last executing test programs:

45.462821836s ago: executing program 0 (id=53):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}], 0x40}}], 0x1, 0x24000041)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r7, 0x2f, 0x7f, 0xad, 0xd8a2, 0x22, @private2={0xfc, 0x2, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe45c2494e1dc35d3, 0x40, 0x4, 0x8}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x10, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7ff}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001282100020002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800)

36.481260253s ago: executing program 0 (id=53):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}], 0x40}}], 0x1, 0x24000041)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r7, 0x2f, 0x7f, 0xad, 0xd8a2, 0x22, @private2={0xfc, 0x2, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe45c2494e1dc35d3, 0x40, 0x4, 0x8}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x10, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7ff}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001282100020002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800)

28.999419062s ago: executing program 0 (id=53):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}], 0x40}}], 0x1, 0x24000041)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r7, 0x2f, 0x7f, 0xad, 0xd8a2, 0x22, @private2={0xfc, 0x2, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe45c2494e1dc35d3, 0x40, 0x4, 0x8}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x10, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7ff}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001282100020002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800)

21.73893521s ago: executing program 0 (id=53):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}], 0x40}}], 0x1, 0x24000041)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r7, 0x2f, 0x7f, 0xad, 0xd8a2, 0x22, @private2={0xfc, 0x2, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe45c2494e1dc35d3, 0x40, 0x4, 0x8}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x10, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7ff}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001282100020002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800)

14.302560461s ago: executing program 0 (id=53):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}], 0x40}}], 0x1, 0x24000041)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r7, 0x2f, 0x7f, 0xad, 0xd8a2, 0x22, @private2={0xfc, 0x2, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe45c2494e1dc35d3, 0x40, 0x4, 0x8}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x10, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7ff}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001282100020002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800)

6.339683274s ago: executing program 0 (id=53):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}], 0x40}}], 0x1, 0x24000041)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', r7, 0x2f, 0x7f, 0xad, 0xd8a2, 0x22, @private2={0xfc, 0x2, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe45c2494e1dc35d3, 0x40, 0x4, 0x8}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x10, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7ff}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001282100020002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="0800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800)

2.266851644s ago: executing program 1 (id=675):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
r0 = getpid()
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="70ab9752574efa81b9f101e22586456c30f88879799c5d828eab9ac09904ac90608cb0417b2218959397801692c03a0a78e3903d645174487a41a43aea81fc1f942ecba32c77bff7f6433e3dac86ad0e8d8c0194579f136a23f595b934ebd2221defa229b9138a698cc4cc46eb3d4e8a181033d7c7726873893074bbf0239e849c6a3d9d95c49ef1ca861a77e285ba25b6106a658a78a4aa2268d975dad24a0d374486c85b9e7678422c4c"], 0x3c}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
sendto$packet(r4, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000700)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a68fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309e1a0d2bbda17e5", 0x4f}], 0x1)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1}, 0xc)
r9 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_KEY(r9, 0x6a, 0x1, 0x0, 0x20)

1.639952038s ago: executing program 1 (id=681):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e1f7cc3a9fc8394a3f85c4c318", @ANYRES16=r7, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e310000000000000000000008000b00040000000800090002000000"], 0x40}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x400448c9, 0x0)
sendmmsg$inet(r8, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYRES8=r0], 0x28}}, 0x0)

1.360841528s ago: executing program 1 (id=683):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071109d00000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x80)

1.249946028s ago: executing program 1 (id=685):
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1, 0x3}, &(0x7f0000000040)=0xc)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x1, 0x4)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000100)={0x8, 'syz1\x00'})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140))
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2}}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0)={0xb7, 0x2, 0x3, 0x3}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x200448cc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f0000004440)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/246, 0xf6}], 0x3, &(0x7f00000006c0)=""/200, 0xc8}, 0xf52}, {{&(0x7f00000007c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/18, 0x12}, {&(0x7f0000000880)=""/31, 0x1f}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/157, 0x9d}, {&(0x7f0000001980)=""/93, 0x5d}, {&(0x7f0000001a00)=""/177, 0xb1}, {&(0x7f0000001ac0)}], 0x7, &(0x7f0000001b80)=""/13, 0xd}, 0x9}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c40)=""/49, 0x31}, {&(0x7f0000001c80)=""/191, 0xbf}, {&(0x7f0000001d40)=""/78, 0x4e}], 0x3}, 0x5}, {{&(0x7f0000001e00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001e80)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/139, 0x8b}, {&(0x7f0000003f80)=""/174, 0xae}, {&(0x7f0000004040)}, {&(0x7f0000004080)=""/222, 0xde}, {&(0x7f0000004180)=""/127, 0x7f}, {&(0x7f0000004200)=""/223, 0xdf}, {&(0x7f0000004300)=""/157, 0x9d}], 0x8}, 0x3}], 0x5, 0x40000000, &(0x7f0000004580)={0x0, 0x989680})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004600), r4)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000005780)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005740)={&(0x7f0000004640)={0x10e0, r7, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x12}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xac, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa3, 0x1, "4ab5615a5a6cb91896b1f3573631bf2ba0e833442ccc949c70ecfad9dd03707ac30d352abf738c285f30c890cb41da9fb339c82ca61b9de76c221752623b665a2219da9dfd360d3cb50679e3ad7e9a005359fcec22ede6a5a0c40164ceea2a11970355db68b90732db52ffa5656aeaec9e3ee4bfdc53865b2f3e12db8950c8651b81ac51c60a052db469ff46e2d7054daae1024e4e5debaedd1e489bf6d255"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffb}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100c, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}]}]}, 0x10e0}, 0x1, 0x0, 0x0, 0x800}, 0x4004010)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000057c0)='rdma.current\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000005800), 0x4)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005880), r4)
sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000005980)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005940)={&(0x7f00000058c0)={0x6c, r9, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x2a}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40008)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000059c0)=0xb0f, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000005a00)={r8, r4})
r10 = socket$netlink(0x10, 0x3, 0xe)
r11 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000005a40)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x200, 0x7, 0x80000000, 0xfffffffffffffff9, 0x400, 0x1d}, {0xf, 0x9, 0x280000000, 0x9, 0xe2, 0x10000}], ['\x00']})
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000005b40)='illinois\x00', 0x9)
sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f0000005c80)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005bc0)={0x80, r7, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7a}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x55}, @NL80211_ATTR_PMKID={0x14, 0x55, "d4bb6c8bb6617b75e5ef8dc10bbe2ba3"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_PMKID={0x14, 0x55, "6504ce19299b323e07cdc029a79f6242"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "bc711d18b25a95d49ca3a865b6590190"}]}, 0x80}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.081303179s ago: executing program 2 (id=687):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000844c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

1.020251401s ago: executing program 2 (id=688):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="00000000000000ed000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

840.623603ms ago: executing program 2 (id=689):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES16=r1], 0x21c}}, 0x20040000)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r0, &(0x7f00000006c0)=r3, 0x12)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="000000ffffff7f000000000000000008000000000000000000000000000000000000000000000000feffffff00000000000000000000eeff000000000000000000000000000100000000000000000000000000002a2d77145834548100000000feffffff00000000000000000047ee48db00"/144]}, 0x108)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, 0x0, 0x0)
sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r12}, 0x18)
sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0xfffffffffffffe8f, &(0x7f0000000140)={&(0x7f0000001080)={0x8, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8884}, 0x4004010)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0x20006, 0x5600, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r13}, 0x0, 0x0}, 0x20)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r14, @ANYBLOB="0000000002000000b705000508000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000980)=[r13, r13, r13, r13, r13, 0xffffffffffffffff, r13, r13, 0x1]}, 0x94)
close(r8)

480.358832ms ago: executing program 2 (id=690):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b01000000000000000000000000001000000000", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r0], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x20000100, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7020000eb7963b9850000008600000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x39}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x17, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x17, 0x14, &(0x7f0000000240)=""/20, 0x41000, 0x61, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x1, &(0x7f0000000300), &(0x7f0000000500)=[{0x4, 0x5, 0xe, 0x7}], 0x10, 0x3}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'veth0_vlan\x00', 0xca02})
close(r4)
socket$netlink(0x10, 0x3, 0x0)
preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1, 0x0, 0x9)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'macvlan1\x00', @random="8120a0cef740"})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="040100003e00010000000800000000000500000008005500", @ANYRES32=0x0, @ANYBLOB="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"], 0x104}}, 0x4000894)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r6, r6, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4005, 0x5, 0x9, 0x2, 0x0, 'syz1\x00'})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448e7, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r9], 0x50}, 0x1, 0xba01}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000100000080ed5ef1886b55b0200000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x24000820}, 0x0)

369.694331ms ago: executing program 1 (id=691):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xec, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0x8, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673c46d3000000000000034001680300001802c000c801400010000000000d10a00000200000088a800001400010002000010b20200000100000a000000008ed8ff36bded31ebf6da4cffeb85e703edb674ac9ff53a99b7"], 0x68}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800)

268.911253ms ago: executing program 1 (id=692):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0xf0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x82}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x1, 0x5, 0x3}]}}, @TCA_BPF_ACT={0x8c, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x58, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b436361246e300"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x1c, r4, 0x20, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x13, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000089d4", @ANYRES16=r1, @ANYBLOB="010000400000ffdbdf25100000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xe, 0x0, 0xc}, 0x10)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r10, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000001fc0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0x928, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8e0, 0x3, 0x0, 0x1, [{0x560, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "37da93d72a69e88b1b2d3689c4c6e537ca90766d20c085bd95805e60ad1e15cd139c7370805b4bd6a059886a8d3249c11c29d849fa2653b26ac43b365f8874dbf8d9baa2c755dc84e3eef6cf0e49178074f0a64deaa3d1b79259f5e44f544bf47fd3cdca26e20e854dadebaaebc8ee3a10ab1413ce5a1d0ad2faffb15f9e52d44daa796a4508807e2e179663e57b8c53f214318d26065912d3e73cf6"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5a6d30d5996abea9}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "11a3c37be49837790eaabade9bc1cd15bf87e74e201b4f"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfd1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "4dda55e9a47bffbb4a84c49752e3b0be50f63267af7bc2fbacabbb5ef3559b17e306464a29c74cc23cc6abdb79c9b269ff7226890280b9ab91233e04914206e71a05359f7d2e0a0cc8c93c7af4aa37e91b5a194ce0b99f2c85a099c564d69e033ebf9c098b8971b601f7779c61e566c94d56ecb8923c7d75ca7347aa70be76e1e8"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "6e42ee0ba7fd9d528bcb0ef77ec2ed75260ffcef88d3894238332cef0c21524218d8318eaa55c364e42e637b37f077b1ef93f35905d15e1806b5f3f2fa57cda69bba1771ebf03c2eced55416e0b390fd6529d39c3679a60ad53cf0a7c3c64afea8ac04cfb15cc8bc1a8f92b1b13a19af781014cb5ed85745241656b3387537f6101f3409a8b2602458bcd5286ecf56c089e10a1b124cf0d2b3a32806204de75e"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "743755cf399c015c7f691eb9397543d0218d85077a671a51b87bee4c9823b706a93c95425ecafc9071c3bab0dce59a0799c9f1a95f3e7fa350c1c55ecdf0d6382989509f4593777d3820a92545dd931b6bc4be06078ca3b048be7ba92a3eba5bb34c47eaed6aee1929655bcc6e57563f8846ab536863c206f7e0a021d6dddb7887dbec3fbbef45288ac144963ce0b5b82ee388335d389beab8473f5ef275a69dda6289521e8410bd83daee0dbc75e7d9ed13e4c1adb156518dccf466"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "91bc75e65da97efcd9fb554f30476ad94375de7ec1405a3caba21bcf12af7b2d39e16bcc20c095d3d3c2e4d58a10a2b4bef4a4adc6c4d05f60311c2e7b292b561382f96112a45fa2fdf29f582321ade47892f6a3bdf80757713ca5bbda06ac12ae8a4003d48989a0a901a8d1da5b44d9753e775b629887bb7a79a982a11edce112b8856bdb0e04"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}]}, {0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5e020007}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x54d}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "dc83e22979c7dd6e271c222485360cbfc47884e8284c536504feaec93163f36d8ce17dd187abf4008a8146be4a88"}]}, @NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "fdcfcc1e03435c2445"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x12, 0x6, 0x1, 0x0, "9ebfc453d39f1cb3dd1fb5116fe2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x6c, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x32b6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2a}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10000}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "bdefe29e236f59252b5b81659df4f1f2023fd48012a467ff5b44"}, @NFTA_SET_ELEM_USERDATA={0xdb, 0x6, 0x1, 0x0, "6966a0e747ee40c3f37efbc7eb8b43b4445fe2fb14130480e4888690f4f6ce683864610759685180c17232b6dcebaa7d6f679f7bbb8809a9f830cc305744e7813a49f1e9f3313d7838768dc0faaa3696cd8f55ad5fdb3b9c544109200fc7d0934ee94d0e5a71e1021765a32dee70a86faff54f5fcfde0f55f845ed6642cc29a17ebb66d39a35d9f5b48fe09d28163682c229b5b1147c2bf00e1f011ae9a6da852922121906d07a87655b2cd3b39364d365397ab3f758423e9890c8c16235701f08fed98d4afcd332a9deaa69aa834cf63785a8c94682bf"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x970}, 0x1, 0x0, 0x0, 0x84}, 0x20000051)
shutdown(r10, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000280)={<r11=>0x0, 0x9}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f00000006c0)={r11}, &(0x7f0000000700)=0x8)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

