last executing test programs:

1m16.344178186s ago: executing program 2 (id=1538):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000008000000feffffff0600000020000100", @ANYRES32, @ANYBLOB="090000330a00839cc8b2000000a54aa13087d677", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000020000000600"/24, @ANYRES32, @ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000000000000000000000000000d2763fbabab02655d5d16b6816c5bcbdf2df4150985de73dc1117f22b5f81c4be666ea3259999390e53d3670c96f190788c10361302d53f64e0b89eed3b3a34c913f2b1560eeac08369e0ad77e", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113e00000000000800000002000000850000007600000095000000000000020000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0xe53, 0x2, 0x8, 0x2, 0xf0, 0x6, 0x520131a1, 0x72c}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
close(r3)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r5, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m5.983440612s ago: executing program 1 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e1f7cc3a9fc8394a3f85c4c318", @ANYRES16=r8, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b00040000000800090002000000"], 0x40}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448c9, 0x0)
sendmmsg$inet(r9, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xb, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000001000000ff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

1m0.873657844s ago: executing program 1 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e1f7cc3a9fc8394a3f85c4c318", @ANYRES16=r8, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b00040000000800090002000000"], 0x40}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448c9, 0x0)
sendmmsg$inet(r9, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xb, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000001000000ff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

55.268311484s ago: executing program 1 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e1f7cc3a9fc8394a3f85c4c318", @ANYRES16=r8, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b00040000000800090002000000"], 0x40}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448c9, 0x0)
sendmmsg$inet(r9, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xb, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000001000000ff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

50.204714309s ago: executing program 1 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e1f7cc3a9fc8394a3f85c4c318", @ANYRES16=r8, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b00040000000800090002000000"], 0x40}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448c9, 0x0)
sendmmsg$inet(r9, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xb, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000001000000ff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

33.09144977s ago: executing program 2 (id=1538):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000008000000feffffff0600000020000100", @ANYRES32, @ANYBLOB="090000330a00839cc8b2000000a54aa13087d677", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000020000000600"/24, @ANYRES32, @ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000000000000000000000000000d2763fbabab02655d5d16b6816c5bcbdf2df4150985de73dc1117f22b5f81c4be666ea3259999390e53d3670c96f190788c10361302d53f64e0b89eed3b3a34c913f2b1560eeac08369e0ad77e", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113e00000000000800000002000000850000007600000095000000000000020000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0xe53, 0x2, 0x8, 0x2, 0xf0, 0x6, 0x520131a1, 0x72c}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
close(r3)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r5, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

27.1039085s ago: executing program 2 (id=1538):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000008000000feffffff0600000020000100", @ANYRES32, @ANYBLOB="090000330a00839cc8b2000000a54aa13087d677", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000020000000600"/24, @ANYRES32, @ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000000000000000000000000000d2763fbabab02655d5d16b6816c5bcbdf2df4150985de73dc1117f22b5f81c4be666ea3259999390e53d3670c96f190788c10361302d53f64e0b89eed3b3a34c913f2b1560eeac08369e0ad77e", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113e00000000000800000002000000850000007600000095000000000000020000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0xe53, 0x2, 0x8, 0x2, 0xf0, 0x6, 0x520131a1, 0x72c}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
close(r3)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r5, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

19.171376892s ago: executing program 2 (id=1538):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000008000000feffffff0600000020000100", @ANYRES32, @ANYBLOB="090000330a00839cc8b2000000a54aa13087d677", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000020000000600"/24, @ANYRES32, @ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000000000000000000000000000d2763fbabab02655d5d16b6816c5bcbdf2df4150985de73dc1117f22b5f81c4be666ea3259999390e53d3670c96f190788c10361302d53f64e0b89eed3b3a34c913f2b1560eeac08369e0ad77e", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113e00000000000800000002000000850000007600000095000000000000020000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0xe53, 0x2, 0x8, 0x2, 0xf0, 0x6, 0x520131a1, 0x72c}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
close(r3)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r5, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

13.673028418s ago: executing program 2 (id=1538):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000008000000feffffff0600000020000100", @ANYRES32, @ANYBLOB="090000330a00839cc8b2000000a54aa13087d677", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000020000000600"/24, @ANYRES32, @ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000000000000000000000000000d2763fbabab02655d5d16b6816c5bcbdf2df4150985de73dc1117f22b5f81c4be666ea3259999390e53d3670c96f190788c10361302d53f64e0b89eed3b3a34c913f2b1560eeac08369e0ad77e", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113e00000000000800000002000000850000007600000095000000000000020000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0xe53, 0x2, 0x8, 0x2, 0xf0, 0x6, 0x520131a1, 0x72c}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
close(r3)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r5, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

7.501439495s ago: executing program 1 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e1f7cc3a9fc8394a3f85c4c318", @ANYRES16=r8, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b00040000000800090002000000"], 0x40}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448c9, 0x0)
sendmmsg$inet(r9, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xb, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000001000000ff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

7.248644281s ago: executing program 2 (id=1538):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000008000000feffffff0600000020000100", @ANYRES32, @ANYBLOB="090000330a00839cc8b2000000a54aa13087d677", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000020000000600"/24, @ANYRES32, @ANYBLOB], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000000000000000000000000000d2763fbabab02655d5d16b6816c5bcbdf2df4150985de73dc1117f22b5f81c4be666ea3259999390e53d3670c96f190788c10361302d53f64e0b89eed3b3a34c913f2b1560eeac08369e0ad77e", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113e00000000000800000002000000850000007600000095000000000000020000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0xe53, 0x2, 0x8, 0x2, 0xf0, 0x6, 0x520131a1, 0x72c}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
close(r3)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r5, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.517108493s ago: executing program 1 (id=2247):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e1f7cc3a9fc8394a3f85c4c318", @ANYRES16=r8, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b00040000000800090002000000"], 0x40}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448c9, 0x0)
sendmmsg$inet(r9, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xb, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000001000000ff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

493.983705ms ago: executing program 0 (id=2719):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000))
ioctl$int_in(r1, 0x5452, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f0000000400)}, {&(0x7f00000008c0)=""/234, 0xea}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/20, 0x14}], 0x8, &(0x7f00000019c0)=""/104, 0x68}, 0x2120) (async)
socket$netlink(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0}) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r4 = socket(0xa, 0x4, 0x7)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9f216c1a9f00000000000000510000005100000002000000000000000400000d000000000000000001000000070000000200000004000000020000000000000005000000020000000000001205000000060000000100000f010000000200000037dd000002000000d50000000000"], 0x0, 0x6e, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x24) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
listen(r6, 0x4) (async)
listen(r6, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x14008004)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4a0)

360.35166ms ago: executing program 0 (id=2720):
accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = getpid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=<r3=>0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000b00)={0x22b0, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x22a0, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private2}, @nested={0x227c, 0x19, 0x0, 0x1, [@generic="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", @nested={0x1b8, 0x37, 0x0, 0x1, [@generic="23f63318f0e3f4589f12eab341e300e4111b7e5d2b46057533aa6a48ab4e4143b8865819998ca68a91645556d6b8002e8ce347c96c7fd165dcfc6355da5c878d129775da4760486c58a03c09fb2bc375c59882aaca834816a61087e6c710007dde7ec1f358c1624bee63093afe62afc5e16005f34bb50b9acef0aa3315c45dd40a4ba5bc233e92870dc1a7de62feb7ad98703f14160dc8964403c29643091c6dc05689fec79d896f2aa01f831762aa7bd3b09acc9062d74c127bdeb8f089639e119ab8f8767f36875490cf6ffb1920edfb61b76f522f64494c6dd88e38a6b2655ee3", @typed={0x4, 0x11f}, @nested={0x4, 0xbe}, @nested={0x4, 0x45}, @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x151, 0x0, 0x0, @uid=r3}, @typed={0x56, 0x99, 0x0, 0x0, @binary="eee3d224e2318e3c3474a298c75a83abf35cea5040b0410df96b1ecc802097e7bf777081806931b30ccec0b04d8efcfb2cb81c66ce0d424a1c407395f06c79c335466cfffa9f85a8b3f08e520e4a68876ace"}, @typed={0x8, 0x4a, 0x0, 0x0, @pid=r2}, @generic="b6b49fd09888787c3c2f35b4106fb4eefe6610ea7edd8ea954e5200ca2dfef752a1ef06909c1415bb11c17f02b685c671bc578bc48badfced90259ae1c693e12a2439199448143ff38c7"]}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0xfffffffb}, @nested={0x10, 0x58, 0x0, 0x1, [@nested={0x4, 0x32}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}]}, @nested={0x10a7, 0x7, 0x0, 0x1, [@generic="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", @generic="b2606d0919cac8f893396018798a8151996ffd3ca14dd3068c6ec119189c3ba9457251b0c9dde867ea3d36d4e7364be565a5cd4164c34e87a4", @nested={0x4, 0xce}, @typed={0x4, 0xfa}, @generic="055dbe893bde7aa027380bc62608b7b9b8edf2972c1b12b99aa3a91c62137433eff3be", @nested={0x4, 0x72}, @generic="e8d448ca48452b969c1f6206669407e1b4b47cc8d53b216a6d1670842853a3e9bd3786c1d7328b332a779ca6d7d1b430909311", @typed={0x8, 0xd5, 0x0, 0x0, @ipv4=@loopback}]}]}]}]}, 0x22b0}, {0x0}], 0x2}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=@ipv6_delroute={0x184, 0x19, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x20, 0xa, 0x2, 0xfe, 0x2, 0xfd, 0xb, 0x2980}, [@RTA_PREF={0x5, 0x14, 0x60}, @RTA_METRICS={0xdb, 0x8, 0x0, 0x1, "c2398e4f6ec570b27a22770585f0ad2bafe32a2fc0fbbd01443e1d26213dfa89d0ff565cf481aa93cdf5b78af5e20d213ba75ef4e084c7e9716406677438ac2333c7441999264461eaf331e3dd8275c19e48c983acb8af38876828b236b6641adaa57bf6fba798336d3a70951808cc18da03bc5489841f8c30893f4e4e800465325c357b981e641be746ef86abd224420cd019e87309e66daa68bc8a8a1b4b73bbc8c38f7977f100f70f4484e0828a5714d3849d08e0ca06187a6003d459e54e71af30bf69db1fc77391fb58b1bdbe4a31246311dab820"}, @RTA_IIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_UID={0x8}, @RTA_ENCAP={0x48, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x44, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0x40, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x3c, 0x3, "405422865c1f0c16aeee4caabf6e1f32b03036e3527d151c45bb1e7319345c7289e382e09c294d4de54bb2f2d2b5e11cf1cba12e9271c95a"}}}}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_UID={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x0, 0x7}}, @RTA_UID={0x8, 0x19, r3}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0xa4f77e8d690140f9)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0xfffffffd)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', <r7=>0x0, 0x80, 0x40, 0xa29fb27, 0x645, {{0x2a, 0x4, 0x2, 0x0, 0xa8, 0x67, 0x0, 0x5, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @noop, @generic={0x88, 0xa, "4ca7a5d1289b4ed0"}, @lsrr={0x83, 0x23, 0xb4, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102, @local, @rand_addr=0x64010101]}, @rr={0x7, 0x1b, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @local, @broadcast, @empty, @multicast2]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0x7, [0x10e9]}, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0x1, [{@multicast2, 0x2}, {@empty, 0x4}, {@loopback, 0xb}, {@empty, 0x5}, {@empty, 0x3}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x6}]}]}}}}})
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, r7, 0x3ff}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0)

298.534085ms ago: executing program 0 (id=2721):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='consume_skb\x00', r0, 0x0, 0x1}, 0x18)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xd2}, 0xa)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
unshare(0x62042f00)

