last executing test programs:

43.174028694s ago: executing program 0 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/16], 0x48)
unshare(0x8040480)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x80, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

36.657465622s ago: executing program 0 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/16], 0x48)
unshare(0x8040480)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x80, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

30.219100525s ago: executing program 0 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/16], 0x48)
unshare(0x8040480)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x80, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

22.8793581s ago: executing program 0 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/16], 0x48)
unshare(0x8040480)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x80, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

15.384582413s ago: executing program 0 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/16], 0x48)
unshare(0x8040480)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x80, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

6.957735508s ago: executing program 0 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/16], 0x48)
unshare(0x8040480)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x80, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

1.178266756s ago: executing program 2 (id=2623):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff]}}], 0x20, 0x40001}}], 0x2, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}]}, 0x30}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000009e680)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000060066008e880000520033"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)

1.110322371s ago: executing program 2 (id=2624):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500400003"], 0xe0}}, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.018185993s ago: executing program 2 (id=2627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@FRA_DST={0x8, 0x1, @rand_addr=0x640100ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x80000001}]}, 0x2c}}, 0x0)

945.393276ms ago: executing program 2 (id=2628):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x417}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000080))
write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000800)=""/193, 0xc1, <r6=>0x0, &(0x7f00000003c0)=""/129, 0x81}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
r8 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r8, 0x0)
r9 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$inet6(r8, 0x0, 0x0, 0x800)
sendmsg$tipc(r9, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0806", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
r10 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r10, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r12, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
ioctl(r0, 0x7, &(0x7f0000000080))

541.354176ms ago: executing program 1 (id=2633):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1400000010000100000000000095bd242f809a427b94c2a17a0000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a32000000001400000011000100"], 0x6c}}, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8}, 0x94)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000400"/23], 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x11, &(0x7f00000004c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @jmp={0x5, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0xb, 0x7, 0x2}, @alu={0x4, 0x1, 0x6, 0xb, 0xa, 0xfffffffffffffff8, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000380)='GPL\x00', 0x71c9, 0xd4, &(0x7f0000000580)=""/212, 0x41100, 0xd, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x1, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x4, 0x1, 0xd, 0xa}], 0x10, 0xf42}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r6, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmsg$sock(r3, &(0x7f00000015c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='devlink_health_recover_aborted\x00', r2, 0x0, 0x98}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r10, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)

430.357008ms ago: executing program 1 (id=2634):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@FRA_DST={0x8, 0x1, @rand_addr=0x640100ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x80000001}]}, 0x2c}}, 0x0)

360.167125ms ago: executing program 1 (id=2635):
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000c71603b0aed3778c1e00a0897600000000f7ffff"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x2b, 0x1, 0x3)
setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000003000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESOCT, @ANYRES32], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
socket(0x2, 0x80805, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000009000600", @ANYRES8=r4], 0x7c}}, 0x80)

288.686805ms ago: executing program 1 (id=2636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ebffffff0400000040982a067796c022865a09002fdb301d1c00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000ba96ce37e13fff1509c91a0400"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e80100002e000305000000000000000017fe018ef5b54effe0d36fbe7dddcf7ef2dde4de3d49cc017c5a55b0828d39fe9e9a6acd6b344e93fc6519e52c2b7453648904a40d8af02ace0f09389ce53cbdb080d8598ab12f9f7bf3f9a55ed5a908dd22f7ea4f2bf2d71b2baac0f2494eb6ef6ab1ba7d7aa97f0701dcf500bf34d3aa4b3e8d6d000050f28efbece0c4e61c523601f22d8a6b69e6a3b39c4b9c1d1fdf9304b826ab58a9cc38d16826d749ffb6c840b144132b9fd33b72745a425fe08f3a0a5bc1a38fd93f91b062c0516aadad566bbe0f45772b18e82ef7fcf23c00000000000000", @ANYRES32=r1, @ANYBLOB="04000080ec005b80ee5c4e21864f48896e1bc8dbcb64793ad778573b950142d933f9c539b46e12f8ff611f1c3d04bee891b9cc77728e28ca3d25defda4ca40b6fadccf6e8fb420f30d9a4692c9c3d9a16b29f0ed6c6d4a2c7ce388cf7b16b6db23c8843da5605ffdc45d5277967ebab2a10176151f46a03e781deb07a86ee3d82420c404869e6f8a924b6d2c67afe25969cc3e492e26a3578a8e83b991494b958bb46744087241410d78f1c54012ea7e517a4fe7c8c6e2bc554abd2b2ed14df1fd44bf4b0e75a44acb9e34be3e504f0f33aeeca3e52c7fe84f2a9ea6d15f5c3eda089d076254a9a808", @ANYRES32, @ANYBLOB='\x00'], 0x1e8}], 0x1}, 0x80) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9) (async)
sendfile(r3, r2, 0x0, 0x10000) (async)
unshare(0x0) (async)
r4 = socket$rds(0x15, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x4c)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) (async)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) (async)
r10 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x7fffffff, 0x0, 0x2000000}})
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000080)=0x1) (async)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r11], 0x40}}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) (async)
preadv(r12, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r7], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))

288.380909ms ago: executing program 1 (id=2637):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
write(r0, &(0x7f0000000040)="0d000000010001", 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x1)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000100001002cbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYRES64=r3], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

219.787449ms ago: executing program 1 (id=2638):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000008388b2fb00", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kvm_test_age_hva\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x154}}, 0x8044)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @multicast}, 0x3e, {0x2, 0x4e20, @remote}})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa)
bind$bt_hci(r3, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd08000340000000030900020073797a3200000000080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180224b6a299c8073f42cc000001000000001f0000a100df0308275e9d50caf3da7a256279308a98c7aed3eff92ab72b37"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000040000a01040000000e00000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000000000000100000008000b400000000028000480240001800b0001007470726f78790000140002800800010073797a3000000000140000001100010000000000000000000707000a"], 0xc4}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
gettid()
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/196, 0xc4}, 0xfffffffc}], 0x1, 0x103, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x42, 0x0, 0x0)

479.026µs ago: executing program 2 (id=2639):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0xa}, {0x1, 0x1, 0xffffffff}, {0x0, 0x80004, 0x810104, 0x4}], 0x10, 0x1}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

0s ago: executing program 2 (id=2640):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8400}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x69)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800ec0400000000"], 0x24}}, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440), 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0x537)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x703d25, 0x0, {0x7, 0x0, 0x68, r8, 0x900, 0x22265}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x8004)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="555fb217a67a4b672d7926c15921d7a7a0f040c77cdb7a4b98a0ebcacaba4407faa2c97e0c5448e43069000953a9db8492b2244a9e2c19dab4488575e82f3fd20acb9762a2aad55355a85e9d402c6281db3d073e98b609cdad4b8d6cdda5b3b808e694b27b5c14edb79a88cb7e46c951ef5b42bd", @ANYRES16=r10, @ANYBLOB="08002cbd7000fddbdf25550000000c009900060000003a000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x40440a0)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f00", 0x11}, {&(0x7f0000000400)="155fe20c6d", 0x5}], 0x2)
r12 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r12, 0x89ef, &(0x7f0000000080)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081101f8918bad8f6c578000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

kernel console output (not intermixed with test programs):

