last executing test programs:

34.912283052s ago: executing program 0 (id=13):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000800)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)

28.398961447s ago: executing program 0 (id=13):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000800)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)

21.8186809s ago: executing program 0 (id=13):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000800)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)

16.019016505s ago: executing program 0 (id=13):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000800)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)

9.299024386s ago: executing program 0 (id=13):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000800)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)

551.988038ms ago: executing program 1 (id=961):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
syz_emit_ethernet(0x16, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x4}}, {@generic={0x8035}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

489.295572ms ago: executing program 2 (id=964):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000000))

488.606686ms ago: executing program 2 (id=965):
r0 = socket(0x25, 0x5, 0x3)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, 0x0)
connect$802154_dgram(r0, &(0x7f0000000880), 0x14)
syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff)

441.01303ms ago: executing program 1 (id=966):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r2}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x34, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000240)=0xc)

440.258944ms ago: executing program 2 (id=967):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000001600), r0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async)
syz_80211_inject_frame(0x0, 0x0, 0x49) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100"], 0x122}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) (async)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0xcf, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x61, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x2, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xc, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x0, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x7f, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x5, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0xfffffffe, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0x10001, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000200000000061002e61616100615f5f00c3b960f4a862f4a9008a57d4969e40a8d2f04e03aea58c5935700a6e34aedd8063e95e841b329de3ad5afdbbbaa344652f19697103e7078b063bd9e158588ff9c58063c7f82e3ef6ed1da87144d451196515eed83c472c78157cf18a60073e45e135d4730461cb370df05e0c0a49f72a122d"], 0x0, 0x4c}, 0x28)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000015c0)={r3, 0x20, &(0x7f0000001580)={&(0x7f0000001400)=""/169, 0xa9, 0x0, &(0x7f00000014c0)=""/170, 0xaa}}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async, rerun: 64)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x5e}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r5 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000004000000000000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff0000000000000800000000000000000000000000be797bc02689c64764ce859995d603e4f0fab65d3df8fdfd656f1570301021f6c66f9b69d31ce4040a8a5a3daae88a74eafd41aee906abc53170ea58606840893b153aab38ac12e6ab94993a7425"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000004c0)={r6, 0x1, 0x3, @random="54d356b64e9f"}, 0x10) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000001280)=@deltclass={0x48, 0x29, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe9, 0x7}, {0xe, 0xa}, {0xc, 0xc}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x82, 0x68}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200448c4}, 0x40000) (async, rerun: 32)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r7, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0)

352.453343ms ago: executing program 1 (id=968):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r1=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009a40)=ANY=[@ANYBLOB="2800000002030104000000000000005b65b400090900020000000001300000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009a40)=ANY=[@ANYBLOB="2800000002030104000000000000005b65b400090900020000000001300000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000009c00)={0x0, 0x0, &(0x7f0000009bc0)={&(0x7f0000000200)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x10) (async)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000009c00)={0x0, 0x0, &(0x7f0000009bc0)={&(0x7f0000000200)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x10)
sendto$packet(r0, &(0x7f0000000300)='\x00\x00\x00\x00', 0x5dc, 0x20044080, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x1}, 0x14) (async)
sendto$packet(r0, &(0x7f0000000300)='\x00\x00\x00\x00', 0x5dc, 0x20044080, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x1}, 0x14)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0xf)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711278000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)

350.575984ms ago: executing program 2 (id=969):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/101, 0x65, <r0=>0x0, &(0x7f0000000080)=""/201, 0xc9}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="820000e6030000000800000009000000000000000ac5dc400983002d7587acd362cc90194940567c41cd58e0cff527a1a7c9b79d8f6aeeb9383534aac23ab769ac6155bd9db5acd35bb5862e043e286c7ba6ee2808190e9d99baa92c321ab2199a1c0e114b2cdf86ccee35c608238dca0b1fe4097cf1b22a74d18850d3d082e6818b90e70a1d4a7d108c5d8938eb72f4413c0c3e261b4554a978abf129a6fc373636f5a6efddfbe78686d301f1dfc48dbf54679bd099a4d59b1bace47cfa650f9098f18a1a5e679faa51819a8b824d090c4cb095fb7a766e84c0094242d9082492f8dd28f3a34993713ffc45eebb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES64=r1], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000840)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={r6, 0x400, 0x30, 0x0, 0xb0d}, &(0x7f0000000540)=0x18) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4}, 0x10)
r7 = socket(0x2a, 0x2, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="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", 0x470}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000000), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r7}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp=r7}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x800) (async)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000000c0)={r10, r10, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) (async)
shutdown(r10, 0x1) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, r14, 0x5, 0xfffffffd, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0077003d94bcbb2f147d2f1e943364125b1f665c2c919e94ffff8c559cf5471e", @ANYRES16=r14, @ANYBLOB="04002bbd7000ffdbdf257f0000000a00f50050505050505000000a00f50000000000000d3600"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4001)

350.085201ms ago: executing program 1 (id=970):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x14, 0x1, 'kmem_cache_free\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, 'GPL\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x48}}, 0x40)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async)
socket(0x10, 0x803, 0x2) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x14, 0x1, 'kmem_cache_free\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, 'GPL\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x48}}, 0x40) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async)
sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async)

262.685092ms ago: executing program 1 (id=971):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r0, 0xfb5f8000)

261.118407ms ago: executing program 2 (id=972):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r2, 0xfffffffa, 0x9, &(0x7f0000000040)=""/59, &(0x7f0000000080)=0x3b)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0xb, 0x0, &(0x7f0000000000))
recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/120, 0x78}], 0x6}}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e300000000000"], 0x1c0}, 0x1, 0xba01}, 0x20048050)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12)

260.215476ms ago: executing program 1 (id=973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x11c, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xe6, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e42"}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023000000", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61, 0x0]}}, 0x0, 0x45}, 0x28)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@flushsa={0x40, 0x1c, 0x100, 0x70bd26, 0x25dfdbfe, {0x32}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e22, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @tfcpad={0x8, 0x16, 0xffff0001}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfc9, '\x00', 0x0, r4, 0x3, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)='%pi6   \x00'}, 0x20)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000680)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1b, &(0x7f0000000b00)=ANY=[@ANYBLOB="18009500000000000000000001000000181100003e465f7e14484e7e20193654209a2d039dbe364ed2ce82cb5367afd5fc7aedaa8c220f46a9d41050285bc27db5ce3b56268a76a80de603ab03405a598b30a8a244030798650794fe00463a66b5333f73b8acc0ffd95c9da3893220a24b79f70ff72dfe795e2e04d90041004ddc246824671c46e605e4ed6c4cbe911c5b840a378304f14cac82170982004128", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000004c87e0fffcffffff18420000030000000000000000000000182b0000", @ANYRES32=r2, @ANYBLOB="0000000002000000185800000f000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0xab, &(0x7f00000005c0)=""/171, 0x41100, 0x14, '\x00', r7, 0x0, r3, 0x8, &(0x7f00000006c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x6, 0x81, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r6, r5, r5, r5], 0x0, 0x10, 0x5}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b780af2}]}]}], {0x14}}, 0x90}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0006"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@deltaction={0x154, 0x31, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket(0xb, 0x4, 0x44)
recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x20, 0x0)

202.660642ms ago: executing program 2 (id=974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b1, &(0x7f0000000040)={'veth1_to_team\x00', 0x2000})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={<r3=>0x0, 0x8ca}, &(0x7f0000000040)=0x25)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r3, 0x1000}, &(0x7f00000000c0)=0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ppoll(&(0x7f0000000100)=[{r0, 0x8080}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x803]}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xe, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x0, 0xd, 0x9, 0x9, 0x80, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xb0, &(0x7f0000000440)=""/176, 0x1f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x4, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x1, 0x2, 0x2}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x2, 0x2}, {0x5, 0x5, 0x5, 0xe}, {0x1, 0x1, 0x8, 0xb}], 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000200)='mm_vmscan_kswapd_sleep\x00', r5, 0x0, 0x8}, 0x18)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000000000000000000018010000202075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0xd, "f42a97b96d025891dd3f75fdda"}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0xfc, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x2, 0x84ff, 0x5, 0x1, 0xcf57, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x0, 0x2, 0x6, 0x9, 0x3, 0x10, 0x5e8, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x9, 0x0, 0x8, 0xe183, 0x0, 0xb92, 0x2, 0x4}}, {0xc, 0x2, [0x4368, 0x4, 0xb, 0xda8]}}, {{0x1c, 0x1, {0x4, 0x8, 0xffff, 0x0, 0x1, 0xfffff965, 0x7, 0xd}}, {0xe, 0x2, [0x7, 0x7fff, 0x9, 0x1000, 0xaaf]}}, {{0x1c, 0x1, {0x8, 0x6, 0x8, 0x80, 0x2, 0x20200, 0x7, 0x5}}, {0xe, 0x2, [0x8, 0x0, 0x6, 0x4, 0xb9]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40d4}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000001800100028bd7000fddbdf25801014fcfc04fd080039000008000100ac14142c100016800c00038008000100", @ANYRES32, @ANYBLOB="7d39be2e3169d19b", @ANYRES32=r6, @ANYRES8], 0x68}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000)

0s ago: executing program 0 (id=13):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000800)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)

kernel console output (not intermixed with test programs):