230.547601ms ago: executing program 0 (id=2722):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0xcf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x12d, 0x0, 0x0, 0x0, 0x88470000}}}}, @qdisc_kind_options=@q_tbf={{0x8}, {0xc68, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb43e7d7a76576238}, @TCA_TBF_RATE64={0xc, 0x4, 0x7f454a808f702dab}, @TCA_TBF_PBURST={0x8, 0x7, 0x1bc2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x1000, 0x8, 0x4d09, 0x26}, {0xfe, 0x1, 0x4b0, 0x6, 0x80}, 0xa, 0xa72, 0xebe}}, @TCA_TBF_PBURST={0x8, 0x7, 0x17c1}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x92b, 0xffff, 0x9, 0x0, 0x81, 0x1, 0x56287810, 0x2, 0x6, 0x167, 0x2, 0xa68, 0x1, 0x9, 0x2, 0x7f4, 0x0, 0x2, 0x5, 0x6, 0x4, 0x3, 0xe, 0x7fffffff, 0xffffffff, 0x101, 0x4, 0x1, 0x1, 0x6, 0x0, 0x2, 0x7, 0x10, 0x1ff, 0xf9, 0x6, 0x52b, 0xe38c, 0x3, 0x3, 0x7ff, 0x6, 0x8, 0x4, 0x4, 0x5, 0x7ff, 0xfffffffd, 0x9, 0xe0, 0x3, 0xd63, 0x8ae, 0x6, 0x0, 0xc8, 0x8, 0xfffffff9, 0xffffff7f, 0x6, 0xd3e9, 0x8, 0x81, 0x8, 0x8, 0x7, 0x0, 0x401, 0x0, 0x7f, 0xa, 0x7fff, 0x9, 0x80, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x5e8, 0x6, 0x4f, 0x400, 0x8, 0x100000, 0x4, 0xfffffffa, 0x0, 0x3, 0xc, 0xd67, 0x4, 0x7, 0x6, 0x9, 0x0, 0xf, 0x80000000, 0x3, 0x81, 0x5, 0x1, 0x79, 0x0, 0x3, 0x4, 0x3, 0x99, 0xa45, 0xc, 0x7, 0x8, 0x1c000000, 0x6f5, 0x7, 0x8, 0x100, 0x9, 0x2a176ae7, 0xfffffffc, 0x8000, 0x7ff, 0x5aea, 0x7, 0xc8e, 0xb17, 0x0, 0x5, 0x27, 0x2, 0x6, 0x1, 0x117, 0xf15, 0x9, 0x1, 0xcf4d88d5, 0x1, 0x0, 0x8000, 0x1000, 0x8, 0x9f, 0x8cb1, 0x9, 0x9, 0xc, 0x9, 0x6, 0x400, 0x1, 0x9, 0x0, 0x1, 0x7fffffff, 0x5, 0x7e8, 0xfffffffa, 0x10001, 0x6, 0x1, 0x1, 0x3, 0x50, 0xfffffff7, 0x8001, 0x4, 0xf, 0x7f, 0x44, 0x1, 0x100, 0xfb8a, 0x1, 0x7, 0x4, 0x9, 0x400, 0xa5b, 0xeee1, 0x3, 0x3ff, 0x800, 0x6, 0x6, 0xfff, 0x6, 0x4, 0x3, 0x6, 0x8, 0xd, 0x0, 0x4, 0x8, 0x81, 0x3ac, 0x1ff, 0x4, 0x80, 0x8, 0x8, 0x7, 0x9, 0x1, 0x8, 0x101, 0x0, 0x3, 0x101, 0x2, 0xa8d, 0x1000, 0x5, 0x0, 0x6, 0x6, 0xfff, 0x3e, 0x1, 0x800, 0x6, 0x822, 0xff, 0x101, 0x1, 0x5, 0x0, 0xac, 0x6e9, 0xf, 0x5, 0x50b442a8, 0x3, 0x3, 0xffff, 0x6, 0x8, 0x5, 0x6, 0x4, 0x3a7, 0x7, 0x8, 0x4, 0x0, 0x7, 0x6, 0x100000, 0x40, 0x3, 0x3, 0x0, 0x2, 0x10001]}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0xf63, 0xf, 0x7, 0x10001, 0x1, 0xc, 0x81, 0x5, 0x0, 0x8, 0x33f, 0x7, 0x8, 0x517, 0x12e1a0, 0x80, 0x1, 0x200, 0xfffff0d9, 0x4, 0x1, 0x6, 0x0, 0x9, 0xffff, 0x3, 0x7fffffff, 0x101, 0xb61, 0x3c7, 0x1, 0xfffffff7, 0x80000000, 0x0, 0x2, 0x3, 0x7, 0x7fff, 0x0, 0x80f867, 0x80000001, 0x355, 0x6, 0x4, 0x3, 0x80000001, 0x4, 0x9, 0x1, 0x4, 0x1, 0x8000, 0x40, 0x0, 0x5, 0x9, 0x7f92, 0x7fffffff, 0x3, 0xc, 0x8, 0xa15, 0x4, 0x0, 0x4, 0x88, 0x10, 0x6, 0x1, 0xc548, 0x9, 0x0, 0x8, 0x10000, 0x5, 0x6, 0xa73d, 0x6, 0xbe, 0x1ff, 0x7ff, 0xfffffff9, 0x5bf88c5c, 0x5, 0x1, 0x1, 0x2, 0x8001, 0x7, 0x7, 0xe4, 0x0, 0x10000, 0xffffffff, 0x6, 0x8, 0x80000000, 0x10, 0x8001, 0x6, 0x6, 0xfffffff5, 0x2, 0xb, 0x7ff000, 0x7, 0x5, 0x9, 0x5, 0x2, 0xfffffffe, 0x80000001, 0x80000001, 0x7, 0x8be, 0x0, 0x105, 0x6, 0x0, 0x3, 0x7, 0x8, 0x5, 0x8, 0x5, 0xf38a, 0x3, 0xa, 0xffff7fff, 0x3ff, 0x0, 0x1000, 0x2, 0x80, 0x6a2, 0x10000, 0x6, 0x4, 0xa0, 0x1, 0x200, 0x7, 0x0, 0x6, 0x9, 0x4, 0x5, 0x2, 0x0, 0x400, 0x0, 0x7, 0x1, 0xfffffffa, 0x6, 0x2f5a, 0x5, 0x10000, 0xc3, 0x37, 0xa, 0x80000000, 0xff, 0x3, 0x80000000, 0xffffffc0, 0x4, 0x5, 0x23, 0xb, 0x3, 0x8, 0x10001, 0x2, 0x9, 0x549, 0x3ff, 0xc06, 0x101, 0x6, 0x53b, 0x3, 0x3, 0xfffffffa, 0x3, 0x4, 0xab, 0xff, 0x6, 0x2, 0x2, 0xdfbc, 0x100, 0x8, 0xdf5, 0xfffffffc, 0x7fffffff, 0xc, 0x4, 0x8, 0xb, 0x6, 0x9, 0x4, 0x1, 0x4472, 0x0, 0x610a, 0x4, 0x6, 0x7fffffff, 0x8, 0x81, 0x3, 0x6, 0x923b, 0x8, 0x3, 0x6, 0x8, 0x43d, 0x8, 0x0, 0x0, 0x1, 0x89, 0x7ff, 0x8, 0x3, 0xc7, 0x0, 0x8, 0x4, 0x10, 0x1, 0x101, 0xfffff0fb, 0x8, 0x40, 0x4, 0x3, 0x1, 0x1ec00000, 0x1, 0x4, 0x2, 0xfffffff7, 0x8, 0x3, 0x10001, 0xfffffffd, 0x8, 0x7fffffff, 0x7, 0x2000]}, @TCA_TBF_PTAB={0x404, 0x3, [0x81, 0x7, 0x3, 0xb75, 0x4, 0xa1, 0xa668, 0x7f, 0x8, 0x52000000, 0xfff, 0x9, 0x2, 0x1, 0x0, 0x0, 0x101, 0x9, 0x2, 0x3, 0xc, 0x2c0e, 0x2, 0x9, 0x9, 0xca, 0xff, 0x5, 0xfffffff0, 0x1, 0x7, 0x46d, 0x10, 0x1, 0x9, 0x0, 0x6, 0x3, 0x6, 0x3, 0xfffff2f5, 0x6, 0x2da, 0x100, 0x3, 0x1, 0x800, 0xfffffff1, 0x8, 0x97c7, 0x6, 0x6, 0x8000, 0x6, 0x7, 0xc, 0x1, 0x80000001, 0x5, 0x9, 0xfffffff2, 0x0, 0x7, 0x7fffffff, 0x1, 0x0, 0x7fffffff, 0x9, 0x553e, 0x4, 0x15, 0x10001, 0x3, 0x0, 0x1, 0x7, 0x2f, 0x80000000, 0x200, 0x1, 0x1, 0x7f, 0x2, 0xffff, 0x0, 0x0, 0x3, 0xa62, 0xa, 0xfffffffb, 0x6, 0x2, 0x56, 0x3, 0x95f, 0xc, 0x5f5, 0x6, 0x5, 0x2, 0xff, 0x5, 0xe, 0x2, 0x1, 0x5, 0x7, 0xef, 0x0, 0xfffffff8, 0x38f9aa46, 0x2c000, 0x2, 0x3, 0x1, 0x0, 0xfffffffd, 0x7, 0x19, 0x1, 0x0, 0x1, 0x40, 0x101, 0x8, 0x0, 0x0, 0x6, 0x1, 0x6, 0xfffffffb, 0x5, 0xe09b, 0x1, 0x1, 0x1000, 0x4, 0x0, 0x2, 0x0, 0xed, 0x100, 0x8001, 0x1, 0x698, 0x3, 0x10, 0x4, 0x7, 0x5, 0xfffffffc, 0xffffffff, 0x8, 0x8, 0xa, 0xfffff801, 0x7, 0x4cae0f00, 0x1, 0xff, 0x4, 0x6, 0x833d, 0x4e, 0x5, 0x1, 0x3, 0x1, 0x9, 0x5, 0xa, 0x5, 0x3, 0x2, 0x6, 0x631, 0xfffff259, 0x8000, 0x6, 0x798, 0x9, 0x200, 0x8, 0xc, 0x7, 0x61, 0x2, 0x8, 0xb, 0x4, 0x0, 0x8000, 0x2, 0x1, 0x2, 0xffffffff, 0xd76, 0xffff, 0x0, 0x80, 0x5, 0x7fffffff, 0x8, 0x3, 0x7fff, 0xe, 0x3, 0xffffffff, 0x0, 0x56, 0xfffff4ca, 0x8, 0x67e, 0x1, 0x0, 0x2, 0x0, 0x4, 0x238, 0x6, 0x10000, 0xc, 0x6, 0x10000, 0x5423, 0x6, 0x5, 0x6, 0x5a192089, 0x3, 0x6, 0x6be5, 0x6, 0x5b7, 0x2, 0x2, 0x4, 0x8, 0xf, 0x1, 0x135, 0xffffffff, 0xe1, 0x6, 0x4, 0x732, 0x3, 0x3, 0x101, 0x7f, 0xbbc, 0x100, 0x7f, 0x0, 0xfffffff9, 0x250]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x50}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0xed, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8}]}, 0xcf8}}, 0x0)

229.963479ms ago: executing program 0 (id=2723):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'pim6reg1\x00'}) (async)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a190", 0x32}, {&(0x7f0000000100)="051a00000e80006558", 0x9}, {&(0x7f00000002c0)="8d0932", 0x3}], 0x3)
write(r0, &(0x7f0000000140)="24000000010006", 0x7)

