last executing test programs:

1m1.434498159s ago: executing program 0 (id=243):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x2002, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000a22a30456b880000145b41fe69e3ffff78616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000800000000000000b100000067010000900100007374617469737469630000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000646e61740000060000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000bb8e66505c1aa6d062c3b52cffffffff000000006e666c6f670000000000000000000000000000000000000050000000121b6eb244c4f0fffbf04a000000007e4b000022569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99fd43741089cca6edb0041555449540000000000000000000000000626967e000000000000000000000008000000000000200000000000000000840200"/544]}, 0x298)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x44841)

1m1.183107959s ago: executing program 0 (id=248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0)
ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400})
close(r3)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c)
bind$tipc(r8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r12, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x311800, 0x0)

21.964230654s ago: executing program 1 (id=983):
socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x0, 0x3}]}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x8}, 0x28)
r0 = socket$tipc(0x1e, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=<r3=>r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES16=r0, @ANYRES8=r4, @ANYRESHEX=r1], 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000d200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

21.948808752s ago: executing program 1 (id=984):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="018d000000eb"})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x140d, 0xd2b5594142800135, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x28, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0)
r8 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}})

21.834473669s ago: executing program 1 (id=985):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}}, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14001000210a0104000001000000800000000000b1af9d82fa1f8674add26a95aa07df320529d0538f9902b1a67682f4c9536356120e86a10f3b178f97ce750f59dc45782163c9c117b4a69416b0d50f8b504a5e0adf75c46979e2460a466bc61d8449ee6a541bdca256700a7b2ce3f60ea631480050ac14992c4e7fb51cbc59dad914c19918abae24e17954c161698f172ccbb59cd1e4cd2395d4bd6a7aec737df2e1fbd584d9df361a3416b4e61307cc4d3ff57d7dce7616a7160c154918"], 0x14}}, 0x0)

19.821515072s ago: executing program 0 (id=248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0)
ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400})
close(r3)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c)
bind$tipc(r8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r12, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x311800, 0x0)

17.865088244s ago: executing program 1 (id=985):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}}, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14001000210a0104000001000000800000000000b1af9d82fa1f8674add26a95aa07df320529d0538f9902b1a67682f4c9536356120e86a10f3b178f97ce750f59dc45782163c9c117b4a69416b0d50f8b504a5e0adf75c46979e2460a466bc61d8449ee6a541bdca256700a7b2ce3f60ea631480050ac14992c4e7fb51cbc59dad914c19918abae24e17954c161698f172ccbb59cd1e4cd2395d4bd6a7aec737df2e1fbd584d9df361a3416b4e61307cc4d3ff57d7dce7616a7160c154918"], 0x14}}, 0x0)

14.540935461s ago: executing program 0 (id=248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0)
ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400})
close(r3)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c)
bind$tipc(r8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r12, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x311800, 0x0)

11.666813525s ago: executing program 1 (id=985):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}}, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14001000210a0104000001000000800000000000b1af9d82fa1f8674add26a95aa07df320529d0538f9902b1a67682f4c9536356120e86a10f3b178f97ce750f59dc45782163c9c117b4a69416b0d50f8b504a5e0adf75c46979e2460a466bc61d8449ee6a541bdca256700a7b2ce3f60ea631480050ac14992c4e7fb51cbc59dad914c19918abae24e17954c161698f172ccbb59cd1e4cd2395d4bd6a7aec737df2e1fbd584d9df361a3416b4e61307cc4d3ff57d7dce7616a7160c154918"], 0x14}}, 0x0)

7.440560439s ago: executing program 0 (id=248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0)
ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400})
close(r3)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c)
bind$tipc(r8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r12, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x311800, 0x0)

4.961289547s ago: executing program 1 (id=985):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}}, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14001000210a0104000001000000800000000000b1af9d82fa1f8674add26a95aa07df320529d0538f9902b1a67682f4c9536356120e86a10f3b178f97ce750f59dc45782163c9c117b4a69416b0d50f8b504a5e0adf75c46979e2460a466bc61d8449ee6a541bdca256700a7b2ce3f60ea631480050ac14992c4e7fb51cbc59dad914c19918abae24e17954c161698f172ccbb59cd1e4cd2395d4bd6a7aec737df2e1fbd584d9df361a3416b4e61307cc4d3ff57d7dce7616a7160c154918"], 0x14}}, 0x0)

1.87009731s ago: executing program 2 (id=1065):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x24, r7, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1cc09}]}}]}, 0x44}}, 0x400c084)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x5c, 0x5, 0x400})
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000000001"], 0x30}, 0x0)

1.219614416s ago: executing program 2 (id=1066):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48001}, 0x4000)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x1fffff}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x406}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000006c0)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/58, 0x3a}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0)

1.073585426s ago: executing program 2 (id=1067):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x105d, [{}, {0x0, 0x10000000000000}]}, 0xc9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @multicast2}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="f7e80100000000001c0012800b0001006d616373656300000c0002800500030002000000"], 0x3c}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r9}, 0x18)
r10 = socket(0x10, 0x2, 0x0)
write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)

953.026417ms ago: executing program 2 (id=1068):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c3c, 0x0, 0x0, 0x200000000c70, 0x5], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000600000016eca8aeba000000000000000000000000000000000000000000000000000000000000000000feffff"]}, 0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x2}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r6=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x4, 0x200, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7e7788d5}]}}]}, 0x48}}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a12ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94)

852.334784ms ago: executing program 2 (id=1069):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa00a76c0cee145e4c67651dcaac000000000000"], 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
sendto(r0, &(0x7f0000000600)="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", 0xfa, 0x40, 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT, @ANYBLOB="61cc9204562c603c31d71bed62cf7bb255b7768f49373cd3b9a9c6a717dbc1542df8a29d6873acff31d35c7edad1e435717a3db54756b2b85c852632dbe7a6b7c043c7a5810fe48fb385d151fd277981a4eb9ae2c1ebcd60e2af9bcbf66c650747bee2fdb8ce15ef412e62090f1920bf1afa"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x4, 0x2, 0x0, {0xa, 0x4e21, 0x0, @remote, 0x7fff}}}, 0x3a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010000104000000000000000000000002", @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r4], 0x7c}}, 0x80)
sendmmsg(r3, 0x0, 0x0, 0x0)

662.970426ms ago: executing program 2 (id=1070):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@delqdisc={0x1f0, 0x25, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff1, 0xe}, {0xfff3, 0xd}, {0xa}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x42, 0xa, 0x8, 0x0, 0x6, 0x101, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x0, 0x1, 0x4, 0x8, 0x1, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x8f4, 0x9]}}, {{0x1c, 0x1, {0x6, 0x1, 0x8001, 0x3, 0x2, 0x5, 0xf4a, 0x3}}, {0x60, 0x2, [0x8, 0x1, 0x5]}}, {{0x1c, 0x1, {0x40, 0x0, 0x3, 0x3ff, 0x1, 0x401, 0x906f, 0x7}}, {0x12, 0x2, [0x3, 0x5, 0x81, 0x7, 0x7, 0x4, 0x2]}}, {{0x1c, 0x1, {0xff, 0x6, 0x7, 0xab, 0x2, 0x6b2, 0x9, 0x8}}, {0x14, 0x2, [0x200, 0x2, 0x7, 0x0, 0x3, 0x8, 0x5, 0x9, 0x5, 0x7]}}, {{0x1c, 0x1, {0x10, 0x9, 0x2400, 0xff, 0x2, 0x6, 0x9737, 0x2}}, {0x8, 0x2, [0xb9b6, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x165}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x0, 0x5f9, 0x2, 0x101, 0x54e, 0x8}}, {0x14, 0x2, [0x6fd, 0x5, 0x4, 0x2, 0x6, 0x3, 0x9, 0x520]}}, {{0x1c, 0x1, {0x2, 0x2, 0x31e, 0x6, 0x5, 0x2918, 0x10000, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x3, 0x0, 0xc, 0x81, 0x1, 0x8]}}, {{0x1c, 0x1, {0x0, 0x6, 0x1, 0xffffb54e, 0x0, 0x7, 0x7, 0x4}}, {0xc, 0x2, [0x7, 0x100, 0x8, 0x8]}}, {{0x1c, 0x1, {0x98, 0x2, 0x6, 0x6, 0x1, 0x3, 0x5, 0x3}}, {0xa, 0x2, [0x3b4, 0x3, 0xd]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x8}]}, 0x1f0}}, 0x40000)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@delqdisc={0x1f0, 0x25, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff1, 0xe}, {0xfff3, 0xd}, {0xa}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x42, 0xa, 0x8, 0x0, 0x6, 0x101, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x0, 0x1, 0x4, 0x8, 0x1, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x8f4, 0x9]}}, {{0x1c, 0x1, {0x6, 0x1, 0x8001, 0x3, 0x2, 0x5, 0xf4a, 0x3}}, {0x60, 0x2, [0x8, 0x1, 0x5]}}, {{0x1c, 0x1, {0x40, 0x0, 0x3, 0x3ff, 0x1, 0x401, 0x906f, 0x7}}, {0x12, 0x2, [0x3, 0x5, 0x81, 0x7, 0x7, 0x4, 0x2]}}, {{0x1c, 0x1, {0xff, 0x6, 0x7, 0xab, 0x2, 0x6b2, 0x9, 0x8}}, {0x14, 0x2, [0x200, 0x2, 0x7, 0x0, 0x3, 0x8, 0x5, 0x9, 0x5, 0x7]}}, {{0x1c, 0x1, {0x10, 0x9, 0x2400, 0xff, 0x2, 0x6, 0x9737, 0x2}}, {0x8, 0x2, [0xb9b6, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x165}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x0, 0x5f9, 0x2, 0x101, 0x54e, 0x8}}, {0x14, 0x2, [0x6fd, 0x5, 0x4, 0x2, 0x6, 0x3, 0x9, 0x520]}}, {{0x1c, 0x1, {0x2, 0x2, 0x31e, 0x6, 0x5, 0x2918, 0x10000, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x3, 0x0, 0xc, 0x81, 0x1, 0x8]}}, {{0x1c, 0x1, {0x0, 0x6, 0x1, 0xffffb54e, 0x0, 0x7, 0x7, 0x4}}, {0xc, 0x2, [0x7, 0x100, 0x8, 0x8]}}, {{0x1c, 0x1, {0x98, 0x2, 0x6, 0x6, 0x1, 0x3, 0x5, 0x3}}, {0xa, 0x2, [0x3b4, 0x3, 0xd]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x8}]}, 0x1f0}}, 0x40000) (async)

