last executing test programs:

1m11.613720911s ago: executing program 1 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x29, 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000000000058150000008004"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x7f}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m7.321852418s ago: executing program 1 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x29, 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000000000058150000008004"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x7f}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m2.182696489s ago: executing program 1 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x29, 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000000000058150000008004"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x7f}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

56.093383651s ago: executing program 1 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x29, 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000000000058150000008004"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x7f}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

49.486854316s ago: executing program 1 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x29, 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000000000058150000008004"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x7f}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

43.138522127s ago: executing program 1 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x29, 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000000000058150000008004"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x7f}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

32.357338426s ago: executing program 2 (id=222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)

26.738069549s ago: executing program 2 (id=222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)

20.920185944s ago: executing program 2 (id=222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)

15.070959855s ago: executing program 2 (id=222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)

9.259026797s ago: executing program 2 (id=222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)

3.047509251s ago: executing program 2 (id=222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)

357.912475ms ago: executing program 0 (id=676):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 64)
r3 = getpid() (rerun: 64)
sendmmsg$unix(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x58, 0x40000}}], 0x1, 0x0) (async, rerun: 32)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) (async, rerun: 32)
r5 = getgid()
sendmsg$netlink(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003ac0)={0x10, 0x1a, 0x20, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20}, 0x24004000) (async, rerun: 32)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000300)={{<r6=>0x0, 0x8c0, 0x5, 0x5, 0x8, 0x1, 0x5, 0x80, 0xe2, 0x0, 0x6, 0x100000000, 0xc01, 0x5, 0xffff}}) (rerun: 32)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001300)={{r6, 0x0, 0x5, 0x1f7b, 0x9, 0xd, 0x800, 0x1, 0x401, 0x3, 0x7, 0x8000000000000001, 0x5, 0x8, 0x5}})
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x4000c}, {0x2, 0x2}, {0x7fff, 0x5}, {0xff, 0x4}]}}) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4)

356.724274ms ago: executing program 0 (id=677):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x5c}}, 0x0)

250.538653ms ago: executing program 0 (id=678):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
write(r0, 0x0, 0x0)

247.608275ms ago: executing program 0 (id=679):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb6, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x48840)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000001c0)={0x7ff, 0x18, [0xfff, 0xa4f, 0x4, 0x8], &(0x7f0000000180)=[0x0, 0x0, 0x0]})
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'wg2\x00', 0x100})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa100}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={0x444, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x6}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x2, 0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x3}, {0x4}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x1d}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x9, 0x9, 0x1, 0x7fff, 0xff3d, 0xfffa, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xd81c, 0x5, 0x4, 0x40, 0x33, 0x5, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xffc0, 0x37ef, 0xf441, 0xfff, 0x2, 0x1, 0x6]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x1, 0x1, 0x4, 0x36, 0x0, 0x3, 0x3, 0x5, 0x25, 0x5, 0x5, 0x18, 0x1b, 0x1, 0x4, 0xc, 0x18, 0x0, 0x12, 0x12, 0x2, 0x6, 0x1, 0x12, 0x2, 0x30, 0x24, 0x48, 0x18, 0x3, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x97ba, 0x8000, 0xfff0, 0x9, 0x6, 0xeb13, 0xc69, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x2, 0x17, 0xc756, 0x8, 0xe, 0x6a55]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x650c, 0xb950, 0x2, 0x8, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0xd, 0x4, 0x5, 0x2e3, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20e7, 0x5, 0x6, 0xf, 0x8, 0x400, 0xf47b, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x4, 0x81, 0x2, 0x0, 0x4, 0x401]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x2, 0x36, 0x1b, 0x1, 0x48, 0x16, 0x5, 0x6e, 0x60, 0x3, 0x30, 0x24, 0x18, 0x30, 0x60, 0x12, 0x24, 0xc, 0x18, 0x24, 0x6, 0x6, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x3}, {0x3, 0x1}, {0x3, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x4, 0x7}, {}, {0x4, 0x9}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0x7}, {0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x7ff, 0x0, 0x2, 0xd, 0x2, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xcbe0, 0x2bed, 0x6, 0x1000, 0x1, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x3, 0xfffe, 0xb, 0x3892, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x8}, {}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x3}, {0x6}, {}, {0x1, 0x8}, {0x0, 0x4}, {0x5}, {0x5, 0x8}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x4, 0x5}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0xa}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x5}, {0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x3}, {0x7, 0x6}, {0x3, 0x2}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x2, 0x2}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0x8}, {0x6}, {0x5, 0x6}, {0x3}, {0x4, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x2, 0x8, 0x5, 0x2, 0x7f, 0x6]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x2}, {0x4, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x2, 0x3, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0xc, 0x60, 0x9, 0x3, 0x12, 0x5, 0x2, 0x16, 0x4, 0x4c, 0xb, 0x36, 0x18, 0x17, 0x10, 0x16]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x12, 0x1b, 0x6, 0x18, 0xb, 0x1b, 0x4, 0x30, 0x24, 0xb, 0x0, 0x3, 0x0, 0x12, 0x16, 0x5, 0x12, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x5}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x5, 0x7}, {0x1}, {0x3, 0x7}, {0x2, 0x4}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x4, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x3, 0x9}, {0x1, 0x8}, {0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0x6}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d, 0x5, 0x0, 0x7, 0xd14, 0x800, 0x3, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc, 0x0, 0x400, 0x100, 0x2, 0x7, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x6, 0x7}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x2}, {0x3}, {0x3, 0x3}, {0x6, 0x7}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x7, 0x3}, {}, {0x5, 0x3}, {0x5}, {0x3, 0x2}, {0x7}, {0x7, 0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x34, 0x24, 0xb, 0x2, 0x18, 0x6, 0x12, 0x6, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x444}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'gre0\x00', &(0x7f0000000a80)={'gre0\x00', <r8=>0x0, 0x8000, 0x8, 0x8, 0x7, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @remote, {[@noop, @ssrr={0x89, 0x7, 0x4b, [@broadcast]}, @rr={0x7, 0x7, 0x31, [@broadcast]}, @ssrr={0x89, 0xb, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0xb, 0x8f, [@multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xc, 0x3, 0x6, [{@local, 0x3}, {@empty, 0x3}, {@multicast2, 0x682}, {@remote, 0x88}]}, @ssrr={0x89, 0x27, 0xcd, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @multicast2, @loopback, @multicast1]}, @ra={0x94, 0x4}]}}}}})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x20, &(0x7f0000000d00)={&(0x7f0000000c00)=""/153, 0x99, <r10=>0x0, &(0x7f0000000cc0)=""/40, 0x28}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xc, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x6, 0x34, &(0x7f0000000a40)=""/52, 0x41100, 0x4a, '\x00', r8, @fallback, r9, 0x8, &(0x7f0000000bc0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000d80)=[{0x1, 0x1, 0x0, 0x1}, {0x0, 0x1, 0xd, 0x4}, {0x5, 0x4, 0xc, 0x9}], 0x10, 0x4d}, 0x94)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000e80)={<r12=>0x0, @in={{0x2, 0x4e24, @loopback}}, [0x8, 0x8000000000000001, 0x6, 0x6, 0x7, 0x4, 0x1, 0x3, 0x1, 0xb5, 0x72d9, 0xfffffffffffff80a, 0x8000, 0x232f, 0x8001]}, &(0x7f0000000f80)=0x100)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000fc0)={r12, @in6={{0xa, 0x4e24, 0x14c0000, @local, 0xd}}}, 0x84)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8)
r14 = openat$cgroup_ro(r13, &(0x7f00000010c0)='blkio.bfq.dequeue\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r14, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, 0x15, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48804)
r15 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000001200)="bd6ce8f8bc445841f2bdf9fcd2e56b2c1e14a45750d1bb4369797c97287cb70485d2d6eeb181871c2fd7a85f931349a5140c1c0ff002d813", 0x38)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f0000001240)={'wg1\x00'})
socket$kcm(0x29, 0x1, 0x0)
connect$inet(r11, &(0x7f0000001280)={0x2, 0x4e20, @broadcast}, 0x10)
r16 = openat$cgroup_ro(r13, &(0x7f00000012c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x3dc86f5, 0x0, r16, 0x7, '\x00', r8, r9, 0x5, 0x4, 0x5}, 0x50)

163.158167ms ago: executing program 0 (id=680):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000002300)={@void, @void, @eth={@empty, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1}}}}}}, 0x26)

0s ago: executing program 0 (id=681):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x9, 0x8, 0x0, 0x1, 0x42a}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="183c7613b01d66571e583e7c88a85f6886dd", 0x12, 0x40080, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, r1}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4)

kernel console output (not intermixed with test programs):

