""/11, 0x5e7, 0x0, 0x98, 0x7d, &(0x7f0000001540)="b876f476bea5620717b7e5221681f0d41c213713da8d6610cf90bac10598b9e217e5cec2da26d1045496431c67d162267d96a60b8d284056267a31ab9992bb33bdae40bf4bc06f793a7565687740fe55b95a50ffd5fc5296d5f62d1527a2898a22c576b687d908a60a8d87ac3dff351823a5d24f98718764613e46e61918c47cdc436366f635e432f1fddbd370d6719f27564fc1458e21aa", &(0x7f0000001600)="5f6a05b9ea86a951b9a92f28bd502fbb6bbf1df639495158df6ce7b1bf23554cd437529875c92f785ef9fc4b1571240b68aa31ed275f575f44f384a345072985d22df47c0d1895c2362e1e6c555379446373e193e6e283fe89b7e43f6f984a9f376c81f6c070552d40ae2aca1c45f3861c13e2d45cea3b6968de3ea78e", 0x0, 0x0, 0x7}, 0x50) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4) (async)

139.522334ms ago: executing program 2 (id=3472):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x200080c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f00000001c0)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

139.203979ms ago: executing program 0 (id=3473):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000000"], 0x50) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000480)={'veth0_vlan\x00', @random}) (async)
unshare(0x24020400) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r3, @ANYBLOB="010027bd0000fcdbdf25180000001800058014000280080001001d00000008000400020000004c00098008000200800b000008000200a0b6000008000100100000000800020006000000080002004000000008000100080000000800020002000000080001000100010008000100008000004801068004000500080001000300000008000600070000000800060009000000da000300c78f8fef4d0aeeaa7a38036d0d492bd761cf03160849976d037cb15d1717dd036d2f64c43a29615b8cbab178226d4b431b5de1c7670279c33beebb3f00b5e78ee45e"], 0x1c0}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x207)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"})
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
syz_emit_ethernet(0xd3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x2, {0x2}, [{0x4}]}, 0x18}}, 0x0) (async)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) (async)
setsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f0000000180)=0xfffffff1, 0x4) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c9ae540ed08b8eb3a1a43a747f4661f2e93f10a000280b4e27551be740000"], 0x3c}}, 0x20048800) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040), 0x6)

138.777004ms ago: executing program 2 (id=3474):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0) (async)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0x8008b705, 0x0)
r2 = socket$packet(0x11, 0xa, 0x300)
sendto$packet(r2, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf2505"], 0x1618}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) (async)
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc801)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @broadcast}, 0x2e, {0x2, 0x4e21, @empty}, 'ip6gretap0\x00'}) (async)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @broadcast}, 0x2e, {0x2, 0x4e21, @empty}, 'ip6gretap0\x00'})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xcd, 0x0, 0x20, 0xfd, [0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x8, 0x1]}}) (async)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xcd, 0x0, 0x20, 0xfd, [0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x8, 0x1]}})
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x98}, 0x1c)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r4, 0x200204)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

76.978044ms ago: executing program 1 (id=3475):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async)
unshare(0x2c060000) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2ff, 0x1, 0xfffffff8, 0x0, 0x3, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x44884) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async)
r5 = socket$inet6(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000002c0)="17", 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x21c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1ec, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x110, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "d128be47491207a500026fa0e16dde76bb"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_POLICE={0x14, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x21c}}, 0x2000c800) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000008309a89615b2c2323fea574048acd71d7f6d3b00012080b5243a8826e5c473eb737430b8691c60f4e9cc8e8860e717d9087f7f49baa2f0d47fb019b696a842cc2dd56f501c86c571b3856f298f66c0582e847f97b8e3a948b14f00001a4f9619ffb11f1244079b66a87cbc3c703e6be897d44ec0f0ebe1a0a3151e9918e51a42f0147bd536549810", @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf254b0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)

76.498174ms ago: executing program 2 (id=3476):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400130000000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48d4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="dd", 0x1}], 0x1}, 0x24008800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x48804)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r3, 0x0, r6, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17530080ff", @ANYRES32=0x0, @ANYBLOB="08d10000000000006401128009000100766c616e00000000540102800c0002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002"], 0x198}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
getsockopt$inet_udp_int(r6, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000240)=0x80, 0xfffffe34)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0x1001, 0x1, 0x0, 0xffffffffffffff71}, &(0x7f00000000c0)=0x40)

75.95071ms ago: executing program 0 (id=3477):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40)

10.977382ms ago: executing program 0 (id=3478):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x400000000000000)

0s ago: executing program 0 (id=3479):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0xffffffffffffffa0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)

kernel console output (not intermixed with test programs):

16666] wg1 speed is unknown, defaulting to 1000
[  270.092825][T16666] lo speed is unknown, defaulting to 1000
[  270.095886][T16666] lo speed is unknown, defaulting to 1000
[  270.130487][T16666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.141635][T16677] siw: device registration error -23
[  270.332737][   T33] audit: type=1800 audit(1756380829.651:10): pid=16682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2865" name="memory.events" dev="tmpfs" ino=4972 res=0 errno=0
[  270.468969][T16698] wg1 speed is unknown, defaulting to 1000
[  270.473551][T16698] lo speed is unknown, defaulting to 1000
[  270.476043][T16698] lo speed is unknown, defaulting to 1000
[  270.521161][T16698] wg1 speed is unknown, defaulting to 1000
[  270.523371][T16698] lo speed is unknown, defaulting to 1000
[  270.525517][T16698] lo speed is unknown, defaulting to 1000
[  270.698753][T16715] wg1 speed is unknown, defaulting to 1000
[  270.704182][T16715] lo speed is unknown, defaulting to 1000
[  270.713989][T16715] lo speed is unknown, defaulting to 1000
[  270.818503][T16715] __nla_validate_parse: 12 callbacks suppressed
[  270.818515][T16715] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2874'.
[  270.831071][T16715] wg1 speed is unknown, defaulting to 1000
[  270.834973][T16715] lo speed is unknown, defaulting to 1000
[  270.837988][T16715] lo speed is unknown, defaulting to 1000
[  270.866646][T16732] wg1 speed is unknown, defaulting to 1000
[  270.869678][T16732] lo speed is unknown, defaulting to 1000
[  270.877794][T16732] lo speed is unknown, defaulting to 1000
[  270.954997][T16746] siw: device registration error -23
[  270.974869][T16753] TC_ACT_REPEAT abuse ?
[  270.976476][    C1] TC_ACT_REPEAT abuse ?
[  270.979921][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  271.019068][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'.
[  271.283925][T16773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.020054][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  272.146974][T16795] wg1 speed is unknown, defaulting to 1000
[  272.149866][T16795] lo speed is unknown, defaulting to 1000
[  272.152136][T16795] lo speed is unknown, defaulting to 1000
[  272.183379][T16795] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2894'.
[  272.585530][T16830] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  272.682140][T16836] syzkaller1: entered promiscuous mode
[  272.684465][T16836] syzkaller1: entered allmulticast mode
[  273.060247][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  273.248536][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'.
[  273.525850][T16877] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  273.566917][T16881] wg1 speed is unknown, defaulting to 1000
[  273.570819][T16881] lo speed is unknown, defaulting to 1000
[  273.572973][T16881] lo speed is unknown, defaulting to 1000
[  273.756296][ T5907] lo speed is unknown, defaulting to 1000
[  273.758266][ T5907] syz1: Port: 1 Link DOWN
[  273.978923][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2932'.
[  273.982613][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2932'.
[  273.986131][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2932'.
[  273.989938][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2932'.
[  273.993539][T16925] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2932'.
[  274.543909][T16931] wg1 speed is unknown, defaulting to 1000
[  274.546278][T16931] lo speed is unknown, defaulting to 1000
[  274.548423][T16931] lo speed is unknown, defaulting to 1000
[  274.573843][T16931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'.
[  274.594403][T16933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.617060][T16930] wg1 speed is unknown, defaulting to 1000
[  274.620292][T16930] lo speed is unknown, defaulting to 1000
[  274.622721][T16930] lo speed is unknown, defaulting to 1000
[  274.698563][T16938] rdma_rxe: rxe_newlink: failed to add pimreg
[  274.772653][T16947] validate_nla: 17 callbacks suppressed
[  274.772672][T16947] netlink: 'syz.0.2938': attribute type 4 has an invalid length.
[  274.869341][T16963] netlink: 'syz.2.2943': attribute type 5 has an invalid length.
[  275.027597][T16972] wg1 speed is unknown, defaulting to 1000
[  275.029954][T16972] lo speed is unknown, defaulting to 1000
[  275.032120][T16972] lo speed is unknown, defaulting to 1000
[  275.186033][T16989] netlink: 'syz.2.2951': attribute type 1 has an invalid length.
[  275.195517][T16989] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.205672][T16989] vlan2: entered promiscuous mode
[  275.207727][T16989] bond0: entered promiscuous mode
[  275.209970][T16989] vlan2: entered allmulticast mode
[  275.211928][T16989] bond0: entered allmulticast mode
[  275.218509][T16989] bond0: (slave gretap1): making interface the new active one
[  275.222228][T16989] gretap1: entered promiscuous mode
[  275.225351][T16989] gretap1: entered allmulticast mode
[  275.228100][T16989] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  275.781020][T17006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.783496][T17005] syzkaller0: entered promiscuous mode
[  275.785421][T17005] syzkaller0: entered allmulticast mode
[  275.801502][T17008] tipc: Resetting bearer <eth:syzkaller0>
[  275.805480][T17008] tipc: Disabling bearer <eth:syzkaller0>
[  275.889528][T17017] __nla_validate_parse: 5 callbacks suppressed
[  275.889544][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'.
[  275.981824][T17019] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  276.034179][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2963'.
[  276.092297][T17025] netlink: 'syz.0.2964': attribute type 1 has an invalid length.
[  276.117389][T17029] syzkaller0: entered promiscuous mode
[  276.119542][T17029] syzkaller0: entered allmulticast mode
[  276.123648][T17029] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2965'.
[  276.154556][T17031] tun0: tun_chr_ioctl cmd 35111
[  276.158538][T17031] netlink: 'syz.2.2966': attribute type 21 has an invalid length.
[  276.161839][T17031] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2966'.
[  276.272348][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'.
[  276.275489][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'.
[  276.279096][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'.
[  276.283428][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'.
[  276.316471][T17041] wg1 speed is unknown, defaulting to 1000
[  276.319311][T17041] lo speed is unknown, defaulting to 1000
[  276.322481][T17041] lo speed is unknown, defaulting to 1000
[  276.353568][T17041] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2969'.
[  276.363228][T17041] wg1 speed is unknown, defaulting to 1000
[  276.365912][T17041] lo speed is unknown, defaulting to 1000
[  276.368823][T17041] lo speed is unknown, defaulting to 1000
[  276.463325][T17047] netlink: 'syz.1.2971': attribute type 1 has an invalid length.
[  276.523950][T17051] wg1 speed is unknown, defaulting to 1000
[  276.527583][T17051] lo speed is unknown, defaulting to 1000
[  276.560634][T17051] lo speed is unknown, defaulting to 1000
[  276.836281][T17059] wg1 speed is unknown, defaulting to 1000
[  276.838551][T17059] lo speed is unknown, defaulting to 1000
[  276.841276][T17059] lo speed is unknown, defaulting to 1000
[  276.930131][T17066] netlink: 'syz.0.2976': attribute type 12 has an invalid length.
[  276.977290][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'.