1
[   78.770759][ T6646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.773705][ T6646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.777010][ T6646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.780240][ T6646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.822106][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.824622][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.844932][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.848814][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.254001][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.260'.
[   79.291022][ T6802] ipvlan2: entered promiscuous mode
[   79.294071][ T6802] bridge0: port 2(ipvlan2) entered blocking state
[   79.297076][ T6802] bridge0: port 2(ipvlan2) entered disabled state
[   79.299338][ T6802] ipvlan2: entered allmulticast mode
[   79.301344][ T6802] bridge0: entered allmulticast mode
[   79.305559][ T6802] ipvlan2: left allmulticast mode
[   79.309201][ T6802] bridge0: left allmulticast mode
[   79.410855][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'.
[   79.418035][ T6806] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   79.422921][ T6808] netem: incorrect gi model size
[   79.425067][ T6808] netem: change failed
[   79.507161][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.682005][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'.
[   79.687183][ T6830] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[   79.788648][ T6833] wg1 speed is unknown, defaulting to 1000
[   79.928192][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'.
[   79.962575][ T6833] netlink: 176 bytes leftover after parsing attributes in process `syz.2.273'.
[   80.210123][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'.
[   80.357091][ T6866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.826296][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.982913][ T6877] ieee802154 phy1 wpan1: encryption failed: -22
[   81.216579][ T1270] cfg80211: failed to load regulatory.db
[   81.457916][ T6883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.287'.
[   81.616673][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.620052][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.623541][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.636912][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.640434][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.696612][ T6896] wg1 speed is unknown, defaulting to 1000
[   81.741351][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.851614][ T6896] chnl_net:caif_netlink_parms(): no params data found
[   81.892161][ T6917] netlink: 'syz.2.295': attribute type 4 has an invalid length.
[   81.939228][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.941830][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.944377][ T6896] bridge_slave_0: entered allmulticast mode
[   81.951056][ T6896] bridge_slave_0: entered promiscuous mode
[   81.955447][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.957924][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.960372][ T6896] bridge_slave_1: entered allmulticast mode
[   81.963375][ T6896] bridge_slave_1: entered promiscuous mode
[   81.990111][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.995529][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.024536][ T6896] team0: Port device team_slave_0 added
[   82.032564][ T6896] team0: Port device team_slave_1 added
[   82.057636][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.059949][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.069656][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.078364][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.080684][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.092809][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.132612][ T6896] hsr_slave_0: entered promiscuous mode
[   82.136323][ T6896] hsr_slave_1: entered promiscuous mode
[   82.138895][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.141256][ T6896] Cannot create hsr debugfs directory
[   82.409300][ T6926] sctp: [Deprecated]: syz.1.297 (pid 6926) Use of struct sctp_assoc_value in delayed_ack socket option.
[   82.409300][ T6926] Use struct sctp_sack_info instead
[   82.410378][ T5846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.490105][ T5846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.552643][ T5846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.636368][ T5846] bridge_slave_1: left allmulticast mode
[   82.644357][ T5846] bridge_slave_1: left promiscuous mode
[   82.648112][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.653004][ T5846] bridge_slave_0: left allmulticast mode
[   82.655027][ T5846] bridge_slave_0: left promiscuous mode
[   82.658611][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.960023][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.964937][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.969011][ T5846] bond0 (unregistering): Released all slaves
[   83.149999][ T6953] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.152924][ T6953] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.155760][ T6953] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.158424][ T6953] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.212232][ T5846] hsr_slave_0: left promiscuous mode
[   83.215031][ T5846] hsr_slave_1: left promiscuous mode
[   83.217863][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.220759][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.225965][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.229459][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.251767][ T5846] veth1_macvtap: left promiscuous mode
[   83.254085][ T5846] veth0_macvtap: left promiscuous mode
[   83.264067][ T5846] veth1_vlan: left promiscuous mode
[   83.267233][ T5846] veth0_vlan: left promiscuous mode
[   83.293726][ T6965] __nla_validate_parse: 6 callbacks suppressed
[   83.293736][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'.
[   83.298582][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'.
[   83.451567][ T6972] IPv4: Oversized IP packet from 127.202.26.0
[   83.493846][ T6977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.572006][ T5846] team0 (unregistering): Port device team_slave_1 removed
[   83.598222][ T5846] team0 (unregistering): Port device team_slave_0 removed
[   83.705459][ T5817] Bluetooth: hci1: command tx timeout
[   83.924127][ T6896] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.935371][ T6896] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.941374][ T6896] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.949112][ T6896] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.044604][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.056262][ T6896] 8021q: adding VLAN 0 to HW filter on device team0
[   84.066554][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.069279][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.089539][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.091891][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.259711][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.302583][ T6896] veth0_vlan: entered promiscuous mode
[   84.314761][ T6896] veth1_vlan: entered promiscuous mode
[   84.336495][ T6896] veth0_macvtap: entered promiscuous mode
[   84.342596][ T6896] veth1_macvtap: entered promiscuous mode
[   84.354866][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.364752][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.377177][ T6896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.380010][ T6896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.382791][ T6896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.386199][ T6896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.423588][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.427551][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.432040][ T7012] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   84.446170][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.449279][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.653412][ T7018] wg1 speed is unknown, defaulting to 1000
[   85.293506][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.473690][ T7037] netlink: 252 bytes leftover after parsing attributes in process `syz.1.329'.
[   85.524287][ T7039] netlink: 'syz.1.330': attribute type 10 has an invalid length.
[   85.527194][ T7039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.330'.
[   85.531266][ T7039] bridge0: port 2(dummy0) entered blocking state
[   85.533534][ T7039] bridge0: port 2(dummy0) entered disabled state
[   85.537288][ T7039] bridge0: port 2(dummy0) entered blocking state
[   85.539879][ T7039] bridge0: port 2(dummy0) entered forwarding state
[   85.550957][ T7040] netlink: 'syz.1.330': attribute type 10 has an invalid length.
[   85.554599][ T7040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.330'.
[   85.589831][ T7044] netlink: 'syz.1.331': attribute type 1 has an invalid length.
[   85.789186][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[   85.888210][ T7066] netlink: 'syz.2.339': attribute type 11 has an invalid length.
[   85.934001][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'.
[   85.957957][ T7068] 8021q: adding VLAN 0 to HW filter on device team1
[   86.040322][ T7074] veth0_vlan: entered allmulticast mode
[   86.061204][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.070632][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'.
[   86.082179][ T7076] netlink: 'syz.2.344': attribute type 4 has an invalid length.
[   86.165819][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.655738][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   87.166844][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.171101][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.174739][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.179544][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.183234][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.217274][ T7101] wg1 speed is unknown, defaulting to 1000
[   87.229237][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'.
[   87.350806][ T7101] chnl_net:caif_netlink_parms(): no params data found
[   87.400136][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.402570][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.404908][ T7101] bridge_slave_0: entered allmulticast mode
[   87.407810][ T7101] bridge_slave_0: entered promiscuous mode
[   87.411793][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.414133][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.417309][ T7101] bridge_slave_1: entered allmulticast mode
[   87.420131][ T7101] bridge_slave_1: entered promiscuous mode
[   87.440334][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.445893][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.469692][ T7101] team0: Port device team_slave_0 added
[   87.475072][ T7101] team0: Port device team_slave_1 added
[   87.504699][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.508108][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.519155][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.525142][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.528069][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.539693][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.580980][ T7101] hsr_slave_0: entered promiscuous mode
[   87.583506][ T7101] hsr_slave_1: entered promiscuous mode
[   87.769681][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.827945][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.833760][ T7119] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   87.839516][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'.
[   87.895223][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.009247][ T5660] bridge_slave_1: left allmulticast mode
[   88.013039][ T5660] bridge_slave_1: left promiscuous mode
[   88.015891][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.020988][ T5660] bridge_slave_0: left allmulticast mode
[   88.023323][ T5660] bridge_slave_0: left promiscuous mode
[   88.026257][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.274101][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.279415][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.283264][ T5660] bond0 (unregistering): Released all slaves
[   88.289829][ T7128] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   88.566713][ T5660] hsr_slave_0: left promiscuous mode
[   88.569767][ T5660] hsr_slave_1: left promiscuous mode
[   88.573009][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.581515][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.585239][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.590732][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.619747][ T5660] veth1_macvtap: left promiscuous mode
[   88.622112][ T5660] veth0_macvtap: left promiscuous mode
[   88.631083][ T5660] veth1_vlan: left promiscuous mode
[   88.633533][ T5660] veth0_vlan: left promiscuous mode
[   88.959971][ T5660] team0 (unregistering): Port device team_slave_1 removed
[   88.982070][ T5660] team0 (unregistering): Port device team_slave_0 removed
[   89.218741][ T5817] Bluetooth: hci1: command tx timeout
[   89.220044][ T7163] __nla_validate_parse: 2 callbacks suppressed
[   89.220055][ T7163] netlink: 236 bytes leftover after parsing attributes in process `syz.1.363'.
[   89.290420][ T7101] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.301030][ T7101] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.309694][ T7101] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.322934][ T7101] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.392099][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[   89.395943][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'.
[   89.399571][ T7177] netlink: 'syz.1.365': attribute type 14 has an invalid length.
[   89.402759][ T7177] netlink: 'syz.1.365': attribute type 13 has an invalid length.
[   89.433252][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.448149][ T7101] 8021q: adding VLAN 0 to HW filter on device team0
[   89.455183][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.458218][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.469149][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.471503][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.670170][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.709774][ T7101] veth0_vlan: entered promiscuous mode
[   89.715500][ T7101] veth1_vlan: entered promiscuous mode
[   89.734369][ T7101] veth0_macvtap: entered promiscuous mode
[   89.738909][ T7101] veth1_macvtap: entered promiscuous mode
[   89.755000][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.766653][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.775094][ T7101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.783921][ T7101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.792196][ T7101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.795099][ T7101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.811954][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.853824][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.858866][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.878354][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.881450][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.458220][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.372'.