0s ago: executing program 0 (id=2724):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'wlan0\x00', {}, {}, 0x6c, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x2, 0x24, 0x6], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x2], 0x0, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @multicast2, 0xffffff00, 0xffffff00, 'rose0\x00', 'gretap0\x00', {0xff}, {}, 0x6, 0x2, 0xc}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x81, 0x2, 0x7fff, 'snmp\x00', {0x400000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x1a)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x20000006})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'wlan0\x00', {}, {}, 0x6c, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x2, 0x24, 0x6], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x2], 0x0, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @multicast2, 0xffffff00, 0xffffff00, 'rose0\x00', 'gretap0\x00', {0xff}, {}, 0x6, 0x2, 0xc}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x81, 0x2, 0x7fff, 'snmp\x00', {0x400000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x1a) (async)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x20000006}) (async)

kernel console output (not intermixed with test programs):

atadv_slave_1 (retrying later): interface not active
[  279.085838][T13814] hsr_slave_0: entered promiscuous mode
[  279.088597][T13814] hsr_slave_1: entered promiscuous mode
[  279.091059][T13814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.093428][T13814] Cannot create hsr debugfs directory
[  279.328462][T13814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.380426][T13831] Bluetooth: MGMT ver 1.23
[  279.428331][T11957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.429955][T13814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.444326][T11957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.454661][T11957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.459884][T11957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.463056][T11957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  279.487788][T13834] lo speed is unknown, defaulting to 1000
[  279.579838][T13814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.648111][T11957] Bluetooth: hci1: command 0x0401 tx timeout
[  279.689912][T13814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.774227][T13834] chnl_net:caif_netlink_parms(): no params data found
[  279.942394][T13814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  279.995852][T13834] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.005394][T13834] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.008571][T13834] bridge_slave_0: entered allmulticast mode
[  280.012685][T13834] bridge_slave_0: entered promiscuous mode
[  280.026940][T13814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  280.037322][T13814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  280.064434][T13834] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.067266][T13834] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.070263][T13834] bridge_slave_1: entered allmulticast mode
[  280.080172][T13834] bridge_slave_1: entered promiscuous mode
[  280.106400][T13814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  280.125860][T13834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.148075][T13834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.189798][T13834] team0: Port device team_slave_0 added
[  280.207614][T13834] team0: Port device team_slave_1 added
[  280.277192][T13834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.279404][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.289818][ T5968] Bluetooth: hci0: command tx timeout
[  280.298445][T13834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.315317][T13834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.317440][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.326368][T13834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.374081][T13834] hsr_slave_0: entered promiscuous mode
[  280.377752][T13834] hsr_slave_1: entered promiscuous mode
[  280.380317][T13834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.382569][T13834] Cannot create hsr debugfs directory
[  280.593399][T13834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.609631][T13814] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.644681][T13863] lo speed is unknown, defaulting to 1000
[  280.653738][T13864] netlink: 'syz.0.2352': attribute type 1 has an invalid length.
[  280.681368][T13814] 8021q: adding VLAN 0 to HW filter on device team0
[  280.685209][T13864] __nla_validate_parse: 32 callbacks suppressed
[  280.685225][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'.
[  280.712055][T13865] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  280.727672][T13834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.775822][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.778717][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.825703][T13834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.849746][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.852651][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.891220][T13834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.195168][T13834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  281.203179][T13834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  281.209786][T13834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  281.230647][T13834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  281.299499][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.385767][T13814] veth0_vlan: entered promiscuous mode
[  281.394694][T13814] veth1_vlan: entered promiscuous mode
[  281.422740][T13834] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.451075][T13834] 8021q: adding VLAN 0 to HW filter on device team0
[  281.464349][T13814] veth0_macvtap: entered promiscuous mode
[  281.470067][T13814] veth1_macvtap: entered promiscuous mode
[  281.484936][T11957] Bluetooth: hci2: command tx timeout
[  281.492756][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.495937][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.515911][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.518765][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.537267][T13814] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.550659][T13814] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.572756][T13814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.577022][T13814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.579743][T13814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.582419][T13814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.714260][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.717407][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.764099][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.766859][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.840069][T13834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.940938][T13834] veth0_vlan: entered promiscuous mode
[  281.950637][T13834] veth1_vlan: entered promiscuous mode
[  281.979747][T13834] veth0_macvtap: entered promiscuous mode
[  281.989484][T13834] veth1_macvtap: entered promiscuous mode
[  282.025579][T13834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.043456][T13834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.053369][T13834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.059776][T13834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.064384][T13834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.068071][T13834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.149459][T13894] warn_alloc: 2 callbacks suppressed
[  282.149477][T13894] syz.0.2356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  282.163979][T13894] CPU: 1 UID: 0 PID: 13894 Comm: syz.0.2356 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  282.164002][T13894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.164014][T13894] Call Trace:
[  282.164021][T13894]  <TASK>
[  282.164028][T13894]  dump_stack_lvl+0x189/0x250
[  282.164058][T13894]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.164077][T13894]  ? __pfx__printk+0x10/0x10
[  282.164098][T13894]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  282.164141][T13894]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  282.164164][T13894]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  282.164188][T13894]  warn_alloc+0x214/0x310
[  282.164210][T13894]  ? stack_depot_save_flags+0x40/0x900
[  282.164233][T13894]  ? __pfx_warn_alloc+0x10/0x10
[  282.164253][T13894]  ? kasan_save_track+0x4f/0x80
[  282.164269][T13894]  ? xskq_create+0x56/0x170
[  282.164296][T13894]  ? xsk_init_queue+0xb0/0x110
[  282.164343][T13894]  ? xsk_setsockopt+0x43f/0x710
[  282.164363][T13894]  ? do_sock_setsockopt+0x25a/0x3e0
[  282.164379][T13894]  ? __x64_sys_setsockopt+0x18b/0x220
[  282.164396][T13894]  ? do_syscall_64+0xfa/0x3b0
[  282.164410][T13894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.164432][T13894]  __vmalloc_node_range_noprof+0x125/0x12f0
[  282.164476][T13894]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  282.164497][T13894]  ? __kasan_kmalloc+0x93/0xb0
[  282.164516][T13894]  vmalloc_user_noprof+0xad/0xf0
[  282.164532][T13894]  ? xskq_create+0xbf/0x170
[  282.164553][T13894]  xskq_create+0xbf/0x170
[  282.164573][T13894]  xsk_init_queue+0xb0/0x110
[  282.164592][T13894]  xsk_setsockopt+0x43f/0x710
[  282.164611][T13894]  ? __pfx_xsk_setsockopt+0x10/0x10
[  282.164624][T13894]  ? __lock_acquire+0xab9/0xd20
[  282.164642][T13894]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  282.164659][T13894]  ? __pfx_xsk_setsockopt+0x10/0x10
[  282.164675][T13894]  do_sock_setsockopt+0x25a/0x3e0
[  282.164693][T13894]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  282.164714][T13894]  ? __fget_files+0x2a/0x420
[  282.164736][T13894]  __x64_sys_setsockopt+0x18b/0x220
[  282.164753][T13894]  do_syscall_64+0xfa/0x3b0
[  282.164764][T13894]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.164784][T13894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.164796][T13894]  ? exc_page_fault+0x9f/0xf0
[  282.164813][T13894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.164824][T13894] RIP: 0033:0x7fd15a58e929
[  282.164838][T13894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.164851][T13894] RSP: 002b:00007fd15b498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  282.164867][T13894] RAX: ffffffffffffffda RBX: 00007fd15a7b5fa0 RCX: 00007fd15a58e929
[  282.164878][T13894] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  282.164888][T13894] RBP: 00007fd15a610b39 R08: 0000000000000004 R09: 0000000000000000
[  282.164896][T13894] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.164905][T13894] R13: 0000000000000000 R14: 00007fd15a7b5fa0 R15: 00007ffd16b335f8
[  282.164929][T13894]  </TASK>
[  282.165237][T13894] Mem-Info:
[  282.266875][T13894] active_anon:3929 inactive_anon:0 isolated_anon:0
[  282.266875][T13894]  active_file:1274 inactive_file:38332 isolated_file:0
[  282.266875][T13894]  unevictable:1768 dirty:23 writeback:0
[  282.266875][T13894]  slab_reclaimable:10629 slab_unreclaimable:118778
[  282.266875][T13894]  mapped:18169 shmem:2441 pagetables:755
[  282.266875][T13894]  sec_pagetables:0 bounce:0
[  282.266875][T13894]  kernel_misc_reclaimable:0
[  282.266875][T13894]  free:228936 free_pcp:20694 free_cma:0
[  282.271439][T10098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.284932][T13894] Node 0 active_anon:10000kB inactive_anon:0kB active_file:3608kB inactive_file:19972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7196kB dirty:56kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5264kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  282.291111][T10098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.332621][T13894] Node 1 active_anon:5716kB inactive_anon:0kB active_file:1488kB inactive_file:133356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:65480kB dirty:36kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10564kB pagetables:1400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  282.345453][T13894] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  282.359189][T13894] lowmem_reserve[]: 0 812 812 812 812
[  282.360896][T13894] Node 0 DMA32 free:308984kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10000kB inactive_anon:0kB active_file:3608kB inactive_file:19972kB unevictable:3536kB writepending:56kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:48948kB local_pcp:19660kB free_cma:0kB
[  282.374116][T13894] lowmem_reserve[]: 0 0 0 0 0
[  282.375659][T13894] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  282.391622][T13894] lowmem_reserve[]: 0 0 854 854 854
[  282.399872][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.402940][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.408545][T13894] Node 1 Normal free:131520kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5716kB inactive_anon:0kB active_file:1488kB inactive_file:133356kB unevictable:3536kB writepending:36kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34712kB local_pcp:13936kB free_cma:0kB
[  282.420341][T13894] lowmem_reserve[]: 0 0 0 0 0
[  282.444777][T13894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  282.448683][T13894] Node 0 DMA32: 450*4kB (ME) 238*8kB (ME) 126*16kB (UME) 226*32kB (UM) 188*64kB (UM) 61*128kB (UME) 82*256kB (UM) 36*512kB (UM) 21*1024kB (UM) 13*2048kB (UME) 46*4096kB (UM) = 308760kB
[  282.484691][T13894] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  282.490398][T13894] Node 1 Normal: 0*4kB 2*8kB (UE) 1*16kB (E) 1*32kB (M) 2*64kB (UE) 0*128kB 9*256kB (UME) 11*512kB (ME) 4*1024kB (UM) 6*2048kB (ME) 26*4096kB (M) = 131008kB
[  282.513905][T13894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  282.525261][T13894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  282.528483][T13894] 42049 total pagecache pages
[  282.530079][T13894] 0 pages in swap cache
[  282.531490][T13894] Free swap  = 124996kB
[  282.532880][T13894] Total swap = 124996kB
[  282.534502][T13894] 786301 pages RAM
[  282.535785][T13894] 0 pages HighMem/MovableOnly
[  282.537330][T13894] 241085 pages reserved
[  282.538725][T13894] 0 pages cma reserved
[  283.569049][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.572397][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.574671][ T5217] Bluetooth: hci2: command 0x041b tx timeout
[  283.581400][ T5968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.585651][ T5968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.588777][ T5968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  283.682504][T13903] lo speed is unknown, defaulting to 1000
[  283.856434][T13917] Bluetooth: MGMT ver 1.23
[  283.866352][T13903] chnl_net:caif_netlink_parms(): no params data found
[  283.959154][T13922] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2362'.
[  283.962672][T13922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2362'.
[  283.971475][T13903] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.971640][T13922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2362'.
[  283.973758][T13903] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.981366][T13903] bridge_slave_0: entered allmulticast mode
[  283.988947][T13903] bridge_slave_0: entered promiscuous mode
[  283.993514][T13903] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.997909][T13903] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.000283][T13903] bridge_slave_1: entered allmulticast mode
[  284.003169][T13903] bridge_slave_1: entered promiscuous mode
[  284.041094][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.057754][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.099671][T13903] team0: Port device team_slave_0 added
[  284.116579][T13903] team0: Port device team_slave_1 added
[  284.182668][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.185746][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.195405][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.201820][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.207413][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.216195][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.275033][T13903] hsr_slave_0: entered promiscuous mode
[  284.277525][T13903] hsr_slave_1: entered promiscuous mode
[  284.280777][T13903] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.283535][T13903] Cannot create hsr debugfs directory
[  284.293707][T13927] ip_vti0: Master is either lo or non-ether device
[  284.528536][T13903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.596824][T13903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.610838][T13942] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  284.639082][T13942] tipc: Resetting bearer <eth:syzkaller0>
[  284.667655][T13903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.681970][T13941] tipc: Resetting bearer <eth:syzkaller0>
[  285.647918][T11957] Bluetooth: hci0: command tx timeout
[  285.668817][ T5864] tipc: Node number set to 1781127231
[  286.125140][ T5968] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  286.418911][T13941] tipc: Disabling bearer <eth:syzkaller0>
[  286.451796][T13903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.628925][T13903] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  286.636401][T13903] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  286.647222][T13903] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  286.652146][T13903] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  286.756590][T13903] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.770436][T13903] 8021q: adding VLAN 0 to HW filter on device team0