[  277.222726][T17089] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  277.318552][T17095] wg1 speed is unknown, defaulting to 1000
[  277.322825][T17095] lo speed is unknown, defaulting to 1000
[  277.326569][T17095] lo speed is unknown, defaulting to 1000
[  277.339233][T17099] wg1 speed is unknown, defaulting to 1000
[  277.342078][T17099] lo speed is unknown, defaulting to 1000
[  277.345335][T17099] lo speed is unknown, defaulting to 1000
[  277.446833][T17112] wg1 speed is unknown, defaulting to 1000
[  277.449231][T17112] lo speed is unknown, defaulting to 1000
[  277.451519][T17112] lo speed is unknown, defaulting to 1000
[  277.497881][T17112] wg1 speed is unknown, defaulting to 1000
[  277.502098][T17112] lo speed is unknown, defaulting to 1000
[  277.504881][T17112] lo speed is unknown, defaulting to 1000
[  278.146138][T17132] wg1 speed is unknown, defaulting to 1000
[  278.151065][T17132] lo speed is unknown, defaulting to 1000
[  278.164112][T17132] lo speed is unknown, defaulting to 1000
[  278.237638][T17140] wg1 speed is unknown, defaulting to 1000
[  278.240366][T17140] lo speed is unknown, defaulting to 1000
[  278.242687][T17140] lo speed is unknown, defaulting to 1000
[  278.293425][T17140] wg1 speed is unknown, defaulting to 1000
[  278.296533][T17140] lo speed is unknown, defaulting to 1000
[  278.299108][T17140] lo speed is unknown, defaulting to 1000
[  278.665993][T17184] wg1 speed is unknown, defaulting to 1000
[  278.674494][T17184] lo speed is unknown, defaulting to 1000
[  278.676857][T17184] lo speed is unknown, defaulting to 1000
[  278.780209][T17188] wg1 speed is unknown, defaulting to 1000
[  278.782847][T17188] lo speed is unknown, defaulting to 1000
[  278.786605][T17188] lo speed is unknown, defaulting to 1000
[  279.433577][T17205] wg1 speed is unknown, defaulting to 1000
[  279.436470][T17205] lo speed is unknown, defaulting to 1000
[  279.439027][T17205] lo speed is unknown, defaulting to 1000
[  279.443375][T17207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.458769][T17207] tipc: Resetting bearer <eth:syzkaller0>
[  279.536725][T17218] syzkaller1: entered promiscuous mode
[  279.538526][T17218] syzkaller1: entered allmulticast mode
[  279.577522][T17221] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  279.688444][ T5841] cgroup: fork rejected by pids controller in /syz0
[  279.895899][T17248] netlink: 'syz.1.3026': attribute type 1 has an invalid length.
[  279.958706][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.962032][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.965103][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.968499][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.972328][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.992866][T17249] wg1 speed is unknown, defaulting to 1000
[  279.995906][T17249] lo speed is unknown, defaulting to 1000
[  279.998696][T17249] lo speed is unknown, defaulting to 1000
[  280.010653][T17257] netlink: 'syz.1.3028': attribute type 6 has an invalid length.
[  280.083732][T17249] chnl_net:caif_netlink_parms(): no params data found
[  280.091094][ T5845] cgroup: fork rejected by pids controller in /syz1
[  280.127132][T17249] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.129598][T17249] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.133025][T17249] bridge_slave_0: entered allmulticast mode
[  280.135801][T17249] bridge_slave_0: entered promiscuous mode
[  280.139062][T17249] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.142325][T17249] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.145236][T17249] bridge_slave_1: entered allmulticast mode
[  280.148132][T17249] bridge_slave_1: entered promiscuous mode
[  280.164700][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.169381][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.189259][T17249] team0: Port device team_slave_0 added
[  280.193937][T17249] team0: Port device team_slave_1 added
[  280.213879][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.216559][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.226375][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.232982][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.235799][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.245570][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.267978][T17249] hsr_slave_0: entered promiscuous mode
[  280.271522][T17249] hsr_slave_1: entered promiscuous mode
[  280.273797][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  280.276318][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  280.278742][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  280.281254][T17249] debugfs: 'hsr0' already exists in 'hsr'
[  280.283346][T17249] Cannot create hsr debugfs directory
[  280.285672][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  280.288651][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  280.323074][T17273] wg1 speed is unknown, defaulting to 1000
[  280.328778][T17273] lo speed is unknown, defaulting to 1000
[  280.333671][T17273] lo speed is unknown, defaulting to 1000
[  280.399091][T17273] chnl_net:caif_netlink_parms(): no params data found
[  280.433106][T17273] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.435578][T17273] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.437978][T17273] bridge_slave_0: entered allmulticast mode
[  280.441668][T17273] bridge_slave_0: entered promiscuous mode
[  280.445263][T17273] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.447781][T17273] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.450575][T17273] bridge_slave_1: entered allmulticast mode
[  280.453711][T17273] bridge_slave_1: entered promiscuous mode
[  280.481638][T17273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.491728][T17273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.512004][T17273] team0: Port device team_slave_0 added
[  280.514889][T17273] team0: Port device team_slave_1 added
[  280.529593][T17273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.532433][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.541904][T17273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.546608][T17273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.548799][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.556964][T17273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.574089][T17273] hsr_slave_0: entered promiscuous mode
[  280.576238][T17273] hsr_slave_1: entered promiscuous mode
[  280.578252][T17273] debugfs: 'hsr0' already exists in 'hsr'
[  280.580289][T17273] Cannot create hsr debugfs directory
[  280.607259][T17284] netlink: 'syz.2.3033': attribute type 6 has an invalid length.
[  280.615846][T17249] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  280.622358][T17249] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  280.628525][T17249] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  280.635585][T17249] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  280.718308][T17249] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.729888][T17249] 8021q: adding VLAN 0 to HW filter on device team0
[  280.735891][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.738340][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.751822][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.754223][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.767942][T17295] bridge0: port 1(erspan0) entered blocking state
[  280.772125][T17295] bridge0: port 1(erspan0) entered disabled state
[  280.774440][T17295] erspan0: entered allmulticast mode
[  280.776826][T17295] erspan0: entered promiscuous mode
[  280.847217][ T5851] cgroup: fork rejected by pids controller in /syz2
[  280.863933][T17249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.888003][T17249] veth0_vlan: entered promiscuous mode
[  280.903495][T17249] veth1_vlan: entered promiscuous mode
[  280.906434][T17273] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  280.912726][T17273] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  280.922061][T17273] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  280.932572][T17273] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  280.968136][T17249] veth0_macvtap: entered promiscuous mode
[  280.988852][T17249] veth1_macvtap: entered promiscuous mode
[  280.998553][T17249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.012895][T17249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.023369][ T5717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.033246][ T5717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.046145][T17273] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.048249][ T5717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.052098][ T5717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.075983][T17273] 8021q: adding VLAN 0 to HW filter on device team0
[  281.084631][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.087165][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.100799][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.104280][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.110396][T10107] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.112574][T10107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.115991][T10107] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.118161][T10107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.177311][T17273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.190560][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  281.194038][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  281.196932][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  281.199557][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  281.204081][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  281.222354][T17273] veth0_vlan: entered promiscuous mode
[  281.228039][T17323] wg1 speed is unknown, defaulting to 1000
[  281.232333][T17273] veth1_vlan: entered promiscuous mode
[  281.235377][T17323] lo speed is unknown, defaulting to 1000
[  281.237723][T17323] lo speed is unknown, defaulting to 1000
[  281.267437][T17273] veth0_macvtap: entered promiscuous mode
[  281.277258][T17273] veth1_macvtap: entered promiscuous mode
[  281.300805][T17273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.333418][T17273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.339310][T17337] Bluetooth: MGMT ver 1.23
[  281.350598][ T5717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.358070][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.362518][T17323] chnl_net:caif_netlink_parms(): no params data found
[  281.368421][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.371355][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.416088][T17344] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  281.421059][T17323] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.423375][T17323] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.425832][T17323] bridge_slave_0: entered allmulticast mode
[  281.428139][T17323] bridge_slave_0: entered promiscuous mode
[  281.433392][T17323] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.435543][T17323] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.437737][T17323] bridge_slave_1: entered allmulticast mode
[  281.440138][T17323] bridge_slave_1: entered promiscuous mode
[  281.470255][T17347] siw: device registration error -23
[  281.484930][T17347] __nla_validate_parse: 85 callbacks suppressed
[  281.484947][T17347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3044'.
[  281.485455][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.505785][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.509443][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.512275][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.532164][   T24] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[  281.535636][   T24] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  281.553803][T17323] team0: Port device team_slave_0 added
[  281.556557][T17323] team0: Port device team_slave_1 added
[  281.579264][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.585767][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.586372][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.590105][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.601003][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.607414][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.610477][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.618323][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.622069][   T97] block nbd0: Possible stuck request ffff888021db0000: control (read@0,1024B). Runtime 150 seconds
[  281.622093][   T97] block nbd0: Possible stuck request ffff888021db0200: control (read@1024,1024B). Runtime 150 seconds
[  281.622104][   T97] block nbd0: Possible stuck request ffff888021db0400: control (read@2048,1024B). Runtime 150 seconds
[  281.622114][   T97] block nbd0: Possible stuck request ffff888021db0600: control (read@3072,1024B). Runtime 150 seconds
[  281.667855][T17358] syzkaller1: entered promiscuous mode
[  281.669675][T17358] syzkaller1: entered allmulticast mode
[  281.679293][T17323] hsr_slave_0: entered promiscuous mode
[  281.682199][T17323] hsr_slave_1: entered promiscuous mode
[  281.684119][T17323] debugfs: 'hsr0' already exists in 'hsr'
[  281.686504][T17323] Cannot create hsr debugfs directory
[  281.986670][T17323] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  281.990543][T17323] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  281.994378][T17323] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  281.998232][T17323] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  282.020082][ T5844] Bluetooth: hci0: command tx timeout
[  282.033658][T17323] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.042398][T17323] 8021q: adding VLAN 0 to HW filter on device team0
[  282.047243][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.049401][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.060312][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.062845][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.138117][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.166842][T17323] veth0_vlan: entered promiscuous mode
[  282.173601][T17323] veth1_vlan: entered promiscuous mode
[  282.193303][T17323] veth0_macvtap: entered promiscuous mode
[  282.197985][T17323] veth1_macvtap: entered promiscuous mode
[  282.208825][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.217424][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.225676][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.229130][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.238056][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.241956][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.274020][T10091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.276548][T10091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.290995][T10102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.293859][T10102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.338458][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'.
[  282.343141][ T5844] Bluetooth: hci1: command tx timeout
[  282.471406][T17395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3055'.
[  282.477418][T17395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3055'.
[  282.481695][T17395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3055'.
[  282.753804][T17426] openvswitch: netlink: IPv4 tun info is not correct
[  282.762001][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'.
[  282.803629][T17430] netlink: 'syz.2.3065': attribute type 1 has an invalid length.
[  282.884171][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'.
[  283.230889][ T5844] Bluetooth: hci2: command tx timeout
[  283.351769][T17448] wg1 speed is unknown, defaulting to 1000
[  283.356053][T17448] lo speed is unknown, defaulting to 1000
[  283.358885][T17448] lo speed is unknown, defaulting to 1000
[  283.423114][T17449] wg1 speed is unknown, defaulting to 1000
[  283.425735][T17449] lo speed is unknown, defaulting to 1000
[  283.428313][T17449] lo speed is unknown, defaulting to 1000
[  283.742522][T17453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  283.821249][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'.
[  283.832741][T17466] wg1 speed is unknown, defaulting to 1000
[  283.835133][T17466] lo speed is unknown, defaulting to 1000
[  283.837665][T17466] lo speed is unknown, defaulting to 1000
[  283.888552][T17470] netlink: 'syz.2.3077': attribute type 13 has an invalid length.
[  283.891890][T17470] netlink: 'syz.2.3077': attribute type 17 has an invalid length.
[  283.919556][T17470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.925662][T17466] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3076'.
[  283.949597][T17468] wg1 speed is unknown, defaulting to 1000
[  283.952659][T17468] lo speed is unknown, defaulting to 1000
[  283.954804][T17468] lo speed is unknown, defaulting to 1000
[  284.064177][T17480] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0
[  284.068634][T17478] IPVS: stopping backup sync thread 17480 ...
[  284.069110][T17476] wg1 speed is unknown, defaulting to 1000
[  284.074642][T17476] lo speed is unknown, defaulting to 1000
[  284.077446][T17476] lo speed is unknown, defaulting to 1000
[  284.102041][ T5844] Bluetooth: hci0: command tx timeout
[  284.157640][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'.
[  284.183739][T17476] wg1 speed is unknown, defaulting to 1000
[  284.186003][T17476] lo speed is unknown, defaulting to 1000
[  284.188448][T17476] lo speed is unknown, defaulting to 1000
[  284.431083][ T5844] Bluetooth: hci1: command tx timeout
[  284.447838][T17513] unsupported nla_type 52263
[  284.449099][T17510] wg1 speed is unknown, defaulting to 1000
[  284.475581][T17510] lo speed is unknown, defaulting to 1000
[  284.477886][T17510] lo speed is unknown, defaulting to 1000
[  284.501517][T17514] openvswitch: netlink: Message has 20 unknown bytes.
[  284.504544][T17514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.507474][T17510] openvswitch: netlink: Message has 20 unknown bytes.
[  284.509667][T17510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.528144][T17510] wg1 speed is unknown, defaulting to 1000
[  284.532320][T17510] lo speed is unknown, defaulting to 1000
[  284.535234][T17510] lo speed is unknown, defaulting to 1000
[  284.575846][T17521] wg1 speed is unknown, defaulting to 1000
[  284.578228][T17521] lo speed is unknown, defaulting to 1000
[  284.584851][T17521] lo speed is unknown, defaulting to 1000
[  284.606931][T17524] siw: device registration error -23
[  284.686487][T17524] netlink: 'syz.0.3091': attribute type 4 has an invalid length.