266.103051ms ago: executing program 2 (id=693):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
socket$inet(0x2, 0x3, 0x2) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) (async, rerun: 64)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

0s ago: executing program 2 (id=694):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5452, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000003c000000090a010400ac7025290000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000018300000000c0a01010000000000000000070000000900010073797a3000000000040003800900020073797a3000000000140000001000010000000000000000000084000a"], 0xb4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x49)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000180)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}})
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x8}, @volatile={0x1, 0x0, 0x0, 0x9, 0x5}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @float={0x7, 0x0, 0x0, 0x10, 0xa}, @fwd={0xa}]}, {0x0, [0x61, 0x0, 0x0]}}, &(0x7f0000000940)=""/206, 0x69, 0xce, 0x1, 0x3ff, 0x10000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x21, &(0x7f0000000e80)=ANY=[@ANYBLOB="0f52f0ffffffffffb7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183200000500000000000000000000000960040002000000186300000600000000000000feffffff8520000001000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705f58431720b8dcecae43b0fc94617752a33fe57e1be1990a18020c7c9dd50cd5bfb000000bd51519b6cb42a8f3680aa24cb995d496cf5a351718af302051077ec81d208924b97d0cf1908868ab001f4f91210aa1def526be7858b53b0ec76c80201a205d8f892f9bc52f98cf0b37726e9d3ec66f6733f1b7bf6bb3657552fa1feb0574d746cfb980a7ae8a2f840edc31566dab3bea0e7b2daa92356cb1a5ccf80eb76c6fa45789a2d8c11"], &(0x7f00000002c0)='GPL\x00', 0x101, 0xfc, &(0x7f00000003c0)=""/252, 0x41000, 0x20, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)=[{0x0, 0x4, 0xd}, {0x0, 0x2, 0x6, 0x9}], 0x10, 0xf}, 0x94)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x3}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x2, 0x2040, 0x0)

kernel console output (not intermixed with test programs):