[  286.781975][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.784287][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.792430][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.794663][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.118811][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.156073][T13903] veth0_vlan: entered promiscuous mode
[  287.162509][T13903] veth1_vlan: entered promiscuous mode
[  287.189229][T13903] veth0_macvtap: entered promiscuous mode
[  287.196804][T13903] veth1_macvtap: entered promiscuous mode
[  287.221506][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.237535][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.243501][T13903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.247078][T13903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.250031][T13903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.253234][T13903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.333202][T10098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.337652][T10098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.363333][T10092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.366727][T10092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.724572][T11957] Bluetooth: hci0: command 0x041b tx timeout
[  288.627190][T11957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  288.631153][T11957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  288.634533][T11957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  288.638916][T11957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  288.641467][T11957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  288.673145][T13971] netlink: 'syz.0.2375': attribute type 4 has an invalid length.
[  288.676470][T13968] lo speed is unknown, defaulting to 1000
[  288.701311][ T5871] lo speed is unknown, defaulting to 1000
[  288.703178][ T5871] syz1: Port: 1 Link DOWN
[  288.832666][T13968] chnl_net:caif_netlink_parms(): no params data found
[  288.839533][T13982] bridge_slave_0: left allmulticast mode
[  288.841826][T13982] bridge_slave_0: left promiscuous mode
[  288.858218][T13982] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.875892][T13982] bridge_slave_1: left allmulticast mode
[  288.877788][T13982] bridge_slave_1: left promiscuous mode
[  288.879704][T13982] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.885088][T13982] bond0: (slave bond_slave_0): Releasing backup interface
[  288.897023][T13982] bond0: (slave bond_slave_1): Releasing backup interface
[  288.912491][T13982] team0: Port device team_slave_1 removed
[  288.916272][T13982] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.920536][T13982] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.942177][T13982] bond1: (slave gretap2): Releasing backup interface
[  288.948654][T13982] ip6gretap1: left allmulticast mode
[  288.950972][T13982] ip6gretap1: left promiscuous mode
[  288.953203][T13982] bridge9: port 1(ip6gretap1) entered disabled state
[  288.964973][T13982] veth21: left allmulticast mode
[  288.967308][T13982] bridge9: port 2(veth21) entered disabled state
[  288.978815][T13982] bond2: (slave veth37): Releasing backup interface
[  289.027658][T13983] team0: Mode changed to "broadcast"
[  289.078054][T13988] Bluetooth: MGMT ver 1.23
[  289.141142][T13968] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.152093][T13968] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.155635][T13968] bridge_slave_0: entered allmulticast mode
[  289.159735][T13968] bridge_slave_0: entered promiscuous mode
[  289.170406][T13968] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.173322][T13968] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.177359][T13968] bridge_slave_1: entered allmulticast mode
[  289.180839][T13968] bridge_slave_1: entered promiscuous mode
[  289.210951][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'.
[  289.225742][T13968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.262202][T13968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.300141][T13968] team0: Port device team_slave_0 added
[  289.315881][T13968] team0: Port device team_slave_1 added
[  289.358283][T13968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.361127][T13968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.372904][T13968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.382593][T13968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.384995][T13968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.393003][T13968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.457689][T13968] hsr_slave_0: entered promiscuous mode
[  289.460349][T13968] hsr_slave_1: entered promiscuous mode
[  289.462902][T13968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.474062][T13968] Cannot create hsr debugfs directory
[  289.719130][T13968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.808953][T13968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.861620][T13968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.905379][T13968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.999427][T13968] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  290.004059][T13968] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  290.008564][T13968] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  290.012978][T13968] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  290.067983][T13968] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.080309][T13968] 8021q: adding VLAN 0 to HW filter on device team0
[  290.089646][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.092079][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.103309][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.106160][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.277023][T13968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.337134][T13968] veth0_vlan: entered promiscuous mode
[  290.346315][T13968] veth1_vlan: entered promiscuous mode
[  290.374547][T13968] veth0_macvtap: entered promiscuous mode
[  290.380402][T13968] veth1_macvtap: entered promiscuous mode
[  290.405905][T13968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.417240][T13968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.426899][T13968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.430254][T13968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.433592][T13968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.437624][T13968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.562501][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.568852][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.609788][T14015] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20001
[  290.617387][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.622813][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.762339][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'.
[  290.774033][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'.
[  290.777620][T14017] netlink: 'syz.0.2384': attribute type 18 has an invalid length.
[  290.885584][T11957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  290.889652][T11957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  290.893303][T11957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  290.897878][T11957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  290.901216][T11957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  290.940568][T14020] lo speed is unknown, defaulting to 1000
[  291.168896][T14020] chnl_net:caif_netlink_parms(): no params data found
[  291.183097][T14035] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2387'.
[  291.189860][T14035] Bluetooth: MGMT ver 1.23
[  291.349271][T14020] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.352157][T14020] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.355478][T14020] bridge_slave_0: entered allmulticast mode
[  291.358755][T14020] bridge_slave_0: entered promiscuous mode
[  291.369205][T14020] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.371797][T14020] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.374904][T14020] bridge_slave_1: entered allmulticast mode
[  291.380708][T14020] bridge_slave_1: entered promiscuous mode
[  291.426719][T14020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.439235][T14020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.508382][T14020] team0: Port device team_slave_0 added
[  291.526475][T14020] team0: Port device team_slave_1 added
[  291.567262][T14020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.569546][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.584737][T14020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.594535][T14020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.597043][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.610081][T14020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.729163][T14020] hsr_slave_0: entered promiscuous mode
[  291.737304][T14020] hsr_slave_1: entered promiscuous mode
[  291.740246][T14020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.743084][T14020] Cannot create hsr debugfs directory
[  292.023748][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2391'.
[  292.118192][T14020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.217383][T14020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.319173][T14020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.328648][T14055] netlink: 'syz.0.2392': attribute type 4 has an invalid length.
[  292.402353][T14020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.532346][T14020] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  292.537859][T14020] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  292.549511][T14020] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  292.554934][T14020] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  292.619555][T14020] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.632639][T14020] 8021q: adding VLAN 0 to HW filter on device team0
[  292.641117][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.643636][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.665765][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.668546][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.835331][T14020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.882385][T14020] veth0_vlan: entered promiscuous mode
[  292.890493][T14020] veth1_vlan: entered promiscuous mode
[  292.909341][T14020] veth0_macvtap: entered promiscuous mode
[  292.917398][T14020] veth1_macvtap: entered promiscuous mode
[  292.924433][ T5968] Bluetooth: hci0: command tx timeout
[  292.936338][T14020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.947023][T14020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.965207][T14020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.968659][T14020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.972029][T14020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.975950][T14020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.069122][T10092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.071523][T10092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.110013][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.112946][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.029354][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  294.033347][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  294.036531][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  294.040333][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  294.043393][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  294.091112][T14071] lo speed is unknown, defaulting to 1000
[  294.259879][T14071] chnl_net:caif_netlink_parms(): no params data found
[  294.355132][T14071] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.357992][T14071] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.360956][T14071] bridge_slave_0: entered allmulticast mode
[  294.373212][T14071] bridge_slave_0: entered promiscuous mode
[  294.378873][T14071] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.381777][T14071] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.389470][T14071] bridge_slave_1: entered allmulticast mode
[  294.393507][T14071] bridge_slave_1: entered promiscuous mode
[  294.434971][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.442485][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.493026][T14071] team0: Port device team_slave_0 added
[  294.499628][T14071] team0: Port device team_slave_1 added
[  294.522659][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.525588][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.533322][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.541140][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.543353][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.551340][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.583271][T14071] hsr_slave_0: entered promiscuous mode
[  294.586225][T14071] hsr_slave_1: entered promiscuous mode
[  294.588524][T14071] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.593440][T14071] Cannot create hsr debugfs directory
[  294.743983][T14071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.834278][T14071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.888941][T14071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.980004][T14071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.995766][T14083] netlink: 'syz.0.2395': attribute type 1 has an invalid length.
[  295.024001][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'.
[  295.027904][T14082] lo speed is unknown, defaulting to 1000
[  295.251982][T14071] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  295.267981][T14071] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  295.288170][T14071] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  295.295713][T14071] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  295.383154][T14071] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.400330][T14071] 8021q: adding VLAN 0 to HW filter on device team0
[  295.420060][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.422306][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.431132][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.433924][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.585062][T14071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.627609][T14071] veth0_vlan: entered promiscuous mode
[  295.634843][T14071] veth1_vlan: entered promiscuous mode
[  295.693757][T14071] veth0_macvtap: entered promiscuous mode
[  295.709202][T14071] veth1_macvtap: entered promiscuous mode
[  295.735158][T14071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.745180][T14071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.761146][T14071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.768233][T14071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.771514][T14071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.775773][T14071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.866848][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.870835][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.905176][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.908183][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.134617][T11957] Bluetooth: hci0: command tx timeout
[  296.554822][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  296.559504][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  296.564678][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  296.569214][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  296.582130][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  296.636103][T14104] lo speed is unknown, defaulting to 1000
[  296.863165][T14104] chnl_net:caif_netlink_parms(): no params data found
[  297.072096][T14104] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.075738][T14104] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.079192][T14104] bridge_slave_0: entered allmulticast mode
[  297.085891][T14104] bridge_slave_0: entered promiscuous mode
[  297.092507][T14104] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.096855][T14104] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.100122][T14104] bridge_slave_1: entered allmulticast mode
[  297.105379][T14104] bridge_slave_1: entered promiscuous mode
[  297.173420][T14104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.196190][T14104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.239153][T14104] team0: Port device team_slave_0 added
[  297.248037][T14104] team0: Port device team_slave_1 added
[  297.285172][T14104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.294020][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.326681][T14104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.366954][T14104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.369723][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.379522][T14104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.441452][T14104] hsr_slave_0: entered promiscuous mode
[  297.449569][T14104] hsr_slave_1: entered promiscuous mode
[  297.452675][T14104] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.460746][T14104] Cannot create hsr debugfs directory
[  297.603374][T14104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.684842][T14104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.775546][T14104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.846458][T14104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.955591][T14104] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  297.960673][T14104] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  297.979357][T14104] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  297.989230][T14104] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  298.146718][T14104] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.164042][T14104] 8021q: adding VLAN 0 to HW filter on device team0
