last executing test programs:

34.734065645s ago: executing program 1 (id=834):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r3, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f03e1b04000000b631376f"}})
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32], 0xffdd)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1, {[0x401, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000105010700000000000000000a00e75fe497b70003"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000270404c7b55ef803670000000a01010000000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000d189381ff26e7b85940f5b84ec2c6bde77808587a3be62cf4db09eb90f2c6358337575a9ab0be9c6f39d3e6763861c9ead7a7867bc9f9928080dc3de7a8d4d88201827926a3965a2071b1711230dfda219dc965ea53c381641b71ff4f4114e64483e0272db9438411031b86397dac16a03037abc246510f4e49e05816cef4b6fbb2a87ccaa73d2ec309307b300043f8e65d8f9a101b148e9fe50075e5daec8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'})
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)

26.595116079s ago: executing program 1 (id=834):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r3, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f03e1b04000000b631376f"}})
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32], 0xffdd)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1, {[0x401, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000105010700000000000000000a00e75fe497b70003"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000270404c7b55ef803670000000a01010000000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000d189381ff26e7b85940f5b84ec2c6bde77808587a3be62cf4db09eb90f2c6358337575a9ab0be9c6f39d3e6763861c9ead7a7867bc9f9928080dc3de7a8d4d88201827926a3965a2071b1711230dfda219dc965ea53c381641b71ff4f4114e64483e0272db9438411031b86397dac16a03037abc246510f4e49e05816cef4b6fbb2a87ccaa73d2ec309307b300043f8e65d8f9a101b148e9fe50075e5daec8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'})
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)

20.916347281s ago: executing program 1 (id=834):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r3, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f03e1b04000000b631376f"}})
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32], 0xffdd)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1, {[0x401, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000105010700000000000000000a00e75fe497b70003"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000270404c7b55ef803670000000a01010000000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000d189381ff26e7b85940f5b84ec2c6bde77808587a3be62cf4db09eb90f2c6358337575a9ab0be9c6f39d3e6763861c9ead7a7867bc9f9928080dc3de7a8d4d88201827926a3965a2071b1711230dfda219dc965ea53c381641b71ff4f4114e64483e0272db9438411031b86397dac16a03037abc246510f4e49e05816cef4b6fbb2a87ccaa73d2ec309307b300043f8e65d8f9a101b148e9fe50075e5daec8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'})
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)

14.869410702s ago: executing program 1 (id=834):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r3, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f03e1b04000000b631376f"}})
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32], 0xffdd)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1, {[0x401, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000105010700000000000000000a00e75fe497b70003"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000270404c7b55ef803670000000a01010000000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000d189381ff26e7b85940f5b84ec2c6bde77808587a3be62cf4db09eb90f2c6358337575a9ab0be9c6f39d3e6763861c9ead7a7867bc9f9928080dc3de7a8d4d88201827926a3965a2071b1711230dfda219dc965ea53c381641b71ff4f4114e64483e0272db9438411031b86397dac16a03037abc246510f4e49e05816cef4b6fbb2a87ccaa73d2ec309307b300043f8e65d8f9a101b148e9fe50075e5daec8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'})
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)

8.791480539s ago: executing program 1 (id=834):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r3, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f03e1b04000000b631376f"}})
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32], 0xffdd)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1, {[0x401, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000105010700000000000000000a00e75fe497b70003"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000270404c7b55ef803670000000a01010000000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000d189381ff26e7b85940f5b84ec2c6bde77808587a3be62cf4db09eb90f2c6358337575a9ab0be9c6f39d3e6763861c9ead7a7867bc9f9928080dc3de7a8d4d88201827926a3965a2071b1711230dfda219dc965ea53c381641b71ff4f4114e64483e0272db9438411031b86397dac16a03037abc246510f4e49e05816cef4b6fbb2a87ccaa73d2ec309307b300043f8e65d8f9a101b148e9fe50075e5daec8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'})
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)

2.840117864s ago: executing program 1 (id=834):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r3, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f03e1b04000000b631376f"}})
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32], 0xffdd)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1, {[0x401, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000105010700000000000000000a00e75fe497b70003"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000270404c7b55ef803670000000a01010000000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000d189381ff26e7b85940f5b84ec2c6bde77808587a3be62cf4db09eb90f2c6358337575a9ab0be9c6f39d3e6763861c9ead7a7867bc9f9928080dc3de7a8d4d88201827926a3965a2071b1711230dfda219dc965ea53c381641b71ff4f4114e64483e0272db9438411031b86397dac16a03037abc246510f4e49e05816cef4b6fbb2a87ccaa73d2ec309307b300043f8e65d8f9a101b148e9fe50075e5daec8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'})
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)

948.213237ms ago: executing program 0 (id=1155):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000017140197"], 0x20}}, 0x20004080)

940.74163ms ago: executing program 0 (id=1156):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e0000040f80ec59acbc0413a1f8480b4a00005e140602", 0x17}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}}, 0x84) (async)
ioctl(r0, 0x8b27, &(0x7f0000000040)) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, r0, 0x3e5a9000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)

868.859488ms ago: executing program 2 (id=1157):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x23, 0x0, 0x0) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x23, 0x0, 0x0)

818.091823ms ago: executing program 2 (id=1158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000038de8c306dad1f3d0d5493420000713e18e914717e144c6f262cff3c16d3b7a89dd627b8f898f947017bbc376b29b68758b19c8824d1642f090ccdc453f195dc427592361515efb89659b358bc14c89ccf85bab8f3fc3517dd25b7f3913650ce8eb4efbf3f4f80150795d95d2a8994176ef5"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5caf90e002cdd1c0, 0x2d}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

750.289235ms ago: executing program 2 (id=1159):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x38}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', <r4=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0xf8, 0x30, 0x9, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_skbedit={0xe0, 0x1, 0x0, 0x0, {{0xc}, {0xffffffffffffffc4, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x6}]}, {0xa3, 0x6, "4f56927ae16557330b04f5ea2ac9c123da371d5e39c984fc633846a1cb95fd20ed1084ec779c0c04a0d10dc0368ecc077af61a973f2953f170cee9ea3d283386f1cd98579a120576f8d9633ec4cbd82d09afc342ab3965b0fcc0d81b651ea4bc311eaaac7c000747568001dc1c087fea97b114831c13ba00be0d7474952bd1c292b6b5807fdd3003ea74f85b1686c2112c316ded6950a2985aabb475454d54"}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
getsockopt$packet_buf(r0, 0x107, 0x2, 0x0, &(0x7f0000000100))

748.487003ms ago: executing program 0 (id=1160):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x44, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={<r6=>0x0, 0x6, 0x6, [0x0, 0x200, 0x4, 0x3ff, 0x3, 0x24f5]}, &(0x7f0000000280)=0x14)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000002c0)={r6, 0x1}, &(0x7f0000000300)=0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
r8 = socket$inet6(0xa, 0x5, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000200)={'wpan0\x00'})
setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xe4, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0)

669.864949ms ago: executing program 0 (id=1161):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000a80)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x48000)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff}, 0x50)
r4 = socket$inet6(0xa, 0x3, 0x87)
getsockopt$inet6_mreq(r3, 0x29, 0x7, &(0x7f0000000640)={@empty, <r5=>0x0}, &(0x7f00000006c0)=0x14)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1, &(0x7f0000000980)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x2, 0xfa, &(0x7f0000000540)=""/250, 0x40f00, 0x1, '\x00', r5, @fallback=0x1c, r6, 0x8, &(0x7f0000000740)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x9, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[r3, r2, r3, r3], &(0x7f0000000800)=[{0x3, 0x3, 0x4, 0x2}, {0x3, 0x3, 0x2}, {0x2, 0x2, 0x10, 0x2}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0x29fc}, 0x94)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, <r7=>0x0}, &(0x7f0000000180)=0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private0, 0x800004, 0x1, 0xff, 0x5, 0x22, 0x1}, 0x20)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r10, 0x8b32, &(0x7f0000000040))
r11 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f00000004c0)=@assoc_value={<r12=>0x0}, &(0x7f00000009c0)=0xe)
setsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000140)={r12, 0x2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r13 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r13, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000400)={r12, 0x78, &(0x7f00000009c0)=[@in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x2}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0xb08, @empty, 0x3}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000a40)=0x10)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r14], 0x5c}}, 0x40)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x40, 0x0}, @in=@remote, 0x0, 0x2, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, r14, r7}, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2, 0x3, 0x3}}, 0xe8)
socket$inet6_tcp(0xa, 0x1, 0x0)

667.5905ms ago: executing program 2 (id=1162):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000d0003110004"], 0x10da) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200200006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x1100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x21}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c818}, 0x4000080) (async)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0380400001002b0f0500aaaaaaaaaabbffffffffffff0805033e09ebe4e06bc8f2aedc393eb8e9782f83599f7d312c6ff5aa29df52bbef7d91bc5131c0ee50a4e74ebe13b982041eaf3db882db4dccfffd2153b66543e1523196b20cc616667f0fe61cf7299431e85bbda7e1c1a016963c0f825e31f1cbdfada54fd33d953beef055e91577847f2b51a4238f4dc8402d0668ea97dce4aa2fcea2eb09e5bf2d17830680291dacb88edd1354030ff02be8e69f26d91b855f2ad81b7971dadfa8821f0bca9eaca1abf3552a0adfbd6c1a82c547fc491b40deb7c4e8fd80d0c8182ec0d812575eec4771"], 0xbd)
r8 = socket$inet(0x2, 0x2, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x79, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
socket$rds(0x15, 0x5, 0x0)
r9 = socket$inet6(0x10, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xfffff7be) (async)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffd}, {0x16}]}, 0x10) (async)
sendto$inet6(r9, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000213000118008000100636d7000240002801000038009000100357c8b80ae0000000800024039000001080001"], 0xb4}}, 0x0)