.800123][T10569] netlink: 'syz.2.1603': attribute type 7 has an invalid length.
[  131.899369][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'.
[  132.239734][T10596] syzkaller1: entered promiscuous mode
[  132.241822][T10596] syzkaller1: entered allmulticast mode
[  132.360526][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'.
[  132.406960][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.469896][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'.
[  132.554189][T10606] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.598074][T10610] SET target dimension over the limit!
[  132.695914][T10620] vlan6: entered promiscuous mode
[  132.698068][T10620] bridge0: entered promiscuous mode
[  132.700354][T10620] vlan6: entered allmulticast mode
[  132.775121][T10630] net_ratelimit: 2 callbacks suppressed
[  132.775131][T10630] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  132.779936][T10630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.791717][   T33] audit: type=1804 audit(1752241657.457:4): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1626" name="memory.events" dev="tmpfs" ino=2835 res=1 errno=0
[  132.807678][   T33] audit: type=1800 audit(1752241657.457:5): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1626" name="memory.events" dev="tmpfs" ino=2835 res=0 errno=0
[  132.872486][T10638] netlink: 'syz.2.1628': attribute type 3 has an invalid length.
[  132.939024][T10642] netlink: 'syz.2.1630': attribute type 25 has an invalid length.
[  133.262315][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.467329][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  133.470702][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  133.474582][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  133.477675][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.481474][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  133.504893][T10672] lo speed is unknown, defaulting to 1000
[  133.629833][T10689] netlink: 'syz.1.1645': attribute type 10 has an invalid length.
[  133.633244][T10689] netlink: 'syz.1.1645': attribute type 10 has an invalid length.
[  133.659928][T10689] netlink: 'syz.1.1645': attribute type 10 has an invalid length.
[  133.662547][T10689] netlink: 'syz.1.1645': attribute type 10 has an invalid length.
[  133.827073][T10672] chnl_net:caif_netlink_parms(): no params data found
[  133.919866][T10672] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.922334][T10672] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.925151][T10672] bridge_slave_0: entered allmulticast mode
[  133.928021][T10672] bridge_slave_0: entered promiscuous mode
[  133.931778][T10672] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.934162][T10672] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.936495][T10672] bridge_slave_1: entered allmulticast mode
[  133.939513][T10672] bridge_slave_1: entered promiscuous mode
[  133.976135][T10672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.986989][T10672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.013803][T10672] team0: Port device team_slave_0 added
[  134.017309][T10672] team0: Port device team_slave_1 added
[  134.047871][T10672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.050188][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.060804][T10672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.066145][T10672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.069112][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.080440][T10672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.166010][T10672] hsr_slave_0: entered promiscuous mode
[  134.170079][T10672] hsr_slave_1: entered promiscuous mode
[  134.173085][T10672] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.176438][T10672] Cannot create hsr debugfs directory
[  134.379364][T10768] No such timeout policy "syz1"
[  134.387939][T10768] batadv_slave_0: entered promiscuous mode
[  134.401472][T10771] syzkaller0: entered promiscuous mode
[  134.403802][T10771] syzkaller0: entered allmulticast mode
[  134.583555][T10778] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.589802][T10778] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.593624][T10778] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.602372][T10778] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.633408][T10778] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.637623][T10778] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.641431][T10778] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.645356][T10778] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.676099][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.745434][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.808633][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.921187][ T5864] bridge_slave_1: left allmulticast mode
[  134.935042][ T5864] bridge_slave_1: left promiscuous mode
[  134.939580][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.950308][ T5864] bridge_slave_0: left allmulticast mode
[  134.952511][ T5864] bridge_slave_0: left promiscuous mode
[  134.955066][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.974198][T10812] validate_nla: 29 callbacks suppressed
[  134.974211][T10812] netlink: 'syz.1.1684': attribute type 1 has an invalid length.
[  135.228161][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.234129][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.237658][ T5864] bond0 (unregistering): Released all slaves
[  135.264856][T10812] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  135.524676][ T5842] Bluetooth: hci2: command tx timeout
[  135.653443][T10672] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  135.672429][T10672] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  135.696408][T10672] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  135.753095][T10672] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  135.817540][ T5864] hsr_slave_0: left promiscuous mode
[  135.819914][ T5864] hsr_slave_1: left promiscuous mode
[  135.822378][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.825153][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.830678][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.843000][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.865561][ T5864] veth1_macvtap: left promiscuous mode
[  135.868024][ T5864] veth0_macvtap: left promiscuous mode
[  135.870507][ T5864] veth1_vlan: left promiscuous mode
[  135.873486][ T5864] veth0_vlan: left promiscuous mode
[  136.283757][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  136.315662][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  136.790140][T10672] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.799041][T10872] __nla_validate_parse: 15 callbacks suppressed
[  136.799057][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  136.845432][T10672] 8021q: adding VLAN 0 to HW filter on device team0
[  136.851153][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.853502][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.889522][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.891958][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.142976][T10672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.183264][T10672] veth0_vlan: entered promiscuous mode
[  137.196891][T10672] veth1_vlan: entered promiscuous mode
[  137.210218][T10905] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  137.216892][T10672] veth0_macvtap: entered promiscuous mode
[  137.220913][T10672] veth1_macvtap: entered promiscuous mode
[  137.236808][T10672] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.258367][T10672] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.263808][T10672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.277374][T10672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.280243][T10672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.283055][T10672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.342513][T10912] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1704'.
[  137.356358][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.358980][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.410596][T10914] syzkaller0: entered promiscuous mode
[  137.413041][T10914] syzkaller0: entered allmulticast mode
[  137.421914][  T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.426365][  T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.607843][ T5842] Bluetooth: hci2: command tx timeout
[  138.597246][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'.
[  138.671396][T10954] dvmrp2: entered allmulticast mode
[  138.852609][T10967] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1717'.
[  138.858783][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'.
[  138.903780][T10972] netlink: 'syz.1.1718': attribute type 1 has an invalid length.
[  138.907810][T10972] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1718'.
[  138.912999][T10973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.962286][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'.
[  139.145832][T10834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.272418][T10995] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  139.295643][T10834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.326477][T10997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1726'.
[  139.379860][T10834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.490961][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.497886][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.501879][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.512409][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.516372][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.558979][T10834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.612323][T11011] netlink: 'syz.2.1728': attribute type 29 has an invalid length.
[  139.627870][T11001] lo speed is unknown, defaulting to 1000
[  139.719145][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'.
[  139.936404][T11001] chnl_net:caif_netlink_parms(): no params data found
[  139.990171][T11001] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.992557][T11001] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.995176][T11001] bridge_slave_0: entered allmulticast mode
[  139.998711][T11001] bridge_slave_0: entered promiscuous mode
[  140.002157][T11001] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.006212][T11001] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.008830][T11001] bridge_slave_1: entered allmulticast mode
[  140.012054][T11001] bridge_slave_1: entered promiscuous mode
[  140.037574][T11001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.043697][T11001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.078563][T11001] team0: Port device team_slave_0 added
[  140.082566][T11001] team0: Port device team_slave_1 added
[  140.109290][T11001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.112107][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.120681][T11001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.129032][T11001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.132934][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.142098][T11001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.181611][T11001] hsr_slave_0: entered promiscuous mode
[  140.184395][T11001] hsr_slave_1: entered promiscuous mode
[  140.186563][T11001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.189567][T11001] Cannot create hsr debugfs directory
[  140.198932][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'.
[  140.381962][T11044] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  140.386805][T11045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.391295][T11044] syzkaller0: entered promiscuous mode
[  140.393712][T11044] syzkaller0: entered allmulticast mode
[  140.431336][T11044] tipc: Resetting bearer <eth:syzkaller0>
[  140.437214][T11044] tipc: Resetting bearer <eth:syzkaller0>
[  140.449287][T11044] tipc: Disabling bearer <eth:syzkaller0>
[  140.692455][T10834] bridge_slave_1: left allmulticast mode
[  140.696041][T10834] bridge_slave_1: left promiscuous mode
[  140.698510][T10834] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.707218][T10834] bridge_slave_0: left allmulticast mode
[  140.709251][T10834] bridge_slave_0: left promiscuous mode
[  140.711458][T10834] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.036219][T10834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.042465][T10834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.048495][T10834] bond0 (unregistering): Released all slaves
[  141.608893][ T5842] Bluetooth: hci2: command tx timeout
[  141.630054][T10834] hsr_slave_0: left promiscuous mode
[  141.632546][T10834] hsr_slave_1: left promiscuous mode
[  141.639528][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.644149][T10834] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.656485][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.659366][T10834] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.676037][T10834] veth1_macvtap: left promiscuous mode
[  141.677924][T10834] veth0_macvtap: left promiscuous mode
[  141.679794][T10834] veth1_vlan: left promiscuous mode
[  141.681468][T10834] veth0_vlan: left promiscuous mode
[  141.857386][T11089] __nla_validate_parse: 4 callbacks suppressed
[  141.857402][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'.
[  142.012679][T10834] team0 (unregistering): Port device team_slave_1 removed
[  142.040460][T10834] team0 (unregistering): Port device team_slave_0 removed
[  142.280568][T11001] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  142.299251][T11001] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  142.305808][T11001] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  142.311989][T11001] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  142.335260][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'.
[  142.499716][T11001] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.518046][T11001] 8021q: adding VLAN 0 to HW filter on device team0
[  142.522736][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.525141][ T9688] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.579191][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.581577][ T9688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.736468][T11001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.788751][T11001] veth0_vlan: entered promiscuous mode
[  142.793434][T11001] veth1_vlan: entered promiscuous mode
[  142.818488][T11001] veth0_macvtap: entered promiscuous mode
[  142.836913][T11001] veth1_macvtap: entered promiscuous mode
[  142.849011][T11001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.856084][T11146] No such timeout policy "syz1"
[  142.859295][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'.
[  142.861112][T11001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.872802][T11146] batadv_slave_0: entered promiscuous mode
[  142.879084][T11001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.882327][T11001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.887225][T11001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.890121][T11001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.897601][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1771'.
[  142.901883][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'.
[  142.980916][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.986454][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.026126][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.030490][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.067538][T11159] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1769'.
[  143.236820][T11169] lo speed is unknown, defaulting to 1000
[  143.411512][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'.
[  143.500803][T11186] netlink: 'syz.1.1781': attribute type 7 has an invalid length.
[  143.504148][T11186] netlink: 'syz.1.1781': attribute type 3 has an invalid length.
[  143.506857][T11186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1781'.
[  143.510928][T11186] netlink: 'syz.1.1781': attribute type 3 has an invalid length.
[  143.541853][T11186] sctp: [Deprecated]: syz.1.1781 (pid 11186) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.541853][T11186] Use struct sctp_sack_info instead
[  143.715055][T11201] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  143.720328][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'.