[   90.466836][ T7207] netlink: 120 bytes leftover after parsing attributes in process `syz.2.371'.
[   90.571561][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[   90.576208][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[   90.591897][ T7201] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   90.600623][ T7214] netlink: 'syz.1.375': attribute type 9 has an invalid length.
[   90.617088][ T7213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   90.632432][ T7214] netlink: 'syz.1.375': attribute type 9 has an invalid length.
[   90.648902][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'.
[   90.653459][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'.
[   90.720391][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'.
[   91.048831][ T7245] netlink: 'syz.1.388': attribute type 4 has an invalid length.
[   91.295718][ T5817] Bluetooth: hci1: command 0x041b tx timeout
[   91.395047][ T7265] netlink: 'syz.1.393': attribute type 13 has an invalid length.
[   91.492602][ T7273] tls_set_device_offload: netdev not found
[   92.057353][ T7309] netlink: 'syz.2.407': attribute type 10 has an invalid length.
[   92.060093][ T7309] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   92.194050][ T7319] netlink: 'syz.2.411': attribute type 32 has an invalid length.
[   92.198156][ T7319] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   92.409788][ T7338] netlink: 'syz.2.415': attribute type 21 has an invalid length.
[   92.729221][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.349429][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.399582][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.468625][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.550718][   T13] bridge_slave_1: left allmulticast mode
[   93.552638][   T13] bridge_slave_1: left promiscuous mode
[   93.554602][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.558435][   T13] bridge_slave_0: left allmulticast mode
[   93.560259][   T13] bridge_slave_0: left promiscuous mode
[   93.562174][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.612190][ T7370] IPv6: addrconf: prefix option has invalid lifetime
[   93.817818][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.820354][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.824731][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.824953][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.830097][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.835052][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.835591][   T13] bond0 (unregistering): Released all slaves
[   93.838901][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.869660][ T7378] wg1 speed is unknown, defaulting to 1000
[   94.062751][   T13] hsr_slave_0: left promiscuous mode
[   94.068075][   T13] hsr_slave_1: left promiscuous mode
[   94.072226][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.074820][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.079895][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.082528][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.095189][   T13] veth1_macvtap: left promiscuous mode
[   94.099703][   T13] veth0_macvtap: left promiscuous mode
[   94.102518][   T13] veth1_vlan: left promiscuous mode
[   94.104390][   T13] veth0_vlan: left promiscuous mode
[   94.443549][   T13] team0 (unregistering): Port device team_slave_1 removed
[   94.474198][   T13] team0 (unregistering): Port device team_slave_0 removed
[   94.727543][ T7378] chnl_net:caif_netlink_parms(): no params data found
[   94.814880][ T7400] IPv6: addrconf: prefix option has invalid lifetime
[   94.841518][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.844571][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.848515][ T7378] bridge_slave_0: entered allmulticast mode
[   94.852316][ T7378] bridge_slave_0: entered promiscuous mode
[   94.857684][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.860824][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.863812][ T7378] bridge_slave_1: entered allmulticast mode
[   94.868517][ T7378] bridge_slave_1: entered promiscuous mode
[   94.923373][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.948138][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.032707][ T7378] team0: Port device team_slave_0 added
[   95.040693][ T7378] team0: Port device team_slave_1 added
[   95.058556][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.060850][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.068904][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.073808][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.085317][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.103597][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.137623][ T7378] hsr_slave_0: entered promiscuous mode
[   95.140190][ T7378] hsr_slave_1: entered promiscuous mode
[   95.193961][ T7414] netlink: 'syz.1.432': attribute type 1 has an invalid length.
[   95.205498][ T7414] __nla_validate_parse: 13 callbacks suppressed
[   95.205508][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[   95.207549][ T7416] netlink: 'syz.2.433': attribute type 32 has an invalid length.
[   95.228243][ T7414] netlink: 'syz.1.432': attribute type 1 has an invalid length.
[   95.239611][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[   95.488240][ T7378] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.495164][ T7378] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.500777][ T7378] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.510164][ T7378] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.528204][ T7449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.549700][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.552084][ T7378] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.554449][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.556792][ T7378] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.561630][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[   95.598326][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.611942][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.616137][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.630044][ T7378] 8021q: adding VLAN 0 to HW filter on device team0
[   95.638808][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.639667][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.644673][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.654769][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.657208][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.667860][ T7463] netlink: 'syz.2.442': attribute type 6 has an invalid length.
[   95.750836][ T7473] netlink: 'syz.1.444': attribute type 32 has an invalid length.
[   95.788107][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.815156][ T7378] veth0_vlan: entered promiscuous mode
[   95.822772][ T7378] veth1_vlan: entered promiscuous mode
[   95.842852][ T7378] veth0_macvtap: entered promiscuous mode
[   95.847595][ T7378] veth1_macvtap: entered promiscuous mode
[   95.856364][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.858814][ T5817] Bluetooth: hci1: command tx timeout
[   95.865072][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.871796][ T7378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.875140][ T7378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.879203][ T7378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.882240][ T7378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.937613][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[   95.943623][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.947297][ T7483] Bluetooth: MGMT ver 1.23
[   95.947762][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.974292][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.978388][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.113081][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[   96.279874][ T7494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.448'.
[   96.318726][ T7500] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   96.322324][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[   96.329175][ T7504] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   96.408902][ T7515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.419720][ T7515] netlink: 240 bytes leftover after parsing attributes in process `syz.1.454'.
[   97.071280][ T7528] netlink: 'syz.1.458': attribute type 32 has an invalid length.
[   97.337418][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[   97.341070][ T7541] netlink: 'syz.2.460': attribute type 5 has an invalid length.
[   97.344177][ T7541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.460'.
[   97.359317][ T7541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   97.364661][ T7541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   97.371629][ T7541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   97.375187][ T7541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   97.379173][ T7541] geneve2: entered promiscuous mode
[   97.381832][ T7541] geneve2: entered allmulticast mode
[   97.489957][ T7551] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[   97.514360][ T7551] bond2: entered promiscuous mode
[   97.518973][ T7551] bond2: entered allmulticast mode
[   97.521554][ T7551] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.551679][ T7551] bridge3: entered promiscuous mode
[   97.553969][ T7551] bridge3: entered allmulticast mode
[   97.556936][ T7551] bond2: (slave bridge3): Enslaving as a backup interface with an up link
[   97.562305][ T7551] netlink: 'syz.1.463': attribute type 4 has an invalid length.
[   97.573949][ T7551] netlink: 'syz.1.463': attribute type 4 has an invalid length.
[   97.617081][ T5660] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   97.727108][ T5660] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   97.806171][ T7568] xt_l2tp: invalid flags combination: c
[   97.858835][ T7572] veth0: entered promiscuous mode
[   97.868619][ T7571] veth0: left promiscuous mode
[   97.972527][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.119312][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.123665][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.128716][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.132526][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.137249][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.174706][ T7589] wg1 speed is unknown, defaulting to 1000
[   99.389554][ T7589] chnl_net:caif_netlink_parms(): no params data found
[   99.522175][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.536790][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.539977][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.542993][ T7589] bridge_slave_0: entered allmulticast mode
[   99.553732][ T7589] bridge_slave_0: entered promiscuous mode
[   99.559675][ T7630] C: renamed from lo
[   99.563815][ T7630] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   99.571664][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.573964][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.581399][ T7589] bridge_slave_1: entered allmulticast mode
[   99.585183][ T7589] bridge_slave_1: entered promiscuous mode
[   99.612692][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.647231][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.653293][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.680528][ T7589] team0: Port device team_slave_0 added
[   99.700216][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.709789][ T7589] team0: Port device team_slave_1 added
[   99.727817][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.730838][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.743105][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.750600][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.753367][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.762843][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.815141][ T7589] hsr_slave_0: entered promiscuous mode
[   99.817851][ T7589] hsr_slave_1: entered promiscuous mode
[   99.820190][ T7589] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.823229][ T7589] Cannot create hsr debugfs directory
[   99.853111][ T5660] bridge_slave_1: left allmulticast mode
[   99.856226][ T5660] bridge_slave_1: left promiscuous mode
[   99.858188][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.862509][ T5660] bridge_slave_0: left allmulticast mode
[   99.864580][ T5660] bridge_slave_0: left promiscuous mode
[   99.866972][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.081352][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.087010][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.088180][ T7650] IPv6: Can't replace route, no match found
[  100.095201][ T5660] bond0 (unregistering): Released all slaves
[  100.317965][ T5660] hsr_slave_0: left promiscuous mode
[  100.321188][ T7652] validate_nla: 5 callbacks suppressed
[  100.321198][ T7652] netlink: 'syz.2.486': attribute type 1 has an invalid length.
[  100.326000][ T5660] hsr_slave_1: left promiscuous mode
[  100.329329][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.332570][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.337137][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.340212][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.354759][ T5660] veth1_macvtap: left promiscuous mode
[  100.357428][ T5660] veth0_macvtap: left promiscuous mode
[  100.359843][ T5660] veth1_vlan: left promiscuous mode
[  100.362248][ T5660] veth0_vlan: left promiscuous mode
[  100.622990][ T5660] team0 (unregistering): Port device team_slave_1 removed
[  100.644582][ T5660] team0 (unregistering): Port device team_slave_0 removed
[  101.001013][ T7655] __nla_validate_parse: 5 callbacks suppressed
[  101.001027][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'.
[  101.209397][ T7589] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  101.215640][   T54] Bluetooth: hci1: command tx timeout
[  101.217903][ T7589] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  101.226962][ T7589] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  101.232807][ T7589] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  101.273803][ T7674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.363788][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.379636][ T7589] 8021q: adding VLAN 0 to HW filter on device team0
[  101.386854][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.389299][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.398249][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.400606][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.605032][ T7589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.672568][ T7589] veth0_vlan: entered promiscuous mode
[  101.687368][ T7589] veth1_vlan: entered promiscuous mode
[  101.734406][ T7589] veth0_macvtap: entered promiscuous mode
[  101.743966][ T7589] veth1_macvtap: entered promiscuous mode
[  101.772110][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.790671][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.804955][ T7589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.810348][ T7589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.814304][ T7589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.820249][ T7589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.924233][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.929775][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.960303][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.964398][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.213105][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'.