adv0: Adding interface: batadv_slave_0
[   68.362870][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.371180][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.393598][ T5841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.403185][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.405274][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.413042][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.416444][ T6851] bridge_slave_1: default FDB implementation only supports local addresses
[   68.470443][ T6838] hsr_slave_0: entered promiscuous mode
[   68.472255][ T6853] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003
[   68.472709][ T6838] hsr_slave_1: entered promiscuous mode
[   68.476606][ T6838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.481360][ T6838] Cannot create hsr debugfs directory
[   68.536355][ T6855] bond1: (slave bridge1): Releasing backup interface
[   68.543111][ T6855] bridge1: left promiscuous mode
[   68.572078][ T5841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.643594][ T5841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.772889][ T6863] netlink: 'syz.0.264': attribute type 3 has an invalid length.
[   68.775863][ T6863] netlink: 666 bytes leftover after parsing attributes in process `syz.0.264'.
[   68.780571][ T5841] bridge_slave_1: left allmulticast mode
[   68.784175][ T5841] bridge_slave_1: left promiscuous mode
[   68.786438][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.792586][ T5841] bridge_slave_0: left allmulticast mode
[   68.794371][ T5841] bridge_slave_0: left promiscuous mode
[   68.796137][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.021405][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.025701][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.030980][ T5841] bond0 (unregistering): Released all slaves
[   69.275964][ T6878] gretap1: entered allmulticast mode
[   69.302928][ T5841] hsr_slave_0: left promiscuous mode
[   69.304962][ T5841] hsr_slave_1: left promiscuous mode
[   69.306924][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.309290][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.311976][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.314858][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.332411][ T5841] veth1_macvtap: left promiscuous mode
[   69.334115][ T5841] veth0_macvtap: left promiscuous mode
[   69.335802][ T5841] veth1_vlan: left promiscuous mode
[   69.337397][ T5841] veth0_vlan: left promiscuous mode
[   69.345971][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[   69.388978][ T5812] Bluetooth: hci1: command tx timeout
[   69.599070][ T5841] team0 (unregistering): Port device team_slave_1 removed
[   69.619430][ T5841] team0 (unregistering): Port device team_slave_0 removed
[   69.871352][ T6823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.884615][ T6823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.921820][ T6838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.930386][ T6823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.940096][ T6823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.988687][ T6838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.071264][ T6838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.099088][ T5812] Bluetooth: hci2: command tx timeout
[   70.102735][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.114154][ T6823] 8021q: adding VLAN 0 to HW filter on device team0
[   70.120498][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.122599][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.141910][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.144086][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.167866][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   70.200146][ T6838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.270464][ T5841] bridge_slave_1: left allmulticast mode
[   70.274570][ T5841] bridge_slave_1: left promiscuous mode
[   70.277000][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.307003][ T5841] bridge_slave_0: left allmulticast mode
[   70.312338][ T5841] bridge_slave_0: left promiscuous mode
[   70.314144][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.566911][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.571415][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.575499][ T5841] bond0 (unregistering): Released all slaves
[   70.614432][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.663076][ T6838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.683160][ T6838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.687423][ T6838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.716651][ T6838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.736317][ T6823] veth0_vlan: entered promiscuous mode
[   70.763306][ T6823] veth1_vlan: entered promiscuous mode
[   70.811189][ T6823] veth0_macvtap: entered promiscuous mode
[   70.823243][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.823849][ T6823] veth1_macvtap: entered promiscuous mode
[   70.825582][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.843123][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.863808][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.886914][ T5841] hsr_slave_0: left promiscuous mode
[   70.889412][ T5841] hsr_slave_1: left promiscuous mode
[   70.891365][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.893512][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.896379][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.898535][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.919687][ T5841] veth1_macvtap: left promiscuous mode
[   70.921372][ T5841] veth0_macvtap: left promiscuous mode
[   70.923311][ T5841] veth1_vlan: left promiscuous mode
[   70.924965][ T5841] veth0_vlan: left promiscuous mode
[   71.168169][ T5841] team0 (unregistering): Port device team_slave_1 removed
[   71.188338][ T5841] team0 (unregistering): Port device team_slave_0 removed
[   71.387687][ T6823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.390621][ T6823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.393175][ T6823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.395691][ T6823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.442190][ T6932] dummy0: left promiscuous mode
[   71.443828][ T6932] dummy0: left allmulticast mode
[   71.459454][ T5812] Bluetooth: hci1: command tx timeout
[   71.527412][ T6932] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.531247][ T6932] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.533750][ T6932] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.536198][ T6932] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.555530][ T6932] vlan2: left promiscuous mode
[   71.556995][ T6932] team0: left promiscuous mode
[   71.559854][ T6932] bond1: left promiscuous mode
[   71.562543][ T6932] gretap1: left allmulticast mode
[   71.615373][ T6838] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.674218][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.679490][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.683972][ T6838] 8021q: adding VLAN 0 to HW filter on device team0
[   71.703353][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.705523][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.740996][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.741795][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.743337][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.745512][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.873919][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'.
[   71.890334][ T6838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.893340][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[   71.921003][ T6838] veth0_vlan: entered promiscuous mode
[   71.926730][ T6838] veth1_vlan: entered promiscuous mode
[   71.945181][ T6838] veth0_macvtap: entered promiscuous mode
[   71.951256][ T6838] veth1_macvtap: entered promiscuous mode
[   71.960727][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.967588][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.974826][ T6838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.977505][ T6838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.980473][ T6838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.983080][ T6838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.023343][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.025778][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.046587][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.050271][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.654426][ T6685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.748511][ T6685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.938171][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.941427][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.944323][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.947737][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.951280][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.172219][ T6956] chnl_net:caif_netlink_parms(): no params data found
[   73.234840][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.237409][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.240247][ T6956] bridge_slave_0: entered allmulticast mode
[   73.243268][ T6956] bridge_slave_0: entered promiscuous mode
[   73.246933][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.250375][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.252568][ T6956] bridge_slave_1: entered allmulticast mode
[   73.255418][ T6956] bridge_slave_1: entered promiscuous mode
[   73.296754][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.305164][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.306384][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.314547][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.317940][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.323069][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.326346][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.368526][ T6956] team0: Port device team_slave_0 added
[   73.373039][ T6956] team0: Port device team_slave_1 added
[   73.426909][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.429475][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.443026][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.448049][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.457135][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.472659][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.525478][ T6956] hsr_slave_0: entered promiscuous mode
[   73.531330][ T6956] hsr_slave_1: entered promiscuous mode
[   73.533837][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.536280][ T6956] Cannot create hsr debugfs directory
[   73.655389][ T6685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.742202][ T6970] chnl_net:caif_netlink_parms(): no params data found
[   73.796459][ T6685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.815347][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.817608][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.821995][ T6970] bridge_slave_0: entered allmulticast mode
[   73.824695][ T6970] bridge_slave_0: entered promiscuous mode
[   73.827828][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.830784][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.832915][ T6970] bridge_slave_1: entered allmulticast mode
[   73.835545][ T6970] bridge_slave_1: entered promiscuous mode
[   73.865143][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.870836][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.906103][ T6970] team0: Port device team_slave_0 added
[   73.924086][ T6970] team0: Port device team_slave_1 added
[   73.957203][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.964404][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.972312][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.976889][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.979092][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.986786][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.003145][ T6685] bridge_slave_1: left allmulticast mode
[   74.005297][ T6685] bridge_slave_1: left promiscuous mode
[   74.007737][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.015846][ T6685] bridge_slave_0: left allmulticast mode
[   74.017637][ T6685] bridge_slave_0: left promiscuous mode
[   74.023967][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.228461][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.233230][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.236557][ T6685] bond0 (unregistering): Released all slaves
[   74.293478][ T6970] hsr_slave_0: entered promiscuous mode
[   74.296004][ T6970] hsr_slave_1: entered promiscuous mode
[   74.298040][ T6970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.306290][ T6970] Cannot create hsr debugfs directory
[   74.473549][ T6685] hsr_slave_0: left promiscuous mode
[   74.475767][ T6685] hsr_slave_1: left promiscuous mode
[   74.477749][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.480102][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.483027][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.485449][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.500345][ T6685] veth1_macvtap: left promiscuous mode
[   74.502244][ T6685] veth0_macvtap: left promiscuous mode
[   74.504979][ T6685] veth1_vlan: left promiscuous mode
[   74.506938][ T6685] veth0_vlan: left promiscuous mode
[   74.765943][ T6685] team0 (unregistering): Port device team_slave_1 removed
[   74.785821][ T6685] team0 (unregistering): Port device team_slave_0 removed
[   74.979659][ T5812] Bluetooth: hci1: command tx timeout
[   75.086051][ T6970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.135448][ T6970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.214231][ T6970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.284889][ T6970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.390724][ T5812] Bluetooth: hci2: command tx timeout
[   75.396627][ T6956] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.403822][ T6956] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.408418][ T6685] bridge_slave_1: left allmulticast mode
[   75.410811][ T6685] bridge_slave_1: left promiscuous mode
[   75.413823][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.418413][ T6685] bridge_slave_0: left allmulticast mode
[   75.422884][ T6685] bridge_slave_0: left promiscuous mode
[   75.425393][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.677920][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.683827][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.688956][ T6685] bond0 (unregistering): Released all slaves
[   75.706592][ T6956] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.723390][ T6956] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.813329][ T6970] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.821929][ T6970] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.828037][ T6970] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.841786][ T6970] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.941724][ T6685] hsr_slave_0: left promiscuous mode
[   75.943878][ T6685] hsr_slave_1: left promiscuous mode
[   75.955633][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.958269][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.961281][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.963811][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.976952][ T6685] veth1_macvtap: left promiscuous mode
[   75.978716][ T6685] veth0_macvtap: left promiscuous mode
[   75.981650][ T6685] veth1_vlan: left promiscuous mode
[   75.983305][ T6685] veth0_vlan: left promiscuous mode
[   76.253100][ T6685] team0 (unregistering): Port device team_slave_1 removed
[   76.277604][ T6685] team0 (unregistering): Port device team_slave_0 removed
[   76.553488][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.602712][ T6956] 8021q: adding VLAN 0 to HW filter on device team0
[   76.619806][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.622746][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.627814][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'.
[   76.654998][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.657979][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.671316][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.726484][ T6970] 8021q: adding VLAN 0 to HW filter on device team0