[  143.727422][T11201] netlink: 'syz.2.1786': attribute type 21 has an invalid length.
[  143.752386][T11203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1787'.
[  144.096811][T11235] netlink: 'syz.1.1800': attribute type 4 has an invalid length.
[  144.241165][T11248] netlink: 'syz.1.1802': attribute type 83 has an invalid length.
[  144.493468][T11260] netlink: 'syz.2.1809': attribute type 4 has an invalid length.
[  144.550769][ T5847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.126507][T11269] bond7: entered promiscuous mode
[  145.129598][T11269] bond7: entered allmulticast mode
[  145.132175][T11269] 8021q: adding VLAN 0 to HW filter on device bond7
[  145.257207][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.260498][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.263377][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.268011][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  145.270908][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  145.317515][T11277] lo speed is unknown, defaulting to 1000
[  145.424359][T11292] netlink: 'syz.2.1818': attribute type 4 has an invalid length.
[  145.640557][T11277] chnl_net:caif_netlink_parms(): no params data found
[  145.699187][T11277] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.701682][T11277] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.705846][T11277] bridge_slave_0: entered allmulticast mode
[  145.709564][T11277] bridge_slave_0: entered promiscuous mode
[  145.713830][T11277] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.716485][T11277] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.718875][T11277] bridge_slave_1: entered allmulticast mode
[  145.722495][T11277] bridge_slave_1: entered promiscuous mode
[  145.756740][T11277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.763070][T11277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.794229][T11277] team0: Port device team_slave_0 added
[  145.799767][T11277] team0: Port device team_slave_1 added
[  145.830463][T11277] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.833378][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.843836][T11277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.851698][T11277] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.854905][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.868166][T11277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.903362][T11277] hsr_slave_0: entered promiscuous mode
[  145.908705][T11277] hsr_slave_1: entered promiscuous mode
[  145.911409][T11277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.915042][T11277] Cannot create hsr debugfs directory
[  146.187584][ T5847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.297633][ T5847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.560265][ T5847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.652382][T11317] netlink: 'syz.1.1825': attribute type 4 has an invalid length.
[  146.792980][ T5847] bridge_slave_1: left allmulticast mode
[  146.802045][ T5847] bridge_slave_1: left promiscuous mode
[  146.812942][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.828169][ T5847] bridge_slave_0: left allmulticast mode
[  146.830236][ T5847] bridge_slave_0: left promiscuous mode
[  146.833411][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.034187][T11333] __nla_validate_parse: 9 callbacks suppressed
[  147.034207][T11333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1831'.
[  147.103363][T11337] netlink: 'syz.1.1832': attribute type 4 has an invalid length.
[  147.146252][T11339] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  147.191768][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'.
[  147.225744][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.231101][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.235457][ T5847] bond0 (unregistering): Released all slaves
[  147.364110][ T5842] Bluetooth: hci2: command tx timeout
[  147.651845][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  147.812638][ T5847] hsr_slave_0: left promiscuous mode
[  147.815175][ T5847] hsr_slave_1: left promiscuous mode
[  147.817469][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.821246][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.826676][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.829285][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.855367][ T5847] veth1_macvtap: left promiscuous mode
[  147.859660][ T5847] veth0_macvtap: left promiscuous mode
[  147.864737][ T5847] veth1_vlan: left promiscuous mode
[  147.867118][ T5847] veth0_vlan: left promiscuous mode
[  148.426920][ T5847] team0 (unregistering): Port device team_slave_1 removed
[  148.467410][ T5847] team0 (unregistering): Port device team_slave_0 removed
[  148.863836][T11277] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.915964][T11277] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.929007][T11277] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  148.955555][T11277] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.050128][T11383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.055853][T11383] syzkaller0: entered promiscuous mode
[  149.058214][T11383] syzkaller0: entered allmulticast mode
[  149.064150][T11381] tipc: Resetting bearer <eth:syzkaller0>
[  149.096716][T11381] tipc: Disabling bearer <eth:syzkaller0>
[  149.251730][T11277] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.279354][T11277] 8021q: adding VLAN 0 to HW filter on device team0
[  149.286858][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.289446][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.309141][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.311971][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.450183][ T5842] Bluetooth: hci2: command tx timeout
[  149.477323][T11277] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.508370][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'.
[  149.563736][T11277] veth0_vlan: entered promiscuous mode
[  149.598850][T11277] veth1_vlan: entered promiscuous mode
[  149.649463][T11277] veth0_macvtap: entered promiscuous mode
[  149.662780][T11277] veth1_macvtap: entered promiscuous mode
[  149.677545][T11423] syzkaller0: entered promiscuous mode
[  149.681744][T11423] syzkaller0: entered allmulticast mode
[  149.743394][T11277] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.773270][T11277] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.787341][T11277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.803935][T11277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.806750][T11277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.809757][T11277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.846845][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1857'.
[  149.899929][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.903191][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.965783][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.969048][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.134651][T11440] nbd: must specify at least one socket
[  150.287382][T11451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1864'.
[  150.291892][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'.
[  150.341689][T11453] block nbd0: Unsupported socket: shutdown callout must be supported.
[  150.650143][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1869'.
[  150.710872][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1869'.
[  150.757291][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1869'.
[  151.456445][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.128515][T11501] sctp: [Deprecated]: syz.2.1875 (pid 11501) Use of struct sctp_assoc_value in delayed_ack socket option.
[  152.128515][T11501] Use struct sctp_sack_info instead
[  152.130381][T11500] bridge0: port 3(macsec0) entered blocking state
[  152.137429][T11500] bridge0: port 3(macsec0) entered disabled state
[  152.140505][T11500] macsec0: entered allmulticast mode
[  152.148543][T11500] macsec0: entered promiscuous mode
[  152.274315][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  152.278501][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  152.282256][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  152.295284][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  152.298946][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  152.337368][T11510] lo speed is unknown, defaulting to 1000
[  152.358733][T11515] __nla_validate_parse: 23 callbacks suppressed
[  152.358750][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'.
[  152.638076][T11538] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1884'.
[  152.667761][T11510] chnl_net:caif_netlink_parms(): no params data found
[  152.752672][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.807300][T11549] validate_nla: 1 callbacks suppressed
[  152.807316][T11549] netlink: 'syz.2.1887': attribute type 4 has an invalid length.
[  152.842533][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  152.850973][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.875622][T11510] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.878893][T11510] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.889094][T11510] bridge_slave_0: entered allmulticast mode
[  152.893050][T11510] bridge_slave_0: entered promiscuous mode
[  152.936259][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.945744][T11510] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.950568][T11510] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.953789][T11510] bridge_slave_1: entered allmulticast mode
[  152.958452][T11510] bridge_slave_1: entered promiscuous mode
[  153.013296][T11510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.032401][T11510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.077415][T11510] team0: Port device team_slave_0 added
[  153.082699][T11510] team0: Port device team_slave_1 added
[  153.150140][T11510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.152954][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.178351][T11510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.198403][T11510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.201353][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.233151][T11510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.329940][T11510] hsr_slave_0: entered promiscuous mode
[  153.333073][T11510] hsr_slave_1: entered promiscuous mode
[  153.347166][T11510] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.350308][T11510] Cannot create hsr debugfs directory
[  153.422218][   T13] bridge_slave_1: left allmulticast mode
[  153.425632][   T13] bridge_slave_1: left promiscuous mode
[  153.428125][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.434628][   T13] bridge_slave_0: left allmulticast mode
[  153.436980][   T13] bridge_slave_0: left promiscuous mode
[  153.439366][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.600744][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'.
[  153.715897][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.720744][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.726445][   T13] bond0 (unregistering): Released all slaves
[  153.745525][T11582] pim6reg1: entered promiscuous mode
[  153.747742][T11582] pim6reg1: entered allmulticast mode
[  153.782212][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1904'.
[  154.061977][T11608] netlink: 'syz.1.1908': attribute type 1 has an invalid length.
[  154.324221][ T5842] Bluetooth: hci2: command tx timeout
[  154.338938][T11617] syzkaller0: entered allmulticast mode
[  154.352044][T11617] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  154.401398][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'.
[  154.407622][   T13] hsr_slave_0: left promiscuous mode
[  154.409923][   T13] hsr_slave_1: left promiscuous mode
[  154.411945][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.415981][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.419047][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.421610][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.450381][   T13] veth1_macvtap: left promiscuous mode
[  154.452224][   T13] veth0_macvtap: left promiscuous mode
[  154.456971][   T13] veth1_vlan: left promiscuous mode
[  154.458831][   T13] veth0_vlan: left promiscuous mode
[  154.775958][   T13] team0 (unregistering): Port device team_slave_1 removed
[  154.807219][   T13] team0 (unregistering): Port device team_slave_0 removed
[  155.226127][T11639] netlink: 'syz.2.1916': attribute type 6 has an invalid length.
[  155.229111][T11639] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1916'.
[  155.253363][T11510] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.273447][T11510] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  155.292735][T11510] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  155.313009][T11510] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  155.437508][T11660] netlink: 'syz.2.1919': attribute type 11 has an invalid length.
[  155.453208][T11510] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.470880][T11510] 8021q: adding VLAN 0 to HW filter on device team0
[  155.483778][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.486443][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.510433][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.512769][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.680795][   T33] audit: type=1800 audit(1752241680.347:6): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1923" name=F6627929AC78FE8020FACD88E2B7C42C7F4FA190AAE092AA615E011AB36B374A9741A721227F438B7D9B7630E3A00E3C891F073030303030303030303030303030303030303033 dev="tmpfs" ino=3599 res=0 errno=0
[  155.689073][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.747881][T11510] veth0_vlan: entered promiscuous mode
[  155.765859][T11510] veth1_vlan: entered promiscuous mode
[  155.792227][T11510] veth0_macvtap: entered promiscuous mode
[  155.799741][T11510] veth1_macvtap: entered promiscuous mode
[  155.813878][T11510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.826828][T11510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.839063][T11510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.842698][T11510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.852599][T11510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.862093][T11510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.874623][T11679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.887699][   T33] audit: type=1800 audit(1752241680.557:7): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1926" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=3692 res=0 errno=0
[  155.914901][   T33] audit: type=1804 audit(1752241680.567:8): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1926" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=3692 res=1 errno=0
[  155.968105][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.971420][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.036468][ T9688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.040889][ T9688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.111201][T11687] veth0: entered promiscuous mode
[  156.117872][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'.
[  156.250974][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'.
[  156.262488][T11695] SET target dimension over the limit!
[  156.291790][T11697] netlink: 'syz.1.1932': attribute type 11 has an invalid length.
[  156.446341][T11706] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1936'.
[  157.123256][T11746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.172453][T11749] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  157.392854][T11764] __nla_validate_parse: 5 callbacks suppressed
[  157.392868][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'.
[  157.442668][T11767] openvswitch: netlink: IP tunnel TTL not specified.
[  157.763045][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.787572][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.791693][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.796235][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.800254][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.803842][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.835786][T11830] lo speed is unknown, defaulting to 1000
