last executing test programs:

2m32.596555844s ago: executing program 2 (id=770):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(r0)
shutdown(r0, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) (async)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)
close(r0) (async)
shutdown(r0, 0x1) (async)

2m32.492230007s ago: executing program 2 (id=772):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
close(r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r1 = socket(0x1, 0x6, 0x9)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3, 0x0, @remote, 0xf}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142)

2m32.490625783s ago: executing program 2 (id=774):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x26, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x4, 0x1, 0x5, 0x10, 0xffffffffffffffef}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf60}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7a71212a}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x332}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x10, '\x00', r1, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r3, 0xa, 0x0, &(0x7f0000000380)=[{0x5, 0x4, 0x5, 0x4}, {0x5, 0x4, 0x4, 0x4}, {0x2, 0x1, 0x8, 0x6}, {0x2, 0x5, 0xe, 0x7}, {0x2, 0x4, 0x9, 0x2}, {0x4, 0x1, 0xe, 0x7}, {0x5, 0x1, 0x2, 0xa}, {0x0, 0x2, 0x3, 0xb}, {0x0, 0x3, 0x7, 0x7}, {0x4, 0x1, 0x7, 0x4}]}, 0x94)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0)

2m31.734425529s ago: executing program 1 (id=786):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10)

2m31.733255492s ago: executing program 1 (id=787):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x400000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r1, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) (async)
sendfile(r3, r3, 0x0, 0x9) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

2m31.648680284s ago: executing program 1 (id=788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x0, 0x0, 0x40008000}, 0x0)

2m31.64811922s ago: executing program 1 (id=789):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'})
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x440d4}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x4, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e8e389d3c86f40000c179df14dff03eb901eb549b56d28cddcd3e7b0000000000009d63fd0f892c202cbf0d5ab9a2e5fc3e380fc415fcc24ca1450d23589222af8f3153ba7be4b7421eb69efcc3b8d7b0174829956262305602178515f630bc8833f91f3a1ce0b83b87e5e08123dfff97f03ef822ef1bffdf90b96d7893effac76f639cef6bd4d3b8e6913cdc76057f1a94587dd2662f50aa26d01e2db7228192517d7ed9a23fe39371f362ca6df5402e55d547160d5b35af25b9afde"], 0x55)
recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xfffffffffffffef4}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}, 0x5}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000000400)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

2m31.593791802s ago: executing program 2 (id=790):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x0, 0x0, 0x4c, 0x0, "25367b9c8467783835fb00d492c430c380e2a8b1ce8e820bc98bc75677ccedf1d333c729d6319df2b62ed83354d5ef1f5e68080b2f84c8e86a44870a7a35151fbb0a3688cf394bd8d66dfeb454213e20"}, 0xd8)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0xa1522000)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

2m30.733835539s ago: executing program 1 (id=795):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0xd6e, 0x6, 0x4})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=0x1, 0x2, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r2, r0, 0x2c, 0x2000, 0x0, @value=r3, @void, @void, @void, r1}, 0x20)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000280)={'gretap0\x00', 0x7f})
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = accept4$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c, 0x800)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={<r7=>0x0, 0x2, 0x81}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={r7, 0x68, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0xbee, @ipv4={'\x00', '\xff\xff', @local}, 0xa78c}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x3, @private2, 0x3}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f00000004c0)=0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x40080}, 0xc000)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000680)=0xfffffff7)
r8 = accept(r3, &(0x7f00000006c0)=@can={0x1d, <r9=>0x0}, &(0x7f0000000740)=0x80)
socket$kcm(0x29, 0x2, 0x0)
r10 = accept4$tipc(r8, &(0x7f0000000780)=@id, &(0x7f00000007c0)=0x10, 0x81000)
shutdown(r10, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @fwd={0x2}, @struct={0x2, 0x7, 0x0, 0x4, 0x1, 0x39, [{0x1, 0x4, 0x7fffffff}, {0xa, 0x1, 0x874c}, {0x1, 0x0, 0xffffff4f}, {0x5, 0x5, 0x5}, {0x6, 0x2, 0xe}, {0x2, 0x4, 0x69}, {0x2, 0x2, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e]}}, &(0x7f0000000900)=""/4096, 0xc3, 0x1000, 0x0, 0x4}, 0x28)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), r8)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x14c, r11, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xe72}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9632}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xffffffffffff2bb4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7ff}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240008c0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), r5)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c00), r5)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r13, &(0x7f0000001c40)={0x1f, 0x0, 0x1}, 0x6)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r14, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x16, 0x5, 0x4, 0x3, 0x180, 0xffffffffffffffff, 0x7, '\x00', r9, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000002000)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x154, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x154}}, 0x2008040)
setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002040)={r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc)
ioctl$sock_ifreq(r0, 0x891b, &(0x7f0000002080)={'batadv0\x00', @ifru_names='wlan0\x00'})

2m30.73278167s ago: executing program 2 (id=796):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000080)=0xc, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}}, 0x0)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r13 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000100)={r13})
ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f00000000c0))
close(0x3)
setsockopt$inet6_tcp_int(r12, 0x6, 0x4, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)

2m30.644289956s ago: executing program 1 (id=797):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'})
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = accept$packet(r1, &(0x7f00000001c0), &(0x7f0000000400)=0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x4, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

2m30.544686137s ago: executing program 32 (id=797):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'})
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = accept$packet(r1, &(0x7f00000001c0), &(0x7f0000000400)=0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x4, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

2m30.502864928s ago: executing program 2 (id=799):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
writev(r1, 0x0, 0x0)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$inet(0x2b, 0x801, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @ethernet={0x306, @remote}, @generic={0x1f, "ad5d4a42a7369c041de57d928f9e"}, 0x0, 0x0, 0x0, 0x0, 0xa8fa, &(0x7f0000000100)='rose0\x00', 0xff, 0x7, 0x800})
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x5f8, 0x0, 0xffffffffffffffff, 0x0, 0x7fff7fff}, 0x0, 0x0)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)

2m30.495059653s ago: executing program 33 (id=799):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
writev(r1, 0x0, 0x0)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$inet(0x2b, 0x801, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @ethernet={0x306, @remote}, @generic={0x1f, "ad5d4a42a7369c041de57d928f9e"}, 0x0, 0x0, 0x0, 0x0, 0xa8fa, &(0x7f0000000100)='rose0\x00', 0xff, 0x7, 0x800})
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x5f8, 0x0, 0xffffffffffffffff, 0x0, 0x7fff7fff}, 0x0, 0x0)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)

36.067526642s ago: executing program 0 (id=1445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500230000fbac620d25627826c1cfaddc5cf3034842b79cb5038cfe8a028edad7619565b94019be927168bafbaa21aefb92369c42dabfcd3a7933249c2fb1a3b39151edb9c6deb171d59550101e8d66f0ae368b7549717af226dd64beef5ceae4bea89be24223d614f62e00a24e913f3401effbe7d58c9b", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

29.928006151s ago: executing program 0 (id=1445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500230000fbac620d25627826c1cfaddc5cf3034842b79cb5038cfe8a028edad7619565b94019be927168bafbaa21aefb92369c42dabfcd3a7933249c2fb1a3b39151edb9c6deb171d59550101e8d66f0ae368b7549717af226dd64beef5ceae4bea89be24223d614f62e00a24e913f3401effbe7d58c9b", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

23.479330022s ago: executing program 0 (id=1445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500230000fbac620d25627826c1cfaddc5cf3034842b79cb5038cfe8a028edad7619565b94019be927168bafbaa21aefb92369c42dabfcd3a7933249c2fb1a3b39151edb9c6deb171d59550101e8d66f0ae368b7549717af226dd64beef5ceae4bea89be24223d614f62e00a24e913f3401effbe7d58c9b", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

17.432185786s ago: executing program 0 (id=1445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500230000fbac620d25627826c1cfaddc5cf3034842b79cb5038cfe8a028edad7619565b94019be927168bafbaa21aefb92369c42dabfcd3a7933249c2fb1a3b39151edb9c6deb171d59550101e8d66f0ae368b7549717af226dd64beef5ceae4bea89be24223d614f62e00a24e913f3401effbe7d58c9b", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

11.618735366s ago: executing program 0 (id=1445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500230000fbac620d25627826c1cfaddc5cf3034842b79cb5038cfe8a028edad7619565b94019be927168bafbaa21aefb92369c42dabfcd3a7933249c2fb1a3b39151edb9c6deb171d59550101e8d66f0ae368b7549717af226dd64beef5ceae4bea89be24223d614f62e00a24e913f3401effbe7d58c9b", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

4.991421655s ago: executing program 4 (id=1945):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x7fffffff, @remote, 0xffffc}, 0x1c)

4.986212744s ago: executing program 4 (id=1946):
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_hardwall\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900), 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x4}, 0x14}}, 0x4001)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000300"], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="b256f0c172c7463051acb30b03008070dd0061230800000080466d040ba3725a359b86b561d49cc70a5183714f54f8f26cc8409c9dda3cb0b5eb89ea20", @ANYRES16=r6, @ANYBLOB="000329bd7000fddbdf25010000000c00040002000000000000000c000800ff0000000000000008000100000000000c000600040000000000000004000a000e000a0073797a6b616c6c6572000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x40)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xa, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xd9, 0x6, 0x1a, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

4.886681551s ago: executing program 0 (id=1445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2) (async)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240006b35500002282477bc60bafdb2c478b8d80d2d84e54942d12e943492d8866bf8b896a828005a9256fd433c0f380dcf4d81b5ff20fcfb448ce5b32eacc71f3afeb728f7fa3d8ca0057112c0328b4e560210bc8599b900f026f8418fbbd6de717c5abd3e2efdc9048c94787c25677db876ac5ec73c1dc4fe6cd", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006900fa00000005003e00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500230000fbac620d25627826c1cfaddc5cf3034842b79cb5038cfe8a028edad7619565b94019be927168bafbaa21aefb92369c42dabfcd3a7933249c2fb1a3b39151edb9c6deb171d59550101e8d66f0ae368b7549717af226dd64beef5ceae4bea89be24223d614f62e00a24e913f3401effbe7d58c9b", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

3.190228291s ago: executing program 4 (id=1948):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x20, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014})
close(0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000004088eb0200000008000300", @ANYRES32=r8, @ANYBLOB="0800a0009e090000080027000200000008002600a809"], 0x3c}}, 0x80)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x210, r2, 0x1, 0x70bdac, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_TID_CONFIG={0x1e8, 0x11d, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x1, 0x24, 0x24, 0x7757731bb3fdcc04, 0xb, 0xb, 0x4, 0x6c, 0xc, 0x12, 0x6c, 0x3, 0x0, 0x2, 0x1, 0x9, 0x6, 0x6, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xfffc, 0xa603, 0x3, 0x9, 0x9, 0xf0a8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6d43, 0x6, 0x1ceb, 0x2, 0x4, 0xfff9, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x43, 0x1, 0xb, 0xc, 0x7bb6, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x1, 0x4, 0xffff, 0x1000, 0x5781, 0x3, 0x800]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x22, 0x3, 0x8, 0x800, 0x20, 0x40, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x4}, {}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x4}, {0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x5}, {0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x3}, {0x7}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x5}, {0x1}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x48, 0xd1fd8252c2ec47a5, 0x5, 0x1]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x101, 0x6, 0x4, 0x7fff, 0x3, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0x1, 0x5, 0xb, 0x9, 0xfffa, 0x2]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x3}, {0x4, 0x3}, {0x7}, {0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0xa}, {0x2, 0xa}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x4, 0x1}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x9}, {0x4, 0x9}, {0x6}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0xa}, {0x5, 0x9}, {0x5}, {0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x3, 0x3}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0)

2.219812682s ago: executing program 4 (id=1955):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip_vti0\x00', 0x4}, 0x18)
write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000000100000000000001", 0x1c)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x30004001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0)

1.521652587s ago: executing program 4 (id=1956):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280003400003069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54107b1990780000d3ffd2ba6e54d40bc6136f869903030e45b17001"], 0x0)