[  284.865637][T17553] wg1 speed is unknown, defaulting to 1000
[  284.868035][T17553] lo speed is unknown, defaulting to 1000
[  284.873074][T17553] lo speed is unknown, defaulting to 1000
[  284.898613][T17558] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.901363][T17558] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.930521][T17558] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  285.024733][T17568] netlink: 'syz.0.3102': attribute type 13 has an invalid length.
[  285.027286][T17568] netlink: 'syz.0.3102': attribute type 17 has an invalid length.
[  285.066892][T17568] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.069227][T17568] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.071980][T17568] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.074276][T17568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.086599][T17568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  285.099234][T17571] wg1 speed is unknown, defaulting to 1000
[  285.103870][T17570] wg1 speed is unknown, defaulting to 1000
[  285.106449][T17571] lo speed is unknown, defaulting to 1000
[  285.108683][T17571] lo speed is unknown, defaulting to 1000
[  285.113712][T17570] lo speed is unknown, defaulting to 1000
[  285.122385][T17570] lo speed is unknown, defaulting to 1000
[  285.122663][T17572] wg1 speed is unknown, defaulting to 1000
[  285.139621][T17572] lo speed is unknown, defaulting to 1000
[  285.146477][T17568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.156641][T17572] lo speed is unknown, defaulting to 1000
[  285.300200][ T5844] Bluetooth: hci2: command tx timeout
[  285.322407][T17584] wg1 speed is unknown, defaulting to 1000
[  285.324726][T17584] lo speed is unknown, defaulting to 1000
[  285.327015][T17584] lo speed is unknown, defaulting to 1000
[  285.433838][T17595] siw: device registration error -23
[  285.545913][T17600] wg1 speed is unknown, defaulting to 1000
[  285.548223][T17600] lo speed is unknown, defaulting to 1000
[  285.553181][T17600] lo speed is unknown, defaulting to 1000
[  285.576918][T17606] netlink: 'syz.1.3114': attribute type 10 has an invalid length.
[  285.587485][T17606] team0: Port device dummy0 added
[  285.593344][T17606] netlink: 'syz.1.3114': attribute type 10 has an invalid length.
[  285.598426][T17606] team0: Port device dummy0 removed
[  285.605399][T17606] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  285.785946][T17615] netlink: 'syz.1.3117': attribute type 9 has an invalid length.
[  285.934676][T17616] wg1 speed is unknown, defaulting to 1000
[  285.938320][T17616] lo speed is unknown, defaulting to 1000
[  285.944620][T17616] lo speed is unknown, defaulting to 1000
[  286.181257][ T5844] Bluetooth: hci0: command tx timeout
[  286.265784][T17630] wg1 speed is unknown, defaulting to 1000
[  286.269162][T17630] lo speed is unknown, defaulting to 1000
[  286.281223][T17630] lo speed is unknown, defaulting to 1000
[  286.500372][ T5844] Bluetooth: hci1: command tx timeout
[  286.732040][   T10] IPVS: starting estimator thread 0...
[  286.734191][T17662] __nla_validate_parse: 74 callbacks suppressed
[  286.734201][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'.
[  286.736157][T17665] wg1 speed is unknown, defaulting to 1000
[  286.744570][T17665] lo speed is unknown, defaulting to 1000
[  286.745043][T17662] syzkaller1: entered promiscuous mode
[  286.748744][T17662] syzkaller1: entered allmulticast mode
[  286.755570][T17665] lo speed is unknown, defaulting to 1000
[  286.821783][T17666] IPVS: using max 92 ests per chain, 220800 per kthread
[  286.929510][T17685] netlink: 'syz.2.3137': attribute type 6 has an invalid length.
[  286.995161][T17702] siw: device registration error -23
[  287.082007][T17714] wg1 speed is unknown, defaulting to 1000
[  287.085003][T17714] lo speed is unknown, defaulting to 1000
[  287.087912][T17714] lo speed is unknown, defaulting to 1000
[  287.113316][T17714] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3145'.
[  287.114804][T17717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.134878][T17714] wg1 speed is unknown, defaulting to 1000
[  287.137863][T17714] lo speed is unknown, defaulting to 1000
[  287.140803][T17714] lo speed is unknown, defaulting to 1000
[  287.177147][T17730] IPVS: length: 133 != 8
[  287.227223][T17732] netlink: 'syz.0.3150': attribute type 1 has an invalid length.
[  287.296453][T17738] netlink: 'syz.0.3153': attribute type 5 has an invalid length.
[  287.303167][T17738] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3153'.
[  287.380270][ T5844] Bluetooth: hci2: command tx timeout
[  287.411923][T17750] bridge_slave_0: left allmulticast mode
[  287.413693][T17750] bridge_slave_0: left promiscuous mode
[  287.415494][T17750] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.421311][T17736] siw: device registration error -23
[  287.478588][T17750] bridge_slave_1: left allmulticast mode
[  287.482992][T17750] bridge_slave_1: left promiscuous mode
[  287.486904][T17750] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.495028][T17750] bond0: (slave bond_slave_0): Releasing backup interface
[  287.503526][T17750] bond0: (slave bond_slave_1): Releasing backup interface
[  287.514430][T17750] team0: Port device team_slave_0 removed
[  287.520987][T17750] team0: Port device team_slave_1 removed
[  287.523967][T17750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.526915][T17750] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.530729][T17750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.533397][T17750] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.796775][T17777] wg1 speed is unknown, defaulting to 1000
[  287.799005][T17777] lo speed is unknown, defaulting to 1000
[  287.801616][T17777] lo speed is unknown, defaulting to 1000
[  288.092498][T17797] net_ratelimit: 2 callbacks suppressed
[  288.092509][T17797] TC_ACT_REPEAT abuse ?
[  288.096288][T17797] TC_ACT_REPEAT abuse ?
[  288.098252][T17797] TC_ACT_REPEAT abuse ?
[  288.102337][T17796] TC_ACT_REPEAT abuse ?
[  288.104345][T17796] TC_ACT_REPEAT abuse ?
[  288.181080][ T9509] TC_ACT_REPEAT abuse ?
[  288.214855][T17805] TC_ACT_REPEAT abuse ?
[  288.216695][T17805] TC_ACT_REPEAT abuse ?
[  288.225143][T17805] TC_ACT_REPEAT abuse ?
[  288.227050][T17805] TC_ACT_REPEAT abuse ?
[  288.260648][ T5844] Bluetooth: hci0: command tx timeout
[  288.384606][T17815] wg1 speed is unknown, defaulting to 1000
[  288.387654][T17815] lo speed is unknown, defaulting to 1000
[  288.391783][T17815] lo speed is unknown, defaulting to 1000
[  288.580692][ T5844] Bluetooth: hci1: command tx timeout
[  288.662644][ T9509] IPVS: starting estimator thread 0...
[  288.770013][T17834] IPVS: using max 92 ests per chain, 220800 per kthread
[  288.817151][T17845] tipc: Started in network mode
[  288.819266][T17845] tipc: Node identity 466dad9a000c, cluster identity 4711
[  288.822411][T17845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.828650][T17844] tipc: Resetting bearer <eth:syzkaller0>
[  288.877533][T17844] tipc: Disabling bearer <eth:syzkaller0>
[  288.954966][T17847] wg1 speed is unknown, defaulting to 1000
[  288.957313][T17847] lo speed is unknown, defaulting to 1000
[  288.959452][T17847] lo speed is unknown, defaulting to 1000
[  289.459900][ T5844] Bluetooth: hci2: command tx timeout
[  289.847016][T17863] siw: device registration error -23
[  289.857415][T17863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3187'.
[  289.966496][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'.
[  289.971729][T17873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3191'.
[  289.975921][T17878] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3192'.
[  290.019655][T17882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.025118][T17882] syzkaller0: entered promiscuous mode
[  290.026975][T17882] syzkaller0: entered allmulticast mode
[  290.032911][T17882] tipc: Resetting bearer <eth:syzkaller0>
[  290.038433][T17881] tipc: Resetting bearer <eth:syzkaller0>
[  290.046899][T17881] tipc: Disabling bearer <eth:syzkaller0>
[  290.117764][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3197'.
[  290.141352][T17892] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3197'.
[  290.248529][T17901] syzkaller0: entered promiscuous mode
[  290.251663][T17901] syzkaller0: entered allmulticast mode
[  290.449057][T17921] wg1 speed is unknown, defaulting to 1000
[  290.452059][T17921] lo speed is unknown, defaulting to 1000
[  290.454300][T17921] lo speed is unknown, defaulting to 1000
[  290.741432][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  290.744791][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  290.749231][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.749343][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  290.758450][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  290.762537][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  290.785047][T17929] wg1 speed is unknown, defaulting to 1000
[  290.788185][T17929] lo speed is unknown, defaulting to 1000
[  290.793252][T17929] lo speed is unknown, defaulting to 1000
[  290.807100][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.846165][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.915606][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.934445][T17935] netlink: 'syz.1.3212': attribute type 16 has an invalid length.
[  290.937408][T17935] netlink: 'syz.1.3212': attribute type 17 has an invalid length.
[  290.943977][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.946517][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.948596][T17929] chnl_net:caif_netlink_parms(): no params data found
[  290.949041][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.955107][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.957452][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.973676][T17935] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.976107][T17935] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.011058][T17935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.015802][T17935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.074171][ T5872] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.077259][ T5872] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.081899][ T5872] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.096734][T17937] wg1 speed is unknown, defaulting to 1000
[  291.100596][ T5872] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.107969][T17937] lo speed is unknown, defaulting to 1000
[  291.114982][T17937] lo speed is unknown, defaulting to 1000
[  291.146163][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.160293][T17929] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.163162][T17929] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.165640][T17929] bridge_slave_0: entered allmulticast mode
[  291.168157][T17929] bridge_slave_0: entered promiscuous mode
[  291.173457][T17929] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.176218][T17929] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.178986][T17929] bridge_slave_1: entered allmulticast mode
[  291.182256][T17929] bridge_slave_1: entered promiscuous mode
[  291.221345][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.233085][T17929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.241972][T17929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.256858][T17929] team0: Port device team_slave_0 added
[  291.264521][T17929] team0: Port device team_slave_1 added
[  291.294257][T17929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.296456][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.305800][T17929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.312635][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.325465][T17929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.327794][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.335628][T17929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.358291][T17929] hsr_slave_0: entered promiscuous mode
[  291.360664][T17929] hsr_slave_1: entered promiscuous mode
[  291.363291][T17929] debugfs: 'hsr0' already exists in 'hsr'
[  291.365355][T17929] Cannot create hsr debugfs directory
[  291.367401][T17937] chnl_net:caif_netlink_parms(): no params data found
[  291.375649][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.428166][T17937] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.432237][T17937] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.434696][T17937] bridge_slave_0: entered allmulticast mode
[  291.437237][T17937] bridge_slave_0: entered promiscuous mode
[  291.442080][T17937] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.444426][T17937] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.446889][T17937] bridge_slave_1: entered allmulticast mode
[  291.449354][T17937] bridge_slave_1: entered promiscuous mode
[  291.467527][T17937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.478395][T17937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.502417][T17937] team0: Port device team_slave_0 added
[  291.509234][T17937] team0: Port device team_slave_1 added
[  291.528215][T17937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.531219][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.538635][T17937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.546746][   T12] bridge_slave_1: left allmulticast mode
[  291.548537][   T12] bridge_slave_1: left promiscuous mode
[  291.551017][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.554419][   T12] bridge_slave_0: left allmulticast mode
[  291.556124][   T12] bridge_slave_0: left promiscuous mode
[  291.557952][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.753637][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.758607][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.763244][   T12] bond0 (unregistering): Released all slaves
[  291.923667][   T12] bond0 (unregistering): Released all slaves
[  291.928500][T17937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.931411][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.940118][T17937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.974420][T17937] hsr_slave_0: entered promiscuous mode
[  291.976719][T17937] hsr_slave_1: entered promiscuous mode
[  291.979492][T17937] debugfs: 'hsr0' already exists in 'hsr'
[  291.981748][T17937] Cannot create hsr debugfs directory
[  291.983692][   T12] tipc: Left network mode
[  292.314496][   T12] hsr_slave_0: left promiscuous mode
[  292.317148][   T12] hsr_slave_1: left promiscuous mode
[  292.319693][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.322724][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.326014][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.328783][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.334607][   T12] hsr_slave_0: left promiscuous mode
[  292.337073][   T12] hsr_slave_1: left promiscuous mode
[  292.345890][   T12] veth1_macvtap: left promiscuous mode
[  292.348026][   T12] veth0_macvtap: left promiscuous mode
[  292.350341][   T12] veth1_vlan: left promiscuous mode
[  292.352375][   T12] veth0_vlan: left promiscuous mode
[  292.355236][   T12] veth1_macvtap: left promiscuous mode
[  292.357368][   T12] veth0_macvtap: left promiscuous mode
[  292.359627][   T12] veth1_vlan: left promiscuous mode
[  292.365253][   T12] veth0_vlan: left promiscuous mode
[  292.493427][   T12] team0 (unregistering): Port device team_slave_1 removed
[  292.498622][   T12] team0 (unregistering): Port device team_slave_0 removed
[  292.706536][T17929] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  292.711275][T17929] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  292.715613][T17929] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  292.719298][T17929] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  292.737982][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  292.743170][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  292.746155][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  292.749108][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  292.755723][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  292.779329][T17959] wg1 speed is unknown, defaulting to 1000
[  292.782532][T17959] lo speed is unknown, defaulting to 1000
[  292.785545][T17959] lo speed is unknown, defaulting to 1000
[  292.820981][T17929] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.832490][ T5844] Bluetooth: hci0: command tx timeout
[  292.860867][T17929] 8021q: adding VLAN 0 to HW filter on device team0
[  292.865155][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.867457][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.874833][T17959] chnl_net:caif_netlink_parms(): no params data found
[  292.882256][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.884490][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.917949][T17959] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.922234][T17959] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.924978][T17959] bridge_slave_0: entered allmulticast mode
[  292.928104][T17959] bridge_slave_0: entered promiscuous mode
[  292.931902][T17959] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.934416][T17959] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.936854][T17959] bridge_slave_1: entered allmulticast mode
[  292.939386][T17959] bridge_slave_1: entered promiscuous mode
[  292.966631][T17959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.974726][T17959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.980746][ T5844] Bluetooth: hci2: command tx timeout
[  292.997013][T17959] team0: Port device team_slave_0 added
[  292.999692][T17959] team0: Port device team_slave_1 added
[  293.016345][T17959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.018765][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.027863][T17959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.038712][T17959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.042481][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.051030][T17959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.098886][T17937] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  293.108530][T17959] hsr_slave_0: entered promiscuous mode
[  293.113110][T17959] hsr_slave_1: entered promiscuous mode
[  293.115730][T17959] debugfs: 'hsr0' already exists in 'hsr'
[  293.117980][T17959] Cannot create hsr debugfs directory
[  293.120727][T17937] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  293.125866][T17937] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  293.138328][T17937] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  293.182076][T17929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.223757][T17937] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.229038][T17929] veth0_vlan: entered promiscuous mode
[  293.239441][T17937] 8021q: adding VLAN 0 to HW filter on device team0
[  293.244556][T17929] veth1_vlan: entered promiscuous mode
[  293.250410][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.252689][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.261705][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.263930][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.282072][T17929] veth0_macvtap: entered promiscuous mode
[  293.286393][T17929] veth1_macvtap: entered promiscuous mode
[  293.297868][T17929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.300298][   T12] IPVS: stop unused estimator thread 0...