[  102.294091][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'.
[  102.319795][ T7694] netlink: 164 bytes leftover after parsing attributes in process `syz.1.497'.
[  102.324902][ T7695] netlink: 'syz.1.497': attribute type 3 has an invalid length.
[  102.328712][ T7695] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.497'.
[  102.369187][ T7698] macsec0: entered promiscuous mode
[  102.371616][ T7698] macsec0: left promiscuous mode
[  102.788517][ T7727] netlink: 'syz.2.508': attribute type 10 has an invalid length.
[  102.792082][ T7727] team0: Cannot enslave team device to itself
[  102.842575][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'.
[  102.854954][ T7731] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  102.866731][ T7731] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  102.903881][ T7732] 8021q: VLANs not supported on ipvlan1
[  103.578623][ T7738] team0: Device gtp1 is of different type
[  103.627248][ T7739] netlink: ct family unspecified
[  103.629440][ T7739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.777903][ T7746] netlink: 'syz.2.514': attribute type 1 has an invalid length.
[  103.802977][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.829389][ T7752] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.517'.
[  104.912710][ T7761] netlink: 172 bytes leftover after parsing attributes in process `syz.1.518'.
[  104.937937][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.942300][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.945529][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.948626][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.951235][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.971494][ T7762] wg1 speed is unknown, defaulting to 1000
[  105.031253][ T7768] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.520'.
[  105.034226][ T7768] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.520'.
[  105.084212][ T7762] chnl_net:caif_netlink_parms(): no params data found
[  105.131341][ T7775] netlink: 'syz.2.522': attribute type 29 has an invalid length.
[  105.161703][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.164294][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.167236][ T7762] bridge_slave_0: entered allmulticast mode
[  105.170302][ T7762] bridge_slave_0: entered promiscuous mode
[  105.173413][ T7775] netlink: 'syz.2.522': attribute type 29 has an invalid length.
[  105.177814][ T7775] netlink: 'syz.2.522': attribute type 29 has an invalid length.
[  105.181268][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.183541][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.186282][ T7762] bridge_slave_1: entered allmulticast mode
[  105.189031][ T7762] bridge_slave_1: entered promiscuous mode
[  105.198298][ T7775] netlink: 'syz.2.522': attribute type 29 has an invalid length.
[  105.209185][ T7775] netlink: 'syz.2.522': attribute type 29 has an invalid length.
[  105.212924][ T7775] netlink: 'syz.2.522': attribute type 29 has an invalid length.
[  105.223081][ T7762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.227906][ T7762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.248041][ T7762] team0: Port device team_slave_0 added
[  105.252122][ T7762] team0: Port device team_slave_1 added
[  105.269022][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.271370][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.280294][ T7762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.284966][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.288112][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.297331][ T7762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.326104][ T7762] hsr_slave_0: entered promiscuous mode
[  105.328398][ T7762] hsr_slave_1: entered promiscuous mode
[  105.659307][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.726263][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.791055][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.811362][ T7782] bridge0: port 2(dummy0) entered disabled state
[  105.823726][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.955499][ T5927] bond2: (slave bridge3): link status up again after 0 ms
[  105.987222][ T5927] bond2: (slave bridge3): link status up again after 0 ms
[  105.992505][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.001564][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.007573][ T5927] bond2: (slave bridge3): link status up again after 0 ms
[  106.026150][ T5927] bond2: (slave bridge3): link status up again after 0 ms
[  106.045938][ T5927] bond2: (slave bridge3): link status up again after 0 ms
[  106.064456][ T7782] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.068353][ T5846] bond2: (slave bridge3): link status up again after 0 ms
[  106.071398][ T7782] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.075079][ T7782] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.085217][ T7782] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.095545][ T5927] bond2: (slave bridge3): link status up again after 0 ms
[  106.108676][ T7782] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.111621][ T7782] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.114467][ T7782] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.115526][ T5927] bond2: (slave bridge3): link status up again after 0 ms
[  106.117869][ T7782] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.198960][ T5660] bridge_slave_1: left allmulticast mode
[  106.201268][ T5660] bridge_slave_1: left promiscuous mode
[  106.203303][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.216120][ T5660] bridge_slave_0: left allmulticast mode
[  106.218521][ T5660] bridge_slave_0: left promiscuous mode
[  106.221742][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.476550][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.481989][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.488011][ T5660] bond0 (unregistering): Released all slaves
[  106.842267][ T5660] hsr_slave_0: left promiscuous mode
[  106.848132][ T5660] hsr_slave_1: left promiscuous mode
[  106.856041][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.859053][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.869732][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.875381][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.892719][ T5660] veth1_macvtap: left promiscuous mode
[  106.894717][ T5660] veth0_macvtap: left promiscuous mode
[  106.899011][ T5660] veth1_vlan: left promiscuous mode
[  106.901309][ T5660] veth0_vlan: left promiscuous mode
[  106.975798][ T5817] Bluetooth: hci1: command tx timeout
[  107.178378][ T5660] team0 (unregistering): Port device team_slave_1 removed
[  107.210789][ T5660] team0 (unregistering): Port device team_slave_0 removed
[  107.503379][ T7762] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  107.512372][ T7762] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  107.532419][ T7762] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  107.540573][ T7762] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  107.657769][ T7762] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.681365][ T7762] 8021q: adding VLAN 0 to HW filter on device team0
[  107.705441][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.708358][ T7848] __nla_validate_parse: 1 callbacks suppressed
[  107.708372][ T7848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.539'.
[  107.708438][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.711423][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'.
[  107.721655][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.539'.
[  107.727033][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.729612][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.891157][ T7762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.901535][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[  107.924665][ T7762] veth0_vlan: entered promiscuous mode
[  107.932932][ T7762] veth1_vlan: entered promiscuous mode
[  107.960036][ T7762] veth0_macvtap: entered promiscuous mode
[  107.989238][ T7762] veth1_macvtap: entered promiscuous mode
[  108.031050][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.044227][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.064445][ T7762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.079247][ T7762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.084882][ T7762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.093379][ T7762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.161290][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[  108.233467][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.243448][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.271580][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.275146][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.604929][ T7878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.549'.
[  108.790353][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[  108.794537][ T7889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.800316][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[  108.904648][ T7896] veth0_vlan: left allmulticast mode
[  108.910207][ T7896] ip6erspan0: left allmulticast mode
[  108.912405][ T7896] vlan0: left promiscuous mode
[  108.914357][ T7896] vlan0: left allmulticast mode
[  108.916843][ T7896] hsr_slave_1: left allmulticast mode
[  108.920620][ T7896] bond2: left promiscuous mode
[  108.922163][ T7896] bridge3: left promiscuous mode
[  108.923887][ T7896] bond2: left allmulticast mode
[  108.926137][ T7896] bridge3: left allmulticast mode
[  108.990590][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'.
[  108.996458][ T7900] smc: net device bond0 applied user defined pnetid SYZ
[  109.106725][ T7909] netlink: 5 bytes leftover after parsing attributes in process `syz.1.558'.
[  109.220097][ T7913] validate_nla: 23 callbacks suppressed
[  109.220111][ T7913] netlink: 'syz.2.559': attribute type 16 has an invalid length.
[  109.224723][ T7913] netlink: 'syz.2.559': attribute type 17 has an invalid length.
[  109.241351][ T7913] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  109.244265][ T7913] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  109.247866][ T7913] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  109.250975][ T7913] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  110.113161][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.449912][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.453520][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.457551][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.461589][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.464371][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.488039][ T7949] wg1 speed is unknown, defaulting to 1000
[  111.584698][ T7949] chnl_net:caif_netlink_parms(): no params data found
[  111.659630][ T5846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.667213][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.675186][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.678634][ T7949] bridge_slave_0: entered allmulticast mode
[  111.685682][ T7949] bridge_slave_0: entered promiscuous mode
[  111.689432][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.692028][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.694411][ T7949] bridge_slave_1: entered allmulticast mode
[  111.700522][ T7949] bridge_slave_1: entered promiscuous mode
[  111.720774][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.734910][ T5846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.748837][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.791592][ T7949] team0: Port device team_slave_0 added
[  111.806985][ T5846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.819705][ T7949] team0: Port device team_slave_1 added
[  111.841632][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.843983][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.853066][ T7949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.879402][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.881679][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.890689][ T7949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.954575][ T7949] hsr_slave_0: entered promiscuous mode
[  111.958802][ T7949] hsr_slave_1: entered promiscuous mode
[  111.961446][ T7949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.964062][ T7949] Cannot create hsr debugfs directory
[  111.982855][ T5846] bridge_slave_1: left allmulticast mode
[  111.989131][ T5846] bridge_slave_1: left promiscuous mode
[  111.994059][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.004258][ T5846] bridge_slave_0: left allmulticast mode
[  112.007135][ T5846] bridge_slave_0: left promiscuous mode
[  112.010130][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.299163][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.305097][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.310101][ T5846] bond0 (unregistering): Released all slaves
[  112.329125][ T7981] tipc: Cannot configure node identity twice
[  112.331584][ T7981] tipc: Cannot configure node identity twice
[  112.355512][ T7982] tipc: Cannot configure node identity twice
[  112.357938][ T7982] tipc: Cannot configure node identity twice
[  112.487261][ T7984] gretap1: entered promiscuous mode
[  112.604298][ T5846] hsr_slave_0: left promiscuous mode
[  112.617721][ T5846] hsr_slave_1: left promiscuous mode
[  112.620326][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.622671][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.628129][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.631180][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.659083][ T5846] veth1_macvtap: left promiscuous mode
[  112.660960][ T5846] veth0_macvtap: left promiscuous mode
[  112.662819][ T5846] veth1_vlan: left promiscuous mode
[  112.664892][ T5846] veth0_vlan: left promiscuous mode
[  112.880847][ T8009] openvswitch: netlink: Actions may not be safe on all matching packets
[  113.007597][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  113.028597][ T8013] __nla_validate_parse: 6 callbacks suppressed
[  113.028613][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'.
[  113.033559][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'.
[  113.040453][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  113.462040][ T7949] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  113.471544][ T7949] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  113.492087][ T7949] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  113.500382][ T7949] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  113.535712][   T54] Bluetooth: hci1: command tx timeout
[  113.576379][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.586798][ T7949] 8021q: adding VLAN 0 to HW filter on device team0
[  113.592295][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.594769][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.610723][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.613580][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.770276][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'.
[  113.828272][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'.