 active interface with an up link
[   99.044171][ T6736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.066817][ T6736] team0: Port device team_slave_0 added
[   99.071475][ T6736] team0: Port device team_slave_1 added
[   99.090436][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.092545][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.101127][ T6736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.105730][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.108137][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.116338][ T6736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.124396][ T5862] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled
[   99.128076][ T5862] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled
[   99.159134][ T6736] hsr_slave_0: entered promiscuous mode
[   99.162176][ T6736] hsr_slave_1: entered promiscuous mode
[   99.164992][ T6736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.167614][ T6736] Cannot create hsr debugfs directory
[   99.439529][ T6758] bridge0: port 3(batadv7) entered blocking state
[   99.441910][ T6758] bridge0: port 3(batadv7) entered disabled state
[   99.444068][ T6758] batadv7: entered allmulticast mode
[   99.446898][ T6758] batadv7: entered promiscuous mode
[   99.505482][ T6760] tipc: Started in network mode
[   99.507798][ T6760] tipc: Node identity , cluster identity 4711
[   99.510792][ T6760] tipc: Failed to obtain node identity
[   99.513415][ T6760] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.774620][ T6113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.851682][ T6113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.943311][   T12] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled
[   99.947316][   T12] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled
[   99.956748][ T6113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.002286][ T6777] bridge0: port 5(batadv3) entered blocking state
[  100.004492][ T6777] bridge0: port 5(batadv3) entered disabled state
[  100.006612][ T6777] batadv3: entered allmulticast mode
[  100.010122][ T6777] batadv3: entered promiscuous mode
[  100.090348][ T6779] tipc: Started in network mode
[  100.091900][ T6779] tipc: Node identity , cluster identity 4711
[  100.093723][ T6779] tipc: Failed to obtain node identity
[  100.095361][ T6779] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.162897][ T6113] bridge_slave_1: left allmulticast mode
[  100.165282][ T6113] bridge_slave_1: left promiscuous mode
[  100.170467][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.175880][ T6113] bridge_slave_0: left allmulticast mode
[  100.178811][ T6113] bridge_slave_0: left promiscuous mode
[  100.181152][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.488684][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.494377][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.499936][ T6113] bond0 (unregistering): Released all slaves
[  100.512200][ T5862] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  100.515731][ T5862] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  100.807630][ T6794] __nla_validate_parse: 2 callbacks suppressed
[  100.807647][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[  100.857355][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[  100.869517][ T5840] Bluetooth: hci0: command tx timeout
[  100.904806][ T6113] hsr_slave_0: left promiscuous mode
[  100.906939][ T6113] hsr_slave_1: left promiscuous mode
[  100.913398][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.916115][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.934271][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.942122][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.974434][ T6113] veth1_macvtap: left promiscuous mode
[  100.978523][ T6113] veth0_macvtap: left promiscuous mode
[  100.980316][ T6113] veth1_vlan: left promiscuous mode
[  100.981940][ T6113] veth0_vlan: left promiscuous mode
[  101.317110][ T6113] team0 (unregistering): Port device team_slave_1 removed
[  101.344974][ T6113] team0 (unregistering): Port device team_slave_0 removed
[  101.730089][ T6736] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  101.754933][ T6736] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  101.778739][ T6736] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  101.792947][ T6736] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  101.944815][ T6736] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.984052][ T6736] 8021q: adding VLAN 0 to HW filter on device team0
[  101.987960][ T6820] batadv_slave_1: entered promiscuous mode
[  101.995227][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.997558][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.011342][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.013562][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.194140][ T6817] batadv_slave_1: left promiscuous mode
[  102.222208][ T6736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.243150][ T6836] netlink: 'syz.1.216': attribute type 1 has an invalid length.
[  102.264860][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.286675][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.293010][ T6836] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  102.296968][ T6836] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  102.340539][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.343562][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.350406][ T6736] veth0_vlan: entered promiscuous mode
[  102.360111][ T6736] veth1_vlan: entered promiscuous mode
[  102.384616][ T6736] veth0_macvtap: entered promiscuous mode
[  102.389338][ T6736] veth1_macvtap: entered promiscuous mode
[  102.400552][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.413248][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.419867][ T6736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.422693][ T6736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.425322][ T6736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.428978][ T6736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.494021][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.497109][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.540384][ T4670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.542937][ T4670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.231847][ T6876] netlink: 'syz.2.221': attribute type 10 has an invalid length.
[  103.237705][ T6876] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.363140][ T6879] bond0: (slave wlan1): Releasing backup interface
[  103.369797][ T6879] batadv5: left allmulticast mode
[  103.371787][ T6879] batadv5: left promiscuous mode
[  103.373863][ T6879] bridge0: port 1(batadv5) entered disabled state
[  103.379052][ T6879] batadv6: left allmulticast mode
[  103.380602][ T6879] batadv6: left promiscuous mode
[  103.382593][ T6879] bridge0: port 2(batadv6) entered disabled state
[  103.390218][ T6879] batadv7: left allmulticast mode
[  103.392198][ T6879] batadv7: left promiscuous mode
[  103.394250][ T6879] bridge0: port 3(batadv7) entered disabled state
[  103.407136][ T6879] netlink: 'syz.2.222': attribute type 10 has an invalid length.
[  103.413787][ T6879] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.517160][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[  103.520788][ T6886] netlink: 52 bytes leftover after parsing attributes in process `syz.2.224'.
[  103.524177][ T6886] netlink: 19 bytes leftover after parsing attributes in process `syz.2.224'.
[  104.072276][ T6914] vlan2: entered promiscuous mode
[  104.073941][ T6914] vlan2: entered allmulticast mode
[  104.078913][ T6916] netlink: 'syz.1.229': attribute type 3 has an invalid length.
[  104.162698][ T6920] batadv_slave_1: entered promiscuous mode
[  104.164850][ T6918] batadv_slave_1: left promiscuous mode
[  104.195292][ T6922] netlink: 2 bytes leftover after parsing attributes in process `syz.1.231'.
[  104.199795][ T6926] netlink: 'syz.2.232': attribute type 1 has an invalid length.
[  104.202176][ T6926] netlink: 244 bytes leftover after parsing attributes in process `syz.2.232'.
[  104.262966][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.065719][ T6939] netlink: 'syz.1.236': attribute type 29 has an invalid length.
[  105.079637][ T6939] netlink: 'syz.1.236': attribute type 29 has an invalid length.
[  105.082382][ T6939] netlink: 'syz.1.236': attribute type 29 has an invalid length.
[  105.085492][ T6939] netlink: 'syz.1.236': attribute type 29 has an invalid length.
[  105.097564][ T6939] netlink: 'syz.1.236': attribute type 29 has an invalid length.
[  105.115304][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[  105.118834][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[  105.196638][ T6943] vlan2: entered promiscuous mode
[  105.201177][ T6943] vlan2: entered allmulticast mode
[  105.224428][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.229007][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.232204][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.237827][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.240881][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.243621][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'.
[  105.383469][ T6944] chnl_net:caif_netlink_parms(): no params data found
[  105.451110][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.453450][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.455684][ T6944] bridge_slave_0: entered allmulticast mode
[  105.461973][ T6944] bridge_slave_0: entered promiscuous mode
[  105.467695][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.469970][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.472328][ T6944] bridge_slave_1: entered allmulticast mode
[  105.475038][ T6944] bridge_slave_1: entered promiscuous mode
[  105.510945][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.515676][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.550797][ T6944] team0: Port device team_slave_0 added
[  105.554973][ T6944] team0: Port device team_slave_1 added
[  105.577156][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.579614][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.587251][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.592228][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.594482][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.602510][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.636079][ T6944] hsr_slave_0: entered promiscuous mode
[  105.638518][ T6944] hsr_slave_1: entered promiscuous mode
[  105.640739][ T6944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.643662][ T6944] Cannot create hsr debugfs directory
[  105.826245][ T6963] Bluetooth: MGMT ver 1.23
[  105.892521][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.973534][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.043841][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.191966][ T5660] bridge_slave_1: left allmulticast mode
[  106.194804][ T5660] bridge_slave_1: left promiscuous mode
[  106.197242][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.203883][ T5660] bridge_slave_0: left allmulticast mode
[  106.207247][ T5660] bridge_slave_0: left promiscuous mode
[  106.210080][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.528599][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.532689][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.536313][ T5660] bond0 (unregistering): Released all slaves
[  106.824481][ T5660] hsr_slave_0: left promiscuous mode
[  106.826780][ T5660] hsr_slave_1: left promiscuous mode
[  106.829473][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.831774][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.834720][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.837169][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.858113][ T5660] veth1_macvtap: left promiscuous mode
[  106.860270][ T5660] veth0_macvtap: left promiscuous mode
[  106.862660][ T5660] veth1_vlan: left promiscuous mode
[  106.864936][ T5660] veth0_vlan: left promiscuous mode
[  107.203392][ T5660] team0 (unregistering): Port device team_slave_1 removed
[  107.226615][ T5660] team0 (unregistering): Port device team_slave_0 removed
[  107.269609][ T5840] Bluetooth: hci0: command tx timeout
[  107.588886][ T6944] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  107.600706][ T6944] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  107.611414][ T6944] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  107.618353][ T6944] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  107.705409][ T7011] validate_nla: 22 callbacks suppressed
[  107.705439][ T7011] netlink: 'syz.2.251': attribute type 4 has an invalid length.
[  107.724002][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.750032][ T6944] 8021q: adding VLAN 0 to HW filter on device team0
[  107.777121][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.779430][ T4670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.795446][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.797889][ T4670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.966927][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.002956][ T6944] veth0_vlan: entered promiscuous mode
[  108.009227][ T6944] veth1_vlan: entered promiscuous mode
[  108.024342][ T6944] veth0_macvtap: entered promiscuous mode
[  108.028716][ T6944] veth1_macvtap: entered promiscuous mode
[  108.038839][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.045877][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.061301][ T6944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.064022][ T6944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.068110][ T6944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.071633][ T6944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.149272][  T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.158817][  T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.186384][  T721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.189275][  T721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.905569][ T7027] __nla_validate_parse: 2 callbacks suppressed
[  108.905585][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[  109.381782][ T7034] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  109.388934][ T7034] bridge_slave_0: left allmulticast mode
[  109.390994][ T7034] bridge_slave_0: left promiscuous mode
[  109.392979][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.400885][ T7034] bridge_slave_1: left allmulticast mode
[  109.402814][ T7034] bridge_slave_1: left promiscuous mode
[  109.405222][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.410450][ T7034] bond0: (slave bond_slave_0): Releasing backup interface
[  109.414280][ T7034] bond0: (slave bond_slave_1): Releasing backup interface
[  109.423045][ T7034] team0: Port device team_slave_0 removed
[  109.426978][ T7034] team0: Port device team_slave_1 removed
[  109.429685][ T7034] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.432584][ T7034] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.435607][ T7034] batadv1: left allmulticast mode
[  109.437439][ T7034] batadv1: left promiscuous mode
[  109.439296][ T7034] bridge0: port 3(batadv1) entered disabled state
[  109.443637][ T7034] batadv2: left allmulticast mode
[  109.445473][ T7034] batadv2: left promiscuous mode
[  109.447199][ T7034] bridge0: port 4(batadv2) entered disabled state
[  109.451305][ T7034] batadv3: left allmulticast mode
[  109.453008][ T7034] batadv3: left promiscuous mode
[  109.455163][ T7034] bridge0: port 5(batadv3) entered disabled state
[  109.499190][ T7038] netlink: 64 bytes leftover after parsing attributes in process `syz.1.257'.
[  109.542519][ T7040] netlink: 'syz.1.258': attribute type 3 has an invalid length.
[  109.702378][ T7042] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  109.718139][ T7042] bond0: (slave wlan1): Releasing backup interface
[  109.903122][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.776729][ T7059] netlink: 'syz.2.263': attribute type 10 has an invalid length.
[  110.781062][ T7059] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  110.916556][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.919814][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.922924][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.926247][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.930903][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.043602][ T7072] tipc: Started in network mode
[  111.045346][ T7072] tipc: Node identity , cluster identity 4711
[  111.051978][ T7072] tipc: Failed to obtain node identity
[  111.053781][ T7072] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.117782][ T7068] chnl_net:caif_netlink_parms(): no params data found
[  111.174123][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.176353][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.178959][ T7068] bridge_slave_0: entered allmulticast mode
[  111.181661][ T7068] bridge_slave_0: entered promiscuous mode
[  111.187581][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.190407][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.193327][ T7068] bridge_slave_1: entered allmulticast mode
[  111.199408][ T7068] bridge_slave_1: entered promiscuous mode
[  111.234694][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.249876][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.277510][ T7068] team0: Port device team_slave_0 added
[  111.281949][ T7068] team0: Port device team_slave_1 added
[  111.301895][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.304047][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.313195][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.320681][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.322778][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.330925][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.359727][ T7068] hsr_slave_0: entered promiscuous mode
[  111.362064][ T7068] hsr_slave_1: entered promiscuous mode
[  111.364119][ T7068] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.366468][ T7068] Cannot create hsr debugfs directory
[  111.485215][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.550035][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.556374][ T7082] bond0: (slave wlan1): Releasing backup interface
[  111.560708][ T7082] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[  111.564489][ T7082] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  111.603406][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.710268][ T5660] bridge_slave_1: left allmulticast mode
[  111.712827][ T5660] bridge_slave_1: left promiscuous mode
[  111.724995][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.731650][ T5660] bridge_slave_0: left allmulticast mode