[  293.300908][   T12] IPVS: stop unused estimator thread 0...
[  293.310887][T17929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.325462][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.328356][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.333078][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.335828][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.373019][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.380052][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.395282][T10107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.396268][T17937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.398076][T10107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.426435][T17937] veth0_vlan: entered promiscuous mode
[  293.431268][T17937] veth1_vlan: entered promiscuous mode
[  293.445446][T17937] veth0_macvtap: entered promiscuous mode
[  293.448998][T17937] veth1_macvtap: entered promiscuous mode
[  293.456945][T17988] Bluetooth: MGMT ver 1.23
[  293.461871][   T12] bridge_slave_1: left allmulticast mode
[  293.463651][   T12] bridge_slave_1: left promiscuous mode
[  293.465467][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.476295][   T12] bridge_slave_0: left allmulticast mode
[  293.478508][   T12] bridge_slave_0: left promiscuous mode
[  293.481501][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.525625][T17994] netlink: 'syz.0.3219': attribute type 1 has an invalid length.
[  293.528724][T17994] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3219'.
[  293.538788][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.544464][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.548606][   T12] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  293.553371][   T12] bond0 (unregistering): Released all slaves
[  293.562989][T17937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.568275][T17937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.581262][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.585373][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.601086][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.616535][T17959] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  293.621605][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.624552][T17959] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  293.636868][T17959] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  293.645330][T17959] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  293.664029][T10107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.668671][T10107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.691413][T10107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.695507][T10107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.733401][T17959] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.745415][T18006] netlink: 'syz.2.3211': attribute type 13 has an invalid length.
[  293.748193][T18006] netlink: 'syz.2.3211': attribute type 17 has an invalid length.
[  293.751782][   T12] hsr_slave_0: left promiscuous mode
[  293.755865][   T12] hsr_slave_1: left promiscuous mode
[  293.758447][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.764091][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.815029][   T12] team0 (unregistering): Port device team_slave_1 removed
[  293.824370][   T12] team0 (unregistering): Port device team_slave_0 removed
[  293.897456][T18006] net_ratelimit: 53 callbacks suppressed
[  293.897461][T18006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.916462][T18007] wg1 speed is unknown, defaulting to 1000
[  293.917911][T17959] 8021q: adding VLAN 0 to HW filter on device team0
[  293.921850][T18007] lo speed is unknown, defaulting to 1000
[  293.924443][T10107] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.926636][T10107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.931646][T18007] lo speed is unknown, defaulting to 1000
[  293.942627][T10107] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.945132][T10107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.965906][T17959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  294.055362][T17959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  294.099342][T17959] veth0_vlan: entered promiscuous mode
[  294.107612][T17959] veth1_vlan: entered promiscuous mode
[  294.139656][T17959] veth0_macvtap: entered promiscuous mode
[  294.145237][T17959] veth1_macvtap: entered promiscuous mode
[  294.169044][T17959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.175875][T17959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.183944][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.188322][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.191261][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.194095][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.222074][T10107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.227699][T10107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.238866][T10107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.242307][T10107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.297780][T18026] wg1 speed is unknown, defaulting to 1000
[  294.301416][T18026] lo speed is unknown, defaulting to 1000
[  294.304167][T18026] lo speed is unknown, defaulting to 1000
[  294.371543][T18026] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3224'.
[  294.381892][T18026] wg1 speed is unknown, defaulting to 1000
[  294.384058][T18026] lo speed is unknown, defaulting to 1000
[  294.386393][T18026] lo speed is unknown, defaulting to 1000
[  294.451120][T18032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'.
[  294.572765][T18039] vlan2: entered promiscuous mode
[  294.574365][T18039] bridge0: entered promiscuous mode
[  294.576470][T18039] bridge0: port 3(vlan2) entered blocking state
[  294.578553][T18039] bridge0: port 3(vlan2) entered disabled state
[  294.583124][T18039] vlan2: entered allmulticast mode
[  294.584726][T18039] bridge0: entered allmulticast mode
[  294.587118][T18039] vlan2: left allmulticast mode
[  294.602083][T18039] bridge0: left allmulticast mode
[  294.632550][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3227'.
[  294.819974][ T5844] Bluetooth: hci1: command tx timeout
[  295.632655][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.819321][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  295.822764][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  295.825356][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  295.828309][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  295.830889][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  295.844310][T18051] wg1 speed is unknown, defaulting to 1000
[  295.847288][T18051] lo speed is unknown, defaulting to 1000
[  295.850312][T18051] lo speed is unknown, defaulting to 1000
[  295.920928][T18051] chnl_net:caif_netlink_parms(): no params data found
[  295.958239][T18051] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.961861][T18051] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.964050][T18051] bridge_slave_0: entered allmulticast mode
[  295.966360][T18051] bridge_slave_0: entered promiscuous mode
[  295.969043][T18051] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.971732][T18051] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.973957][T18051] bridge_slave_1: entered allmulticast mode
[  295.976347][T18051] bridge_slave_1: entered promiscuous mode
[  295.989157][T18051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.993431][T18051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.007844][T18051] team0: Port device team_slave_0 added
[  296.010661][T18051] team0: Port device team_slave_1 added
[  296.024026][T18051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.026601][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.035160][T18051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.040125][T18051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.042364][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.051313][T18051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.071474][T18051] hsr_slave_0: entered promiscuous mode
[  296.074821][T18051] hsr_slave_1: entered promiscuous mode
[  296.077359][T18051] debugfs: 'hsr0' already exists in 'hsr'
[  296.079670][T18051] Cannot create hsr debugfs directory
[  296.363443][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  296.365796][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  296.368062][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  296.370861][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  296.373657][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  296.389998][T18068] wg1 speed is unknown, defaulting to 1000
[  296.392894][T18068] lo speed is unknown, defaulting to 1000
[  296.395196][T18068] lo speed is unknown, defaulting to 1000
[  296.456166][T18068] chnl_net:caif_netlink_parms(): no params data found
[  296.487428][T18068] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.490342][T18068] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.493085][T18068] bridge_slave_0: entered allmulticast mode
[  296.496129][T18068] bridge_slave_0: entered promiscuous mode
[  296.500530][T18068] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.503422][T18068] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.506215][T18068] bridge_slave_1: entered allmulticast mode
[  296.508824][T18068] bridge_slave_1: entered promiscuous mode
[  296.524178][T18068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.528974][T18068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.542875][T18068] team0: Port device team_slave_0 added
[  296.546695][T18068] team0: Port device team_slave_1 added
[  296.558110][T18068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.561075][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.571206][T18068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.575616][T18068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.577889][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.586852][T18068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.604474][T18068] hsr_slave_0: entered promiscuous mode
[  296.607026][T18068] hsr_slave_1: entered promiscuous mode
[  296.609342][T18068] debugfs: 'hsr0' already exists in 'hsr'
[  296.611443][T18068] Cannot create hsr debugfs directory
[  297.603390][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.643343][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.684932][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.737801][   T13] bridge_slave_1: left allmulticast mode
[  297.740359][   T13] bridge_slave_1: left promiscuous mode
[  297.742693][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.746018][   T13] bridge_slave_0: left allmulticast mode
[  297.747766][   T13] bridge_slave_0: left promiscuous mode
[  297.749618][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.860525][   T55] Bluetooth: hci0: command tx timeout
[  297.864764][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.869552][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.874275][   T13] bond0 (unregistering): Released all slaves
[  298.155652][   T13] hsr_slave_0: left promiscuous mode
[  298.158278][   T13] hsr_slave_1: left promiscuous mode
[  298.160981][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.163909][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.167220][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.170200][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.176453][   T13] veth1_macvtap: left promiscuous mode
[  298.178714][   T13] veth0_macvtap: left promiscuous mode
[  298.181887][   T13] veth1_vlan: left promiscuous mode
[  298.184217][   T13] veth0_vlan: left promiscuous mode
[  298.186366][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.189525][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.194297][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.197926][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.201751][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.286288][   T13] team0 (unregistering): Port device team_slave_1 removed
[  298.291608][   T13] team0 (unregistering): Port device team_slave_0 removed
[  298.335677][T18077] wg1 speed is unknown, defaulting to 1000
[  298.338080][T18077] lo speed is unknown, defaulting to 1000
[  298.347915][T18077] lo speed is unknown, defaulting to 1000
[  298.420982][   T55] Bluetooth: hci1: command tx timeout
[  298.429470][T18077] chnl_net:caif_netlink_parms(): no params data found
[  298.462446][T18077] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.464878][T18077] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.467523][T18077] bridge_slave_0: entered allmulticast mode
[  298.470796][T18077] bridge_slave_0: entered promiscuous mode
[  298.474514][T18077] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.476833][T18077] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.479306][T18077] bridge_slave_1: entered allmulticast mode
[  298.482776][T18077] bridge_slave_1: entered promiscuous mode
[  298.495532][T18077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.499684][T18077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.516904][T18077] team0: Port device team_slave_0 added
[  298.521574][T18077] team0: Port device team_slave_1 added
[  298.532625][T18077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.535234][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.544481][T18077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.549698][T18077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.552523][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.563862][T18077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.604572][T18077] hsr_slave_0: entered promiscuous mode
[  298.607426][T18077] hsr_slave_1: entered promiscuous mode
[  298.610264][T18077] debugfs: 'hsr0' already exists in 'hsr'
[  298.612444][T18077] Cannot create hsr debugfs directory
[  298.625358][T18051] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  298.635228][T18068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.651453][T18051] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  298.658458][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.667017][T18051] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  298.676161][T18051] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  298.694715][T18068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.745700][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.765602][T18051] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.777622][T18051] 8021q: adding VLAN 0 to HW filter on device team0
[  298.782824][T10091] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.785543][T10091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.806103][T10091] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.808584][T10091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.817678][T18068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.843669][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.875355][T18068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.893756][T18051] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.918864][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.933870][T18051] veth0_vlan: entered promiscuous mode
[  298.945994][T18051] veth1_vlan: entered promiscuous mode
[  298.955281][T18068] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  298.958942][T18068] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  298.964376][T18068] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  298.968114][T18068] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  298.999232][T18051] veth0_macvtap: entered promiscuous mode
[  299.006442][T18051] veth1_macvtap: entered promiscuous mode
[  299.029674][T18051] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.041206][   T13] bridge_slave_1: left allmulticast mode
[  299.044078][   T13] bridge_slave_1: left promiscuous mode
[  299.046047][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.049225][   T13] bridge_slave_0: left allmulticast mode
[  299.051785][   T13] bridge_slave_0: left promiscuous mode
[  299.053853][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.058784][   T13] bridge_slave_1: left allmulticast mode
[  299.062065][   T13] bridge_slave_1: left promiscuous mode
[  299.064328][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.068225][   T13] bridge_slave_0: left allmulticast mode
[  299.072251][   T13] bridge_slave_0: left promiscuous mode