0s ago: executing program 0 (id=248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0)
ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400})
close(r3)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c)
bind$tipc(r8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x1, 0x1, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}]}}]}}]}, 0x54}}, 0x24040084)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r12, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x311800, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14555' (ED25519) to the list of known hosts.
syzkaller login: [   48.870568][ T5794] cgroup: Unknown subsys name 'net'
[   48.969162][ T5794] cgroup: Unknown subsys name 'cpuset'
[   48.974734][ T5794] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.566304][ T5794] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.569022][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.576729][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.583107][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.587325][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.590922][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.617600][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.620869][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.626737][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.632286][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.635700][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.643164][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.646592][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.650242][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.653681][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.679513][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.942563][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   54.981809][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   55.027527][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   55.072773][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.076251][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.080635][ T5830] bridge_slave_0: entered allmulticast mode
[   55.084366][ T5830] bridge_slave_0: entered promiscuous mode
[   55.113557][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.116784][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.119893][ T5830] bridge_slave_1: entered allmulticast mode
[   55.123689][ T5830] bridge_slave_1: entered promiscuous mode
[   55.139342][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.142408][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.145475][ T5826] bridge_slave_0: entered allmulticast mode
[   55.149215][ T5826] bridge_slave_0: entered promiscuous mode
[   55.194064][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.198838][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.201979][ T5826] bridge_slave_1: entered allmulticast mode
[   55.205857][ T5826] bridge_slave_1: entered promiscuous mode
[   55.211459][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.238191][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.241323][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.244143][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.247400][ T5834] bridge_slave_0: entered allmulticast mode
[   55.251107][ T5834] bridge_slave_0: entered promiscuous mode
[   55.287723][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.291527][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.294635][ T5834] bridge_slave_1: entered allmulticast mode
[   55.299145][ T5834] bridge_slave_1: entered promiscuous mode
[   55.304074][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.309942][ T5830] team0: Port device team_slave_0 added
[   55.321921][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.338119][ T5830] team0: Port device team_slave_1 added
[   55.349112][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.372862][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.383185][ T5826] team0: Port device team_slave_0 added
[   55.401597][ T5826] team0: Port device team_slave_1 added
[   55.411806][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.414113][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.423419][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.428365][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.430628][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.439155][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.470416][ T5834] team0: Port device team_slave_0 added
[   55.473327][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.476171][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.487466][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.498529][ T5834] team0: Port device team_slave_1 added
[   55.501754][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.504547][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.515419][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.563020][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.565343][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.574631][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.581905][ T5830] hsr_slave_0: entered promiscuous mode
[   55.584237][ T5830] hsr_slave_1: entered promiscuous mode
[   55.612615][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.614940][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.623422][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.636000][ T5826] hsr_slave_0: entered promiscuous mode
[   55.640311][ T5826] hsr_slave_1: entered promiscuous mode
[   55.643345][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.649008][ T5826] Cannot create hsr debugfs directory
[   55.707278][ T5834] hsr_slave_0: entered promiscuous mode
[   55.709810][ T5834] hsr_slave_1: entered promiscuous mode
[   55.712072][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.714605][ T5834] Cannot create hsr debugfs directory
[   55.884237][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.891449][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.897532][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.907899][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.954533][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.959996][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.965013][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.969697][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.029898][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.049549][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.055887][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.061290][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.127558][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.131584][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.150309][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.161738][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.164181][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.169317][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.171685][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.178405][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   56.193042][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.195993][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.210075][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.212503][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.269949][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.307586][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   56.341309][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.347331][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.350336][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.356764][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.359870][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.452278][ T5830] veth0_vlan: entered promiscuous mode
[   56.460667][ T5830] veth1_vlan: entered promiscuous mode
[   56.481209][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.521757][ T5830] veth0_macvtap: entered promiscuous mode
[   56.543446][ T5826] veth0_vlan: entered promiscuous mode
[   56.548504][ T5830] veth1_macvtap: entered promiscuous mode
[   56.560299][ T5826] veth1_vlan: entered promiscuous mode
[   56.582624][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.597410][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.603890][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.610249][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.614157][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.618521][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.658466][ T5829] Bluetooth: hci0: command tx timeout
[   56.666231][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.669523][ T5826] veth0_macvtap: entered promiscuous mode
[   56.685097][ T5826] veth1_macvtap: entered promiscuous mode
[   56.729318][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.731394][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.732298][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.746724][ T5829] Bluetooth: hci1: command tx timeout
[   56.747203][ T5218] Bluetooth: hci2: command tx timeout
[   56.759914][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.774337][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.780159][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.783853][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.789706][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.804266][ T5834] veth0_vlan: entered promiscuous mode
[   56.822974][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.830013][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.837983][ T5834] veth1_vlan: entered promiscuous mode
[   56.893520][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.902422][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.923823][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.929528][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.932714][ T5834] veth0_macvtap: entered promiscuous mode
[   56.941001][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.948604][ T5834] veth1_macvtap: entered promiscuous mode
[   56.988993][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.030434][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.043725][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.053233][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.071732][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.074615][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.135060][ T5899] xt_socket: unknown flags 0x8
[   57.145854][ T5899] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   57.172664][ T5901] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   57.301674][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.306491][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.326329][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.335523][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.372309][ T5907] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET)
[   57.404143][ T5909] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   57.631803][ T5914] tipc: Started in network mode
[   57.633671][ T5914] tipc: Node identity 224c6ca34339, cluster identity 4711
[   57.636154][ T5914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.640303][ T5914] syzkaller0: entered promiscuous mode
[   57.642358][ T5914] syzkaller0: entered allmulticast mode
[   57.654416][ T5914] tipc: Resetting bearer <eth:syzkaller0>
[   58.123221][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   58.126281][ T5916] netlink: 'syz.0.11': attribute type 20 has an invalid length.
[   58.131496][ T5916] netlink: 'syz.0.11': attribute type 21 has an invalid length.
[   58.141346][ T5916] Zero length message leads to an empty skb
[   58.181675][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.220178][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.389856][ T5912] tipc: Resetting bearer <eth:syzkaller0>
[   58.398483][ T5912] tipc: Disabling bearer <eth:syzkaller0>
[   58.588042][ T5926] xt_socket: unknown flags 0x8
[   58.595596][ T5926] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   58.654693][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   58.659188][ T5930] netlink: 'syz.1.18': attribute type 20 has an invalid length.
[   58.661775][ T5930] netlink: 'syz.1.18': attribute type 21 has an invalid length.
[   58.742700][ T5218] Bluetooth: hci0: command tx timeout
[   58.816985][ T5829] Bluetooth: hci2: command tx timeout
[   58.819029][ T5218] Bluetooth: hci1: command tx timeout
[   58.888699][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'.
[   58.945528][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   59.073643][ T5942] tipc: Started in network mode
[   59.075924][ T5942] tipc: Node identity 6aceab6b21, cluster identity 4711
[   59.079689][ T5942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.083952][ T5942] syzkaller0: entered promiscuous mode
[   59.086287][ T5942] syzkaller0: entered allmulticast mode
[   59.101556][ T5942] tipc: Resetting bearer <eth:syzkaller0>
[   59.841761][ T5940] tipc: Resetting bearer <eth:syzkaller0>
[   59.877432][ T5940] tipc: Disabling bearer <eth:syzkaller0>
[   60.375357][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   60.817009][ T5218] Bluetooth: hci0: command tx timeout
[   60.896562][ T5218] Bluetooth: hci1: command tx timeout
[   60.896595][ T5829] Bluetooth: hci2: command tx timeout
[   61.224991][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   61.272655][ T5962] xt_socket: unknown flags 0x8
[   61.293776][ T5962] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   61.496806][ T5971] tipc: Started in network mode
[   61.499378][ T5971] tipc: Node identity b6a3d24af3bf, cluster identity 4711
[   61.502815][ T5971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.509020][ T5971] syzkaller0: entered promiscuous mode
[   61.511690][ T5971] syzkaller0: entered allmulticast mode
[   61.532590][ T5971] tipc: Resetting bearer <eth:syzkaller0>
[   62.183438][ T5967] tipc: Resetting bearer <eth:syzkaller0>
[   62.191424][ T5967] tipc: Disabling bearer <eth:syzkaller0>
[   62.283007][ T5978] netlink: 'syz.2.41': attribute type 1 has an invalid length.
[   62.331009][ T5983] netlink: 52 bytes leftover after parsing attributes in process `syz.2.42'.
[   62.336973][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'.