1.109955938s ago: executing program 3 (id=1962):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @local, 0xff000000, 0xff0000ff, 'vlan0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x88, 0x5, 0x10}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff0000ff, 0xffffff00, 'ip6tnl0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x88, 0x2, 0x48}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00e7ff01010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xc, 0x1, &(0x7f0000000140)="c0", 0x9, 0x52, 0x10cf, 0x7, 0x9, 0x0, 0x4, 'syz1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

1.021877511s ago: executing program 3 (id=1963):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300001200000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000600000000000000fc01000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x90}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x80000000, 0x9c}})
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x20008800)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="a4026400", @ANYRES16=r1, @ANYRES8=r3], 0xa4}, 0x1, 0x0, 0x0, 0x4c054}, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010102}, 0x10, 0x0}, 0x300440f1)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "edc70c9e1c6fe7f7cba38d3310746f9c9bd83b4b1d158540ba87a12cbaeefed3", "4c4adc747c39b32b6e2cbe95aed012fc63031ea83fa8112c320f07807aadc495", "ef6e9a18eee565740386e14248f13787b566fc8f3ca6a32b586b52df861b3a07", "99631701b28e23df27a356d1f6ec99d958130ba9e4644d53da42ec3a525712d0", "04d32c579fb9a67470591926aa759fec68e9c3b7f25d1f3c37b867bd753cc198", "714f8e5eac579146ee61d1bc", 0xc595, 0x8001, 0x203, 0x1ff, 0x6b2c}})
r10 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r10, 0x0, 0x29, 0x0, &(0x7f0000d23000)=0x44)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10)
write(r8, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000010000000000000008", 0x1d)
setsockopt$sock_attach_bpf(r7, 0x1, 0x12, &(0x7f00000007c0), 0x4)

942.210129ms ago: executing program 3 (id=1964):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000008c0)='syz1\x00', 0x200002, 0x0)
r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=0x10, 0x80800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
poll(&(0x7f0000000980)=[{r1, 0x200}, {r0, 0x8001}, {r2, 0x682}, {r0, 0x10a1}, {r3, 0x4210}], 0x5, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000880)={0x0, 0x1, 0x6, @remote}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{r8}, &(0x7f00000012c0), &(0x7f0000001300)='%pi6   \x00'}, 0x20)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00'}, 0x94)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x3c, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x4, 0x2, 0x0, 0x40, {[@md5sig={0x13, 0x12, "354250fd06755794f73fdeb50828a92d"}, @nop]}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'lo\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r13}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48006)
write(r10, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

916.014989ms ago: executing program 3 (id=1965):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1)
sendmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000640)="677aecfe797f8d51d044ffe055cad917bec425f37e820d7bf3139d969938bb9555deb072de644dddf4e6f6a34f8321785db05d761836e6168b5fcf9f0d36b713fb378e75f0d11d21e17c24142f4c7a661f8c732a0c4b99aae62873e2918d478bcfcb4574028110654d62", 0x6a}, {&(0x7f00000006c0)="e5dd6029aac2c1b5b684e2b87bc032e8141a5bf3e031033308554253683aef4fa3f618e253b39f1af707db7b965696bed68b4eaf92e34e345a13836be1b5a4b66ccc6598d00f1693d04df75b1664bd0d07dcd1407453f9104763ff320a76c68296f5863312533f0d7779e6a38b54f524af78d579f335f0dda7c553e5548483e2820755e6f204aaba027af946629a580a5593fdcd41057420902e8026989eb8d754cfa94510a7f15e073128a2c9afd7e6c9ef8f010bd1457ce51fe36e145723df2644d0669b10a6248d7d89335db6725c038e988035ba608591c2ffc1d17b4d0b4184a4231910c4183712035e11b8a53a4bcc0a", 0xf3}, {&(0x7f0000001700)="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", 0xe83}], 0x3, &(0x7f00000027c0)=ANY=[@ANYBLOB="080100000000000013010000010000008f37ed324c78f3717812bc23ac4e1eeaddecf7afb9fb3425950d882d121862a62b5b0a86ce5b28b074c639747886a3fc4946b056985214e573d37935b6d6b00880818329db09e1e26932e6693c3a4b2d450cd318fac2c13289eebd6b304738b0acf3978009a8edcdd4e46db77162df0c7db4e17b88cdaac08259c0e7d204eedcb1deae50600308bff9a68baf7bf58f83325068e0e7971737dbcc5303d546a285a3c0011c5e62bd749ae2685a0391c080e93a2f4df9a01e59d2836798ec8a396088382fafee2ff33d52ce08722c0942dbaf4888b4e02056ec95950ceccf5cae9136ecb8500dafa5953634ed06391537d376770b00000000001010"], 0x1118}}], 0x1, 0x400c894)

852.331817ms ago: executing program 3 (id=1966):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdbd, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r2, 0x0, 0x0)
close(r2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0xffffffff, 0x1}, 0x20)
socket$inet6(0xa, 0x80000, 0x80000002)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)={'bond0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200)=0x10001, 0x12)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x24000810)
sendfile(r5, r4, 0x0, 0xf03a0005)
recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000800)}, 0x7}], 0x1, 0x40010002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009800128009000100766c616e00000000880002800c0002000e0000000c0000000600050088a8000040000380200001007b4b0000000000000c0001e004000000090000000c000100bf000000000400000c00010002000000ff0100000c0001000e000000000001000400048004000480280004800c00010007000000040000000c00010008000000040000000c000100060000000080000014000300766c616e30"], 0xcc}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x44008090}, 0x2048044)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0)

590.209674ms ago: executing program 4 (id=1967):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x4, 0x0, 0x2, 0x1, 0x0, 0x6}}, {0x10, 0x2, [0x1, 0x2, 0x8, 0x7fff, 0xfa4, 0xe5a]}}]}]}, 0x84}}, 0x4000010)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x27439059afe66a1a, 0xfffd}, {0x4}, {0x5, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}]}, 0x2c}}, 0x4000)
r7 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
shutdown(r1, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500100001000000129bd000000000061dd000020010000000000000000000000000000000000004e240000020000202f00"/65, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="fc01000000000000000000000000000100000000320000000100000000000000000000000000000100000000000000000000000000000000fcffffffffffffff00000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff00000800000000000000000002000181680000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000008000000025cac5216d3c8af0aa76902918bf448c5d9f5459"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20008085)
sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x1)

0s ago: executing program 3 (id=1968):
ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000000))
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFMTU(r1, 0x5411, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) (async)
ioctl$SIOCSIFMTU(r1, 0x5411, &(0x7f0000000080)={'veth0_vlan\x00', 0x200})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x6b2da7b8ff17ace8, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000280)="3ac4", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r2, 0x1) (async)
shutdown(r2, 0x1)
socket$kcm(0x29, 0x0, 0x0)
r3 = accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000180))
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r6=>0x0})
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000)
close(r0)

kernel console output (not intermixed with test programs):