[  299.074418][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.174503][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.179027][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.183138][   T13] bond0 (unregistering): Released all slaves
[  299.253212][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.257294][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.261168][   T13] bond0 (unregistering): Released all slaves
[  299.267028][T18051] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.280701][T17957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.287000][T17957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.291264][T17957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.294571][T17957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.324055][T18068] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.346140][T18068] 8021q: adding VLAN 0 to HW filter on device team0
[  299.355197][T10102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.359096][T10102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.362976][T10085] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.365836][T10085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.401481][T10085] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.404280][T10085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.414137][T10091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.418372][T10091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.423002][T18068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  299.427043][T18068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  299.474849][T18105] wg1 speed is unknown, defaulting to 1000
[  299.477148][T18105] lo speed is unknown, defaulting to 1000
[  299.479361][T18105] lo speed is unknown, defaulting to 1000
[  299.511844][T18068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.527940][T18068] veth0_vlan: entered promiscuous mode
[  299.534648][T18068] veth1_vlan: entered promiscuous mode
[  299.566084][T18068] veth0_macvtap: entered promiscuous mode
[  299.569501][T18068] veth1_macvtap: entered promiscuous mode
[  299.578716][T18068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.584266][T18068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.591694][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.595158][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.597894][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.606528][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.619288][   T13] hsr_slave_0: left promiscuous mode
[  299.623212][   T13] hsr_slave_1: left promiscuous mode
[  299.625135][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.627812][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.640123][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.642552][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.647729][   T13] hsr_slave_0: left promiscuous mode
[  299.651966][   T13] hsr_slave_1: left promiscuous mode
[  299.653951][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.656293][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.659113][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.663884][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.670800][   T13] veth1_macvtap: left promiscuous mode
[  299.672660][   T13] veth0_macvtap: left promiscuous mode
[  299.674493][   T13] veth1_vlan: left promiscuous mode
[  299.676164][   T13] veth0_vlan: left promiscuous mode
[  299.678567][   T13] veth1_macvtap: left promiscuous mode
[  299.681668][   T13] veth0_macvtap: left promiscuous mode
[  299.683474][   T13] veth1_vlan: left promiscuous mode
[  299.685206][   T13] veth0_vlan: left promiscuous mode
[  299.837141][   T13] team0 (unregistering): Port device team_slave_1 removed
[  299.843726][   T13] team0 (unregistering): Port device team_slave_0 removed
[  299.939882][   T55] Bluetooth: hci0: command tx timeout
[  299.948557][   T13] team0 (unregistering): Port device team_slave_1 removed
[  299.957768][   T13] team0 (unregistering): Port device team_slave_0 removed
[  299.994321][T18117] syzkaller1: entered promiscuous mode
[  299.996556][T18117] syzkaller1: entered allmulticast mode
[  300.048726][T18077] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  300.053062][T18077] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  300.053071][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.059122][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.062791][T18077] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  300.067077][T18077] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  300.095545][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.098635][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.125457][T18131] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3233'.
[  300.147791][T18077] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.160499][T18077] 8021q: adding VLAN 0 to HW filter on device team0
[  300.165851][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.168577][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.177982][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.180555][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.261883][   T55] Bluetooth: hci2: command tx timeout
[  300.272249][T18142] netlink: 'syz.0.3244': attribute type 6 has an invalid length.
[  300.276415][T18142] x9: renamed from bridge_slave_0 (while UP)
[  300.304057][T18077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.337161][T18077] veth0_vlan: entered promiscuous mode
[  300.344529][T18077] veth1_vlan: entered promiscuous mode
[  300.356371][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'.
[  300.364073][T18142] veth1_macvtap: left promiscuous mode
[  300.378234][T18077] veth0_macvtap: entered promiscuous mode
[  300.383627][T18077] veth1_macvtap: entered promiscuous mode
[  300.401234][T18077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.411695][T18077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.418288][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.424046][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.427337][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.431747][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.485758][T10091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.488915][T10091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.499980][   T55] Bluetooth: hci1: command tx timeout
[  300.511878][T10085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.515297][T10085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.546138][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'.
[  300.591540][T18149] netlink: 'syz.1.3245': attribute type 13 has an invalid length.
[  300.593916][T18149] netlink: 'syz.1.3245': attribute type 17 has an invalid length.
[  300.616989][T18149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  300.636424][T18149] wg1 speed is unknown, defaulting to 1000
[  300.638635][T18149] lo speed is unknown, defaulting to 1000
[  300.641961][T18149] lo speed is unknown, defaulting to 1000
[  300.820701][T18163] netlink: 'syz.1.3248': attribute type 1 has an invalid length.
[  300.949379][T18173] syzkaller1: entered promiscuous mode
[  300.951943][T18173] syzkaller1: entered allmulticast mode
[  302.020037][   T55] Bluetooth: hci0: command tx timeout
[  302.248659][T18196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3260'.
[  302.258201][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3260'.
[  302.263861][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3260'.
[  302.337688][T18203] wg1 speed is unknown, defaulting to 1000
[  302.343902][T18203] lo speed is unknown, defaulting to 1000
[  302.346889][T18203] lo speed is unknown, defaulting to 1000
[  302.553881][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3266'.
[  302.581184][   T55] Bluetooth: hci1: command tx timeout
[  302.646325][ T5871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.703978][ T5871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.712712][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.715880][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.718892][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.726169][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.728846][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.745391][T18224] wg1 speed is unknown, defaulting to 1000
[  302.747867][T18224] lo speed is unknown, defaulting to 1000
[  302.750287][T18224] lo speed is unknown, defaulting to 1000
[  302.772584][ T5871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.782727][T18222] wg1 speed is unknown, defaulting to 1000
[  302.787458][T18222] lo speed is unknown, defaulting to 1000
[  302.791484][T18222] lo speed is unknown, defaulting to 1000
[  302.834967][ T5871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.853353][T18219] wg1 speed is unknown, defaulting to 1000
[  302.856264][T18219] lo speed is unknown, defaulting to 1000
[  302.859255][T18219] lo speed is unknown, defaulting to 1000
[  302.961415][T18222] chnl_net:caif_netlink_parms(): no params data found
[  302.971803][ T5871] bridge_slave_1: left allmulticast mode
[  302.973615][ T5871] bridge_slave_1: left promiscuous mode
[  302.975475][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.980553][ T5871] bridge_slave_0: left allmulticast mode
[  302.982429][ T5871] bridge_slave_0: left promiscuous mode
[  302.984266][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.018349][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.022042][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.025583][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.035222][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.040964][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.056789][T18241] siw: device registration error -23
[  303.094821][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.098511][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.102217][ T5871] bond0 (unregistering): Released all slaves
[  303.128230][T18237] wg1 speed is unknown, defaulting to 1000
[  303.143426][T18237] lo speed is unknown, defaulting to 1000
[  303.143678][T18243] wg1 speed is unknown, defaulting to 1000
[  303.146201][T18237] lo speed is unknown, defaulting to 1000
[  303.147954][T18243] lo speed is unknown, defaulting to 1000
[  303.165187][T18222] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.167417][T18222] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.172173][T18222] bridge_slave_0: entered allmulticast mode
[  303.174850][T18222] bridge_slave_0: entered promiscuous mode
[  303.179060][T18222] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.181508][T18222] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.183810][T18222] bridge_slave_1: entered allmulticast mode
[  303.186200][T18222] bridge_slave_1: entered promiscuous mode
[  303.188357][T18243] lo speed is unknown, defaulting to 1000
[  303.214493][T18222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.229414][T18222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.262929][T18222] team0: Port device team_slave_0 added
[  303.277780][T18222] team0: Port device team_slave_1 added
[  303.323155][T18222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.325408][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.336375][T18222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.341804][T18222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.345512][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.356986][T18222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.367530][ T5871] hsr_slave_0: left promiscuous mode
[  303.371577][ T5871] hsr_slave_1: left promiscuous mode
[  303.373909][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.376616][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.380311][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.383195][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.388835][ T5871] veth1_macvtap: left promiscuous mode
[  303.391894][ T5871] veth0_macvtap: left promiscuous mode
[  303.393930][ T5871] veth1_vlan: left promiscuous mode
[  303.395717][ T5871] veth0_vlan: left promiscuous mode
[  303.482927][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  303.488829][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  303.550370][T18253] wg1 speed is unknown, defaulting to 1000
[  303.552554][T18253] lo speed is unknown, defaulting to 1000
[  303.585054][T18253] lo speed is unknown, defaulting to 1000
[  303.588618][T18222] hsr_slave_0: entered promiscuous mode
[  303.591698][T18222] hsr_slave_1: entered promiscuous mode
[  303.594160][T18222] debugfs: 'hsr0' already exists in 'hsr'
[  303.596022][T18222] Cannot create hsr debugfs directory
[  303.610516][T18237] chnl_net:caif_netlink_parms(): no params data found
[  303.693095][T18237] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.695599][T18237] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.698339][T18237] bridge_slave_0: entered allmulticast mode
[  303.702817][T18237] bridge_slave_0: entered promiscuous mode
[  303.705810][T18237] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.708403][T18237] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.711843][T18237] bridge_slave_1: entered allmulticast mode
[  303.715221][T18237] bridge_slave_1: entered promiscuous mode
[  303.747844][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.757349][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.782363][T18237] team0: Port device team_slave_0 added
[  303.786191][T18237] team0: Port device team_slave_1 added
[  303.801136][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.803654][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.812808][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.816799][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.818910][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.827411][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.846149][T18237] hsr_slave_0: entered promiscuous mode
[  303.848362][T18237] hsr_slave_1: entered promiscuous mode
[  303.851435][T18237] debugfs: 'hsr0' already exists in 'hsr'
[  303.853678][T18237] Cannot create hsr debugfs directory
[  303.863677][T18270] wg1 speed is unknown, defaulting to 1000
[  303.871563][T18270] lo speed is unknown, defaulting to 1000
[  303.878777][T18270] lo speed is unknown, defaulting to 1000
[  303.937569][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.999398][T18274] wg1 speed is unknown, defaulting to 1000
[  304.002765][T18274] lo speed is unknown, defaulting to 1000
[  304.005710][T18274] lo speed is unknown, defaulting to 1000
[  304.039278][T18274] netlink: 'syz.0.3278': attribute type 5 has an invalid length.
[  304.042922][    T9] IPVS: starting estimator thread 0...
[  304.045817][T18274] ieee802154 phy1 wpan1: encryption failed: -22
[  304.130589][T18276] IPVS: using max 72 ests per chain, 172800 per kthread
[  304.253532][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.294094][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.334102][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.401781][ T5871] bridge_slave_1: left allmulticast mode
[  304.404007][ T5871] bridge_slave_1: left promiscuous mode
[  304.406078][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.409371][ T5871] bridge_slave_0: left allmulticast mode
[  304.411659][ T5871] bridge_slave_0: left promiscuous mode
[  304.413831][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.544183][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.548563][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.553135][ T5871] bond0 (unregistering): Released all slaves
[  304.660237][ T5844] Bluetooth: hci1: command tx timeout
[  304.802251][ T5871] hsr_slave_0: left promiscuous mode
[  304.804154][ T5871] hsr_slave_1: left promiscuous mode
[  304.806315][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.808736][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.811425][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.813734][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.818579][ T5871] veth1_macvtap: left promiscuous mode
[  304.825902][ T5871] veth0_macvtap: left promiscuous mode
[  304.828062][ T5871] veth1_vlan: left promiscuous mode
[  304.830342][ T5844] Bluetooth: hci0: command tx timeout
[  304.832588][ T5871] veth0_vlan: left promiscuous mode
[  304.901836][T18279] netlink: 'syz.0.3279': attribute type 13 has an invalid length.