[   62.418322][ T5987] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   62.488933][ T5990] gretap1: entered promiscuous mode
[   62.896672][ T5829] Bluetooth: hci0: command tx timeout
[   62.976621][ T5829] Bluetooth: hci2: command tx timeout
[   62.986626][ T5829] Bluetooth: hci1: command tx timeout
[   63.338590][ T5993] __nla_validate_parse: 4 callbacks suppressed
[   63.338605][ T5993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.52'.
[   63.346345][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   63.353315][ T5993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.52'.
[   63.357783][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   63.361939][ T5993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.52'.
[   63.440685][ T5998] netlink: 'syz.0.48': attribute type 1 has an invalid length.
[   63.678505][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.57'.
[   63.694510][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   63.706489][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.57'.
[   63.709358][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   63.712908][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.57'.
[   63.781420][ T6022] netlink: 'syz.0.59': attribute type 2 has an invalid length.
[   63.823356][ T6022] : entered promiscuous mode
[   63.888782][ T6025] nbd: socks must be embedded in a SOCK_ITEM attr
[   63.892850][ T6032] netlink: 'syz.0.63': attribute type 4 has an invalid length.
[   63.897801][ T6025] block nbd0: shutting down sockets
[   63.903900][ T6031] netlink: 'syz.0.63': attribute type 4 has an invalid length.
[   64.293801][ T6058] netlink: 'syz.0.73': attribute type 1 has an invalid length.
[   64.572796][ T6081] netlink: 'syz.2.85': attribute type 1 has an invalid length.
[   64.657095][ T6093] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.952974][ T6105] dummy0: entered allmulticast mode
[   65.008428][ T6109] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   65.044561][ T6113] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   65.074229][ T6115] netlink: 'syz.0.98': attribute type 1 has an invalid length.
[   65.105733][ T6115] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.448269][ T6148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.451865][ T6148] syzkaller0: entered promiscuous mode
[   65.455450][ T6148] syzkaller0: entered allmulticast mode
[   65.476275][ T6148] tipc: Resetting bearer <eth:syzkaller0>
[   65.484032][ T6147] tipc: Resetting bearer <eth:syzkaller0>
[   65.496755][ T6147] tipc: Disabling bearer <eth:syzkaller0>
[   65.625599][ T6156] warning: `syz.0.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.758581][ T6175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.265564][ T6206] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526
[   66.594695][ T6243] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   66.598759][ T6243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.434824][ T6294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.438792][ T6290] tipc: Resetting bearer <eth:syzkaller0>
[   67.446281][ T6290] tipc: Disabling bearer <eth:syzkaller0>
[   67.544588][ T6305] validate_nla: 12 callbacks suppressed
[   67.544597][ T6305] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   67.553324][ T6305] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   67.621505][ T6310] netlink: 'syz.0.163': attribute type 1 has an invalid length.
[   67.624689][ T6311] bridge0: port 3(syz_tun) entered blocking state
[   67.627532][ T6311] bridge0: port 3(syz_tun) entered disabled state
[   67.630965][ T6311] syz_tun: entered allmulticast mode
[   67.641193][ T6311] syz_tun: entered promiscuous mode
[   67.647162][ T6311] bridge0: port 3(syz_tun) entered blocking state
[   67.649514][ T6311] bridge0: port 3(syz_tun) entered forwarding state
[   67.652749][ T6312] netlink: 'syz.0.163': attribute type 29 has an invalid length.
[   67.655677][ T6314] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   67.660063][ T6312] netlink: 'syz.0.163': attribute type 29 has an invalid length.
[   67.804487][ T6330] netlink: 'syz.2.171': attribute type 1 has an invalid length.
[   67.809114][ T6328] xt_limit: Overflow, try lower: 0/0
[   67.939785][ T6350] xt_hashlimit: size too large, truncated to 1048576
[   67.942020][ T6350] xt_hashlimit: overflow, try lower: 3/0
[   68.168830][ T6361] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   68.444494][ T6391] __nla_validate_parse: 100 callbacks suppressed
[   68.444509][ T6391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.193'.
[   68.452328][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'.
[   68.455953][ T6391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.193'.
[   68.460971][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'.
[   68.465834][ T6391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.193'.
[   68.498157][ T6394] netlink: 'syz.1.195': attribute type 1 has an invalid length.
[   68.528095][ T6396] sctp: [Deprecated]: syz.0.194 (pid 6396) Use of int in maxseg socket option.
[   68.528095][ T6396] Use struct sctp_assoc_value instead
[   68.579288][ T6400] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   68.756304][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'.
[   68.855892][ T6430] batadv1: entered allmulticast mode
[   68.876179][ T6432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.209'.
[   68.881638][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'.
[   68.885341][ T6432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.209'.
[   68.889740][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'.
[   68.975769][ T6437] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   69.509355][ T6481] policy can only be matched on NF_INET_PRE_ROUTING
[   69.509368][ T6481] unable to load match
[   70.161934][ T6512] bridge0: port 3(syz_tun) entered disabled state
[   70.172129][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.176118][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.210294][ T6517] IPv6: NLM_F_REPLACE set, but no existing node found!
[   70.264826][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.275933][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.331803][ T6512] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.335750][ T6512] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.340863][ T6512] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.344776][ T6512] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.903981][ T6542] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[   71.227012][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.442661][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.449732][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.453518][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.464514][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.468986][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.684887][ T6565] chnl_net:caif_netlink_parms(): no params data found
[   71.775688][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.787166][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.791822][ T6565] bridge_slave_0: entered allmulticast mode
[   71.795081][ T6565] bridge_slave_0: entered promiscuous mode
[   71.802724][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.805525][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.809126][ T6565] bridge_slave_1: entered allmulticast mode
[   71.811888][ T6565] bridge_slave_1: entered promiscuous mode
[   71.848258][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.865261][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.905175][ T6565] team0: Port device team_slave_0 added
[   71.915343][ T6565] team0: Port device team_slave_1 added
[   71.955952][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.965010][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.979766][ T6565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.985961][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.990173][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.000816][ T6565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.079610][ T6565] hsr_slave_0: entered promiscuous mode
[   72.082385][ T6565] hsr_slave_1: entered promiscuous mode
[   72.084988][ T6565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.092561][ T6565] Cannot create hsr debugfs directory
[   72.264686][ T6565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.330117][ T6565] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.400702][ T6565] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.482437][ T6565] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.561710][ T6646] validate_nla: 10 callbacks suppressed
[   72.561722][ T6646] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[   72.584365][ T6646] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.599746][ T6565] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.606149][ T6565] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.615533][ T6565] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.621021][ T6565] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.676572][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.689611][ T6565] 8021q: adding VLAN 0 to HW filter on device team0
[   72.694789][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.697648][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.704198][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.706696][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.830730][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.879744][ T6565] veth0_vlan: entered promiscuous mode
[   72.892592][ T6565] veth1_vlan: entered promiscuous mode
[   72.934624][ T6674] netlink: 'syz.2.292': attribute type 1 has an invalid length.
[   72.952663][ T6565] veth0_macvtap: entered promiscuous mode
[   72.967620][ T6565] veth1_macvtap: entered promiscuous mode
[   72.986134][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.994035][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.002775][ T6565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.005600][ T6565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.011241][ T6565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.015000][ T6565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.019656][ T6676] netlink: ct family unspecified
[   73.021751][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.069651][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.077356][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.105202][ T1908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.108587][ T1908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.128804][ T6679] netlink: 'syz.2.294': attribute type 1 has an invalid length.
[   73.183448][ T6681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   73.471804][ T6702] __nla_validate_parse: 60 callbacks suppressed
[   73.471814][ T6702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.302'.
[   73.511489][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'.
[   73.536670][ T5218] Bluetooth: hci1: command tx timeout
[   73.619268][ T6708] netlink: 'syz.2.304': attribute type 1 has an invalid length.
[   73.805989][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'.
[   73.845909][ T6725] IPv6: NLM_F_REPLACE set, but no existing node found!
[   73.909229][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.2.312'.
[   73.912546][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[   73.915646][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.2.312'.
[   73.919728][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[   73.929092][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.2.312'.
[   73.983302][ T6734] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   74.076338][ T6742] netlink: 'syz.2.316': attribute type 1 has an invalid length.
[   74.286085][ T6760] pimreg: entered allmulticast mode
[   74.301621][ T6760] pimreg: left allmulticast mode
[   75.130146][ T6768] netlink: 52 bytes leftover after parsing attributes in process `syz.1.324'.
[   75.134073][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'.
[   75.190252][ T6773] netlink: 'syz.1.326': attribute type 1 has an invalid length.
[   75.253885][ T6778] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   75.463079][ T6785] netlink: 'syz.1.328': attribute type 1 has an invalid length.
[   75.915535][ T6816] netlink: 'syz.1.338': attribute type 11 has an invalid length.
[   75.919212][ T6816] netlink: 'syz.1.338': attribute type 11 has an invalid length.
[   75.922327][ T6816] netlink: 'syz.1.338': attribute type 1 has an invalid length.
[   76.069710][ T6822] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[   76.233835][ T6833] nbd: must specify at least one socket
[   76.442708][ T6844] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.445703][ T6844] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.449955][ T6844] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.452821][ T6844] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.607961][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.611213][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.613745][ T6891] validate_nla: 7 callbacks suppressed
[   77.613757][ T6891] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[   77.792868][ T6902] netlink: 'syz.1.369': attribute type 7 has an invalid length.
[   77.795555][ T6902] netlink: 'syz.1.369': attribute type 8 has an invalid length.
[   78.035273][ T6916] xt_hashlimit: max too large, truncated to 1048576
[   78.148886][ T6920] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[   78.369170][ T6930] Bluetooth: MGMT ver 1.23
[   78.523126][ T6938] netlink: 'syz.1.381': attribute type 1 has an invalid length.
[   78.526359][ T6938] __nla_validate_parse: 37 callbacks suppressed
[   78.526369][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[   78.669571][ T6953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.384'.
[   78.672486][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[   78.675392][ T6953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.384'.
[   78.679766][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[   78.682673][ T6953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.384'.
[   78.729225][ T6961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.386'.
[   78.874767][ T6974] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   78.935447][ T6983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.391'.