[  113.829365][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.839710][ T8027] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  113.842970][ T8027] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  113.888617][ T7949] veth0_vlan: entered promiscuous mode
[  113.894530][ T7949] veth1_vlan: entered promiscuous mode
[  113.931120][ T7949] veth0_macvtap: entered promiscuous mode
[  113.939978][ T7949] veth1_macvtap: entered promiscuous mode
[  113.969309][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.978013][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.987527][ T7949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.991060][ T7949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.994176][ T7949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.006026][ T7949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.012865][ T8042] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  114.018929][ T8042] netlink: 1 bytes leftover after parsing attributes in process `syz.1.583'.
[  114.070681][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.073693][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.105749][ T8050] netlink: 'syz.2.586': attribute type 13 has an invalid length.
[  114.109548][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.112712][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.158366][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.162312][ T8050] 8021q: adding VLAN 0 to HW filter on device team0
[  114.171122][ T8050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.314773][ T8062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.590'.
[  114.652748][ T8074] tipc: Started in network mode
[  114.654840][ T8074] tipc: Node identity , cluster identity 4711
[  114.659694][ T8074] tipc: Failed to set node id, please configure manually
[  114.662836][ T8074] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  114.704302][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[  114.740159][ T8078] netlink: 44 bytes leftover after parsing attributes in process `syz.2.595'.
[  114.743203][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'.
[  114.747792][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'.
[  114.837263][ T8082] netlink: 'syz.2.597': attribute type 4 has an invalid length.
[  114.931048][ T8086] bond0: (slave bond_slave_0): Releasing backup interface
[  114.935138][ T8086] bond0: (slave bond_slave_1): Releasing backup interface
[  114.941011][ T8086] team0: Port device team_slave_0 removed
[  114.944712][ T8086] team0: Port device team_slave_1 removed
[  114.949531][ T8086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.952292][ T8086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.515032][ T8130] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[  115.579570][ T8130] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  115.712853][ T8139] netlink: 'syz.2.616': attribute type 21 has an invalid length.
[  115.719979][ T8139] netlink: 'syz.2.616': attribute type 5 has an invalid length.
[  115.956505][ T8153] batadv0: left promiscuous mode
[  115.958682][ T8153] batadv0: left allmulticast mode
[  115.961284][ T8153] macsec1: left promiscuous mode
[  115.963563][ T8153] macsec1: left allmulticast mode
[  115.966814][ T8153] ip6erspan0: left allmulticast mode
[  115.969245][ T8153] ipvlan2: left promiscuous mode
[  115.971392][ T8153] ipvlan3: left promiscuous mode
[  115.973357][ T8153] geneve2: left promiscuous mode
[  115.975189][ T8153] geneve2: left allmulticast mode
[  115.978911][ T8153] gretap1: left promiscuous mode
[  116.117282][ T8160] Cannot find del_set index 1 as target
[  116.124933][ T8160] ieee802154 phy1 wpan1: encryption failed: -22
[  116.292617][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.363191][ T8173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.594156][ T8183] netlink: 'syz.2.629': attribute type 1 has an invalid length.
[  117.598973][ T8180] wg1 speed is unknown, defaulting to 1000
[  117.607609][ T8183] netlink: 'syz.2.629': attribute type 11 has an invalid length.
[  117.647313][ T8179] wg1 speed is unknown, defaulting to 1000
[  117.785943][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.793316][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.799459][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.803693][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.807890][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.841720][ T8195] wg1 speed is unknown, defaulting to 1000
[  117.999536][ T8195] chnl_net:caif_netlink_parms(): no params data found
[  118.068826][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.077581][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.079911][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.082521][ T8195] bridge_slave_0: entered allmulticast mode
[  118.086328][ T8195] bridge_slave_0: entered promiscuous mode
[  118.089525][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.091911][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.094323][ T8195] bridge_slave_1: entered allmulticast mode
[  118.097111][ T8195] bridge_slave_1: entered promiscuous mode
[  118.114677][ T8195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.127832][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.157739][ T8213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.165563][ T8195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.182729][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.210323][ T8195] team0: Port device team_slave_0 added
[  118.215024][ T8195] team0: Port device team_slave_1 added
[  118.252528][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.258380][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.270091][ T8195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.278273][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.283928][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.296138][ T8195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.353386][ T8195] hsr_slave_0: entered promiscuous mode
[  118.355838][ T8195] hsr_slave_1: entered promiscuous mode
[  118.397077][ T5660] bridge_slave_1: left allmulticast mode
[  118.399539][ T5660] bridge_slave_1: left promiscuous mode
[  118.405065][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.412862][ T5660] bridge_slave_0: left allmulticast mode
[  118.416020][ T5660] bridge_slave_0: left promiscuous mode
[  118.418986][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.442444][ T8224] __nla_validate_parse: 14 callbacks suppressed
[  118.442459][ T8224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.641'.
[  118.496814][ T8225] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[  118.500374][ T8225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.663348][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.668002][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.672620][ T5660] bond0 (unregistering): Released all slaves
[  118.919769][ T5660] hsr_slave_0: left promiscuous mode
[  118.922198][ T5660] hsr_slave_1: left promiscuous mode
[  118.924898][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.928687][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.932398][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.937581][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.954768][ T5660] veth1_macvtap: left promiscuous mode
[  118.958498][ T5660] veth0_macvtap: left promiscuous mode
[  118.960527][ T5660] veth1_vlan: left promiscuous mode
[  118.962522][ T5660] veth0_vlan: left promiscuous mode
[  119.233575][ T5660] team0 (unregistering): Port device team_slave_1 removed
[  119.257275][ T5660] team0 (unregistering): Port device team_slave_0 removed
[  119.558215][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'.
[  119.605852][ T8248] syz.2.649: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  119.611966][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.2.649 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  119.611978][ T8248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.611983][ T8248] Call Trace:
[  119.611987][ T8248]  <TASK>
[  119.611991][ T8248]  dump_stack_lvl+0x189/0x250
[  119.612008][ T8248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.612019][ T8248]  ? __pfx__printk+0x10/0x10
[  119.612028][ T8248]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  119.612037][ T8248]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  119.612045][ T8248]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  119.612054][ T8248]  warn_alloc+0x214/0x310
[  119.612066][ T8248]  ? __pfx_warn_alloc+0x10/0x10
[  119.612078][ T8248]  ? __get_vm_area_node+0x28f/0x300
[  119.612086][ T8248]  ? hash_ipportip_create+0x358/0xfe0
[  119.612097][ T8248]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  119.612104][ T8248]  ? do_syscall_64+0xfa/0x3b0
[  119.612122][ T8248]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  119.612132][ T8248]  ? rcu_is_watching+0x15/0xb0
[  119.612144][ T8248]  ? hash_ipportip_create+0x358/0xfe0
[  119.612153][ T8248]  ? hash_ipportip_create+0x358/0xfe0
[  119.612160][ T8248]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  119.612169][ T8248]  ? hash_ipportip_create+0x358/0xfe0
[  119.612177][ T8248]  ? hash_ipportip_create+0x2fe/0xfe0
[  119.612188][ T8248]  hash_ipportip_create+0x358/0xfe0
[  119.612200][ T8248]  ? __nla_parse+0x40/0x60
[  119.612211][ T8248]  ? __pfx_hash_ipportip_create+0x10/0x10
[  119.612221][ T8248]  ip_set_create+0xa97/0x1940
[  119.612232][ T8248]  ? ip_set_create+0x4a2/0x1940
[  119.612247][ T8248]  ? __pfx_ip_set_create+0x10/0x10
[  119.612271][ T8248]  nfnetlink_rcv_msg+0xb4d/0x1130
[  119.612282][ T8248]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  119.612299][ T8248]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  119.612308][ T8248]  ? kasan_save_free_info+0x46/0x50
[  119.612347][ T8248]  netlink_rcv_skb+0x208/0x470
[  119.612356][ T8248]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  119.612367][ T8248]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  119.612379][ T8248]  ? bpf_lsm_capable+0x9/0x20
[  119.612386][ T8248]  ? security_capable+0x7e/0x2e0
[  119.612399][ T8248]  nfnetlink_rcv+0x26a/0x2520
[  119.612410][ T8248]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  119.612422][ T8248]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  119.612434][ T8248]  ? __dev_queue_xmit+0x27e/0x3a70
[  119.612443][ T8248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.612454][ T8248]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  119.612464][ T8248]  ? __pfx___dev_queue_xmit+0x10/0x10
[  119.612503][ T8248]  ? ref_tracker_free+0x63a/0x7d0
[  119.612511][ T8248]  ? __copy_skb_header+0xa7/0x550
[  119.612522][ T8248]  ? __pfx_ref_tracker_free+0x10/0x10
[  119.612530][ T8248]  ? __skb_clone+0x63/0x7a0
[  119.612541][ T8248]  ? __skb_clone+0x483/0x7a0
[  119.612552][ T8248]  ? skb_clone+0x246/0x3a0
[  119.612562][ T8248]  ? __netlink_deliver_tap+0x807/0x850
[  119.612569][ T8248]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.612579][ T8248]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.612586][ T8248]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.612596][ T8248]  netlink_unicast+0x75b/0x8d0
[  119.612608][ T8248]  netlink_sendmsg+0x805/0xb30
[  119.612619][ T8248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.612629][ T8248]  ? aa_sock_msg_perm+0x94/0x160
[  119.612639][ T8248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  119.612648][ T8248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.612656][ T8248]  __sock_sendmsg+0x21c/0x270
[  119.612669][ T8248]  ____sys_sendmsg+0x505/0x830
[  119.612680][ T8248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  119.612692][ T8248]  ? import_iovec+0x74/0xa0
[  119.612701][ T8248]  ___sys_sendmsg+0x21f/0x2a0
[  119.612711][ T8248]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.612734][ T8248]  ? __fget_files+0x2a/0x420
[  119.612742][ T8248]  ? __fget_files+0x3a0/0x420
[  119.612753][ T8248]  __x64_sys_sendmsg+0x19b/0x260
[  119.612763][ T8248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  119.612776][ T8248]  ? rcu_is_watching+0x15/0xb0
[  119.612789][ T8248]  ? do_syscall_64+0xbe/0x3b0
[  119.612796][ T8248]  do_syscall_64+0xfa/0x3b0
[  119.612802][ T8248]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.612812][ T8248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.612818][ T8248]  ? exc_page_fault+0x9f/0xf0
[  119.612829][ T8248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.612836][ T8248] RIP: 0033:0x7f4f2cf8e929
[  119.612844][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.612850][ T8248] RSP: 002b:00007f4f2dea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.612859][ T8248] RAX: ffffffffffffffda RBX: 00007f4f2d1b5fa0 RCX: 00007f4f2cf8e929
[  119.612864][ T8248] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000006
[  119.612869][ T8248] RBP: 00007f4f2d010b39 R08: 0000000000000000 R09: 0000000000000000
[  119.612873][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.612877][ T8248] R13: 0000000000000000 R14: 00007f4f2d1b5fa0 R15: 00007fffb765a558
[  119.612889][ T8248]  </TASK>
[  119.612892][ T8248] Mem-Info:
[  119.815038][ T8248] active_anon:4324 inactive_anon:0 isolated_anon:0
[  119.815038][ T8248]  active_file:1067 inactive_file:38251 isolated_file:0
[  119.815038][ T8248]  unevictable:1768 dirty:97 writeback:0
[  119.815038][ T8248]  slab_reclaimable:9606 slab_unreclaimable:76531
[  119.815038][ T8248]  mapped:18010 shmem:2432 pagetables:850
[  119.815038][ T8248]  sec_pagetables:0 bounce:0
[  119.815038][ T8248]  kernel_misc_reclaimable:0
[  119.815038][ T8248]  free:274280 free_pcp:20038 free_cma:0
[  119.829864][ T8248] Node 0 active_anon:9256kB inactive_anon:0kB active_file:3484kB inactive_file:19340kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28120kB dirty:212kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3352kB pagetables:1692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  119.844299][ T8248] Node 1 active_anon:8040kB inactive_anon:0kB active_file:784kB inactive_file:133664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43920kB dirty:176kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8104kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  119.855575][   T54] Bluetooth: hci1: command tx timeout
[  119.859184][ T8248] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  119.872498][ T8248] lowmem_reserve[]: 0 815 815 815 815
[  119.874841][ T8248] Node 0 DMA32 free:326476kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9256kB inactive_anon:0kB active_file:3484kB inactive_file:19340kB unevictable:3536kB writepending:212kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:38384kB local_pcp:13380kB free_cma:0kB
[  119.888304][ T8248] lowmem_reserve[]: 0 0 0 0 0
[  119.890415][ T8248] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  119.923365][ T8248] lowmem_reserve[]: 0 0 854 854 854
[  119.926335][ T8248] Node 1 Normal free:296796kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8176kB inactive_anon:0kB active_file:784kB inactive_file:133664kB unevictable:3536kB writepending:176kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:42252kB local_pcp:26384kB free_cma:0kB
[  119.945630][ T8248] lowmem_reserve[]: 0 0 0 0 0
[  119.947592][ T8248] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  119.953151][ T8248] Node 0 DMA32: 569*4kB (UM) 83*8kB (UME) 87*16kB (UM) 165*32kB (UME) 14*64kB (UM) 13*128kB (UME) 6*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 76*4096kB (M) = 326540kB