[  111.734059][ T5660] bridge_slave_0: left promiscuous mode
[  111.736484][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.993832][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.003229][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.007638][ T5660] bond0 (unregistering): Released all slaves
[  112.366080][ T5660] hsr_slave_0: left promiscuous mode
[  112.374068][ T5660] hsr_slave_1: left promiscuous mode
[  112.378731][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.381398][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.399143][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.401948][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.413064][ T5660] veth1_macvtap: left promiscuous mode
[  112.418786][ T5660] veth0_macvtap: left promiscuous mode
[  112.420604][ T5660] veth1_vlan: left promiscuous mode
[  112.422945][ T5660] veth0_vlan: left promiscuous mode
[  112.715842][ T5660] team0 (unregistering): Port device team_slave_1 removed
[  112.742492][ T5660] team0 (unregistering): Port device team_slave_0 removed
[  113.018407][ T5835] Bluetooth: hci0: command tx timeout
[  113.098400][ T7107] tipc: Started in network mode
[  113.100050][ T7107] tipc: Node identity , cluster identity 4711
[  113.101977][ T7107] tipc: Failed to obtain node identity
[  113.103797][ T7107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.111205][ T7068] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  113.166616][ T7068] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  113.173655][ T7068] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  113.218904][ T7068] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  113.285387][ T7119] batadv_slave_1: entered promiscuous mode
[  113.341909][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.359846][ T7068] 8021q: adding VLAN 0 to HW filter on device team0
[  113.366150][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.368993][ T4670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.388579][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.391442][ T4670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.521066][ T7134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.277'.
[  113.588985][ T7116] batadv_slave_1: left promiscuous mode
[  113.696230][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.715557][ T7143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.278'.
[  113.733177][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'.
[  113.775208][ T7068] veth0_vlan: entered promiscuous mode
[  113.794571][ T7068] veth1_vlan: entered promiscuous mode
[  113.922288][ T7068] veth0_macvtap: entered promiscuous mode
[  113.998828][ T7068] veth1_macvtap: entered promiscuous mode
[  114.047182][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.058743][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.070255][ T7068] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.073822][ T7068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.077235][ T7068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.082083][ T7068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.194016][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.201283][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.220557][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.223343][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.033956][ T7160] netlink: 'syz.2.284': attribute type 1 has an invalid length.
[  115.036571][ T7160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.284'.
[  115.785930][ T7163] netlink: 'syz.2.285': attribute type 3 has an invalid length.
[  115.841587][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[  115.844584][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[  115.969343][ T7178] IPVS: Error connecting to the multicast addr
[  115.975825][ T7178] batadv_slave_1: entered promiscuous mode
[  115.982542][ T7177] batadv_slave_1: left promiscuous mode
[  116.028422][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[  116.031825][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[  116.042454][ T7182] tipc: Started in network mode
[  116.044457][ T7182] tipc: Node identity , cluster identity 4711
[  116.046939][ T7182] tipc: Failed to obtain node identity
[  116.049077][ T7182] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.155987][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.114228][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[  117.118286][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[  117.141826][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[  117.339959][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.467137][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.472310][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.476452][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.487566][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.493162][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  117.637023][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.771875][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.072854][ T5862] bridge_slave_1: left allmulticast mode
[  118.074763][ T5862] bridge_slave_1: left promiscuous mode
[  118.081877][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.092810][ T5862] bridge_slave_0: left allmulticast mode
[  118.094914][ T5862] bridge_slave_0: left promiscuous mode
[  118.097145][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.551284][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'.
[  118.664709][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'.
[  118.688092][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.692734][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.696563][ T5862] bond0 (unregistering): Released all slaves
[  118.737591][ T7231] bridge0: port 1(batadv8) entered blocking state
[  118.747730][ T7231] bridge0: port 1(batadv8) entered disabled state
[  118.750226][ T7231] batadv8: entered allmulticast mode
[  118.753504][ T7231] batadv8: entered promiscuous mode
[  118.760565][ T7201] chnl_net:caif_netlink_parms(): no params data found
[  118.971480][ T7236] openvswitch: netlink: Flow key attr not present in new flow.
[  119.007116][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.033315][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.037689][ T7201] bridge_slave_0: entered allmulticast mode
[  119.040816][ T7201] bridge_slave_0: entered promiscuous mode
[  119.127167][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.132413][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.135124][ T7201] bridge_slave_1: entered allmulticast mode
[  119.144726][ T7201] bridge_slave_1: entered promiscuous mode
[  119.194354][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.231702][ T6113] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled
[  119.235151][ T6113] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled
[  119.255915][ T5862] hsr_slave_0: left promiscuous mode
[  119.265776][ T5862] hsr_slave_1: left promiscuous mode
[  119.270708][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.272999][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.281476][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.284413][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.315798][ T5862] veth1_macvtap: left promiscuous mode
[  119.318831][ T5862] veth0_macvtap: left promiscuous mode
[  119.321156][ T5862] veth1_vlan: left promiscuous mode
[  119.324518][ T5862] veth0_vlan: left promiscuous mode
[  119.588003][ T5835] Bluetooth: hci0: command tx timeout
[  119.779830][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  119.810579][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  120.113898][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.131109][ T7269] __nla_validate_parse: 5 callbacks suppressed
[  120.131120][ T7269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.310'.
[  120.206797][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'.
[  120.212090][ T7279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.313'.
[  120.217602][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'.
[  120.222353][ T7279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.313'.
[  120.225855][ T7201] team0: Port device team_slave_0 added
[  120.234065][ T7201] team0: Port device team_slave_1 added
[  120.286766][ T7286] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[  120.290981][ T7286] netlink: 236 bytes leftover after parsing attributes in process `syz.1.314'.
[  120.296854][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.305332][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.315312][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.325884][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.329188][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.345622][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.421401][ T7288] netlink: 'syz.2.315': attribute type 5 has an invalid length.
[  120.423856][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'.
[  120.433275][ T7201] hsr_slave_0: entered promiscuous mode
[  120.435540][ T7201] hsr_slave_1: entered promiscuous mode
[  120.451416][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.453828][ T7201] Cannot create hsr debugfs directory
[  120.965321][ T7315] netlink: 'syz.2.318': attribute type 1 has an invalid length.
[  121.083211][ T7315] bond1: (slave bridge2): Enslaving as a backup interface with an up link
[  121.234273][ T7324] Bluetooth: MGMT ver 1.23
[  121.255307][ T7201] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  121.273712][ T7201] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  121.291637][ T7201] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  121.311049][ T7201] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  121.511387][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.549691][ T7201] 8021q: adding VLAN 0 to HW filter on device team0
[  121.562109][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.564366][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.583395][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.585696][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.669352][ T5835] Bluetooth: hci0: command tx timeout
[  121.842647][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.844705][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'.
[  121.851083][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'.
[  121.927000][ T7201] veth0_vlan: entered promiscuous mode
[  121.946296][ T7201] veth1_vlan: entered promiscuous mode
[  121.966402][ T7355] x_tables: duplicate underflow at hook 1
[  122.022442][ T7201] veth0_macvtap: entered promiscuous mode
[  122.032578][ T7201] veth1_macvtap: entered promiscuous mode
[  122.083658][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.104456][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.114254][ T7201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.116967][ T7201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.127348][ T7201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.130644][ T7201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.198102][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'.
[  122.311732][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.314133][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.358988][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.363609][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.374791][ T7377] IPVS: set_ctl: invalid protocol: 47 172.20.20.15:20004
[  122.919136][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.135935][ T7403] tipc: Started in network mode
[  123.138939][ T7403] tipc: Node identity ac14140f, cluster identity 4711
[  123.142032][ T7403] tipc: New replicast peer: 255.255.255.255
[  123.145665][ T7403] tipc: Enabled bearer <udp:syz2>, priority 10
[  123.612254][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.258610][ T5896] tipc: Node number set to 2886997007
[  124.790606][ T7431] netlink: 'syz.1.333': attribute type 3 has an invalid length.
[  124.955110][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.980252][ T7438] bridge0: port 1(batadv4) entered blocking state
[  124.983122][ T7438] bridge0: port 1(batadv4) entered disabled state
[  124.985950][ T7438] batadv4: entered allmulticast mode
[  124.993397][ T7438] batadv4: entered promiscuous mode
[  125.065651][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  125.072413][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  125.076278][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  125.085538][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  125.088779][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.128707][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.184182][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.264211][ T7460] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  125.419011][ T7467] __nla_validate_parse: 2 callbacks suppressed
[  125.419048][ T7467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.340'.
[  125.425900][ T7467] netlink: 19 bytes leftover after parsing attributes in process `syz.2.340'.
[  125.434934][ T7467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.340'.
[  125.437707][ T7467] netlink: 19 bytes leftover after parsing attributes in process `syz.2.340'.
[  125.441033][ T7467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.340'.
[  125.480478][ T6113] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  125.483975][ T6113] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  125.521893][   T12] bridge_slave_1: left allmulticast mode
[  125.523663][   T12] bridge_slave_1: left promiscuous mode
[  125.527181][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.536347][   T12] bridge_slave_0: left allmulticast mode
[  125.545766][   T12] bridge_slave_0: left promiscuous mode
[  125.556068][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.860723][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.864984][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.869256][   T12] bond0 (unregistering): Released all slaves
[  125.885588][ T7468] pim6reg: entered allmulticast mode
[  125.895469][ T7469] pim6reg: left allmulticast mode
[  125.923074][ T7479] bond0: (slave wlan1): Releasing backup interface
[  125.930591][ T7479] batadv8: left allmulticast mode
[  125.932333][ T7479] batadv8: left promiscuous mode
[  125.934123][ T7479] bridge0: port 1(batadv8) entered disabled state
[  125.943528][ T7479] bond1: (slave bridge2): Releasing backup interface
[  125.978604][ T7445] chnl_net:caif_netlink_parms(): no params data found
[  126.106242][ T7489] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[  126.167065][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.169797][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.172330][ T7445] bridge_slave_0: entered allmulticast mode
[  126.175372][ T7445] bridge_slave_0: entered promiscuous mode
[  126.186883][ T7489] bond2: entered promiscuous mode
[  126.198312][ T7489] bond2: entered allmulticast mode
[  126.200416][ T7489] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.203194][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.205634][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.210319][ T7445] bridge_slave_1: entered allmulticast mode
[  126.213714][ T7445] bridge_slave_1: entered promiscuous mode
[  126.343029][   T12] hsr_slave_0: left promiscuous mode
[  126.346182][   T12] hsr_slave_1: left promiscuous mode
[  126.350490][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.352829][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.355494][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.357904][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.370265][   T12] veth1_macvtap: left promiscuous mode
[  126.372206][   T12] veth0_macvtap: left promiscuous mode
[  126.374126][   T12] veth1_vlan: left promiscuous mode
[  126.375918][   T12] veth0_vlan: left promiscuous mode
[  126.722758][   T12] team0 (unregistering): Port device team_slave_1 removed
[  126.762097][   T12] team0 (unregistering): Port device team_slave_0 removed
[  127.056569][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.089775][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.155739][ T7445] team0: Port device team_slave_0 added
[  127.161652][ T7445] team0: Port device team_slave_1 added
[  127.177815][ T5835] Bluetooth: hci0: command tx timeout
[  127.221230][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.223704][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.243022][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.252594][ T7507] netlink: 'syz.2.345': attribute type 10 has an invalid length.
[  127.261975][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.264303][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.296675][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.379731][ T7516] batadv4: left allmulticast mode
[  127.381392][ T7516] batadv4: left promiscuous mode
[  127.383307][ T7516] bridge0: port 1(batadv4) entered disabled state
[  127.398145][ T7509] netlink: 'syz.1.346': attribute type 10 has an invalid length.
[  127.431395][ T7445] hsr_slave_0: entered promiscuous mode
[  127.433759][ T7445] hsr_slave_1: entered promiscuous mode
[  127.435844][ T7445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.444282][ T7445] Cannot create hsr debugfs directory
[  127.458879][ T7509] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  127.589786][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'.
[  127.639456][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'.
[  127.678585][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[  127.705849][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.350'.
[  127.760786][ T7537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.352'.
[  127.996856][ T7551] netlink: 'syz.1.354': attribute type 10 has an invalid length.
[  127.996893][ T7544] netlink: 'syz.1.354': attribute type 10 has an invalid length.
[  128.277027][ T7445] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  128.288073][ T7445] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  128.293383][ T7445] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  128.305551][ T7445] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  128.423119][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.433812][ T7445] 8021q: adding VLAN 0 to HW filter on device team0
[  128.469029][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.471230][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.485304][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.487554][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.656971][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.692203][ T7445] veth0_vlan: entered promiscuous mode