[   78.945634][   T24] IPVS: starting estimator thread 0...
[   79.038606][ T6985] IPVS: using max 79 ests per chain, 189600 per kthread
[   79.062982][ T6999] netlink: 52 bytes leftover after parsing attributes in process `syz.1.396'.
[   79.067870][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'.
[   79.169040][ T7010] netlink: 'syz.2.400': attribute type 1 has an invalid length.
[   79.250716][ T7018] netlink: 'syz.2.405': attribute type 11 has an invalid length.
[   79.338556][ T7031] netlink: 'syz.2.407': attribute type 83 has an invalid length.
[   79.375174][ T7035] netlink: 'syz.2.409': attribute type 10 has an invalid length.
[   79.617944][ T7059] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   79.623730][ T7061] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   79.828459][ T7074] Cannot find add_set index 3 as target
[   80.384535][ T7123] block nbd0: server does not support multiple connections per device.
[   80.393102][ T7123] block nbd0: shutting down sockets
[   80.604177][ T7141] dvmrp0: entered allmulticast mode
[   81.104211][ T7178] netlink: 'syz.2.465': attribute type 11 has an invalid length.
[   81.468387][   T10] cfg80211: failed to load regulatory.db
[   82.355586][ T7227] No such timeout policy "syz1"
[   82.358962][ T7228] No such timeout policy "syz1"
[   83.326898][ T7245] validate_nla: 15 callbacks suppressed
[   83.326909][ T7245] netlink: 'syz.1.491': attribute type 1 has an invalid length.
[   83.583585][ T7269] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[   83.634738][ T7272] netlink: zone id is out of range
[   83.699528][ T7256] netlink: 'syz.2.495': attribute type 21 has an invalid length.
[   83.702791][ T7256] __nla_validate_parse: 74 callbacks suppressed
[   83.702798][ T7256] netlink: 128 bytes leftover after parsing attributes in process `syz.2.495'.
[   83.715160][ T7256] netlink: 'syz.2.495': attribute type 5 has an invalid length.
[   83.724393][ T7256] netlink: 'syz.2.495': attribute type 6 has an invalid length.
[   83.729274][ T7256] netlink: 3 bytes leftover after parsing attributes in process `syz.2.495'.
[   83.761670][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'.
[   83.808743][ T7288] netlink: 52 bytes leftover after parsing attributes in process `syz.2.504'.
[   83.811596][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'.
[   83.814371][ T7288] netlink: 52 bytes leftover after parsing attributes in process `syz.2.504'.
[   83.823800][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'.
[   83.827477][ T7288] netlink: 52 bytes leftover after parsing attributes in process `syz.2.504'.
[   83.861996][ T7293] netlink: 'syz.2.506': attribute type 1 has an invalid length.
[   83.862746][ T7291] netlink: 'syz.1.505': attribute type 7 has an invalid length.
[   83.959365][ T7303] netlink: 'syz.2.510': attribute type 1 has an invalid length.
[   83.964266][ T7305] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   83.977531][ T7305] netlink: 5 bytes leftover after parsing attributes in process `syz.1.511'.
[   83.982031][ T7305] netlink: 144 bytes leftover after parsing attributes in process `syz.1.511'.
[   84.143030][ T7326] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   84.476155][ T7356] netlink: 'syz.2.526': attribute type 1 has an invalid length.
[   84.878335][ T7380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.906122][ T7380] syzkaller0: entered promiscuous mode
[   84.908935][ T7380] syzkaller0: entered allmulticast mode
[   84.911022][ T7380] tipc: Resetting bearer <eth:syzkaller0>
[   84.914817][ T7380] netlink: zone id is out of range
[   84.926497][ T7380] netlink: zone id is out of range
[   84.928185][ T7380] netlink: zone id is out of range
[   84.931152][ T7380] netlink: zone id is out of range
[   84.933905][ T7380] netlink: zone id is out of range
[   84.935666][ T7380] netlink: zone id is out of range
[   84.938198][ T7380] netlink: zone id is out of range
[   84.940460][ T7380] netlink: zone id is out of range
[   84.946856][ T7380] netlink: zone id is out of range
[   84.949615][ T7380] netlink: zone id is out of range
[   84.952920][ T7378] tipc: Resetting bearer <eth:syzkaller0>
[   85.678325][ T7378] tipc: Disabling bearer <eth:syzkaller0>
[   85.755821][ T7388] pim6reg1: entered promiscuous mode
[   85.758861][ T7388] pim6reg1: entered allmulticast mode
[   86.006961][ T7404] team0: Port device geneve0 added
[   86.726612][ T7444] tipc: Enabled bearer <eth:wg2>, priority 10
[   87.332048][ T7504] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[   87.341727][ T7506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.343942][ T7508] syzkaller0: entered promiscuous mode
[   87.345826][ T7508] syzkaller0: entered allmulticast mode
[   87.359362][ T7506] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.374596][ T7506] tipc: Resetting bearer <eth:syzkaller0>
[   87.384115][ T7506] tipc: Disabling bearer <eth:syzkaller0>
[   87.456323][ T7514] xt_CT: No such helper "snmp"
[   87.764089][ T7537] veth5: entered promiscuous mode
[   88.397658][   T24] hid-generic 0005:07C0:0007.0001: collection stack underflow
[   88.401850][   T24] hid-generic 0005:07C0:0007.0001: item 0 0 0 12 parsing failed
[   88.416836][   T24] hid-generic 0005:07C0:0007.0001: probe with driver hid-generic failed with error -22
[   88.417562][ T5836] tipc: Node number set to 1635085475
[   88.657128][ T7578] validate_nla: 9 callbacks suppressed
[   88.657138][ T7578] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[   88.765314][ T7585] __nla_validate_parse: 75 callbacks suppressed
[   88.765323][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'.
[   88.765352][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'.
[   88.799729][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[   88.824644][ T7593] xt_CT: No such helper "snmp_trap"
[   88.855594][ T7597] x_tables: duplicate underflow at hook 2
[   88.922510][ T7604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.610'.
[   88.926810][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[   88.930399][ T7604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.610'.
[   88.934617][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[   88.938445][ T7604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.610'.
[   89.769996][ T7643] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[   89.929343][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.616'.
[   89.975529][ T7656] netlink: 52 bytes leftover after parsing attributes in process `syz.2.618'.
[   90.026952][ T7658] syz_tun: left allmulticast mode
[   90.029176][ T7658] syz_tun: left promiscuous mode
[   90.032041][ T7658] bridge0: port 3(syz_tun) entered disabled state
[   90.039829][ T7658] bridge_slave_0: left allmulticast mode
[   90.042165][ T7658] bridge_slave_0: left promiscuous mode
[   90.044625][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.048739][ T7660] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[   90.054064][ T7658] bridge_slave_1: left allmulticast mode
[   90.056570][ T7658] bridge_slave_1: left promiscuous mode
[   90.059379][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.078830][ T7658] bond0: (slave bond_slave_0): Releasing backup interface
[   90.088264][ T7658] bond0: (slave bond_slave_1): Releasing backup interface
[   90.094088][ T7658] team0: Port device team_slave_0 removed
[   90.099455][ T7658] team0: Port device team_slave_1 removed
[   90.101714][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.105077][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.281325][ T7679] netlink: 'syz.2.627': attribute type 15 has an invalid length.
[   90.359334][ T7685] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[   90.404719][ T7687] bridge_slave_0: left allmulticast mode
[   90.408185][ T7687] bridge_slave_0: left promiscuous mode
[   90.410298][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.263454][ T7708] netlink: 'syz.2.638': attribute type 1 has an invalid length.
[   91.380200][ T7717] sch_tbf: burst 0 is lower than device lo mtu (1550) !
[   91.440559][ T7724] net_ratelimit: 22 callbacks suppressed
[   91.440571][ T7724] netlink: zone id is out of range
[   91.444344][ T7724] netlink: zone id is out of range
[   91.446172][ T7724] netlink: get zone limit has 8 unknown bytes
[   91.492511][ T7726] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   91.499983][ T7727] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   91.593028][ T7736] netlink: 'syz.2.648': attribute type 1 has an invalid length.
[   91.910421][ T7759] dummy0: entered promiscuous mode
[   91.914147][ T7759] batadv0: entered promiscuous mode
[   91.916887][ T7759] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[   91.921215][ T7759] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   92.000616][ T7759] dummy0: left promiscuous mode
[   92.004768][ T7759] batadv0: left promiscuous mode
[   92.269914][ T7779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.908847][ T7808] SET target dimension over the limit!
[   93.050958][ T7824] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[   93.250044][ T7834] trusted_key: syz.2.679 sent an empty control message without MSG_MORE.
[   93.340691][ T7850] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[   93.482717][ T7862] xt_l2tp: invalid flags combination: c
[   93.541057][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.564563][ T7866] bridge_slave_1 (unregistering): left allmulticast mode
[   93.567351][ T7866] bridge_slave_1 (unregistering): left promiscuous mode
[   93.569894][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.804239][ T7880] __nla_validate_parse: 48 callbacks suppressed
[   93.804250][ T7880] netlink: 52 bytes leftover after parsing attributes in process `syz.2.688'.
[   93.809606][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'.
[   93.812499][ T7880] netlink: 52 bytes leftover after parsing attributes in process `syz.2.688'.
[   93.815377][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'.
[   93.820459][ T7880] netlink: 52 bytes leftover after parsing attributes in process `syz.2.688'.
[   93.848725][ T7882] lo speed is unknown, defaulting to 1000
[   93.852160][ T7882] lo speed is unknown, defaulting to 1000
[   93.881675][ T7883] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   93.889713][ T7882] lo speed is unknown, defaulting to 1000
[   94.024814][ T7882] infiniband syz0: set active
[   94.028401][ T5877] lo speed is unknown, defaulting to 1000
[   94.030893][ T7882] infiniband syz0: added lo
[   94.033423][ T7882] syz0: rxe_create_cq: returned err = -12
[   94.035483][ T7882] infiniband syz0: Couldn't create ib_mad CQ
[   94.039494][ T7882] infiniband syz0: Couldn't open port 1
[   94.055442][ T7882] RDS/IB: syz0: added
[   94.059196][ T7882] smc: adding ib device syz0 with port count 1
[   94.061689][ T7882] smc:    ib device syz0 port 1 has pnetid 
[   94.064864][ T5877] lo speed is unknown, defaulting to 1000
[   94.073443][ T7882] lo speed is unknown, defaulting to 1000
[   94.180413][ T7882] lo speed is unknown, defaulting to 1000
[   94.189780][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'.
[   94.269280][ T7911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.696'.
[   94.272303][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'.
[   94.285700][ T7911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.696'.
[   94.291851][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'.
[   94.314318][ T7882] lo speed is unknown, defaulting to 1000
[   94.425296][ T7882] lo speed is unknown, defaulting to 1000
[   95.006179][ T7949] vlan0: entered allmulticast mode
[   95.011761][ T7949] bridge_slave_0: entered allmulticast mode
[   95.398210][ T5877] IPVS: starting estimator thread 0...
[   95.495314][ T7976] IPVS: using max 79 ests per chain, 189600 per kthread
[   95.775704][ T8005] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   95.787041][ T5877] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[   95.812310][ T8008] pimreg: entered allmulticast mode
[   96.018489][ T5877] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[   96.080894][ T8031] syz_tun: entered promiscuous mode
[   96.092173][ T8031] batadv_slave_0: entered promiscuous mode
[   96.095320][ T8031] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   96.098806][ T8031] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   96.102277][ T8031] hsr1: entered allmulticast mode
[   96.105905][ T8031] syz_tun: entered allmulticast mode
[   96.108487][ T8031] batadv_slave_0: entered allmulticast mode
[   96.270759][ T8044] lo speed is unknown, defaulting to 1000
[   96.386257][ T8053] sctp: [Deprecated]: syz.2.749 (pid 8053) Use of int in max_burst socket option.
[   96.386257][ T8053] Use struct sctp_assoc_value instead
[   96.592781][ T8065] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   97.075800][ T8094] lo speed is unknown, defaulting to 1000
[   97.145189][ T8089] can: request_module (can-proto-5) failed.
[   97.953781][ T8125] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   98.402343][ T8160] sctp: [Deprecated]: syz.2.781 (pid 8160) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.402343][ T8160] Use struct sctp_sack_info instead
[   98.656936][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[   99.236627][   T24] lo speed is unknown, defaulting to 1000
[   99.239325][   T24] syz0: Port: 1 Link DOWN
[   99.246179][   T24] lo speed is unknown, defaulting to 1000
[   99.412568][ T8229] netlink: 'syz.2.795': attribute type 13 has an invalid length.
[   99.415829][ T8229] netlink: 'syz.2.795': attribute type 17 has an invalid length.
[   99.443838][ T8234] __nla_validate_parse: 37 callbacks suppressed
[   99.443849][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[   99.450756][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[   99.524496][ T8236] xt_TPROXY: Can be used only with -p tcp or -p udp
[   99.578141][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'.
[   99.668613][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.686380][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.876815][ T8229] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.880584][ T8229] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.884222][ T8229] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.892906][ T8229] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.908598][ T8229] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.911680][ T8229] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.914529][ T8229] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.918228][ T8229] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.930803][ T8229] syz.2.795 (8229) used greatest stack depth: 20032 bytes left