[   76.752473][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.755222][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.767935][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.770719][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.885547][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.943000][ T6956] veth0_vlan: entered promiscuous mode
[   76.964605][ T6956] veth1_vlan: entered promiscuous mode
[   76.985166][ T6956] veth0_macvtap: entered promiscuous mode
[   77.003068][ T6956] veth1_macvtap: entered promiscuous mode
[   77.025256][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.032235][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.036811][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.054058][ T6956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.056834][ T6956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.060093][ T5812] Bluetooth: hci1: command tx timeout
[   77.062709][ T6956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.065391][ T6956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.083768][ T6970] veth0_vlan: entered promiscuous mode
[   77.103865][ T6970] veth1_vlan: entered promiscuous mode
[   77.117475][ T6970] veth0_macvtap: entered promiscuous mode
[   77.122026][ T6970] veth1_macvtap: entered promiscuous mode
[   77.147040][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.155703][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.174263][ T6970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.177019][ T6970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.179912][ T6970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.182611][ T6970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.229914][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.239680][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.263852][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.267764][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.323619][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.327415][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.360130][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.363080][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.377655][ T7046] netlink: 'syz.0.297': attribute type 32 has an invalid length.
[   78.473267][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.122795][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.125698][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.128627][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.133002][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.135579][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.247107][ T7077] chnl_net:caif_netlink_parms(): no params data found
[   79.294790][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.297114][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.300287][ T7077] bridge_slave_0: entered allmulticast mode
[   79.302935][ T7077] bridge_slave_0: entered promiscuous mode
[   79.306139][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.308412][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.310932][ T7077] bridge_slave_1: entered allmulticast mode
[   79.314233][ T7077] bridge_slave_1: entered promiscuous mode
[   79.333581][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.338045][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.358679][ T7077] team0: Port device team_slave_0 added
[   79.362575][ T7077] team0: Port device team_slave_1 added
[   79.380426][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.382516][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.390667][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.395344][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.397554][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.409034][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.453187][ T7077] hsr_slave_0: entered promiscuous mode
[   79.455418][ T7077] hsr_slave_1: entered promiscuous mode
[   79.457482][ T7077] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.468982][ T7077] Cannot create hsr debugfs directory
[   79.521083][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.542241][ T7089] trusted_key: syz.0.303 sent an empty control message without MSG_MORE.
[   79.632396][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.639751][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.645593][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.648425][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.651255][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.813667][ T7092] chnl_net:caif_netlink_parms(): no params data found
[   79.882596][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'.
[   79.892059][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.894241][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.896364][ T7092] bridge_slave_0: entered allmulticast mode
[   79.899227][ T7092] bridge_slave_0: entered promiscuous mode
[   79.902477][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.904740][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.907413][ T7092] bridge_slave_1: entered allmulticast mode
[   79.910391][ T7092] bridge_slave_1: entered promiscuous mode
[   79.930563][ T7092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.935000][ T7092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.957748][ T7092] team0: Port device team_slave_0 added
[   79.967848][ T7092] team0: Port device team_slave_1 added
[   79.993491][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.995628][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.004847][ T7092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.010828][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.012935][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.020745][ T7092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.060282][ T7092] hsr_slave_0: entered promiscuous mode
[   80.062918][ T7092] hsr_slave_1: entered promiscuous mode
[   80.064986][ T7092] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.067239][ T7092] Cannot create hsr debugfs directory
[   80.142527][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'.
[   80.168482][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.208351][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.302305][ T7125] netlink: 'syz.0.313': attribute type 32 has an invalid length.
[   80.351236][   T12] bridge_slave_1: left allmulticast mode
[   80.356330][   T12] bridge_slave_1: left promiscuous mode
[   80.358656][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.366301][   T12] bridge_slave_0: left allmulticast mode
[   80.368477][   T12] bridge_slave_0: left promiscuous mode
[   80.373974][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.676319][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.681723][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.685210][   T12] bond0 (unregistering): Released all slaves
[   80.958810][   T12] hsr_slave_0: left promiscuous mode
[   80.961372][   T12] hsr_slave_1: left promiscuous mode
[   80.963343][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.965613][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.968342][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.970763][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.982141][   T12] veth1_macvtap: left promiscuous mode
[   80.983795][   T12] veth0_macvtap: left promiscuous mode
[   80.985546][   T12] veth1_vlan: left promiscuous mode
[   80.987426][   T12] veth0_vlan: left promiscuous mode
[   81.071683][ T5538] cfg80211: failed to load regulatory.db
[   81.074252][   T10] cfg80211: failed to load regulatory.db
[   81.219773][ T5202] Bluetooth: hci1: command tx timeout
[   81.287642][   T12] team0 (unregistering): Port device team_slave_1 removed
[   81.311498][   T12] team0 (unregistering): Port device team_slave_0 removed
[   81.603290][ T7167] netlink: 'syz.0.320': attribute type 32 has an invalid length.
[   81.625075][ T7077] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.672339][ T7092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.683730][ T7077] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.697100][ T7077] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.702275][ T5202] Bluetooth: hci2: command tx timeout
[   81.707096][ T7077] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.756999][ T7092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.882548][ T7092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.942362][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.967669][ T7092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.978214][ T7077] 8021q: adding VLAN 0 to HW filter on device team0
[   81.992659][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.994851][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.019752][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.022461][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.075857][   T12] bridge_slave_1: left allmulticast mode
[   82.077609][   T12] bridge_slave_1: left promiscuous mode
[   82.089056][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.105660][   T12] bridge_slave_0: left allmulticast mode
[   82.107456][   T12] bridge_slave_0: left promiscuous mode
[   82.114107][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.332499][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.336592][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.343069][   T12] bond0 (unregistering): Released all slaves
[   82.503283][ T7092] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.507877][ T7092] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.517337][ T7092] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.533119][ T7092] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.614070][   T12] hsr_slave_0: left promiscuous mode
[   82.616416][   T12] hsr_slave_1: left promiscuous mode
[   82.618426][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.621266][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.624365][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.626740][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.638587][   T12] veth1_macvtap: left promiscuous mode
[   82.642387][   T12] veth0_macvtap: left promiscuous mode
[   82.644270][   T12] veth1_vlan: left promiscuous mode
[   82.645944][   T12] veth0_vlan: left promiscuous mode
[   82.942822][   T12] team0 (unregistering): Port device team_slave_1 removed
[   82.973149][   T12] team0 (unregistering): Port device team_slave_0 removed
[   83.243778][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.249548][ T7211] syzkaller1: entered allmulticast mode
[   83.301645][ T5202] Bluetooth: hci1: command tx timeout
[   83.313030][ T7077] veth0_vlan: entered promiscuous mode
[   83.318243][ T7077] veth1_vlan: entered promiscuous mode
[   83.374556][ T7216] lo speed is unknown, defaulting to 1000
[   83.377950][ T7077] veth0_macvtap: entered promiscuous mode
[   83.383991][ T7077] veth1_macvtap: entered promiscuous mode
[   83.394361][ T7216] lo speed is unknown, defaulting to 1000
[   83.401457][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.410811][ T7216] lo speed is unknown, defaulting to 1000
[   83.426316][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.431705][ T7217] x_tables: duplicate underflow at hook 1
[   83.435352][ T7092] 8021q: adding VLAN 0 to HW filter on device team0
[   83.442269][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.448173][ T7077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.451657][ T7077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.454303][ T7077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.457026][ T7077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.466893][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.469113][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.482037][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.484208][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.570083][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.572924][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.594452][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.597151][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.611570][ T7216] infiniband syz0: set down
[   83.614054][ T5538] lo speed is unknown, defaulting to 1000
[   83.617355][ T7216] infiniband syz0: added lo
[   83.685323][ T7216] RDS/IB: syz0: added
[   83.687273][ T7216] smc: adding ib device syz0 with port count 1
[   83.690151][ T7216] smc:    ib device syz0 port 1 has pnetid 
[   83.697188][ T5538] lo speed is unknown, defaulting to 1000
[   83.702659][ T7216] lo speed is unknown, defaulting to 1000
[   83.707182][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.741659][ T7092] veth0_vlan: entered promiscuous mode
[   83.747450][ T7092] veth1_vlan: entered promiscuous mode
[   83.773151][ T7092] veth0_macvtap: entered promiscuous mode
[   83.777521][ T7092] veth1_macvtap: entered promiscuous mode
[   83.779041][ T5202] Bluetooth: hci2: command tx timeout
[   83.790452][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.797943][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.806916][ T7092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.810121][ T7092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.812820][ T7092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.815525][ T7092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.820454][ T7216] lo speed is unknown, defaulting to 1000
[   83.871943][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.875086][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.904004][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.906708][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.950922][ T7216] lo speed is unknown, defaulting to 1000
[   84.063440][ T7216] lo speed is unknown, defaulting to 1000
[   84.215919][ T7227] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   84.218414][ T7227] netlink: 'syz.0.327': attribute type 2 has an invalid length.
[   84.291854][ T7234] netlink: 180 bytes leftover after parsing attributes in process `syz.0.329'.
[   84.348178][   T33] audit: type=1800 audit(1751948589.489:2): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.331" name=25705320202020 dev="tmpfs" ino=853 res=0 errno=0
[   84.921464][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.616591][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.663112][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.666875][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.672940][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.676237][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.679562][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.702676][ T7253] lo speed is unknown, defaulting to 1000
[   85.880605][ T7253] chnl_net:caif_netlink_parms(): no params data found
[   85.903091][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.944731][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.946938][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.951002][ T7253] bridge_slave_0: entered allmulticast mode
[   85.953606][ T7253] bridge_slave_0: entered promiscuous mode
[   85.965694][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.972127][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.974273][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.976407][ T7253] bridge_slave_1: entered allmulticast mode
[   85.979534][ T7253] bridge_slave_1: entered promiscuous mode
[   85.998584][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.004238][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.029703][ T7253] team0: Port device team_slave_0 added
[   86.034291][ T7253] team0: Port device team_slave_1 added
[   86.052742][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.054849][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.064390][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.076997][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.082618][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.090448][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.140761][   T13] bridge_slave_1: left allmulticast mode
[   86.142494][   T13] bridge_slave_1: left promiscuous mode
[   86.144306][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.148282][   T13] bridge_slave_0: left allmulticast mode
[   86.150648][   T13] bridge_slave_0: left promiscuous mode