 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.314791][T10218] gretap1: entered promiscuous mode
[  160.330532][T10207] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.351764][T10207] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.364542][T10207] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.381388][T10226] sock: sock_set_timeout: `syz.4.1276' (pid 10226) tries to set negative timeout
[  160.446469][T10224] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.510238][T10238] netdevsim netdevsim3 : renamed from netdevsim0
[  160.648013][T10254] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  160.651366][T10254] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0
[  161.263146][T10258] netlink: 'syz.0.1285': attribute type 10 has an invalid length.
[  162.903293][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'.
[  162.908486][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'.
[  163.031905][T10334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  163.035220][T10334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  163.450080][T10349] veth0_to_team: left promiscuous mode
[  163.452197][T10349] veth0_to_team: left allmulticast mode
[  163.456273][T10349] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  163.459274][T10349] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.462455][T10349] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.466004][T10349] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.469931][T10349] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.481042][T10349] hsr0: left allmulticast mode
[  163.483478][T10349] hsr_slave_0: left allmulticast mode
[  163.485765][T10349] hsr_slave_1: left allmulticast mode
[  163.487886][T10349] hsr0: left promiscuous mode
[  163.490234][T10349] macvlan3: left promiscuous mode
[  163.492304][T10349] macvlan3: left allmulticast mode
[  165.864998][T10404] netlink: 'syz.3.1331': attribute type 11 has an invalid length.
[  165.868516][T10404] __nla_validate_parse: 3 callbacks suppressed
[  165.868528][T10404] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1331'.
[  165.879405][T10406] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1332'.
[  166.720869][T10413] x_tables: duplicate underflow at hook 1
[  167.084527][T10429] netlink: 'syz.4.1338': attribute type 1 has an invalid length.
[  167.088912][T10429] netlink: 'syz.4.1338': attribute type 4 has an invalid length.
[  167.092131][T10429] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1338'.
[  167.099675][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'.
[  168.129542][T10443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  168.133240][T10443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  170.210092][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'.
[  170.568095][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'.
[  170.585291][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'.
[  171.224977][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'.
[  171.226488][ T5842] Bluetooth: hci2: command 0x0405 tx timeout
[  171.604727][T10547] netlink: 'syz.0.1373': attribute type 21 has an invalid length.
[  171.608839][T10547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1373'.
[  171.613934][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'.
[  171.615442][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'.
[  171.793362][T10557] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1376'.
[  171.803427][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'.
[  171.808481][T10557] bridge_slave_1: left allmulticast mode
[  171.810895][T10557] bridge_slave_1: left promiscuous mode
[  171.812838][T10557] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.817886][T10557] bridge_slave_0: left allmulticast mode
[  171.820201][T10557] bridge_slave_0: left promiscuous mode
[  171.822393][T10557] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.155365][T10570] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1378'.
[  172.159199][T10570] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1378'.
[  172.869801][T10585] xt_hashlimit: max too large, truncated to 1048576
[  173.747347][T10602] xt_hashlimit: max too large, truncated to 1048576
[  173.887085][T10617] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0
[  173.890152][T10617] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.894262][T10617] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.898597][T10617] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.901620][T10617] geneve2: left promiscuous mode
[  173.909009][T10617] macsec1: left promiscuous mode
[  173.910636][T10617] macsec1: left allmulticast mode
[  173.913725][T10617] gretap1: left promiscuous mode
[  174.493722][T10623] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1394'.
[  174.558136][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'.
[  174.563693][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880363fb400: rx timeout, send abort
[  175.064525][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880363fb800: rx timeout, send abort
[  175.068467][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880363fb400: abort rx timeout. Force session deactivation
[  175.568137][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880363fb800: abort rx timeout. Force session deactivation
[  176.293851][T10648] __nla_validate_parse: 1 callbacks suppressed
[  176.293869][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'.
[  176.588914][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'.
[  176.592661][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'.
[  177.021719][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  177.025822][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  177.581434][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'.
[  177.584752][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'.
[  177.591808][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'.
[  177.598016][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'.
[  178.600886][T10715] netlink: 'syz.3.1420': attribute type 13 has an invalid length.
[  178.604345][T10715] netlink: 'syz.3.1420': attribute type 17 has an invalid length.
[  178.621891][T10715] gretap0: refused to change device tx_queue_len
[  178.624913][T10715] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  178.634926][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'.
[  178.640444][T10715] syz.3.1420 (10715) used greatest stack depth: 19320 bytes left
[  179.394480][T10755] xt_hashlimit: max too large, truncated to 1048576
[  180.586394][ T5842] Bluetooth: hci1: command 0x0401 tx timeout
[  181.080847][T10792] sock: sock_set_timeout: `syz.3.1448' (pid 10792) tries to set negative timeout
[  181.084168][T10793] sock: sock_set_timeout: `syz.3.1448' (pid 10793) tries to set negative timeout
[  181.183305][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.187368][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.190892][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.194118][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.197441][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.326353][T10798] chnl_net:caif_netlink_parms(): no params data found
[  181.432140][T10798] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.436330][T10798] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.439210][T10798] bridge_slave_0: entered allmulticast mode
[  181.442493][T10798] bridge_slave_0: entered promiscuous mode
[  181.446336][T10798] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.448700][T10798] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.451499][T10798] bridge_slave_1: entered allmulticast mode
[  181.454994][T10798] bridge_slave_1: entered promiscuous mode
[  181.479184][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.484443][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.511383][T10798] team0: Port device team_slave_0 added
[  181.516429][T10798] team0: Port device team_slave_1 added
[  181.527844][T10819] __nla_validate_parse: 6 callbacks suppressed
[  181.527906][T10819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'.
[  181.534363][T10819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1454'.
[  181.539818][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.541631][T10819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'.
[  181.542314][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.546211][T10819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'.
[  181.554715][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.563068][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.565530][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.573743][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.600342][T10798] hsr_slave_0: entered promiscuous mode
[  181.602684][T10798] hsr_slave_1: entered promiscuous mode
[  181.604791][T10798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.607588][T10798] Cannot create hsr debugfs directory
[  181.908820][T10798] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  181.915007][T10798] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  181.921540][T10798] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  181.929511][T10798] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  181.960668][T10798] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.963851][T10798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.968119][T10798] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.971026][T10798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.029176][T10798] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.042654][ T1590] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.048766][ T1590] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.060272][T10798] 8021q: adding VLAN 0 to HW filter on device team0
[  182.071190][ T1590] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.074105][ T1590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.082683][ T1590] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.085738][ T1590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.193834][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.218125][T10798] veth0_vlan: entered promiscuous mode
[  182.223033][T10798] veth1_vlan: entered promiscuous mode
[  182.238298][T10798] veth0_macvtap: entered promiscuous mode
[  182.242183][T10798] veth1_macvtap: entered promiscuous mode
[  182.252341][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.264593][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.270439][T10798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.273233][T10798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.280185][T10798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.291492][T10798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.324381][T10836] pim6reg: entered allmulticast mode
[  182.331949][T10836] pim6reg: left allmulticast mode
[  182.369789][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.372227][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.388090][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.390867][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.439177][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'.
[  182.444461][T10841] netlink: 'syz.3.1457': attribute type 1 has an invalid length.
[  182.450072][T10841] netlink: 'syz.3.1457': attribute type 4 has an invalid length.
[  182.454909][T10841] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1457'.
[  182.611027][T10851] netlink: 'syz.4.1460': attribute type 1 has an invalid length.
[  183.702321][T10879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1468'.
[  183.708275][T10879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1468'.
[  184.323105][T10882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.439094][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.818680][T10900] ieee802154 phy0 wpan0: encryption failed: -22
[  184.828928][T10900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1476'.
[  184.840673][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  184.844976][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.850099][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.857276][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.861988][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.863952][T10903] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1477'.
[  185.003406][T10916] sctp: [Deprecated]: syz.3.1479 (pid 10916) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.003406][T10916] Use struct sctp_sack_info instead
[  185.063291][T10902] chnl_net:caif_netlink_parms(): no params data found
[  185.139652][T10902] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.142709][T10902] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.146486][T10902] bridge_slave_0: entered allmulticast mode
[  185.150462][T10902] bridge_slave_0: entered promiscuous mode
[  185.156165][T10902] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.159185][T10902] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.162210][T10902] bridge_slave_1: entered allmulticast mode
[  185.166199][T10902] bridge_slave_1: entered promiscuous mode
[  185.208687][T10902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.219618][T10902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.260767][T10902] team0: Port device team_slave_0 added
[  185.266868][T10902] team0: Port device team_slave_1 added
[  185.300782][T10902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.303778][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.314778][T10902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.323323][T10902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.326723][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.338097][T10902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.386304][T10902] hsr_slave_0: entered promiscuous mode
[  185.389692][T10902] hsr_slave_1: entered promiscuous mode
[  185.394890][T10902] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.398225][T10902] Cannot create hsr debugfs directory
[  185.818683][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.896787][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.956723][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.035947][   T12] bridge_slave_1: left allmulticast mode
[  186.037816][   T12] bridge_slave_1: left promiscuous mode
[  186.040484][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.049325][   T12] bridge_slave_0: left allmulticast mode
[  186.051197][   T12] bridge_slave_0: left promiscuous mode
[  186.053070][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.309560][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.314851][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.319403][   T12] bond0 (unregistering): Released all slaves
[  186.563015][   T12] hsr_slave_0: left promiscuous mode
[  186.571825][T10963] __nla_validate_parse: 6 callbacks suppressed
[  186.571841][T10963] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1490'.
[  186.571876][   T12] hsr_slave_1: left promiscuous mode
[  186.583622][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.587526][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.590470][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.593044][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.607756][   T12] veth1_macvtap: left promiscuous mode
[  186.609762][   T12] veth0_macvtap: left promiscuous mode
[  186.612564][   T12] veth1_vlan: left promiscuous mode
[  186.614773][   T12] veth0_vlan: left promiscuous mode
[  186.906648][ T5842] Bluetooth: hci1: command tx timeout
[  186.984984][   T12] team0 (unregistering): Port device team_slave_1 removed
[  187.014392][   T12] team0 (unregistering): Port device team_slave_0 removed
[  187.561101][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  187.571508][T10902] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  187.593007][T10976] xt_TPROXY: Can be used only with -p tcp or -p udp
[  187.594146][T10902] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  187.603722][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  187.608590][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  187.624056][T10902] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  187.625863][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  187.634413][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  187.644308][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  187.660707][T10902] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  187.775075][T10990] openvswitch: netlink: Flow key attr not present in new flow.
[  187.800436][T10902] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.815112][T10902] 8021q: adding VLAN 0 to HW filter on device team0
[  187.824590][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.827873][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.842233][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.844626][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.969855][T10902] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.999634][T10902] veth0_vlan: entered promiscuous mode
[  188.011083][T10902] veth1_vlan: entered promiscuous mode
[  188.034116][T10902] veth0_macvtap: entered promiscuous mode
[  188.040805][T10902] veth1_macvtap: entered promiscuous mode
[  188.050071][T10902] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.057834][T10902] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.062783][T10902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.066895][T10902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.069703][T10902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.072517][T10902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.113117][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.119834][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.133729][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.137389][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.845661][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1501'.
[  188.848818][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1501'.
[  189.802802][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.029687][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.035629][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.041044][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.044994][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.050420][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.170931][T11023] chnl_net:caif_netlink_parms(): no params data found
[  190.252839][T11023] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.256798][T11023] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.259949][T11023] bridge_slave_0: entered allmulticast mode
[  190.263884][T11023] bridge_slave_0: entered promiscuous mode
[  190.269594][T11023] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.272676][T11023] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.276433][T11023] bridge_slave_1: entered allmulticast mode
[  190.280327][T11023] bridge_slave_1: entered promiscuous mode
[  190.301893][T11023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.306803][T11023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.327586][T11023] team0: Port device team_slave_0 added
[  190.331705][T11023] team0: Port device team_slave_1 added