[   99.955704][ T8230] lo speed is unknown, defaulting to 1000
[  100.028219][ T8249] sctp: [Deprecated]: syz.1.800 (pid 8249) Use of int in maxseg socket option.
[  100.028219][ T8249] Use struct sctp_assoc_value instead
[  100.045734][ T8249] sctp: [Deprecated]: syz.1.800 (pid 8249) Use of int in maxseg socket option.
[  100.045734][ T8249] Use struct sctp_assoc_value instead
[  100.125645][ T8256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.801'.
[  100.135846][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'.
[  100.479167][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  100.482759][ T8277] netlink: 'syz.2.807': attribute type 10 has an invalid length.
[  100.494245][ T8277] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.497913][ T8276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.570308][ T8283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.573726][ T8283] syzkaller0: entered promiscuous mode
[  100.575896][ T8283] syzkaller0: entered allmulticast mode
[  100.593313][ T8282] tipc: Resetting bearer <eth:syzkaller0>
[  100.604492][ T8282] tipc: Disabling bearer <eth:syzkaller0>
[  100.791456][ T8291] openvswitch: netlink: Flow key attr not present in new flow.
[  100.928221][ T8297] netlink: 252 bytes leftover after parsing attributes in process `syz.1.816'.
[  100.981730][ T8300] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  101.041911][ T8308] netlink: 'syz.2.819': attribute type 3 has an invalid length.
[  101.048403][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'.
[  101.128530][ T8314] syzkaller0: entered promiscuous mode
[  101.130632][ T8314] syzkaller0: entered allmulticast mode
[  101.231825][ T8321] netlink: 'syz.1.823': attribute type 15 has an invalid length.
[  101.245870][ T8321] netlink: 666 bytes leftover after parsing attributes in process `syz.1.823'.
[  101.416735][ T8351] netlink: 'syz.1.831': attribute type 12 has an invalid length.
[  101.509607][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'.
[  101.513494][ T8362] netlink: 'syz.1.835': attribute type 15 has an invalid length.
[  101.516343][ T8362] netlink: 'syz.1.835': attribute type 18 has an invalid length.
[  101.598857][ T8374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.227596][ T8413] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  102.244914][ T8413] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.316343][ T8415] veth9: entered promiscuous mode
[  102.323458][ T8415] bond2: (slave veth9): Enslaving as an active interface with a down link
[  102.327832][ T8415] erspan0: entered allmulticast mode
[  102.333098][ T8415] bond2: (slave erspan0): making interface the new active one
[  102.336517][ T8415] erspan0: entered promiscuous mode
[  102.338814][ T8415] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  102.575019][ T8415] syz.1.848 (8415) used greatest stack depth: 19992 bytes left
[  102.823807][ T8437] netlink: 'syz.1.857': attribute type 1 has an invalid length.
[  102.869402][ T8439] atomic_op ffff888027b92198 conn xmit_atomic 0000000000000000
[  103.021037][ T8453] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  103.029031][ T8453] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  103.998958][ T8480] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  104.019405][ T8478] macsec1: entered promiscuous mode
[  104.025552][ T8478] macsec1: entered allmulticast mode
[  104.408821][ T8518] : entered promiscuous mode
[  104.464346][ T8522] validate_nla: 1 callbacks suppressed
[  104.464361][ T8522] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  104.489383][ T8522] bond2: (slave gretap1): making interface the new active one
[  104.492910][ T8522] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  105.054129][ T8548] __nla_validate_parse: 48 callbacks suppressed
[  105.054144][ T8548] netlink: 108 bytes leftover after parsing attributes in process `syz.2.892'.
[  105.301287][ T8577] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  105.411353][ T8585] can: request_module (can-proto-0) failed.
[  105.439218][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'.
[  106.246726][ T8595] bridge_slave_0: entered promiscuous mode
[  106.359168][ T8599] netlink: 56 bytes leftover after parsing attributes in process `syz.2.905'.
[  107.052092][   T33] audit: type=1804 audit(1752136485.650:2): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.907" name="/newroot/399/cgroup.controllers" dev="tmpfs" ino=2044 res=1 errno=0
[  107.062042][   T33] audit: type=1800 audit(1752136485.650:3): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.907" name="cgroup.controllers" dev="tmpfs" ino=2044 res=0 errno=0
[  107.242387][ T8618] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  107.245443][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.434045][ T8636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.439336][ T8636] syzkaller0: entered promiscuous mode
[  107.441616][ T8636] syzkaller0: entered allmulticast mode
[  107.450794][ T8636] tipc: Resetting bearer <eth:syzkaller0>
[  107.455904][ T8637] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  107.460593][ T8635] tipc: Resetting bearer <eth:syzkaller0>
[  107.471242][ T8635] tipc: Disabling bearer <eth:syzkaller0>
[  107.562792][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.923'.
[  107.568947][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[  107.592517][ T8651] sctp: [Deprecated]: syz.2.922 (pid 8651) Use of int in max_burst socket option deprecated.
[  107.592517][ T8651] Use struct sctp_assoc_value instead
[  107.669352][ T8658] netlink: 'syz.1.926': attribute type 13 has an invalid length.
[  107.673696][ T8658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.926'.
[  107.682061][ T8658] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  107.728275][ T8664] syzkaller0: entered allmulticast mode
[  107.733480][ T8660] syzkaller0: left allmulticast mode
[  107.827204][ T8668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'.
[  107.830638][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'.
[  107.834610][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'.
[  108.063390][ T8682] lo speed is unknown, defaulting to 1000
[  108.202506][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'.
[  108.212269][ T8683] SET target dimension over the limit!
[  108.804506][ T8715] dvmrp8: entered allmulticast mode
[  108.811186][ T8715] dvmrp8: left allmulticast mode
[  108.980555][ T8727] rdma_op ffff8880265c61f0 conn xmit_rdma 0000000000000000
[  109.420643][ T8760] netlink: 'syz.2.958': attribute type 13 has an invalid length.
[  109.601013][ T8778] netlink: 'syz.2.965': attribute type 21 has an invalid length.
[  109.603624][ T8778] netlink: 'syz.2.965': attribute type 6 has an invalid length.
[  109.726816][ T8794] dvmrp8: entered allmulticast mode
[  109.805263][   T33] audit: type=1800 audit(1752136488.400:4): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.973" name=25705320202020 dev="tmpfs" ino=2268 res=0 errno=0
[  109.934939][ T8817] netlink: 'syz.1.977': attribute type 7 has an invalid length.
[  110.210413][ T5834] syz_tun (unregistering): left promiscuous mode
[  110.558885][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.563111][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.567004][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.571394][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.575099][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.615759][ T8843] lo speed is unknown, defaulting to 1000
[  110.840479][ T8843] chnl_net:caif_netlink_parms(): no params data found
[  110.907044][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.909474][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.912620][ T8843] bridge_slave_0: entered allmulticast mode
[  110.915710][ T8843] bridge_slave_0: entered promiscuous mode
[  110.920006][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.922752][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.925146][ T8843] bridge_slave_1: entered allmulticast mode
[  110.928314][ T8843] bridge_slave_1: entered promiscuous mode
[  110.950378][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.955140][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.977987][ T8843] team0: Port device team_slave_0 added
[  110.981753][ T8843] team0: Port device team_slave_1 added
[  110.998619][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.001261][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.011297][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.016142][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.018577][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.028137][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.057027][ T8843] hsr_slave_0: entered promiscuous mode
[  111.059949][ T8843] hsr_slave_1: entered promiscuous mode
[  111.062179][ T8843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.064680][ T8843] Cannot create hsr debugfs directory
[  111.077637][ T8860] netlink: 'syz.2.989': attribute type 1 has an invalid length.
[  111.080524][ T8860] __nla_validate_parse: 5 callbacks suppressed
[  111.080532][ T8860] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.989'.
[  111.094123][ T8860] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  111.165274][ T8862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.990'.
[  111.172137][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'.
[  111.176034][ T8862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.990'.
[  111.181528][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'.
[  111.187458][ T8862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.990'.
[  111.227297][ T8864] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002
[  111.437353][ T8843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  111.442247][ T8843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  111.447081][ T8843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  111.451876][ T8843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  111.509292][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.519694][ T8843] 8021q: adding VLAN 0 to HW filter on device team0
[  111.524479][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.526946][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.535205][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.537600][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.661625][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.703852][ T8843] veth0_vlan: entered promiscuous mode
[  111.715207][ T8843] veth1_vlan: entered promiscuous mode
[  111.731263][ T8843] veth0_macvtap: entered promiscuous mode
[  111.735235][ T8843] veth1_macvtap: entered promiscuous mode
[  111.746884][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.758241][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.765389][ T8843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.770213][ T8843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.773792][ T8843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.777886][ T8843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.827328][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.829909][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.848076][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.851354][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.343972][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.423996][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.548969][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.598108][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.616257][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.619439][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.622989][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.626198][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.629738][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.677362][ T8892] lo speed is unknown, defaulting to 1000
[  112.719870][   T12] bridge_slave_1: left allmulticast mode
[  112.722085][   T12] bridge_slave_1: left promiscuous mode
[  112.724754][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.733124][   T12] bridge_slave_0: left allmulticast mode
[  112.735191][   T12] bridge_slave_0: left promiscuous mode
[  112.739850][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.084263][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.091323][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.096160][   T12] bond0 (unregistering): Released all slaves
[  113.302210][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'.
[  113.388411][ T8892] chnl_net:caif_netlink_parms(): no params data found
[  113.391945][ T8915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'.
[  113.394835][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.998'.
[  113.399908][ T8915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'.
[  113.532939][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.540530][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.543509][ T8892] bridge_slave_0: entered allmulticast mode
[  113.570034][ T8892] bridge_slave_0: entered promiscuous mode
[  113.573956][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.576359][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.584452][ T8892] bridge_slave_1: entered allmulticast mode
[  113.599325][ T8892] bridge_slave_1: entered promiscuous mode
[  113.666310][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.682760][   T12] hsr_slave_0: left promiscuous mode
[  113.685638][   T12] hsr_slave_1: left promiscuous mode
[  113.690520][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.693110][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.696004][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.699330][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.710486][   T12] veth1_macvtap: left promiscuous mode
[  113.712478][   T12] veth0_macvtap: left promiscuous mode
[  113.714612][   T12] veth1_vlan: left promiscuous mode
[  113.716402][   T12] veth0_vlan: left promiscuous mode
[  114.015295][   T12] team0 (unregistering): Port device team_slave_1 removed
[  114.035429][   T12] team0 (unregistering): Port device team_slave_0 removed