[  298.172532][T10098] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.175434][T10098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.196466][T10098] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.199403][T10098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.531775][T14104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.592868][T14104] veth0_vlan: entered promiscuous mode
[  298.603691][T14104] veth1_vlan: entered promiscuous mode
[  298.615013][   T54] Bluetooth: hci2: command tx timeout
[  298.637487][T14104] veth0_macvtap: entered promiscuous mode
[  298.645401][T14104] veth1_macvtap: entered promiscuous mode
[  298.665227][T14104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.692017][T14104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.701468][T14104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.705459][T14104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.709038][T14104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.712578][T14104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.810764][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.819351][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.855995][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.859847][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.105051][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'.
[  299.107946][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'.
[  299.747859][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'.
[  299.765781][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2418'.
[  299.883591][T14197] IPVS: set_ctl: invalid protocol: 75 172.20.20.170:20003
[  299.933476][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.684164][   T54] Bluetooth: hci2: command 0x041b tx timeout
[  300.769761][T14213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2424'.
[  300.898528][T14217] netlink: 'syz.0.2425': attribute type 4 has an invalid length.
[  301.003229][T14222] lo speed is unknown, defaulting to 1000
[  301.937755][T14231] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2427'.
[  303.845394][T14242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2429'.
[  303.969137][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'.
[  303.969196][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'.
[  304.032455][T14244] netlink: 'syz.0.2430': attribute type 11 has an invalid length.
[  304.040268][T14244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2430'.
[  304.094454][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  304.099661][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  304.102367][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  304.106636][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  304.109823][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  304.136601][T14250] ip_vti0: Master is either lo or non-ether device
[  304.144513][T14247] lo speed is unknown, defaulting to 1000
[  304.272702][T14257] lo speed is unknown, defaulting to 1000
[  304.298405][T14247] chnl_net:caif_netlink_parms(): no params data found
[  304.445299][T14247] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.447683][T14247] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.450509][T14247] bridge_slave_0: entered allmulticast mode
[  304.470194][T14247] bridge_slave_0: entered promiscuous mode
[  304.474782][T14247] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.477000][T14247] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.479412][T14247] bridge_slave_1: entered allmulticast mode
[  304.482257][T14247] bridge_slave_1: entered promiscuous mode
[  304.506482][T14247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.512081][T14247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.559091][T14247] team0: Port device team_slave_0 added
[  304.563981][T14247] team0: Port device team_slave_1 added
[  304.592058][T14247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.601189][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.622467][T14247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.631089][T14247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.633188][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.641557][T14247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.658989][T14265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2435'.
[  304.678002][T14247] hsr_slave_0: entered promiscuous mode
[  304.680599][T14247] hsr_slave_1: entered promiscuous mode
[  304.682949][T14247] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  304.686788][T14247] Cannot create hsr debugfs directory
[  304.764602][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2436'.
[  304.907937][T14271] netpci0: tun_chr_ioctl cmd 1074025681
[  304.998640][T14247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.127195][T14247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.230820][T14247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.317124][T14247] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.505531][T14247] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  305.517817][T14247] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  305.524721][T14247] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  305.537853][T14247] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  305.586997][T14292] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  305.680917][T14247] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.717418][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'.
[  305.720833][T14247] 8021q: adding VLAN 0 to HW filter on device team0
[  305.733234][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2443'.
[  305.760152][T10098] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.763117][T10098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.779557][T10098] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.782492][T10098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.878215][T14247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.124727][T11957] Bluetooth: hci2: command tx timeout
[  306.186533][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.240640][T14247] veth0_vlan: entered promiscuous mode
[  306.257867][T14247] veth1_vlan: entered promiscuous mode
[  306.321637][T14247] veth0_macvtap: entered promiscuous mode
[  306.330745][T14247] veth1_macvtap: entered promiscuous mode
[  306.370971][T14247] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.382539][T14247] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.396878][T14247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.400245][T14247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.403497][T14247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.418340][T14247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.427353][T14310] ip_vti0: Master is either lo or non-ether device
[  306.501176][T14313] netlink: 'syz.0.2447': attribute type 1 has an invalid length.
[  306.507612][T14312] __nla_validate_parse: 1 callbacks suppressed
[  306.507628][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2447'.
[  306.515154][T14313] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2447'.
[  306.530068][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.532509][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.584704][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.587112][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.634636][T14317] lo speed is unknown, defaulting to 1000
[  306.976164][T14324] pimreg: entered allmulticast mode
[  306.990363][T14324] pimreg: left allmulticast mode
[  307.789099][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2451'.
[  309.010318][T14330] warn_alloc: 1 callbacks suppressed
[  309.010330][T14330] syz.0.2452: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  309.024440][T14330] CPU: 1 UID: 0 PID: 14330 Comm: syz.0.2452 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  309.024466][T14330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.024476][T14330] Call Trace:
[  309.024482][T14330]  <TASK>
[  309.024491][T14330]  dump_stack_lvl+0x189/0x250
[  309.024517][T14330]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.024533][T14330]  ? __pfx__printk+0x10/0x10
[  309.024553][T14330]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  309.024572][T14330]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  309.024592][T14330]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  309.024612][T14330]  warn_alloc+0x214/0x310
[  309.024632][T14330]  ? stack_depot_save_flags+0x40/0x900
[  309.024656][T14330]  ? __pfx_warn_alloc+0x10/0x10
[  309.024675][T14330]  ? kasan_save_track+0x4f/0x80
[  309.024691][T14330]  ? xskq_create+0x56/0x170
[  309.024711][T14330]  ? xsk_init_queue+0xb0/0x110
[  309.024728][T14330]  ? xsk_setsockopt+0x43f/0x710
[  309.024744][T14330]  ? do_sock_setsockopt+0x25a/0x3e0
[  309.024760][T14330]  ? __x64_sys_setsockopt+0x18b/0x220
[  309.024775][T14330]  ? do_syscall_64+0xfa/0x3b0
[  309.024788][T14330]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.024808][T14330]  __vmalloc_node_range_noprof+0x125/0x12f0
[  309.024850][T14330]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  309.024869][T14330]  ? xskq_create+0x56/0x170
[  309.024890][T14330]  ? __kasan_kmalloc+0x93/0xb0
[  309.024909][T14330]  vmalloc_user_noprof+0xad/0xf0
[  309.024927][T14330]  ? xskq_create+0xbf/0x170
[  309.024947][T14330]  xskq_create+0xbf/0x170
[  309.024969][T14330]  xsk_init_queue+0xb0/0x110
[  309.024991][T14330]  xsk_setsockopt+0x43f/0x710
[  309.025013][T14330]  ? __pfx_xsk_setsockopt+0x10/0x10
[  309.025030][T14330]  ? __lock_acquire+0xab9/0xd20
[  309.025054][T14330]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  309.025076][T14330]  ? __pfx_xsk_setsockopt+0x10/0x10
[  309.025096][T14330]  do_sock_setsockopt+0x25a/0x3e0
[  309.025123][T14330]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  309.025143][T14330]  ? __fget_files+0x2a/0x420
[  309.025169][T14330]  __x64_sys_setsockopt+0x18b/0x220
[  309.025191][T14330]  do_syscall_64+0xfa/0x3b0
[  309.025204][T14330]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.025225][T14330]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.025236][T14330]  ? exc_page_fault+0x9f/0xf0
[  309.025253][T14330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.025266][T14330] RIP: 0033:0x7fd15a58e929
[  309.025282][T14330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.025293][T14330] RSP: 002b:00007fd15b498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  309.025308][T14330] RAX: ffffffffffffffda RBX: 00007fd15a7b5fa0 RCX: 00007fd15a58e929
[  309.025318][T14330] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  309.025327][T14330] RBP: 00007fd15a610b39 R08: 0000000000000004 R09: 0000000000000000
[  309.025335][T14330] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.025345][T14330] R13: 0000000000000000 R14: 00007fd15a7b5fa0 R15: 00007ffd16b335f8
[  309.025394][T14330]  </TASK>
[  309.025401][T14330] Mem-Info:
[  309.168123][T14330] active_anon:3856 inactive_anon:0 isolated_anon:0
[  309.168123][T14330]  active_file:1274 inactive_file:38356 isolated_file:0
[  309.168123][T14330]  unevictable:1768 dirty:90 writeback:0
[  309.168123][T14330]  slab_reclaimable:11217 slab_unreclaimable:138358
[  309.168123][T14330]  mapped:16068 shmem:2441 pagetables:698
[  309.168123][T14330]  sec_pagetables:0 bounce:0
[  309.168123][T14330]  kernel_misc_reclaimable:0
[  309.168123][T14330]  free:209230 free_pcp:21883 free_cma:0
[  309.181423][T14330] Node 0 active_anon:10820kB inactive_anon:0kB active_file:3608kB inactive_file:20000kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38716kB dirty:168kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6712kB pagetables:1576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.192747][T14330] Node 1 active_anon:4604kB inactive_anon:0kB active_file:1488kB inactive_file:133424kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25556kB dirty:192kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11236kB pagetables:1216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.204019][T14330] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  309.212504][T14330] lowmem_reserve[]: 0 812 812 812 812
[  309.214712][T14330] Node 0 DMA32 free:187532kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10820kB inactive_anon:0kB active_file:3608kB inactive_file:20000kB unevictable:3536kB writepending:168kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:42064kB local_pcp:20504kB free_cma:0kB
[  309.224299][T14330] lowmem_reserve[]: 0 0 0 0 0
[  309.225871][T14330] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  309.239792][T14330] lowmem_reserve[]: 0 0 854 854 854
[  309.245638][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.249440][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.252319][T14330] Node 1 Normal free:163852kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4604kB inactive_anon:0kB active_file:1488kB inactive_file:133424kB unevictable:3536kB writepending:192kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:44944kB local_pcp:29588kB free_cma:0kB
[  309.253902][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.262015][T14330] lowmem_reserve[]: 0 0 0 0 0
[  309.266099][T14330] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  309.270924][T14330] Node 0 DMA32: 301*4kB (ME) 20*8kB (ME) 19*16kB (UM) 19*32kB (M) 26*64kB (UM) 36*128kB (UME) 13*256kB (UM) 7*512kB (ME) 4*1024kB (ME) 2*2048kB (M) 40*4096kB (UM) = 187492kB
[  309.278653][T14330] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  309.285250][T14330] Node 1 Normal: 1397*4kB (UM) 1364*8kB (UM) 121*16kB (UM) 340*32kB (UME) 59*64kB (UME) 8*128kB (UE) 13*256kB (UM) 17*512kB (UME) 3*1024kB (M) 6*2048kB (UM) 25*4096kB (UM) = 163908kB
[  309.292596][T14330] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  309.292953][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.300302][T14330] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  309.305034][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.308107][T14330] 42071 total pagecache pages
[  309.311579][T14330] 0 pages in swap cache
[  309.313259][T14330] Free swap  = 124996kB
[  309.315992][T14330] Total swap = 124996kB
[  309.317698][T14330] 786301 pages RAM
[  309.319420][T14330] 0 pages HighMem/MovableOnly
[  309.321562][T14330] 241085 pages reserved
[  309.333254][T14330] 0 pages cma reserved
[  309.369880][T14334] lo speed is unknown, defaulting to 1000
[  309.419251][T14337] ip_vti0: Master is either lo or non-ether device
[  309.492018][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2454'.
[  309.503944][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2454'.
[  309.586070][T14334] chnl_net:caif_netlink_parms(): no params data found
[  309.683490][T14334] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.694813][T14334] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.698201][T14334] bridge_slave_0: entered allmulticast mode
[  309.703743][T14334] bridge_slave_0: entered promiscuous mode
[  309.716849][T14334] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.719638][T14334] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.722676][T14334] bridge_slave_1: entered allmulticast mode
[  309.743539][T14334] bridge_slave_1: entered promiscuous mode
[  309.822968][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.831473][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.869494][T14334] team0: Port device team_slave_0 added
[  309.880468][T14334] team0: Port device team_slave_1 added
[  309.882554][T14352] lo speed is unknown, defaulting to 1000
[  309.919209][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.921394][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.929673][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.937370][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.939846][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.947999][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.043606][T14334] hsr_slave_0: entered promiscuous mode
[  310.047701][T14334] hsr_slave_1: entered promiscuous mode
[  310.050725][T14334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.062956][T14334] Cannot create hsr debugfs directory
[  310.166899][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2458'.
[  310.216246][T14334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.315334][T14334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.403487][T14362] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2460'.
[  310.408977][T14334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.482698][T14334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.627670][T14334] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  310.632302][T14334] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  310.641051][T14334] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  310.650472][T14334] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  310.829174][T14334] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.858542][T14334] 8021q: adding VLAN 0 to HW filter on device team0
[  310.886550][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.889614][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.912021][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.914934][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.195754][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.230972][T14334] veth0_vlan: entered promiscuous mode
[  311.238635][T14334] veth1_vlan: entered promiscuous mode