[  158.942026][T11840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  159.018955][T11840] xt_TCPMSS: Only works on TCP SYN packets
[  159.068092][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.079964][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'.
[  159.137080][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.190346][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.277556][T11830] chnl_net:caif_netlink_parms(): no params data found
[  159.339357][ T5864] bridge_slave_1: left allmulticast mode
[  159.341836][ T5864] bridge_slave_1: left promiscuous mode
[  159.344929][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.352046][ T5864] bridge_slave_0: left allmulticast mode
[  159.354830][ T5864] bridge_slave_0: left promiscuous mode
[  159.357416][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.609108][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'.
[  159.630566][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.635640][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.639292][ T5864] bond0 (unregistering): Released all slaves
[  159.699568][T11830] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.704141][T11830] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.707356][T11830] bridge_slave_0: entered allmulticast mode
[  159.711388][T11830] bridge_slave_0: entered promiscuous mode
[  159.717011][T11830] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.720189][T11830] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.723343][T11830] bridge_slave_1: entered allmulticast mode
[  159.727722][T11830] bridge_slave_1: entered promiscuous mode
[  159.769043][T11830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.776646][T11830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.809762][T11830] team0: Port device team_slave_0 added
[  159.854757][T11895] syzkaller0: create flow: hash 4097209300 index 1
[  159.860090][T11830] team0: Port device team_slave_1 added
[  159.898137][   T13] syzkaller0: tun_net_xmit 76
[  159.900590][   T13] syzkaller0: tun_net_xmit 48
[  159.933554][T11830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.937007][ T5871] syzkaller0: tun_net_xmit 76
[  159.938724][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.950594][T11830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.079150][T11889] syzkaller0: delete flow: hash 4097209300 index 1
[  160.195364][T11905] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1995'.
[  160.200243][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'.
[  160.886097][ T5842] Bluetooth: hci2: command tx timeout
[  161.162632][T11830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.165739][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.176721][T11830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.187769][ T5864] hsr_slave_0: left promiscuous mode
[  161.190544][ T5864] hsr_slave_1: left promiscuous mode
[  161.193034][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.196350][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.200003][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.202925][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.220488][ T5864] veth1_macvtap: left promiscuous mode
[  161.223990][ T5864] veth0_macvtap: left promiscuous mode
[  161.225926][ T5864] veth1_vlan: left promiscuous mode
[  161.227849][ T5864] veth0_vlan: left promiscuous mode
[  161.510941][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  161.538480][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  161.722161][T11912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.851089][T11926] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1999'.
[  161.930996][T11830] hsr_slave_0: entered promiscuous mode
[  161.933618][T11830] hsr_slave_1: entered promiscuous mode
[  161.944265][T11830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.946855][T11830] Cannot create hsr debugfs directory
[  161.986970][T11934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2002'.
[  161.991378][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2002'.
[  162.054623][T11940] sctp: [Deprecated]: syz.2.2003 (pid 11940) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.054623][T11940] Use struct sctp_sack_info instead
[  162.089980][T11943] sctp: [Deprecated]: syz.2.2003 (pid 11943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.089980][T11943] Use struct sctp_sack_info instead
[  162.125694][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'.
[  162.243763][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'.
[  162.508760][T11830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  162.514254][T11830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  162.529469][T11830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  162.536671][T11830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  162.602695][T11830] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.623315][T11830] 8021q: adding VLAN 0 to HW filter on device team0
[  162.641383][ T9695] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.643985][ T9695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.662257][ T9695] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.664622][ T9695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.691191][T11830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.699553][T11830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.707983][T11993] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.2017'.
[  162.721627][T11995] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2018'.
[  162.850836][T12009] netlink: 'syz.1.2021': attribute type 9 has an invalid length.
[  162.868712][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'.
[  162.879127][T12009] macvlan0: entered promiscuous mode
[  162.882241][T12009] hsr0: entered promiscuous mode
[  162.887807][T12009] macvlan0: entered allmulticast mode
[  162.890228][T12009] hsr0: entered allmulticast mode
[  162.892302][T12009] hsr_slave_0: entered allmulticast mode
[  162.894850][T12009] hsr_slave_1: entered allmulticast mode
[  162.917431][T11830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.940192][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'.
[  162.964370][ T5842] Bluetooth: hci2: command tx timeout
[  162.967181][T11830] veth0_vlan: entered promiscuous mode
[  162.971838][T11830] veth1_vlan: entered promiscuous mode
[  162.991854][T11830] veth0_macvtap: entered promiscuous mode
[  162.996332][T11830] veth1_macvtap: entered promiscuous mode
[  163.006160][T11830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.033547][T11830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.038530][T11830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.041310][T11830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.044911][T11830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.047652][T11830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.140496][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.143799][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.189915][ T9695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.193337][ T9695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.358953][T12033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2031'.
[  163.942658][T12084] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  163.994871][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'.
[  163.999748][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'.
[  164.030382][T12094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.124102][T12102] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  164.256218][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'.
[  164.312180][T12108] bridge5: entered allmulticast mode
[  164.349565][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  164.352738][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  164.416146][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.419197][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.422343][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.433133][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.437241][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.440398][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.443375][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.446045][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.448893][T12127] openvswitch: netlink: Flow key attr not present in new flow.
[  164.717906][T12154] netlink: 'syz.1.2075': attribute type 1 has an invalid length.
[  164.740843][T12154] 8021q: adding VLAN 0 to HW filter on device bond8
[  164.775332][T12154] veth11: entered promiscuous mode
[  164.783388][T12154] bond8: (slave veth11): Enslaving as an active interface with a down link
[  164.791618][T12154] erspan0: entered allmulticast mode
[  164.797636][T12154] bond8: (slave erspan0): making interface the new active one
[  164.802475][T12154] erspan0: entered promiscuous mode
[  164.807394][T12154] bond8: (slave erspan0): Enslaving as an active interface with an up link
[  164.908103][T12169] netlink: 'syz.1.2080': attribute type 1 has an invalid length.
[  164.911651][T12169] netlink: 'syz.1.2080': attribute type 10 has an invalid length.
[  165.171389][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.248047][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  166.251585][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  166.254892][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  166.258249][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  166.260930][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  166.286033][T12201] lo speed is unknown, defaulting to 1000
[  166.512965][T12201] chnl_net:caif_netlink_parms(): no params data found
[  166.562988][T12221] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  166.667482][T12201] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.670563][T12201] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.673847][T12201] bridge_slave_0: entered allmulticast mode
[  166.680543][T12201] bridge_slave_0: entered promiscuous mode
[  166.687441][T12201] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.690660][T12201] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.693650][T12201] bridge_slave_1: entered allmulticast mode
[  166.701561][T12201] bridge_slave_1: entered promiscuous mode
[  166.745012][T12201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.751914][T12201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.812073][T12201] team0: Port device team_slave_0 added
[  166.833289][T12201] team0: Port device team_slave_1 added
[  166.868359][T12201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.871908][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.883796][T12201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.888219][T12233] syzkaller0: entered promiscuous mode
[  166.890001][T12233] syzkaller0: entered allmulticast mode
[  166.902217][T12201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.904798][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.913291][T12201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.980938][T12201] hsr_slave_0: entered promiscuous mode
[  166.984880][T12201] hsr_slave_1: entered promiscuous mode
[  166.987874][T12201] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.991021][T12201] Cannot create hsr debugfs directory
[  167.059022][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.137840][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.189051][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.288181][T12248] netlink: 'syz.1.2106': attribute type 1 has an invalid length.
[  167.409751][T12254] netlink: 'syz.1.2107': attribute type 11 has an invalid length.
[  167.444946][   T13] bridge_slave_1: left allmulticast mode
[  167.448008][   T13] bridge_slave_1: left promiscuous mode
[  167.450558][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.457137][   T13] bridge_slave_0: left allmulticast mode
[  167.459038][   T13] bridge_slave_0: left promiscuous mode
[  167.461114][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.699937][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.705502][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.709673][   T13] bond0 (unregistering): Released all slaves
[  167.870441][T12275] __nla_validate_parse: 46 callbacks suppressed
[  167.870451][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'.
[  167.876188][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'.
[  168.058124][T12201] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  168.078287][T12201] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  168.106763][T12201] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  168.141168][T12201] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  168.211976][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'.
[  168.263081][   T13] hsr_slave_0: left promiscuous mode
[  168.266154][   T13] hsr_slave_1: left promiscuous mode
[  168.276445][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.279556][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.289485][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.302924][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.322135][   T13] veth1_macvtap: left promiscuous mode
[  168.324298][   T54] Bluetooth: hci2: command tx timeout
[  168.324851][   T13] veth0_macvtap: left promiscuous mode
[  168.330030][   T13] veth1_vlan: left promiscuous mode
[  168.332202][   T13] veth0_vlan: left promiscuous mode
[  168.646900][   T13] team0 (unregistering): Port device team_slave_1 removed
[  168.677582][   T13] team0 (unregistering): Port device team_slave_0 removed
[  168.950887][T12310] netlink: 'syz.2.2118': attribute type 1 has an invalid length.
[  169.012042][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'.
[  169.018749][T12201] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.026257][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'.
[  169.047415][T12201] 8021q: adding VLAN 0 to HW filter on device team0
[  169.052891][  T190] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.055361][  T190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.096937][  T190] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.099220][  T190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.145452][T12201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.281343][T12201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.297979][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2125'.
[  169.322891][T12201] veth0_vlan: entered promiscuous mode
[  169.332854][T12201] veth1_vlan: entered promiscuous mode
[  169.339560][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'.
[  169.358669][T12201] veth0_macvtap: entered promiscuous mode
[  169.366714][T12201] veth1_macvtap: entered promiscuous mode
[  169.390056][T12201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.396972][T12201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.403717][T12201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.409209][T12201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.412542][T12201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.420775][T12201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.431597][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2128'.
[  169.501968][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.509708][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.533739][  T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.538596][  T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.591287][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'.
[  169.599317][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'.
[  169.837546][T12370] net_ratelimit: 24 callbacks suppressed
[  169.837556][T12370] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  169.856259][T12370] lo speed is unknown, defaulting to 1000
[  171.034434][T12447] netlink: 'syz.1.2141': attribute type 1 has an invalid length.
[  171.247461][T10834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.386038][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.390222][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.393836][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.399688][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.402702][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.438168][T12479] lo speed is unknown, defaulting to 1000