[  190.350970][T11023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.353380][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.363223][T11023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.368112][T11023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.370843][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.379863][T11023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.409989][T11023] hsr_slave_0: entered promiscuous mode
[  190.412457][T11023] hsr_slave_1: entered promiscuous mode
[  190.414641][T11023] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.417539][T11023] Cannot create hsr debugfs directory
[  190.847622][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'.
[  191.114197][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.611511][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.715764][T11049] __nla_validate_parse: 1 callbacks suppressed
[  191.715776][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'.
[  191.724956][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.811487][ T5864] bridge_slave_1: left allmulticast mode
[  191.813601][ T5864] bridge_slave_1: left promiscuous mode
[  191.816988][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.820907][ T5864] bridge_slave_0: left allmulticast mode
[  191.822851][ T5864] bridge_slave_0: left promiscuous mode
[  191.824909][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.098838][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.103672][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.107516][ T5842] Bluetooth: hci1: command tx timeout
[  192.111503][ T5864] bond0 (unregistering): Released all slaves
[  192.330794][ T5864] hsr_slave_0: left promiscuous mode
[  192.333453][ T5864] hsr_slave_1: left promiscuous mode
[  192.337737][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.340386][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.343649][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.346531][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.361277][ T5864] veth1_macvtap: left promiscuous mode
[  192.363622][ T5864] veth0_macvtap: left promiscuous mode
[  192.366322][ T5864] veth1_vlan: left promiscuous mode
[  192.369434][ T5864] veth0_vlan: left promiscuous mode
[  192.648433][T11055] syz.3.1513 (11055) used greatest stack depth: 19144 bytes left
[  192.776169][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  192.814100][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  193.210444][T11023] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  193.218459][T11023] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  193.239173][T11023] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  193.250321][T11023] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  193.352865][T11023] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.364338][T11023] 8021q: adding VLAN 0 to HW filter on device team0
[  193.371101][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.373629][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.398036][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.400713][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.514935][T11023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.551497][T11023] veth0_vlan: entered promiscuous mode
[  193.559982][T11023] veth1_vlan: entered promiscuous mode
[  193.583754][T11023] veth0_macvtap: entered promiscuous mode
[  193.589592][T11023] veth1_macvtap: entered promiscuous mode
[  193.601737][T11023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.610461][T11023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.616818][T11023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.619909][T11023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.623644][T11023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.628583][T11023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.687873][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.694290][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.711828][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.714840][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.871428][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.874074][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.489604][T11090] tipc: Started in network mode
[  194.491811][T11090] tipc: Node identity 526080adf937, cluster identity 4711
[  194.495126][T11090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.499044][T11090] syzkaller0: entered promiscuous mode
[  194.501431][T11090] syzkaller0: entered allmulticast mode
[  195.272925][T11090] tipc: Resetting bearer <eth:syzkaller0>
[  195.284073][T11090] tipc: Disabling bearer <eth:syzkaller0>
[  195.843653][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'.
[  195.850381][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'.
[  195.860045][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'.
[  195.940844][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.958356][T11098] xt_hashlimit: max too large, truncated to 1048576
[  196.532330][T11103] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1524'.
[  196.539126][T11103] batadv_slave_1: entered promiscuous mode
[  196.542597][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.642791][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'.
[  196.649415][T11107] openvswitch: netlink: Flow actions attr not present in new flow.
[  196.766634][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.772175][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.777772][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.784053][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.798528][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.840584][T11122] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  196.845210][T11124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1530'.
[  196.933350][T11116] chnl_net:caif_netlink_parms(): no params data found
[  196.977640][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'.
[  196.983971][T11116] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.986842][T11116] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.990214][T11116] bridge_slave_0: entered allmulticast mode
[  196.993108][T11116] bridge_slave_0: entered promiscuous mode
[  196.996592][T11116] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.999395][T11116] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.003079][T11116] bridge_slave_1: entered allmulticast mode
[  197.006403][T11116] bridge_slave_1: entered promiscuous mode
[  197.031274][T11116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.037032][T11116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.060082][T11116] team0: Port device team_slave_0 added
[  197.063732][T11116] team0: Port device team_slave_1 added
[  197.081374][T11116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.083605][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.092250][T11116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.097939][T11116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.100208][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.110144][T11116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.138831][T11116] hsr_slave_0: entered promiscuous mode
[  197.141344][T11116] hsr_slave_1: entered promiscuous mode
[  197.143597][T11116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.146372][T11116] Cannot create hsr debugfs directory
[  197.783456][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.799445][T11143] netlink: 'syz.3.1535': attribute type 1 has an invalid length.
[  197.802753][T11143] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1535'.
[  197.807061][T11143] NCSI netlink: No device for ifindex 0
[  197.865931][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.892464][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1536'.
[  197.930020][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.989112][T11152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1537'.
[  198.002531][T11152] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1537'.
[  198.010619][T11152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1537'.
[  198.044073][T11152] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1537'.
[  198.053395][ T5863] bridge_slave_1: left allmulticast mode
[  198.055895][ T5863] bridge_slave_1: left promiscuous mode
[  198.058061][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.063453][ T5863] bridge_slave_0: left allmulticast mode
[  198.065755][ T5863] bridge_slave_0: left promiscuous mode
[  198.067874][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.380963][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.385930][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.389903][ T5863] bond0 (unregistering): Released all slaves
[  198.676915][ T5863] hsr_slave_0: left promiscuous mode
[  198.687251][ T5863] hsr_slave_1: left promiscuous mode
[  198.690127][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.694461][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.708141][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.711093][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.751464][ T5863] veth1_macvtap: left promiscuous mode
[  198.753834][ T5863] veth0_macvtap: left promiscuous mode
[  198.761450][ T5863] veth1_vlan: left promiscuous mode
[  198.763611][ T5863] veth0_vlan: left promiscuous mode
[  198.828678][ T5224] Bluetooth: hci1: command tx timeout
[  199.095536][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  199.118831][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  199.479597][T11116] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  199.493130][T11116] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.507460][T11116] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.521626][T11116] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  199.596698][T11175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1542'.
[  199.676262][T11116] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.701496][T11116] 8021q: adding VLAN 0 to HW filter on device team0
[  199.712974][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.715934][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.737527][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.740670][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.967774][T11116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.065921][ T5863] bridge_slave_1: left allmulticast mode
[  200.071875][ T5863] bridge_slave_1: left promiscuous mode
[  200.080428][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.084352][ T5863] bridge_slave_0: left allmulticast mode
[  200.094280][ T5863] bridge_slave_0: left promiscuous mode
[  200.098397][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.123631][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'.
[  200.133414][T11218] netlink: 'syz.3.1554': attribute type 29 has an invalid length.
[  200.227509][ T5863] tipc: Disabling bearer <eth:gre0>
[  200.421150][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.424959][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.428633][ T5863] bond0 (unregistering): Released all slaves
[  200.437505][T11116] veth0_vlan: entered promiscuous mode
[  200.450069][T11116] veth1_vlan: entered promiscuous mode
[  200.514652][ T5863] tipc: Left network mode
[  200.521883][T11116] veth0_macvtap: entered promiscuous mode
[  200.547270][T11116] veth1_macvtap: entered promiscuous mode
[  200.571876][T11116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.581299][T11116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.588321][T11116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.591258][T11116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.593981][T11116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.600417][T11116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.717564][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.720493][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.762062][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.764865][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.912030][ T5224] Bluetooth: hci1: command tx timeout
[  200.958189][T11242] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  201.252997][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  201.300278][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  201.601227][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.604659][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.009021][ T5863] IPVS: stop unused estimator thread 0...
[  202.170680][T11296] __nla_validate_parse: 1 callbacks suppressed
[  202.170700][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'.
[  202.179920][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'.
[  202.284846][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'.
[  202.290092][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'.
[  202.793198][T11305] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1579'.
[  202.869564][ T5709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.506448][ T5709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.566052][ T5709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.629283][ T5709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.669766][T11311] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.1580'.
[  203.738773][ T5709] bridge_slave_1: left allmulticast mode
[  203.740929][ T5709] bridge_slave_1: left promiscuous mode
[  203.742835][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.759095][ T5709] bridge_slave_0: left allmulticast mode
[  203.761124][ T5709] bridge_slave_0: left promiscuous mode
[  203.763095][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.796724][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  203.799819][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  203.802920][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  203.812813][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  203.818681][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.064117][ T5709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.071161][ T5709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.076510][ T5709] bond0 (unregistering): Released all slaves
[  204.300456][T11316] chnl_net:caif_netlink_parms(): no params data found
[  204.385004][ T5709] hsr_slave_0: left promiscuous mode
[  204.388517][ T5709] hsr_slave_1: left promiscuous mode
[  204.391712][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.397531][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.402704][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.407047][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.421719][ T5709] veth1_macvtap: left promiscuous mode
[  204.424319][ T5709] veth0_macvtap: left promiscuous mode
[  204.429365][ T5709] veth1_vlan: left promiscuous mode
[  204.431584][ T5709] veth0_vlan: left promiscuous mode
[  204.786490][ T5709] team0 (unregistering): Port device team_slave_1 removed
[  204.812572][ T5709] team0 (unregistering): Port device team_slave_0 removed
[  205.104096][T11316] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.107341][T11316] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.110449][T11316] bridge_slave_0: entered allmulticast mode
[  205.114379][T11316] bridge_slave_0: entered promiscuous mode
[  205.121015][T11316] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.124149][T11316] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.127391][T11316] bridge_slave_1: entered allmulticast mode
[  205.131297][T11316] bridge_slave_1: entered promiscuous mode
[  205.187362][T11316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.203254][T11316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.243759][T11316] team0: Port device team_slave_0 added
[  205.247545][T11316] team0: Port device team_slave_1 added
[  205.268558][T11316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.271297][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.281630][T11316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.287583][T11316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.290311][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.299901][T11316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.330995][T11316] hsr_slave_0: entered promiscuous mode
[  205.333878][T11316] hsr_slave_1: entered promiscuous mode
[  205.336546][T11316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.339378][T11316] Cannot create hsr debugfs directory
[  205.520180][T11333] tun0: tun_chr_ioctl cmd 1074025675
[  205.522402][T11333] tun0: persist enabled
[  205.524399][T11333] tun0: tun_chr_ioctl cmd 1074025675
[  205.527680][T11333] tun0: persist enabled
[  205.529424][T11338] Cannot find add_set index 0 as target
[  205.732392][T11316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  205.740619][T11316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  205.750596][T11316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  205.756694][T11316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  205.824832][T11316] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.852600][T11316] 8021q: adding VLAN 0 to HW filter on device team0
[  205.862579][ T1590] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.865521][ T1590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.869760][ T5224] Bluetooth: hci1: command tx timeout
[  205.881470][ T1590] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.884464][ T1590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.926168][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1595'.
[  206.069218][T11316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.100528][T11383] syzkaller1: entered promiscuous mode
[  206.102829][T11383] syzkaller1: entered allmulticast mode
[  206.139850][T11316] veth0_vlan: entered promiscuous mode
[  206.147597][T11316] veth1_vlan: entered promiscuous mode
[  206.179554][T11316] veth0_macvtap: entered promiscuous mode
[  206.185993][T11316] veth1_macvtap: entered promiscuous mode
[  206.202914][T11316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.212886][T11316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.220856][T11316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.224240][T11316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.228568][T11316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.232196][T11316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.282735][ T1871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.292375][ T1871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.304980][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1600'.
[  206.312892][ T1871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.317147][ T1871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.459763][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1614'.
[  207.466936][T11440] batadv1: entered promiscuous mode
[  207.470063][T11440] batadv1: entered allmulticast mode
[  207.596814][T11440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1614'.
[  208.344799][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.105714][T11453] netlink: 'syz.4.1618': attribute type 3 has an invalid length.