[   86.152458][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.373841][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.378002][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.386074][   T13] bond0 (unregistering): Released all slaves
[   86.415484][ T7253] hsr_slave_0: entered promiscuous mode
[   86.417839][ T7253] hsr_slave_1: entered promiscuous mode
[   86.429339][ T7253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.431722][ T7253] Cannot create hsr debugfs directory
[   86.479946][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.486680][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.491736][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.497734][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.504343][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.623578][ T7269] lo speed is unknown, defaulting to 1000
[   86.708544][ T7279] xt_TCPMSS: Only works on TCP SYN packets
[   86.960400][   T13] hsr_slave_0: left promiscuous mode
[   86.964823][   T13] hsr_slave_1: left promiscuous mode
[   86.966860][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.972377][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.975150][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.980774][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.995788][   T13] veth1_macvtap: left promiscuous mode
[   86.997554][   T13] veth0_macvtap: left promiscuous mode
[   86.999386][   T13] veth1_vlan: left promiscuous mode
[   87.001106][   T13] veth0_vlan: left promiscuous mode
[   87.251796][   T13] team0 (unregistering): Port device team_slave_1 removed
[   87.274483][   T13] team0 (unregistering): Port device team_slave_0 removed
[   87.564936][ T7269] chnl_net:caif_netlink_parms(): no params data found
[   87.700516][ T5202] Bluetooth: hci1: command tx timeout
[   87.713891][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.716213][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.718472][ T7269] bridge_slave_0: entered allmulticast mode
[   87.726527][ T7269] bridge_slave_0: entered promiscuous mode
[   87.730988][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.733256][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.735623][ T7269] bridge_slave_1: entered allmulticast mode
[   87.739492][ T7269] bridge_slave_1: entered promiscuous mode
[   87.754491][ T7296] netlink: 'syz.0.340': attribute type 4 has an invalid length.
[   87.776269][ T7269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.779765][ T7253] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.786298][ T7253] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.796963][ T7253] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.804579][ T7269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.825265][ T7253] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.858678][ T7269] team0: Port device team_slave_0 added
[   87.882840][ T7269] team0: Port device team_slave_1 added
[   87.922571][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.924825][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.935378][ T7269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.941562][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.947360][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.967126][ T7269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.031269][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.087904][ T7269] hsr_slave_0: entered promiscuous mode
[   88.090420][ T7269] hsr_slave_1: entered promiscuous mode
[   88.092500][ T7269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.094840][ T7269] Cannot create hsr debugfs directory
[   88.108122][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.115815][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[   88.167770][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.182259][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[   88.245098][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.347472][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.393176][   T13] bridge_slave_1: left allmulticast mode
[   88.394952][   T13] bridge_slave_1: left promiscuous mode
[   88.396789][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.406632][   T13] bridge_slave_0: left allmulticast mode
[   88.408399][   T13] bridge_slave_0: left promiscuous mode
[   88.419404][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.579053][ T5202] Bluetooth: hci2: command tx timeout
[   88.643781][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.647858][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.651854][   T13] bond0 (unregistering): Released all slaves
[   88.691248][ T7253] 8021q: adding VLAN 0 to HW filter on device team0
[   88.697088][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.699300][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.758332][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.760673][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.838568][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'.
[   88.848778][ T7336] netlink: 108 bytes leftover after parsing attributes in process `syz.0.344'.
[   89.108138][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.138379][   T13] hsr_slave_0: left promiscuous mode
[   89.141267][   T13] hsr_slave_1: left promiscuous mode
[   89.143512][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.145755][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.148779][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.151208][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.163070][   T13] veth1_macvtap: left promiscuous mode
[   89.164852][   T13] veth0_macvtap: left promiscuous mode
[   89.166573][   T13] veth1_vlan: left promiscuous mode
[   89.168294][   T13] veth0_vlan: left promiscuous mode
[   89.182205][ T7353] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   89.201823][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'.
[   89.454654][   T13] team0 (unregistering): Port device team_slave_1 removed
[   89.483292][   T13] team0 (unregistering): Port device team_slave_0 removed
[   89.749986][ T7253] veth0_vlan: entered promiscuous mode
[   89.754994][ T7253] veth1_vlan: entered promiscuous mode
[   89.772166][ T7269] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.779029][ T5202] Bluetooth: hci1: command tx timeout
[   89.783204][ T7269] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.797462][ T7269] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.825143][ T7269] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.834663][ T7253] veth0_macvtap: entered promiscuous mode
[   89.850702][ T7253] veth1_macvtap: entered promiscuous mode
[   89.876117][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.885827][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.894447][ T7253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.897196][ T7253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.900226][ T7253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.902912][ T7253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.039707][ T7269] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.050757][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.053111][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.082306][ T7269] 8021q: adding VLAN 0 to HW filter on device team0
[   90.087619][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.090394][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.097890][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.100284][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.121076][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.123267][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.162621][ T7269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.165844][ T7269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.276184][ T7269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.324931][ T7269] veth0_vlan: entered promiscuous mode
[   90.330942][ T7269] veth1_vlan: entered promiscuous mode
[   90.347732][ T7269] veth0_macvtap: entered promiscuous mode
[   90.357764][ T7269] veth1_macvtap: entered promiscuous mode
[   90.374790][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.387658][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.394833][ T7269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.397622][ T7269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.401710][ T7269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.404287][ T7269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.458560][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.464782][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.482219][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.484671][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.719244][ T7411] block nbd0: server does not support multiple connections per device.
[   90.722512][ T7411] block nbd0: shutting down sockets
[   90.756281][ T7413] netlink: 'syz.0.359': attribute type 2 has an invalid length.
[   90.791704][ T7415] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[   90.794125][ T7415] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.831760][ T5823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.374653][ T5823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.542853][ T7422] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.566902][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'.
[   91.570925][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'.
[   91.660927][ T7428] netlink: 84 bytes leftover after parsing attributes in process `syz.0.365'.
[   91.687340][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.692130][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.697164][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.701241][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.704291][ T7433] netlink: 'syz.0.366': attribute type 32 has an invalid length.
[   91.705950][ T5823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.716617][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.747413][ T7429] lo speed is unknown, defaulting to 1000
[   91.858483][ T7442] Bluetooth: MGMT ver 1.23
[   91.958351][ T5823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.002212][ T7429] chnl_net:caif_netlink_parms(): no params data found
[   92.182762][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.185589][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.188392][ T7429] bridge_slave_0: entered allmulticast mode
[   92.199998][ T7429] bridge_slave_0: entered promiscuous mode
[   92.217816][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.221123][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.223927][ T7429] bridge_slave_1: entered allmulticast mode
[   92.227515][ T7429] bridge_slave_1: entered promiscuous mode
[   92.231824][ T5823] bridge_slave_1: left allmulticast mode
[   92.233575][ T5823] bridge_slave_1: left promiscuous mode
[   92.235350][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.240184][ T5823] bridge_slave_0: left allmulticast mode
[   92.241921][ T5823] bridge_slave_0: left promiscuous mode
[   92.243678][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.466707][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.472409][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.476921][ T5823] bond0 (unregistering): Released all slaves
[   92.551246][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.558448][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.607744][ T7429] team0: Port device team_slave_0 added
[   92.613157][ T7429] team0: Port device team_slave_1 added
[   92.643271][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.645393][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.653426][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.676274][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.678355][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.688710][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.768709][ T7429] hsr_slave_0: entered promiscuous mode
[   92.771705][ T7429] hsr_slave_1: entered promiscuous mode
[   92.773998][ T7429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.776545][ T7429] Cannot create hsr debugfs directory
[   92.861015][ T5823] hsr_slave_0: left promiscuous mode
[   92.868094][ T5823] hsr_slave_1: left promiscuous mode
[   92.878542][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.880990][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.889522][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.891819][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.902192][ T5823] veth1_macvtap: left promiscuous mode
[   92.903980][ T5823] veth0_macvtap: left promiscuous mode
[   92.905853][ T5823] veth1_vlan: left promiscuous mode
[   92.907448][ T5823] veth0_vlan: left promiscuous mode
[   92.994071][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.003385][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.006350][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.016227][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.018701][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.128675][    T9] hid-generic 0005:0458:005B.0001: item fetching failed at offset 0/3
[   93.136087][    T9] hid-generic 0005:0458:005B.0001: probe with driver hid-generic failed with error -22
[   93.216690][ T5823] team0 (unregistering): Port device team_slave_1 removed
[   93.242212][ T5823] team0 (unregistering): Port device team_slave_0 removed
[   93.576009][ T7474] lo speed is unknown, defaulting to 1000
[   93.779077][ T5812] Bluetooth: hci1: command tx timeout
[   93.983120][ T7474] chnl_net:caif_netlink_parms(): no params data found
[   94.046202][ T5823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.093640][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.095863][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.098074][ T7474] bridge_slave_0: entered allmulticast mode
[   94.104679][ T7474] bridge_slave_0: entered promiscuous mode
[   94.107956][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.110456][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.112678][ T7474] bridge_slave_1: entered allmulticast mode
[   94.115442][ T7474] bridge_slave_1: entered promiscuous mode
[   94.118322][ T7429] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.153002][ T7429] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.174767][ T5823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.183966][ T7474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.188796][ T7474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.193525][ T7429] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.212473][ T7429] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.232675][ T5823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.256340][ T7474] team0: Port device team_slave_0 added
[   94.274753][ T7474] team0: Port device team_slave_1 added
[   94.295976][ T5823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.318124][ T7474] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.322627][ T7474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.332632][ T7474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.348702][ T7474] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.351077][ T7474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.358655][ T7474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.400901][ T7474] hsr_slave_0: entered promiscuous mode
[   94.403312][ T7474] hsr_slave_1: entered promiscuous mode
[   94.405418][ T7474] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.407737][ T7474] Cannot create hsr debugfs directory
[   94.532656][ T5823] bridge_slave_1: left allmulticast mode
[   94.534405][ T5823] bridge_slave_1: left promiscuous mode
[   94.537298][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.543388][ T5823] bridge_slave_0: left allmulticast mode
[   94.545076][ T5823] bridge_slave_0: left promiscuous mode
[   94.546839][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.797707][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.802198][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.805800][ T5823] bond0 (unregistering): Released all slaves
[   94.877434][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.961454][ T7429] 8021q: adding VLAN 0 to HW filter on device team0
[   94.983542][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.985882][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.995692][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.997956][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.033170][ T7532] ieee802154 phy0 wpan0: encryption failed: -90