[  172.719122][T10834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.814919][T10834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.848199][T12479] chnl_net:caif_netlink_parms(): no params data found
[  172.880708][T12514] __nla_validate_parse: 6 callbacks suppressed
[  172.880726][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'.
[  172.921724][T10834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.942961][T12514] macvlan3: entered promiscuous mode
[  172.944857][T12514] macvlan3: entered allmulticast mode
[  172.948826][T12514] bond4: entered promiscuous mode
[  172.954654][T12514] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  172.960333][T12514] bond4: left promiscuous mode
[  172.999282][T12479] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.001601][T12479] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.007187][T12479] bridge_slave_0: entered allmulticast mode
[  173.011033][T12479] bridge_slave_0: entered promiscuous mode
[  173.030247][T12479] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.032699][T12479] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.035761][T12479] bridge_slave_1: entered allmulticast mode
[  173.038614][T12479] bridge_slave_1: entered promiscuous mode
[  173.142006][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.151521][T10834] bridge_slave_1: left allmulticast mode
[  173.153373][T10834] bridge_slave_1: left promiscuous mode
[  173.157390][T10834] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.165362][T10834] bridge_slave_0: left allmulticast mode
[  173.167249][T10834] bridge_slave_0: left promiscuous mode
[  173.170521][T10834] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.391533][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  173.395529][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  173.541109][T10834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.546434][T10834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.551401][T10834] bond0 (unregistering): Released all slaves
[  173.563106][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.648109][T12479] team0: Port device team_slave_0 added
[  173.669003][T12479] team0: Port device team_slave_1 added
[  173.678911][T12549] pimreg: entered allmulticast mode
[  173.771091][T12549] pimreg: left allmulticast mode
[  173.864450][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.869513][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.882502][T12559] netlink: 'syz.2.2174': attribute type 10 has an invalid length.
[  173.886201][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.935385][T12559] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  173.946804][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.949005][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.965989][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.081062][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'.
[  174.088870][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'.
[  174.135053][T12479] hsr_slave_0: entered promiscuous mode
[  174.137732][T12479] hsr_slave_1: entered promiscuous mode
[  174.139952][T12479] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.142997][T12479] Cannot create hsr debugfs directory
[  174.237765][T10834] hsr_slave_0: left promiscuous mode
[  174.240108][T10834] hsr_slave_1: left promiscuous mode
[  174.242607][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.247982][T10834] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.250956][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.253293][T10834] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.272064][T10834] veth1_macvtap: left promiscuous mode
[  174.275663][T10834] veth0_macvtap: left promiscuous mode
[  174.277649][T10834] veth1_vlan: left promiscuous mode
[  174.279357][T10834] veth0_vlan: left promiscuous mode
[  174.484065][ T5842] Bluetooth: hci2: command tx timeout
[  174.577940][T10834] team0 (unregistering): Port device team_slave_1 removed
[  174.602543][T10834] team0 (unregistering): Port device team_slave_0 removed
[  175.762170][T12624] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2185'.
[  175.786126][T12479] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  175.804730][T12479] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  175.809463][T12479] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  175.822693][T12479] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  175.852975][T12628] bridge_slave_1: entered promiscuous mode
[  175.857581][T12628] vlan6: entered promiscuous mode
[  175.859549][T12628] bond0: entered promiscuous mode
[  175.955496][T12312] erspan0: left promiscuous mode
[  175.967797][T12479] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.988030][T12479] 8021q: adding VLAN 0 to HW filter on device team0
[  176.015848][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.018249][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.027096][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.029453][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.042267][T12479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.048282][T12479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.263772][T12660] netlink: 'syz.1.2191': attribute type 1 has an invalid length.
[  176.266722][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'.
[  176.268571][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.273329][T12660] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2191'.
[  176.279603][T12660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2191'.
[  176.340537][T12479] veth0_vlan: entered promiscuous mode
[  176.351951][T12479] veth1_vlan: entered promiscuous mode
[  176.360003][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2194'.
[  176.363170][T12666] netlink: 'syz.1.2194': attribute type 6 has an invalid length.
[  176.377183][T12479] veth0_macvtap: entered promiscuous mode
[  176.381088][T12666] netlink: 'syz.1.2194': attribute type 11 has an invalid length.
[  176.385217][T12479] veth1_macvtap: entered promiscuous mode
[  176.430060][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.449922][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.457682][T12479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.460863][T12479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.467000][T12479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.470950][T12479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.514933][T12678] vxcan1 speed is unknown, defaulting to 1000
[  176.523697][T12678] vxcan1 speed is unknown, defaulting to 1000
[  176.529110][T12678] vxcan1 speed is unknown, defaulting to 1000
[  176.543673][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.547105][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.564186][ T5842] Bluetooth: hci2: command tx timeout
[  176.589519][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.593787][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.787750][T12678] infiniband syz2: set active
[  176.789730][ T5886] vxcan1 speed is unknown, defaulting to 1000
[  176.792291][T12678] infiniband syz2: added vxcan1
[  176.824090][T12678] RDS/IB: syz2: added
[  176.825929][T12678] smc: adding ib device syz2 with port count 1
[  176.828440][T12678] smc:    ib device syz2 port 1 has pnetid 
[  176.830873][ T5886] vxcan1 speed is unknown, defaulting to 1000
[  176.835905][T12678] vxcan1 speed is unknown, defaulting to 1000
[  177.001278][T12678] vxcan1 speed is unknown, defaulting to 1000
[  177.151608][T12678] vxcan1 speed is unknown, defaulting to 1000
[  177.288053][T12678] vxcan1 speed is unknown, defaulting to 1000
[  177.593064][T12697] netlink: 'syz.2.2206': attribute type 11 has an invalid length.
[  177.627846][T12700] xt_CT: No such helper "snmp"
[  177.650130][T12705] set match dimension is over the limit!
[  177.653267][T12704] Cannot find del_set index 3 as target
[  177.867121][T12720] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.871275][T12720] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  177.939246][T12720] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.943366][T12720] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  177.989063][T12720] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.993059][T12720] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  178.051686][T12720] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.056244][T12720] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  178.092412][T12725] __nla_validate_parse: 8 callbacks suppressed
[  178.092429][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'.
[  178.159031][T12720] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  178.162554][T12720] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  178.180422][T12720] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  178.186141][T12720] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  178.197778][T12720] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  178.201396][T12720] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  178.211619][T12727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.214150][T12720] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  178.217748][T12720] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  178.267748][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'.
[  178.270651][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'.
[  178.351910][T12737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2221'.
[  178.407243][T10834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.556959][T12755] netlink: 'syz.1.2225': attribute type 7 has an invalid length.
[  179.698841][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  179.702347][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  179.706234][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  179.709452][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  179.712307][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  179.743324][T12771] lo speed is unknown, defaulting to 1000
[  179.752234][T12775] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2231'.
[  179.784421][T12780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  179.817725][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2231'.
[  179.835008][T12783] sctp: [Deprecated]: syz.1.2234 (pid 12783) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.835008][T12783] Use struct sctp_sack_info instead
[  179.856760][T12771] vxcan1 speed is unknown, defaulting to 1000
[  179.973754][T12791] xt_TCPMSS: Only works on TCP SYN packets
[  180.035891][T12796] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2237'.
[  180.061122][T10834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.098825][T12771] chnl_net:caif_netlink_parms(): no params data found
[  180.123781][T10834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.191886][T10834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.251666][T12771] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.255241][T12771] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.258565][T12771] bridge_slave_0: entered allmulticast mode
[  180.262739][T12771] bridge_slave_0: entered promiscuous mode
[  180.268014][T12771] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.271300][T12771] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.275244][T12771] bridge_slave_1: entered allmulticast mode
[  180.280151][T12771] bridge_slave_1: entered promiscuous mode
[  180.326721][T12771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.362981][T12771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.369668][T10834] bridge_slave_1: left allmulticast mode
[  180.372402][T10834] bridge_slave_1: left promiscuous mode
[  180.374831][T10834] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.379241][T10834] bridge_slave_0: left allmulticast mode
[  180.381259][T10834] bridge_slave_0: left promiscuous mode
[  180.383325][T10834] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.600049][T10834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.607185][T10834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.612437][T10834] bond0 (unregistering): Released all slaves
[  180.650349][T12771] team0: Port device team_slave_0 added
[  180.657211][T12771] team0: Port device team_slave_1 added
[  180.700940][T12771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.703340][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.712812][T12771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.719344][T12771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.721708][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.730220][T12771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.824850][T12771] hsr_slave_0: entered promiscuous mode
[  180.827325][T12771] hsr_slave_1: entered promiscuous mode
[  180.831235][T12771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.835440][T12771] Cannot create hsr debugfs directory
[  181.059316][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'.
[  181.062228][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'.
[  181.101255][T12819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  181.332089][T10834] hsr_slave_0: left promiscuous mode
[  181.335349][T10834] hsr_slave_1: left promiscuous mode
[  181.337973][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.340688][T10834] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.343533][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.347620][T10834] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.360159][T10834] veth1_macvtap: left promiscuous mode
[  181.362002][T10834] veth0_macvtap: left promiscuous mode
[  181.365728][T10834] veth1_vlan: left promiscuous mode
[  181.367489][T10834] veth0_vlan: left promiscuous mode
[  181.647647][T10834] team0 (unregistering): Port device team_slave_1 removed
[  181.674885][T10834] team0 (unregistering): Port device team_slave_0 removed
[  181.765010][   T54] Bluetooth: hci2: command tx timeout
[  182.294058][T12771] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  182.303484][T12771] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  182.310153][T12771] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  182.328420][T12771] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  182.351104][T12868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2252'.
[  182.431071][T12771] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.457808][T12771] 8021q: adding VLAN 0 to HW filter on device team0
[  182.479235][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.481600][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.485127][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.487576][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.543538][T12771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.548872][T12771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.571640][T12893] netlink: 'syz.2.2255': attribute type 7 has an invalid length.
[  182.581293][T12893] netlink: 'syz.2.2255': attribute type 8 has an invalid length.
[  182.707744][T12900] netlink: 'syz.2.2257': attribute type 13 has an invalid length.
[  182.713731][T12771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.728306][T12900] netlink: 'syz.2.2257': attribute type 17 has an invalid length.
[  182.821470][T12900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.875469][T12771] veth0_vlan: entered promiscuous mode
[  182.896900][T12771] veth1_vlan: entered promiscuous mode
[  182.927594][T12900] lo speed is unknown, defaulting to 1000
[  182.939017][T12771] veth0_macvtap: entered promiscuous mode
[  182.957237][T12771] veth1_macvtap: entered promiscuous mode
[  182.975026][T12771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.987040][T12771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.993214][T12771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.996475][T12771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.999328][T12771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.002102][T12771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.093344][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.109137][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.138826][T12900] vxcan1 speed is unknown, defaulting to 1000
[  183.139379][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.144955][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.241613][T12925] netlink: 'syz.1.2261': attribute type 10 has an invalid length.