171.486882ms ago: executing program 0 (id=1163):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
unshare(0x28000600)
shutdown(r3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0xc, 0x5, {0x8, @struct={0x6, 0x4}, 0x0, 0x8, 0x1, 0x9, 0x5, 0x6, 0x14, @usage=0x7fff, 0x4, 0x9, [0x6, 0x1, 0xc000000000000000, 0x3, 0x8000, 0x35c]}, {0x1, @usage=0xfffffffffffffffb, 0x0, 0x9, 0x7f, 0x5, 0xcbf2, 0x7f, 0x80, @usage=0x7, 0x6, 0x0, [0x0, 0x4, 0x9, 0xfffffffffffffffe, 0x800, 0x1]}, {0x4, @struct={0x80000001, 0x3}, <r6=>0x0, 0x7, 0x0, 0xfffffffffffffffa, 0xafaf, 0x0, 0x80, @usage=0x9, 0x800, 0x3, [0x9, 0xffe0, 0x1, 0x7, 0x2]}, {0x6f33, 0x6}})
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f00000008c0)={r6, "ebc790b6d8bec3406f7c5fedca118169"})
getpeername$packet(r4, 0x0, &(0x7f0000000040))
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c)

170.899296ms ago: executing program 2 (id=1164):
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0x0, 0x2, 0x3}]}]}}, 0x0, 0x32, 0x0, 0xa, 0x83d2}, 0x28)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc091}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