[  209.324936][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  209.329357][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  209.332870][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  209.338840][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  209.342614][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  209.474268][T11464] chnl_net:caif_netlink_parms(): no params data found
[  209.559369][T11464] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.562606][T11464] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.566190][T11464] bridge_slave_0: entered allmulticast mode
[  209.570441][T11464] bridge_slave_0: entered promiscuous mode
[  209.575802][T11464] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.579040][T11464] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.582252][T11464] bridge_slave_1: entered allmulticast mode
[  209.587063][T11464] bridge_slave_1: entered promiscuous mode
[  209.619377][T11464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.626592][T11464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.660348][T11464] team0: Port device team_slave_0 added
[  209.666051][T11464] team0: Port device team_slave_1 added
[  209.690885][T11464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.693693][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.704280][T11464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.709458][T11464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.711674][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.720466][T11464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.749108][T11464] hsr_slave_0: entered promiscuous mode
[  209.751790][T11464] hsr_slave_1: entered promiscuous mode
[  209.753872][T11464] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.756649][T11464] Cannot create hsr debugfs directory
[  210.283804][T11500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1629'.
[  210.471282][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.539879][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.600790][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.688554][ T5864] bridge_slave_1: left allmulticast mode
[  210.690912][ T5864] bridge_slave_1: left promiscuous mode
[  210.693409][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.700211][ T5864] bridge_slave_0: left allmulticast mode
[  210.702644][ T5864] bridge_slave_0: left promiscuous mode
[  210.705124][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.928817][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.933206][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.937679][ T5864] bond0 (unregistering): Released all slaves
[  211.163906][ T5864] hsr_slave_0: left promiscuous mode
[  211.167048][ T5864] hsr_slave_1: left promiscuous mode
[  211.169772][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.172809][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.177658][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.180757][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.193825][ T5864] veth1_macvtap: left promiscuous mode
[  211.198876][ T5864] veth0_macvtap: left promiscuous mode
[  211.201265][ T5864] veth1_vlan: left promiscuous mode
[  211.203521][ T5864] veth0_vlan: left promiscuous mode
[  211.367609][T11525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1636'.
[  211.381736][T11525] xt_hashlimit: max too large, truncated to 1048576
[  211.395414][ T5224] Bluetooth: hci1: command tx timeout
[  211.598476][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  211.633430][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  211.734020][T11540] xt_hashlimit: max too large, truncated to 1048576
[  212.015578][T11464] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  212.022421][T11464] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  212.038210][T11464] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  212.056530][T11464] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  212.144805][T11464] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.163032][T11464] 8021q: adding VLAN 0 to HW filter on device team0
[  212.174738][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.177769][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.191759][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.194796][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.390188][T11464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.405547][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'.
[  212.425077][T11464] veth0_vlan: entered promiscuous mode
[  212.433016][T11464] veth1_vlan: entered promiscuous mode
[  212.466742][T11464] veth0_macvtap: entered promiscuous mode
[  212.472582][T11464] veth1_macvtap: entered promiscuous mode
[  212.493871][T11464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.508469][T11464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.527298][T11464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.530886][T11464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.544598][T11464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.554763][T11464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.594895][T11564] syz_tun: entered allmulticast mode
[  212.609463][T11564] dvmrp8: entered allmulticast mode
[  212.626530][T11562] syz_tun: left allmulticast mode
[  212.672254][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.676937][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.700593][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.703867][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.960460][ T5224] Bluetooth: hci2: link tx timeout
[  212.963410][ T5224] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  212.969212][ T5224] Bluetooth: hci2: link tx timeout
[  212.971499][ T5224] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  213.172395][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'.
[  213.384037][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'.
[  213.392348][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'.
[  213.523213][T11610] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1655'.
[  213.536572][T11612] xt_hashlimit: invalid rate
[  213.584846][T11614] syzkaller1: entered promiscuous mode
[  213.587227][T11614] syzkaller1: entered allmulticast mode
[  213.816257][T11624] xt_hashlimit: max too large, truncated to 1048576
[  214.527949][T11628] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1660'.
[  214.531937][T11628] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1660'.
[  214.755812][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.780061][T11633] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1662'.
[  214.783725][T11633] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1662'.
[  214.795615][T11633] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1662'.
[  214.804681][T11633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1662'.
[  214.888057][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.985845][ T5224] Bluetooth: hci2: command 0x0405 tx timeout
[  215.798672][T11637] bridge4: entered promiscuous mode
[  215.800637][T11637] bridge4: entered allmulticast mode
[  215.810982][T11637] team0: Port device bridge4 added
[  215.871736][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.878805][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.882949][T11637] team0 (unregistering): Port device team_slave_0 removed
[  215.883025][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.889082][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.889085][T11637] team0 (unregistering): Port device team_slave_1 removed
[  215.894719][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.906950][T11637] team0 (unregistering): Port device bridge4 removed
[  216.034068][T11643] chnl_net:caif_netlink_parms(): no params data found
[  216.085417][T11643] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.088072][T11643] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.090630][T11643] bridge_slave_0: entered allmulticast mode
[  216.093551][T11643] bridge_slave_0: entered promiscuous mode
[  216.098017][T11643] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.100410][T11643] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.102872][T11643] bridge_slave_1: entered allmulticast mode
[  216.106114][T11643] bridge_slave_1: entered promiscuous mode
[  216.124461][T11643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.129299][T11643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.152146][T11643] team0: Port device team_slave_0 added
[  216.157002][T11643] team0: Port device team_slave_1 added
[  216.182447][T11643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.189799][T11643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.201829][T11643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.208397][T11643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.211215][T11643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.222342][T11643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.268206][T11643] hsr_slave_0: entered promiscuous mode
[  216.270622][T11643] hsr_slave_1: entered promiscuous mode
[  216.272800][T11643] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.275491][T11643] Cannot create hsr debugfs directory
[  216.738492][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.778730][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.825482][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.960423][   T12] bridge_slave_1: left allmulticast mode
[  216.962718][   T12] bridge_slave_1: left promiscuous mode
[  216.965096][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.973954][   T12] bridge_slave_0: left allmulticast mode
[  216.978847][   T12] bridge_slave_0: left promiscuous mode
[  216.981190][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.072379][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[  217.389406][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.396046][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.402203][   T12] bond0 (unregistering): Released all slaves
[  217.748478][   T12] hsr_slave_0: left promiscuous mode
[  217.750615][   T12] hsr_slave_1: left promiscuous mode
[  217.754682][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.758476][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.761802][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.764702][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.779381][   T12] veth1_macvtap: left promiscuous mode
[  217.781193][   T12] veth0_macvtap: left promiscuous mode
[  217.783327][   T12] veth1_vlan: left promiscuous mode
[  217.788116][   T12] veth0_vlan: left promiscuous mode
[  217.945479][ T5842] Bluetooth: hci1: command tx timeout
[  218.170776][   T12] team0 (unregistering): Port device team_slave_1 removed
[  218.203306][   T12] team0 (unregistering): Port device team_slave_0 removed
[  218.508909][T11677] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  218.578088][T11643] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  218.584684][T11643] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  218.593226][T11643] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  218.609397][T11643] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  218.742380][T11643] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.766431][T11643] 8021q: adding VLAN 0 to HW filter on device team0
[  218.775051][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.778133][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.790603][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.793600][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.000833][T11643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.043438][T11643] veth0_vlan: entered promiscuous mode
[  219.052068][T11643] veth1_vlan: entered promiscuous mode
[  219.077269][T11643] veth0_macvtap: entered promiscuous mode
[  219.082665][T11643] veth1_macvtap: entered promiscuous mode
[  219.107948][T11643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.117404][T11643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.117418][T11710] delete_channel: no stack
[  219.125518][T11643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.129176][T11643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.132806][T11643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.136697][T11643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.238433][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.241535][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.270941][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.274126][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.407973][T11715] syzkaller0: entered promiscuous mode
[  219.410285][T11715] syzkaller0: entered allmulticast mode
[  219.435722][T11715] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  219.711905][T11729] netlink: 'syz.4.1683': attribute type 13 has an invalid length.
[  219.715097][T11729] netlink: 'syz.4.1683': attribute type 17 has an invalid length.
[  221.151658][T11750] __nla_validate_parse: 2 callbacks suppressed
[  221.151672][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'.
[  221.480673][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.567344][T11771] netlink: 'syz.3.1695': attribute type 1 has an invalid length.
[  222.572726][T11771] netlink: 'syz.3.1695': attribute type 10 has an invalid length.
[  222.661411][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.691863][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  222.696981][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  222.700525][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  222.706615][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  222.712717][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  222.738068][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.738912][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  222.749238][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  222.803823][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.951676][T11775] chnl_net:caif_netlink_parms(): no params data found
[  223.007127][   T12] bridge_slave_1: left allmulticast mode
[  223.009565][   T12] bridge_slave_1: left promiscuous mode
[  223.013298][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.020545][   T12] bridge_slave_0: left allmulticast mode
[  223.022943][   T12] bridge_slave_0: left promiscuous mode
[  223.028546][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.387576][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.393881][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.403064][   T12] bond0 (unregistering): Released all slaves
[  223.517563][T11775] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.520554][T11775] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.536085][T11775] bridge_slave_0: entered allmulticast mode
[  223.538947][T11792] blkio.reset_stats is deprecated
[  223.547691][T11775] bridge_slave_0: entered promiscuous mode
[  223.580610][T11775] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.583282][T11775] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.587752][T11775] bridge_slave_1: entered allmulticast mode
[  223.592384][T11775] bridge_slave_1: entered promiscuous mode
[  223.631258][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.666475][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.698490][T11775] team0: Port device team_slave_0 added
[  223.702942][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'.
[  223.711007][T11775] team0: Port device team_slave_1 added
[  223.732546][   T12] hsr_slave_0: left promiscuous mode
[  223.734829][   T12] hsr_slave_1: left promiscuous mode
[  223.737368][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.740257][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.743265][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.746571][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.761203][   T12] veth1_macvtap: left promiscuous mode
[  223.763105][   T12] veth0_macvtap: left promiscuous mode
[  223.769482][   T12] veth1_vlan: left promiscuous mode
[  223.773587][   T12] veth0_vlan: left promiscuous mode
[  224.213229][   T12] team0 (unregistering): Port device team_slave_1 removed
[  224.234314][   T12] team0 (unregistering): Port device team_slave_0 removed
[  224.505569][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.507908][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.516824][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.521562][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.523917][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.539156][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.593233][T11775] hsr_slave_0: entered promiscuous mode
[  224.595819][T11775] hsr_slave_1: entered promiscuous mode
[  224.602016][T11775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.604749][T11775] Cannot create hsr debugfs directory
[  224.654851][T11820] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  224.745494][ T5838] Bluetooth: hci1: command tx timeout
[  224.852492][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'.
[  225.030858][T11775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  225.041205][T11775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  225.048151][T11775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  225.054114][T11775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  225.124019][T11775] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.140945][T11775] 8021q: adding VLAN 0 to HW filter on device team0
[  225.150510][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.153524][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.167461][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.170505][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.295001][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.320804][T11775] veth0_vlan: entered promiscuous mode
[  225.327027][T11775] veth1_vlan: entered promiscuous mode
[  225.341266][T11775] veth0_macvtap: entered promiscuous mode
[  225.344963][T11775] veth1_macvtap: entered promiscuous mode
[  225.356685][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.363401][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.375445][T11775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.381017][T11775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.384806][T11775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.389860][T11775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.446611][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.449722][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.464454][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.469314][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.691446][T11851] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma?
[  226.510832][T11885] syzkaller1: entered promiscuous mode
[  226.512923][T11885] syzkaller1: entered allmulticast mode
[  226.523972][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'.
[  226.643859][T11896] ip6_vti0: entered promiscuous mode
[  226.757723][T11896] netlink: 'syz.3.1728': attribute type 9 has an invalid length.
[  226.761077][T11896] netlink: 166276 bytes leftover after parsing attributes in process `syz.3.1728'.
[  226.765119][T11896] openvswitch: netlink: Message has 5 unknown bytes.
[  226.802707][T11908] xt_ecn: cannot match TCP bits for non-tcp packets
[  226.817058][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'.
[  226.820898][T11908] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1732'.