[  114.249847][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.356202][ T8892] team0: Port device team_slave_0 added
[  114.365582][ T8892] team0: Port device team_slave_1 added
[  114.420668][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.423514][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.436189][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.447024][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.449809][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.460400][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.574049][ T8892] hsr_slave_0: entered promiscuous mode
[  114.580263][ T8892] hsr_slave_1: entered promiscuous mode
[  114.584445][ T8892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.588249][ T8892] Cannot create hsr debugfs directory
[  114.669345][ T5218] Bluetooth: hci1: command tx timeout
[  114.769292][ T5676] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.810856][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.815129][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.818667][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.822447][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.827609][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.870016][ T8955] lo speed is unknown, defaulting to 1000
[  115.116335][ T8972] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[  115.121377][ T8972] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface
[  115.125888][ T8972] bond3 (unregistering): Released all slaves
[  115.180737][ T8955] chnl_net:caif_netlink_parms(): no params data found
[  115.254513][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.259533][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.261905][ T8955] bridge_slave_0: entered allmulticast mode
[  115.264633][ T8955] bridge_slave_0: entered promiscuous mode
[  115.272940][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.276105][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.280928][ T8955] bridge_slave_1: entered allmulticast mode
[  115.283717][ T8955] bridge_slave_1: entered promiscuous mode
[  115.323993][ T8892] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  115.329476][ T8892] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  115.335490][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.342350][ T8892] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  115.347866][ T8892] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  115.353456][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.393277][ T8955] team0: Port device team_slave_0 added
[  115.404674][ T8955] team0: Port device team_slave_1 added
[  115.450362][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.452805][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.468725][ T8955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.485195][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.488106][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.500457][ T8955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.590698][ T8999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.595332][ T8999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.600647][ T8999] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  115.611223][ T8999] bond0 (unregistering): Released all slaves
[  115.629779][ T8955] hsr_slave_0: entered promiscuous mode
[  115.632149][ T8955] hsr_slave_1: entered promiscuous mode
[  115.634529][ T8955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.641151][ T8955] Cannot create hsr debugfs directory
[  115.733615][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.757737][   T12] erspan0: left promiscuous mode
[  115.832368][ T8892] 8021q: adding VLAN 0 to HW filter on device team0
[  115.856245][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.859301][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.882637][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.885524][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.005095][ T9030] netlink: 'syz.2.1016': attribute type 10 has an invalid length.
[  116.058831][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.079799][ T5676] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.101811][ T9034] lo speed is unknown, defaulting to 1000
[  116.120731][ T5676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.141740][ T8892] veth0_vlan: entered promiscuous mode
[  116.155173][ T8892] veth1_vlan: entered promiscuous mode
[  116.182048][ T5676] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.210504][ T8892] veth0_macvtap: entered promiscuous mode
[  116.219104][ T8892] veth1_macvtap: entered promiscuous mode
[  116.231526][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.239874][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.243596][ T8892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.247780][ T8892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.251007][ T8892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.254162][ T8892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.442012][ T5676] bridge_slave_1: left allmulticast mode
[  116.444197][ T5676] bridge_slave_1: left promiscuous mode
[  116.452287][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.458310][ T5676] bridge_slave_0: left allmulticast mode
[  116.460732][ T5676] bridge_slave_0: left promiscuous mode
[  116.463223][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.738671][ T5829] Bluetooth: hci1: command tx timeout
[  116.743474][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.751352][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.756310][ T5676] bond0 (unregistering): Released all slaves
[  116.765162][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.768680][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.821807][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.828034][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.900969][ T5829] Bluetooth: hci2: command tx timeout
[  117.293116][ T8955] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  117.324185][ T8955] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  117.353753][ T8955] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  117.375928][ T8955] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  117.420769][ T5676] hsr_slave_0: left promiscuous mode
[  117.423674][ T5676] hsr_slave_1: left promiscuous mode
[  117.426104][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.435503][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.438951][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.441273][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.452778][ T5676] veth1_macvtap: left promiscuous mode
[  117.454930][ T5676] veth0_macvtap: left promiscuous mode
[  117.457831][ T5676] veth1_vlan: left promiscuous mode
[  117.459704][ T5676] veth0_vlan: left promiscuous mode
[  117.736800][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  117.773956][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  117.897789][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.904781][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.911266][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.923239][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.925918][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.092019][ T9052] lo speed is unknown, defaulting to 1000
[  118.161518][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.183540][ T8955] 8021q: adding VLAN 0 to HW filter on device team0
[  118.199170][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.201518][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.223487][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.225876][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.263270][ T8955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  118.275757][ T8955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  118.430086][ T9065] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  118.494894][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.515932][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.553502][ T9052] chnl_net:caif_netlink_parms(): no params data found
[  118.566230][ T9077] __nla_validate_parse: 18 callbacks suppressed
[  118.567254][ T9077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1022'.
[  118.572319][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'.
[  118.575942][ T8955] veth0_vlan: entered promiscuous mode
[  118.579798][ T8955] veth1_vlan: entered promiscuous mode
[  118.579916][ T9077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1022'.
[  118.590037][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'.
[  118.593028][ T9077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1022'.
[  118.682004][ T8955] veth0_macvtap: entered promiscuous mode
[  118.688261][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.692110][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.694569][ T9052] bridge_slave_0: entered allmulticast mode
[  118.729816][ T9052] bridge_slave_0: entered promiscuous mode
[  118.734472][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.738538][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.741678][ T9052] bridge_slave_1: entered allmulticast mode
[  118.745751][ T9052] bridge_slave_1: entered promiscuous mode
[  118.754619][ T8955] veth1_macvtap: entered promiscuous mode
[  118.774030][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.781800][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.790996][ T8955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.794533][ T8955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.798533][ T8955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.802282][ T8955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.861216][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.864505][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.910179][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.912761][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.082825][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.093116][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.147657][ T9052] team0: Port device team_slave_0 added
[  119.159960][ T9052] team0: Port device team_slave_1 added
[  119.197799][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.200749][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.213080][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.220431][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.223296][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.234899][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.282356][ T9052] hsr_slave_0: entered promiscuous mode
[  119.285568][ T9052] hsr_slave_1: entered promiscuous mode
[  119.288975][ T9052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.292053][ T9052] Cannot create hsr debugfs directory
[  119.509400][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.578837][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.660292][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.812940][ T5676] bridge_slave_1: left allmulticast mode
[  119.815211][ T5676] bridge_slave_1: left promiscuous mode
[  119.818476][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.823973][ T5676] bridge_slave_0: left allmulticast mode
[  119.826152][ T5676] bridge_slave_0: left promiscuous mode
[  119.832214][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.027784][ T5829] Bluetooth: hci1: command tx timeout
[  120.061348][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.070125][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.075474][ T5676] bond0 (unregistering): Released all slaves
[  120.574954][ T5676] hsr_slave_0: left promiscuous mode
[  120.585510][ T5676] hsr_slave_1: left promiscuous mode
[  120.594728][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.597810][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.609011][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.611413][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.633571][ T5676] veth1_macvtap: left promiscuous mode
[  120.635434][ T5676] veth0_macvtap: left promiscuous mode
[  120.648278][ T5676] veth1_vlan: left promiscuous mode
[  120.650450][ T5676] veth0_vlan: left promiscuous mode
[  120.994483][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  120.995887][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.010589][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.014254][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.019059][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.025140][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.028754][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  121.364601][ T9052] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  121.383276][ T9052] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  121.391646][ T9052] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  121.402337][ T9104] lo speed is unknown, defaulting to 1000
[  121.402884][ T9052] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  121.543743][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.566342][ T9052] 8021q: adding VLAN 0 to HW filter on device team0
[  121.575235][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.578509][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.592497][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.595508][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.723627][ T5891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.834973][ T9124] netlink: 'syz.2.1027': attribute type 10 has an invalid length.
[  121.846935][ T9124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1027'.
[  121.855347][ T9124] dummy0: entered promiscuous mode
[  121.860327][ T9124] bridge0: port 1(dummy0) entered blocking state
[  121.862776][ T9124] bridge0: port 1(dummy0) entered disabled state
[  121.864879][ T9124] dummy0: entered allmulticast mode
[  121.874321][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.891219][ T9104] chnl_net:caif_netlink_parms(): no params data found
[  122.061440][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.064511][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.071943][ T9104] bridge_slave_0: entered allmulticast mode
[  122.078352][ T9104] bridge_slave_0: entered promiscuous mode
[  122.082996][ T9127] netlink: 'syz.2.1028': attribute type 4 has an invalid length.