[   95.061708][ T5812] Bluetooth: hci2: command tx timeout
[   95.145255][ T7429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.335557][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.374033][ T5823] hsr_slave_0: left promiscuous mode
[   95.386696][ T5823] hsr_slave_1: left promiscuous mode
[   95.391161][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.393508][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.398696][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.401463][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.418466][ T5823] veth1_macvtap: left promiscuous mode
[   95.420441][ T5823] veth0_macvtap: left promiscuous mode
[   95.422163][ T5823] veth1_vlan: left promiscuous mode
[   95.423890][ T5823] veth0_vlan: left promiscuous mode
[   95.515242][ T7548] can: request_module (can-proto-3) failed.
[   95.694731][ T5823] team0 (unregistering): Port device team_slave_1 removed
[   95.716409][ T5823] team0 (unregistering): Port device team_slave_0 removed
[   95.859158][ T5202] Bluetooth: hci1: command tx timeout
[   95.969711][ T7429] veth0_vlan: entered promiscuous mode
[   95.991199][ T7429] veth1_vlan: entered promiscuous mode
[   96.038036][ T7474] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.052585][ T7474] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.066729][ T7474] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.086254][ T7474] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.097400][ T7429] veth0_macvtap: entered promiscuous mode
[   96.122126][ T7429] veth1_macvtap: entered promiscuous mode
[   96.143563][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.158521][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.171987][ T7429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.182466][ T7429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.185129][ T7429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.187681][ T7429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.298288][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.301334][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.337080][ T7474] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.358299][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.370542][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.373387][ T7474] 8021q: adding VLAN 0 to HW filter on device team0
[   96.382892][ T7575] xt_TCPMSS: Only works on TCP SYN packets
[   96.390346][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.392622][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.407130][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.409508][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.526496][ T7584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.381'.
[   96.644031][ T7474] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.691772][ T7474] veth0_vlan: entered promiscuous mode
[   96.703753][ T7602] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.383'.
[   96.707144][ T7474] veth1_vlan: entered promiscuous mode
[   96.739818][ T7474] veth0_macvtap: entered promiscuous mode
[   96.744203][ T7474] veth1_macvtap: entered promiscuous mode
[   96.767259][ T7474] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.785417][ T7474] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.791035][ T7474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.795446][ T7474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.798184][ T7474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.801688][ T7474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.874220][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.876566][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.888745][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.891866][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.903514][ T7610] bridge_slave_0: entered promiscuous mode
[   96.971949][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.044319][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.139210][ T5202] Bluetooth: hci2: command tx timeout
[   97.537792][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.820862][ T7615] xt_TCPMSS: Only works on TCP SYN packets
[   97.865224][ T7617] netlink: 'syz.0.388': attribute type 32 has an invalid length.
[   97.910454][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.955439][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.961670][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.965252][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   97.970495][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.973113][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.004955][ T7622] lo speed is unknown, defaulting to 1000
[   98.056678][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'.
[   98.202561][ T7622] chnl_net:caif_netlink_parms(): no params data found
[   98.301300][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.303593][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.310384][ T7622] bridge_slave_0: entered allmulticast mode
[   98.313225][ T7622] bridge_slave_0: entered promiscuous mode
[   98.325679][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.327931][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.331470][ T7622] bridge_slave_1: entered allmulticast mode
[   98.336375][ T7622] bridge_slave_1: entered promiscuous mode
[   98.349562][   T12] bridge_slave_1: left allmulticast mode
[   98.351316][   T12] bridge_slave_1: left promiscuous mode
[   98.353139][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.360416][   T12] bridge_slave_0: left allmulticast mode
[   98.362137][   T12] bridge_slave_0: left promiscuous mode
[   98.363888][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.388145][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   98.569820][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.573830][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.577166][   T12] bond0 (unregistering): Released all slaves
[   98.597362][ T7622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.613197][ T7622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.658317][ T7622] team0: Port device team_slave_0 added
[   98.681251][ T7622] team0: Port device team_slave_1 added
[   98.701022][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.703136][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.711202][ T7622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.717143][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.728914][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.736681][ T7622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.794949][ T7660] netlink: 'syz.0.396': attribute type 32 has an invalid length.
[   98.845756][ T7622] hsr_slave_0: entered promiscuous mode
[   98.848034][ T7622] hsr_slave_1: entered promiscuous mode
[   98.854594][ T7622] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.856873][ T7622] Cannot create hsr debugfs directory
[   99.047678][   T12] hsr_slave_0: left promiscuous mode
[   99.056119][   T12] hsr_slave_1: left promiscuous mode
[   99.058149][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.061292][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.067137][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.069626][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.080228][   T12] veth1_macvtap: left promiscuous mode
[   99.081945][   T12] veth0_macvtap: left promiscuous mode
[   99.083655][   T12] veth1_vlan: left promiscuous mode
[   99.085306][   T12] veth0_vlan: left promiscuous mode
[   99.337604][   T12] team0 (unregistering): Port device team_slave_1 removed
[   99.357783][   T12] team0 (unregistering): Port device team_slave_0 removed
[   99.670756][ T7681] xt_TCPMSS: Only works on TCP SYN packets
[   99.775100][ T7689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.400'.
[   99.806284][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.401'.
[  100.012532][ T7622] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  100.020413][ T5202] Bluetooth: hci1: command tx timeout
[  100.023700][ T7622] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  100.032920][ T7622] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  100.037494][ T7622] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  100.060160][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'.
[  100.099702][ T7708] netlink: 'syz.0.404': attribute type 11 has an invalid length.
[  100.141675][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'.
[  100.185631][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.198559][ T7622] 8021q: adding VLAN 0 to HW filter on device team0
[  100.234850][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.237016][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.244707][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.246865][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.262029][ T7724] xt_TCPMSS: Only works on TCP SYN packets
[  100.296891][ T7622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.431468][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.436863][ T7740] netlink: 'syz.0.408': attribute type 29 has an invalid length.
[  100.481897][ T7622] veth0_vlan: entered promiscuous mode
[  100.490177][ T7622] veth1_vlan: entered promiscuous mode
[  100.497547][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'.
[  100.527699][ T7744] 8021q: adding VLAN 0 to HW filter on device bond4
[  100.538314][ T7622] veth0_macvtap: entered promiscuous mode
[  100.546382][ T7744] macvlan2: entered promiscuous mode
[  100.548009][ T7744] macvlan2: entered allmulticast mode
[  100.550438][ T7744] bond4: (slave macvlan2): Opening slave failed
[  100.558021][ T7622] veth1_macvtap: entered promiscuous mode
[  100.570174][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.576038][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.588594][ T7622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.592430][ T7622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.594985][ T7622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.597496][ T7622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.653853][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.656220][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.677156][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.689094][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.878741][ T7756] xfrm1: entered promiscuous mode
[  100.880833][ T7756] xfrm1: entered allmulticast mode
[  100.912841][ T7758] netlink: 'syz.0.414': attribute type 2 has an invalid length.
[  100.915198][ T7758] netlink: 119 bytes leftover after parsing attributes in process `syz.0.414'.
[  100.942782][ T7760] netlink: 'syz.0.415': attribute type 32 has an invalid length.
[  101.196979][ T7774] lo speed is unknown, defaulting to 1000
[  101.296831][ T7775] lo speed is unknown, defaulting to 1000
[  101.634406][ T7781] __nla_validate_parse: 6 callbacks suppressed
[  101.634419][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'.
[  101.835941][ T7789] netlink: 'syz.0.422': attribute type 32 has an invalid length.
[  102.165137][ T7814] netlink: 'syz.0.428': attribute type 11 has an invalid length.
[  102.196975][ T7817] netlink: 'syz.0.429': attribute type 32 has an invalid length.
[  102.781247][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.727308][ T7840] netlink: 84 bytes leftover after parsing attributes in process `syz.0.434'.
[  103.763553][ T7842] tipc: Can't bind to reserved service type 2
[  103.767268][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.435'.
[  103.814023][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  103.817236][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  103.820708][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  103.823529][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  103.826126][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  103.868073][ T7848] lo speed is unknown, defaulting to 1000
[  104.062721][ T7862] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.121466][ T7848] chnl_net:caif_netlink_parms(): no params data found
[  104.180851][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.183049][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.185165][ T7848] bridge_slave_0: entered allmulticast mode
[  104.187794][ T7848] bridge_slave_0: entered promiscuous mode
[  104.193243][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.195399][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.197616][ T7848] bridge_slave_1: entered allmulticast mode
[  104.201258][ T7848] bridge_slave_1: entered promiscuous mode
[  104.243516][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.247879][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.283698][ T7848] team0: Port device team_slave_0 added
[  104.287219][ T7848] team0: Port device team_slave_1 added
[  104.307998][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.312621][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.321206][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.325470][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.327560][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.341108][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.343194][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'.
[  104.365315][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.378170][ T7884] xt_TPROXY: Can be used only with -p tcp or -p udp
[  104.386258][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'.
[  104.416492][ T7848] hsr_slave_0: entered promiscuous mode
[  104.421846][ T7848] hsr_slave_1: entered promiscuous mode
[  104.423963][ T7848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.426192][ T7848] Cannot create hsr debugfs directory
[  104.441161][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.473684][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[  104.499936][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.620605][   T12] bridge_slave_1: left allmulticast mode
[  104.622396][   T12] bridge_slave_1: left promiscuous mode
[  104.624210][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.629388][   T12] bridge_slave_0: left allmulticast mode
[  104.631123][   T12] bridge_slave_0: left promiscuous mode
[  104.632927][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.902131][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.906830][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.912079][   T12] bond0 (unregistering): Released all slaves
[  105.176896][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'.
[  105.183980][ T7914] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  105.399621][   T12] hsr_slave_0: left promiscuous mode
[  105.401884][   T12] hsr_slave_1: left promiscuous mode
[  105.404661][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.407120][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.411867][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.414093][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.425659][   T12] veth1_macvtap: left promiscuous mode
[  105.427342][   T12] veth0_macvtap: left promiscuous mode
[  105.429343][   T12] veth1_vlan: left promiscuous mode
[  105.430925][   T12] veth0_vlan: left promiscuous mode
[  105.702969][   T12] team0 (unregistering): Port device team_slave_1 removed
[  105.726068][   T12] team0 (unregistering): Port device team_slave_0 removed
[  105.858984][   T55] Bluetooth: hci1: command tx timeout
[  105.980443][ T7848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  105.985253][ T7848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.997339][ T7848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.008242][ T7848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.053496][ T7943] netlink: 'syz.0.458': attribute type 32 has an invalid length.
[  106.093477][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.115863][ T7848] 8021q: adding VLAN 0 to HW filter on device team0
[  106.124166][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.126324][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.145799][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.147918][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.165107][ T7848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  106.168167][ T7848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.213666][ T7954] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  106.244813][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'.