[  226.824798][T11908] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  226.833032][T11908] xt_hashlimit: max too large, truncated to 1048576
[  226.872634][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'.
[  226.876620][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'.
[  227.420869][T11895] ip6_vti0: left promiscuous mode
[  227.503164][   T33] audit: type=1107 audit(1752187039.108:2): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  227.881401][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.080646][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  229.084150][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  229.087956][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  229.092620][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  229.099015][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  229.246995][T11958] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1748'.
[  229.250511][T11958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.336373][T11945] chnl_net:caif_netlink_parms(): no params data found
[  229.430207][T11945] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.433369][T11945] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.438306][T11945] bridge_slave_0: entered allmulticast mode
[  229.442242][T11945] bridge_slave_0: entered promiscuous mode
[  229.447469][T11966] syzkaller0: mtu greater than device maximum
[  229.450621][T11945] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.453033][T11945] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.458426][T11945] bridge_slave_1: entered allmulticast mode
[  229.462912][T11945] bridge_slave_1: entered promiscuous mode
[  229.483491][T11945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.489988][T11945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.513006][T11945] team0: Port device team_slave_0 added
[  229.517616][T11945] team0: Port device team_slave_1 added
[  229.537211][T11945] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.539733][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.549888][T11945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.554737][T11945] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.557822][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.567105][T11945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.595317][T11945] hsr_slave_0: entered promiscuous mode
[  229.597810][T11945] hsr_slave_1: entered promiscuous mode
[  229.600077][T11945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.603231][T11945] Cannot create hsr debugfs directory
[  229.692339][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.740216][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.810013][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.900474][ T5863] bridge_slave_1: left allmulticast mode
[  229.902883][ T5863] bridge_slave_1: left promiscuous mode
[  229.905125][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.910165][ T5863] bridge_slave_0: left allmulticast mode
[  229.912363][ T5863] bridge_slave_0: left promiscuous mode
[  229.914386][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.210482][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.216123][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.220283][ T5863] bond0 (unregistering): Released all slaves
[  230.532718][ T5863] hsr_slave_0: left promiscuous mode
[  230.537248][ T5863] hsr_slave_1: left promiscuous mode
[  230.540139][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.543276][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.554209][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.557613][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.573776][ T5863] veth1_macvtap: left promiscuous mode
[  230.576392][ T5863] veth0_macvtap: left promiscuous mode
[  230.578832][ T5863] veth1_vlan: left promiscuous mode
[  230.581158][ T5863] veth0_vlan: left promiscuous mode
[  230.637160][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'.
[  231.009817][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  231.044370][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  231.149197][ T5838] Bluetooth: hci1: command tx timeout
[  231.541215][T11945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  231.547987][T11945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  231.567010][T12004] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  231.577945][T11945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  231.594884][T11945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  231.717156][T11945] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.741550][T11945] 8021q: adding VLAN 0 to HW filter on device team0
[  231.757390][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.759921][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.776137][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.778961][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.880599][T11945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.913876][T11945] veth0_vlan: entered promiscuous mode
[  231.925391][T11945] veth1_vlan: entered promiscuous mode
[  231.952046][T11945] veth0_macvtap: entered promiscuous mode
[  231.960327][T11945] veth1_macvtap: entered promiscuous mode
[  231.976540][T11945] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.986950][T11945] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.994344][T11945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.000462][T11945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.004047][T11945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.007923][T11945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.059639][ T6106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.067355][ T6106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.086312][ T1590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.089235][ T1590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.554173][T12028] 8021q: adding VLAN 0 to HW filter on device bond1
[  232.568541][T12028] netlink: 'syz.3.1765': attribute type 1 has an invalid length.
[  232.573036][T12028] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1765'.
[  232.727207][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'.
[  232.731004][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'.
[  232.880277][T12046] bridge1: entered promiscuous mode
[  232.891798][T12046] bridge2: entered promiscuous mode
[  232.903014][T12046] bridge3: entered promiscuous mode
[  232.917972][T12046] bridge4: entered promiscuous mode
[  232.936501][T12046] bridge5: entered promiscuous mode
[  233.843436][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.239941][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.244904][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.251679][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.258395][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.263332][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.429745][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.481678][T12083] chnl_net:caif_netlink_parms(): no params data found
[  235.543250][T12083] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.546932][T12083] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.549958][T12083] bridge_slave_0: entered allmulticast mode
[  235.553286][T12083] bridge_slave_0: entered promiscuous mode
[  235.557500][T12083] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.560526][T12083] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.563509][T12083] bridge_slave_1: entered allmulticast mode
[  235.567820][T12083] bridge_slave_1: entered promiscuous mode
[  235.583146][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.622082][T12083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.628350][T12083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.656532][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.679312][T12083] team0: Port device team_slave_0 added
[  235.685298][T12083] team0: Port device team_slave_1 added
[  235.716423][T12083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.719202][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.733504][T12083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.740161][T12083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.743121][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.752204][T12083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.794286][T12083] hsr_slave_0: entered promiscuous mode
[  235.798655][T12083] hsr_slave_1: entered promiscuous mode
[  235.801042][T12083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.803791][T12083] Cannot create hsr debugfs directory
[  235.833784][ T5863] bridge_slave_1: left allmulticast mode
[  235.836748][ T5863] bridge_slave_1: left promiscuous mode
[  235.838801][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.842741][ T5863] bridge_slave_0: left allmulticast mode
[  235.844736][ T5863] bridge_slave_0: left promiscuous mode
[  235.847207][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.111330][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.116267][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.121947][ T5863] bond0 (unregistering): Released all slaves
[  236.369638][ T5863] hsr_slave_0: left promiscuous mode
[  236.372004][ T5863] hsr_slave_1: left promiscuous mode
[  236.374112][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.378573][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.381415][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.383801][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.400030][ T5863] veth1_macvtap: left promiscuous mode
[  236.402288][ T5863] veth0_macvtap: left promiscuous mode
[  236.404293][ T5863] veth1_vlan: left promiscuous mode
[  236.406416][ T5863] veth0_vlan: left promiscuous mode
[  236.433068][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'.
[  236.800209][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  236.836141][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  237.305654][ T5842] Bluetooth: hci1: command tx timeout
[  237.357090][T12083] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  237.363722][T12083] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  237.369048][T12083] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  237.374276][T12083] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  237.437857][T12083] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.450759][T12083] 8021q: adding VLAN 0 to HW filter on device team0
[  237.457239][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.460168][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.471791][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.474780][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.632094][T12083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.658257][T12083] veth0_vlan: entered promiscuous mode
[  237.663320][T12083] veth1_vlan: entered promiscuous mode
[  237.683492][T12083] veth0_macvtap: entered promiscuous mode
[  237.689960][T12083] veth1_macvtap: entered promiscuous mode
[  237.699656][T12083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.711196][T12083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.717363][T12083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.720126][T12083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.722874][T12083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.728467][T12083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.773681][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.781419][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.806259][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.808745][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.106454][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'.
[  238.138744][T12151] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1801'.
[  238.171151][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'.
[  238.613757][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'.
[  238.617162][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'.
[  239.900144][T12185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1811'.
[  239.904981][T12185] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1811'.
[  239.964560][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.241448][T12191] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1812'.
[  241.373813][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'.
[  241.385994][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'.
[  241.394235][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  241.398814][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  241.402622][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  241.407607][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  241.411097][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.541736][T12204] chnl_net:caif_netlink_parms(): no params data found
[  241.611486][T12204] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.614643][T12204] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.618334][T12204] bridge_slave_0: entered allmulticast mode
[  241.622259][T12204] bridge_slave_0: entered promiscuous mode
[  241.627616][T12204] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.630587][T12204] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.633624][T12204] bridge_slave_1: entered allmulticast mode
[  241.638215][T12204] bridge_slave_1: entered promiscuous mode
[  241.665428][T12204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.670044][T12204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.699593][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.718835][T12204] team0: Port device team_slave_0 added
[  241.722842][T12204] team0: Port device team_slave_1 added
[  241.742278][T12204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.744625][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.757921][T12204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.773322][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.780258][T12204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.782884][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.792053][T12204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.821472][T12204] hsr_slave_0: entered promiscuous mode
[  241.824041][T12204] hsr_slave_1: entered promiscuous mode
[  241.829157][T12204] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.831960][T12204] Cannot create hsr debugfs directory
[  241.847662][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.965083][ T5864] bridge_slave_1: left allmulticast mode
[  241.967338][ T5864] bridge_slave_1: left promiscuous mode
[  241.969341][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.972958][ T5864] bridge_slave_0: left allmulticast mode
[  241.974851][ T5864] bridge_slave_0: left promiscuous mode
[  241.977213][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.296281][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.305006][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.310730][ T5864] bond0 (unregistering): Released all slaves
[  242.352943][T12225] netlink: 'syz.3.1818': attribute type 4 has an invalid length.
[  242.367817][T12218] netlink: 'syz.3.1818': attribute type 4 has an invalid length.
[  242.600925][ T5864] hsr_slave_0: left promiscuous mode
[  242.604049][ T5864] hsr_slave_1: left promiscuous mode
[  242.608232][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.611647][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.617325][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.622128][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.653412][ T5864] veth1_macvtap: left promiscuous mode
[  242.659736][ T5864] veth0_macvtap: left promiscuous mode
[  242.662395][ T5864] veth1_vlan: left promiscuous mode
[  242.664859][ T5864] veth0_vlan: left promiscuous mode
[  243.074372][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  243.112073][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  243.468938][ T5842] Bluetooth: hci1: command tx timeout
[  243.550275][T12252] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 3, id = 0
[  243.598361][T12204] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  243.618775][T12204] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  243.628925][T12204] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  243.634192][T12204] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  243.686437][T12261] __nla_validate_parse: 2 callbacks suppressed
[  243.686449][T12261] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1825'.
[  243.693650][T12261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1825'.
[  243.706098][T12204] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.716160][T12204] 8021q: adding VLAN 0 to HW filter on device team0
[  243.721002][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.723308][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.737453][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.739944][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.863941][T12204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.889404][T12204] veth0_vlan: entered promiscuous mode
[  243.896785][T12204] veth1_vlan: entered promiscuous mode
[  243.911668][T12204] veth0_macvtap: entered promiscuous mode
[  243.915716][T12204] veth1_macvtap: entered promiscuous mode
[  243.930965][T12204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.937068][T12204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.941742][T12204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.944507][T12204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.948458][T12204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.951528][T12204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.994015][ T6106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.000576][ T6106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.022563][ T1871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.027252][ T1871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.648218][T12281] syzkaller1: entered promiscuous mode
[  244.650807][T12281] syzkaller1: entered allmulticast mode
[  244.780622][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'.
[  245.374183][T12293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1833'.
[  245.402645][T12293] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.410984][T12293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.411636][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.145867][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  247.816753][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'.
[  247.819673][T12324] netlink: 'syz.3.1842': attribute type 1 has an invalid length.
[  247.822145][T12324] netlink: 'syz.3.1842': attribute type 1 has an invalid length.
[  247.936298][T12333] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  247.991173][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  247.994496][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  248.000641][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  248.004337][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  248.008922][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  248.093870][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.126716][T12342] netlink: 'syz.4.1846': attribute type 1 has an invalid length.