[  183.245835][T12925] bond0: left promiscuous mode
[  183.247573][T12925] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  183.250039][T12925] bond0: left allmulticast mode
[  183.252098][T12925] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  183.393071][T12940] netlink: 'syz.1.2264': attribute type 1 has an invalid length.
[  183.406268][T12940] 8021q: adding VLAN 0 to HW filter on device bond10
[  183.420170][T12940] bond10: (slave ip6gretap2): making interface the new active one
[  183.424114][T12940] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link
[  183.860467][T12900] syz.2.2257 (12900) used greatest stack depth: 19008 bytes left
[  184.265645][T12971] netlink: 'syz.2.2274': attribute type 10 has an invalid length.
[  184.490969][T12988] __nla_validate_parse: 9 callbacks suppressed
[  184.490986][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'.
[  184.505180][T12990] netlink: 'syz.2.2280': attribute type 1 has an invalid length.
[  184.558360][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'.
[  184.562183][T12994] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2282'.
[  184.750815][T13013] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2286'.
[  184.841526][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'.
[  184.845025][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'.
[  184.901791][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.970175][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'.
[  186.029938][T13031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2290'.
[  186.035070][T13031] netlink: 'syz.1.2290': attribute type 7 has an invalid length.
[  186.038256][T13031] netlink: 'syz.1.2290': attribute type 8 has an invalid length.
[  186.041819][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'.
[  186.052845][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'.
[  186.059354][T13028] vxcan0: entered promiscuous mode
[  186.071404][T13030] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  186.161456][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.167254][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.170091][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.173762][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.178965][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.219925][T13040] lo speed is unknown, defaulting to 1000
[  186.326969][T13040] vxcan1 speed is unknown, defaulting to 1000
[  186.562072][T13040] chnl_net:caif_netlink_parms(): no params data found
[  186.576049][T13080] xt_HMARK: spi-set and port-set can't be combined
[  186.617740][T13040] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.620170][T13040] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.622548][T13040] bridge_slave_0: entered allmulticast mode
[  186.625549][T13040] bridge_slave_0: entered promiscuous mode
[  186.631153][T13040] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.634458][T13040] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.637347][T13040] bridge_slave_1: entered allmulticast mode
[  186.640732][T13040] bridge_slave_1: entered promiscuous mode
[  186.697409][T13040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.706283][T13040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.793575][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.801302][T13040] team0: Port device team_slave_0 added
[  186.808192][T13040] team0: Port device team_slave_1 added
[  186.845718][T13040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.848628][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.861445][T13040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.883397][T13103] xt_l2tp: invalid flags combination: c
[  186.885300][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.889647][T13040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.891937][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.902982][T13040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.947284][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.975022][T13040] hsr_slave_0: entered promiscuous mode
[  186.985237][T13040] hsr_slave_1: entered promiscuous mode
[  186.989129][T13040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.991621][T13040] Cannot create hsr debugfs directory
[  187.209832][ T5864] bridge_slave_1: left allmulticast mode
[  187.211772][ T5864] bridge_slave_1: left promiscuous mode
[  187.217480][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.223565][ T5864] bridge_slave_0: left allmulticast mode
[  187.226329][ T5864] bridge_slave_0: left promiscuous mode
[  187.228307][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.475500][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.479721][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.483770][ T5864] bond0 (unregistering): Released all slaves
[  187.572505][T13133] syzkaller1: entered allmulticast mode
[  188.029035][T13040] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  188.042962][ T5864] hsr_slave_0: left promiscuous mode
[  188.047526][ T5864] hsr_slave_1: left promiscuous mode
[  188.049656][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.052244][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.055415][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.058045][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.070237][ T5864] veth1_macvtap: left promiscuous mode
[  188.072098][ T5864] veth0_macvtap: left promiscuous mode
[  188.074274][ T5864] veth1_vlan: left promiscuous mode
[  188.076322][ T5864] veth0_vlan: left promiscuous mode
[  188.257828][ T5842] Bluetooth: hci2: command tx timeout
[  188.360868][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  188.391022][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  188.661583][T13040] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  188.695756][T13040] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  188.708929][T13040] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  188.778423][T13181] netlink: 'syz.2.2325': attribute type 11 has an invalid length.
[  188.899664][T13040] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.933442][T13040] 8021q: adding VLAN 0 to HW filter on device team0
[  188.967008][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.969521][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.975773][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.978216][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.995082][T13198] xt_ecn: cannot match TCP bits for non-tcp packets
[  189.067315][T13208] validate_nla: 1 callbacks suppressed
[  189.067327][T13208] netlink: 'syz.2.2331': attribute type 21 has an invalid length.
[  189.153755][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.210764][T13040] veth0_vlan: entered promiscuous mode
[  189.218538][T13040] veth1_vlan: entered promiscuous mode
[  189.248104][T13040] veth0_macvtap: entered promiscuous mode
[  189.251870][T13040] veth1_macvtap: entered promiscuous mode
[  189.317330][T13040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.323221][T13040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.329289][T13040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.332203][T13040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.343445][T13040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.347055][T13040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.415553][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.418092][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.438127][  T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.440636][  T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.657543][T13266] veth1_macvtap: entered allmulticast mode
[  190.034717][T13274] __nla_validate_parse: 11 callbacks suppressed
[  190.034734][T13274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2344'.
[  190.087570][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'.
[  190.090518][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'.
[  190.179074][T13282] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  190.238412][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2350'.
[  190.241461][T13287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2350'.
[  190.309747][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2352'.
[  190.314064][T13291] xt_hashlimit: size too large, truncated to 1048576
[  190.414949][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'.
[  190.417988][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'.
[  190.640101][T13313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.664743][T13313] tipc: Disabling bearer <eth:syzkaller0>
[  190.775337][T13328] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  190.956731][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'.
[  190.964398][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'.
[  191.320840][ T5847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.383159][T13387] syzkaller1: entered promiscuous mode
[  191.403977][T13387] syzkaller1: entered allmulticast mode
[  192.726388][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  192.733972][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  192.737785][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  192.741435][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  192.747014][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  192.806234][T13417] lo speed is unknown, defaulting to 1000
[  192.952243][ T5847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.969951][T13417] vxcan1 speed is unknown, defaulting to 1000
[  193.086352][ T5847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.232265][ T5847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.522325][T13417] chnl_net:caif_netlink_parms(): no params data found
[  193.564475][ T5847] bridge_slave_1: left allmulticast mode
[  193.566603][ T5847] bridge_slave_1: left promiscuous mode
[  193.568621][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.575665][ T5847] bridge_slave_0: left allmulticast mode
[  193.577624][ T5847] bridge_slave_0: left promiscuous mode
[  193.579648][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.828736][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.833424][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.839192][ T5847] bond0 (unregistering): Released all slaves
[  193.846519][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.986217][T13417] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.988587][T13417] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.991003][T13417] bridge_slave_0: entered allmulticast mode
[  193.994130][T13417] bridge_slave_0: entered promiscuous mode
[  193.999561][T13417] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.002419][T13417] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.008136][T13417] bridge_slave_1: entered allmulticast mode
[  194.011051][T13417] bridge_slave_1: entered promiscuous mode
[  194.067506][T13417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.072741][T13417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.191535][T13482] netlink: 'syz.2.2396': attribute type 1 has an invalid length.
[  194.191728][T13417] team0: Port device team_slave_0 added
[  194.262800][T13482] 8021q: adding VLAN 0 to HW filter on device bond5
[  194.275222][T13417] team0: Port device team_slave_1 added
[  194.354424][T13417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.356812][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.366799][T13417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.372099][T13417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.374992][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.385855][T13417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.503419][T13417] hsr_slave_0: entered promiscuous mode
[  194.508499][T13417] hsr_slave_1: entered promiscuous mode
[  194.511526][T13417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.514731][T13417] Cannot create hsr debugfs directory
[  194.595817][ T5847] hsr_slave_0: left promiscuous mode
[  194.599688][ T5847] hsr_slave_1: left promiscuous mode
[  194.602531][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.605894][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.609732][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.612835][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.627354][ T5847] veth1_macvtap: left promiscuous mode
[  194.629504][ T5847] veth0_macvtap: left promiscuous mode
[  194.631701][ T5847] veth1_vlan: left promiscuous mode
[  194.633458][ T5847] veth0_vlan: left promiscuous mode
[  194.817585][   T54] Bluetooth: hci2: command tx timeout
[  195.011231][ T5847] team0 (unregistering): Port device team_slave_1 removed
[  195.041849][ T5847] team0 (unregistering): Port device team_slave_0 removed
[  195.527608][T13507] __nla_validate_parse: 10 callbacks suppressed
[  195.527624][T13507] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2402'.
[  195.645052][T13510] netlink: 'syz.2.2403': attribute type 5 has an invalid length.
[  196.146745][T13417] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  196.154282][T13417] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  196.185972][T13417] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  196.226539][T13417] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  196.251840][T13556] netlink: 'syz.1.2410': attribute type 32 has an invalid length.
[  196.352849][T13417] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.397304][T13417] 8021q: adding VLAN 0 to HW filter on device team0
[  196.415978][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.418994][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.443522][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.446580][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.480783][T13577] netlink: 'syz.2.2414': attribute type 5 has an invalid length.
[  196.583355][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'.
[  196.667003][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'.
[  196.670732][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'.
[  196.746932][T13417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.891714][   T54] Bluetooth: hci2: command tx timeout
[  196.902149][T13417] veth0_vlan: entered promiscuous mode
[  196.921038][T13417] veth1_vlan: entered promiscuous mode
[  196.949500][T13417] veth0_macvtap: entered promiscuous mode
[  196.966384][T13417] veth1_macvtap: entered promiscuous mode
[  196.975083][T13417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.981744][T13417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.018156][T13417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.021504][T13417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.029710][T13417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.046361][T13417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.148595][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.151283][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.179664][ T9684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.187847][ T9684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.320399][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'.
[  197.385449][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'.
[  197.539022][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[  197.542811][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[  197.587582][T13651] netlink: 'syz.1.2433': attribute type 7 has an invalid length.
[  197.600932][T13651] : entered promiscuous mode
[  198.367207][T13672] netlink: 'syz.2.2441': attribute type 5 has an invalid length.
[  198.486738][T13680] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2444'.
[  198.588577][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'.
[  198.681636][ T5847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.933584][ T5847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.115185][T13693] netlink: 'syz.2.2449': attribute type 5 has an invalid length.
[  200.179683][   T56] block nbd0: Receive control failed (result -104)
[  200.212598][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.224307][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.231006][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.237598][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.241324][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  200.263465][T13705] netlink: 'syz.2.2452': attribute type 3 has an invalid length.