101.386535ms ago: executing program 2 (id=1165):
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100))
r1 = socket(0x2a, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240))
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x3}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0xc8, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xea}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0xfffffffffffffd43, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2006}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000094}, 0x11)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pim6reg1\x00'}]}}]}, 0x48}}, 0x8c000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74)
close(r9)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x2, 'drbg_nopr_sha512\x00'}, 0x58)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 0 (id=1166):
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000004800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000001680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
connect$l2tp6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @empty, 0x7, 0x2}, 0x20)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100), 0x8)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmmsg(r6, &(0x7f000000e340), 0x0, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10813' (ED25519) to the list of known hosts.
syzkaller login: [   48.491006][ T5758] cgroup: Unknown subsys name 'net'
[   48.570970][ T5758] cgroup: Unknown subsys name 'cpuset'
[   48.577022][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.335096][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.663068][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.666264][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.668884][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.672029][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.675610][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.784461][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   54.808907][ T5201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.811559][ T5201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.814542][ T5201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.817109][ T5201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.822629][ T5201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.827338][ T5201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.830115][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.840015][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.844505][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.847929][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.880922][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.884544][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.887021][ T5808] bridge_slave_0: entered allmulticast mode
[   54.889766][ T5808] bridge_slave_0: entered promiscuous mode
[   54.896649][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.905281][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.907721][ T5808] bridge_slave_1: entered allmulticast mode
[   54.910982][ T5808] bridge_slave_1: entered promiscuous mode
[   54.935609][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.943537][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.993128][ T5808] team0: Port device team_slave_0 added
[   55.000887][ T5808] team0: Port device team_slave_1 added
[   55.041659][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.044257][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.052636][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.067521][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.069834][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.078701][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.212328][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   55.229772][ T5808] hsr_slave_0: entered promiscuous mode
[   55.232921][ T5808] hsr_slave_1: entered promiscuous mode
[   55.243735][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   55.370424][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.372835][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.375949][ T5815] bridge_slave_0: entered allmulticast mode
[   55.379025][ T5815] bridge_slave_0: entered promiscuous mode
[   55.393897][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.396530][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.399357][ T5816] bridge_slave_0: entered allmulticast mode
[   55.401943][ T5816] bridge_slave_0: entered promiscuous mode
[   55.405097][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.407520][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.409960][ T5816] bridge_slave_1: entered allmulticast mode
[   55.412635][ T5816] bridge_slave_1: entered promiscuous mode
[   55.415819][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.418811][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.421314][ T5815] bridge_slave_1: entered allmulticast mode
[   55.425000][ T5815] bridge_slave_1: entered promiscuous mode
[   55.471104][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.479434][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.495666][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.505523][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.553386][ T5816] team0: Port device team_slave_0 added
[   55.561117][ T5815] team0: Port device team_slave_0 added
[   55.564855][ T5816] team0: Port device team_slave_1 added
[   55.568735][ T5815] team0: Port device team_slave_1 added
[   55.609415][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.611820][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.620815][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.636726][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.639604][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.650309][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.655638][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.657929][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.667121][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.670929][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.680515][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.682775][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.692246][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.712248][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.719689][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.726675][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.747861][ T5816] hsr_slave_0: entered promiscuous mode
[   55.750419][ T5816] hsr_slave_1: entered promiscuous mode
[   55.752736][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.757289][ T5816] Cannot create hsr debugfs directory
[   55.817599][ T5815] hsr_slave_0: entered promiscuous mode
[   55.820855][ T5815] hsr_slave_1: entered promiscuous mode
[   55.823714][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.828570][ T5815] Cannot create hsr debugfs directory
[   56.080596][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.089566][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.096338][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.101181][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.175245][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.185419][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.188438][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.198222][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.210244][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.237830][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   56.260032][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.263181][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.282192][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.285361][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.392098][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.420351][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   56.446656][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.449769][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.458870][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.471046][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.474284][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.488659][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   56.500188][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.502994][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.528336][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.531414][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.602008][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.667041][ T5808] veth0_vlan: entered promiscuous mode
[   56.686235][ T5808] veth1_vlan: entered promiscuous mode
[   56.706002][   T54] Bluetooth: hci0: command tx timeout
[   56.725675][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.737935][ T5808] veth0_macvtap: entered promiscuous mode
[   56.743633][ T5808] veth1_macvtap: entered promiscuous mode
[   56.770287][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.787545][ T5816] veth0_vlan: entered promiscuous mode
[   56.792535][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.810540][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.815389][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.818909][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.822458][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.838018][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.841381][ T5816] veth1_vlan: entered promiscuous mode
[   56.874471][   T54] Bluetooth: hci1: command tx timeout
[   56.876395][ T5819] Bluetooth: hci2: command tx timeout
[   56.920190][ T5816] veth0_macvtap: entered promiscuous mode
[   56.928917][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.932029][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.954384][ T5816] veth1_macvtap: entered promiscuous mode
[   56.958144][ T5815] veth0_vlan: entered promiscuous mode
[   56.966831][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.969831][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.973656][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.989154][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.993105][ T5815] veth1_vlan: entered promiscuous mode
[   56.999446][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.002652][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.006270][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.009018][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.043622][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.089319][ T5815] veth0_macvtap: entered promiscuous mode
[   57.105484][ T5815] veth1_macvtap: entered promiscuous mode
[   57.151163][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.157951][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.169193][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.227338][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.255188][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.259016][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.262726][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.274360][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.305041][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.329444][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.427518][ T5888] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   57.554078][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.557815][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.558953][ T5896] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   57.612745][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.620631][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.739748][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.808427][ T5914] IPVS: set_ctl: invalid protocol: 4 172.20.20.54:20003
[   57.857601][ T5921] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   57.860547][ T5921] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   58.108621][ T5941] Zero length message leads to an empty skb
[   58.225900][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.794182][   T54] Bluetooth: hci0: command tx timeout
[   58.944026][   T54] Bluetooth: hci1: command tx timeout
[   58.946142][ T5819] Bluetooth: hci2: command tx timeout
[   59.440261][ T6021] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15'.
[   59.460617][ T6021] can: request_module (can-proto-4) failed.
[   59.588815][ T6048] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004
[   59.819353][ T6065] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   59.888450][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.891550][ T6067] netlink: 'syz.0.20': attribute type 7 has an invalid length.
[   59.895703][ T6067] netlink: 'syz.0.20': attribute type 8 has an invalid length.
[   59.898310][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'.
[   60.182142][ T6081] netlink: 'syz.1.24': attribute type 3 has an invalid length.
[   60.186648][ T6081] netlink: 'syz.1.24': attribute type 3 has an invalid length.
[   60.190088][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'.
[   60.682002][ T6108] sctp: [Deprecated]: syz.0.33 (pid 6108) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.682002][ T6108] Use struct sctp_sack_info instead
[   60.820952][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'.
[   60.864264][   T54] Bluetooth: hci0: command tx timeout
[   61.025488][   T54] Bluetooth: hci1: command tx timeout
[   61.027872][ T5819] Bluetooth: hci2: command tx timeout
[   61.392529][ T6145] netlink: 204 bytes leftover after parsing attributes in process `syz.2.45'.
[   61.528944][ T6159] netlink: 'syz.1.49': attribute type 10 has an invalid length.
[   61.551991][ T6159] veth0_vlan: left promiscuous mode
[   61.557745][ T6159] veth0_vlan: entered promiscuous mode
[   61.562171][ T6159] team0: Device veth0_vlan failed to register rx_handler
[   61.577582][ T6159] syz.1.49 (6159) used greatest stack depth: 18840 bytes left
[   61.663242][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'.
[   61.672459][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.675408][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.897039][ T6175] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.113423][ T6179] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[   62.116549][ T6179] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[   62.466946][ T6185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.58'.
[   62.522045][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.527687][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.531506][ T6185] bond0 (unregistering): Released all slaves
[   62.832240][ T6196] bridge_slave_0: left allmulticast mode
[   62.834924][ T6196] bridge_slave_0: left promiscuous mode
[   62.838449][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.851175][ T6196] bridge_slave_1: left allmulticast mode
[   62.853720][ T6196] bridge_slave_1: left promiscuous mode
[   62.865906][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.891974][ T6196] team0: Port device team_slave_0 removed
[   62.900704][ T6196] team0: Port device team_slave_1 removed
[   62.903731][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.909885][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.915189][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.918444][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.944638][   T54] Bluetooth: hci0: command tx timeout
[   63.019334][ T6199] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   63.046890][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'.
[   63.105427][   T54] Bluetooth: hci1: command tx timeout
[   63.107837][   T54] Bluetooth: hci2: command tx timeout
[   63.219470][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[   63.222424][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'.
[   63.467937][ T6214] Bluetooth: MGMT ver 1.23
[   63.691266][ T6219] netlink: 'syz.2.69': attribute type 13 has an invalid length.
[   63.701887][ T6219] netlink: 'syz.2.69': attribute type 17 has an invalid length.