[  128.699543][ T7445] veth1_vlan: entered promiscuous mode
[  128.720248][ T7445] veth0_macvtap: entered promiscuous mode
[  128.724630][ T7445] veth1_macvtap: entered promiscuous mode
[  128.736239][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.748249][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.762416][ T7445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.766111][ T7445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.769069][ T7445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.771830][ T7445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.843530][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.849897][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.868263][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.870775][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.246665][ T7612] netlink: 'syz.1.360': attribute type 72 has an invalid length.
[  130.704340][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.892721][ T7689] sctp: [Deprecated]: syz.2.372 (pid 7689) Use of int in maxseg socket option.
[  131.892721][ T7689] Use struct sctp_assoc_value instead
[  132.033461][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.088722][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.092136][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.094977][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.098692][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.109125][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.109190][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.211977][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.386250][ T7702] chnl_net:caif_netlink_parms(): no params data found
[  132.422467][ T7721] netlink: 'syz.2.381': attribute type 4 has an invalid length.
[  132.425259][   T12] bridge_slave_1: left allmulticast mode
[  132.427196][   T12] bridge_slave_1: left promiscuous mode
[  132.432666][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.439245][   T12] bridge_slave_0: left allmulticast mode
[  132.441151][   T12] bridge_slave_0: left promiscuous mode
[  132.446872][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.521942][ T7726] xt_cgroup: path and classid specified
[  132.783977][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.785998][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.809593][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.814009][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.818238][   T12] bond0 (unregistering): Released all slaves
[  132.989693][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.993177][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.995784][ T7702] bridge_slave_0: entered allmulticast mode
[  133.003030][ T7702] bridge_slave_0: entered promiscuous mode
[  133.013995][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.016370][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.020036][ T7702] bridge_slave_1: entered allmulticast mode
[  133.022836][ T7702] bridge_slave_1: entered promiscuous mode
[  133.101673][ T7702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.175949][ T7702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.258247][   T12] hsr_slave_0: left promiscuous mode
[  133.260859][   T12] hsr_slave_1: left promiscuous mode
[  133.263025][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.265509][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.274348][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.276769][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.290664][   T12] veth1_macvtap: left promiscuous mode
[  133.292533][   T12] veth0_macvtap: left promiscuous mode
[  133.294526][   T12] veth1_vlan: left promiscuous mode
[  133.296411][   T12] veth0_vlan: left promiscuous mode
[  133.685110][   T12] team0 (unregistering): Port device team_slave_1 removed
[  133.722216][   T12] team0 (unregistering): Port device team_slave_0 removed
[  134.089935][ T7702] team0: Port device team_slave_0 added
[  134.132999][ T7702] team0: Port device team_slave_1 added
[  134.137810][ T5835] Bluetooth: hci0: command tx timeout
[  134.175178][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.180687][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.202962][ T7702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.218901][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.221086][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.228951][ T7758] Bluetooth: MGMT ver 1.23
[  134.230614][ T7702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.331801][ T7702] hsr_slave_0: entered promiscuous mode
[  134.334128][ T7702] hsr_slave_1: entered promiscuous mode
[  134.336857][ T7702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.346019][ T7702] Cannot create hsr debugfs directory
[  134.353104][ T7756] tipc: Started in network mode
[  134.354919][ T7756] tipc: Node identity 82c6080373e5, cluster identity 4711
[  134.361833][ T7756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.393975][ T7756] syzkaller0: entered promiscuous mode
[  134.395747][ T7756] syzkaller0: entered allmulticast mode
[  134.493678][ T7756] tipc: Resetting bearer <eth:syzkaller0>
[  134.543756][ T7755] tipc: Resetting bearer <eth:syzkaller0>
[  134.556563][ T7755] tipc: Disabling bearer <eth:syzkaller0>
[  134.661070][ T7772] netlink: 'syz.1.391': attribute type 1 has an invalid length.
[  134.742701][ T7779] __nla_validate_parse: 2 callbacks suppressed
[  134.742715][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[  134.971853][ T7793] netlink: 'syz.1.396': attribute type 10 has an invalid length.
[  135.002013][ T7792] netlink: 'syz.2.395': attribute type 3 has an invalid length.
[  135.209274][ T7702] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  135.220943][ T7702] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  135.226002][ T7702] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  135.235866][ T7702] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  135.321338][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.336555][ T7702] 8021q: adding VLAN 0 to HW filter on device team0
[  135.343985][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.346260][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.359567][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.361773][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.510481][ T7702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.554848][ T7702] veth0_vlan: entered promiscuous mode
[  135.561380][ T7702] veth1_vlan: entered promiscuous mode
[  135.586361][ T7702] veth0_macvtap: entered promiscuous mode
[  135.597474][ T7702] veth1_macvtap: entered promiscuous mode
[  135.616184][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.634628][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.651198][ T7702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.654129][ T7702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.660738][ T7702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.663622][ T7702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.752674][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.755124][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.794830][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.803070][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.067183][ T7837] netlink: 'syz.2.401': attribute type 1 has an invalid length.
[  136.590441][ T7855] netlink: 'syz.2.404': attribute type 5 has an invalid length.
[  137.624478][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.923430][ T7867] bond0: (slave wlan1): Releasing backup interface
[  138.932770][ T7868] netlink: 'syz.2.408': attribute type 10 has an invalid length.
[  139.078656][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  139.081844][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  139.084586][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  139.094034][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  139.096697][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  139.126160][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.128332][ T7874] netlink: 168 bytes leftover after parsing attributes in process `syz.2.410'.
[  139.185659][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.410'.
[  139.196104][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.198083][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'.
[  139.210324][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'.
[  139.279510][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.289324][ T7885] netlink: 'syz.1.413': attribute type 5 has an invalid length.
[  139.387967][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.414'.
[  139.390808][ T7890] netlink: 19 bytes leftover after parsing attributes in process `syz.1.414'.
[  139.400610][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.414'.
[  139.404410][ T7890] netlink: 19 bytes leftover after parsing attributes in process `syz.1.414'.
[  139.407446][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.414'.
[  139.431619][ T7871] chnl_net:caif_netlink_parms(): no params data found
[  139.493033][   T12] bridge_slave_1: left allmulticast mode
[  139.494825][   T12] bridge_slave_1: left promiscuous mode
[  139.496639][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.503169][   T12] bridge_slave_0: left allmulticast mode
[  139.505263][   T12] bridge_slave_0: left promiscuous mode
[  139.507084][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.704680][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.803103][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.811948][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.816970][   T12] bond0 (unregistering): Released all slaves
[  139.973427][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.975764][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.980242][ T7871] bridge_slave_0: entered allmulticast mode
[  139.982945][ T7871] bridge_slave_0: entered promiscuous mode
[  140.007940][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.010185][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.012607][ T7871] bridge_slave_1: entered allmulticast mode
[  140.015424][ T7871] bridge_slave_1: entered promiscuous mode
[  140.110255][   T12] hsr_slave_0: left promiscuous mode
[  140.117570][   T12] hsr_slave_1: left promiscuous mode
[  140.119633][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.122429][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.126856][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.131333][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.143914][   T12] veth1_macvtap: left promiscuous mode
[  140.146027][   T12] veth0_macvtap: left promiscuous mode
[  140.148497][   T12] veth1_vlan: left promiscuous mode
[  140.150251][   T12] veth0_vlan: left promiscuous mode
[  140.530482][   T12] team0 (unregistering): Port device team_slave_1 removed
[  140.552987][   T12] team0 (unregistering): Port device team_slave_0 removed
[  140.888376][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.896722][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.001683][ T7871] team0: Port device team_slave_0 added
[  141.013098][ T7871] team0: Port device team_slave_1 added
[  141.074989][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.077146][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.089181][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.130213][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.132903][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.157388][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.182545][ T5835] Bluetooth: hci0: command tx timeout
[  141.246252][ T7871] hsr_slave_0: entered promiscuous mode
[  141.249015][ T7871] hsr_slave_1: entered promiscuous mode
[  141.251680][ T7871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.254006][ T7871] Cannot create hsr debugfs directory
[  141.826653][ T7871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  141.832228][ T7871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  141.836494][ T7871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  141.841405][ T7871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  141.898117][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.923829][ T7871] 8021q: adding VLAN 0 to HW filter on device team0
[  141.932180][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.934445][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.945886][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.948139][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.106963][ T7871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.160162][ T7871] veth0_vlan: entered promiscuous mode
[  142.169508][ T7871] veth1_vlan: entered promiscuous mode
[  142.187023][ T7871] veth0_macvtap: entered promiscuous mode
[  142.208698][ T7871] veth1_macvtap: entered promiscuous mode
[  142.225260][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.264510][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.269671][ T7871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.272598][ T7871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.275940][ T7871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.279444][ T7871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.402989][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.406092][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.461353][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.467740][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.607033][ T7989] netlink: 'syz.2.427': attribute type 10 has an invalid length.
[  142.703825][ T7998] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.428'.
[  143.135529][ T8013] bond2: left promiscuous mode
[  143.140840][ T8013] bond2: left allmulticast mode
[  143.153980][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'.
[  143.162164][ T8013] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.165051][ T8013] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.167898][ T8013] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.170343][ T8013] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.299191][ T8015] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.344127][ T8015] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.381280][ T8015] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.436392][ T8015] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.895211][ T8015] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.904505][ T8015] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.915976][ T8015] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.926243][ T8015] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.067244][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.471063][ T8026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.514787][ T8026] syzkaller0: entered promiscuous mode
[  145.517114][ T8026] syzkaller0: entered allmulticast mode
[  145.520374][ T8026] tipc: Resetting bearer <eth:syzkaller0>
[  145.545189][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'.
[  145.571417][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.618519][ T8025] tipc: Resetting bearer <eth:syzkaller0>
[  145.667668][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  145.676443][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  145.681788][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  145.701817][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  145.712773][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.821801][ T8025] tipc: Disabling bearer <eth:syzkaller0>
[  146.853169][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.964052][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.119965][ T8032] chnl_net:caif_netlink_parms(): no params data found
[  147.172139][ T5660] bridge_slave_1: left allmulticast mode
[  147.174390][ T5660] bridge_slave_1: left promiscuous mode
[  147.176657][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.186897][ T5660] bridge_slave_0: left allmulticast mode
[  147.188911][ T5660] bridge_slave_0: left promiscuous mode
[  147.190879][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.482388][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.489933][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.495444][ T5660] bond0 (unregistering): Released all slaves
[  147.513924][ T8046] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.516695][ T8046] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.519937][ T8046] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.522467][ T8046] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.731492][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.733663][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.735803][ T8032] bridge_slave_0: entered allmulticast mode
[  147.741620][ T8032] bridge_slave_0: entered promiscuous mode
[  147.744909][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.747059][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.752790][ T8032] bridge_slave_1: entered allmulticast mode
[  147.755529][ T8032] bridge_slave_1: entered promiscuous mode
[  147.791446][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.799817][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.828655][ T5835] Bluetooth: hci0: command tx timeout
[  147.853201][ T5660] hsr_slave_0: left promiscuous mode
[  147.857794][ T5660] hsr_slave_1: left promiscuous mode
[  147.860283][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.862599][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.865662][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.876379][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.893340][ T5660] veth1_macvtap: left promiscuous mode
[  147.895322][ T5660] veth0_macvtap: left promiscuous mode
[  147.902623][ T5660] veth1_vlan: left promiscuous mode
[  147.904385][ T5660] veth0_vlan: left promiscuous mode
[  148.334733][ T5660] team0 (unregistering): Port device team_slave_1 removed
[  148.366834][ T5660] team0 (unregistering): Port device team_slave_0 removed
[  148.742756][ T8032] team0: Port device team_slave_0 added
[  148.765625][ T8032] team0: Port device team_slave_1 added
[  148.816817][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.827340][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.838686][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.843771][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.846125][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.867917][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.996964][ T8032] hsr_slave_0: entered promiscuous mode
[  149.014313][ T8032] hsr_slave_1: entered promiscuous mode
[  149.037687][ T8032] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.040680][ T8032] Cannot create hsr debugfs directory
[  149.229003][ T8068] block nbd0: server does not support multiple connections per device.