[  304.904536][T18279] netlink: 'syz.0.3279': attribute type 17 has an invalid length.
[  304.932866][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  304.937698][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  305.008039][T18279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.025531][T18280] wg1 speed is unknown, defaulting to 1000
[  305.028619][T18280] lo speed is unknown, defaulting to 1000
[  305.032785][T18280] lo speed is unknown, defaulting to 1000
[  305.070628][ T5844] Bluetooth: hci2: command tx timeout
[  305.084159][T18284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3280'.
[  305.111363][T18286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3281'.
[  305.116332][T18286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3281'.
[  305.164529][T18290] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3283'.
[  305.189130][T18290] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3283'.
[  305.205580][T18290] syzkaller1: entered promiscuous mode
[  305.207787][T18290] syzkaller1: entered allmulticast mode
[  305.247923][T18222] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  305.251740][T18222] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  305.259112][T18222] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  305.263499][T18222] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  305.314232][T18237] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  305.324021][T18237] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  305.327373][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'.
[  305.371153][T18237] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  305.386182][T18222] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.395104][T18237] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  305.422993][T18222] 8021q: adding VLAN 0 to HW filter on device team0
[  305.434630][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.437565][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.466935][T10085] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.469853][T10085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.542157][ T5871] IPVS: stop unused estimator thread 0...
[  305.552213][T18237] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.573193][T18237] 8021q: adding VLAN 0 to HW filter on device team0
[  305.583409][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.585668][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.591149][T18308] wg1 speed is unknown, defaulting to 1000
[  305.593325][T18308] lo speed is unknown, defaulting to 1000
[  305.595456][T18308] lo speed is unknown, defaulting to 1000
[  305.602804][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.605092][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.665817][T18222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.689007][T18222] veth0_vlan: entered promiscuous mode
[  305.721397][T18222] veth1_vlan: entered promiscuous mode
[  305.740797][T18222] veth0_macvtap: entered promiscuous mode
[  305.760529][T18222] veth1_macvtap: entered promiscuous mode
[  305.792647][T18222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.798207][T18222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.808559][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.840352][T18328] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.843161][T18328] bridge0: port 1(1x9) entered disabled state
[  305.876669][T18328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.882053][T18328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.934849][T17957] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.937992][T17957] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.954449][T17957] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.963988][T17957] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.967360][T17957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.981674][T17957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.985698][T17957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.994316][T17957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.000556][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'.
[  306.007937][T18237] veth0_vlan: entered promiscuous mode
[  306.026319][T18237] veth1_vlan: entered promiscuous mode
[  306.040326][T10091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.043964][T10091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.061237][T18237] veth0_macvtap: entered promiscuous mode
[  306.064146][T10091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.067265][T10091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.067556][T18237] veth1_macvtap: entered promiscuous mode
[  306.079516][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.084988][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.092746][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.096645][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.111221][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.114914][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.158863][T10085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.163477][T10085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.181172][T10085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.184332][T10085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.230391][T18336] siw: device registration error -23
[  306.283925][    T9] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  306.286570][    T9] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  306.289565][    T9] hid-generic 0005:16BF:5505.0002: reserved main item tag 0xe
[  306.296434][    T9] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  306.409251][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  306.415955][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  306.419121][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  306.422721][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  306.426139][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  306.429080][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  306.545039][T18360] wg1 speed is unknown, defaulting to 1000
[  306.547557][T18360] lo speed is unknown, defaulting to 1000
[  306.550961][T18360] lo speed is unknown, defaulting to 1000
[  306.657074][T18363] netlink: 'syz.1.3297': attribute type 16 has an invalid length.
[  306.660816][T18363] netlink: 'syz.1.3297': attribute type 17 has an invalid length.
[  306.685422][T18363] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.687749][T18363] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.728422][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.734343][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.789184][ T5717] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.793319][ T5717] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.797053][ T5717] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.801072][ T5717] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.900876][ T5844] Bluetooth: hci0: command tx timeout
[  307.011300][T18376] wg1 speed is unknown, defaulting to 1000
[  307.013926][T18376] lo speed is unknown, defaulting to 1000
[  307.020903][T18376] lo speed is unknown, defaulting to 1000
[  307.139978][ T5844] Bluetooth: hci2: command tx timeout
[  307.186090][T18387] wg1 speed is unknown, defaulting to 1000
[  307.188623][T18387] lo speed is unknown, defaulting to 1000
[  307.193840][T18387] lo speed is unknown, defaulting to 1000
[  307.244675][T18387] wg1 speed is unknown, defaulting to 1000
[  307.247950][T18387] lo speed is unknown, defaulting to 1000
[  307.251835][T18387] lo speed is unknown, defaulting to 1000
[  307.832646][T18410] geneve2: entered promiscuous mode
[  307.838317][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.844198][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.849654][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.855250][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.886083][T18415] siw: device registration error -23
[  307.975060][T18426] geneve2: left promiscuous mode
[  307.977031][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.979480][ T5871] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.982545][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.984866][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.987210][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.989576][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.995820][ T5871] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.998951][ T5871] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.009189][T18427] wg1 speed is unknown, defaulting to 1000
[  308.011638][T18427] lo speed is unknown, defaulting to 1000
[  308.014016][T18427] lo speed is unknown, defaulting to 1000
[  308.029048][ T5871] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.122044][T18427] chnl_net:caif_netlink_parms(): no params data found
[  308.184471][T18440] wg1 speed is unknown, defaulting to 1000
[  308.186630][T18440] lo speed is unknown, defaulting to 1000
[  308.188725][T18440] lo speed is unknown, defaulting to 1000
[  308.195648][T18427] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.197863][T18427] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.200256][T18427] bridge_slave_0: entered allmulticast mode
[  308.202767][T18427] bridge_slave_0: entered promiscuous mode
[  308.206465][T18427] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.209111][T18427] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.211995][T18427] bridge_slave_1: entered allmulticast mode
[  308.214815][T18427] bridge_slave_1: entered promiscuous mode
[  308.223946][T18448] wg1 speed is unknown, defaulting to 1000
[  308.236713][T18448] lo speed is unknown, defaulting to 1000
[  308.238516][T18427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.243084][T18427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.254983][T18448] lo speed is unknown, defaulting to 1000
[  308.274605][T18427] team0: Port device team_slave_0 added
[  308.282939][T18427] team0: Port device team_slave_1 added
[  308.315466][T18427] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.318038][T18427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.327669][T18427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.339316][T18427] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.342988][T18427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.353341][T18427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.407774][T18427] hsr_slave_0: entered promiscuous mode
[  308.411090][T18427] hsr_slave_1: entered promiscuous mode
[  308.413804][T18427] debugfs: 'hsr0' already exists in 'hsr'
[  308.420338][T18427] Cannot create hsr debugfs directory
[  308.472438][T18461] wg1 speed is unknown, defaulting to 1000
[  308.475596][T18461] lo speed is unknown, defaulting to 1000
[  308.478717][T18461] lo speed is unknown, defaulting to 1000
[  308.520780][T18462] wg1 speed is unknown, defaulting to 1000
[  308.523912][T18462] lo speed is unknown, defaulting to 1000
[  308.527816][T18462] lo speed is unknown, defaulting to 1000
[  308.531517][T18463] netlink: 'syz.1.3326': attribute type 16 has an invalid length.
[  308.534466][T18463] netlink: 'syz.1.3326': attribute type 17 has an invalid length.
[  308.779571][T18480] IPVS: length: 49 != 1272
[  308.858574][T18427] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  308.862198][T18427] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  308.865918][T18427] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  308.869497][T18427] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  308.914453][T18427] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.924597][T18427] 8021q: adding VLAN 0 to HW filter on device team0
[  308.933759][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.936699][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.944554][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.947392][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.979970][ T5844] Bluetooth: hci0: command tx timeout
[  309.038305][T18427] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.063793][T18427] veth0_vlan: entered promiscuous mode
[  309.069484][T18427] veth1_vlan: entered promiscuous mode
[  309.087999][T18427] veth0_macvtap: entered promiscuous mode
[  309.094107][T18427] veth1_macvtap: entered promiscuous mode
[  309.103526][T18427] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.111084][T18427] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.117722][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.123274][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.129183][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.134115][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.159298][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.162215][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.180550][T10102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.184091][T10102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.219997][ T5844] Bluetooth: hci2: command tx timeout
[  309.572978][T18528] netlink: 'syz.1.3342': attribute type 1 has an invalid length.
[  309.809261][T18566] wg1 speed is unknown, defaulting to 1000
[  309.813128][T18566] lo speed is unknown, defaulting to 1000
[  309.815979][T18566] lo speed is unknown, defaulting to 1000
[  309.888738][T18576] wg1 speed is unknown, defaulting to 1000
[  309.892759][T18576] lo speed is unknown, defaulting to 1000
[  309.895360][T18576] lo speed is unknown, defaulting to 1000
[  309.947638][T18576] wg1 speed is unknown, defaulting to 1000
[  309.950385][T18576] lo speed is unknown, defaulting to 1000
[  309.952815][T18576] lo speed is unknown, defaulting to 1000
[  310.021560][ T5844] Bluetooth: hci1: command tx timeout
[  310.109619][T18587] team_slave_0: entered promiscuous mode
[  310.111503][T18587] team_slave_1: entered promiscuous mode
[  310.113552][T18587] macsec1: entered promiscuous mode
[  310.115225][T18587] team0: entered promiscuous mode
[  310.396784][T18602] __nla_validate_parse: 29 callbacks suppressed
[  310.396800][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'.
[  310.405839][T18602] ip6tnl0: entered promiscuous mode
[  310.407729][T18602] ip6tnl0: entered allmulticast mode
[  310.575256][T18607] wg1 speed is unknown, defaulting to 1000
[  310.577961][T18607] lo speed is unknown, defaulting to 1000
[  310.582398][T18607] lo speed is unknown, defaulting to 1000
[  310.684226][T18616] netlink: 'syz.0.3366': attribute type 1 has an invalid length.
[  310.808979][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.813061][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.816432][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.821885][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.825532][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.839243][T18625] wg1 speed is unknown, defaulting to 1000
[  310.841676][T18625] lo speed is unknown, defaulting to 1000
[  310.843917][T18625] lo speed is unknown, defaulting to 1000
[  310.929186][T18625] chnl_net:caif_netlink_parms(): no params data found
[  310.963376][T18625] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.965855][T18625] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.968081][T18625] bridge_slave_0: entered allmulticast mode
[  310.970951][T18625] bridge_slave_0: entered promiscuous mode
[  310.974528][T18625] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.976909][T18625] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.979230][T18625] bridge_slave_1: entered allmulticast mode
[  310.982258][T18625] bridge_slave_1: entered promiscuous mode
[  310.995273][T18625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.001362][T18625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.020999][T18625] team0: Port device team_slave_0 added
[  311.025517][T18625] team0: Port device team_slave_1 added
[  311.044644][T18625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.047394][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.058233][T18625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.064418][T18625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.064680][T18651] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3372'.
[  311.067181][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.067204][T18625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.089061][T18651] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  311.103956][T18625] hsr_slave_0: entered promiscuous mode
[  311.106964][T18625] hsr_slave_1: entered promiscuous mode
[  311.109588][T18625] debugfs: 'hsr0' already exists in 'hsr'
[  311.114414][T18625] Cannot create hsr debugfs directory
[  311.166058][T18625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.194176][T18625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.243688][T18625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.283912][T18625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.299953][ T5844] Bluetooth: hci2: command tx timeout
[  311.326729][ T5871] bridge_slave_1: left allmulticast mode
[  311.329002][ T5871] bridge_slave_1: left promiscuous mode
[  311.332141][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.336344][ T5871] bridge_slave_0: left allmulticast mode
[  311.338619][ T5871] bridge_slave_0: left promiscuous mode
[  311.341260][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.483634][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.488438][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.493518][ T5871] bond0 (unregistering): Released all slaves
[  311.511965][T18625] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  311.515600][T18625] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  311.519656][T18625] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  311.524636][T18625] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  311.559667][T18625] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.570919][T18625] 8021q: adding VLAN 0 to HW filter on device team0
[  311.575883][T10085] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.578194][T10085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.602101][T10085] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.604426][T10085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.679301][ T5871] hsr_slave_0: left promiscuous mode
[  311.684121][ T5871] hsr_slave_1: left promiscuous mode
[  311.686271][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.688746][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.692289][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.694990][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.702758][   T97] block nbd0: Possible stuck request ffff888021db0000: control (read@0,1024B). Runtime 180 seconds
[  311.702862][ T5871] team0: left promiscuous mode
[  311.706496][   T97] block nbd0: Possible stuck request ffff888021db0200: control (read@1024,1024B). Runtime 180 seconds
[  311.708187][ T5871] team_slave_0: left promiscuous mode
[  311.712054][   T97] block nbd0: Possible stuck request ffff888021db0400: control (read@2048,1024B). Runtime 180 seconds
[  311.713915][ T5871] team_slave_1: left promiscuous mode
[  311.714639][ T5871] veth1_macvtap: left promiscuous mode
[  311.717824][   T97] block nbd0: Possible stuck request ffff888021db0600: control (read@3072,1024B). Runtime 180 seconds
[  311.720216][ T5871] veth0_macvtap: left promiscuous mode
[  311.728157][ T5871] veth1_vlan: left promiscuous mode
[  311.731049][ T5871] veth0_vlan: left promiscuous mode
[  311.895860][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  311.901578][T18684] netlink: 'syz.1.3378': attribute type 11 has an invalid length.