[  200.280421][T13700] lo speed is unknown, defaulting to 1000
[  200.367254][ T5847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.449567][ T5847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.456116][T13719] netlink: 'syz.2.2457': attribute type 5 has an invalid length.
[  200.459589][T13700] vxcan1 speed is unknown, defaulting to 1000
[  200.493985][T13722] veth1_macvtap: left allmulticast mode
[  200.507321][T13722] hsr0: left allmulticast mode
[  200.509125][T13722] hsr_slave_0: left allmulticast mode
[  200.511143][T13722] hsr_slave_1: left allmulticast mode
[  200.513519][T13722] hsr0: left promiscuous mode
[  200.607219][T13726] netlink: 'syz.1.2461': attribute type 1 has an invalid length.
[  200.610210][T13726] netlink: 'syz.1.2461': attribute type 2 has an invalid length.
[  200.626100][T13726] netlink: 'syz.1.2461': attribute type 1 has an invalid length.
[  200.634218][T13726] netlink: 'syz.1.2461': attribute type 2 has an invalid length.
[  200.695074][ T5847] bridge_slave_1: left allmulticast mode
[  200.700269][ T5847] bridge_slave_1: left promiscuous mode
[  200.702827][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.720221][ T5847] bridge_slave_0: left allmulticast mode
[  200.722589][ T5847] bridge_slave_0: left promiscuous mode
[  200.735568][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.989244][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.993774][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.998130][ T5847] bond0 (unregistering): Released all slaves
[  201.109537][T13738] netlink: 'syz.2.2464': attribute type 126 has an invalid length.
[  201.190202][T13700] chnl_net:caif_netlink_parms(): no params data found
[  201.292844][T13741] netlink: 'syz.2.2465': attribute type 5 has an invalid length.
[  201.631675][T13700] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.635737][T13700] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.638754][T13700] bridge_slave_0: entered allmulticast mode
[  201.655498][T13700] bridge_slave_0: entered promiscuous mode
[  201.668497][T13700] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.676146][T13700] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.678671][T13700] bridge_slave_1: entered allmulticast mode
[  201.693357][T13700] bridge_slave_1: entered promiscuous mode
[  201.735307][T13775] __nla_validate_parse: 2 callbacks suppressed
[  201.735319][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'.
[  201.781595][T13769] lo speed is unknown, defaulting to 1000
[  201.792312][ T5847] hsr_slave_0: left promiscuous mode
[  201.794726][ T5847] hsr_slave_1: left promiscuous mode
[  201.796752][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.799143][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.815689][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.820229][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.841378][ T5847] veth1_macvtap: left promiscuous mode
[  201.843188][ T5847] veth0_macvtap: left promiscuous mode
[  201.845784][ T5847] veth1_vlan: left promiscuous mode
[  201.847477][ T5847] veth0_vlan: left promiscuous mode
[  202.245322][ T5847] team0 (unregistering): Port device team_slave_1 removed
[  202.271740][ T5847] team0 (unregistering): Port device team_slave_0 removed
[  202.326139][ T5842] Bluetooth: hci2: command tx timeout
[  202.529932][T13700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.534300][T13769] vxcan1 speed is unknown, defaulting to 1000
[  202.545645][T13700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.627445][T13700] team0: Port device team_slave_0 added
[  202.631004][T13700] team0: Port device team_slave_1 added
[  202.700373][T13700] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.703214][T13700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.734151][T13700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.738861][T13700] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.741158][T13700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.764924][T13700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.838097][T13793] netlink: 'syz.2.2476': attribute type 5 has an invalid length.
[  202.940533][T13799] 8021q: adding VLAN 0 to HW filter on device bond6
[  202.975394][T13700] hsr_slave_0: entered promiscuous mode
[  202.977697][T13700] hsr_slave_1: entered promiscuous mode
[  202.979845][T13700] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.982818][T13700] Cannot create hsr debugfs directory
[  203.019127][T13799] 8021q: adding VLAN 0 to HW filter on device bond6
[  203.022101][T13799] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  203.026594][T13799] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  203.233977][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'.
[  203.582426][T13824] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2482'.
[  203.689186][T13833] nbd: must specify an index to disconnect
[  203.720683][T13700] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  203.733470][T13700] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  203.756932][T13700] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  203.773586][T13700] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  203.801405][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  203.918110][T13700] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.943270][T13700] 8021q: adding VLAN 0 to HW filter on device team0
[  203.952029][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.954922][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.966648][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.968951][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.017401][T13700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  204.020724][T13700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.038916][T13873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'.
[  204.041837][T13873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'.
[  204.194816][T13873] macvlan0: left promiscuous mode
[  204.196624][T13873] macvlan0: left allmulticast mode
[  204.206230][T13700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.230452][T13700] veth0_vlan: entered promiscuous mode
[  204.237414][T13700] veth1_vlan: entered promiscuous mode
[  204.264320][T13700] veth0_macvtap: entered promiscuous mode
[  204.268398][T13700] veth1_macvtap: entered promiscuous mode
[  204.283180][T13700] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.291691][T13700] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.298995][T13700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.301990][T13700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.306594][T13700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.309487][T13700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.339211][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'.
[  204.398804][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.405908][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.414417][ T5842] Bluetooth: hci2: command tx timeout
[  204.425483][ T9684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.428487][ T9684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.535818][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'.
[  205.584584][T13932] lo speed is unknown, defaulting to 1000
[  205.670416][T13932] vxcan1 speed is unknown, defaulting to 1000
[  206.223100][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.442551][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.567433][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.636260][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.705964][T13963] vxcan3: entered allmulticast mode
[  207.883443][ T5864] bridge_slave_1: left allmulticast mode
[  207.903440][ T5864] bridge_slave_1: left promiscuous mode
[  207.909384][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.916570][ T5864] bridge_slave_0: left allmulticast mode
[  207.918920][ T5864] bridge_slave_0: left promiscuous mode
[  207.922994][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.981741][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.986723][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.991145][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.998701][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.001605][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.350280][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.356457][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.361549][ T5864] bond0 (unregistering): Released all slaves
[  208.370896][T13981] validate_nla: 4 callbacks suppressed
[  208.370912][T13981] netlink: 'syz.1.2509': attribute type 6 has an invalid length.
[  208.396576][T13986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.417849][T13987] syzkaller0: entered promiscuous mode
[  208.419633][T13987] syzkaller0: entered allmulticast mode
[  208.467809][T13973] lo speed is unknown, defaulting to 1000
[  208.468637][T13980] tipc: Resetting bearer <eth:syzkaller0>
[  208.477348][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  208.489269][T13979] tipc: Resetting bearer <eth:syzkaller0>
[  208.520611][T13979] tipc: Disabling bearer <eth:syzkaller0>
[  208.553542][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  208.783076][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'.
[  208.786988][T13973] vxcan1 speed is unknown, defaulting to 1000
[  208.947073][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'.
[  209.448521][ T5864] hsr_slave_0: left promiscuous mode
[  209.451227][ T5864] hsr_slave_1: left promiscuous mode
[  209.474259][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.477600][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.481419][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.487622][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.508365][ T5864] veth1_macvtap: left promiscuous mode
[  209.510837][ T5864] veth0_macvtap: left promiscuous mode
[  209.513356][ T5864] veth1_vlan: left promiscuous mode
[  209.515873][ T5864] veth0_vlan: left promiscuous mode
[  209.898640][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  209.922142][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  210.094222][ T5842] Bluetooth: hci2: command tx timeout
[  210.106547][T14046] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2522'.
[  210.222913][T13973] chnl_net:caif_netlink_parms(): no params data found
[  210.358291][T13973] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.365810][T13973] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.369758][T13973] bridge_slave_0: entered allmulticast mode
[  210.372498][T13973] bridge_slave_0: entered promiscuous mode
[  210.392696][T13973] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.401456][T13973] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.403793][T13973] bridge_slave_1: entered allmulticast mode
[  210.416112][T13973] bridge_slave_1: entered promiscuous mode
[  210.481452][T14059] netlink: 'syz.1.2526': attribute type 1 has an invalid length.
[  210.487540][T14061] netlink: 'syz.2.2527': attribute type 5 has an invalid length.
[  210.499372][T14059] 8021q: adding VLAN 0 to HW filter on device bond12
[  210.522604][T13973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.532564][T13973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.600666][T13973] team0: Port device team_slave_0 added
[  210.607682][T13973] team0: Port device team_slave_1 added
[  210.632560][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'.
[  210.708237][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'.
[  210.714899][T13973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.717754][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.731212][T13973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.759298][T13973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.763273][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.775969][T13973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.935246][T13973] hsr_slave_0: entered promiscuous mode
[  210.942037][T13973] hsr_slave_1: entered promiscuous mode
[  210.957650][T13973] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.960793][T13973] Cannot create hsr debugfs directory
[  211.593739][T14106] netlink: 'syz.1.2538': attribute type 5 has an invalid length.
[  211.841406][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'.
[  211.937878][T14123] vlan0: entered promiscuous mode
[  211.983478][T14128] netlink: 'syz.2.2543': attribute type 5 has an invalid length.
[  212.016668][T13973] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  212.042290][T13973] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  212.055825][T13973] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  212.070185][T13973] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  212.164036][ T5842] Bluetooth: hci2: command tx timeout
[  212.205428][T13973] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.236793][T13973] 8021q: adding VLAN 0 to HW filter on device team0
[  212.241713][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.244114][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.269315][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.271700][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.277556][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'.
[  212.483618][T13973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.551531][T14188] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2557'.
[  212.597495][T13973] veth0_vlan: entered promiscuous mode
[  212.615715][T13973] veth1_vlan: entered promiscuous mode
[  212.629568][T13973] veth0_macvtap: entered promiscuous mode
[  212.637455][T13973] veth1_macvtap: entered promiscuous mode
[  212.657466][T13973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.668537][T13973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.678240][T14197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.684389][T13973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.687148][T13973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.689876][T13973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.693460][T13973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.773475][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.776414][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.801542][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.805644][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.887832][T14208] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  213.275264][T14253] netlink: 'syz.2.2576': attribute type 1 has an invalid length.
[  213.279505][T14253] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  214.550842][T14320] netlink: 'syz.1.2590': attribute type 3 has an invalid length.
[  214.592278][T14320] __nla_validate_parse: 5 callbacks suppressed
[  214.592296][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2590'.
[  214.654652][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.696789][T14320] lo speed is unknown, defaulting to 1000
[  214.867304][T14320] vxcan1 speed is unknown, defaulting to 1000
[  216.231013][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'.
[  216.275033][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.420101][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.423553][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.426835][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  216.430177][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  216.432770][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.458003][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.483180][T14367] lo speed is unknown, defaulting to 1000
[  216.567914][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.652457][T14373] openvswitch: netlink: IPv6 tunnel dst address is zero
[  216.674582][T14367] vxcan1 speed is unknown, defaulting to 1000
[  216.721570][   T13] bridge_slave_1: left allmulticast mode
[  216.723769][   T13] bridge_slave_1: left promiscuous mode
[  216.728645][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.734170][   T13] bridge_slave_0: left allmulticast mode
[  216.736139][   T13] bridge_slave_0: left promiscuous mode
[  216.738130][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.007855][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.012179][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.016772][   T13] bond0 (unregistering): Released all slaves