[  149.241554][ T8068] block nbd0: shutting down sockets
[  149.261179][ T8072] netlink: 'syz.1.441': attribute type 10 has an invalid length.
[  149.275341][ T8072] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  149.396232][ T8080] netlink: 52 bytes leftover after parsing attributes in process `syz.1.442'.
[  149.403884][ T8080] netlink: 19 bytes leftover after parsing attributes in process `syz.1.442'.
[  149.411137][ T8080] netlink: 52 bytes leftover after parsing attributes in process `syz.1.442'.
[  149.418612][ T8080] netlink: 19 bytes leftover after parsing attributes in process `syz.1.442'.
[  149.428223][ T8080] netlink: 52 bytes leftover after parsing attributes in process `syz.1.442'.
[  149.839486][ T8032] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  149.860652][ T8032] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  149.866081][ T8032] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.872587][ T8032] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.897702][ T5835] Bluetooth: hci0: command tx timeout
[  149.952445][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.967224][ T8032] 8021q: adding VLAN 0 to HW filter on device team0
[  149.975283][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.977609][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.986067][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.988391][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.124962][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.163061][ T8032] veth0_vlan: entered promiscuous mode
[  150.173224][ T8032] veth1_vlan: entered promiscuous mode
[  150.200816][ T8032] veth0_macvtap: entered promiscuous mode
[  150.205349][ T8032] veth1_macvtap: entered promiscuous mode
[  150.220606][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.227250][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.242097][ T8032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.244850][ T8032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.252340][ T8032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.254951][ T8032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.401259][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.403637][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.451417][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[  150.470700][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.478082][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.605110][ T8123] netlink: 'syz.1.447': attribute type 10 has an invalid length.
[  150.743460][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.757739][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.761821][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.771701][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.774557][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.783864][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.807422][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.810880][ T8128] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  150.984547][ T8135] netlink: 52 bytes leftover after parsing attributes in process `syz.2.450'.
[  150.987210][ T8135] netlink: 19 bytes leftover after parsing attributes in process `syz.2.450'.
[  150.990261][ T8135] netlink: 52 bytes leftover after parsing attributes in process `syz.2.450'.
[  150.993156][ T8135] netlink: 19 bytes leftover after parsing attributes in process `syz.2.450'.
[  151.066586][ T8137] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  151.143404][ T8141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.147140][ T8140] tipc: Resetting bearer <eth:syzkaller0>
[  151.157915][ T8140] tipc: Disabling bearer <eth:syzkaller0>
[  152.202036][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.752218][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.823516][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.914557][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.923026][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.926002][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.934481][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.938351][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.940798][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.178835][   T12] bridge_slave_1: left allmulticast mode
[  154.181362][   T12] bridge_slave_1: left promiscuous mode
[  154.183228][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.195777][   T12] bridge_slave_0: left allmulticast mode
[  154.197995][   T12] bridge_slave_0: left promiscuous mode
[  154.199842][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.555457][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.565849][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.571650][   T12] bond0 (unregistering): Released all slaves
[  154.585383][ T8181] 8021q: VLANs not supported on xfrm0
[  154.678891][ T8194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.686973][ T8182] tipc: Resetting bearer <eth:syzkaller0>
[  155.810188][ T5882] tipc: Node number set to 4045604867
[  155.912001][ T8182] tipc: Disabling bearer <eth:syzkaller0>
[  155.916262][ T8162] chnl_net:caif_netlink_parms(): no params data found
[  155.988236][ T5840] Bluetooth: hci0: command tx timeout
[  156.078252][ T8205] xt_TCPMSS: Only works on TCP SYN packets
[  156.268649][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.271096][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.273400][ T8162] bridge_slave_0: entered allmulticast mode
[  156.278956][ T8162] bridge_slave_0: entered promiscuous mode
[  156.303438][   T12] hsr_slave_0: left promiscuous mode
[  156.306447][   T12] hsr_slave_1: left promiscuous mode
[  156.318843][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.321594][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.333914][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.336185][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.353873][   T12] veth1_macvtap: left promiscuous mode
[  156.355786][   T12] veth0_macvtap: left promiscuous mode
[  156.358383][   T12] veth1_vlan: left promiscuous mode
[  156.360145][   T12] veth0_vlan: left promiscuous mode
[  156.740498][   T12] team0 (unregistering): Port device team_slave_1 removed
[  156.781787][   T12] team0 (unregistering): Port device team_slave_0 removed
[  157.167712][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.180226][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.189522][ T8162] bridge_slave_1: entered allmulticast mode
[  157.204616][ T8162] bridge_slave_1: entered promiscuous mode
[  157.322430][ T8162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.336594][ T8162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.395337][ T8162] team0: Port device team_slave_0 added
[  157.411493][ T8162] team0: Port device team_slave_1 added
[  157.494871][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.497158][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.514115][ T8162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.540998][ T8241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.544860][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.557965][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.566137][ T8162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.580763][ T8240] tipc: Resetting bearer <eth:syzkaller0>
[  157.596958][ T8240] tipc: Disabling bearer <eth:syzkaller0>
[  157.700725][ T8162] hsr_slave_0: entered promiscuous mode
[  157.707846][ T8162] hsr_slave_1: entered promiscuous mode
[  157.710001][ T8162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.712406][ T8162] Cannot create hsr debugfs directory
[  157.858549][ T8267] validate_nla: 23 callbacks suppressed
[  157.858563][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  157.971377][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.974278][ T8273] 8021q: adding VLAN 0 to HW filter on device team0
[  157.980151][ T8273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.058904][ T5840] Bluetooth: hci0: command tx timeout
[  158.071575][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.074183][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.119343][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.122105][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.125381][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.129748][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.132389][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.134907][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.141385][ T8267] netlink: 'syz.2.481': attribute type 29 has an invalid length.
[  158.351173][ T8162] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  158.361194][ T8162] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  158.366385][ T8162] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  158.379880][ T8162] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  158.406215][ T8288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.418736][ T8287] tipc: Resetting bearer <eth:syzkaller0>
[  158.435705][ T8287] tipc: Disabling bearer <eth:syzkaller0>
[  158.513244][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.525086][ T8162] 8021q: adding VLAN 0 to HW filter on device team0
[  158.536886][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.539176][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.549204][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.551599][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.000188][ T8319] Bluetooth: MGMT ver 1.23
[  159.005884][ T8162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.084585][ T8322] __nla_validate_parse: 10 callbacks suppressed
[  159.084604][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.488'.
[  159.120609][ T8162] veth0_vlan: entered promiscuous mode
[  159.126131][ T8162] veth1_vlan: entered promiscuous mode
[  159.156316][ T8162] veth0_macvtap: entered promiscuous mode
[  159.164616][ T8162] veth1_macvtap: entered promiscuous mode
[  159.178294][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.191157][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.225792][ T8162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.230174][ T8162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.233001][ T8162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.244452][ T8162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.462361][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.465215][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.520586][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.523933][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.912217][ T8358] batadv_slave_1: entered promiscuous mode
[  159.914754][ T8357] batadv_slave_1: left promiscuous mode
[  159.956254][ T8360] netlink: 88 bytes leftover after parsing attributes in process `syz.1.497'.
[  160.993779][ T8366] netdevsim0: renamed from veth1_to_bridge
[  160.999162][ T8366] netdevsim0: entered allmulticast mode
[  161.001134][ T8366] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  161.036701][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'.
[  161.217948][ T6113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.724508][ T6113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.790349][ T8385] netdevsim0: entered promiscuous mode
[  162.794278][ T8385] netdevsim0: left allmulticast mode
[  162.796390][ T8385] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  162.855548][ T6113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.926267][ T8394] validate_nla: 50 callbacks suppressed
[  162.926280][ T8394] netlink: 'syz.2.507': attribute type 9 has an invalid length.
[  162.935593][ T8394] netlink: 'syz.2.507': attribute type 6 has an invalid length.
[  162.943176][ T8398] netlink: 'syz.1.508': attribute type 1 has an invalid length.
[  162.953595][ T8394] netlink: 'syz.2.507': attribute type 7 has an invalid length.
[  162.955977][ T8394] netlink: 'syz.2.507': attribute type 8 has an invalid length.
[  162.966570][ T6113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.008130][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  163.013593][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  163.016916][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  163.020645][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  163.026424][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  163.190243][ T8419] Bluetooth: MGMT ver 1.23
[  163.243859][ T6113] bridge_slave_1: left allmulticast mode
[  163.246926][ T6113] bridge_slave_1: left promiscuous mode
[  163.259102][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.265031][ T6113] bridge_slave_0: left allmulticast mode
[  163.277405][ T6113] bridge_slave_0: left promiscuous mode
[  163.280003][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.718284][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.724767][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.732744][ T6113] bond0 (unregistering): Released all slaves
[  163.903263][ T8434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.516'.
[  164.046252][ T8400] chnl_net:caif_netlink_parms(): no params data found
[  164.096601][ T8445] xt_time: invalid argument - start or stop time greater than 23:59:59
[  164.154166][ T6113] hsr_slave_0: left promiscuous mode
[  164.156424][ T6113] hsr_slave_1: left promiscuous mode
[  164.159171][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.162157][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.165137][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.175122][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.192864][ T6113] veth1_macvtap: left promiscuous mode
[  164.194750][ T6113] veth0_macvtap: left promiscuous mode
[  164.196556][ T6113] veth1_vlan: left promiscuous mode
[  164.212176][ T6113] veth0_vlan: left promiscuous mode
[  164.262617][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  164.637006][ T6113] team0 (unregistering): Port device team_slave_1 removed
[  164.664204][ T6113] team0 (unregistering): Port device team_slave_0 removed
[  165.097542][ T5840] Bluetooth: hci0: command tx timeout
[  165.112750][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.118249][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.121301][ T8400] bridge_slave_0: entered allmulticast mode
[  165.125857][ T8400] bridge_slave_0: entered promiscuous mode
[  165.135971][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.160406][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.162896][ T8400] bridge_slave_1: entered allmulticast mode
[  165.165800][ T8400] bridge_slave_1: entered promiscuous mode
[  165.259806][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.265814][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.332069][ T8400] team0: Port device team_slave_0 added
[  165.361874][ T8400] team0: Port device team_slave_1 added
[  165.402376][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.404657][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.414136][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.431570][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.433771][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.457540][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.525336][ T8400] hsr_slave_0: entered promiscuous mode
[  165.528360][ T8400] hsr_slave_1: entered promiscuous mode
[  165.531131][ T8400] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.534071][ T8400] Cannot create hsr debugfs directory
[  165.651370][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'.
[  165.780184][ T8474] netdevsim0: left promiscuous mode
[  165.782262][ T8474] netdevsim0: entered allmulticast mode
[  165.987930][ T8486] netlink: 52 bytes leftover after parsing attributes in process `syz.2.523'.
[  166.003746][ T8486] netlink: 19 bytes leftover after parsing attributes in process `syz.2.523'.
[  166.199605][ T8400] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  166.205539][ T8400] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  166.212529][ T8400] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  166.221130][ T8400] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  166.396281][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.416014][ T8400] 8021q: adding VLAN 0 to HW filter on device team0
[  166.421852][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.424333][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.461980][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.464266][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.698156][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'.
[  166.849331][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.899279][ T8400] veth0_vlan: entered promiscuous mode
[  166.922531][ T8400] veth1_vlan: entered promiscuous mode
[  166.984816][ T8400] veth0_macvtap: entered promiscuous mode
[  167.004135][ T8400] veth1_macvtap: entered promiscuous mode
[  167.033332][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.046199][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.071530][ T8400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.074895][ T8400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.083276][ T8400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.086546][ T8400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.177823][ T5840] Bluetooth: hci0: command tx timeout
[  167.225242][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.238026][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.291051][ T8547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.296072][ T8546] tipc: Resetting bearer <eth:syzkaller0>
[  167.316606][ T8546] tipc: Disabling bearer <eth:syzkaller0>
[  167.331039][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.335233][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.090981][ T8553] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.553877][ T8572] bond0: (slave wlan1): Releasing backup interface
[  168.566081][ T8572] netlink: 'syz.2.540': attribute type 10 has an invalid length.
[  168.571609][ T8572] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  168.653411][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.244696][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.454235][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.487828][ T8586] netlink: 'syz.1.545': attribute type 4 has an invalid length.
[  170.535709][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.546805][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  170.550936][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  170.557951][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  170.569312][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  170.572647][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  170.595893][ T8593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.546'.