[  311.906247][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  311.965340][T18687] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  311.981700][T18625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.006464][T18684] netlink: 'syz.1.3378': attribute type 16 has an invalid length.
[  312.008949][T18684] netlink: 'syz.1.3378': attribute type 17 has an invalid length.
[  312.022357][T18625] veth0_vlan: entered promiscuous mode
[  312.029295][T18625] veth1_vlan: entered promiscuous mode
[  312.058067][T18625] veth0_macvtap: entered promiscuous mode
[  312.065505][T18625] veth1_macvtap: entered promiscuous mode
[  312.076452][T18625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.083012][T18625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.087755][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.091950][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.094617][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.100120][ T5844] Bluetooth: hci1: command tx timeout
[  312.103871][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.129237][T10107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.136201][T10107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.146020][T10102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.148629][T10102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.150118][T18698] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3382'.
[  312.188537][T18698] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  312.323024][T18723] syzkaller1: entered promiscuous mode
[  312.324738][T18723] syzkaller1: entered allmulticast mode
[  312.368306][T18732] wg1 speed is unknown, defaulting to 1000
[  312.374854][T18732] lo speed is unknown, defaulting to 1000
[  312.377052][T18732] lo speed is unknown, defaulting to 1000
[  312.597441][T18744] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  312.611227][T18744] wg1 speed is unknown, defaulting to 1000
[  312.613633][T18744] lo speed is unknown, defaulting to 1000
[  312.616164][T18744] lo speed is unknown, defaulting to 1000
[  312.749284][T18760] wg1 speed is unknown, defaulting to 1000
[  312.755023][T18760] lo speed is unknown, defaulting to 1000
[  312.757216][T18760] lo speed is unknown, defaulting to 1000
[  312.818363][T18770] siw: device registration error -23
[  312.833762][T18770] netlink: 'syz.0.3395': attribute type 4 has an invalid length.
[  312.899911][ T5844] Bluetooth: hci0: command tx timeout
[  312.907200][T18785] netlink: 'syz.0.3397': attribute type 1 has an invalid length.
[  313.822894][T18792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.180081][ T5844] Bluetooth: hci1: command tx timeout
[  314.383745][T18895] wg1 speed is unknown, defaulting to 1000
[  314.388486][T18895] lo speed is unknown, defaulting to 1000
[  314.393040][T18895] lo speed is unknown, defaulting to 1000
[  314.423972][T18895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3403'.
[  314.427559][T18895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3403'.
[  314.441749][T18895] wg1 speed is unknown, defaulting to 1000
[  314.444763][T18895] lo speed is unknown, defaulting to 1000
[  314.447313][T18895] lo speed is unknown, defaulting to 1000
[  314.555909][T18899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3404'.
[  314.851048][T18920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3409'.
[  314.917104][T18920] wg1 speed is unknown, defaulting to 1000
[  314.920047][T18920] lo speed is unknown, defaulting to 1000
[  314.923034][T18920] lo speed is unknown, defaulting to 1000
[  314.979884][ T5844] Bluetooth: hci0: command tx timeout
[  315.067001][T18928] netlink: 'syz.2.3411': attribute type 12 has an invalid length.
[  315.154765][T18934] wg1 speed is unknown, defaulting to 1000
[  315.157381][T18934] lo speed is unknown, defaulting to 1000
[  315.161533][T18934] lo speed is unknown, defaulting to 1000
[  315.256885][T18939] wg1 speed is unknown, defaulting to 1000
[  315.260189][T18939] lo speed is unknown, defaulting to 1000
[  315.263387][T18939] lo speed is unknown, defaulting to 1000
[  315.367584][T18948] wg1 speed is unknown, defaulting to 1000
[  315.372768][T18948] lo speed is unknown, defaulting to 1000
[  315.375292][T18948] lo speed is unknown, defaulting to 1000
[  315.488373][T18954] wg1 speed is unknown, defaulting to 1000
[  315.491374][T18954] lo speed is unknown, defaulting to 1000
[  315.500366][T18954] lo speed is unknown, defaulting to 1000
[  315.575057][T18958] geneve3: entered promiscuous mode
[  315.582020][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  315.589351][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  315.596940][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  315.635868][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  315.751806][T18982] siw: device registration error -23
[  315.758061][T18982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3427'.
[  315.762796][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3427'.
[  315.797208][T18986] wg1 speed is unknown, defaulting to 1000
[  315.799366][T18986] lo speed is unknown, defaulting to 1000
[  315.801952][T18986] lo speed is unknown, defaulting to 1000
[  315.877532][T19000] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  315.984798][T19023] netlink: 'syz.2.3439': attribute type 1 has an invalid length.
[  316.026673][T19028] wg1 speed is unknown, defaulting to 1000
[  316.028986][T19028] lo speed is unknown, defaulting to 1000
[  316.035499][T19030] netlink: 'syz.2.3441': attribute type 4 has an invalid length.
[  316.045381][T19028] lo speed is unknown, defaulting to 1000
[  316.051652][T19030] netlink: 'syz.2.3441': attribute type 4 has an invalid length.
[  316.073945][T19033] wg1 speed is unknown, defaulting to 1000
[  316.076115][T19033] lo speed is unknown, defaulting to 1000
[  316.078219][T19033] lo speed is unknown, defaulting to 1000
[  316.093911][T19035] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3438'.
[  316.135729][T19035] wg1 speed is unknown, defaulting to 1000
[  316.138518][T19035] lo speed is unknown, defaulting to 1000
[  316.150437][T19035] lo speed is unknown, defaulting to 1000
[  316.260029][ T5844] Bluetooth: hci1: command tx timeout
[  316.267840][T19046] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3445'.
[  316.272603][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3445'.
[  316.324837][T19059] _Z`Ԁ@: entered promiscuous mode
[  316.374789][T19059] wg1 speed is unknown, defaulting to 1000
[  316.382211][T19059] lo speed is unknown, defaulting to 1000
[  316.403958][T19059] lo speed is unknown, defaulting to 1000
[  316.466540][T19068] wg1 speed is unknown, defaulting to 1000
[  316.469265][T19068] lo speed is unknown, defaulting to 1000
[  316.477451][T19068] lo speed is unknown, defaulting to 1000
[  316.526482][T19075] wg1 speed is unknown, defaulting to 1000
[  316.546920][T19075] lo speed is unknown, defaulting to 1000
[  316.554390][T19071] wg1 speed is unknown, defaulting to 1000
[  316.558804][T19075] lo speed is unknown, defaulting to 1000
[  316.559204][T19071] lo speed is unknown, defaulting to 1000
[  316.561928][T19076] wg1 speed is unknown, defaulting to 1000
[  316.577572][T19071] lo speed is unknown, defaulting to 1000
[  316.584814][T19076] lo speed is unknown, defaulting to 1000
[  316.586933][T19076] lo speed is unknown, defaulting to 1000
[  316.697345][T19084] wg1 speed is unknown, defaulting to 1000
[  316.705809][T19084] lo speed is unknown, defaulting to 1000
[  316.710987][T19084] lo speed is unknown, defaulting to 1000
[  316.744342][T19085] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3453'.
[  316.758458][T19085] wg1 speed is unknown, defaulting to 1000
[  316.772582][T19085] lo speed is unknown, defaulting to 1000
[  316.774784][T19085] lo speed is unknown, defaulting to 1000
[  316.823880][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  316.913593][T19100] syzkaller1: entered promiscuous mode
[  316.915433][T19100] syzkaller1: entered allmulticast mode
[  317.109355][ T9509] hid-generic 0005:0B57:0000.0003: collection stack underflow
[  317.112620][ T9509] hid-generic 0005:0B57:0000.0003: item 0 0 0 12 parsing failed
[  317.116276][ T9509] hid-generic 0005:0B57:0000.0003: probe with driver hid-generic failed with error -22
[  317.216553][T19120] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3463'.
[  317.885420][T19128] wg1 speed is unknown, defaulting to 1000
[  317.887774][T19128] lo speed is unknown, defaulting to 1000
[  317.890090][T19128] lo speed is unknown, defaulting to 1000
[  317.934535][T19132] netlink: 'syz.2.3467': attribute type 10 has an invalid length.
[  317.934570][T19133] netlink: 'syz.2.3467': attribute type 10 has an invalid length.
[  317.937120][T19132] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.942980][T19132] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.955551][T19132] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.958459][T19132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.961581][T19132] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.964377][T19132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.969326][T19132] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  317.974237][T19133] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.976601][T19133] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.981089][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3467'.
[  317.981101][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3467'.
[  317.984072][T19133] bridge_slave_1: left allmulticast mode
[  317.990278][T19133] bridge_slave_1: left promiscuous mode
[  317.992641][T19133] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.996993][T19133] bridge_slave_0: left allmulticast mode
[  317.998816][T19133] bridge_slave_0: left promiscuous mode
[  318.001481][T19133] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.006638][T19133] bond0: (slave bridge0): Releasing backup interface
[  318.139103][T19141] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3470'.
[  318.158111][T19143] netlink: 'syz.0.3471': attribute type 4 has an invalid length.
[  318.167681][T19143] netlink: 'syz.0.3471': attribute type 4 has an invalid length.