[  311.292568][T14334] veth0_macvtap: entered promiscuous mode
[  311.305303][T14334] veth1_macvtap: entered promiscuous mode
[  311.321031][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.354918][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.361940][T14334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.368126][T14334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.371561][T14334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.375336][T14334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.404645][T11957] Bluetooth: hci2: command tx timeout
[  311.494361][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.501501][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.547304][T10096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.550504][T10096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.051630][T14430] lo speed is unknown, defaulting to 1000
[  312.165340][T14436] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2469'.
[  312.169363][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'.
[  312.194589][T14436] bond0 (unregistering): Released all slaves
[  312.451792][T14445] ip_vti0: Master is either lo or non-ether device
[  314.907675][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.910902][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.914203][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.916761][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.919302][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.941181][T14459] lo speed is unknown, defaulting to 1000
[  315.057501][T14459] chnl_net:caif_netlink_parms(): no params data found
[  315.143519][T14459] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.154351][T14459] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.156781][T14459] bridge_slave_0: entered allmulticast mode
[  315.159579][T14459] bridge_slave_0: entered promiscuous mode
[  315.163210][T14459] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.166979][T14459] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.169424][T14459] bridge_slave_1: entered allmulticast mode
[  315.178566][T14459] bridge_slave_1: entered promiscuous mode
[  315.227469][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2477'.
[  315.249403][T14459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.265365][T14459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.322687][T14459] team0: Port device team_slave_0 added
[  315.327490][T14459] team0: Port device team_slave_1 added
[  315.359023][T14479] veth0_to_bond: entered allmulticast mode
[  315.383077][T14459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.385810][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.395128][T14459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.400382][T14459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.402611][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.415308][T14459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.472394][T14459] hsr_slave_0: entered promiscuous mode
[  315.476691][T14459] hsr_slave_1: entered promiscuous mode
[  315.482761][T14459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.492030][T14459] Cannot create hsr debugfs directory
[  315.725015][T14459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.810371][T14459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.910919][T14459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.994825][T14459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.147588][T14459] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  316.157499][T14459] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  316.167341][T14459] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  316.175818][T14459] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  316.278327][T14459] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.297585][T14459] 8021q: adding VLAN 0 to HW filter on device team0
[  316.316095][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.318431][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.333587][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.336116][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.379807][T14459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  316.432169][T14498] lo speed is unknown, defaulting to 1000
[  316.525441][T14459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.578785][T14459] veth0_vlan: entered promiscuous mode
[  316.587151][T14459] veth1_vlan: entered promiscuous mode
[  316.617536][T14459] veth0_macvtap: entered promiscuous mode
[  316.625659][T14459] veth1_macvtap: entered promiscuous mode
[  316.638764][T14459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.651036][T14459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.666397][T14459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.669323][T14459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.672389][T14459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.676089][T14459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.773012][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  316.823056][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.826105][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.867571][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.870539][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.081238][T14516] ip_vti0: Master is either lo or non-ether device
[  317.115526][T14518] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2488'.
[  317.728223][T14535] : renamed from batadv_slave_1
[  319.846398][T14540] ip_vti0: Master is either lo or non-ether device
[  319.920431][T14544] netlink: 'syz.0.2497': attribute type 11 has an invalid length.
[  319.923548][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2497'.
[  320.016833][T14544] syz.0.2497: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  320.021304][T14544] CPU: 0 UID: 0 PID: 14544 Comm: syz.0.2497 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  320.021319][T14544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.021325][T14544] Call Trace:
[  320.021331][T14544]  <TASK>
[  320.021335][T14544]  dump_stack_lvl+0x189/0x250
[  320.021354][T14544]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.021365][T14544]  ? __pfx__printk+0x10/0x10
[  320.021379][T14544]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  320.021392][T14544]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  320.021407][T14544]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  320.021420][T14544]  warn_alloc+0x214/0x310
[  320.021434][T14544]  ? stack_depot_save_flags+0x40/0x900
[  320.021449][T14544]  ? __pfx_warn_alloc+0x10/0x10
[  320.021462][T14544]  ? kasan_save_track+0x4f/0x80
[  320.021471][T14544]  ? xskq_create+0x56/0x170
[  320.021484][T14544]  ? xsk_init_queue+0xb0/0x110
[  320.021494][T14544]  ? xsk_setsockopt+0x43f/0x710
[  320.021503][T14544]  ? do_sock_setsockopt+0x25a/0x3e0
[  320.021516][T14544]  ? __x64_sys_setsockopt+0x18b/0x220
[  320.021526][T14544]  ? do_syscall_64+0xfa/0x3b0
[  320.021535][T14544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.021547][T14544]  __vmalloc_node_range_noprof+0x125/0x12f0
[  320.021593][T14544]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  320.021609][T14544]  ? __kasan_kmalloc+0x93/0xb0
[  320.021621][T14544]  vmalloc_user_noprof+0xad/0xf0
[  320.021633][T14544]  ? xskq_create+0xbf/0x170
[  320.021646][T14544]  xskq_create+0xbf/0x170
[  320.021660][T14544]  xsk_init_queue+0xb0/0x110
[  320.021673][T14544]  xsk_setsockopt+0x43f/0x710
[  320.021686][T14544]  ? __pfx_xsk_setsockopt+0x10/0x10
[  320.021696][T14544]  ? __lock_acquire+0xab9/0xd20
[  320.021711][T14544]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  320.021724][T14544]  ? __pfx_xsk_setsockopt+0x10/0x10
[  320.021736][T14544]  do_sock_setsockopt+0x25a/0x3e0
[  320.021747][T14544]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  320.021759][T14544]  ? __fget_files+0x2a/0x420
[  320.021775][T14544]  __x64_sys_setsockopt+0x18b/0x220
[  320.021788][T14544]  do_syscall_64+0xfa/0x3b0
[  320.021796][T14544]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.021809][T14544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.021816][T14544]  ? exc_page_fault+0x9f/0xf0
[  320.021829][T14544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.021837][T14544] RIP: 0033:0x7fd15a58e929
[  320.021847][T14544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.021854][T14544] RSP: 002b:00007fd15b498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  320.021863][T14544] RAX: ffffffffffffffda RBX: 00007fd15a7b5fa0 RCX: 00007fd15a58e929
[  320.021870][T14544] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  320.021875][T14544] RBP: 00007fd15a610b39 R08: 0000000000000004 R09: 0000000000000000
[  320.021880][T14544] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.021885][T14544] R13: 0000000000000000 R14: 00007fd15a7b5fa0 R15: 00007ffd16b335f8
[  320.021900][T14544]  </TASK>
[  320.021903][T14544] Mem-Info:
[  320.126954][T14544] active_anon:3876 inactive_anon:0 isolated_anon:0
[  320.126954][T14544]  active_file:1274 inactive_file:38364 isolated_file:0
[  320.126954][T14544]  unevictable:1768 dirty:74 writeback:0
[  320.126954][T14544]  slab_reclaimable:11435 slab_unreclaimable:145848
[  320.126954][T14544]  mapped:18161 shmem:2441 pagetables:729
[  320.126954][T14544]  sec_pagetables:0 bounce:0
[  320.126954][T14544]  kernel_misc_reclaimable:0
[  320.126954][T14544]  free:201894 free_pcp:17417 free_cma:0
[  320.143173][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.147394][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.150345][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.153518][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.157016][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.160724][T14544] Node 0 active_anon:11836kB inactive_anon:0kB active_file:3608kB inactive_file:20008kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29944kB dirty:128kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6840kB pagetables:1508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  320.170730][T14544] Node 1 active_anon:3668kB inactive_anon:0kB active_file:1488kB inactive_file:133448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42904kB dirty:168kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11816kB pagetables:1408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  320.186114][T14544] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  320.200202][T14544] lowmem_reserve[]: 0 812 812 812 812
[  320.201869][T14544] Node 0 DMA32 free:204248kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11836kB inactive_anon:0kB active_file:3608kB inactive_file:20008kB unevictable:3536kB writepending:128kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:43928kB local_pcp:25664kB free_cma:0kB
[  320.205312][T14546] lo speed is unknown, defaulting to 1000
[  320.211461][T14544] lowmem_reserve[]: 0 0 0 0 0
[  320.215029][T14544] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  320.223685][T14544] lowmem_reserve[]: 0 0 854 854 854
[  320.225479][T14544] Node 1 Normal free:129160kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3668kB inactive_anon:0kB active_file:1488kB inactive_file:133448kB unevictable:3536kB writepending:168kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:25436kB local_pcp:15344kB free_cma:0kB
[  320.234781][T14544] lowmem_reserve[]: 0 0 0 0 0
[  320.236200][T14544] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  320.240021][T14544] Node 0 DMA32: 324*4kB (UME) 475*8kB (UME) 351*16kB (UME) 60*32kB (UME) 135*64kB (UM) 97*128kB (UM) 24*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 6*2048kB (UM) 35*4096kB (UM) = 204184kB
[  320.245929][T14544] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  320.250663][T14544] Node 1 Normal: 302*4kB (M) 66*8kB (UM) 4*16kB (M) 42*32kB (UME) 40*64kB (UM) 6*128kB (UE) 15*256kB (UM) 20*512kB (UM) 6*1024kB (UM) 6*2048kB (UM) 22*4096kB (UM) = 129096kB
[  320.256064][T14544] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  320.259080][T14544] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  320.261939][T14544] 42079 total pagecache pages
[  320.263368][T14544] 0 pages in swap cache
[  320.264778][T14544] Free swap  = 124996kB
[  320.266045][T14544] Total swap = 124996kB
[  320.267271][T14544] 786301 pages RAM
[  320.268368][T14544] 0 pages HighMem/MovableOnly
[  320.269750][T14544] 241085 pages reserved
[  320.271030][T14544] 0 pages cma reserved
[  320.435567][T14546] chnl_net:caif_netlink_parms(): no params data found
[  320.535999][T14546] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.538206][T14546] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.540696][T14546] bridge_slave_0: entered allmulticast mode
[  320.543702][T14546] bridge_slave_0: entered promiscuous mode
[  320.548193][T14546] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.550467][T14546] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.552918][T14546] bridge_slave_1: entered allmulticast mode
[  320.556188][T14546] bridge_slave_1: entered promiscuous mode
[  320.584481][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.589929][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.651820][T14546] team0: Port device team_slave_0 added
[  320.657440][T14546] team0: Port device team_slave_1 added
[  320.685678][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.688105][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.696681][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.708198][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.710265][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.718052][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.747578][T14546] hsr_slave_0: entered promiscuous mode
[  320.750012][T14546] hsr_slave_1: entered promiscuous mode
[  320.752151][T14546] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.754507][T14546] Cannot create hsr debugfs directory
[  320.851236][T14546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.928790][T14546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.018542][T14546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.079777][T14546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.200726][T14546] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  321.205641][T14546] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  321.210358][T14546] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  321.235847][T14546] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  321.373686][T14546] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.427915][T14546] 8021q: adding VLAN 0 to HW filter on device team0
[  321.434180][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.436634][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.445200][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.447601][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.697924][T14546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.743280][T14546] veth0_vlan: entered promiscuous mode
[  321.755728][T14546] veth1_vlan: entered promiscuous mode
[  321.780614][T14546] veth0_macvtap: entered promiscuous mode
[  321.786564][T14546] veth1_macvtap: entered promiscuous mode
[  321.798801][T14546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.822152][T14546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.838044][T14546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.841481][T14546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.845588][T14546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.854481][T14546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.971772][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.975778][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.976122][T14596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.008338][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.012247][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.204936][T11957] Bluetooth: hci2: command tx timeout
[  322.586077][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'.
[  322.668553][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'.
[  322.672077][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'.
[  322.848199][T14616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'.
[  322.851321][T14616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2510'.
[  323.008008][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2512'.
[  324.053974][T14634] openvswitch: netlink: IP tunnel dst address not specified
[  324.194199][T14639] xt_hashlimit: max too large, truncated to 1048576
[  324.232123][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2520'.
[  324.235944][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2520'.
[  324.239199][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2520'.
[  324.302202][T14648] @: renamed from bond_slave_0
[  324.317393][T14648] lo speed is unknown, defaulting to 1000
[  324.632697][T14665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.709475][T14671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.261901][T14675] lo speed is unknown, defaulting to 1000
[  325.334838][T14679] wg2: left promiscuous mode
[  325.336717][T14679] veth0_to_bond: left allmulticast mode
[  325.340000][T14679] vlan0: left promiscuous mode
[  325.343001][T14679] hsr1: left allmulticast mode
[  325.345312][T14679] syz_tun: left allmulticast mode
[  325.346887][T14679] batadv_slave_0: left allmulticast mode
[  325.349421][T14679] ip6erspan0: left promiscuous mode
[  325.352846][T14679] veth21: left promiscuous mode
[  325.355486][T14679] gtp0: left promiscuous mode
[  325.357081][T14679] gtp0: left allmulticast mode