[   63.769920][ T6219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.785290][ T6219] xt_hashlimit: invalid interval
[   63.862449][ T6228] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   63.873147][ T6228] netlink: 56 bytes leftover after parsing attributes in process `syz.1.71'.
[   63.881179][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'.
[   63.995086][ T6231] netlink: 'syz.2.73': attribute type 21 has an invalid length.
[   64.220869][ T6242] xt_CT: No such helper "pptp"
[   64.225274][ T6242] Cannot find add_set index 0 as target
[   64.240149][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.76'.
[   64.297721][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'.
[   64.311209][ T5889] IPVS: starting estimator thread 0...
[   64.394346][ T6248] IPVS: using max 81 ests per chain, 194400 per kthread
[   64.543202][ T6262] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   64.552254][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   64.556218][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'.
[   64.606876][ T6266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.83'.
[   64.978629][ T6293] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[   64.995737][ T6295] xt_ecn: cannot match TCP bits for non-tcp packets
[   65.072062][ T6299] warning: `syz.0.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.278073][ T6345] x_tables: duplicate underflow at hook 3
[   66.377279][ T6350] atomic_op ffff8881064fd998 conn xmit_atomic 0000000000000000
[   66.966440][ T6396] batadv_slave_1: entered promiscuous mode
[   67.115174][ T6406] netlink: 'syz.1.129': attribute type 2 has an invalid length.
[   67.119948][ T6406] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   67.129670][ T6405] No such timeout policy "syz1"
[   67.514762][ T5889] IPVS: starting estimator thread 0...
[   67.519353][ T6431] netlink: 'syz.0.138': attribute type 21 has an invalid length.
[   67.604150][ T6432] IPVS: using max 79 ests per chain, 189600 per kthread
[   67.791747][ T6458] sctp: [Deprecated]: syz.0.145 (pid 6458) Use of int in max_burst socket option deprecated.
[   67.791747][ T6458] Use struct sctp_assoc_value instead
[   68.266489][ T6491] __nla_validate_parse: 12 callbacks suppressed
[   68.266498][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'.
[   68.353167][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[   68.528585][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   68.649412][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'.
[   68.653048][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'.
[   68.772172][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[   68.848427][ T6531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'.
[   68.936690][ T6540] ieee802154 phy0 wpan0: encryption failed: -90
[   68.942131][ T6537] netlink: 76 bytes leftover after parsing attributes in process `syz.2.174'.
[   68.957262][ T6537] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.174'.
[   69.058309][ T6554] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   69.067722][ T6554] netlink: 'syz.2.177': attribute type 21 has an invalid length.
[   69.070145][ T6554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.177'.
[   69.076863][ T6554] netlink: 'syz.2.177': attribute type 5 has an invalid length.
[   69.267367][ T6567] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   69.304850][ T6571] xt_bpf: check failed: parse error
[   69.487049][ T6583] macsec1: entered promiscuous mode
[   69.488773][ T6583] bridge0: entered promiscuous mode
[   69.491045][ T6583] bridge0: port 3(macsec1) entered blocking state
[   69.493361][ T6583] bridge0: port 3(macsec1) entered disabled state
[   69.499087][ T6583] macsec1: entered allmulticast mode
[   69.500869][ T6583] bridge0: entered allmulticast mode
[   69.504638][ T6583] macsec1: left allmulticast mode
[   69.506397][ T6583] bridge0: left allmulticast mode
[   69.509250][ T6583] bridge0: left promiscuous mode
[   69.808989][ T6603] lo speed is unknown, defaulting to 1000
[   69.812863][ T6603] lo speed is unknown, defaulting to 1000
[   69.817286][ T6603] lo speed is unknown, defaulting to 1000
[   69.869502][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.872448][ T6604] bridge0: port 2(bridge_slave_1) entered listening state
[   69.875715][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.878529][ T6604] bridge0: port 1(bridge_slave_0) entered listening state
[   69.890912][ T6604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.928974][  T790] lo speed is unknown, defaulting to 1000
[   69.931449][ T6603] infiniband syz0: set active
[   69.933569][ T6603] infiniband syz0: added lo
[   69.965386][ T6603] RDS/IB: syz0: added
[   69.967448][ T6603] smc: adding ib device syz0 with port count 1
[   69.970084][ T6603] smc:    ib device syz0 port 1 has pnetid 
[   69.975192][  T790] lo speed is unknown, defaulting to 1000
[   69.977724][ T6603] lo speed is unknown, defaulting to 1000
[   70.165638][ T6603] lo speed is unknown, defaulting to 1000
[   70.320013][ T6603] lo speed is unknown, defaulting to 1000
[   70.586314][ T6628] netlink: 'syz.2.198': attribute type 3 has an invalid length.
[   70.642982][ T6603] lo speed is unknown, defaulting to 1000
[   71.026852][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.029253][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.526826][ T6637] netlink: 'syz.1.200': attribute type 39 has an invalid length.
[   71.731509][  T790] lo speed is unknown, defaulting to 1000
[   71.741319][  T790] syz0: Port: 1 Link DOWN
[   71.745875][  T790] lo speed is unknown, defaulting to 1000
[   72.582910][ T6664] netlink: 'syz.2.209': attribute type 10 has an invalid length.
[   72.588249][ T6664] team0: Device dummy0 is up. Set it down before adding it as a team port
[   72.720488][ T6679] netlink: 'syz.2.212': attribute type 23 has an invalid length.
[   73.483569][ T6718] __nla_validate_parse: 13 callbacks suppressed
[   73.483579][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'.
[   74.091464][ T6765] set match dimension is over the limit!
[   74.243710][ T6776] Cannot find map_set index 0 as target
[   74.295839][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   74.301804][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'.
[   74.373445][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.379965][ T6788] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.455400][ T6794] syzkaller0: entered promiscuous mode
[   74.457633][ T6794] syzkaller0: entered allmulticast mode
[   74.467029][ T6796] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   74.627241][ T6802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.251'.
[   74.709767][ T6805] bond1: entered promiscuous mode
[   74.712185][ T6805] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.955025][ T6817] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   74.958371][ T6817] netlink: 224 bytes leftover after parsing attributes in process `syz.2.255'.
[   74.962983][ T6817] netlink: 176 bytes leftover after parsing attributes in process `syz.2.255'.
[   75.018959][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'.
[   75.022388][ T6820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.256'.
[   75.085279][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   75.168861][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[   75.306835][ T6861] openvswitch: netlink: Message has 8 unknown bytes.
[   75.454372][ T6876] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   75.497555][ T6881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.635945][ T6894] syzkaller1: entered promiscuous mode
[   75.641014][ T6894] syzkaller1: entered allmulticast mode
[   75.959278][ T6920] netlink: 'syz.1.290': attribute type 33 has an invalid length.
[   75.972396][ T6920] openvswitch: netlink: IPv6 tunnel dst address is zero
[   76.371759][ T6949] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   76.505635][ T6956] netlink: 'syz.0.301': attribute type 4 has an invalid length.
[   76.556671][ T6961] netlink: 'syz.0.303': attribute type 1 has an invalid length.
[   76.573258][ T6958] can: request_module (can-proto-0) failed.
[   76.579275][ T6958] netlink: 'syz.1.302': attribute type 1 has an invalid length.
[   76.621357][ T6961] bond0: (slave gretap1): making interface the new active one
[   76.626459][ T6961] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   76.826554][ T6975] lo speed is unknown, defaulting to 1000
[   77.142662][ T6996] netlink: 'syz.0.314': attribute type 10 has an invalid length.
[   77.147271][ T6996] openvswitch: netlink: Flow key attr not present in new flow.
[   77.203503][ T6997] sctp: [Deprecated]: syz.0.314 (pid 6997) Use of int in max_burst socket option deprecated.
[   77.203503][ T6997] Use struct sctp_assoc_value instead
[   77.369241][ T7011] syzkaller1: entered promiscuous mode
[   77.371597][ T7011] syzkaller1: entered allmulticast mode
[   77.402991][ T7015] xt_recent: Unsupported userspace flags (00000048)
[   77.541433][ T7023] netlink: 'syz.2.322': attribute type 21 has an invalid length.
[   78.126522][ T7076] netlink: 'syz.2.333': attribute type 3 has an invalid length.
[   78.272412][ T7082] x_tables: duplicate underflow at hook 1
[   78.528368][ T7102] __nla_validate_parse: 15 callbacks suppressed
[   78.528379][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.341'.
[   78.755324][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.349'.
[   78.839913][ T7140] ipvlan2: entered promiscuous mode
[   78.979034][ T7144] netlink: 'syz.1.351': attribute type 7 has an invalid length.
[   78.982266][ T7144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.351'.
[   79.081245][ T7155] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.351'.
[   79.403097][ T7170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.412909][ T7170] netlink: 76 bytes leftover after parsing attributes in process `syz.0.357'.
[   79.626755][ T7177] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   79.629608][ T7177] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   79.632767][ T7178] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   79.635550][ T7178] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   79.692762][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'.
[   79.719253][ T7181] xt_CT: No such helper "snmp"
[   79.981027][ T7209] netlink: 'syz.1.370': attribute type 7 has an invalid length.
[   79.998375][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.002337][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.057344][ T7214] block nbd0: NBD_DISCONNECT
[   80.061669][ T7214] block nbd0: Disconnected due to user request.
[   80.067722][ T7214] block nbd0: shutting down sockets
[   80.226133][ T7209] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.239130][ T7209] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.336225][ T7209] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.339951][ T7209] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.343499][ T7209] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.347596][ T7209] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.502304][ T7227] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   80.577119][ T7227] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   80.622002][ T7227] veth5: entered promiscuous mode
[   80.629051][ T7230] bridge_slave_0: left allmulticast mode
[   80.631463][ T7230] bridge_slave_0: left promiscuous mode
[   80.634114][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.639098][ T7238] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[   80.642756][ T7238] netlink: 228 bytes leftover after parsing attributes in process `syz.0.377'.
[   80.648111][ T7230] bridge_slave_1: left allmulticast mode
[   80.655620][ T7230] bridge_slave_1: left promiscuous mode
[   80.659287][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.670212][ T7230] bond0: (slave bond_slave_0): Releasing backup interface
[   80.676011][ T7230] bond0: (slave bond_slave_1): Releasing backup interface
[   80.682364][ T7230] team0: Port device team_slave_0 removed
[   80.688731][ T7230] team0: Port device team_slave_1 removed
[   80.691550][ T7230] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.696981][ T7230] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.702763][ T7230] bond2: (slave ip6gretap1): Releasing backup interface
[   80.751181][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.379'.
[   80.759994][ T7248] batman_adv: batadv0: Adding interface: dummy0
[   80.762428][ T7248] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.772980][ T7248] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   80.859731][ T7256] pim6reg1: entered promiscuous mode
[   80.865572][ T7256] pim6reg1: entered allmulticast mode
[   80.910487][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'.
[   80.914586][ T7251] tipc: Started in network mode
[   80.916568][ T7251] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   80.934420][ T7251] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   80.939442][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'.
[   80.944969][ T7251] tipc: Enabled bearer <udp:syz1>, priority 10
[   81.099841][ T7277] x_tables: duplicate underflow at hook 3
[   81.221282][ T7296] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[   81.221746][ T7295] netlink: 'syz.1.392': attribute type 39 has an invalid length.
[   81.229971][ T7296] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[   81.249247][ T7296] IPVS: length: 173 != 187531613888
[   81.271027][  T791] cfg80211: failed to load regulatory.db
[   81.356946][ T7303] netem: change failed
[   81.600400][ T7320] netlink: 'syz.1.395': attribute type 1 has an invalid length.
[   81.614708][ T7319] netem: incorrect gi model size
[   81.616981][ T7319] netem: change failed
[   81.938074][   T51] tipc: Node number set to 1
[   82.023416][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.030826][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.482285][ T7351] ipt_REJECT: TCP_RESET invalid for non-tcp
[   82.705937][ T7361] netlink: 'syz.0.412': attribute type 1 has an invalid length.
[   82.863621][ T7368] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.261588][ T7407] netlink: 'syz.1.425': attribute type 1 has an invalid length.
[   83.395282][ T7420] netlink: 'syz.0.429': attribute type 1 has an invalid length.
[   83.995545][ T7487] syzkaller1: entered promiscuous mode
[   83.998101][ T7487] syzkaller1: entered allmulticast mode
[   84.002397][ T7485] __nla_validate_parse: 22 callbacks suppressed
[   84.002409][ T7485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.449'.
[   84.248594][ T7500] netlink: del zone limit has 8 unknown bytes
[   84.251857][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'.
[   84.256305][ T7496] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   84.275002][ T7496] netlink: 34 bytes leftover after parsing attributes in process `syz.0.452'.
[   84.279733][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[   84.413301][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'.
[   84.476221][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.489754][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'.
[   84.594879][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'.
[   84.639186][ T7515] netlink: 260 bytes leftover after parsing attributes in process `syz.1.460'.
[   84.640215][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'.
[   84.642987][ T7515] netlink: 260 bytes leftover after parsing attributes in process `syz.1.460'.
[   84.848087][ T7539] lo speed is unknown, defaulting to 1000
[   85.203655][ T7571] validate_nla: 6 callbacks suppressed
[   85.203665][ T7571] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   85.273472][ T7576] gtp0: entered promiscuous mode
[   85.278683][ T7576] gtp0: entered allmulticast mode
[   85.659305][ T7597] netlink: 'syz.2.477': attribute type 6 has an invalid length.
[   86.122028][ T7634] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   86.181058][ T7636] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   86.415823][ T7658] xt_l2tp: v2 tid > 0xffff: 4294967295