[  106.271273][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.287789][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'.
[  106.297826][ T7848] veth0_vlan: entered promiscuous mode
[  106.305316][ T7848] veth1_vlan: entered promiscuous mode
[  106.331642][ T7848] veth0_macvtap: entered promiscuous mode
[  106.335633][ T7848] veth1_macvtap: entered promiscuous mode
[  106.345744][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.353461][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.358275][ T7848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.362052][ T7848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.368943][ T7848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.371558][ T7848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.413174][ T7973] netlink: 'syz.0.464': attribute type 1 has an invalid length.
[  106.419047][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.424182][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.456836][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.459936][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.505746][ T7973] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  106.543456][ T7979] netlink: 'syz.0.465': attribute type 11 has an invalid length.
[  106.545934][ T7978] netlink: 'syz.0.465': attribute type 11 has an invalid length.
[  106.739350][ T7990] __nla_validate_parse: 1 callbacks suppressed
[  106.739363][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'.
[  107.837606][ T8010] Unsupported ieee802154 address type: 0
[  107.846174][ T8010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.948801][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'.
[  107.998774][ T8018] netlink: 'syz.0.479': attribute type 32 has an invalid length.
[  108.392594][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.416609][ T8039] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  109.420729][ T8039] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  109.423892][ T8039] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  109.427015][ T8039] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  109.433503][ T8039] geneve2: entered promiscuous mode
[  109.435529][ T8039] geneve2: entered allmulticast mode
[  109.488319][ T8041] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.500127][ T8041] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  109.538088][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.541724][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.545062][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.548043][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.551452][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.580291][ T8045] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  109.583896][ T8042] lo speed is unknown, defaulting to 1000
[  109.636301][ T8049] netlink: 'syz.0.487': attribute type 1 has an invalid length.
[  109.660748][ T8049] 8021q: adding VLAN 0 to HW filter on device bond6
[  109.670662][ T8049] pim6reg1: entered promiscuous mode
[  109.672641][ T8049] pim6reg1: entered allmulticast mode
[  109.734872][ T8051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.487'.
[  109.821111][ T8042] chnl_net:caif_netlink_parms(): no params data found
[  109.913848][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.923433][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.925710][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.927900][ T8042] bridge_slave_0: entered allmulticast mode
[  109.930746][ T8042] bridge_slave_0: entered promiscuous mode
[  109.935131][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.937322][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.940396][ T8042] bridge_slave_1: entered allmulticast mode
[  109.943049][ T8042] bridge_slave_1: entered promiscuous mode
[  109.962372][ T8066] macvlan0: entered allmulticast mode
[  109.964568][ T8066] netlink: 'syz.0.490': attribute type 1 has an invalid length.
[  109.967326][ T8066] netlink: 'syz.0.490': attribute type 2 has an invalid length.
[  109.989523][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.997801][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.003764][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.043565][ T8042] team0: Port device team_slave_0 added
[  110.070228][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.080847][ T8042] team0: Port device team_slave_1 added
[  110.112371][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.118963][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.128997][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.135471][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.137702][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.146988][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.161124][ T8073] lo speed is unknown, defaulting to 1000
[  110.245594][ T8042] hsr_slave_0: entered promiscuous mode
[  110.247854][ T8042] hsr_slave_1: entered promiscuous mode
[  110.250991][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.253290][ T8042] Cannot create hsr debugfs directory
[  110.256979][   T13] bridge_slave_1: left allmulticast mode
[  110.258729][   T13] bridge_slave_1: left promiscuous mode
[  110.262125][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.265869][   T13] bridge_slave_0: left allmulticast mode
[  110.267575][   T13] bridge_slave_0: left promiscuous mode
[  110.269844][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.495266][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.500425][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.504132][   T13] bond0 (unregistering): Released all slaves
[  110.701858][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.966110][   T13] hsr_slave_0: left promiscuous mode
[  110.968389][   T13] hsr_slave_1: left promiscuous mode
[  110.972042][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.974292][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.979454][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.981872][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.003142][   T13] veth1_macvtap: left promiscuous mode
[  111.004983][   T13] veth0_macvtap: left promiscuous mode
[  111.006781][   T13] veth1_vlan: left promiscuous mode
[  111.008443][   T13] veth0_vlan: left promiscuous mode
[  111.020730][ T8093] netlink: 'syz.0.496': attribute type 27 has an invalid length.
[  111.156008][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'.
[  111.212072][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.499'.
[  111.215747][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'.
[  111.218553][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'.
[  111.221807][ T8105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'.
[  111.224526][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'.
[  111.336777][   T13] team0 (unregistering): Port device team_slave_1 removed
[  111.361529][   T13] team0 (unregistering): Port device team_slave_0 removed
[  111.620088][   T55] Bluetooth: hci1: command tx timeout
[  111.768714][ T8115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.500'.
[  111.775049][ T8042] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  111.781389][ T8042] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  111.785498][ T8112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.500'.
[  111.795526][ T8042] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  111.809431][ T8042] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  111.837617][ T8124] netlink: 88 bytes leftover after parsing attributes in process `syz.0.501'.
[  111.855687][ T8124] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  111.858482][ T8124] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  111.889629][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.901751][ T8042] 8021q: adding VLAN 0 to HW filter on device team0
[  111.911059][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.913210][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.917257][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.919445][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.025504][ T8133] batman_adv: batadv0: Adding interface: dummy0
[  112.027531][ T8133] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.047808][ T8133] batman_adv: batadv0: Interface activated: dummy0
[  112.073254][ T8133] batadv0: mtu less than device minimum
[  112.075706][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.079679][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.083434][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.087090][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.090886][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.094493][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.098115][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.101885][ T8133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.235787][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.299736][ T8042] veth0_vlan: entered promiscuous mode
[  112.312148][ T8042] veth1_vlan: entered promiscuous mode
[  112.346084][ T8042] veth0_macvtap: entered promiscuous mode
[  112.360007][ T8042] veth1_macvtap: entered promiscuous mode
[  112.369275][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.375904][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.381692][ T8042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.384593][ T8042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.387210][ T8042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.392025][ T8042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.456880][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.461850][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.481426][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.483875][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.376499][ T8169] netlink: 'syz.0.511': attribute type 2 has an invalid length.
[  113.380665][ T8168] netlink: 'syz.0.511': attribute type 2 has an invalid length.
[  113.385602][ T8169] netlink: 119 bytes leftover after parsing attributes in process `syz.0.511'.
[  113.391614][ T8168] netlink: 119 bytes leftover after parsing attributes in process `syz.0.511'.
[  113.395668][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[  113.395674][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[  113.528756][ T8176] macsec0: entered promiscuous mode
[  113.530693][ T8176] macsec0: entered allmulticast mode
[  113.534694][ T8176] veth1_macvtap: entered allmulticast mode
[  113.536809][ T8176] macsec0: left promiscuous mode
[  113.538369][ T8176] macsec0: left allmulticast mode
[  113.541357][ T8176] veth1_macvtap: left allmulticast mode
[  113.688436][ T8186] x_tables: duplicate underflow at hook 1
[  113.720377][ T8188] netlink: 'syz.0.518': attribute type 32 has an invalid length.
[  113.950051][ T8205] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  113.974878][ T8208] net_ratelimit: 11 callbacks suppressed
[  113.974905][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.032263][ T8213] netlink: 'syz.0.525': attribute type 32 has an invalid length.
[  114.156878][ T8222] netlink: 'syz.0.526': attribute type 2 has an invalid length.
[  114.159615][ T8222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.166445][ T8222] netlink: 'syz.0.526': attribute type 10 has an invalid length.
[  114.168790][ T8222] syz_tun: entered promiscuous mode
[  114.175004][ T8222] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  114.225970][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.427884][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.431417][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.434163][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.437500][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.440965][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.461986][ T8230] lo speed is unknown, defaulting to 1000
[  115.567675][ T8237] netlink: 'syz.0.532': attribute type 32 has an invalid length.
[  115.651934][ T8230] chnl_net:caif_netlink_parms(): no params data found
[  115.715346][ T8252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.533'.
[  115.719179][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.721552][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.723833][ T8230] bridge_slave_0: entered allmulticast mode
[  115.726612][ T8230] bridge_slave_0: entered promiscuous mode
[  115.738067][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.743763][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.746764][ T8230] bridge_slave_1: entered allmulticast mode
[  115.749609][ T8230] bridge_slave_1: entered promiscuous mode
[  115.774149][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.780014][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'.
[  115.786633][ T8254] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.789581][ T8254] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.792080][ T8254] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.794608][ T8254] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.801763][ T8254] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.804422][ T8254] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.806980][ T8254] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.809783][ T8254] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.833022][ T8230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.843451][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.852007][ T8230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.875820][ T8230] team0: Port device team_slave_0 added
[  115.879229][ T8230] team0: Port device team_slave_1 added
[  115.897320][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.899708][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.907628][ T8230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.911879][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.914005][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.922036][ T8230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.953643][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.985283][ T8230] hsr_slave_0: entered promiscuous mode
[  115.987561][ T8230] hsr_slave_1: entered promiscuous mode
[  115.990250][ T8230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.992522][ T8230] Cannot create hsr debugfs directory
[  116.070896][   T13] bridge_slave_1: left allmulticast mode
[  116.072732][   T13] bridge_slave_1: left promiscuous mode
[  116.074523][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.083163][   T13] bridge_slave_0: left allmulticast mode
[  116.085014][   T13] bridge_slave_0: left promiscuous mode
[  116.086811][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.320970][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.325427][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.329357][   T13] bond0 (unregistering): Released all slaves
[  116.760249][   T13] hsr_slave_0: left promiscuous mode
[  116.763213][   T13] hsr_slave_1: left promiscuous mode
[  116.765228][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.767452][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.773333][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.776387][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.791064][   T13] veth1_macvtap: left promiscuous mode
[  116.792841][   T13] veth0_macvtap: left promiscuous mode
[  116.794534][   T13] veth1_vlan: left promiscuous mode
[  116.796117][   T13] veth0_vlan: left promiscuous mode
[  116.967997][ T8285] netlink: 'syz.0.539': attribute type 32 has an invalid length.
[  117.147869][   T13] team0 (unregistering): Port device team_slave_1 removed
[  117.173465][   T13] team0 (unregistering): Port device team_slave_0 removed
[  117.471464][   T55] Bluetooth: hci1: command tx timeout
[  117.507100][ T8230] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  117.514657][ T8230] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  117.523083][ T8230] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  117.533186][ T8230] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  117.581192][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.0.542'.
[  117.583973][ T8313] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  117.607203][ T8230] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.625752][ T8230] 8021q: adding VLAN 0 to HW filter on device team0