[  325.360051][T14679] veth37: left promiscuous mode
[  325.522080][T14690] __nla_validate_parse: 31 callbacks suppressed
[  325.522091][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2532'.
[  325.595618][T14692] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2533'.
[  325.598750][T14692] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2533'.
[  325.601359][T14692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  325.841334][T14700] netlink: 'syz.0.2535': attribute type 10 has an invalid length.
[  326.070219][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2539'.
[  326.183564][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'.
[  326.218367][T14712] lo speed is unknown, defaulting to 1000
[  326.640142][T14725] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  326.649826][T14725] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2545'.
[  326.985018][T14740] netlink: 'syz.0.2550': attribute type 10 has an invalid length.
[  327.189306][T14744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2551'.
[  327.384162][   T33] audit: type=1800 audit(1752310858.771:10): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2551" name="cgroup.controllers" dev="tmpfs" ino=6030 res=0 errno=0
[  329.054807][T14761] netlink: 'syz.0.2557': attribute type 10 has an invalid length.
[  329.324043][ T5217] Bluetooth: hci1: command 0x0401 tx timeout
[  331.060858][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'.
[  331.060870][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'.
[  331.066343][T14774] hsr_slave_0: left promiscuous mode
[  331.069215][T14774] hsr_slave_1: left promiscuous mode
[  331.096837][T14775] lo speed is unknown, defaulting to 1000
[  331.139930][T14778] lo speed is unknown, defaulting to 1000
[  331.628542][T14786] lo speed is unknown, defaulting to 1000
[  331.992508][T14802] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2569'.
[  333.220138][T14821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2576'.
[  333.336769][T14821] lo speed is unknown, defaulting to 1000
[  333.558193][T14825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.042004][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'.
[  337.445649][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.450421][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.455616][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.459174][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.462120][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.508615][T14872] lo speed is unknown, defaulting to 1000
[  337.561340][T14877] lo speed is unknown, defaulting to 1000
[  337.681955][T14872] chnl_net:caif_netlink_parms(): no params data found
[  337.755841][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  337.758777][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'.
[  337.785860][T14872] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.788225][T14872] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.790961][T14872] bridge_slave_0: entered allmulticast mode
[  337.794341][T14872] bridge_slave_0: entered promiscuous mode
[  337.798011][T14872] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.800413][T14872] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.809403][T14872] bridge_slave_1: entered allmulticast mode
[  337.812844][T14872] bridge_slave_1: entered promiscuous mode
[  337.847477][T14872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.852927][T14872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.898851][T14872] team0: Port device team_slave_0 added
[  337.926197][T14872] team0: Port device team_slave_1 added
[  337.986926][T14872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.989697][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.019617][T14872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.024565][T14872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.026650][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.029497][T14892] Bluetooth: MGMT ver 1.23
[  338.043403][T14872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.133474][T14872] hsr_slave_0: entered promiscuous mode
[  338.140164][T14872] hsr_slave_1: entered promiscuous mode
[  338.143026][T14872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.152391][T14872] Cannot create hsr debugfs directory
[  338.367824][T14872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.449819][T14872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.587406][T14872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.677723][T14872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.716411][T14902] netlink: 'syz.0.2595': attribute type 10 has an invalid length.
[  338.799038][T14872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  338.808462][T14872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  338.821137][T14872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  338.839138][T14872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  338.862136][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  338.945625][T14872] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.968669][T14872] 8021q: adding VLAN 0 to HW filter on device team0
[  338.992785][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.995914][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.002294][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.005284][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.221051][T14872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.274404][T14872] veth0_vlan: entered promiscuous mode
[  339.290845][T14872] veth1_vlan: entered promiscuous mode
[  339.326134][T14872] veth0_macvtap: entered promiscuous mode
[  339.330777][T14872] veth1_macvtap: entered promiscuous mode
[  339.349070][T14872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.359230][T14872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.378497][T14872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.381606][T14872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.386438][T14872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.389246][T14872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.492013][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.494785][ T5217] Bluetooth: hci0: command tx timeout
[  339.495730][T14931] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2602'.
[  339.497024][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.538524][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.541037][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.702781][T14938] pimreg: entered allmulticast mode
[  339.722127][T14938] pimreg: left allmulticast mode
[  340.507347][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2605'.
[  340.515296][T14941] netlink: 'syz.0.2605': attribute type 4 has an invalid length.
[  340.519219][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  340.846106][T14954] xt_CT: No such helper "syz0"
[  340.863437][T14953] netlink: 'syz.0.2608': attribute type 2 has an invalid length.
[  341.405973][T14978] pimreg: entered allmulticast mode
[  341.422499][T14978] lo speed is unknown, defaulting to 1000
[  343.578442][ T5968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  343.582201][ T5968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  343.587643][ T5968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  343.591741][ T5968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  343.594676][ T5968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  343.621448][T14989] lo speed is unknown, defaulting to 1000
[  343.760303][T14989] chnl_net:caif_netlink_parms(): no params data found
[  343.875142][T14989] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.878088][T14989] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.881147][T14989] bridge_slave_0: entered allmulticast mode
[  343.904153][T14989] bridge_slave_0: entered promiscuous mode
[  343.909020][T14989] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.915568][T14989] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.918683][T14989] bridge_slave_1: entered allmulticast mode
[  343.922742][T14989] bridge_slave_1: entered promiscuous mode
[  343.994927][T14989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.002283][T14989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.062111][T14989] team0: Port device team_slave_0 added
[  344.070798][T14989] team0: Port device team_slave_1 added
[  344.114712][T14989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.117400][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.129877][T14989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.146197][T14989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.148898][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.169394][T14989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.248182][T14989] hsr_slave_0: entered promiscuous mode
[  344.251171][T14989] hsr_slave_1: entered promiscuous mode
[  344.265640][T14989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  344.268515][T14989] Cannot create hsr debugfs directory
[  344.478601][T14989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.578104][T14989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.580602][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2626'.
[  344.590091][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2626'.
[  344.650922][T14989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.731032][T14989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.788072][T15017] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2626'.
[  344.794755][T15017] Bluetooth: MGMT ver 1.23
[  344.980156][T14989] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  344.991716][T14989] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  345.003610][T14989] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  345.016842][T14989] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  345.148944][T14989] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.159239][T15035] @: renamed from vlan0
[  345.201461][T14989] 8021q: adding VLAN 0 to HW filter on device team0
[  345.211472][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.214361][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.227800][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.230628][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.309679][T14989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.314668][T14989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  345.416925][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'.
[  345.513105][T15054] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25
[  345.520211][T14989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.574659][T14989] veth0_vlan: entered promiscuous mode
[  345.602893][T14989] veth1_vlan: entered promiscuous mode
[  345.644496][ T5217] Bluetooth: hci0: command tx timeout
[  345.676263][T14989] veth0_macvtap: entered promiscuous mode
[  345.703284][T14989] veth1_macvtap: entered promiscuous mode
[  345.718787][T14989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.736519][T14989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.751061][T14989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.755120][T14989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.758763][T14989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.762099][T14989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.879012][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.881405][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.935898][T10092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.938910][T10092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.734190][ T5217] Bluetooth: hci0: command 0x041b tx timeout
[  348.071927][T15092] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2645'.
[  348.232615][T15094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2646'.
[  348.236597][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'.
[  348.303870][T15098] SET target dimension over the limit!
[  348.375439][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2648'.
[  351.495000][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  351.501895][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  351.505241][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  351.508693][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  351.511672][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.541216][T15118] lo speed is unknown, defaulting to 1000
[  351.655711][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2655'.
[  351.703691][T15118] chnl_net:caif_netlink_parms(): no params data found
[  351.851422][T15118] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.855007][T15118] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.858067][T15118] bridge_slave_0: entered allmulticast mode
[  351.862027][T15118] bridge_slave_0: entered promiscuous mode
[  351.866498][T15134] bridge0: entered allmulticast mode
[  351.868918][T15118] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.873225][T15118] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.877033][T15118] bridge_slave_1: entered allmulticast mode
[  351.881123][T15118] bridge_slave_1: entered promiscuous mode
[  351.930161][T15118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.948960][T15118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.015047][T15118] team0: Port device team_slave_0 added
[  352.020963][T15118] team0: Port device team_slave_1 added
[  352.062363][T15118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.065487][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.073661][T15118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.079112][T15118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.081359][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.089714][T15118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.134730][T15118] hsr_slave_0: entered promiscuous mode
[  352.137377][T15118] hsr_slave_1: entered promiscuous mode
[  352.148134][T15118] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  352.150460][T15118] Cannot create hsr debugfs directory
[  352.206976][T15143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26
[  352.315949][T15118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.376341][T15151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2662'.
[  352.391999][T15118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.484053][T15118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.519534][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'.
[  352.563389][T15118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.718724][T15118] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  352.728513][T15118] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  352.734714][T15118] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  352.748891][T15118] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  352.757113][T15159] Bluetooth: MGMT ver 1.23
[  352.947636][T15118] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.986684][T15118] 8021q: adding VLAN 0 to HW filter on device team0
[  352.995744][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.998688][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.015736][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.018727][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.242875][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'.
[  353.315706][T15118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.388892][T15118] veth0_vlan: entered promiscuous mode
[  353.395904][T15118] veth1_vlan: entered promiscuous mode
[  353.429663][T15118] veth0_macvtap: entered promiscuous mode
[  353.434380][T15118] veth1_macvtap: entered promiscuous mode
[  353.444981][T15118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.455895][T15118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.466241][T15118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.468906][T15118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.486058][T15118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.488847][T15118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.519189][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'.
[  353.564534][ T5217] Bluetooth: hci0: command tx timeout
[  353.655247][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.658336][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.663359][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2671'.
[  353.708757][T10092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.711316][T10092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.845465][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'.
[  353.859619][T15195] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.862638][T15195] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.865837][T15195] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.868629][T15195] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.149599][T15210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2678'.
[  354.407983][T15224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.012867][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2686'.
[  357.112971][T11957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  357.118450][T11957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  357.122184][T11957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  357.126434][T11957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  357.130409][T11957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  357.176168][T15232] lo speed is unknown, defaulting to 1000
[  357.183657][T15235] Bluetooth: MGMT ver 1.23
[  357.197405][T15235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2687'.