[   86.441246][ T7660] netlink: 'syz.0.498': attribute type 1 has an invalid length.
[   86.488109][ T7660] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.492808][ T7660] bond1: (slave bond2): making interface the new active one
[   86.496252][ T7660] bond1: (slave bond2): Enslaving as an active interface with an up link
[   86.638477][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.642950][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.460931][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88802d074800: rx timeout, send abort
[   87.970945][ T7726] netlink: 'syz.2.517': attribute type 16 has an invalid length.
[   87.975222][ T7728] SET target dimension over the limit!
[   88.267628][ T7765] : renamed from bond_slave_0
[   88.353014][ T7773] bridge0: entered promiscuous mode
[   88.355222][ T7773] macsec2: entered allmulticast mode
[   88.357722][ T7773] bridge0: entered allmulticast mode
[   88.362388][ T7773] bridge0: left allmulticast mode
[   88.365741][ T7773] bridge0: left promiscuous mode
[   88.384255][ T5819] Bluetooth: hci2: command 0x0405 tx timeout
[   88.594546][ T7799] netlink: 'syz.1.540': attribute type 10 has an invalid length.
[   88.686226][ T7812] xt_hashlimit: size too large, truncated to 1048576
[   88.824832][ T7820] No such timeout policy "syz0"
[   88.843218][   T33] audit: type=1800 audit(1751683478.361:2): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=955 res=0 errno=0
[   88.856137][   T33] audit: type=1804 audit(1751683478.381:3): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.546" name="/newroot/183/x000000000000000300000000000000000000003" dev="tmpfs" ino=955 res=1 errno=0
[   89.009213][ T7841] __nla_validate_parse: 21 callbacks suppressed
[   89.009223][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'.
[   89.018525][ T7841] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[   89.587867][ T7862] syz_tun: entered allmulticast mode
[   89.600089][ T7862] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   89.652996][ T7866] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   89.912408][ T7889] xt_recent: Unsupported userspace flags (00000048)
[   89.921487][ T7890] xt_recent: Unsupported userspace flags (00000048)
[   89.940161][ T7893] netlink: 'syz.2.572': attribute type 1 has an invalid length.
[   89.956823][ T7894] netlink: 'syz.1.570': attribute type 2 has an invalid length.
[   89.960368][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[   90.094625][ T7903] vlan0: entered promiscuous mode
[   90.368752][ T7914] No such timeout policy "syz1"
[   90.437498][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'.
[   90.481261][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'.
[   90.495717][ T7922] netem: change failed
[   90.936414][ T7936] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = -3, id = 0
[   91.098389][ T7944] lo speed is unknown, defaulting to 1000
[   91.215668][ T7956] netlink: 'syz.1.590': attribute type 1 has an invalid length.
[   91.269416][ T7959] x_tables: duplicate underflow at hook 3
[   91.394251][ T7967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.479225][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[   91.482981][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'.
[   91.715348][ T7978] netlink: 104 bytes leftover after parsing attributes in process `syz.1.595'.
[   91.787611][ T7980] netlink: 'syz.1.596': attribute type 1 has an invalid length.
[   91.790946][ T7980] netlink: 144 bytes leftover after parsing attributes in process `syz.1.596'.
[   91.796531][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'.
[   91.928947][ T7989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.599'.
[   92.357245][ T8020] ip6t_srh: unknown srh invflags 4449
[   93.156635][ T8035] netlink: 'syz.2.615': attribute type 10 has an invalid length.
[   93.176487][ T8035] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.626579][ T8077] netlink: 'syz.2.628': attribute type 9 has an invalid length.
[   93.632345][ T8077] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   93.638645][ T8077] macvlan2: entered allmulticast mode
[   93.640605][ T8077] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   94.043427][ T8115] __nla_validate_parse: 6 callbacks suppressed
[   94.043436][ T8115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.634'.
[   94.075417][ T8118] netlink: 'syz.1.636': attribute type 4 has an invalid length.
[   94.105444][ T8121] batman_adv: batadv0: Adding interface: dummy0
[   94.107497][ T8121] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.117592][ T8121] batman_adv: batadv0: Interface activated: dummy0
[   94.169982][ T8128] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.174872][ T8128] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[   94.189113][ T8131] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   94.226257][ T8128] bond2: entered promiscuous mode
[   94.228318][ T8128] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.249913][ T8136] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.253002][ T8136] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   94.257392][ T8136] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   94.263485][ T8136] bond2: (slave ip6gre1): making interface the new active one
[   94.268828][ T8136] ip6gre1: entered promiscuous mode
[   94.272355][ T8136] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[   94.591360][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'.
[   94.635942][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'.
[   94.639262][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'.
[   94.752030][ T8160] xt_l2tp: invalid flags combination: 4
[   94.795717][ T8164] raw_sendmsg: syz.1.651 forgot to set AF_INET. Fix it!
[   94.888466][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.654'.
[   94.897848][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.654'.
[   94.898267][ T8183] syzkaller1: entered promiscuous mode
[   94.903318][ T8183] syzkaller1: entered allmulticast mode
[   94.938167][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'.
[   95.131043][ T8198] xt_policy: output policy not valid in PREROUTING and INPUT
[   95.139919][ T8198] net veth1_virt_wifi : renamed from virt_wifi0
[   95.288238][ T8212] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[   95.293296][ T8215] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[   95.348745][ T8219] netlink: 'syz.2.668': attribute type 21 has an invalid length.
[   95.524345][ T8229] x_tables: duplicate underflow at hook 1
[   95.526686][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[   95.808130][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[   95.884017][ T8252] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[   95.909018][ T8252] netlink: 44 bytes leftover after parsing attributes in process `syz.1.681'.
[   97.220433][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.296833][ T8318] syzkaller1: entered promiscuous mode
[   97.299032][ T8318] syzkaller1: entered allmulticast mode
[   97.373298][ T8326] netlink: 'syz.1.703': attribute type 9 has an invalid length.
[   97.558220][ T8344] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   97.788487][ T8358] IPVS: Unknown mcast interface: syzkaller0
[   97.865840][   T33] audit: type=1804 audit(1751683487.391:4): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.713" name="memory.events" dev="tmpfs" ino=1239 res=1 errno=0
[   97.872805][   T33] audit: type=1800 audit(1751683487.391:5): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.713" name="memory.events" dev="tmpfs" ino=1239 res=0 errno=0
[   97.893243][ T8364] dvmrp0: entered allmulticast mode
[   97.960976][ T8377] chnl_net:caif_netlink_parms(): no params data found
[   97.969722][ T8376] chnl_net:caif_netlink_parms(): no params data found
[   98.170385][ T8396] xt_TPROXY: Can be used only with -p tcp or -p udp
[   98.203285][ T8400] netlink: 'syz.2.725': attribute type 3 has an invalid length.
[   98.207634][ T8400] netlink: 'syz.2.725': attribute type 1 has an invalid length.
[   98.369706][ T8411] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   98.698130][ T8452] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   98.817806][ T8458] SET target dimension over the limit!
[   98.883768][ T8463] lo speed is unknown, defaulting to 1000
[   99.091899][ T8469] __nla_validate_parse: 18 callbacks suppressed
[   99.091911][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'.
[   99.375425][ T8490] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.752'.
[   99.379304][ T8490] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   99.557917][ T8505] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   99.610762][ T8512] tun0: tun_chr_ioctl cmd 2147767520
[   99.658505][ T8516] netlink: 'syz.1.760': attribute type 3 has an invalid length.
[   99.662616][ T8516] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.760'.
[   99.671452][ T8520] netlink: 'syz.2.755': attribute type 39 has an invalid length.
[   99.713474][ T8523] netlink: 'syz.1.761': attribute type 11 has an invalid length.
[   99.716411][ T8523] netlink: 228 bytes leftover after parsing attributes in process `syz.1.761'.
[   99.721323][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'.
[  100.304072][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  100.706976][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  100.709736][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.765'.
[  100.843604][ T8553] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.771'.
[  101.057849][ T8575] veth0: entered promiscuous mode
[  101.064460][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'.
[  101.079530][ T8575] veth0 (unregistering): left promiscuous mode
[  101.197401][ T8584] netlink: 'syz.1.778': attribute type 11 has an invalid length.
[  101.398100][ T8604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.564280][ T8620] netlink: 'syz.1.787': attribute type 21 has an invalid length.
[  101.567698][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'.
[  101.735839][ T8632] tipc: Can't bind to reserved service type 0
[  102.022708][ T8644] lo speed is unknown, defaulting to 1000
[  102.118196][ T8653] netlink: 'syz.1.801': attribute type 4 has an invalid length.
[  102.404651][ T8666] openvswitch: netlink: Missing key (keys=40, expected=80)
[  102.741060][ T8676] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  102.743629][ T8676] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  103.232484][ T8715] lo speed is unknown, defaulting to 1000
[  103.292326][ T8723] atomic_op ffff88802cd02198 conn xmit_atomic 0000000000000000
[  103.301756][ T8723] macvtap0: entered promiscuous mode
[  103.303649][ T8723] macvtap0: entered allmulticast mode
[  103.305749][ T8723] veth0_macvtap: entered allmulticast mode
[  103.622600][ T8731] xt_CT: No such helper "syz0"
[  103.632829][ T8732] xt_CT: No such helper "syz0"
[  103.841242][ T8747] netlink: 'syz.2.829': attribute type 10 has an invalid length.
[  103.853541][    T9] IPVS: starting estimator thread 0...
[  103.856861][ T8747] batman_adv: batadv0: Adding interface: netdevsim0
[  103.859816][ T8747] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.873564][ T8747] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  103.929068][ T8753] netlink: 'syz.1.831': attribute type 8 has an invalid length.
[  103.944024][ T8751] IPVS: using max 81 ests per chain, 194400 per kthread
[  104.156647][ T8760] __nla_validate_parse: 5 callbacks suppressed
[  104.156659][ T8760] netlink: 68 bytes leftover after parsing attributes in process `syz.2.836'.
[  104.260087][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.264634][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.268532][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.271676][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.275893][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.333398][ T8762] lo speed is unknown, defaulting to 1000
[  104.847313][   T13] bond0 (unregistering): Released all slaves
[  104.859000][   T13] bond1 (unregistering): Released all slaves
[  104.869335][   T13] bond2 (unregistering): Released all slaves
[  104.880427][   T13] bond3 (unregistering): Released all slaves
[  104.907952][ T8773] batadv_slave_0: entered promiscuous mode
[  104.948171][ T8773] batadv_slave_0: left promiscuous mode
[  104.987271][   T13] IPVS: stopping backup sync thread 7936 ...
[  105.251379][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'.
[  105.399670][ T8762] chnl_net:caif_netlink_parms(): no params data found
[  105.460411][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'.
[  105.509069][ T8807] netlink: 56 bytes leftover after parsing attributes in process `syz.0.843'.
[  105.526015][   T13] hsr_slave_0: left promiscuous mode
[  105.530193][   T13] hsr_slave_1: left promiscuous mode
[  105.533381][   T13] batman_adv: batadv0: Removing interface: dummy0
[  105.541859][   T13] veth0_macvtap: left allmulticast mode
[  106.176327][ T6546] smc: removing ib device syz0
[  106.235588][ T8818] batman_adv: batadv0: Interface deactivated: dummy0
[  106.275991][ T8818] batman_adv: batadv0: Removing interface: dummy0
[  106.318284][ T5819] Bluetooth: hci1: command tx timeout
[  106.449258][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  106.452911][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'.
[  106.473020][ T8832] netlink: 'syz.2.846': attribute type 5 has an invalid length.
[  106.488565][ T8832] netlink: 'syz.2.846': attribute type 6 has an invalid length.
[  106.554286][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'.
[  106.741503][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.764348][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.767527][ T8762] bridge_slave_0: entered allmulticast mode
[  106.776363][ T8762] bridge_slave_0: entered promiscuous mode
[  106.786563][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.793190][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.799041][ T8762] bridge_slave_1: entered allmulticast mode
[  106.842453][ T8762] bridge_slave_1: entered promiscuous mode
[  106.925679][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.945802][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.022054][ T8762] team0: Port device team_slave_0 added
[  107.045159][ T8762] team0: Port device team_slave_1 added
[  107.090869][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.096088][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.108514][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.127827][   T13] IPVS: stop unused estimator thread 0...
[  107.136823][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.139563][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.154561][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.250293][ T8762] hsr_slave_0: entered promiscuous mode
[  107.267148][ T8762] hsr_slave_1: entered promiscuous mode
[  107.273307][ T8762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.283998][ T8762] Cannot create hsr debugfs directory
[  107.491194][ T8866] netlink: 304 bytes leftover after parsing attributes in process `syz.2.852'.
[  107.708197][ T8881] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.857'.
[  107.803019][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.859'.
[  107.926097][ T8897] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  107.931548][ T8897] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  108.203378][ T8762] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  108.290443][ T8762] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  108.296061][ T8762] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  108.302105][ T8762] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  108.384081][   T54] Bluetooth: hci1: command tx timeout
[  108.398570][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.409044][ T8762] 8021q: adding VLAN 0 to HW filter on device team0