[  119.962917][ T8248] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  119.964118][ T8258] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.652'.
[  119.969820][ T8248] Node 1 Normal: 247*4kB (UME) 352*8kB (UME) 330*16kB (UM) 461*32kB (UM) 126*64kB (UM) 103*128kB (UM) 43*256kB (UME) 24*512kB (UM) 19*1024kB (UME) 12*2048kB (UME) 45*4096kB (UM) = 296732kB
[  119.969953][ T8248] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  119.990965][ T8248] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  119.995356][ T8248] 41750 total pagecache pages
[  119.997327][ T8248] 0 pages in swap cache
[  119.999787][ T8248] Free swap  = 124996kB
[  120.001615][ T8248] Total swap = 124996kB
[  120.003414][ T8248] 786301 pages RAM
[  120.005074][ T8248] 0 pages HighMem/MovableOnly
[  120.009727][ T8248] 240368 pages reserved
[  120.011583][ T8248] 0 pages cma reserved
[  120.079665][ T8195] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  120.083987][ T8195] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  120.092160][ T8195] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  120.100328][ T8195] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  120.157364][ T8272] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  120.224956][ T8195] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.280734][ T8195] 8021q: adding VLAN 0 to HW filter on device team0
[  120.288701][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.291095][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.301756][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.304287][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.433726][ T8195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.463034][ T8195] veth0_vlan: entered promiscuous mode
[  120.471236][ T8195] veth1_vlan: entered promiscuous mode
[  120.491175][ T8195] veth0_macvtap: entered promiscuous mode
[  120.496553][ T8195] veth1_macvtap: entered promiscuous mode
[  120.508873][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.518776][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.523996][ T8195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.528533][ T8195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.531817][ T8195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.534929][ T8195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.580559][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.587773][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.601682][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.604625][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.612575][ T8288] netlink: 'syz.2.659': attribute type 1 has an invalid length.
[  120.637005][ T8288] bond4: entered promiscuous mode
[  120.640174][ T8288] bond4: entered allmulticast mode
[  120.646215][ T8288] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.677330][ T8288] bridge1: entered promiscuous mode
[  120.679198][ T8288] bridge1: entered allmulticast mode
[  120.681631][ T8288] bond4: (slave bridge1): Enslaving as a backup interface with an up link
[  120.687785][ T8288] netlink: 'syz.2.659': attribute type 21 has an invalid length.
[  120.691323][ T8288] netlink: 156 bytes leftover after parsing attributes in process `syz.2.659'.
[  120.746278][ T5927] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  120.857094][ T5927] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  120.913314][ T8298] netlink: 27 bytes leftover after parsing attributes in process `syz.1.661'.
[  121.082680][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[  121.087644][ T8318] netlink: 'syz.1.668': attribute type 2 has an invalid length.
[  121.224963][   T33] audit: type=1800 audit(1751890689.556:2): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.671" name=33FFFF dev="tmpfs" ino=1677 res=0 errno=0
[  121.301586][ T8334] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  121.335531][ T8336] openvswitch: netlink: Actions may not be safe on all matching packets
[  121.419238][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  121.423943][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  121.946332][ T8339] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  122.206244][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'.
[  122.210154][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'.
[  122.334589][ T8363] wg1 speed is unknown, defaulting to 1000
[  122.392012][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.737948][ T8370] netlink: 'syz.2.685': attribute type 1 has an invalid length.
[  123.778918][ T8370] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.890720][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  123.893835][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  123.897774][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  123.901362][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  123.904628][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  123.923872][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.946923][ T8384] wg1 speed is unknown, defaulting to 1000
[  123.991344][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.093101][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.117846][ T8396] netlink: 'syz.2.691': attribute type 9 has an invalid length.
[  124.121565][ T8396] __nla_validate_parse: 1 callbacks suppressed
[  124.121573][ T8396] netlink: 324 bytes leftover after parsing attributes in process `syz.2.691'.
[  124.140420][ T8384] chnl_net:caif_netlink_parms(): no params data found
[  124.163770][ T8400] bond0: entered promiscuous mode
[  124.166782][ T8400] bond0: left promiscuous mode
[  124.213434][ T8404] netlink: 'syz.2.692': attribute type 2 has an invalid length.
[  124.217531][ T8404] netlink: 'syz.2.692': attribute type 1 has an invalid length.
[  124.220253][ T8404] netlink: 'syz.2.692': attribute type 1 has an invalid length.
[  124.247130][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.249553][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.252175][ T8384] bridge_slave_0: entered allmulticast mode
[  124.254945][ T8384] bridge_slave_0: entered promiscuous mode
[  124.258594][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.261620][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.264194][ T8384] bridge_slave_1: entered allmulticast mode
[  124.267243][ T8384] bridge_slave_1: entered promiscuous mode
[  124.270459][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'.
[  124.288917][   T13] bridge_slave_1: left allmulticast mode
[  124.291073][   T13] bridge_slave_1: left promiscuous mode
[  124.293030][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.298218][   T13] bridge_slave_0: left allmulticast mode
[  124.300107][   T13] bridge_slave_0: left promiscuous mode
[  124.302109][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.539344][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.543749][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.547638][   T13] bond0 (unregistering): Released all slaves
[  124.571944][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.579882][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.628775][ T8384] team0: Port device team_slave_0 added
[  124.647700][ T8384] team0: Port device team_slave_1 added
[  124.669532][ T8410] netlink: 'syz.2.694': attribute type 1 has an invalid length.
[  124.713327][ T8410] 8021q: adding VLAN 0 to HW filter on device bond6
[  124.717875][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.720868][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.745709][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.763530][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.767360][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.793361][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.851568][ T8428] xt_hashlimit: size too large, truncated to 1048576
[  124.876888][ T8426] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  124.923087][ T8384] hsr_slave_0: entered promiscuous mode
[  124.927985][ T8384] hsr_slave_1: entered promiscuous mode
[  124.930538][ T8384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.933060][ T8384] Cannot create hsr debugfs directory
[  124.948004][   T13] hsr_slave_0: left promiscuous mode
[  124.950420][   T13] hsr_slave_1: left promiscuous mode
[  124.952499][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.955135][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.958111][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.960667][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.969431][   T13] veth1_macvtap: left promiscuous mode
[  124.971466][   T13] veth0_macvtap: left promiscuous mode
[  124.973345][   T13] veth1_vlan: left promiscuous mode
[  124.975130][   T13] veth0_vlan: left promiscuous mode
[  125.304841][   T13] team0 (unregistering): Port device team_slave_1 removed
[  125.327971][   T13] team0 (unregistering): Port device team_slave_0 removed
[  125.606636][ T8435] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.700'.
[  125.749719][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.703'.
[  125.935681][ T5817] Bluetooth: hci1: command tx timeout
[  126.107819][ T8384] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  126.111873][ T8384] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  126.112330][ T8467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.712'.
[  126.120243][ T8384] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  126.126370][ T8384] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  126.166287][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'.
[  126.195492][ T8474] hsr_slave_0: left promiscuous mode
[  126.205339][ T8474] hsr_slave_1: left promiscuous mode
[  126.242001][ T8482] bridge2: entered allmulticast mode
[  126.248514][ T8480] wg1 speed is unknown, defaulting to 1000
[  126.261947][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.276982][ T8384] 8021q: adding VLAN 0 to HW filter on device team0
[  126.288591][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.290925][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.306902][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.309665][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.341142][ T8384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  126.348257][ T8384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.355191][ T8486] netlink: 'syz.2.716': attribute type 10 has an invalid length.
[  126.360066][ T8486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.716'.
[  126.364906][ T8486] dummy0: entered promiscuous mode
[  126.368940][ T8486] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  126.530209][ T8502] netlink: 'syz.1.719': attribute type 11 has an invalid length.
[  126.533556][ T8502] netlink: 228 bytes leftover after parsing attributes in process `syz.1.719'.
[  126.584448][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.638442][ T8384] veth0_vlan: entered promiscuous mode
[  126.645163][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'.
[  126.646025][ T8384] veth1_vlan: entered promiscuous mode
[  126.675187][ T8384] veth0_macvtap: entered promiscuous mode
[  126.685810][ T8384] veth1_macvtap: entered promiscuous mode
[  126.712613][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.723917][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.732205][ T8384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.735951][ T8384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.746415][ T8384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.755431][ T8384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.759293][ T8518] openvswitch: netlink: Actions may not be safe on all matching packets
[  126.787519][ T8520] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[  126.826090][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.828590][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.852712][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'.
[  126.853742][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.859068][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.989578][ T8529] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  128.571299][ T8590] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  128.591063][ T8593] netlink: 'syz.1.745': attribute type 2 has an invalid length.
[  128.607055][ T8593] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[  128.797331][ T8611] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  128.831729][ T8611] bond7: entered promiscuous mode
[  128.930096][ T5927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.350390][ T5927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.413517][ T5927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.497989][ T5927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.501784][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.505172][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.509231][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.513372][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.516937][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.540667][ T8634] wg1 speed is unknown, defaulting to 1000
[  130.552435][ T8640] __nla_validate_parse: 13 callbacks suppressed
[  130.552447][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  130.738673][ T8634] chnl_net:caif_netlink_parms(): no params data found
[  130.773281][ T5927] bridge_slave_1: left allmulticast mode
[  130.775831][ T5927] bridge_slave_1: left promiscuous mode
[  130.777899][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.784021][ T5927] bridge_slave_0: left allmulticast mode
[  130.791118][ T5927] bridge_slave_0: left promiscuous mode
[  130.793274][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.126056][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.130742][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.134883][ T5927] bond0 (unregistering): Released all slaves
[  131.286233][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.288668][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.291054][ T8634] bridge_slave_0: entered allmulticast mode
[  131.293842][ T8634] bridge_slave_0: entered promiscuous mode
[  131.299595][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.301939][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.304453][ T8634] bridge_slave_1: entered allmulticast mode
[  131.307918][ T8634] bridge_slave_1: entered promiscuous mode
[  131.370615][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.394038][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.442321][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'.
[  131.445636][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.762'.
[  131.472737][ T8634] team0: Port device team_slave_0 added
[  131.481412][ T8634] team0: Port device team_slave_1 added
[  131.525108][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.527721][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.543446][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.550176][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.552640][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.564725][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.574968][ T5927] hsr_slave_0: left promiscuous mode
[  131.582325][ T5927] hsr_slave_1: left promiscuous mode