[  217.468113][T14367] chnl_net:caif_netlink_parms(): no params data found
[  217.542008][T14393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2601'.
[  217.642846][T14400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2603'.
[  217.732107][T14404] netlink: 'syz.1.2604': attribute type 2 has an invalid length.
[  217.744448][T14404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2604'.
[  217.771888][   T13] hsr_slave_0: left promiscuous mode
[  217.776767][   T13] hsr_slave_1: left promiscuous mode
[  217.779223][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.781693][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.788031][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.795558][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.820088][   T13] veth1_macvtap: left promiscuous mode
[  217.822484][   T13] veth0_macvtap: left promiscuous mode
[  217.827639][   T13] veth1_vlan: left promiscuous mode
[  217.829432][   T13] veth0_vlan: left promiscuous mode
[  218.016033][T14413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2606'.
[  218.067162][T14417] SET target dimension over the limit!
[  218.195178][   T13] team0 (unregistering): Port device team_slave_1 removed
[  218.226510][   T13] team0 (unregistering): Port device team_slave_0 removed
[  218.490086][ T5842] Bluetooth: hci2: command tx timeout
[  218.649421][T14367] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.652601][T14367] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.659850][T14367] bridge_slave_0: entered allmulticast mode
[  218.665331][T14367] bridge_slave_0: entered promiscuous mode
[  218.670747][T14367] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.673766][T14367] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.678931][T14367] bridge_slave_1: entered allmulticast mode
[  218.682879][T14367] bridge_slave_1: entered promiscuous mode
[  218.689791][T14409] lo speed is unknown, defaulting to 1000
[  218.724351][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'.
[  218.752658][T14421] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2607'.
[  218.835020][T14367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.841307][T14367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.933144][T14367] team0: Port device team_slave_0 added
[  218.940788][T14367] team0: Port device team_slave_1 added
[  218.943468][T14409] vxcan1 speed is unknown, defaulting to 1000
[  219.032386][T14367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.035553][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.054086][T14367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.082930][T14367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.088298][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.103647][T14367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.185522][T14367] hsr_slave_0: entered promiscuous mode
[  219.190404][T14367] hsr_slave_1: entered promiscuous mode
[  219.193757][T14367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.199442][T14367] Cannot create hsr debugfs directory
[  219.350641][T14447] ip6t_srh: unknown srh match flags  5294
[  219.592639][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'.
[  219.887372][T14467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2616'.
[  219.990917][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'.
[  220.074479][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'.
[  220.137796][T14480] syz.1.2619 uses old SIOCAX25GETINFO
[  220.262524][T14367] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  220.269385][T14367] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  220.278576][T14367] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  220.297204][T14367] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  220.342087][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'.
[  220.347154][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2622'.
[  220.350500][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'.
[  220.353816][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2622'.
[  220.357557][T14491] netlink: 'syz.1.2622': attribute type 6 has an invalid length.
[  220.496840][T14367] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.538984][T14367] 8021q: adding VLAN 0 to HW filter on device team0
[  220.556769][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.559742][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.564283][ T5842] Bluetooth: hci2: command tx timeout
[  220.586754][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.589772][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.660245][T14367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.663539][T14367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.671591][T14516] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  220.783303][T14367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.825090][T14367] veth0_vlan: entered promiscuous mode
[  220.830502][T14367] veth1_vlan: entered promiscuous mode
[  220.871863][T14367] veth0_macvtap: entered promiscuous mode
[  220.876578][T14367] veth1_macvtap: entered promiscuous mode
[  220.892376][T14367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.900640][T14367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.909519][T14367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.912620][T14367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.917408][T14367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.923848][T14367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.997290][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.003376][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.039308][ T9695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.043069][ T9695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.267752][T14561] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2637'.
[  221.350744][T14571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2638'.
[  221.504245][T14585] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.2639'.
[  221.654712][    C1] ------------[ cut here ]------------
[  221.657912][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  221.662385][    C1] WARNING: CPU: 1 PID: 23 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  221.666441][    C1] Modules linked in:
[  221.668529][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  221.674547][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.678564][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  221.681216][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  221.688651][    C1] RSP: 0018:ffffc900001b7258 EFLAGS: 00010246
[  221.691157][    C1] RAX: f43e57cc6a941600 RBX: 000000000000000c RCX: ffff888100685640
[  221.694096][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  221.697368][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  221.700660][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff888109162628
[  221.703632][    C1] R13: 0000000000000000 R14: ffff88803a2a8e40 R15: ffff88803a2ab0d8
[  221.707063][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  221.710465][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  221.713204][    C1] CR2: 00005634caea6e48 CR3: 000000003b4c2000 CR4: 00000000000006f0
[  221.716463][    C1] Call Trace:
[  221.717696][    C1]  <TASK>
[  221.718748][    C1]  rate_control_send_low+0x194/0x7a0
[  221.720527][    C1]  rate_control_get_rate+0x20b/0x5d0
[  221.722401][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  221.724656][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  221.727197][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  221.729000][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  221.730863][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  221.732911][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  221.735097][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  221.737021][    C1]  ? kthread+0x711/0x8a0
[  221.738481][    C1]  ? ret_from_fork+0x3fc/0x770
[  221.740310][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  221.742251][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[  221.744233][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  221.746305][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  221.748555][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  221.750740][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  221.752706][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  221.755640][    C1]  __iterate_interfaces+0x2ab/0x590
[  221.757687][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  221.759981][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  221.763166][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  221.765937][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  221.769001][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  221.771277][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.773836][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  221.776260][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  221.778740][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  221.780987][    C1]  handle_softirqs+0x286/0x870
[  221.783096][    C1]  ? schedule+0x165/0x360
[  221.785090][    C1]  ? run_ksoftirqd+0x9b/0x100
[  221.787178][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  221.789521][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  221.791677][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  221.793981][    C1]  run_ksoftirqd+0x9b/0x100
[  221.795989][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  221.798276][    C1]  smpboot_thread_fn+0x542/0xa60
[  221.800457][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  221.802612][    C1]  kthread+0x711/0x8a0
[  221.804437][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  221.806847][    C1]  ? __pfx_kthread+0x10/0x10
[  221.808915][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  221.811229][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.813550][    C1]  ? __pfx_kthread+0x10/0x10
[  221.815709][    C1]  ret_from_fork+0x3fc/0x770
[  221.817752][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  221.820042][    C1]  ? __switch_to_asm+0x39/0x70
[  221.822156][    C1]  ? __switch_to_asm+0x33/0x70
[  221.824357][    C1]  ? __pfx_kthread+0x10/0x10
[  221.826403][    C1]  ret_from_fork_asm+0x1a/0x30
[  221.828539][    C1]  </TASK>
[  221.829907][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  221.833074][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  221.837850][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.842237][    C1] Call Trace:
[  221.843729][    C1]  <TASK>
[  221.845038][    C1]  dump_stack_lvl+0x99/0x250
[  221.847077][    C1]  ? __asan_memcpy+0x40/0x70
[  221.849123][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.851414][    C1]  ? __pfx__printk+0x10/0x10
[  221.853384][    C1]  panic+0x2db/0x790
[  221.855039][    C1]  ? __pfx_panic+0x10/0x10
[  221.856914][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  221.859073][    C1]  __warn+0x31b/0x4b0
[  221.860839][    C1]  ? __rate_control_send_low+0x5df/0x820
[  221.863151][    C1]  ? __rate_control_send_low+0x5df/0x820
[  221.865468][    C1]  report_bug+0x2be/0x4f0
[  221.867264][    C1]  ? __rate_control_send_low+0x5df/0x820
[  221.869511][    C1]  ? __rate_control_send_low+0x5df/0x820
[  221.871901][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  221.873739][    C1]  handle_bug+0x84/0x160
[  221.875162][    C1]  exc_invalid_op+0x1a/0x50
[  221.876855][    C1]  asm_exc_invalid_op+0x1a/0x20
[  221.878862][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  221.881590][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  221.889442][    C1] RSP: 0018:ffffc900001b7258 EFLAGS: 00010246
[  221.891981][    C1] RAX: f43e57cc6a941600 RBX: 000000000000000c RCX: ffff888100685640
[  221.895286][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  221.898628][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  221.901837][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff888109162628
[  221.904814][    C1] R13: 0000000000000000 R14: ffff88803a2a8e40 R15: ffff88803a2ab0d8
[  221.908307][    C1]  ? __rate_control_send_low+0x5de/0x820
[  221.910750][    C1]  rate_control_send_low+0x194/0x7a0
[  221.913059][    C1]  rate_control_get_rate+0x20b/0x5d0
[  221.915298][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  221.917758][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  221.920495][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  221.922819][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  221.925294][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  221.927865][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  221.930582][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  221.933025][    C1]  ? kthread+0x711/0x8a0
[  221.934913][    C1]  ? ret_from_fork+0x3fc/0x770
[  221.937005][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  221.939400][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[  221.941845][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  221.944232][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  221.946575][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  221.949159][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  221.951429][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  221.954394][    C1]  __iterate_interfaces+0x2ab/0x590
[  221.956635][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  221.959208][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  221.962288][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  221.964864][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  221.967383][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  221.969188][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.971661][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  221.973859][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  221.976214][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  221.978351][    C1]  handle_softirqs+0x286/0x870
[  221.980361][    C1]  ? schedule+0x165/0x360
[  221.982238][    C1]  ? run_ksoftirqd+0x9b/0x100
[  221.984290][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  221.986581][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  221.988832][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  221.990902][    C1]  run_ksoftirqd+0x9b/0x100
[  221.992432][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  221.994156][    C1]  smpboot_thread_fn+0x542/0xa60
[  221.995807][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  221.997465][    C1]  kthread+0x711/0x8a0
[  221.998857][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  222.000637][    C1]  ? __pfx_kthread+0x10/0x10
[  222.002164][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.003862][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.005567][    C1]  ? __pfx_kthread+0x10/0x10
[  222.007089][    C1]  ret_from_fork+0x3fc/0x770
[  222.008633][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  222.010291][    C1]  ? __switch_to_asm+0x39/0x70
[  222.011809][    C1]  ? __switch_to_asm+0x33/0x70
[  222.013373][    C1]  ? __pfx_kthread+0x10/0x10
[  222.014899][    C1]  ret_from_fork_asm+0x1a/0x30
[  222.016431][    C1]  </TASK>
[  222.018185][    C1] Kernel Offset: disabled
[  222.019629][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:49:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e13f160 RBP=ffffffff81ab7ead RSP=ffffc90003697038
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900036971d8 R11=ffffffff81ad03a0
R12=0000000000000002 R13=ffffffff8e13f160 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819e3f2b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdc193721d0 CR3=000000010ec46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001b69f0
R8 =ffff888020aa0237 R9 =1ffff11004154046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98a4 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005634caea6e48 CR3=000000003b4c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=400b000800000001 0000000000000050 XMM03=0001000b80010024 8004002800000000
XMM04=0001000880020014 000079786f727074 XMM05=0a00070700000000 0000000000010011
XMM06=0000001400000000 307a797300010008 XMM07=8002001400007978 6f7270740001000b
XMM08=8001002480040028 00000000400b0008 XMM09=0000000000000000 00007f5a6f411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