[  122.086215][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  122.097067][ T5829] Bluetooth: hci1: command tx timeout
[  122.099480][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.102498][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.105589][ T9104] bridge_slave_1: entered allmulticast mode
[  122.106729][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'.
[  122.110112][ T9104] bridge_slave_1: entered promiscuous mode
[  122.114987][ T9127] netlink: 'syz.2.1028': attribute type 18 has an invalid length.
[  122.150079][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.160033][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.163497][ T9052] veth0_vlan: entered promiscuous mode
[  122.200959][ T5891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.219728][ T9104] team0: Port device team_slave_0 added
[  122.222193][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1029'.
[  122.228032][ T9104] team0: Port device team_slave_1 added
[  122.245004][ T9052] veth1_vlan: entered promiscuous mode
[  122.270315][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.273185][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.284102][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.285594][ T9136] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1030'.
[  122.312750][ T5891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.329854][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.333054][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.343063][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.400467][ T5891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.438397][ T9104] hsr_slave_0: entered promiscuous mode
[  122.440934][ T9104] hsr_slave_1: entered promiscuous mode
[  122.443263][ T9104] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.446366][ T9104] Cannot create hsr debugfs directory
[  122.499209][ T9052] veth0_macvtap: entered promiscuous mode
[  122.509764][ T9052] veth1_macvtap: entered promiscuous mode
[  122.592819][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.632835][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.692095][ T9052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.695312][ T9052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.709553][ T9052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.713086][ T9052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.730572][ T5891] bridge_slave_1: left allmulticast mode
[  122.732890][ T5891] bridge_slave_1: left promiscuous mode
[  122.734783][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.742800][ T5891] bridge_slave_0: left allmulticast mode
[  122.745031][ T5891] bridge_slave_0: left promiscuous mode
[  122.747545][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.025494][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.031479][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.036675][ T5891] bond0 (unregistering): Released all slaves
[  123.056893][ T5829] Bluetooth: hci2: command tx timeout
[  123.276103][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.283755][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.353058][ T9174] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  123.486843][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.490031][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.568198][ T5891] hsr_slave_0: left promiscuous mode
[  123.573477][ T5891] hsr_slave_1: left promiscuous mode
[  123.586004][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.588889][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.591909][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.594537][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.633554][ T5891] veth1_macvtap: left promiscuous mode
[  123.635909][ T5891] veth0_macvtap: left promiscuous mode
[  123.643851][ T5891] veth1_vlan: left promiscuous mode
[  123.646079][ T5891] veth0_vlan: left promiscuous mode
[  124.023206][ T5891] team0 (unregistering): Port device team_slave_1 removed
[  124.054736][ T5891] team0 (unregistering): Port device team_slave_0 removed
[  124.465318][ T9188] __nla_validate_parse: 11 callbacks suppressed
[  124.465336][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'.
[  124.521908][ T9104] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  124.550667][ T9104] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  124.561749][ T9104] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  124.575776][ T9104] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  124.590459][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1044'.
[  124.594902][ T9191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1044'.
[  124.598643][ T9191] tipc: Invalid UDP bearer configuration
[  124.598690][ T9191] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  124.752174][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.801340][ T9104] 8021q: adding VLAN 0 to HW filter on device team0
[  124.839499][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.864424][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.867360][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.900293][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.902778][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.059018][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.083882][ T9104] veth0_vlan: entered promiscuous mode
[  125.092115][ T9104] veth1_vlan: entered promiscuous mode
[  125.112052][ T9104] veth0_macvtap: entered promiscuous mode
[  125.118805][ T9104] veth1_macvtap: entered promiscuous mode
[  125.129384][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.136796][ T5829] Bluetooth: hci2: command tx timeout
[  125.137687][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.145138][ T9104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.152167][ T9104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.155788][ T9104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.160578][ T9104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.209591][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.212374][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.235245][ T1908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.238539][ T1908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.410795][ T9221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1046'.
[  125.414510][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'.
[  125.436787][ T9221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1046'.
[  125.456978][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'.
[  125.461292][ T9221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1046'.
[  125.504815][ T9223] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1047'.
[  125.555261][ T9227] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  125.630935][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.635585][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.641011][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.649148][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.653106][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  125.680347][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.743161][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.762073][ T9235] netlink: 'syz.2.1051': attribute type 3 has an invalid length.
[  125.762120][ T9230] lo speed is unknown, defaulting to 1000
[  125.818853][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.981263][   T12] bridge_slave_1: left allmulticast mode
[  125.984400][   T12] bridge_slave_1: left promiscuous mode
[  125.988580][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.998109][   T12] bridge_slave_0: left allmulticast mode
[  126.000515][   T12] bridge_slave_0: left promiscuous mode
[  126.002938][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.305038][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.314041][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.320186][   T12] bond0 (unregistering): Released all slaves
[  126.648907][ T9230] chnl_net:caif_netlink_parms(): no params data found
[  126.862566][ T9255] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1054'.
[  126.879973][   T12] hsr_slave_0: left promiscuous mode
[  126.882614][   T12] hsr_slave_1: left promiscuous mode
[  126.884919][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.898461][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.901432][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.904189][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.914451][   T12] veth1_macvtap: left promiscuous mode
[  126.916312][   T12] veth0_macvtap: left promiscuous mode
[  126.921468][   T12] veth1_vlan: left promiscuous mode
[  126.923248][   T12] veth0_vlan: left promiscuous mode
[  127.344632][   T12] team0 (unregistering): Port device team_slave_1 removed
[  127.378342][   T12] team0 (unregistering): Port device team_slave_0 removed
[  127.645561][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.649372][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.651946][ T9230] bridge_slave_0: entered allmulticast mode
[  127.655457][ T9230] bridge_slave_0: entered promiscuous mode
[  127.668628][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.671131][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.673670][ T9230] bridge_slave_1: entered allmulticast mode
[  127.680731][ T9230] bridge_slave_1: entered promiscuous mode
[  127.696755][ T5829] Bluetooth: hci1: command tx timeout
[  127.714161][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.718731][ T9257] lo speed is unknown, defaulting to 1000
[  127.727543][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.773452][ T9230] team0: Port device team_slave_0 added
[  127.799894][ T9230] team0: Port device team_slave_1 added
[  127.856121][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.862194][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.905655][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.920111][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.922983][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.947918][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.063931][ T9230] hsr_slave_0: entered promiscuous mode
[  128.068860][ T9230] hsr_slave_1: entered promiscuous mode
[  128.071609][ T9230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.074802][ T9230] Cannot create hsr debugfs directory
[  128.126918][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.131282][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.135276][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.143124][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.148300][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.272197][ T9266] lo speed is unknown, defaulting to 1000
[  128.368968][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.812520][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.889892][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.989393][ T9278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  128.995454][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.119810][ T9230] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  129.153105][ T9230] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  129.169863][ T9266] chnl_net:caif_netlink_parms(): no params data found
[  129.193303][ T9230] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  129.211080][ T9230] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  129.390239][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.403234][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.405640][ T9266] bridge_slave_0: entered allmulticast mode
[  129.410397][ T9266] bridge_slave_0: entered promiscuous mode
[  129.421200][   T12] bridge_slave_1: left allmulticast mode
[  129.423232][   T12] bridge_slave_1: left promiscuous mode
[  129.428250][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.441349][ T9317] netlink: 'syz.2.1061': attribute type 12 has an invalid length.
[  129.450957][   T12] bridge_slave_0: left allmulticast mode
[  129.453330][   T12] bridge_slave_0: left promiscuous mode
[  129.456987][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.723382][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.729478][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.733094][   T12] bond0 (unregistering): Released all slaves
[  129.739335][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.741634][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.743942][ T9266] bridge_slave_1: entered allmulticast mode
[  129.748459][ T9266] bridge_slave_1: entered promiscuous mode
[  129.776688][ T5218] Bluetooth: hci1: command tx timeout
[  129.812831][ T9266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.823349][ T9266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.841903][ T9335] __nla_validate_parse: 8 callbacks suppressed
[  129.841915][ T9335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1062'.
[  129.850619][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'.
[  129.853536][ T9335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1062'.
[  129.862806][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'.
[  129.865926][ T9335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1062'.
[  129.920909][ T9266] team0: Port device team_slave_0 added
[  129.924153][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'.
[  129.927955][ T9266] team0: Port device team_slave_1 added
[  129.957988][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.960706][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.970598][ T9266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.979740][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.982977][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.991231][ T9266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.079081][ T9266] hsr_slave_0: entered promiscuous mode
[  130.081520][ T9266] hsr_slave_1: entered promiscuous mode
[  130.083941][ T9266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.091528][ T9266] Cannot create hsr debugfs directory
[  130.111884][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.176873][ T5218] Bluetooth: hci2: command tx timeout
[  130.255135][   T12] hsr_slave_0: left promiscuous mode
[  130.272458][   T12] hsr_slave_1: left promiscuous mode
[  130.274910][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.279420][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.282391][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.284890][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.293941][   T12] veth1_macvtap: left promiscuous mode