[  108.418969][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.422119][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.437573][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.439984][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.582761][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.628563][ T8762] veth0_vlan: entered promiscuous mode
[  108.639701][ T8762] veth1_vlan: entered promiscuous mode
[  108.678021][ T8762] veth0_macvtap: entered promiscuous mode
[  108.688611][ T8762] veth1_macvtap: entered promiscuous mode
[  108.711333][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.722709][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.728901][ T8762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.731914][ T8762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.735552][ T8762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.739257][ T8762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.840921][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.861739][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.889321][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.893372][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.316708][ T8969] __nla_validate_parse: 47 callbacks suppressed
[  109.316735][ T8969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.871'.
[  110.154081][ T8979] netlink: 256 bytes leftover after parsing attributes in process `syz.0.875'.
[  110.208556][ T8985] netlink: 34 bytes leftover after parsing attributes in process `syz.0.877'.
[  110.464820][   T54] Bluetooth: hci1: command 0x040f tx timeout
[  110.567250][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  110.619420][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'.
[  111.057680][ T9025] netlink: 'syz.0.888': attribute type 10 has an invalid length.
[  111.061051][ T9025] team0: Device dummy0 is up. Set it down before adding it as a team port
[  111.087530][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'.
[  111.136272][ T9029] unsupported nlmsg_type 40
[  111.176823][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.2.891'.
[  111.408665][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'.
[  111.412175][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'.
[  111.674658][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.906'.
[  112.177758][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.229327][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.305380][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.379141][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.576658][   T13] bridge_slave_1: left allmulticast mode
[  112.578500][   T13] bridge_slave_1: left promiscuous mode
[  112.581579][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.603673][   T13] bridge_slave_0: left allmulticast mode
[  112.614825][   T13] bridge_slave_0: left promiscuous mode
[  112.616758][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.625260][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.630825][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.638117][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.642956][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.646499][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.966870][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.971525][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.976576][   T13] bond0 (unregistering): Released all slaves
[  113.358040][   T13] hsr_slave_0: left promiscuous mode
[  113.360838][   T13] hsr_slave_1: left promiscuous mode
[  113.363499][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.368589][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.371714][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.375193][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.388820][   T13] veth1_macvtap: left promiscuous mode
[  113.391010][   T13] veth0_macvtap: left promiscuous mode
[  113.393258][   T13] veth1_vlan: left promiscuous mode
[  113.395752][   T13] veth0_vlan: left promiscuous mode
[  113.672651][   T13] team0 (unregistering): Port device team_slave_1 removed
[  113.697762][   T13] team0 (unregistering): Port device team_slave_0 removed
[  113.919248][ T9097] chnl_net:caif_netlink_parms(): no params data found
[  114.068364][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.071294][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.075908][ T9097] bridge_slave_0: entered allmulticast mode
[  114.081112][ T9097] bridge_slave_0: entered promiscuous mode
[  114.109882][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.112855][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.126194][ T9097] bridge_slave_1: entered allmulticast mode
[  114.129910][ T9097] bridge_slave_1: entered promiscuous mode
[  114.185488][ T9163] netlink: 'syz.2.923': attribute type 5 has an invalid length.
[  114.203203][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.226582][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.298949][ T9097] team0: Port device team_slave_0 added
[  114.302708][ T9097] team0: Port device team_slave_1 added
[  114.402998][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.407825][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.431391][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.442366][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.454411][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.476301][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.498561][ T9175] syzkaller1: entered promiscuous mode
[  114.505407][ T9175] syzkaller1: entered allmulticast mode
[  114.548867][ T9097] hsr_slave_0: entered promiscuous mode
[  114.551507][ T9097] hsr_slave_1: entered promiscuous mode
[  114.555422][ T9097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.557987][ T9097] Cannot create hsr debugfs directory
[  114.704258][   T54] Bluetooth: hci1: command tx timeout
[  114.707603][ T9179] netlink: 'syz.2.926': attribute type 1 has an invalid length.
[  114.710801][ T9179] __nla_validate_parse: 7 callbacks suppressed
[  114.710810][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.926'.
[  114.802887][ T9179] syzkaller1: entered promiscuous mode
[  114.809432][ T9179] syzkaller1: entered allmulticast mode
[  114.816472][ T9179] PF_CAN: dropped non conform CAN skbuff: dev type 779, len 324
[  115.081567][ T9097] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  115.092861][ T9097] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  115.101471][ T9097] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  115.116736][ T9097] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  115.222316][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.236936][ T9097] 8021q: adding VLAN 0 to HW filter on device team0
[  115.242726][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.245699][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.269688][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'.
[  115.273298][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.275985][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.284548][ T9224] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  115.466631][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.507180][ T9241] trusted_key: syz.2.937 sent an empty control message without MSG_MORE.
[  115.520106][ T9097] veth0_vlan: entered promiscuous mode
[  115.530522][ T9097] veth1_vlan: entered promiscuous mode
[  115.568043][ T9097] veth0_macvtap: entered promiscuous mode
[  115.586364][ T9097] veth1_macvtap: entered promiscuous mode
[  115.617307][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.639257][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.647046][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'.
[  115.650386][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.940'.
[  115.658056][ T9097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.661658][ T9097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.665950][ T9097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.669819][ T9097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.700250][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'.
[  115.757622][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.761930][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.796036][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.801544][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.902941][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'.
[  115.942870][ T9263] netlink: 'syz.2.943': attribute type 7 has an invalid length.
[  116.349421][ T9291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.954'.
[  116.406023][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'.
[  116.449510][ T9300] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.956'.
[  116.487865][ T9302] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  116.495353][ T9302] netlink: 240 bytes leftover after parsing attributes in process `syz.0.957'.
[  116.525980][ T9304] sctp: [Deprecated]: syz.0.958 (pid 9304) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.525980][ T9304] Use struct sctp_sack_info instead
[  117.317982][ T9358] netlink: 'syz.2.972': attribute type 15 has an invalid length.
[  117.408551][ T9370] netlink: 'syz.2.975': attribute type 2 has an invalid length.
[  117.858693][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.148697][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.152746][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.158691][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.163675][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.169337][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.298212][ T9400] chnl_net:caif_netlink_parms(): no params data found
[  118.368231][ T9400] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.370999][ T9400] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.373248][ T9400] bridge_slave_0: entered allmulticast mode
[  118.376135][ T9400] bridge_slave_0: entered promiscuous mode
[  118.381876][ T9400] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.384766][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.387396][ T9400] bridge_slave_1: entered allmulticast mode
[  118.390597][ T9400] bridge_slave_1: entered promiscuous mode
[  118.430699][ T9400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.436389][ T9400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.459809][ T9400] team0: Port device team_slave_0 added
[  118.463398][ T9400] team0: Port device team_slave_1 added
[  118.497737][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.500368][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.512709][ T9400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.519557][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.521925][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.531636][ T9400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.570303][ T9400] hsr_slave_0: entered promiscuous mode
[  118.573187][ T9400] hsr_slave_1: entered promiscuous mode
[  118.576531][ T9400] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.579601][ T9400] Cannot create hsr debugfs directory
[  119.156588][ T9433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.159919][ T9433] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003
[  119.472993][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.555829][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.632582][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.731056][   T13] bridge_slave_1: left allmulticast mode
[  119.733423][   T13] bridge_slave_1: left promiscuous mode
[  119.736843][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.742254][   T13] bridge_slave_0: left allmulticast mode
[  119.750108][   T13] bridge_slave_0: left promiscuous mode
[  119.752628][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.016850][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.026271][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.031976][   T13] bond0 (unregistering): Released all slaves
[  120.067329][ T9449] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  120.226312][ T5819] Bluetooth: hci1: command tx timeout
[  120.311367][ T9458] __nla_validate_parse: 7 callbacks suppressed
[  120.311381][ T9458] netlink: 36 bytes leftover after parsing attributes in process `syz.2.999'.
[  120.406405][   T13] hsr_slave_0: left promiscuous mode
[  120.414230][   T13] hsr_slave_1: left promiscuous mode
[  120.416371][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.418820][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.426916][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.429931][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.448107][   T13] veth1_macvtap: left promiscuous mode
[  120.450469][   T13] veth0_macvtap: left promiscuous mode
[  120.453255][   T13] veth1_vlan: left promiscuous mode
[  120.456878][   T13] veth0_vlan: left promiscuous mode
[  120.842103][   T13] team0 (unregistering): Port device team_slave_1 removed
[  120.866903][   T13] team0 (unregistering): Port device team_slave_0 removed
[  121.337263][ T9400] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  121.345002][ T9400] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  121.353437][ T9400] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  121.361875][ T9400] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  121.386112][ T9487] netlink: 'syz.2.1004': attribute type 5 has an invalid length.
[  121.388585][ T9487] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1004'.
[  121.466167][ T9500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1004'.
[  121.534314][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.551647][ T9400] 8021q: adding VLAN 0 to HW filter on device team0
[  121.562954][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.565669][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.573073][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.575873][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.759457][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.838574][ T9400] veth0_vlan: entered promiscuous mode
[  121.847088][ T9400] veth1_vlan: entered promiscuous mode
[  121.899133][ T9400] veth0_macvtap: entered promiscuous mode
[  121.909166][ T9400] veth1_macvtap: entered promiscuous mode
[  121.936642][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.943146][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.953532][ T9400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.961050][ T9400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.966348][ T9400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.969364][ T9400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.037715][ T6546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.040276][ T6546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.090158][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.093640][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.320415][ T9551] netlink: 'syz.2.1016': attribute type 7 has an invalid length.
[  122.328115][ T9550] netlink: 'syz.2.1016': attribute type 7 has an invalid length.
[  122.586390][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'.
[  122.762492][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'.
[  122.874338][ T9577] team0: Port device gtp0 added
[  122.917523][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'.
[  123.958016][ T5640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.570530][ T9611] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1035'.
[  124.573562][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'.
[  124.616935][ T9617] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1037'.
[  124.680602][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.684987][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.688239][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.692204][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.696954][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.862869][ T9619] chnl_net:caif_netlink_parms(): no params data found
[  124.946528][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.949613][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.952682][ T9619] bridge_slave_0: entered allmulticast mode