[  318.270635][T19167] wg1 speed is unknown, defaulting to 1000
[  318.273497][T19167] lo speed is unknown, defaulting to 1000
[  318.276317][T19167] lo speed is unknown, defaulting to 1000
[  318.342742][T19111] ==================================================================
[  318.345809][T19111] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  318.348700][T19111] Read of size 8 at addr ffff88812774c0a0 by task khidpd_0b570000/19111
[  318.352449][T19111] 
[  318.353697][T19111] CPU: 1 UID: 0 PID: 19111 Comm: khidpd_0b570000 Not tainted syzkaller #0 PREEMPT(full) 
[  318.353715][T19111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.353724][T19111] Call Trace:
[  318.353747][T19111]  <TASK>
[  318.353754][T19111]  dump_stack_lvl+0x189/0x250
[  318.353775][T19111]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.353790][T19111]  ? lock_release+0x4b/0x3e0
[  318.353811][T19111]  ? __virt_addr_valid+0x4a5/0x5c0
[  318.353829][T19111]  print_report+0xca/0x240
[  318.353843][T19111]  ? __mutex_lock+0x801/0x1350
[  318.353861][T19111]  kasan_report+0x118/0x150
[  318.353878][T19111]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.353896][T19111]  ? __mutex_lock+0x801/0x1350
[  318.353947][T19111]  __mutex_lock+0x801/0x1350
[  318.353967][T19111]  ? __mutex_lock+0x5bb/0x1350
[  318.353988][T19111]  ? l2cap_unregister_user+0x6a/0x1b0
[  318.354004][T19111]  ? __pfx___mutex_lock+0x10/0x10
[  318.354023][T19111]  ? __pfx___timer_delete_sync+0x10/0x10
[  318.354039][T19111]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.354058][T19111]  l2cap_unregister_user+0x6a/0x1b0
[  318.354076][T19111]  hidp_session_thread+0x3c9/0x410
[  318.354093][T19111]  ? __pfx_hidp_session_thread+0x10/0x10
[  318.354107][T19111]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.354123][T19111]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  318.354141][T19111]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  318.354157][T19111]  ? __kthread_parkme+0x7b/0x200
[  318.354171][T19111]  ? __kthread_parkme+0x1a1/0x200
[  318.354187][T19111]  kthread+0x711/0x8a0
[  318.354204][T19111]  ? __pfx_hidp_session_thread+0x10/0x10
[  318.354220][T19111]  ? __pfx_kthread+0x10/0x10
[  318.354235][T19111]  ? rcu_is_watching+0x15/0xb0
[  318.354248][T19111]  ? __pfx_kthread+0x10/0x10
[  318.354263][T19111]  ret_from_fork+0x3fc/0x770
[  318.354279][T19111]  ? __pfx_ret_from_fork+0x10/0x10
[  318.354294][T19111]  ? __switch_to_asm+0x39/0x70
[  318.354310][T19111]  ? __switch_to_asm+0x33/0x70
[  318.354325][T19111]  ? __pfx_kthread+0x10/0x10
[  318.354340][T19111]  ret_from_fork_asm+0x1a/0x30
[  318.354361][T19111]  </TASK>
[  318.354367][T19111] 
[  318.425821][T19111] Allocated by task 18427:
[  318.427190][T19111]  kasan_save_track+0x3e/0x80
[  318.428786][T19111]  __kasan_kmalloc+0x93/0xb0
[  318.430322][T19111]  __kmalloc_noprof+0x27a/0x4f0
[  318.431768][T19111]  hci_alloc_dev_priv+0x28/0x2060
[  318.433425][T19111]  vhci_create_device+0x120/0x6e0
[  318.434968][T19111]  vhci_write+0x3ce/0x4a0
[  318.436304][T19111]  vfs_write+0x5c9/0xb30
[  318.437716][T19111]  ksys_write+0x145/0x250
[  318.439170][T19111]  do_syscall_64+0xfa/0x3b0
[  318.440792][T19111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.443146][T19111] 
[  318.444078][T19111] Freed by task 18427:
[  318.445637][T19111]  kasan_save_track+0x3e/0x80
[  318.447351][T19111]  kasan_save_free_info+0x46/0x50
[  318.449195][T19111]  __kasan_slab_free+0x5b/0x80
[  318.450926][T19111]  kfree+0x18e/0x440
[  318.452614][T19111]  bt_host_release+0x82/0x90
[  318.454496][T19111]  device_release+0x9c/0x1c0
[  318.456370][T19111]  kobject_put+0x22b/0x480
[  318.458197][T19111]  vhci_release+0x88/0xd0
[  318.459961][T19111]  __fput+0x44c/0xa70
[  318.461583][T19111]  task_work_run+0x1d4/0x260
[  318.463407][T19111]  do_exit+0x6b5/0x2300
[  318.465111][T19111]  do_group_exit+0x21c/0x2d0
[  318.466788][T19111]  __x64_sys_exit_group+0x3f/0x40
[  318.468450][T19111]  x64_sys_call+0x21f7/0x2200
[  318.470141][T19111]  do_syscall_64+0xfa/0x3b0
[  318.471916][T19111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.474128][T19111] 
[  318.475030][T19111] Last potentially related work creation:
[  318.477145][T19111]  kasan_save_stack+0x3e/0x60
[  318.478913][T19111]  kasan_record_aux_stack+0xbd/0xd0
[  318.480817][T19111]  insert_work+0x3d/0x330
[  318.482477][T19111]  __queue_work+0xbaf/0xfb0
[  318.484252][T19111]  queue_work_on+0x181/0x270
[  318.486009][T19111]  process_scheduled_works+0xae1/0x17b0
[  318.488114][T19111]  worker_thread+0x8a0/0xda0
[  318.489933][T19111]  kthread+0x711/0x8a0
[  318.491567][T19111]  ret_from_fork+0x3fc/0x770
[  318.493320][T19111]  ret_from_fork_asm+0x1a/0x30
[  318.495251][T19111] 
[  318.496237][T19111] Second to last potentially related work creation:
[  318.498507][T19111]  kasan_save_stack+0x3e/0x60
[  318.500094][T19111]  kasan_record_aux_stack+0xbd/0xd0
[  318.502041][T19111]  insert_work+0x3d/0x330
[  318.503732][T19111]  __queue_work+0xcd2/0xfb0
[  318.505416][T19111]  call_timer_fn+0x17e/0x5f0
[  318.507131][T19111]  __run_timer_base+0x646/0x860
[  318.508990][T19111]  run_timer_softirq+0xb7/0x180
[  318.510823][T19111]  handle_softirqs+0x286/0x870
[  318.512739][T19111]  __irq_exit_rcu+0xca/0x1f0
[  318.514634][T19111]  irq_exit_rcu+0x9/0x30
[  318.516191][T19111]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  318.518360][T19111]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  318.520607][T19111] 
[  318.521566][T19111] The buggy address belongs to the object at ffff88812774c000
[  318.521566][T19111]  which belongs to the cache kmalloc-8k of size 8192
[  318.526113][T19111] The buggy address is located 160 bytes inside of
[  318.526113][T19111]  freed 8192-byte region [ffff88812774c000, ffff88812774e000)
[  318.530682][T19111] 
[  318.531471][T19111] The buggy address belongs to the physical page:
[  318.533742][T19111] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127748
[  318.537012][T19111] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  318.540181][T19111] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  318.543245][T19111] page_type: f5(slab)
[  318.544876][T19111] raw: 057ff00000000040 ffff88801a442280 ffffea000441b400 dead000000000003
[  318.548200][T19111] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  318.551577][T19111] head: 057ff00000000040 ffff88801a442280 ffffea000441b400 dead000000000003
[  318.554404][T19111] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  318.557176][T19111] head: 057ff00000000003 ffffea00049dd201 00000000ffffffff 00000000ffffffff
[  318.559957][T19111] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  318.562781][T19111] page dumped because: kasan: bad access detected
[  318.564772][T19111] page_owner tracks the page as allocated
[  318.566570][T19111] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5933, tgid 5933 (kworker/u10:4), ts 299452808257, free_ts 299251925254
[  318.573401][T19111]  post_alloc_hook+0x240/0x2a0
[  318.574867][T19111]  get_page_from_freelist+0x21e4/0x22c0
[  318.576704][T19111]  __alloc_frozen_pages_noprof+0x181/0x370
[  318.578525][T19111]  alloc_pages_mpol+0x232/0x4a0
[  318.580060][T19111]  allocate_slab+0x8a/0x370
[  318.581466][T19111]  ___slab_alloc+0xbeb/0x1410
[  318.583227][T19111]  __kmalloc_noprof+0x305/0x4f0
[  318.584789][T19111]  __sta_info_alloc+0xce6/0x2640
[  318.586327][T19111]  ieee80211_ibss_add_sta+0x5b7/0x870
[  318.588085][T19111]  ieee80211_ibss_rx_queued_mgmt+0x1783/0x2ae0
[  318.590021][T19111]  ieee80211_iface_work+0x85f/0x12d0
[  318.591718][T19111]  cfg80211_wiphy_work+0x2bb/0x470
[  318.593395][T19111]  process_scheduled_works+0xae1/0x17b0
[  318.595257][T19111]  worker_thread+0x8a0/0xda0
[  318.596769][T19111]  kthread+0x711/0x8a0
[  318.598166][T19111]  ret_from_fork+0x3fc/0x770
[  318.599625][T19111] page last free pid 5907 tgid 5907 stack trace:
[  318.601602][T19111]  __free_frozen_pages+0xbc4/0xd30
[  318.603560][T19111]  __put_partials+0x156/0x1a0
[  318.605065][T19111]  put_cpu_partial+0x17c/0x250
[  318.606648][T19111]  __slab_free+0x2d5/0x3c0
[  318.608223][T19111]  qlist_free_all+0x97/0x140
[  318.609797][T19111]  kasan_quarantine_reduce+0x148/0x160
[  318.611493][T19111]  __kasan_slab_alloc+0x22/0x80
[  318.613006][T19111]  __kmalloc_cache_noprof+0x1be/0x3d0
[  318.614650][T19111]  nsim_fib_event_work+0x835/0x3180
[  318.616259][T19111]  process_scheduled_works+0xae1/0x17b0
[  318.617980][T19111]  worker_thread+0x8a0/0xda0
[  318.619418][T19111]  kthread+0x711/0x8a0
[  318.620676][T19111]  ret_from_fork+0x3fc/0x770
[  318.622119][T19111]  ret_from_fork_asm+0x1a/0x30
[  318.623592][T19111] 
[  318.624340][T19111] Memory state around the buggy address:
[  318.626227][T19111]  ffff88812774bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  318.628633][T19111]  ffff88812774c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.631036][T19111] >ffff88812774c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.633407][T19111]                                ^
[  318.635002][T19111]  ffff88812774c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.637432][T19111]  ffff88812774c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.639829][T19111] ==================================================================
[  318.643033][T19111] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  318.645300][T19111] CPU: 1 UID: 0 PID: 19111 Comm: khidpd_0b570000 Not tainted syzkaller #0 PREEMPT(full) 
[  318.648318][T19111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.651457][T19111] Call Trace:
[  318.652527][T19111]  <TASK>
[  318.653456][T19111]  dump_stack_lvl+0x99/0x250
[  318.654903][T19111]  ? __asan_memcpy+0x40/0x70
[  318.656357][T19111]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.657982][T19111]  ? __pfx__printk+0x10/0x10
[  318.659437][T19111]  vpanic+0x281/0x750
[  318.660641][T19111]  ? __pfx_vpanic+0x10/0x10
[  318.662272][T19111]  ? rcu_is_watching+0x15/0xb0
[  318.663725][T19111]  panic+0xb9/0xc0
[  318.664903][T19111]  ? __pfx_panic+0x10/0x10
[  318.666301][T19111]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  318.668499][T19111]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.670462][T19111]  ? __mutex_lock+0x801/0x1350
[  318.671969][T19111]  check_panic_on_warn+0x89/0xb0
[  318.673937][T19111]  ? __mutex_lock+0x801/0x1350
[  318.675760][T19111]  end_report+0x78/0x160
[  318.677367][T19111]  kasan_report+0x129/0x150
[  318.679169][T19111]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.681383][T19111]  ? __mutex_lock+0x801/0x1350
[  318.683207][T19111]  __mutex_lock+0x801/0x1350
[  318.684937][T19111]  ? __mutex_lock+0x5bb/0x1350
[  318.686729][T19111]  ? l2cap_unregister_user+0x6a/0x1b0
[  318.688737][T19111]  ? __pfx___mutex_lock+0x10/0x10
[  318.690692][T19111]  ? __pfx___timer_delete_sync+0x10/0x10
[  318.692839][T19111]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.695181][T19111]  l2cap_unregister_user+0x6a/0x1b0
[  318.697149][T19111]  hidp_session_thread+0x3c9/0x410
[  318.699172][T19111]  ? __pfx_hidp_session_thread+0x10/0x10
[  318.701277][T19111]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.703610][T19111]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  318.706069][T19111]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  318.708049][T19111]  ? __kthread_parkme+0x7b/0x200
[  318.709501][T19111]  ? __kthread_parkme+0x1a1/0x200
[  318.711055][T19111]  kthread+0x711/0x8a0
[  318.712442][T19111]  ? __pfx_hidp_session_thread+0x10/0x10
[  318.714285][T19111]  ? __pfx_kthread+0x10/0x10
[  318.715867][T19111]  ? rcu_is_watching+0x15/0xb0
[  318.717277][T19111]  ? __pfx_kthread+0x10/0x10
[  318.718667][T19111]  ret_from_fork+0x3fc/0x770
[  318.720079][T19111]  ? __pfx_ret_from_fork+0x10/0x10
[  318.721692][T19111]  ? __switch_to_asm+0x39/0x70
[  318.723163][T19111]  ? __switch_to_asm+0x33/0x70
[  318.724691][T19111]  ? __pfx_kthread+0x10/0x10
[  318.726332][T19111]  ret_from_fork_asm+0x1a/0x30
[  318.727854][T19111]  </TASK>
[  318.729494][T19111] Kernel Offset: disabled
[  318.730858][T19111] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:34:37  Registers:
info registers vcpu 0

CPU#0
RAX=fb866173718bff00 RBX=ffffffff819683b8 RCX=fb866173718bff00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9f6f450120 CR3=000000003a6ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f9f6f5876c3 00007f9f6f5876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 ffffffffffffffff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 00007f9f6f412e53
XMM06=0000000000000000 00007f9f6f412e4d XMM07=0000000000000000 00007f9f6f412e61
XMM08=0000000000000000 00007f9f6f412ee7 XMM09=0000000000000000 00007f9f6f412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000441f370
R8 =ffff888107110237 R9 =1ffff11020e22046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8c1 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9f700e56c0 CR3=000000002c6fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f199ba12e53
XMM06=0000000000000000 00007f199ba12e4d XMM07=0000000000000000 00007f199ba12e61
XMM08=0000000000000000 00007f199ba12ee7 XMM09=0000000000000000 00007f199ba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