[  357.332915][T15232] chnl_net:caif_netlink_parms(): no params data found
[  357.458981][T15232] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.462091][T15232] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.471653][T15232] bridge_slave_0: entered allmulticast mode
[  357.479134][T15232] bridge_slave_0: entered promiscuous mode
[  357.487720][T15232] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.490687][T15232] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.494093][T15232] bridge_slave_1: entered allmulticast mode
[  357.498312][T15232] bridge_slave_1: entered promiscuous mode
[  357.520222][T15232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.534661][T15232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.583404][T15232] team0: Port device team_slave_0 added
[  357.591408][T15232] team0: Port device team_slave_1 added
[  357.648650][T15232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.651623][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.672310][T15232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.682258][T15232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.694210][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.705441][T15232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.780173][T15232] hsr_slave_0: entered promiscuous mode
[  357.785771][T15232] hsr_slave_1: entered promiscuous mode
[  357.794403][T15232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  357.796933][T15232] Cannot create hsr debugfs directory
[  358.099133][T15232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.228312][T15232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.326529][T15232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.397430][T15232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.523049][T15232] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  358.531689][T15232] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  358.537311][T15232] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  358.542523][T15232] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  358.622048][T15232] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.633747][T15232] 8021q: adding VLAN 0 to HW filter on device team0
[  358.640230][T10092] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.642467][T10092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.654742][T10092] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.656924][T10092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.782160][T15232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.829395][T15232] veth0_vlan: entered promiscuous mode
[  358.840059][T15232] veth1_vlan: entered promiscuous mode
[  358.863970][T15232] veth0_macvtap: entered promiscuous mode
[  358.869650][T15232] veth1_macvtap: entered promiscuous mode
[  358.881049][T15232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.908545][T15232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.915151][T15232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.917936][T15232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.920590][T15232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.923257][T15232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.993296][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.998152][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.045333][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.049042][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.188187][T15276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2694'.
[  359.383677][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'.
[  359.391567][T15278] 8021q: VLANs not supported on ip_vti0
[  359.504409][T15289] ip_vti0: Master is either lo or non-ether device
[  359.690523][T15300] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2703'.
[  360.108257][T15312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2706'.
[  360.400870][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2709'.
[  360.404759][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2709'.
[  360.583039][T15323] ip_vti0: Master is either lo or non-ether device
[  361.514643][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.525877][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.530020][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.536247][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.539727][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.578892][T15328] lo speed is unknown, defaulting to 1000
[  361.741582][T15328] chnl_net:caif_netlink_parms(): no params data found
[  361.857383][T15328] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.860336][T15328] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.863398][T15328] bridge_slave_0: entered allmulticast mode
[  361.875522][T15328] bridge_slave_0: entered promiscuous mode
[  361.880838][T15328] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.883720][T15328] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.888406][T15328] bridge_slave_1: entered allmulticast mode
[  361.892465][T15328] bridge_slave_1: entered promiscuous mode
[  361.927745][T15328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.935159][T15328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.981018][T15328] team0: Port device team_slave_0 added
[  361.986796][T15328] team0: Port device team_slave_1 added
[  362.016582][T15328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.019330][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.030396][T15328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.037365][T15328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.040121][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.055707][T15328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.109953][T15328] hsr_slave_0: entered promiscuous mode
[  362.113476][T15328] hsr_slave_1: entered promiscuous mode
[  362.116816][T15328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.119777][T15328] Cannot create hsr debugfs directory
[  362.293404][T15328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.353680][T15328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.416882][T15328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.497632][T15328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.622392][T15328] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  362.629143][T15328] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  362.636591][T15328] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  362.643138][T15328] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  362.719741][T15328] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.731768][T15328] 8021q: adding VLAN 0 to HW filter on device team0
[  362.738003][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.740171][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.748353][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.750540][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.909374][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.952301][T15328] veth0_vlan: entered promiscuous mode
[  362.963167][T15328] veth1_vlan: entered promiscuous mode
[  362.990631][T15328] veth0_macvtap: entered promiscuous mode
[  363.010156][T15328] veth1_macvtap: entered promiscuous mode
[  363.030680][T15328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.040749][T15328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.048592][T15328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.051963][T15328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.055725][T15328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.059081][T15328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.165853][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.168903][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.221927][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.225199][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.584934][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.589787][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.595312][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.600880][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.620692][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.670196][T15352] lo speed is unknown, defaulting to 1000
[  363.841664][T15352] chnl_net:caif_netlink_parms(): no params data found
[  363.948842][T15352] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.951154][T15352] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.953612][T15352] bridge_slave_0: entered allmulticast mode
[  363.957317][T15352] bridge_slave_0: entered promiscuous mode
[  363.961043][T15352] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.963371][T15352] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.966198][T15352] bridge_slave_1: entered allmulticast mode
[  363.969226][T15352] bridge_slave_1: entered promiscuous mode
[  364.002133][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.011244][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.083637][T15352] team0: Port device team_slave_0 added
[  364.089059][T15352] team0: Port device team_slave_1 added
[  364.136226][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.138529][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.146562][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.151228][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.153702][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.164289][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.199341][T15352] hsr_slave_0: entered promiscuous mode
[  364.202077][T15352] hsr_slave_1: entered promiscuous mode
[  364.205708][T15352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  364.214043][T15352] Cannot create hsr debugfs directory
[  364.476725][T15352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.576759][T15352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.654503][T15352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.728402][T15352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.909529][T15352] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  364.916721][T15352] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  364.923141][T15352] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  364.932057][T15352] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  365.036063][T15352] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.069617][T15352] 8021q: adding VLAN 0 to HW filter on device team0
[  365.079274][T10092] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.082322][T10092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.098694][T10092] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.101584][T10092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.167265][T15352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.340078][T15352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.421645][T15352] veth0_vlan: entered promiscuous mode
[  365.440325][T15352] veth1_vlan: entered promiscuous mode
[  365.497125][T15352] veth0_macvtap: entered promiscuous mode
[  365.504000][T15352] veth1_macvtap: entered promiscuous mode
[  365.521584][T15352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.535833][T15352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.543493][T15352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.547147][T15352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.550476][T15352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.569794][T15352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.644229][ T5217] Bluetooth: hci0: command tx timeout
[  365.686885][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.689366][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.721143][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.730303][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.921386][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2716'.
[  367.074364][T11957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  367.078672][T11957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  367.082057][T11957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  367.098233][T11957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  367.101661][T11957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  367.127440][T15381] lo speed is unknown, defaulting to 1000
[  367.285231][T15381] chnl_net:caif_netlink_parms(): no params data found
[  367.467592][T15381] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.470444][T15381] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.473456][T15381] bridge_slave_0: entered allmulticast mode
[  367.478838][T15381] bridge_slave_0: entered promiscuous mode
[  367.486328][T15381] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.489231][T15381] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.492077][T15381] bridge_slave_1: entered allmulticast mode
[  367.496724][T15381] bridge_slave_1: entered promiscuous mode
[  367.547963][T15381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.555468][T15381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.598038][T15381] team0: Port device team_slave_0 added
[  367.618512][T15381] team0: Port device team_slave_1 added
[  367.653214][T15381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.657576][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.667831][T15381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.675346][T15381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.678195][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.688299][T15381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.734288][T11957] Bluetooth: hci0: command 0x041b tx timeout
[  367.820339][T15381] hsr_slave_0: entered promiscuous mode
[  367.825036][T15381] hsr_slave_1: entered promiscuous mode
[  367.830200][T15381] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  367.833123][T15381] Cannot create hsr debugfs directory
[  368.055288][T15391] netlink: 'syz.0.2718': attribute type 4 has an invalid length.
[  368.110914][T15381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.243319][T15381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.328193][T15381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.417690][T15381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.556828][T15381] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  368.562345][T15381] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  368.574632][T15381] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  368.579637][T15381] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  368.601610][T15417] SET target dimension over the limit!
[  368.623215][T15422] SET target dimension over the limit!
[  368.668897][T15381] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.691836][T15381] 8021q: adding VLAN 0 to HW filter on device team0
[  368.709485][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.711906][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.715092][   T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  368.718336][   T12] ref_tracker: batadv_slave_0@ffff888123f90610 has 1/1 users at
[  368.718336][   T12]      batadv_hard_if_event+0x122c/0x1a50
[  368.718336][   T12]      notifier_call_chain+0x1b6/0x3e0
[  368.718336][   T12]      register_netdevice+0x1608/0x1ae0
[  368.718336][   T12]      veth_newlink+0x5cc/0xa50
[  368.718336][   T12]      rtnl_newlink_create+0x310/0xb00
[  368.718336][   T12]      rtnl_newlink+0x16d6/0x1c70
[  368.718336][   T12]      rtnetlink_rcv_msg+0x7cf/0xb70
[  368.718336][   T12]      netlink_rcv_skb+0x208/0x470
[  368.718336][   T12]      netlink_unicast+0x75c/0x8e0
[  368.718336][   T12]      netlink_sendmsg+0x805/0xb30
[  368.718336][   T12]      __sock_sendmsg+0x21c/0x270
[  368.718336][   T12]      __sys_sendto+0x3bd/0x520
[  368.718336][   T12]      __x64_sys_sendto+0xde/0x100
[  368.718336][   T12]      do_syscall_64+0xfa/0x3b0
[  368.718336][   T12]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.718336][   T12] 
[  368.751129][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2726'.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  368.799629][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.801870][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.164792][   T54] Bluetooth: hci2: command tx timeout
[  369.167850][ T5827] syz_tun (unregistering): left promiscuous mode
[  378.231963][ T1359] ieee802154 phy0 wpan0: encryption failed: -22

VM DIAGNOSIS:
09:01:40  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820a01a4 RBX=0000000000000000 RCX=ffffffff820a01bb RDX=0000000000000000
RSI=0000000000000008 RDI=ffffea00042e3e00 RBP=ffffc90004697890 RSP=ffffc900046975d8
R8 =ffffea00042e3f73 R9 =1ffffd400085c7ee R10=dffffc0000000000 R11=fffff9400085c7ef
R12=ffffea00042e3e00 R13=800000010b8f8007 R14=00007fd159eab000 R15=ffff88801d3cbc00
RIP=ffffffff8223bb9a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f6cb500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c24aafd CR3=0000000110b38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd15a611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6f70
R8 =ffff888108d58237 R9 =1ffff110211ab046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98e1 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000012000 CR3=00000000605d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=006567646972625f 6f745f3168746576 XMM01=006567646972625f 6f745f3168746576
XMM02=657600646e6f625f 6f745f3068746576 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007f0ffe211b1f
XMM06=0000000000000000 00007f0ffe211b19 XMM07=0000000000000000 00007f0ffe211b2d
XMM08=0000000000000000 00007f0ffe211bb3 XMM09=0000000000000000 00007f0ffe211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