[  248.196206][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.268731][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.287943][T12338] chnl_net:caif_netlink_parms(): no params data found
[  248.359351][T12338] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.361777][T12338] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.364082][T12338] bridge_slave_0: entered allmulticast mode
[  248.367115][T12338] bridge_slave_0: entered promiscuous mode
[  248.382517][T12338] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.384872][T12338] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.388150][T12338] bridge_slave_1: entered allmulticast mode
[  248.390872][T12338] bridge_slave_1: entered promiscuous mode
[  248.393496][ T5863] bridge_slave_1: left allmulticast mode
[  248.395873][ T5863] bridge_slave_1: left promiscuous mode
[  248.397818][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.401478][ T5863] bridge_slave_0: left allmulticast mode
[  248.403355][ T5863] bridge_slave_0: left promiscuous mode
[  248.406005][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.639380][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.644509][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.649391][ T5863] bond0 (unregistering): Released all slaves
[  248.681665][T12338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.688814][T12338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.728442][T12338] team0: Port device team_slave_0 added
[  248.750015][T12338] team0: Port device team_slave_1 added
[  248.770509][T12338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.773045][T12338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.781837][T12338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.795591][T12338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.800569][T12338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.826604][T12338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.862690][T12363] syzkaller1: entered promiscuous mode
[  248.864637][T12363] syzkaller1: entered allmulticast mode
[  248.887682][T12338] hsr_slave_0: entered promiscuous mode
[  248.890112][T12338] hsr_slave_1: entered promiscuous mode
[  248.892332][T12338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.894795][T12338] Cannot create hsr debugfs directory
[  248.941007][ T5863] hsr_slave_0: left promiscuous mode
[  248.943861][ T5863] hsr_slave_1: left promiscuous mode
[  248.950013][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.953194][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.958037][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.961121][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.980349][ T5863] veth1_macvtap: left promiscuous mode
[  248.983860][ T5863] veth0_macvtap: left promiscuous mode
[  248.987858][ T5863] veth1_vlan: left promiscuous mode
[  248.990138][ T5863] veth0_vlan: left promiscuous mode
[  249.292665][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  249.314561][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  249.722107][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'.
[  249.785504][ T5842] Bluetooth: hci2: command 0x0405 tx timeout
[  249.967950][T12338] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  249.975970][T12338] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  249.980045][T12338] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  249.985125][T12338] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  250.025523][ T5842] Bluetooth: hci1: command tx timeout
[  250.043680][T12338] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.056209][T12338] 8021q: adding VLAN 0 to HW filter on device team0
[  250.061633][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.064023][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.072498][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.074862][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.217161][T12338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.256597][T12338] veth0_vlan: entered promiscuous mode
[  250.264167][T12338] veth1_vlan: entered promiscuous mode
[  250.290136][T12338] veth0_macvtap: entered promiscuous mode
[  250.297542][T12338] veth1_macvtap: entered promiscuous mode
[  250.310848][T12338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.321681][T12338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.329379][T12338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.332183][T12338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.335681][T12338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.338578][T12338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.390629][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.393203][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.408799][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.412498][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.811641][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.914844][T12438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.920465][T12437] tipc: Resetting bearer <eth:syzkaller0>
[  252.908831][ T5884] tipc: Node number set to 2874638509
[  253.036625][T12437] tipc: Disabling bearer <eth:syzkaller0>
[  253.083625][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.564880][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.898519][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.976543][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'.
[  253.977930][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.979413][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'.
[  254.006065][T12444] netlink: 'syz.3.1871': attribute type 13 has an invalid length.
[  254.025224][T12444] netlink: 'syz.3.1871': attribute type 11 has an invalid length.
[  254.116194][ T5863] bridge_slave_1: left allmulticast mode
[  254.120233][ T5863] bridge_slave_1: left promiscuous mode
[  254.122753][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.137495][ T5863] bridge_slave_0: left allmulticast mode
[  254.139874][ T5863] bridge_slave_0: left promiscuous mode
[  254.142500][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.184829][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  254.204915][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  254.211499][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  254.214938][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  254.219067][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  254.404583][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.410036][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.413934][ T5863] bond0 (unregistering): Released all slaves
[  254.571014][T12475] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  254.603391][T12453] chnl_net:caif_netlink_parms(): no params data found
[  254.616918][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'.
[  254.656723][T12453] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.659283][T12453] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.661786][T12453] bridge_slave_0: entered allmulticast mode
[  254.664652][T12453] bridge_slave_0: entered promiscuous mode
[  254.683536][ T5863] hsr_slave_0: left promiscuous mode
[  254.691757][ T5863] hsr_slave_1: left promiscuous mode
[  254.693888][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.697049][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.699831][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.702350][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.713122][ T5863] veth1_macvtap: left promiscuous mode
[  254.715084][ T5863] veth0_macvtap: left promiscuous mode
[  254.717509][ T5863] veth1_vlan: left promiscuous mode
[  254.719388][ T5863] veth0_vlan: left promiscuous mode
[  255.034811][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  255.068355][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  255.316742][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.319402][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.409218][T12453] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.411812][T12453] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.414554][T12453] bridge_slave_1: entered allmulticast mode
[  255.419622][T12453] bridge_slave_1: entered promiscuous mode
[  255.452866][T12453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.469428][T12453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.513689][T12453] team0: Port device team_slave_0 added
[  255.519953][T12453] team0: Port device team_slave_1 added
[  255.563692][T12453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.568043][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.578071][T12453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.592902][T12453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.596001][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.604756][T12453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.637776][T12453] hsr_slave_0: entered promiscuous mode
[  255.640587][T12453] hsr_slave_1: entered promiscuous mode
[  255.643045][T12453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.646160][T12453] Cannot create hsr debugfs directory
[  255.954447][T12453] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  255.967120][T12453] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  255.979331][T12453] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  255.990915][T12453] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  256.003909][T12495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.015066][T12495] syzkaller0: entered promiscuous mode
[  256.018250][T12495] syzkaller0: entered allmulticast mode
[  256.068122][T12453] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.083153][T12453] 8021q: adding VLAN 0 to HW filter on device team0
[  256.091244][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.093812][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.102187][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.104635][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.150719][T12504] tipc: Resetting bearer <eth:syzkaller0>
[  256.190288][T12504] tipc: Disabling bearer <eth:syzkaller0>
[  256.261707][T12453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.266340][ T5842] Bluetooth: hci1: command tx timeout
[  256.293234][T12453] veth0_vlan: entered promiscuous mode
[  256.299709][T12453] veth1_vlan: entered promiscuous mode
[  256.319209][T12453] veth0_macvtap: entered promiscuous mode
[  256.324254][T12453] veth1_macvtap: entered promiscuous mode
[  256.348581][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1885'.
[  256.363472][T12515] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.381392][T12453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.410073][T12453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.427006][T12453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.429784][T12453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.432602][T12453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.450979][T12453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.469588][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'.
[  256.479654][T12519] openvswitch: netlink: Duplicate or invalid key (type 0).
[  256.483234][T12519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.535380][ T1871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.544919][ T1871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.572913][ T1871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.576074][ T1871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.715063][T12533] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1892'.
[  257.317463][T12543] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  257.323080][T12542] netlink: 'syz.4.1894': attribute type 2 has an invalid length.
[  257.722596][T12549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1896'.
[  257.724628][T12550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1896'.
[  258.292834][ T5709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.831318][ T5709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.896300][ T5709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.998198][ T5709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.054338][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  260.059100][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  260.061930][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  260.064847][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  260.067827][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  260.223041][ T5709] bridge_slave_1: left allmulticast mode
[  260.224882][ T5709] bridge_slave_1: left promiscuous mode
[  260.230085][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.236218][ T5709] bridge_slave_0: left allmulticast mode
[  260.238110][ T5709] bridge_slave_0: left promiscuous mode
[  260.240051][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.465800][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'.
[  260.469342][T12580] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  260.472109][T12580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.560880][T12580] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1904'.
[  260.697764][ T5709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.702757][ T5709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.710072][ T5709] bond0 (unregistering): Released all slaves
[  260.879332][T12565] chnl_net:caif_netlink_parms(): no params data found
[  260.971219][T12594] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1907'.
[  261.030478][T12565] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.035369][T12565] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.038463][T12565] bridge_slave_0: entered allmulticast mode
[  261.042282][T12565] bridge_slave_0: entered promiscuous mode
[  261.051903][T12565] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.059453][T12565] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.062394][T12565] bridge_slave_1: entered allmulticast mode
[  261.065370][T12565] bridge_slave_1: entered promiscuous mode
[  261.092475][T12599] netlink: 'syz.3.1908': attribute type 2 has an invalid length.
[  261.109137][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.114728][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.152033][ T5709] hsr_slave_0: left promiscuous mode
[  261.157643][ T5709] hsr_slave_1: left promiscuous mode
[  261.164863][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.173777][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.179416][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.182000][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.208693][ T5709] veth1_macvtap: left promiscuous mode
[  261.211151][ T5709] veth0_macvtap: left promiscuous mode
[  261.213513][ T5709] veth1_vlan: left promiscuous mode
[  261.226060][ T5709] veth0_vlan: left promiscuous mode
[  261.578635][ T5709] team0 (unregistering): Port device team_slave_1 removed
[  261.618870][ T5709] team0 (unregistering): Port device team_slave_0 removed
[  261.987744][T12565] team0: Port device team_slave_0 added
[  261.999051][T12565] team0: Port device team_slave_1 added
[  262.073155][T12565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.077859][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.106099][ T5838] Bluetooth: hci1: command tx timeout
[  262.109329][T12565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.117002][T12565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.127699][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.144098][T12565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.203013][T12565] hsr_slave_0: entered promiscuous mode
[  262.208875][T12565] hsr_slave_1: entered promiscuous mode
[  262.211771][T12565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  262.215818][T12565] Cannot create hsr debugfs directory
[  262.604532][T12565] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  262.620172][T12565] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  262.624762][T12565] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  262.631284][T12565] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  262.680780][T12565] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.697557][T12565] 8021q: adding VLAN 0 to HW filter on device team0
[  262.704025][ T1590] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.706821][ T1590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.721519][ T1590] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.728493][ T1590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.852248][T12641] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  262.941316][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.957591][T12614] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  263.009026][T12565] veth0_vlan: entered promiscuous mode
[  263.023074][T12565] veth1_vlan: entered promiscuous mode
[  263.060243][T12565] veth0_macvtap: entered promiscuous mode
[  263.064398][T12654] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  263.066947][T12565] veth1_macvtap: entered promiscuous mode
[  263.084377][T12565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.097377][T12565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.105024][T12565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.118031][T12565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.121800][T12565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.127304][T12565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.228718][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.232657][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.278013][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.281353][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.541340][T12684] netlink: 'syz.4.1935': attribute type 1 has an invalid length.
[  263.544848][T12684] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1935'.
[  263.950211][T12692] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1938'.
[  264.185681][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  264.562698][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'.
[  264.565789][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'.
[  264.946796][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1946'.
[  264.950798][T12717] nbd: must specify a device to reconfigure
[  264.997901][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.459248][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.522916][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.594563][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.663711][ T5863] bridge_slave_1: left allmulticast mode
[  266.672483][ T5863] bridge_slave_1: left promiscuous mode
[  266.674492][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.688691][ T5863] bridge_slave_0: left allmulticast mode
[  266.690582][ T5863] bridge_slave_0: left promiscuous mode
[  266.692615][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.933849][T12730] x_tables: duplicate underflow at hook 3
[  266.949223][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  266.953291][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  266.957006][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  266.961128][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  266.964616][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.051777][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.056923][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.061609][ T5863] bond0 (unregistering): Released all slaves