[  170.807870][ T5660] bridge_slave_1: left allmulticast mode
[  170.815383][ T5660] bridge_slave_1: left promiscuous mode
[  170.817672][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.825554][ T5660] bridge_slave_0: left allmulticast mode
[  170.832406][ T5660] bridge_slave_0: left promiscuous mode
[  170.834327][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.127798][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.132125][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.135657][ T5660] bond0 (unregistering): Released all slaves
[  171.427613][ T8587] chnl_net:caif_netlink_parms(): no params data found
[  171.473557][ T5660] hsr_slave_0: left promiscuous mode
[  171.475770][ T5660] hsr_slave_1: left promiscuous mode
[  171.484770][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.487113][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.495877][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.512525][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.532577][ T5660] veth1_macvtap: left promiscuous mode
[  171.534383][ T5660] veth0_macvtap: left promiscuous mode
[  171.536139][ T5660] veth1_vlan: left promiscuous mode
[  171.551035][ T5660] veth0_vlan: left promiscuous mode
[  171.934397][ T5660] team0 (unregistering): Port device team_slave_1 removed
[  171.959805][ T5660] team0 (unregistering): Port device team_slave_0 removed
[  172.442787][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.445767][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.449929][ T8587] bridge_slave_0: entered allmulticast mode
[  172.453784][ T8587] bridge_slave_0: entered promiscuous mode
[  172.488148][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.490505][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.492744][ T8587] bridge_slave_1: entered allmulticast mode
[  172.495526][ T8587] bridge_slave_1: entered promiscuous mode
[  172.552745][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.566543][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.625179][ T5835] Bluetooth: hci0: command tx timeout
[  172.691431][ T8587] team0: Port device team_slave_0 added
[  172.709578][ T8587] team0: Port device team_slave_1 added
[  172.757562][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.759687][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.767680][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.771073][ T8649] netlink: 312 bytes leftover after parsing attributes in process `syz.2.557'.
[  172.775081][ T8649] netlink: 312 bytes leftover after parsing attributes in process `syz.2.557'.
[  172.790778][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.792995][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.802228][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.901660][ T8587] hsr_slave_0: entered promiscuous mode
[  172.903903][ T8587] hsr_slave_1: entered promiscuous mode
[  172.905989][ T8587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.910281][ T8587] Cannot create hsr debugfs directory
[  172.935581][ T8660] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  172.987435][ T8658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.991230][ T8656] tipc: Resetting bearer <eth:syzkaller0>
[  173.001462][ T8656] tipc: Disabling bearer <eth:syzkaller0>
[  173.083900][ T8664] syzkaller1: entered promiscuous mode
[  173.085669][ T8664] syzkaller1: entered allmulticast mode
[  173.096586][ T8664] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  173.105405][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.560'.
[  173.115268][ T8664] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  173.546588][ T8587] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  173.556657][ T8587] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  173.565483][ T8587] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  173.575039][ T8587] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  173.659541][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.670808][ T8587] 8021q: adding VLAN 0 to HW filter on device team0
[  173.675663][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.678028][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.694530][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.696767][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.835763][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.871208][ T8587] veth0_vlan: entered promiscuous mode
[  173.876575][ T8587] veth1_vlan: entered promiscuous mode
[  173.902182][ T8587] veth0_macvtap: entered promiscuous mode
[  173.912894][ T8587] veth1_macvtap: entered promiscuous mode
[  173.929182][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.938721][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.943065][ T8587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.945968][ T8587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.949404][ T8587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.952126][ T8587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.015127][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.020248][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.052851][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.058438][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.289843][ T8725] netlink: 'syz.1.565': attribute type 15 has an invalid length.
[  174.334534][ T8731] netlink: 'syz.1.566': attribute type 10 has an invalid length.
[  175.160975][ T8747] Bluetooth: MGMT ver 1.23
[  175.166611][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'.
[  175.202473][ T8749] vlan2: entered promiscuous mode
[  175.204242][ T8749] vlan2: entered allmulticast mode
[  175.248274][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[  175.789915][ T8762] syzkaller0: entered promiscuous mode
[  175.791698][ T8762] syzkaller0: entered allmulticast mode
[  176.923194][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.481728][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.518398][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.580294][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.692854][ T8765] netlink: 'syz.2.579': attribute type 4 has an invalid length.
[  177.696027][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[  177.730126][ T8767] netdevsim0: entered promiscuous mode
[  177.731952][ T8767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  177.874775][ T5862] bridge_slave_1: left allmulticast mode
[  177.876902][ T5862] bridge_slave_1: left promiscuous mode
[  177.895151][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.939812][ T5862] bridge_slave_0: left allmulticast mode
[  177.941569][ T5862] bridge_slave_0: left promiscuous mode
[  177.943405][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.155934][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.161101][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.170667][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.173837][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.176571][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.330553][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.335402][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.340267][ T5862] bond0 (unregistering): Released all slaves
[  178.807951][ T5862] hsr_slave_0: left promiscuous mode
[  178.812458][ T5862] hsr_slave_1: left promiscuous mode
[  178.814678][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.816842][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.826904][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'.
[  178.827817][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.832194][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.844374][ T5862] veth1_macvtap: left promiscuous mode
[  178.846190][ T5862] veth0_macvtap: left promiscuous mode
[  178.848832][ T5862] veth1_vlan: left promiscuous mode
[  178.850509][ T5862] veth0_vlan: left promiscuous mode
[  178.977044][ T8830] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  179.198381][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  179.229014][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  179.530642][ T8793] chnl_net:caif_netlink_parms(): no params data found
[  179.670621][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.672894][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.675131][ T8793] bridge_slave_0: entered allmulticast mode
[  179.686053][ T8793] bridge_slave_0: entered promiscuous mode
[  179.699719][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.702087][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.712994][ T8793] bridge_slave_1: entered allmulticast mode
[  179.718544][ T8793] bridge_slave_1: entered promiscuous mode
[  179.747182][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[  179.779056][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.793179][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.869693][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'.
[  179.872643][ T8793] team0: Port device team_slave_0 added
[  179.881177][ T8793] team0: Port device team_slave_1 added
[  179.890968][ T8846] netlink: 15 bytes leftover after parsing attributes in process `syz.2.591'.
[  179.897795][ T8846] netlink: 7 bytes leftover after parsing attributes in process `syz.2.591'.
[  180.035599][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.038952][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.050096][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.061981][ T8859] netdevsim0: left allmulticast mode
[  180.074094][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.083543][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.101726][ T8857] netlink: 'syz.2.593': attribute type 10 has an invalid length.
[  180.105872][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.221044][ T5835] Bluetooth: hci0: command tx timeout
[  180.271743][ T8793] hsr_slave_0: entered promiscuous mode
[  180.274357][ T8793] hsr_slave_1: entered promiscuous mode
[  180.276670][ T8793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.287925][ T8793] Cannot create hsr debugfs directory
[  180.342734][ T8878] netlink: 52 bytes leftover after parsing attributes in process `syz.1.597'.
[  180.361466][ T8878] netlink: 19 bytes leftover after parsing attributes in process `syz.1.597'.
[  180.364614][ T8878] netlink: 52 bytes leftover after parsing attributes in process `syz.1.597'.
[  180.384651][ T8878] netlink: 19 bytes leftover after parsing attributes in process `syz.1.597'.
[  180.469483][ T8884] Bluetooth: MGMT ver 1.23
[  180.544614][ T8888] bridge0: port 1(batadv9) entered blocking state
[  180.547136][ T8888] bridge0: port 1(batadv9) entered disabled state
[  180.554070][ T8888] batadv9: entered allmulticast mode
[  180.557117][ T8888] batadv9: entered promiscuous mode
[  180.736688][ T8894] netlink: 'syz.2.602': attribute type 6 has an invalid length.
[  181.028307][ T8906] netdevsim0: entered allmulticast mode
[  181.030272][ T8906] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  181.058227][ T5862] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled
[  181.058606][ T8793] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  181.061648][ T5862] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled
[  181.074799][ T8793] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  181.105869][ T8793] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  181.115168][ T8915] bond0: (slave wlan1): Releasing backup interface
[  181.128472][ T8793] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  181.129377][ T8915] netlink: 'syz.1.605': attribute type 10 has an invalid length.
[  181.142963][ T8915] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  181.229515][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.253531][ T8793] 8021q: adding VLAN 0 to HW filter on device team0
[  181.281408][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.283712][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.290759][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.292978][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.371808][ T8939] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  181.496583][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.565315][ T8793] veth0_vlan: entered promiscuous mode
[  181.579892][ T8793] veth1_vlan: entered promiscuous mode
[  181.631634][ T8793] veth0_macvtap: entered promiscuous mode
[  181.637985][ T8793] veth1_macvtap: entered promiscuous mode
[  181.653032][ T8965] bond0: (slave wlan1): Releasing backup interface
[  181.674399][ T8965] netlink: 'syz.1.610': attribute type 10 has an invalid length.
[  181.682179][ T8965] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  181.694739][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.705217][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.715380][ T8793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.731513][ T8793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.735047][ T8793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.757484][ T8793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.935271][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.946572][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.992279][ T4670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.994728][ T4670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.826418][ T8991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.833573][ T8990] tipc: Resetting bearer <eth:syzkaller0>
[  182.855240][ T8990] tipc: Disabling bearer <eth:syzkaller0>
[  183.299009][ T9000] __nla_validate_parse: 2 callbacks suppressed
[  183.299026][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'.
[  183.333402][ T9000] bridge0: port 1(batadv5) entered blocking state
[  183.348204][ T9000] bridge0: port 1(batadv5) entered disabled state
[  183.350477][ T9000] batadv5: entered allmulticast mode
[  183.353238][ T9000] batadv5: entered promiscuous mode
[  183.440972][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.837732][ T5660] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  183.841542][ T5660] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  184.906669][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.961302][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.032349][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.171109][   T12] bridge_slave_1: left allmulticast mode
[  185.173402][   T12] bridge_slave_1: left promiscuous mode
[  185.175625][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.180264][   T12] bridge_slave_0: left allmulticast mode
[  185.182046][   T12] bridge_slave_0: left promiscuous mode
[  185.183921][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.492301][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'.
[  185.544629][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.553409][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.560307][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.563678][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.568766][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.618941][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'.
[  185.663334][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.676209][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.682905][   T12] bond0 (unregistering): Released all slaves
[  185.904235][ T9024] vlan2: entered promiscuous mode
[  185.906498][ T9024] vlan2: entered allmulticast mode
[  185.978117][ T9025] bond0: (slave wlan1): Releasing backup interface
[  186.001233][ T9025] batadv9: left allmulticast mode
[  186.005928][ T9025] batadv9: left promiscuous mode
[  186.013634][ T9025] bridge0: port 1(batadv9) entered disabled state
[  186.059688][ T5842] Bluetooth: hci2: command 0x0406 tx timeout
[  186.176055][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'.
[  186.308170][ T9031] bridge0: port 1(batadv10) entered blocking state
[  186.310309][ T9031] bridge0: port 1(batadv10) entered disabled state
[  186.312600][ T9031] batadv10: entered allmulticast mode
[  186.315236][ T9031] batadv10: entered promiscuous mode
[  186.419331][   T12] hsr_slave_0: left promiscuous mode
[  186.429035][   T12] hsr_slave_1: left promiscuous mode
[  186.431736][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.433994][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.451028][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.453324][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.472493][   T12] veth1_macvtap: left promiscuous mode
[  186.474465][   T12] veth0_macvtap: left promiscuous mode
[  186.478093][   T12] veth1_vlan: left promiscuous mode
[  186.480006][   T12] veth0_vlan: left promiscuous mode
[  186.810222][ T5660] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled
[  186.813886][ T5660] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled
[  187.323762][   T12] team0 (unregistering): Port device team_slave_1 removed
[  187.353250][   T12] team0 (unregistering): Port device team_slave_0 removed
[  187.385562][ T9019] Set syz1 is full, maxelem 65536 reached
[  187.668026][ T5835] Bluetooth: hci0: command tx timeout
[  187.676415][ T9037] netlink: 'syz.2.627': attribute type 3 has an invalid length.
[  187.692449][ T9018] chnl_net:caif_netlink_parms(): no params data found
[  187.824002][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'.
[  187.826740][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'.
[  187.839744][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.848872][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.851182][ T9018] bridge_slave_0: entered allmulticast mode
[  187.858591][ T9018] bridge_slave_0: entered promiscuous mode
[  187.861821][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.864136][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.866326][ T9018] bridge_slave_1: entered allmulticast mode
[  187.869009][ T9018] bridge_slave_1: entered promiscuous mode
[  187.982392][ T9018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.999599][ T9067] netlink: 'syz.2.633': attribute type 11 has an invalid length.
[  188.002348][ T9018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.066275][ T9070] netlink: 'syz.1.632': attribute type 16 has an invalid length.
[  188.073494][ T9070] netlink: 'syz.1.632': attribute type 17 has an invalid length.
[  188.096416][ T9018] team0: Port device team_slave_0 added
[  188.106866][ T9018] team0: Port device team_slave_1 added
[  188.148043][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'.
[  188.162496][ T9070] IPv6: NLM_F_REPLACE set, but no existing node found!