[  124.959952][ T9619] bridge_slave_0: entered promiscuous mode
[  124.968323][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.971527][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.975686][ T9619] bridge_slave_1: entered allmulticast mode
[  124.979684][ T9619] bridge_slave_1: entered promiscuous mode
[  125.026512][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.032550][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.072842][ T9619] team0: Port device team_slave_0 added
[  125.078587][ T9619] team0: Port device team_slave_1 added
[  125.127940][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.130615][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.142841][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.150303][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.153108][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.165279][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.178287][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'.
[  125.181514][ T9655] chnl_net:caif_netlink_parms(): no params data found
[  125.237471][ T9619] hsr_slave_0: entered promiscuous mode
[  125.240939][ T9619] hsr_slave_1: entered promiscuous mode
[  125.252457][ T9619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.264062][ T9619] Cannot create hsr debugfs directory
[  125.410277][ T9671] sit0: entered allmulticast mode
[  125.416998][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.419824][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.422446][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.430208][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.433129][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.437955][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.441084][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.443708][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.447828][ T9673] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  125.475282][ T9676] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1048'.
[  125.478809][ T9676] nbd: illegal input index 65508
[  125.482132][ T9680] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1048'.
[  125.492507][ T9678] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1049'.
[  125.497705][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'.
[  125.498506][ T9680] nbd: illegal input index 65508
[  125.500933][ T9678] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1049'.
[  125.500959][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'.
[  125.500968][ T9678] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1049'.
[  125.537769][ T5640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.560451][ T9682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1050'.
[  125.563719][ T9682] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1050'.
[  125.608365][ T9684] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1051'.
[  125.615756][ T5640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.701774][ T5640] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.744335][ T9694] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 960
[  125.911941][ T5640] bridge_slave_1: left allmulticast mode
[  125.920022][ T5640] bridge_slave_1: left promiscuous mode
[  125.922602][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.953682][ T5640] bridge_slave_0: left allmulticast mode
[  125.956593][ T5640] bridge_slave_0: left promiscuous mode
[  125.959172][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.190137][ T9720] NCSI netlink: No device for ifindex 0
[  126.221911][ T5640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.228439][ T5640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.232996][ T5640] bond0 (unregistering): Released all slaves
[  126.708951][ T5640] hsr_slave_0: left promiscuous mode
[  126.718291][ T5640] hsr_slave_1: left promiscuous mode
[  126.724067][ T5640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.727141][ T5640] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.747278][ T5640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.750534][ T5640] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.769557][ T5640] veth1_macvtap: left promiscuous mode
[  126.775216][ T5640] veth0_macvtap: left promiscuous mode
[  126.777756][ T5640] veth1_vlan: left promiscuous mode
[  126.779675][ T5640] veth0_vlan: left promiscuous mode
[  126.784547][   T54] Bluetooth: hci1: command tx timeout
[  127.143164][ T5640] team0 (unregistering): Port device team_slave_1 removed
[  127.177871][ T5640] team0 (unregistering): Port device team_slave_0 removed
[  127.486199][ T9619] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  127.506096][ T9619] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  127.528454][ T9619] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  127.548829][ T9619] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  127.746432][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.763556][ T9619] 8021q: adding VLAN 0 to HW filter on device team0
[  127.775629][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.778718][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.795736][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.798866][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.823906][ T9782] x_tables: duplicate underflow at hook 2
[  127.910367][ T9791] nbd: must specify a size in bytes for the device
[  127.925716][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.960587][   T33] audit: type=1800 audit(1751683517.481:6): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1073" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1927 res=0 errno=0
[  127.973951][   T33] audit: type=1800 audit(1751683517.491:7): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1073" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1927 res=0 errno=0
[  127.977196][ T9619] veth0_vlan: entered promiscuous mode
[  127.989128][ T9619] veth1_vlan: entered promiscuous mode
[  128.025432][ T9619] veth0_macvtap: entered promiscuous mode
[  128.038748][ T9619] veth1_macvtap: entered promiscuous mode
[  128.050305][ T9795] vcan0: tx drop: invalid da for name 0x0000000000000002
[  128.056134][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.068212][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.077810][ T9619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.081716][ T9619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.086217][ T9619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.089771][ T9619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.176045][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.181805][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.211119][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.216588][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.342658][ T9804] nft_compat: unsupported protocol 0
[  128.440341][ T9806] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  128.620045][ T9822] validate_nla: 26 callbacks suppressed
[  128.620064][ T9822] netlink: 'syz.0.1081': attribute type 1 has an invalid length.
[  128.652118][ T9822] 8021q: adding VLAN 0 to HW filter on device bond3
[  128.671240][ T9822] bond3: (slave ip6erspan0): making interface the new active one
[  128.677550][ T9822] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  129.255281][ T9809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.757722][ T9832] xt_CT: No such helper "snmp"
[  129.902945][ T9842] vlan2: entered promiscuous mode
[  129.905881][ T9842] bond0: entered promiscuous mode
[  129.908037][ T9842] bond_slave_0: entered promiscuous mode
[  129.910618][ T9842] bond_slave_1: entered promiscuous mode
[  129.913168][ T9842] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  129.917584][ T9842] vlan2: entered allmulticast mode
[  129.919831][ T9842] bond0: entered allmulticast mode
[  129.921862][ T9842] bond_slave_0: entered allmulticast mode
[  129.924036][ T9842] bond_slave_1: entered allmulticast mode
[  129.927717][ T9842] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  129.933760][ T9842] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  129.972762][ T5829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.003725][ T9844] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  130.027486][ T9845] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  130.714047][ T9856] netlink: 'syz.0.1090': attribute type 11 has an invalid length.
[  130.716609][ T9856] __nla_validate_parse: 8 callbacks suppressed
[  130.716615][ T9856] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1090'.
[  130.768103][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.771727][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.776189][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.780085][ T9864] x_tables: duplicate underflow at hook 1
[  130.782356][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.790187][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.826641][ T9866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1092'.
[  130.906309][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'.
[  130.911823][ T9861] chnl_net:caif_netlink_parms(): no params data found
[  130.974668][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.977445][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.980569][ T9861] bridge_slave_0: entered allmulticast mode
[  130.983478][ T9861] bridge_slave_0: entered promiscuous mode
[  130.991012][ T9861] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.995535][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.998382][ T9861] bridge_slave_1: entered allmulticast mode
[  131.001711][ T9861] bridge_slave_1: entered promiscuous mode
[  131.026999][ T9861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.032986][ T9861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.068220][ T9861] team0: Port device team_slave_0 added
[  131.072231][ T9861] team0: Port device team_slave_1 added
[  131.087404][ T9891] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[  131.090564][ T9891] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[  131.103745][ T9861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.107201][ T9861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.117238][ T9861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.121581][ T9861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.124643][ T9861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.132693][ T9861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.171561][ T9901] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1103'.
[  131.198430][ T9861] hsr_slave_0: entered promiscuous mode
[  131.201176][ T9861] hsr_slave_1: entered promiscuous mode
[  131.203375][ T9861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.213893][ T9861] Cannot create hsr debugfs directory
[  131.293423][ T9916] netlink: 'syz.2.1106': attribute type 9 has an invalid length.
[  131.530334][ T9932] sctp: [Deprecated]: syz.0.1111 (pid 9932) Use of int in max_burst socket option.
[  131.530334][ T9932] Use struct sctp_assoc_value instead
[  131.583772][ T5829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.637187][ T5829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.735494][ T5829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.898009][ T5829] bridge_slave_1: left allmulticast mode
[  131.900269][ T5829] bridge_slave_1: left promiscuous mode
[  131.902705][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.930273][ T5829] bridge_slave_0: left allmulticast mode
[  131.932717][ T5829] bridge_slave_0: left promiscuous mode
[  131.938881][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.235496][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.239941][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.243676][ T5829] bond0 (unregistering): Released all slaves
[  132.268385][ T9945] netlink: 'syz.0.1115': attribute type 26 has an invalid length.
[  132.298820][ T9952] syzkaller1: entered promiscuous mode
[  132.301056][ T9952] syzkaller1: entered allmulticast mode
[  132.467495][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.468118][ T1088] wlan0: Trigger new scan to find an IBSS to join
[  132.469615][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.554560][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'.
[  132.566857][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'.
[  132.585408][ T5829] hsr_slave_0: left promiscuous mode
[  132.587884][ T5829] hsr_slave_1: left promiscuous mode
[  132.590381][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.593428][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.598076][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.600666][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.604674][ T9967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1118'.
[  132.610974][ T5829] veth1_macvtap: left promiscuous mode
[  132.612877][ T5829] veth0_macvtap: left promiscuous mode
[  132.619645][ T5829] veth1_vlan: left promiscuous mode
[  132.621949][ T5829] veth0_vlan: left promiscuous mode
[  132.864025][ T5819] Bluetooth: hci1: command tx timeout
[  132.939701][ T5829] team0 (unregistering): Port device team_slave_1 removed
[  132.972315][ T5829] team0 (unregistering): Port device team_slave_0 removed
[  133.241317][ T9967] C: renamed from team_slave_0
[  133.246128][ T9967] netlink: 'syz.0.1118': attribute type 3 has an invalid length.
[  133.249486][ T9967] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1118'.
[  133.346761][ T9861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  133.352188][ T9861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  133.359307][ T9861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  133.370464][ T9861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  133.446432][ T9861] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.482954][ T9861] 8021q: adding VLAN 0 to HW filter on device team0
[  133.489448][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.491881][ T6546] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.498893][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.501220][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.747992][ T9861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.789758][ T9861] veth0_vlan: entered promiscuous mode
[  133.797502][ T9861] veth1_vlan: entered promiscuous mode
[  133.825515][ T9861] veth0_macvtap: entered promiscuous mode
[  133.831056][ T9861] veth1_macvtap: entered promiscuous mode
[  133.842356][ T9861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.850640][ T9861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.859300][ T9861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.862894][ T9861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.867292][ T9861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.870861][ T9861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.931701][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.943647][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.965169][ T6546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.968284][ T6546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.496057][T10008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'.
[  134.610407][T10015] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1128'.
[  134.939144][T10024] netlink: 'syz.0.1133': attribute type 1 has an invalid length.
[  134.942300][T10024] netlink: 'syz.0.1133': attribute type 11 has an invalid length.
[  135.012182][T10037] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  135.023906][T10037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.504174][ T6546] wlan0: Trigger new scan to find an IBSS to join
[  135.907684][T10046] __nla_validate_parse: 4 callbacks suppressed
[  135.907701][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'.
[  135.960567][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'.
[  135.969348][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'.