[  267.190970][T12740] netlink: 'syz.3.1950': attribute type 1 has an invalid length.
[  267.243847][T12740] 8021q: adding VLAN 0 to HW filter on device bond2
[  267.275037][T12742] 8021q: adding VLAN 0 to HW filter on device batadv1
[  267.281452][T12742] bond2: (slave batadv1): making interface the new active one
[  267.286233][T12742] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  267.400038][ T5863] hsr_slave_0: left promiscuous mode
[  267.409457][ T5863] hsr_slave_1: left promiscuous mode
[  267.412818][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.417720][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.421691][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.424758][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.453701][ T5863] veth1_macvtap: left promiscuous mode
[  267.456660][ T5863] veth0_macvtap: left promiscuous mode
[  267.459234][ T5863] veth1_vlan: left promiscuous mode
[  267.461697][ T5863] veth0_vlan: left promiscuous mode
[  267.492079][T12754] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1953'.
[  267.963019][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  267.989350][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  268.262381][T12734] chnl_net:caif_netlink_parms(): no params data found
[  268.279401][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'.
[  268.410906][T12772] netlink: 'syz.3.1957': attribute type 2 has an invalid length.
[  268.413985][T12772] netlink: 'syz.3.1957': attribute type 1 has an invalid length.
[  268.419534][T12772] netlink: 'syz.3.1957': attribute type 1 has an invalid length.
[  268.448479][T12734] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.451704][T12734] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.454849][T12734] bridge_slave_0: entered allmulticast mode
[  268.460656][T12734] bridge_slave_0: entered promiscuous mode
[  268.462101][T12775] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1958'.
[  268.464446][T12734] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.471813][T12734] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.474847][T12734] bridge_slave_1: entered allmulticast mode
[  268.481528][T12734] bridge_slave_1: entered promiscuous mode
[  268.524355][T12734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.534991][T12734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.560840][T12734] team0: Port device team_slave_0 added
[  268.570260][T12734] team0: Port device team_slave_1 added
[  268.602481][T12734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.607473][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.617020][T12734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.629819][T12734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.632784][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.643035][T12734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.681597][T12734] hsr_slave_0: entered promiscuous mode
[  268.684550][T12734] hsr_slave_1: entered promiscuous mode
[  268.689762][T12734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.693090][T12734] Cannot create hsr debugfs directory
[  268.771272][T11084] hid-generic 0005:10CF:0007.0002: collection stack underflow
[  268.774315][T11084] hid-generic 0005:10CF:0007.0002: item 0 0 0 12 parsing failed
[  268.778346][T11084] hid-generic 0005:10CF:0007.0002: probe with driver hid-generic failed with error -22
[  268.909275][T12791] netlink: 'syz.3.1964': attribute type 16 has an invalid length.
[  268.911975][T12791] netlink: 29350 bytes leftover after parsing attributes in process `syz.3.1964'.
[  268.987514][ T5842] Bluetooth: hci1: command tx timeout
[  269.043142][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'.
[  269.061667][T12796] vlan0: entered promiscuous mode
[  269.080159][T12796] block nbd0: Unsupported socket: shutdown callout must be supported.
[  269.104172][T12734] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  269.114043][T12734] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  269.121675][T12734] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  269.133163][T12734] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  269.183209][T12734] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.186471][T12734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.189903][T12734] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.193134][T12734] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.262882][T12734] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.306550][ T1871] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.313821][ T1871] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.328556][T12734] 8021q: adding VLAN 0 to HW filter on device team0
[  269.334362][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.336837][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.348228][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.351281][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.591895][T12734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.642859][T12734] veth0_vlan: entered promiscuous mode
[  269.654805][T12734] veth1_vlan: entered promiscuous mode
[  269.689570][T12734] veth0_macvtap: entered promiscuous mode
[  269.700203][T12734] veth1_macvtap: entered promiscuous mode
[  269.721471][T12734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.732676][T12734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.746146][T12734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.752369][T12734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.761476][T12734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.764326][T12734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.864797][ T1590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.868223][ T1590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.897269][ T1590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.901966][ T1590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.138839][T12787] ==================================================================
[  270.142323][T12787] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80
[  270.145393][T12787] Read of size 8 at addr ffff888115cb00b0 by task khidpd_10cf0007/12787
[  270.149790][T12787] 
[  270.150823][T12787] CPU: 1 UID: 0 PID: 12787 Comm: khidpd_10cf0007 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  270.150841][T12787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.150850][T12787] Call Trace:
[  270.150856][T12787]  <TASK>
[  270.150863][T12787]  dump_stack_lvl+0x189/0x250
[  270.150881][T12787]  ? __virt_addr_valid+0x1c8/0x5c0
[  270.150898][T12787]  ? rcu_is_watching+0x15/0xb0
[  270.150912][T12787]  ? __kasan_check_byte+0x12/0x40
[  270.150928][T12787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.150941][T12787]  ? rcu_is_watching+0x15/0xb0
[  270.150959][T12787]  ? lock_release+0x4b/0x3e0
[  270.150973][T12787]  ? __virt_addr_valid+0x1c8/0x5c0
[  270.150987][T12787]  ? __virt_addr_valid+0x4a5/0x5c0
[  270.151002][T12787]  print_report+0xd2/0x2b0
[  270.151014][T12787]  ? __mutex_lock+0x144/0xe80
[  270.151027][T12787]  kasan_report+0x118/0x150
[  270.151042][T12787]  ? __mutex_lock+0x144/0xe80
[  270.151056][T12787]  __mutex_lock+0x144/0xe80
[  270.151068][T12787]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.151109][T12787]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.151128][T12787]  ? rcu_is_watching+0x15/0xb0
[  270.151141][T12787]  ? l2cap_unregister_user+0x6a/0x1b0
[  270.151156][T12787]  ? __pfx___mutex_lock+0x10/0x10
[  270.151170][T12787]  ? __pfx___timer_delete_sync+0x10/0x10
[  270.151190][T12787]  l2cap_unregister_user+0x6a/0x1b0
[  270.151203][T12787]  hidp_session_thread+0x3c9/0x410
[  270.151217][T12787]  ? __pfx_hidp_session_thread+0x10/0x10
[  270.151228][T12787]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.151244][T12787]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  270.151257][T12787]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  270.151269][T12787]  ? __kthread_parkme+0x7b/0x200
[  270.151284][T12787]  ? __kthread_parkme+0x1a1/0x200
[  270.151300][T12787]  kthread+0x711/0x8a0
[  270.151316][T12787]  ? __pfx_hidp_session_thread+0x10/0x10
[  270.151327][T12787]  ? __pfx_kthread+0x10/0x10
[  270.151343][T12787]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.151359][T12787]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.151369][T12787]  ? __pfx_kthread+0x10/0x10
[  270.151385][T12787]  ret_from_fork+0x3fc/0x770
[  270.151399][T12787]  ? __pfx_ret_from_fork+0x10/0x10
[  270.151412][T12787]  ? __switch_to_asm+0x39/0x70
[  270.151427][T12787]  ? __switch_to_asm+0x33/0x70
[  270.151440][T12787]  ? __pfx_kthread+0x10/0x10
[  270.151455][T12787]  ret_from_fork_asm+0x1a/0x30
[  270.151475][T12787]  </TASK>
[  270.151479][T12787] 
[  270.251316][T12787] Allocated by task 12734:
[  270.253266][T12787]  kasan_save_track+0x3e/0x80
[  270.255295][T12787]  __kasan_kmalloc+0x93/0xb0
[  270.257197][T12787]  __kmalloc_noprof+0x27a/0x4f0
[  270.259119][T12787]  hci_alloc_dev_priv+0x28/0x2040
[  270.261237][T12787]  vhci_create_device+0x120/0x6e0
[  270.263404][T12787]  vhci_write+0x3ce/0x4a0
[  270.265294][T12787]  vfs_write+0x54b/0xa90
[  270.267128][T12787]  ksys_write+0x145/0x250
[  270.268906][T12787]  do_syscall_64+0xfa/0x3b0
[  270.270856][T12787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.273275][T12787] 
[  270.274335][T12787] Freed by task 12734:
[  270.276128][T12787]  kasan_save_track+0x3e/0x80
[  270.278175][T12787]  kasan_save_free_info+0x46/0x50
[  270.280295][T12787]  __kasan_slab_free+0x62/0x70
[  270.282377][T12787]  kfree+0x18e/0x440
[  270.284014][T12787]  bt_host_release+0x82/0x90
[  270.285954][T12787]  device_release+0x9c/0x1c0
[  270.287964][T12787]  kobject_put+0x22b/0x480
[  270.289899][T12787]  vhci_release+0x88/0xd0
[  270.291798][T12787]  __fput+0x44c/0xa70
[  270.293517][T12787]  task_work_run+0x1d4/0x260
[  270.295529][T12787]  do_exit+0x6b5/0x22e0
[  270.297348][T12787]  do_group_exit+0x21c/0x2d0
[  270.299357][T12787]  __x64_sys_exit_group+0x3f/0x40
[  270.301563][T12787]  x64_sys_call+0x21ba/0x21c0
[  270.303612][T12787]  do_syscall_64+0xfa/0x3b0
[  270.305609][T12787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.308176][T12787] 
[  270.309240][T12787] Last potentially related work creation:
[  270.311662][T12787]  kasan_save_stack+0x3e/0x60
[  270.313631][T12787]  kasan_record_aux_stack+0xbd/0xd0
[  270.315891][T12787]  insert_work+0x3d/0x330
[  270.317707][T12787]  __queue_work+0xbd9/0xfe0
[  270.319614][T12787]  queue_work_on+0x181/0x270
[  270.321613][T12787]  process_scheduled_works+0xae1/0x17b0
[  270.323886][T12787]  worker_thread+0x8a0/0xda0
[  270.325857][T12787]  kthread+0x711/0x8a0
[  270.327652][T12787]  ret_from_fork+0x3fc/0x770
[  270.329668][T12787]  ret_from_fork_asm+0x1a/0x30
[  270.331760][T12787] 
[  270.332828][T12787] Second to last potentially related work creation:
[  270.335662][T12787]  kasan_save_stack+0x3e/0x60
[  270.337657][T12787]  kasan_record_aux_stack+0xbd/0xd0
[  270.339858][T12787]  insert_work+0x3d/0x330
[  270.341742][T12787]  __queue_work+0xcfc/0xfe0
[  270.343718][T12787]  call_timer_fn+0x17e/0x5f0
[  270.345699][T12787]  __run_timer_base+0x646/0x860
[  270.347714][T12787]  run_timer_softirq+0xb7/0x180
[  270.349748][T12787]  handle_softirqs+0x286/0x870
[  270.351689][T12787]  __irq_exit_rcu+0xca/0x1f0
[  270.353636][T12787]  irq_exit_rcu+0x9/0x30
[  270.355417][T12787]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  270.357694][T12787]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.360129][T12787] 
[  270.361175][T12787] The buggy address belongs to the object at ffff888115cb0000
[  270.361175][T12787]  which belongs to the cache kmalloc-8k of size 8192
[  270.366713][T12787] The buggy address is located 176 bytes inside of
[  270.366713][T12787]  freed 8192-byte region [ffff888115cb0000, ffff888115cb2000)
[  270.372463][T12787] 
[  270.373493][T12787] The buggy address belongs to the physical page:
[  270.376142][T12787] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888115cb4000 pfn:0x115cb0
[  270.380216][T12787] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  270.383542][T12787] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  270.386963][T12787] page_type: f5(slab)
[  270.388643][T12787] raw: 057ff00000000240 ffff88801a442280 ffffea0004418a10 ffffea0004755a10
[  270.392289][T12787] raw: ffff888115cb4000 0000000000020001 00000000f5000000 0000000000000000
[  270.395675][T12787] head: 057ff00000000240 ffff88801a442280 ffffea0004418a10 ffffea0004755a10
[  270.399111][T12787] head: ffff888115cb4000 0000000000020001 00000000f5000000 0000000000000000
[  270.402685][T12787] head: 057ff00000000003 ffffea0004572c01 00000000ffffffff 00000000ffffffff
[  270.406327][T12787] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  270.409958][T12787] page dumped because: kasan: bad access detected
[  270.412512][T12787] page_owner tracks the page as allocated
[  270.414326][T12787] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 12438, tgid 12437 (syz.4.1869), ts 251900658052, free_ts 246403865809
[  270.421137][T12787]  post_alloc_hook+0x240/0x2a0
[  270.423117][T12787]  get_page_from_freelist+0x21e4/0x22c0
[  270.425421][T12787]  __alloc_frozen_pages_noprof+0x181/0x370
[  270.427883][T12787]  alloc_pages_mpol+0x232/0x4a0
[  270.430002][T12787]  allocate_slab+0x8a/0x3b0
[  270.431968][T12787]  ___slab_alloc+0xbfc/0x1480
[  270.433922][T12787]  __kvmalloc_node_noprof+0x429/0x5f0
[  270.436163][T12787]  pfifo_fast_init+0x238/0x6b0
[  270.438131][T12787]  qdisc_create_dflt+0x13b/0x4e0
[  270.440293][T12787]  mq_init+0x2dc/0x660
[  270.442064][T12787]  qdisc_create_dflt+0x13b/0x4e0
[  270.444145][T12787]  dev_activate+0x1ce/0x1150
[  270.446179][T12787]  __dev_open+0x69c/0x880
[  270.448116][T12787]  __dev_change_flags+0x1ea/0x6d0
[  270.450302][T12787]  netif_change_flags+0x88/0x1a0
[  270.452515][T12787]  dev_change_flags+0x130/0x260
[  270.454660][T12787] page last free pid 12188 tgid 12188 stack trace:
[  270.457471][T12787]  __free_frozen_pages+0xc71/0xe70
[  270.459635][T12787]  vfree+0x25a/0x400
[  270.461290][T12787]  kcov_close+0x28/0x50
[  270.462931][T12787]  __fput+0x44c/0xa70
[  270.464543][T12787]  task_work_run+0x1d4/0x260
[  270.466491][T12787]  do_exit+0x6b5/0x22e0
[  270.468150][T12787]  do_group_exit+0x21c/0x2d0
[  270.470121][T12787]  __x64_sys_exit_group+0x3f/0x40
[  270.472232][T12787]  x64_sys_call+0x21ba/0x21c0
[  270.474239][T12787]  do_syscall_64+0xfa/0x3b0
[  270.476173][T12787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.478701][T12787] 
[  270.479742][T12787] Memory state around the buggy address:
[  270.482196][T12787]  ffff888115caff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  270.485624][T12787]  ffff888115cb0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.488934][T12787] >ffff888115cb0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.492319][T12787]                                      ^
[  270.494627][T12787]  ffff888115cb0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.497818][T12787]  ffff888115cb0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.501277][T12787] ==================================================================
[  270.506295][T12787] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  270.509413][T12787] CPU: 1 UID: 0 PID: 12787 Comm: khidpd_10cf0007 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  270.514983][T12787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.519151][T12787] Call Trace:
[  270.520621][T12787]  <TASK>
[  270.521935][T12787]  dump_stack_lvl+0x99/0x250
[  270.523975][T12787]  ? __asan_memcpy+0x40/0x70
[  270.525987][T12787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.528143][T12787]  ? __pfx__printk+0x10/0x10
[  270.530180][T12787]  panic+0x2db/0x790
[  270.531841][T12787]  ? __pfx_panic+0x10/0x10
[  270.533671][T12787]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  270.536193][T12787]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.538819][T12787]  ? print_memory_metadata+0x314/0x400
[  270.541210][T12787]  ? __mutex_lock+0x144/0xe80
[  270.543198][T12787]  check_panic_on_warn+0x89/0xb0
[  270.545345][T12787]  ? __mutex_lock+0x144/0xe80
[  270.547379][T12787]  end_report+0x78/0x160
[  270.549155][T12787]  kasan_report+0x129/0x150
[  270.551072][T12787]  ? __mutex_lock+0x144/0xe80
[  270.553149][T12787]  __mutex_lock+0x144/0xe80
[  270.555170][T12787]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.557715][T12787]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.560320][T12787]  ? rcu_is_watching+0x15/0xb0
[  270.562386][T12787]  ? l2cap_unregister_user+0x6a/0x1b0
[  270.564701][T12787]  ? __pfx___mutex_lock+0x10/0x10
[  270.566902][T12787]  ? __pfx___timer_delete_sync+0x10/0x10
[  270.569235][T12787]  l2cap_unregister_user+0x6a/0x1b0
[  270.571472][T12787]  hidp_session_thread+0x3c9/0x410
[  270.573691][T12787]  ? __pfx_hidp_session_thread+0x10/0x10
[  270.576118][T12787]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.578662][T12787]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  270.581372][T12787]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  270.584044][T12787]  ? __kthread_parkme+0x7b/0x200
[  270.586213][T12787]  ? __kthread_parkme+0x1a1/0x200
[  270.588401][T12787]  kthread+0x711/0x8a0
[  270.590197][T12787]  ? __pfx_hidp_session_thread+0x10/0x10
[  270.592629][T12787]  ? __pfx_kthread+0x10/0x10
[  270.594591][T12787]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.596860][T12787]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.599123][T12787]  ? __pfx_kthread+0x10/0x10
[  270.601175][T12787]  ret_from_fork+0x3fc/0x770
[  270.603200][T12787]  ? __pfx_ret_from_fork+0x10/0x10
[  270.605436][T12787]  ? __switch_to_asm+0x39/0x70
[  270.607530][T12787]  ? __switch_to_asm+0x33/0x70
[  270.609551][T12787]  ? __pfx_kthread+0x10/0x10
[  270.611468][T12787]  ret_from_fork_asm+0x1a/0x30
[  270.613398][T12787]  </TASK>
[  270.615398][T12787] Kernel Offset: disabled
[  270.617196][T12787] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:38:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000002 RCX=0000000000000003 RDX=0000000000000003
RSI=0000000000000004 RDI=ffff888021570000 RBP=0000000000000000 RSP=ffffc900031cf3f8
R8 =0000000000000000 R9 =ffffffff8210b8a9 R10=dffffc0000000000 R11=fffff94000184971
R12=0000000000000003 R13=0000000000000001 R14=ffff888021570b68 R15=ffff888021570b60
RIP=ffffffff819e3a7c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd05d1a86c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffb95f3820 CR3=0000000112b0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd05c411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002d5f370
R8 =ffff888108c10237 R9 =1ffff11021182046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af790a R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d8a7c CR3=000000003554e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=c5ca250000008000 0000a00000000000
XMM04=549f5d8c44bf1829 9076aaf08a3c6d21 XMM05=59549f5d8c44bf18 299076aaf08a3c6d
XMM06=21c5ca2500000080 000000a000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007efc12011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