[  131.584588][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.587322][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.590431][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.593542][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.610283][ T5927] veth1_macvtap: left promiscuous mode
[  131.612815][ T5927] veth0_macvtap: left promiscuous mode
[  131.620374][ T5927] veth1_vlan: left promiscuous mode
[  131.622635][ T5927] veth0_vlan: left promiscuous mode
[  132.010686][ T5927] team0 (unregistering): Port device team_slave_1 removed
[  132.036116][ T5927] team0 (unregistering): Port device team_slave_0 removed
[  132.314660][ T8665] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  132.370813][ T8634] hsr_slave_0: entered promiscuous mode
[  132.373206][ T8634] hsr_slave_1: entered promiscuous mode
[  132.411413][ T8668] netlink: 'syz.1.765': attribute type 1 has an invalid length.
[  132.421312][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.570846][ T8672] openvswitch: netlink: Actions may not be safe on all matching packets
[  132.575500][   T54] Bluetooth: hci1: command tx timeout
[  132.690341][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'.
[  132.693318][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'.
[  132.729940][ T8676] netlink: 'syz.2.767': attribute type 39 has an invalid length.
[  132.824728][ T8634] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  132.837954][ T8634] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  132.848977][ T8634] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  132.860375][ T8634] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  132.909600][ T8684] netlink: 'syz.2.768': attribute type 1 has an invalid length.
[  132.932756][ T8634] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.954810][ T8634] 8021q: adding VLAN 0 to HW filter on device team0
[  132.971634][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.974073][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.985837][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.988311][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.050539][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'.
[  133.168904][ T8634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.200136][ T8634] veth0_vlan: entered promiscuous mode
[  133.206405][ T8634] veth1_vlan: entered promiscuous mode
[  133.222678][ T8634] veth0_macvtap: entered promiscuous mode
[  133.226825][ T8634] veth1_macvtap: entered promiscuous mode
[  133.237121][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.244190][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.258997][ T8634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.262134][ T8634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.266015][ T8634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.269721][ T8634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.337586][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.341017][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.373452][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.379036][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.482419][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'.
[  133.651146][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'.
[  133.679529][ T8711] wg1 speed is unknown, defaulting to 1000
[  134.066994][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'.
[  134.114971][ T8723] IPVS: length: 167 != 8
[  134.120673][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.779'.
[  134.198897][ T8730] netlink: 'syz.2.780': attribute type 7 has an invalid length.
[  134.201662][ T8730] netlink: 'syz.2.780': attribute type 3 has an invalid length.
[  134.471710][ T8753] bond0: entered promiscuous mode
[  134.473914][ T8753] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  134.477805][ T8753] bond0: left promiscuous mode
[  135.330103][ T8775] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  135.484337][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.047316][ T8788] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  137.158809][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.180238][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  137.183391][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  137.187726][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  137.191525][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  137.194802][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  137.208727][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.232870][ T8798] wg1 speed is unknown, defaulting to 1000
[  137.261243][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.280396][ T8807] __nla_validate_parse: 5 callbacks suppressed
[  137.280409][ T8807] netlink: 76 bytes leftover after parsing attributes in process `syz.1.802'.
[  137.384335][ T8798] chnl_net:caif_netlink_parms(): no params data found
[  137.402584][   T12] bridge_slave_1: left allmulticast mode
[  137.404449][   T12] bridge_slave_1: left promiscuous mode
[  137.407587][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.411383][   T12] bridge_slave_0: left allmulticast mode
[  137.413333][   T12] bridge_slave_0: left promiscuous mode
[  137.415570][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.422970][ T8815] netlink: 'syz.2.806': attribute type 13 has an invalid length.
[  137.426635][ T8815] netlink: 'syz.2.806': attribute type 17 has an invalid length.
[  137.638508][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.642786][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.647395][   T12] bond0 (unregistering): Released all slaves
[  137.653337][ T8814] wg1 speed is unknown, defaulting to 1000
[  137.671110][ T8815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.803848][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.806720][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.809111][ T8798] bridge_slave_0: entered allmulticast mode
[  137.811951][ T8798] bridge_slave_0: entered promiscuous mode
[  137.818071][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.820605][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.823037][ T8798] bridge_slave_1: entered allmulticast mode
[  137.828103][ T8798] bridge_slave_1: entered promiscuous mode
[  137.874806][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.882320][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.913646][ T8798] team0: Port device team_slave_0 added
[  137.917918][ T8798] team0: Port device team_slave_1 added
[  137.930263][   T12] hsr_slave_0: left promiscuous mode
[  137.933575][   T12] hsr_slave_1: left promiscuous mode
[  137.936815][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.939288][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.942029][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.944528][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.955072][   T12] veth1_macvtap: left promiscuous mode
[  137.957096][   T12] veth0_macvtap: left promiscuous mode
[  137.958923][   T12] veth1_vlan: left promiscuous mode
[  137.960637][   T12] veth0_vlan: left promiscuous mode
[  138.208745][   T12] team0 (unregistering): Port device team_slave_1 removed
[  138.233123][   T12] team0 (unregistering): Port device team_slave_0 removed
[  138.464530][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.466856][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.475100][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.486376][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.488643][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.502078][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.557230][ T8798] hsr_slave_0: entered promiscuous mode
[  138.559767][ T8798] hsr_slave_1: entered promiscuous mode
[  138.962159][ T8841] netlink: 112 bytes leftover after parsing attributes in process `syz.2.814'.
[  138.996841][ T8798] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  139.005365][ T8798] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  139.015526][ T8798] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  139.022671][ T8798] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  139.050580][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'.
[  139.054494][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'.
[  139.100890][ T8854] netlink: 72 bytes leftover after parsing attributes in process `syz.2.816'.
[  139.133728][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.158400][ T8798] 8021q: adding VLAN 0 to HW filter on device team0
[  139.177214][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.179716][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.198118][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.200499][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.297030][ T5817] Bluetooth: hci1: command tx timeout
[  139.309029][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.332980][ T8798] veth0_vlan: entered promiscuous mode
[  139.338632][ T8798] veth1_vlan: entered promiscuous mode
[  139.362548][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  139.369630][ T8798] veth0_macvtap: entered promiscuous mode
[  139.375010][ T8798] veth1_macvtap: entered promiscuous mode
[  139.385855][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.392497][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.398758][ T8798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.401641][ T8798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.404990][ T8798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.408237][ T8798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.475115][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.482111][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.500910][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.504847][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.508529][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'.
[  139.558280][ T8875] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  139.564249][ T5867] IPVS: starting estimator thread 0...
[  139.579398][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.822'.
[  139.656740][ T8881] IPVS: using max 41 ests per chain, 98400 per kthread
[  139.672316][ T8894] pimreg: entered allmulticast mode
[  139.679119][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'.
[  139.688702][ T8892] wg1 speed is unknown, defaulting to 1000
[  139.763453][ T8897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.828'.
[  139.977510][ T8916] syz.1.834 uses old SIOCAX25GETINFO
[  140.012204][ T8918] netlink: 'syz.1.835': attribute type 4 has an invalid length.
[  140.056990][ T8925] netlink: 'syz.1.837': attribute type 1 has an invalid length.
[  140.059457][ T8925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.097979][ T8926] netlink: 'syz.2.838': attribute type 21 has an invalid length.
[  140.224020][ T8942] netlink: 'syz.1.843': attribute type 9 has an invalid length.
[  141.168750][ T8980] openvswitch: netlink: Duplicate or invalid key (type 0).
[  141.171812][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.231029][ T8981] netlink: 'syz.2.856': attribute type 5 has an invalid length.
[  141.234383][ T8981] netlink: 'syz.2.856': attribute type 7 has an invalid length.
[  141.246170][ T8981] : entered promiscuous mode
[  141.292342][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.042390][ T5846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.085051][ T8989] netlink: 'syz.1.857': attribute type 1 has an invalid length.
[  143.090463][ T8989] __nla_validate_parse: 14 callbacks suppressed
[  143.090501][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[  143.153915][ T5846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.208679][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.212697][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.216362][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.220651][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.224022][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.279272][ T5846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.294537][ T8999] wg1 speed is unknown, defaulting to 1000
[  143.337646][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  143.524383][ T5846] bridge_slave_1: left allmulticast mode
[  143.528922][ T5846] bridge_slave_1: left promiscuous mode
[  143.531385][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.547912][ T9016] xt_hashlimit: size too large, truncated to 1048576
[  143.551760][ T5846] bridge_slave_0: left allmulticast mode
[  143.554140][ T5846] bridge_slave_0: left promiscuous mode
[  143.556865][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.945948][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.951830][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.956686][ T5846] bond0 (unregistering): Released all slaves
[  143.979326][ T8999] chnl_net:caif_netlink_parms(): no params data found
[  144.116551][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.119520][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.122205][ T8999] bridge_slave_0: entered allmulticast mode
[  144.125075][ T8999] bridge_slave_0: entered promiscuous mode
[  144.131839][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.134702][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.137223][ T8999] bridge_slave_1: entered allmulticast mode
[  144.140334][ T8999] bridge_slave_1: entered promiscuous mode
[  144.162916][ T8999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.180783][ T8999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.264237][ T8999] team0: Port device team_slave_0 added
[  144.270271][ T8999] team0: Port device team_slave_1 added
[  144.323306][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.327128][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.353830][ T8999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.362010][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.364856][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.375325][ T8999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.401295][ T5846] hsr_slave_0: left promiscuous mode
[  144.404215][ T5846] hsr_slave_1: left promiscuous mode
[  144.410261][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.419862][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.423896][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.427265][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.446434][ T5846] veth1_macvtap: left promiscuous mode
[  144.448578][ T5846] veth0_macvtap: left promiscuous mode
[  144.450988][ T5846] veth1_vlan: left promiscuous mode
[  144.454307][ T5846] veth0_vlan: left promiscuous mode
[  144.514743][ T9051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.873'.
[  144.805144][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  144.827110][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  145.089772][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'.
[  145.094234][ T9049] netlink: 46 bytes leftover after parsing attributes in process `syz.2.874'.
[  145.130821][ T8999] hsr_slave_0: entered promiscuous mode
[  145.133234][ T8999] hsr_slave_1: entered promiscuous mode
[  145.201412][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'.
[  145.205116][ T9054] netlink: 120 bytes leftover after parsing attributes in process `syz.1.875'.
[  145.231918][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'.
[  145.302347][   T54] Bluetooth: hci1: command tx timeout
[  145.343764][ T9066] netlink: 116 bytes leftover after parsing attributes in process `syz.2.878'.
[  145.458358][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.882'.