[  136.141606][ T5829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.807968][T10052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.933050][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  136.940295][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  136.943423][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  136.949067][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  136.953294][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  136.973357][T10052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.081150][T10052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.151357][T10052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.193384][T10060] chnl_net:caif_netlink_parms(): no params data found
[  137.274861][T10052] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.302272][T10060] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.306365][T10060] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.309209][T10060] bridge_slave_0: entered allmulticast mode
[  137.312300][T10060] bridge_slave_0: entered promiscuous mode
[  137.321136][T10052] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.331808][T10052] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.336548][T10060] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.339638][T10060] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.342447][T10060] bridge_slave_1: entered allmulticast mode
[  137.347751][T10060] bridge_slave_1: entered promiscuous mode
[  137.368158][T10052] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.379658][T10060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.387347][T10060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.432497][T10060] team0: Port device team_slave_0 added
[  137.436290][T10060] team0: Port device team_slave_1 added
[  137.460485][T10060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.462896][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.472766][T10060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.494734][T10060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.497622][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.508598][T10060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.514031][T10088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1146'.
[  137.554503][T10060] hsr_slave_0: entered promiscuous mode
[  137.559662][T10060] hsr_slave_1: entered promiscuous mode
[  137.562106][T10060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.569178][T10060] Cannot create hsr debugfs directory
[  137.780217][T10111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'.
[  137.852376][ T5829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.931648][ T5829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.979270][ T5829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.993587][T10126] netem: change failed
[  138.102835][ T5829] bridge_slave_1: left allmulticast mode
[  138.110584][ T5829] bridge_slave_1: left promiscuous mode
[  138.112646][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.137532][ T5829] bridge_slave_0: left allmulticast mode
[  138.139403][ T5829] bridge_slave_0: left promiscuous mode
[  138.141320][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.413339][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.418994][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.422644][ T5829] bond0 (unregistering): Released all slaves
[  138.551244][ T6546] wlan0: Trigger new scan to find an IBSS to join
[  138.560137][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'.
[  138.727533][ T5829] hsr_slave_0: left promiscuous mode
[  138.738266][ T5829] hsr_slave_1: left promiscuous mode
[  138.741175][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.748363][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.764727][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.767994][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.790654][ T5829] veth1_macvtap: left promiscuous mode
[  138.793263][ T5829] veth0_macvtap: left promiscuous mode
[  138.798942][ T5829] veth1_vlan: left promiscuous mode
[  138.801339][ T5829] veth0_vlan: left promiscuous mode
[  139.024194][   T54] Bluetooth: hci1: command tx timeout
[  139.209282][ T5829] team0 (unregistering): Port device team_slave_1 removed
[  139.245923][ T5829] team0 (unregistering): Port device team_slave_0 removed
[  139.436069][ T6546] wlan0: Creating new IBSS network, BSSID e6:4c:68:3a:0c:61
[  139.479181][    C0] ------------[ cut here ]------------
[  139.481580][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  139.486092][    C0] WARNING: CPU: 0 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  139.490056][    C0] Modules linked in:
[  139.492186][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  139.497849][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.501940][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  139.504547][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  139.512017][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  139.514684][    C0] RAX: 852d07b4eeebf800 RBX: 000000000000000c RCX: ffffffff8de95280
[  139.517937][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  139.521198][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  139.524534][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88802d288928
[  139.527706][    C0] R13: 0000000000000000 R14: ffff88802dd08e40 R15: ffff88802dd0b0d8
[  139.530898][    C0] FS:  0000000000000000(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  139.534563][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.537253][    C0] CR2: 000000110c391fd2 CR3: 0000000110808000 CR4: 00000000000006f0
[  139.540347][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  139.543401][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  139.546683][    C0] Call Trace:
[  139.548066][    C0]  <IRQ>
[  139.549277][    C0]  rate_control_send_low+0x194/0x7a0
[  139.551401][    C0]  rate_control_get_rate+0x20b/0x5d0
[  139.553598][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  139.556145][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  139.558808][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  139.561117][    C0]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  139.563408][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  139.565884][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  139.568385][    C0]  __ieee80211_beacon_get+0x1033/0x17b0
[  139.570575][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  139.572873][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  139.575202][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  139.577690][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  139.579934][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  139.583115][    C0]  __iterate_interfaces+0x2ab/0x590
[  139.585558][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  139.588232][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  139.590708][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  139.592729][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  139.595546][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  139.597491][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  139.599986][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  139.602251][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  139.604889][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  139.607439][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  139.609609][    C0]  handle_softirqs+0x286/0x870
[  139.611850][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  139.613977][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  139.616272][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  139.618314][    C0]  __irq_exit_rcu+0xca/0x1f0
[  139.620195][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  139.622273][    C0]  irq_exit_rcu+0x9/0x30
[  139.624080][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  139.626455][    C0]  </IRQ>
[  139.627739][    C0]  <TASK>
[  139.629012][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  139.631489][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  139.633972][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 75 21 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  139.641816][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  139.644157][    C0] RAX: 852d07b4eeebf800 RBX: ffffffff81974d58 RCX: 852d07b4eeebf800
[  139.647495][    C0] RDX: 0000000000000001 RSI: ffffffff8d9822d0 RDI: ffffffff8be28d40
[  139.650841][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  139.653524][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa10cf0
[  139.656536][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  139.659303][    C0]  ? do_idle+0x1e8/0x510
[  139.660957][    C0]  default_idle+0x13/0x20
[  139.662638][    C0]  default_idle_call+0x74/0xb0
[  139.664816][    C0]  do_idle+0x1e8/0x510
[  139.666383][    C0]  ? __pfx_do_idle+0x10/0x10
[  139.668266][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.670509][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  139.673066][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.675987][    C0]  cpu_startup_entry+0x44/0x60
[  139.678072][    C0]  rest_init+0x2de/0x300
[  139.679959][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  139.682384][    C0]  start_kernel+0x47d/0x500
[  139.684468][    C0]  x86_64_start_reservations+0x24/0x30
[  139.686803][    C0]  x86_64_start_kernel+0x143/0x1c0
[  139.689007][    C0]  common_startup_64+0x13e/0x147
[  139.691141][    C0]  </TASK>
[  139.692493][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  139.695608][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  139.700643][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.704757][    C0] Call Trace:
[  139.706200][    C0]  <IRQ>
[  139.707420][    C0]  dump_stack_lvl+0x99/0x250
[  139.709431][    C0]  ? __asan_memcpy+0x40/0x70
[  139.711412][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.713604][    C0]  ? __pfx__printk+0x10/0x10
[  139.715591][    C0]  panic+0x2db/0x790
[  139.717292][    C0]  ? __pfx_panic+0x10/0x10
[  139.719236][    C0]  ? common_startup_64+0x13e/0x147
[  139.721401][    C0]  __warn+0x31b/0x4b0
[  139.723082][    C0]  ? __rate_control_send_low+0x5df/0x820
[  139.725399][    C0]  ? __rate_control_send_low+0x5df/0x820
[  139.727719][    C0]  report_bug+0x2be/0x4f0
[  139.729464][    C0]  ? __rate_control_send_low+0x5df/0x820
[  139.731669][    C0]  ? __rate_control_send_low+0x5df/0x820
[  139.734014][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  139.736355][    C0]  handle_bug+0x84/0x160
[  139.738071][    C0]  exc_invalid_op+0x1a/0x50
[  139.739944][    C0]  asm_exc_invalid_op+0x1a/0x20
[  139.741916][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  139.744404][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  139.752074][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  139.754553][    C0] RAX: 852d07b4eeebf800 RBX: 000000000000000c RCX: ffffffff8de95280
[  139.757809][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  139.760990][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  139.764150][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88802d288928
[  139.767297][    C0] R13: 0000000000000000 R14: ffff88802dd08e40 R15: ffff88802dd0b0d8
[  139.770557][    C0]  ? __rate_control_send_low+0x5de/0x820
[  139.772910][    C0]  rate_control_send_low+0x194/0x7a0
[  139.775103][    C0]  rate_control_get_rate+0x20b/0x5d0
[  139.777317][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  139.779744][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  139.782338][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  139.784574][    C0]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  139.786847][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  139.789053][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  139.791297][    C0]  __ieee80211_beacon_get+0x1033/0x17b0
[  139.793535][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  139.795810][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  139.798022][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  139.800495][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  139.802769][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  139.805725][    C0]  __iterate_interfaces+0x2ab/0x590
[  139.807910][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  139.810427][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  139.813359][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  139.815845][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  139.818610][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  139.820732][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  139.823122][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  139.825276][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  139.827613][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  139.830003][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  139.832098][    C0]  handle_softirqs+0x286/0x870
[  139.834052][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  139.836066][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  139.838248][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  139.840394][    C0]  __irq_exit_rcu+0xca/0x1f0
[  139.842422][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  139.844627][    C0]  irq_exit_rcu+0x9/0x30
[  139.846447][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  139.848811][    C0]  </IRQ>
[  139.850048][    C0]  <TASK>
[  139.851296][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  139.853738][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  139.856138][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 75 21 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  139.864231][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  139.866742][    C0] RAX: 852d07b4eeebf800 RBX: ffffffff81974d58 RCX: 852d07b4eeebf800
[  139.870054][    C0] RDX: 0000000000000001 RSI: ffffffff8d9822d0 RDI: ffffffff8be28d40
[  139.873299][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  139.876513][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa10cf0
[  139.879589][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  139.882984][    C0]  ? do_idle+0x1e8/0x510
[  139.884833][    C0]  default_idle+0x13/0x20
[  139.886695][    C0]  default_idle_call+0x74/0xb0
[  139.888748][    C0]  do_idle+0x1e8/0x510
[  139.890527][    C0]  ? __pfx_do_idle+0x10/0x10
[  139.892505][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.894740][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  139.897234][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.899965][    C0]  cpu_startup_entry+0x44/0x60
[  139.902016][    C0]  rest_init+0x2de/0x300
[  139.903823][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  139.906205][    C0]  start_kernel+0x47d/0x500
[  139.908117][    C0]  x86_64_start_reservations+0x24/0x30
[  139.910426][    C0]  x86_64_start_kernel+0x143/0x1c0
[  139.912657][    C0]  common_startup_64+0x13e/0x147
[  139.914328][    C0]  </TASK>
[  139.916058][    C0] Kernel Offset: disabled
[  139.917400][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:45:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006ef0
R8 =ffff888020db8237 R9 =1ffff110041b7046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48c9 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c391fd2 CR3=0000000110808000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0600000500000003 0000000200000040
XMM02=080000000a000000 0406000005000000 XMM03=0300000002000000 4000000040000000
XMM04=00007ff1d64ed100 00007ff1d5984440 XMM05=00007ff1d5984458 00007ff1d59844a0
XMM06=00007ff1d5984498 00007ff1d5984490 XMM07=00007ff1d5984488 00007ff1d5984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff1d5811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=beb6babbfd8c5f00 RBX=ffffffff81974d58 RCX=beb6babbfd8c5f00 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056239f3dce48 CR3=000000001bb72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff1d5811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