[  117.631720][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.633937][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.647969][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.650288][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.777003][ T8230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.814166][ T8230] veth0_vlan: entered promiscuous mode
[  117.824110][ T8230] veth1_vlan: entered promiscuous mode
[  117.841111][ T8230] veth0_macvtap: entered promiscuous mode
[  117.845099][ T8230] veth1_macvtap: entered promiscuous mode
[  117.855883][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.864507][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.869549][ T8230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.872120][ T8230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.874687][ T8230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.877318][ T8230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.945996][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.948363][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.954723][ T8337] Unknown options in mask 700
[  117.962753][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.965183][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.992270][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'.
[  117.995141][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'.
[  118.171808][ T8360] netlink: 'syz.0.553': attribute type 1 has an invalid length.
[  118.187979][ T8360] 8021q: adding VLAN 0 to HW filter on device bond8
[  118.416485][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'.
[  118.574787][ T8381] sctp: [Deprecated]: syz.0.559 (pid 8381) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.574787][ T8381] Use struct sctp_sack_info instead
[  118.696697][ T8391] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  118.726217][ T8399] 8021q: VLANs not supported on wlan1
[  118.798746][ T8404] netlink: 830 bytes leftover after parsing attributes in process `syz.0.565'.
[  118.804452][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'.
[  118.971247][ T8416] sctp: [Deprecated]: syz.0.569 (pid 8416) Use of int in maxseg socket option.
[  118.971247][ T8416] Use struct sctp_assoc_value instead
[  119.214623][ T8436] netlink: 248 bytes leftover after parsing attributes in process `syz.0.575'.
[  119.271735][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'.
[  119.414380][ T8449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.580'.
[  119.533982][ T8454] 8021q: VLANs not supported on nlmon0
[  119.611911][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  119.753671][ T8469] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  119.782928][ T8473] Driver unsupported XDP return value 0 on prog  (id 196) dev N/A, expect packet loss!
[  120.067875][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.086832][ T8492] lo speed is unknown, defaulting to 1000
[  121.422893][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.426662][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.430264][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.433300][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.436028][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.467255][ T8510] lo speed is unknown, defaulting to 1000
[  121.679392][ T8510] chnl_net:caif_netlink_parms(): no params data found
[  121.734880][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.737166][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.739646][ T8510] bridge_slave_0: entered allmulticast mode
[  121.742295][ T8510] bridge_slave_0: entered promiscuous mode
[  121.745622][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.747964][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.750567][ T8510] bridge_slave_1: entered allmulticast mode
[  121.753267][ T8510] bridge_slave_1: entered promiscuous mode
[  121.774312][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.778747][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.803476][ T8510] team0: Port device team_slave_0 added
[  121.806757][ T8510] team0: Port device team_slave_1 added
[  121.826571][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.828691][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.836779][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.840967][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.843024][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.850847][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.878483][ T8510] hsr_slave_0: entered promiscuous mode
[  121.880851][ T8510] hsr_slave_1: entered promiscuous mode
[  121.882921][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.885289][ T8510] Cannot create hsr debugfs directory
[  121.928548][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.998308][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.040139][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.140621][   T13] bridge_slave_1: left allmulticast mode
[  122.145644][   T13] bridge_slave_1: left promiscuous mode
[  122.147443][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.152508][   T13] bridge_slave_0: left allmulticast mode
[  122.154205][   T13] bridge_slave_0: left promiscuous mode
[  122.156332][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.356345][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.362152][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.365792][   T13] bond0 (unregistering): Released all slaves
[  122.721805][   T13] hsr_slave_0: left promiscuous mode
[  122.723941][   T13] hsr_slave_1: left promiscuous mode
[  122.725971][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.728260][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.731320][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.733619][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.749503][   T13] veth1_macvtap: left promiscuous mode
[  122.752371][   T13] veth0_macvtap: left promiscuous mode
[  122.754283][   T13] veth1_vlan: left promiscuous mode
[  122.755992][   T13] veth0_vlan: left promiscuous mode
[  123.068315][   T13] team0 (unregistering): Port device team_slave_1 removed
[  123.079440][ T8591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.088937][   T56] block nbd0: Receive control failed (result -32)
[  123.108065][   T13] team0 (unregistering): Port device team_slave_0 removed
[  123.383219][ T8600] __nla_validate_parse: 6 callbacks suppressed
[  123.383242][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'.
[  123.387994][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'.
[  123.392463][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'.
[  123.444758][ T8510] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  123.451961][ T8510] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  123.457562][ T8510] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  123.461993][   T55] Bluetooth: hci1: command tx timeout
[  123.466185][ T8510] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  123.483449][ T8605] netlink: 'syz.0.619': attribute type 32 has an invalid length.
[  123.534563][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.549851][ T8510] 8021q: adding VLAN 0 to HW filter on device team0
[  123.565883][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.568178][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.580682][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.583053][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.724908][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.735512][ T8632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.756229][ T8632] vlan4: entered promiscuous mode
[  123.757773][ T8632] bridge0: entered promiscuous mode
[  123.771209][ T8510] veth0_vlan: entered promiscuous mode
[  123.776537][ T8510] veth1_vlan: entered promiscuous mode
[  123.797098][ T8510] veth0_macvtap: entered promiscuous mode
[  123.801567][ T8510] veth1_macvtap: entered promiscuous mode
[  123.811270][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.817752][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.825696][ T8510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.828425][ T8510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.831850][ T8510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.834561][ T8510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.885832][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.888288][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.910399][ T8640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.626'.
[  123.913320][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.915792][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.835014][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  125.766623][ T8653] netlink: 'syz.0.631': attribute type 1 has an invalid length.
[  125.769255][ T8653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.631'.
[  125.882371][ T6685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.213868][ T8658] netlink: 'syz.0.633': attribute type 32 has an invalid length.
[  127.331957][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.335048][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.337738][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.343982][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.347264][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.373263][ T6685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.396338][ T8666] lo speed is unknown, defaulting to 1000
[  127.437695][ T6685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.514153][ T6685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.558523][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  127.648263][ T6685] bridge_slave_1: left allmulticast mode
[  127.651244][ T6685] bridge_slave_1: left promiscuous mode
[  127.653083][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.657000][ T6685] bridge_slave_0: left allmulticast mode
[  127.658759][ T6685] bridge_slave_0: left promiscuous mode
[  127.660879][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.907514][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.912954][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.916898][ T6685] bond0 (unregistering): Released all slaves
[  127.923672][ T8666] chnl_net:caif_netlink_parms(): no params data found
[  127.988294][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.996062][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.998411][ T8666] bridge_slave_0: entered allmulticast mode
[  128.001795][ T8666] bridge_slave_0: entered promiscuous mode
[  128.005082][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.007332][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.011159][ T8666] bridge_slave_1: entered allmulticast mode
[  128.013798][ T8666] bridge_slave_1: entered promiscuous mode
[  128.052167][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.056861][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.083831][ T8666] team0: Port device team_slave_0 added
[  128.087995][ T8666] team0: Port device team_slave_1 added
[  128.133300][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.135443][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.144888][ T8666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.149310][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.151417][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.161867][ T8666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.243509][ T8666] hsr_slave_0: entered promiscuous mode
[  128.245872][ T8666] hsr_slave_1: entered promiscuous mode
[  128.247960][ T8666] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.265623][ T8666] Cannot create hsr debugfs directory
[  128.325924][ T6685] hsr_slave_0: left promiscuous mode
[  128.333980][ T6685] hsr_slave_1: left promiscuous mode
[  128.336075][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.338388][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.342118][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.344437][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.355836][ T6685] veth1_macvtap: left promiscuous mode
[  128.357532][ T6685] veth0_macvtap: left promiscuous mode
[  128.359520][ T6685] veth1_vlan: left promiscuous mode
[  128.361240][ T6685] veth0_vlan: left promiscuous mode
[  128.676658][ T6685] team0 (unregistering): Port device team_slave_1 removed
[  128.706107][ T6685] team0 (unregistering): Port device team_slave_0 removed
[  129.380702][   T55] Bluetooth: hci1: command tx timeout
[  129.448732][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'.
[  129.524276][ T8666] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  129.530785][ T8666] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  129.535370][ T8666] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  129.544102][ T8666] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  129.641463][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.655772][ T8742] netlink: 'syz.0.642': attribute type 1 has an invalid length.
[  129.658133][ T8742] netlink: 'syz.0.642': attribute type 2 has an invalid length.
[  129.660652][ T8666] 8021q: adding VLAN 0 to HW filter on device team0
[  129.667562][ T8742] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.642'.
[  129.673550][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.675705][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.690786][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.693010][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.806915][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.834598][ T8666] veth0_vlan: entered promiscuous mode
[  129.840056][ T8666] veth1_vlan: entered promiscuous mode
[  129.856842][ T8666] veth0_macvtap: entered promiscuous mode
[  129.861962][ T8666] veth1_macvtap: entered promiscuous mode
[  129.872600][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.879947][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.884858][ T8666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.887590][ T8666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.893840][ T8666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.896593][ T8666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.963836][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.966205][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.990910][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.993975][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.455201][ T8763] netlink: 'syz.0.646': attribute type 10 has an invalid length.
[  130.493519][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'.
[  131.444151][ T8776] xt_bpf: check failed: parse error
[  131.553594][ T8782] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  131.853393][ T8808]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  132.085388][ T6685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.263517][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.540567][ T8811] netlink: 'syz.0.663': attribute type 5 has an invalid length.
[  133.542920][ T8811] netlink: 'syz.0.663': attribute type 7 has an invalid length.
[  133.553653][ T8811] : entered promiscuous mode
[  133.584985][ T8816] netlink: 'syz.0.664': attribute type 23 has an invalid length.
[  133.618677][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  133.622277][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  133.625071][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  133.628552][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  133.632734][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  133.657450][ T8817] lo speed is unknown, defaulting to 1000
[  133.682497][ T8826] netlink: 196 bytes leftover after parsing attributes in process `syz.0.666'.
[  133.833861][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.667'.
[  133.838686][ T6685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.892058][ T8837] tipc: Started in network mode
[  133.893676][ T8837] tipc: Node identity 080211, cluster identity 4711
[  133.895923][ T8837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.904453][ T8817] chnl_net:caif_netlink_parms(): no params data found
[  133.934844][ T6685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.998282][ T6685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.010614][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.012892][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.015149][ T8817] bridge_slave_0: entered allmulticast mode