[  188.202478][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.205214][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.223059][ T9018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.236492][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.241186][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.253253][ T9018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.306301][ T9018] hsr_slave_0: entered promiscuous mode
[  188.316383][ T9018] hsr_slave_1: entered promiscuous mode
[  188.318600][ T9018] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.320973][ T9018] Cannot create hsr debugfs directory
[  188.876256][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'.
[  188.949911][ T9018] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  188.993680][ T9018] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  189.010785][ T9018] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  189.034095][ T9018] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  189.294429][ T9018] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.325701][ T9018] 8021q: adding VLAN 0 to HW filter on device team0
[  189.341840][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.344863][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.392699][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.395598][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.511958][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'.
[  189.527919][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'.
[  189.625852][ T9137] netlink: 'syz.2.644': attribute type 3 has an invalid length.
[  189.709071][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.645'.
[  189.712600][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.645'.
[  189.737738][ T5835] Bluetooth: hci0: command tx timeout
[  189.934776][ T9018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.005614][ T9157] netdevsim0: left promiscuous mode
[  190.100498][ T9018] veth0_vlan: entered promiscuous mode
[  190.150627][ T9018] veth1_vlan: entered promiscuous mode
[  190.191853][ T9018] veth0_macvtap: entered promiscuous mode
[  190.197181][ T9018] veth1_macvtap: entered promiscuous mode
[  190.210970][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.234608][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.243023][ T9018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.245627][ T9018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.256848][ T9018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.266018][ T9018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.431338][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.433706][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.463293][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.465720][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.514765][ T9178] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  190.575037][ T9178] batadv10: left allmulticast mode
[  190.577139][ T9178] batadv10: left promiscuous mode
[  190.580640][ T9178] bridge0: port 1(batadv10) entered disabled state
[  190.685222][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[  190.696887][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[  190.908650][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'.
[  191.356740][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.338365][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.185837][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.307109][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.442736][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'.
[  193.535394][   T12] bridge_slave_1: left allmulticast mode
[  193.540492][   T12] bridge_slave_1: left promiscuous mode
[  193.543056][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.553329][   T12] bridge_slave_0: left allmulticast mode
[  193.555196][   T12] bridge_slave_0: left promiscuous mode
[  193.557094][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.598760][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.602702][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.605662][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.609638][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.615360][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.935478][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.942838][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.948214][   T12] bond0 (unregistering): Released all slaves
[  194.122932][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[  194.252820][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.304516][   T12] hsr_slave_0: left promiscuous mode
[  194.311389][   T12] hsr_slave_1: left promiscuous mode
[  194.314070][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.316737][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.324808][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.331697][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.331876][ T9245] netlink: 100 bytes leftover after parsing attributes in process `syz.1.671'.
[  194.366019][   T12] veth1_macvtap: left promiscuous mode
[  194.370299][   T12] veth0_macvtap: left promiscuous mode
[  194.373342][   T12] veth1_vlan: left promiscuous mode
[  194.375544][   T12] veth0_vlan: left promiscuous mode
[  194.724018][   T12] team0 (unregistering): Port device team_slave_1 removed
[  194.753574][   T12] team0 (unregistering): Port device team_slave_0 removed
[  195.073455][ T9249] macvlan2: entered allmulticast mode
[  195.123585][ T9217] chnl_net:caif_netlink_parms(): no params data found
[  195.262055][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'.
[  195.319263][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.321686][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.339076][ T9217] bridge_slave_0: entered allmulticast mode
[  195.352301][ T9217] bridge_slave_0: entered promiscuous mode
[  195.360180][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.362418][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.364698][ T9217] bridge_slave_1: entered allmulticast mode
[  195.371765][ T9217] bridge_slave_1: entered promiscuous mode
[  195.441889][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.450300][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.490795][ T9217] team0: Port device team_slave_0 added
[  195.495483][ T9217] team0: Port device team_slave_1 added
[  195.546410][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.556156][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.567971][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.584654][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.586919][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.626109][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.657748][ T5842] Bluetooth: hci0: command tx timeout
[  195.699388][ T9217] hsr_slave_0: entered promiscuous mode
[  195.701775][ T9217] hsr_slave_1: entered promiscuous mode
[  195.704008][ T9217] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.715878][ T9217] Cannot create hsr debugfs directory
[  195.832041][ T9292] netlink: 'syz.2.680': attribute type 1 has an invalid length.
[  195.907692][ T9292] bond3: entered promiscuous mode
[  195.912109][ T9292] bond3: entered allmulticast mode
[  195.914130][ T9292] 8021q: adding VLAN 0 to HW filter on device bond3
[  195.992300][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[  196.028827][ T9297] netlink: 'syz.1.681': attribute type 4 has an invalid length.
[  196.050985][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'.
[  196.059961][ T9292] bridge6: entered promiscuous mode
[  196.061703][ T9292] bridge6: entered allmulticast mode
[  196.063815][ T9292] bond3: (slave bridge6): Enslaving as a backup interface with an up link
[  196.138716][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  196.248366][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  196.473352][ T9316] netlink: 'syz.2.686': attribute type 4 has an invalid length.
[  196.542648][ T9320] netlink: 52 bytes leftover after parsing attributes in process `syz.2.687'.
[  196.545407][ T9320] netlink: 19 bytes leftover after parsing attributes in process `syz.2.687'.
[  196.549754][ T9320] netlink: 52 bytes leftover after parsing attributes in process `syz.2.687'.
[  196.552480][ T9320] netlink: 19 bytes leftover after parsing attributes in process `syz.2.687'.
[  196.555188][ T9320] netlink: 52 bytes leftover after parsing attributes in process `syz.2.687'.
[  196.660507][ T9217] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  196.672738][ T9217] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  196.681567][ T9217] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  196.712045][ T9217] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  196.827940][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.850660][ T9217] 8021q: adding VLAN 0 to HW filter on device team0
[  196.856216][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.858512][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.880116][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.882390][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.115809][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.161480][ T9217] veth0_vlan: entered promiscuous mode
[  197.177186][ T9217] veth1_vlan: entered promiscuous mode
[  197.189275][ T9346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[  197.253254][ T9217] veth0_macvtap: entered promiscuous mode
[  197.272920][ T9217] veth1_macvtap: entered promiscuous mode
[  197.288684][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.296928][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.311606][ T9217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.324520][ T9217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.328276][ T9217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.335351][ T9217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.477520][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.480585][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.526226][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.529591][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.535688][ T9359] syzkaller1: entered promiscuous mode
[  197.542201][ T9359] syzkaller1: entered allmulticast mode
[  197.664171][ T9217] 
[  197.665062][ T9217] ======================================================
[  197.667181][ T9217] WARNING: possible circular locking dependency detected
[  197.669474][ T9217] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  197.673237][ T9217] ------------------------------------------------------
[  197.676407][ T9217] syz-executor/9217 is trying to acquire lock:
[  197.678728][ T9217] ffff88811ab55040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  197.682279][ T9217] 
[  197.682279][ T9217] but task is already holding lock:
[  197.684502][ T9217] ffff88811ab55338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  197.687211][ T9217] 
[  197.687211][ T9217] which lock already depends on the new lock.
[  197.687211][ T9217] 
[  197.690237][ T9217] 
[  197.690237][ T9217] the existing dependency chain (in reverse order) is:
[  197.692965][ T9217] 
[  197.692965][ T9217] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  197.695248][ T9217]        lock_acquire+0x120/0x360
[  197.696858][ T9217]        __mutex_lock+0x182/0xe80
[  197.698434][ T9217]        l2cap_info_timeout+0x60/0xa0
[  197.700278][ T9217]        process_scheduled_works+0xae1/0x17b0
[  197.702104][ T9217]        worker_thread+0x8a0/0xda0
[  197.703602][ T9217]        kthread+0x711/0x8a0
[  197.704985][ T9217]        ret_from_fork+0x3fc/0x770
[  197.706559][ T9217]        ret_from_fork_asm+0x1a/0x30
[  197.708269][ T9217] 
[  197.708269][ T9217] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  197.711353][ T9217]        validate_chain+0xb9b/0x2140
[  197.712972][ T9217]        __lock_acquire+0xab9/0xd20
[  197.714476][ T9217]        lock_acquire+0x120/0x360
[  197.715993][ T9217]        __flush_work+0x6b8/0xbc0
[  197.717614][ T9217]        __cancel_work_sync+0xbe/0x110
[  197.719230][ T9217]        l2cap_conn_del+0x4f0/0x680
[  197.720841][ T9217]        hci_conn_hash_flush+0x10d/0x230
[  197.722561][ T9217]        hci_dev_close_sync+0xaef/0x1330
[  197.724293][ T9217]        hci_unregister_dev+0x21a/0x510
[  197.725929][ T9217]        vhci_release+0x80/0xd0
[  197.727396][ T9217]        __fput+0x44c/0xa70
[  197.728809][ T9217]        task_work_run+0x1d4/0x260
[  197.730371][ T9217]        do_exit+0x6b5/0x22e0
[  197.731830][ T9217]        do_group_exit+0x21c/0x2d0
[  197.733328][ T9217]        __x64_sys_exit_group+0x3f/0x40
[  197.735033][ T9217]        x64_sys_call+0x21ba/0x21c0
[  197.736677][ T9217]        do_syscall_64+0xfa/0x3b0
[  197.738165][ T9217]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.740101][ T9217] 
[  197.740101][ T9217] other info that might help us debug this:
[  197.740101][ T9217] 
[  197.743149][ T9217]  Possible unsafe locking scenario:
[  197.743149][ T9217] 
[  197.745381][ T9217]        CPU0                    CPU1
[  197.746988][ T9217]        ----                    ----
[  197.748651][ T9217]   lock(&conn->lock#2);
[  197.750087][ T9217]                                lock((work_completion)(&(&conn->info_timer)->work));
[  197.752956][ T9217]                                lock(&conn->lock#2);
[  197.755015][ T9217]   lock((work_completion)(&(&conn->info_timer)->work));
[  197.757209][ T9217] 
[  197.757209][ T9217]  *** DEADLOCK ***
[  197.757209][ T9217] 
[  197.759697][ T9217] 5 locks held by syz-executor/9217:
[  197.761362][ T9217]  #0: ffff8880281b4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  197.765067][ T9217]  #1: ffff8880281b40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  197.768713][ T9217]  #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  197.771958][ T9217]  #3: ffff88811ab55338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  197.774778][ T9217]  #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  197.777415][ T9217] 
[  197.777415][ T9217] stack backtrace:
[  197.779166][ T9217] CPU: 1 UID: 0 PID: 9217 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  197.779178][ T9217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.779185][ T9217] Call Trace:
[  197.779191][ T9217]  <TASK>
[  197.779198][ T9217]  dump_stack_lvl+0x189/0x250
[  197.779211][ T9217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.779219][ T9217]  ? __pfx__printk+0x10/0x10
[  197.779230][ T9217]  ? print_lock_name+0xde/0x100
[  197.779241][ T9217]  print_circular_bug+0x2ee/0x310
[  197.779254][ T9217]  check_noncircular+0x134/0x160
[  197.779265][ T9217]  validate_chain+0xb9b/0x2140
[  197.779274][ T9217]  ? do_raw_spin_lock+0x121/0x290
[  197.779285][ T9217]  ? look_up_lock_class+0x74/0x170
[  197.779298][ T9217]  ? register_lock_class+0x51/0x320
[  197.779307][ T9217]  __lock_acquire+0xab9/0xd20
[  197.779316][ T9217]  ? __flush_work+0xd2/0xbc0
[  197.779326][ T9217]  lock_acquire+0x120/0x360
[  197.779348][ T9217]  ? __flush_work+0xd2/0xbc0
[  197.779358][ T9217]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.779375][ T9217]  ? __flush_work+0xd2/0xbc0
[  197.779385][ T9217]  __flush_work+0x6b8/0xbc0
[  197.779396][ T9217]  ? __flush_work+0xd2/0xbc0
[  197.779406][ T9217]  ? __flush_work+0xd2/0xbc0
[  197.779416][ T9217]  ? __pfx___flush_work+0x10/0x10
[  197.779426][ T9217]  ? __pfx_wq_barrier_func+0x10/0x10
[  197.779440][ T9217]  ? __pfx___cancel_work+0x10/0x10
[  197.779451][ T9217]  ? hci_conn_drop+0x14d/0x280
[  197.779464][ T9217]  __cancel_work_sync+0xbe/0x110
[  197.779476][ T9217]  l2cap_conn_del+0x4f0/0x680
[  197.779488][ T9217]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  197.779497][ T9217]  hci_conn_hash_flush+0x10d/0x230
[  197.779510][ T9217]  hci_dev_close_sync+0xaef/0x1330
[  197.779523][ T9217]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  197.779558][ T9217]  ? up_write+0x1c4/0x420
[  197.779572][ T9217]  hci_unregister_dev+0x21a/0x510
[  197.779582][ T9217]  vhci_release+0x80/0xd0
[  197.779592][ T9217]  ? __pfx_vhci_release+0x10/0x10
[  197.779600][ T9217]  __fput+0x44c/0xa70
[  197.779615][ T9217]  task_work_run+0x1d4/0x260
[  197.779628][ T9217]  ? __pfx_task_work_run+0x10/0x10
[  197.779640][ T9217]  ? kmem_cache_free+0x18f/0x400
[  197.779651][ T9217]  do_exit+0x6b5/0x22e0
[  197.779665][ T9217]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  197.779677][ T9217]  ? __pfx_do_exit+0x10/0x10
[  197.779689][ T9217]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.779700][ T9217]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.779712][ T9217]  do_group_exit+0x21c/0x2d0
[  197.779725][ T9217]  __x64_sys_exit_group+0x3f/0x40
[  197.779736][ T9217]  x64_sys_call+0x21ba/0x21c0
[  197.779746][ T9217]  do_syscall_64+0xfa/0x3b0
[  197.779755][ T9217]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.779766][ T9217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.779775][ T9217]  ? exc_page_fault+0x9f/0xf0
[  197.779786][ T9217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.779795][ T9217] RIP: 0033:0x7f703a58e929
[  197.779804][ T9217] Code: Unable to access opcode bytes at 0x7f703a58e8ff.
[  197.779808][ T9217] RSP: 002b:00007ffdea501168 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  197.779818][ T9217] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f703a58e929
[  197.779825][ T9217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  197.779830][ T9217] RBP: 00007f703a5ee8f0 R08: 00007ffdea4fef07 R09: 0000000000000003
[  197.779836][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.779841][ T9217] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffdea501320
[  197.779851][ T9217]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  197.913911][ T5842] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
05:50:14  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1f6b6c0 RBX=ffffffff8fb5b60c RCX=dffffc0000000000 RDX=ffffffff8fb5b5ec
RSI=ffffffff90318626 RDI=ffffffff8be29d60 RBP=ffffffff8fb5b600 RSP=ffffc90002ddf2b8
R8 =0000000000000009 R9 =0000000000000000 R10=ffffc90002ddf3e8 R11=fffff520005bbe89
R12=ffffffff8172d387 R13=ffffffff8fb5b5fc R14=ffffc90002ddf3e8 R15=ffffffff8fb5b604
RIP=ffffffff8172bd4a RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffed9a58088 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ffffffff 0000000100000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffffffff00ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bfc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc90003537010 RSP=ffffc90003536e38
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854776f0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85477767 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558665e500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560dc636d950 CR3=000000003d682000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=ffffffff00000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