[  130.295798][   T12] veth0_macvtap: left promiscuous mode
[  130.298071][   T12] veth1_vlan: left promiscuous mode
[  130.299828][   T12] veth0_vlan: left promiscuous mode
[  130.554292][   T12] team0 (unregistering): Port device team_slave_1 removed
[  130.579166][   T12] team0 (unregistering): Port device team_slave_0 removed
[  130.878945][ T9230] 8021q: adding VLAN 0 to HW filter on device team0
[  130.942715][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.945797][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.978313][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.981393][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.274925][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.303197][ T9230] veth0_vlan: entered promiscuous mode
[  131.311135][ T9230] veth1_vlan: entered promiscuous mode
[  131.372943][ T9230] veth0_macvtap: entered promiscuous mode
[  131.391065][ T9230] veth1_macvtap: entered promiscuous mode
[  131.409955][ T9266] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  131.414293][ T9266] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  131.421142][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.424546][ T9266] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  131.435335][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.443367][ T9266] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  131.450376][ T9230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.453296][ T9230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.456129][ T9230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.462147][ T9230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.588260][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.591306][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.635354][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.642888][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.669450][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.700249][ T9266] 8021q: adding VLAN 0 to HW filter on device team0
[  131.729976][ T1908] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.732283][ T1908] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.735679][ T1908] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.738021][ T1908] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.909431][ T9266] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.932481][ T9266] veth0_vlan: entered promiscuous mode
[  131.940275][ T9266] veth1_vlan: entered promiscuous mode
[  131.958023][ T9266] veth0_macvtap: entered promiscuous mode
[  131.962473][ T9266] veth1_macvtap: entered promiscuous mode
[  131.973896][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.983428][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.990081][ T9266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.993417][ T9266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.997624][ T9266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.000780][ T9266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.057868][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.060696][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.082197][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.085459][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.180973][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.194229][ T9266] 
[  132.195334][ T9266] ======================================================
[  132.198296][ T9266] WARNING: possible circular locking dependency detected
[  132.201298][ T9266] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  132.205465][ T9266] ------------------------------------------------------
[  132.208431][ T9266] syz-executor/9266 is trying to acquire lock:
[  132.211021][ T9266] ffff88811038d040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  132.215816][ T9266] 
[  132.215816][ T9266] but task is already holding lock:
[  132.218887][ T9266] ffff88811038d338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  132.222632][ T9266] 
[  132.222632][ T9266] which lock already depends on the new lock.
[  132.222632][ T9266] 
[  132.226824][ T9266] 
[  132.226824][ T9266] the existing dependency chain (in reverse order) is:
[  132.230485][ T9266] 
[  132.230485][ T9266] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  132.233639][ T9266]        lock_acquire+0x120/0x360
[  132.235754][ T9266]        __mutex_lock+0x182/0xe80
[  132.237890][ T9266]        l2cap_info_timeout+0x60/0xa0
[  132.240154][ T9266]        process_scheduled_works+0xae1/0x17b0
[  132.242693][ T9266]        worker_thread+0x8a0/0xda0
[  132.244894][ T9266]        kthread+0x711/0x8a0
[  132.246894][ T9266]        ret_from_fork+0x3fc/0x770
[  132.249119][ T9266]        ret_from_fork_asm+0x1a/0x30
[  132.251479][ T9266] 
[  132.251479][ T9266] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  132.255865][ T9266]        validate_chain+0xb9b/0x2140
[  132.256800][ T5218] Bluetooth: hci2: command tx timeout
[  132.258139][ T9266]        __lock_acquire+0xab9/0xd20
[  132.262469][ T9266]        lock_acquire+0x120/0x360
[  132.264786][ T9266]        __flush_work+0x6b8/0xbc0
[  132.266937][ T9266]        __cancel_work_sync+0xbe/0x110
[  132.269214][ T9266]        l2cap_conn_del+0x4f0/0x680
[  132.271552][ T9266]        hci_conn_hash_flush+0x10d/0x230
[  132.273876][ T9266]        hci_dev_close_sync+0xaef/0x1330
[  132.276229][ T9266]        hci_unregister_dev+0x21a/0x510
[  132.278547][ T9266]        vhci_release+0x80/0xd0
[  132.280542][ T9266]        __fput+0x44c/0xa70
[  132.282459][ T9266]        task_work_run+0x1d4/0x260
[  132.284661][ T9266]        do_exit+0x6b5/0x22e0
[  132.286651][ T9266]        do_group_exit+0x21c/0x2d0
[  132.288781][ T9266]        __x64_sys_exit_group+0x3f/0x40
[  132.291067][ T9266]        x64_sys_call+0x21ba/0x21c0
[  132.293234][ T9266]        do_syscall_64+0xfa/0x3b0
[  132.295346][ T9266]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.298016][ T9266] 
[  132.298016][ T9266] other info that might help us debug this:
[  132.298016][ T9266] 
[  132.302132][ T9266]  Possible unsafe locking scenario:
[  132.302132][ T9266] 
[  132.305212][ T9266]        CPU0                    CPU1
[  132.307406][ T9266]        ----                    ----
[  132.309623][ T9266]   lock(&conn->lock#2);
[  132.311360][ T9266]                                lock((work_completion)(&(&conn->info_timer)->work));
[  132.315284][ T9266]                                lock(&conn->lock#2);
[  132.318144][ T9266]   lock((work_completion)(&(&conn->info_timer)->work));
[  132.320977][ T9266] 
[  132.320977][ T9266]  *** DEADLOCK ***
[  132.320977][ T9266] 
[  132.324288][ T9266] 5 locks held by syz-executor/9266:
[  132.326551][ T9266]  #0: ffff888113a1cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  132.330645][ T9266]  #1: ffff888113a1c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  132.334712][ T9266]  #2: ffffffff8f684a48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  132.338831][ T9266]  #3: ffff88811038d338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  132.342632][ T9266]  #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  132.346338][ T9266] 
[  132.346338][ T9266] stack backtrace:
[  132.348797][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  132.348813][ T9266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.348820][ T9266] Call Trace:
[  132.348827][ T9266]  <TASK>
[  132.348834][ T9266]  dump_stack_lvl+0x189/0x250
[  132.348852][ T9266]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.348866][ T9266]  ? __pfx__printk+0x10/0x10
[  132.348882][ T9266]  ? print_lock_name+0xde/0x100
[  132.348897][ T9266]  print_circular_bug+0x2ee/0x310
[  132.348914][ T9266]  check_noncircular+0x134/0x160
[  132.348931][ T9266]  validate_chain+0xb9b/0x2140
[  132.348944][ T9266]  ? do_raw_spin_lock+0x121/0x290
[  132.348962][ T9266]  ? look_up_lock_class+0x74/0x170
[  132.348974][ T9266]  ? register_lock_class+0x51/0x320
[  132.348986][ T9266]  __lock_acquire+0xab9/0xd20
[  132.348999][ T9266]  ? __flush_work+0xd2/0xbc0
[  132.349014][ T9266]  lock_acquire+0x120/0x360
[  132.349025][ T9266]  ? __flush_work+0xd2/0xbc0
[  132.349040][ T9266]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.349057][ T9266]  ? __flush_work+0xd2/0xbc0
[  132.349070][ T9266]  __flush_work+0x6b8/0xbc0
[  132.349084][ T9266]  ? __flush_work+0xd2/0xbc0
[  132.349098][ T9266]  ? __flush_work+0xd2/0xbc0
[  132.349112][ T9266]  ? __pfx___flush_work+0x10/0x10
[  132.349126][ T9266]  ? __pfx_wq_barrier_func+0x10/0x10
[  132.349144][ T9266]  ? __pfx___cancel_work+0x10/0x10
[  132.349159][ T9266]  ? hci_conn_drop+0x14d/0x280
[  132.349178][ T9266]  __cancel_work_sync+0xbe/0x110
[  132.349193][ T9266]  l2cap_conn_del+0x4f0/0x680
[  132.349209][ T9266]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  132.349224][ T9266]  hci_conn_hash_flush+0x10d/0x230
[  132.349241][ T9266]  hci_dev_close_sync+0xaef/0x1330
[  132.349257][ T9266]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  132.349270][ T9266]  ? up_write+0x1c4/0x420
[  132.349287][ T9266]  hci_unregister_dev+0x21a/0x510
[  132.349300][ T9266]  vhci_release+0x80/0xd0
[  132.349314][ T9266]  ? __pfx_vhci_release+0x10/0x10
[  132.349324][ T9266]  __fput+0x44c/0xa70
[  132.349339][ T9266]  task_work_run+0x1d4/0x260
[  132.349357][ T9266]  ? __pfx_task_work_run+0x10/0x10
[  132.349373][ T9266]  ? kmem_cache_free+0x18f/0x400
[  132.349389][ T9266]  do_exit+0x6b5/0x22e0
[  132.349407][ T9266]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  132.349423][ T9266]  ? __pfx_do_exit+0x10/0x10
[  132.349441][ T9266]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.349456][ T9266]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.349466][ T9266]  do_group_exit+0x21c/0x2d0
[  132.349491][ T9266]  __x64_sys_exit_group+0x3f/0x40
[  132.349536][ T9266]  x64_sys_call+0x21ba/0x21c0
[  132.349552][ T9266]  do_syscall_64+0xfa/0x3b0
[  132.349565][ T9266]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.349575][ T9266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.349586][ T9266]  ? exc_page_fault+0x9f/0xf0
[  132.349602][ T9266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.349614][ T9266] RIP: 0033:0x7fb20db8e929
[  132.349625][ T9266] Code: Unable to access opcode bytes at 0x7fb20db8e8ff.
[  132.349630][ T9266] RSP: 002b:00007ffc9b405128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  132.349643][ T9266] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb20db8e929
[  132.349651][ T9266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  132.349658][ T9266] RBP: 00007fb20dbee8f0 R08: 00007ffc9b402ec7 R09: 0000000000000003
[  132.349665][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.349672][ T9266] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc9b4052e0
[  132.349684][ T9266]  </TASK>
[  132.580950][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.659292][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  133.117583][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.749997][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.014185][ T5676] bridge_slave_1: left allmulticast mode
[  134.016235][ T5676] bridge_slave_1: left promiscuous mode
[  134.020169][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.023678][ T5676] bridge_slave_0: left allmulticast mode
[  134.025527][ T5676] bridge_slave_0: left promiscuous mode
[  134.028140][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.104368][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.108792][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.112240][ T5676] bond0 (unregistering): Released all slaves
[  134.370537][ T5676] hsr_slave_0: left promiscuous mode
[  134.373229][ T5676] hsr_slave_1: left promiscuous mode
[  134.375804][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.387752][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.398745][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.401861][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.416312][ T5676] veth1_macvtap: left promiscuous mode
[  134.420000][ T5676] veth0_macvtap: left promiscuous mode
[  134.422171][ T5676] veth1_vlan: left promiscuous mode
[  134.424323][ T5676] veth0_vlan: left promiscuous mode
[  134.531917][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  134.553445][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  135.085644][ T5676] dummy0: left allmulticast mode
[  135.088023][ T5676] bridge0: port 1(dummy0) entered disabled state
[  135.159540][ T5676] bond2 (unregistering): (slave gretap1): Releasing active interface
[  135.194204][ T5676] team0: Port device geneve0 removed
[  135.311178][ T5676] bond1 (unregistering): Released all slaves
[  135.315583][ T5676] bond2 (unregistering): Released all slaves
[  136.788465][ T5676] : left promiscuous mode
[  136.838009][ T5676] tipc: Left network mode
[  136.846744][ T5676] IPVS: stopping master sync thread 8125 ...
[  137.148964][ T5676] hsr_slave_0: left promiscuous mode
[  137.152128][ T5676] hsr_slave_1: left promiscuous mode
[  137.154519][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.157870][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.168249][ T5676] pimreg (unregistering): left allmulticast mode
[  137.305286][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  137.324248][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  137.486152][ T1908] smc: removing ib device syz0
[  137.700547][ T5676] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
08:35:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc90006a3fbc8 RCX=1ffff92000d47f09 RDX=ffffffff90379f78
RSI=0000000000000002 RDI=ffffffff8be28f60 RBP=1ffff92000d47f0a RSP=ffffc90006a3f778
R8 =000000000000000b R9 =0000000000000000 R10=ffffc90006a3f898 R11=ffffffff81acf6a0
R12=ffffc90006a40000 R13=1ffff92000d47f0b R14=ffffc90006a3f848 R15=ffffc90006a38000
RIP=ffffffff8172a58f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055559140a500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9c566e8710 CR3=000000001eb00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002ccee30
R8 =ffff88801f3b8237 R9 =1ffff11003e77046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78f6 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555569a57500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f518003b440 CR3=000000001ebb0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