[  134.025669][ T8817] bridge_slave_0: entered promiscuous mode
[  134.030361][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.032651][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.034895][ T8817] bridge_slave_1: entered allmulticast mode
[  134.037573][ T8817] bridge_slave_1: entered promiscuous mode
[  134.062529][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.070511][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.113797][ T8817] team0: Port device team_slave_0 added
[  134.136411][ T8817] team0: Port device team_slave_1 added
[  134.196155][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.198387][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.206740][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.236145][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.238674][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.246509][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.250311][ T8855] xt_TCPMSS: Only works on TCP SYN packets
[  134.252463][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[  134.253363][ T6685] bridge_slave_1: left allmulticast mode
[  134.256822][ T6685] bridge_slave_1: left promiscuous mode
[  134.258681][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.263797][ T6685] bridge_slave_0: left allmulticast mode
[  134.265500][ T6685] bridge_slave_0: left promiscuous mode
[  134.267283][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.505338][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.509870][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.513508][ T6685] bond0 (unregistering): Released all slaves
[  134.520776][ T8855] ip6gre0: Master is either lo or non-ether device
[  134.585697][ T8817] hsr_slave_0: entered promiscuous mode
[  134.599669][ T8817] hsr_slave_1: entered promiscuous mode
[  134.601925][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.604348][ T8817] Cannot create hsr debugfs directory
[  134.871712][ T8887] wg2: entered promiscuous mode
[  134.984005][ T6685] hsr_slave_0: left promiscuous mode
[  134.986097][ T6685] hsr_slave_1: left promiscuous mode
[  134.988144][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.995004][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.997708][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.004829][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.009337][   T10] tipc: Node number set to 134353152
[  135.018293][ T6685] veth1_macvtap: left promiscuous mode
[  135.021679][ T6685] veth0_macvtap: left promiscuous mode
[  135.023416][ T6685] veth1_vlan: left promiscuous mode
[  135.025004][ T6685] veth0_vlan: left promiscuous mode
[  135.143240][ T8899] IPv6: NLM_F_REPLACE set, but no existing node found!
[  135.308390][ T6685] team0 (unregistering): Port device team_slave_1 removed
[  135.330813][ T6685] team0 (unregistering): Port device team_slave_0 removed
[  135.523138][ T7478] ==================================================================
[  135.525561][ T7478] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  135.527748][ T7478] Read of size 8 at addr ffff88810a9bc0a0 by task khidpd_0458005b/7478
[  135.530823][ T7478] 
[  135.531650][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: khidpd_0458005b Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  135.531661][ T7478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.531667][ T7478] Call Trace:
[  135.531672][ T7478]  <TASK>
[  135.531677][ T7478]  dump_stack_lvl+0x189/0x250
[  135.531701][ T7478]  ? __virt_addr_valid+0x1c8/0x5c0
[  135.531709][ T7478]  ? rcu_is_watching+0x15/0xb0
[  135.531720][ T7478]  ? __kasan_check_byte+0x12/0x40
[  135.531729][ T7478]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.531739][ T7478]  ? rcu_is_watching+0x15/0xb0
[  135.531749][ T7478]  ? lock_release+0x4b/0x3e0
[  135.531761][ T7478]  ? __virt_addr_valid+0x1c8/0x5c0
[  135.531768][ T7478]  ? __virt_addr_valid+0x4a5/0x5c0
[  135.531775][ T7478]  print_report+0xd2/0x2b0
[  135.531786][ T7478]  ? __mutex_lock+0x738/0xe80
[  135.531797][ T7478]  kasan_report+0x118/0x150
[  135.531805][ T7478]  ? __mutex_lock+0x738/0xe80
[  135.531816][ T7478]  __mutex_lock+0x738/0xe80
[  135.531827][ T7478]  ? __mutex_lock+0x51b/0xe80
[  135.531838][ T7478]  ? l2cap_unregister_user+0x6a/0x1b0
[  135.531850][ T7478]  ? __pfx___mutex_lock+0x10/0x10
[  135.531861][ T7478]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  135.531874][ T7478]  l2cap_unregister_user+0x6a/0x1b0
[  135.531885][ T7478]  hidp_session_thread+0x3c9/0x410
[  135.531898][ T7478]  ? __pfx_hidp_session_thread+0x10/0x10
[  135.531908][ T7478]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  135.531917][ T7478]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  135.531929][ T7478]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  135.531940][ T7478]  ? __kthread_parkme+0x7b/0x200
[  135.531947][ T7478]  ? __kthread_parkme+0x1a1/0x200
[  135.531955][ T7478]  kthread+0x711/0x8a0
[  135.531963][ T7478]  ? __pfx_hidp_session_thread+0x10/0x10
[  135.531973][ T7478]  ? __pfx_kthread+0x10/0x10
[  135.531981][ T7478]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.531990][ T7478]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.532000][ T7478]  ? __pfx_kthread+0x10/0x10
[  135.532008][ T7478]  ret_from_fork+0x3fc/0x770
[  135.532019][ T7478]  ? __pfx_ret_from_fork+0x10/0x10
[  135.532029][ T7478]  ? __switch_to_asm+0x39/0x70
[  135.532036][ T7478]  ? __switch_to_asm+0x33/0x70
[  135.532043][ T7478]  ? __pfx_kthread+0x10/0x10
[  135.532051][ T7478]  ret_from_fork_asm+0x1a/0x30
[  135.532061][ T7478]  </TASK>
[  135.532064][ T7478] 
[  135.599783][ T7478] Allocated by task 7474:
[  135.601106][ T7478]  kasan_save_track+0x3e/0x80
[  135.602535][ T7478]  __kasan_kmalloc+0x93/0xb0
[  135.603959][ T7478]  __kmalloc_noprof+0x27a/0x4f0
[  135.605451][ T7478]  hci_alloc_dev_priv+0x28/0x2040
[  135.606957][ T7478]  vhci_create_device+0x120/0x6e0
[  135.608504][ T7478]  vhci_write+0x3ce/0x4a0
[  135.609851][ T7478]  vfs_write+0x54b/0xa90
[  135.611198][ T7478]  ksys_write+0x145/0x250
[  135.612541][ T7478]  do_syscall_64+0xfa/0x3b0
[  135.613888][ T7478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.615678][ T7478] 
[  135.616418][ T7478] Freed by task 7474:
[  135.617644][ T7478]  kasan_save_track+0x3e/0x80
[  135.619040][ T7478]  kasan_save_free_info+0x46/0x50
[  135.620573][ T7478]  __kasan_slab_free+0x62/0x70
[  135.622052][ T7478]  kfree+0x18e/0x440
[  135.623298][ T7478]  bt_host_release+0x82/0x90
[  135.624738][ T7478]  device_release+0x9c/0x1c0
[  135.626166][ T7478]  kobject_put+0x22b/0x480
[  135.627540][ T7478]  vhci_release+0x88/0xd0
[  135.628887][ T7478]  __fput+0x44c/0xa70
[  135.630118][ T7478]  task_work_run+0x1d4/0x260
[  135.631498][ T7478]  do_exit+0x6b5/0x22e0
[  135.632755][ T7478]  do_group_exit+0x21c/0x2d0
[  135.634150][ T7478]  __x64_sys_exit_group+0x3f/0x40
[  135.635676][ T7478]  x64_sys_call+0x21ba/0x21c0
[  135.637123][ T7478]  do_syscall_64+0xfa/0x3b0
[  135.638524][ T7478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.640361][ T7478] 
[  135.641120][ T7478] Last potentially related work creation:
[  135.642862][ T7478]  kasan_save_stack+0x3e/0x60
[  135.644273][ T7478]  kasan_record_aux_stack+0xbd/0xd0
[  135.645832][ T7478]  insert_work+0x3d/0x330
[  135.647181][ T7478]  __queue_work+0xcfc/0xfe0
[  135.648589][ T7478]  call_timer_fn+0x17e/0x5f0
[  135.650003][ T7478]  __run_timer_base+0x646/0x860
[  135.651495][ T7478]  run_timer_softirq+0xb7/0x180
[  135.652930][ T7478]  handle_softirqs+0x286/0x870
[  135.654342][ T7478]  __irq_exit_rcu+0xca/0x1f0
[  135.655727][ T7478]  irq_exit_rcu+0x9/0x30
[  135.656989][ T7478]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  135.658696][ T7478]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  135.660550][ T7478] 
[  135.661312][ T7478] Second to last potentially related work creation:
[  135.663313][ T7478]  kasan_save_stack+0x3e/0x60
[  135.664726][ T7478]  kasan_record_aux_stack+0xbd/0xd0
[  135.666311][ T7478]  insert_work+0x3d/0x330
[  135.667637][ T7478]  __queue_work+0xcfc/0xfe0
[  135.669044][ T7478]  queue_work_on+0x181/0x270
[  135.670477][ T7478]  __hci_cmd_sync_sk+0x4d4/0xbc0
[  135.672008][ T7478]  hci_acl_create_conn_sync+0x529/0x790
[  135.673729][ T7478]  hci_cmd_sync_work+0x213/0x3a0
[  135.675269][ T7478]  process_scheduled_works+0xae1/0x17b0
[  135.676979][ T7478]  worker_thread+0x8a0/0xda0
[  135.678426][ T7478]  kthread+0x711/0x8a0
[  135.679682][ T7478]  ret_from_fork+0x3fc/0x770
[  135.681083][ T7478]  ret_from_fork_asm+0x1a/0x30
[  135.682556][ T7478] 
[  135.683313][ T7478] The buggy address belongs to the object at ffff88810a9bc000
[  135.683313][ T7478]  which belongs to the cache kmalloc-8k of size 8192
[  135.687441][ T7478] The buggy address is located 160 bytes inside of
[  135.687441][ T7478]  freed 8192-byte region [ffff88810a9bc000, ffff88810a9be000)
[  135.691573][ T7478] 
[  135.692326][ T7478] The buggy address belongs to the physical page:
[  135.694279][ T7478] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a9b8
[  135.696943][ T7478] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  135.699507][ T7478] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  135.701804][ T7478] page_type: f5(slab)
[  135.703023][ T7478] raw: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  135.705634][ T7478] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  135.708258][ T7478] head: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  135.710897][ T7478] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  135.713551][ T7478] head: 057ff00000000003 ffffea00042a6e01 00000000ffffffff 00000000ffffffff
[  135.716170][ T7478] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  135.718800][ T7478] page dumped because: kasan: bad access detected
[  135.720903][ T7478] page_owner tracks the page as allocated
[  135.722650][ T7478] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5560, tgid 5560 (dhcpcd), ts 89700170663, free_ts 81640224410
[  135.728873][ T7478]  post_alloc_hook+0x240/0x2a0
[  135.730377][ T7478]  get_page_from_freelist+0x21e4/0x22c0
[  135.732097][ T7478]  __alloc_frozen_pages_noprof+0x181/0x370
[  135.733884][ T7478]  alloc_pages_mpol+0x232/0x4a0
[  135.735400][ T7478]  allocate_slab+0x8a/0x3b0
[  135.736790][ T7478]  ___slab_alloc+0xbfc/0x1480
[  135.738301][ T7478]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  135.740290][ T7478]  kmalloc_reserve+0x136/0x290
[  135.741771][ T7478]  __alloc_skb+0x142/0x2d0
[  135.743133][ T7478]  netlink_dump+0x1c7/0xe20
[  135.744548][ T7478]  netlink_recvmsg+0x676/0xa30
[  135.746026][ T7478]  sock_recvmsg+0x22c/0x270
[  135.747430][ T7478]  ____sys_recvmsg+0x1c9/0x460
[  135.748875][ T7478]  ___sys_recvmsg+0x1b5/0x510
[  135.750271][ T7478]  __x64_sys_recvmsg+0x198/0x260
[  135.751740][ T7478]  do_syscall_64+0xfa/0x3b0
[  135.753099][ T7478] page last free pid 7168 tgid 7168 stack trace:
[  135.755030][ T7478]  __free_frozen_pages+0xc71/0xe70
[  135.756624][ T7478]  __slab_free+0x326/0x400
[  135.757998][ T7478]  qlist_free_all+0x97/0x140
[  135.759434][ T7478]  kasan_quarantine_reduce+0x148/0x160
[  135.761145][ T7478]  __kasan_slab_alloc+0x22/0x80
[  135.762645][ T7478]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  135.764339][ T7478]  getname_flags+0xb8/0x540
[  135.765754][ T7478]  do_sys_openat2+0xbc/0x1c0
[  135.767191][ T7478]  __x64_sys_openat+0x138/0x170
[  135.768696][ T7478]  do_syscall_64+0xfa/0x3b0
[  135.770113][ T7478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.771911][ T7478] 
[  135.772655][ T7478] Memory state around the buggy address:
[  135.774376][ T7478]  ffff88810a9bbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  135.776792][ T7478]  ffff88810a9bc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  135.779234][ T7478] >ffff88810a9bc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  135.781666][ T7478]                                ^
[  135.783229][ T7478]  ffff88810a9bc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  135.785639][ T7478]  ffff88810a9bc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  135.788024][ T7478] ==================================================================
[  135.790603][ T7478] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  135.792707][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: khidpd_0458005b Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  135.796529][ T7478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.799549][ T7478] Call Trace:
[  135.800571][ T7478]  <TASK>
[  135.801494][ T7478]  dump_stack_lvl+0x99/0x250
[  135.802961][ T7478]  ? __asan_memcpy+0x40/0x70
[  135.804401][ T7478]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.805984][ T7478]  ? __pfx__printk+0x10/0x10
[  135.807441][ T7478]  panic+0x2db/0x790
[  135.808655][ T7478]  ? __pfx_panic+0x10/0x10
[  135.810038][ T7478]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  135.811872][ T7478]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  135.813674][ T7478]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  135.815572][ T7478]  ? print_memory_metadata+0x314/0x400
[  135.817227][ T7478]  ? __mutex_lock+0x738/0xe80
[  135.818674][ T7478]  check_panic_on_warn+0x89/0xb0
[  135.820216][ T7478]  ? __mutex_lock+0x738/0xe80
[  135.821676][ T7478]  end_report+0x78/0x160
[  135.822986][ T7478]  kasan_report+0x129/0x150
[  135.824407][ T7478]  ? __mutex_lock+0x738/0xe80
[  135.825869][ T7478]  __mutex_lock+0x738/0xe80
[  135.827291][ T7478]  ? __mutex_lock+0x51b/0xe80
[  135.828715][ T7478]  ? l2cap_unregister_user+0x6a/0x1b0
[  135.830350][ T7478]  ? __pfx___mutex_lock+0x10/0x10
[  135.831891][ T7478]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  135.833726][ T7478]  l2cap_unregister_user+0x6a/0x1b0
[  135.835351][ T7478]  hidp_session_thread+0x3c9/0x410
[  135.836943][ T7478]  ? __pfx_hidp_session_thread+0x10/0x10
[  135.838678][ T7478]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  135.840519][ T7478]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  135.842445][ T7478]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  135.844370][ T7478]  ? __kthread_parkme+0x7b/0x200
[  135.845901][ T7478]  ? __kthread_parkme+0x1a1/0x200
[  135.847464][ T7478]  kthread+0x711/0x8a0
[  135.848736][ T7478]  ? __pfx_hidp_session_thread+0x10/0x10
[  135.850491][ T7478]  ? __pfx_kthread+0x10/0x10
[  135.851915][ T7478]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.853518][ T7478]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.855123][ T7478]  ? __pfx_kthread+0x10/0x10
[  135.856550][ T7478]  ret_from_fork+0x3fc/0x770
[  135.857938][ T7478]  ? __pfx_ret_from_fork+0x10/0x10
[  135.859522][ T7478]  ? __switch_to_asm+0x39/0x70
[  135.861010][ T7478]  ? __switch_to_asm+0x33/0x70
[  135.862490][ T7478]  ? __pfx_kthread+0x10/0x10
[  135.863914][ T7478]  ret_from_fork_asm+0x1a/0x30
[  135.865395][ T7478]  </TASK>
[  135.866883][ T7478] Kernel Offset: disabled
[  135.868173][ T7478] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:24:00  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002c4f370
R8 =ffff8880206e8237 R9 =1ffff110040dd046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac491b R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6dacbe4fc8 CR3=000000002a02c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000006f6c
XMM02=00007f6dabf84478 00007f6dabf84450 XMM03=00007f6dabf84488 00007f6dabf84480
XMM04=00007f6dacaed100 00007f6dabf84440 XMM05=00007f6dabf84458 00007f6dabf844a0
XMM06=00007f6dabf84498 00007f6dabf84490 XMM07=00007f6dabf84488 00007f6dabf84480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f6dabe11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff920006d5dd6 RBX=ffffffff81000130 RCX=1ffff920006d5d01 RDX=ffffffff90d71912
RSI=0000000000000002 RDI=ffffc900036aff50 RBP=dffffc0000000000 RSP=ffffc900036aed98
R8 =0000000000000001 R9 =ffffffff81728af5 R10=ffffc900036aeeb8 R11=ffffffff81ace6a0
R12=ffffc900036b0000 R13=1ffff920006d5dcf R14=ffffc900036aee68 R15=ffffc900036aeeb0
RIP=ffffffff817296b1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a7c0e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f8a7b5846a3 00007f8a7b5846a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055556d8906af 000055556d88fa60
XMM06=0000000000000000 0000000000000000 XMM07=100013c003021000 13b0034810001003
XMM08=1ffffffffe080014 c0032e040014bc03 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