[  145.701734][ T8999] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  145.711138][ T8999] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  145.719030][ T8999] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  145.724135][ T8999] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  145.735130][ T9098] pim6reg: entered allmulticast mode
[  145.747721][ T9098] pim6reg: left allmulticast mode
[  145.749449][ T9098] lo: left allmulticast mode
[  145.858506][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.878973][ T8999] 8021q: adding VLAN 0 to HW filter on device team0
[  145.883819][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.886535][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.901530][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.904642][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.951319][ T8999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.962756][ T8999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.141576][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.180987][ T8999] veth0_vlan: entered promiscuous mode
[  146.189984][ T8999] veth1_vlan: entered promiscuous mode
[  146.207308][ T8999] veth0_macvtap: entered promiscuous mode
[  146.226547][ T8999] veth1_macvtap: entered promiscuous mode
[  146.235962][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.242341][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.254131][ T8999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.270896][ T8999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.274250][ T8999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.289867][ T8999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.415781][ T9153] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  146.468388][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.471664][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.523241][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.527561][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.563719][ T9158] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  146.671316][ T9167] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  146.720629][ T9168] netlink: 'syz.1.902': attribute type 10 has an invalid length.
[  146.724985][ T9168] dummy0: left allmulticast mode
[  146.727373][ T9168] dummy0: left promiscuous mode
[  146.729606][ T9168] bridge0: port 2(dummy0) entered disabled state
[  146.739402][ T9168] team0: Port device dummy0 added
[  146.960226][ T9182] bridge7: entered promiscuous mode
[  146.962397][ T9182] bridge7: entered allmulticast mode
[  147.832072][ T9238] syzkaller0: entered promiscuous mode
[  147.833846][ T9238] syzkaller0: entered allmulticast mode
[  148.765547][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.549937][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.608447][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.657790][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.741873][   T12] bridge_slave_1: left allmulticast mode
[  149.744221][   T12] bridge_slave_1: left promiscuous mode
[  149.749071][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.755576][   T12] bridge_slave_0: left allmulticast mode
[  149.758647][   T12] bridge_slave_0: left promiscuous mode
[  149.761039][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.032961][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.039389][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.043722][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.049212][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.053371][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.117337][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.121866][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.125722][   T12] bond0 (unregistering): Released all slaves
[  150.151655][ T9250] wg1 speed is unknown, defaulting to 1000
[  150.325650][ T9270] __nla_validate_parse: 11 callbacks suppressed
[  150.325664][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'.
[  150.337146][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'.
[  150.350665][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'.
[  150.353818][ T9273] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  150.360730][ T9273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.362024][ T9250] chnl_net:caif_netlink_parms(): no params data found
[  152.175399][   T54] Bluetooth: hci1: command tx timeout
[  153.418261][   T12] hsr_slave_0: left promiscuous mode
[  153.421792][   T12] hsr_slave_1: left promiscuous mode
[  153.423991][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.431034][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.434102][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.436659][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.463895][   T12] veth1_macvtap: left promiscuous mode
[  153.469396][   T12] veth0_macvtap: left promiscuous mode
[  153.472757][   T12] veth1_vlan: left promiscuous mode
[  153.473239][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'.
[  153.476985][   T12] veth0_vlan: left promiscuous mode
[  153.488186][ T9285] netlink: 52 bytes leftover after parsing attributes in process `syz.2.935'.
[  153.829018][   T12] team0 (unregistering): Port device team_slave_1 removed
[  153.857448][   T12] team0 (unregistering): Port device team_slave_0 removed
[  154.229601][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.237889][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.241058][ T9250] bridge_slave_0: entered allmulticast mode
[  154.248122][ T9250] bridge_slave_0: entered promiscuous mode
[  154.252413][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.255605][   T54] Bluetooth: hci1: command tx timeout
[  154.259580][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.262187][ T9250] bridge_slave_1: entered allmulticast mode
[  154.265903][ T9250] bridge_slave_1: entered promiscuous mode
[  154.292797][ T9295] Can't find ip_set type bitmap:ip
[  154.306454][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.311544][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.354437][ T9250] team0: Port device team_slave_0 added
[  154.358580][ T9250] team0: Port device team_slave_1 added
[  154.393779][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.396458][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.420270][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.430328][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.432658][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.435737][ T9299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.938'.
[  154.461540][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.528273][ T9250] hsr_slave_0: entered promiscuous mode
[  154.536527][ T9250] hsr_slave_1: entered promiscuous mode
[  154.649242][ T9305] netlink: 'syz.1.941': attribute type 1 has an invalid length.
[  154.677616][ T9305] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  154.680722][ T9305] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  154.684057][ T9305] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  154.686784][ T9305] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  154.691220][ T9305] bond3: (slave geneve2): making interface the new active one
[  154.694315][ T9305] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  154.703865][ T9305] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[  154.728840][ T9308] netlink: 'syz.2.940': attribute type 4 has an invalid length.
[  154.748645][ T9308] netlink: 104 bytes leftover after parsing attributes in process `syz.2.940'.
[  154.823713][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.894628][ T9250] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  154.899782][ T9250] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  154.903690][ T9250] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  154.917431][ T9250] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  154.966714][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.988220][ T9250] 8021q: adding VLAN 0 to HW filter on device team0
[  154.996827][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.999772][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.013962][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.016408][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.124353][ T9250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.153643][ T9250] veth0_vlan: entered promiscuous mode
[  155.159814][ T9250] veth1_vlan: entered promiscuous mode
[  155.178860][ T9250] veth0_macvtap: entered promiscuous mode
[  155.183328][ T9250] veth1_macvtap: entered promiscuous mode
[  155.194866][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.202020][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.208215][ T9250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.211124][ T9250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.214014][ T9250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.217113][ T9250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.259057][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.261743][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.282769][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.286051][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.450936][ T9331] tipc: Started in network mode
[  155.452644][ T9331] tipc: Node identity 3224c7391e8c, cluster identity 4711
[  155.457360][ T9331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.460211][ T9331] syzkaller0: entered promiscuous mode
[  155.462012][ T9331] syzkaller0: entered allmulticast mode
[  155.506609][ T9331] tipc: Resetting bearer <eth:syzkaller0>
[  155.518278][ T9330] tipc: Resetting bearer <eth:syzkaller0>
[  155.540967][ T9330] tipc: Disabling bearer <eth:syzkaller0>
[  155.578298][ T9338] trusted_key: syz.1.948 sent an empty control message without MSG_MORE.
[  155.661982][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'.
[  155.667953][ T9344] netlink: 'syz.1.950': attribute type 5 has an invalid length.
[  156.103654][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.952'.
[  156.107872][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.952'.
[  156.151617][ T9353] tipc: MTU too low for tipc bearer
[  156.698548][ T9387] pim6reg1: entered promiscuous mode
[  156.700429][ T9387] pim6reg1: entered allmulticast mode
[  156.713719][ T9389] netlink: 'syz.2.962': attribute type 6 has an invalid length.
[  156.744618][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'.
[  156.823918][   T54] Bluetooth: hci2: link tx timeout
[  156.827798][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  156.834411][   T54] Bluetooth: hci2: link tx timeout
[  156.836775][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.840091][   T54] Bluetooth: hci2: link tx timeout
[  156.842274][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  156.845762][   T54] Bluetooth: hci2: link tx timeout
[  156.847942][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.886685][ T9407] sctp: [Deprecated]: syz.2.969 (pid 9407) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.886685][ T9407] Use struct sctp_sack_info instead
[  157.301050][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.895591][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  158.902734][ T5817] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  158.907594][ T5817] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  158.911625][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/u11:2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  158.917126][ T5817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.921211][ T5817] Workqueue: hci2 hci_cmd_sync_work
[  158.923448][ T5817] RIP: 0010:klist_remove+0x14a/0x340
[  158.925686][ T5817] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08
[  158.933203][ T5817] RSP: 0018:ffffc90002d6f6e0 EFLAGS: 00010202
[  158.935277][ T5817] RAX: 000000000000000b RBX: ffff888108899cc0 RCX: 0000000000000000
[  158.937833][ T5817] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  158.940966][ T5817] RBP: ffffc90002d6f7c8 R08: ffffffff8f879603 R09: 1ffffffff1f0f2c0
[  158.944142][ T5817] R10: dffffc0000000000 R11: fffffbfff1f0f2c1 R12: 0000000000000000
[  158.947533][ T5817] R13: 1ffff110223ed60c R14: ffff888111f6b060 R15: dffffc0000000000
[  158.950895][ T5817] FS:  0000000000000000(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  158.954627][ T5817] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.957328][ T5817] CR2: 00007f4f2d181178 CR3: 000000010cbf6000 CR4: 00000000000006f0
[  158.960610][ T5817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  158.963868][ T5817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  158.966729][ T5817] Call Trace:
[  158.967830][ T5817]  <TASK>
[  158.969009][ T5817]  ? __pfx_klist_remove+0x10/0x10
[  158.971138][ T5817]  ? __pfx_kobject_move+0x10/0x10
[  158.973187][ T5817]  ? get_device_parent+0x366/0x3a0
[  158.975245][ T5817]  device_move+0x193/0x700
[  158.977118][ T5817]  hci_conn_del_sysfs+0xb8/0x170
[  158.979180][ T5817]  hci_conn_del+0x8ff/0xcb0
[  158.981107][ T5817]  ? hci_abort_conn_sync+0x1f7/0xdf0
[  158.983311][ T5817]  hci_abort_conn_sync+0x5d1/0xdf0
[  158.985502][ T5817]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  158.987861][ T5817]  ? hci_conn_valid+0x21/0x230
[  158.989855][ T5817]  ? hci_conn_valid+0x21/0x230
[  158.991869][ T5817]  ? hci_conn_valid+0x21/0x230
[  158.993882][ T5817]  ? hci_conn_valid+0x211/0x230
[  158.995908][ T5817]  ? __pfx_abort_conn_sync+0x10/0x10
[  158.998079][ T5817]  hci_cmd_sync_work+0x213/0x3a0
[  159.000151][ T5817]  ? process_scheduled_works+0x9ef/0x17b0
[  159.002538][ T5817]  process_scheduled_works+0xae1/0x17b0
[  159.004834][ T5817]  ? __pfx_process_scheduled_works+0x10/0x10
[  159.007028][ T5817]  worker_thread+0x8a0/0xda0
[  159.008792][ T5817]  kthread+0x711/0x8a0
[  159.010373][ T5817]  ? __pfx_worker_thread+0x10/0x10
[  159.012031][ T5817]  ? __pfx_kthread+0x10/0x10
[  159.013642][ T5817]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.015364][ T5817]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.017112][ T5817]  ? __pfx_kthread+0x10/0x10
[  159.018817][ T5817]  ret_from_fork+0x3fc/0x770
[  159.020513][ T5817]  ? __pfx_ret_from_fork+0x10/0x10
[  159.022218][ T5817]  ? __switch_to_asm+0x39/0x70
[  159.023868][ T5817]  ? __switch_to_asm+0x33/0x70
[  159.025564][ T5817]  ? __pfx_kthread+0x10/0x10
[  159.027133][ T5817]  ret_from_fork_asm+0x1a/0x30
[  159.028827][ T5817]  </TASK>
[  159.030127][ T5817] Modules linked in:
[  159.031944][ T5817] ---[ end trace 0000000000000000 ]---
[  159.034802][ T5817] RIP: 0010:klist_remove+0x14a/0x340
[  159.036793][ T5817] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08
[  159.044395][ T5817] RSP: 0018:ffffc90002d6f6e0 EFLAGS: 00010202
[  159.047070][ T5817] RAX: 000000000000000b RBX: ffff888108899cc0 RCX: 0000000000000000
[  159.050407][ T5817] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  159.053677][ T5817] RBP: ffffc90002d6f7c8 R08: ffffffff8f879603 R09: 1ffffffff1f0f2c0
[  159.057169][ T5817] R10: dffffc0000000000 R11: fffffbfff1f0f2c1 R12: 0000000000000000
[  159.060396][ T5817] R13: 1ffff110223ed60c R14: ffff888111f6b060 R15: dffffc0000000000
[  159.063647][ T5817] FS:  0000000000000000(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  159.067341][ T5817] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  159.069931][ T5817] CR2: 000055b1b8231000 CR3: 0000000028ef8000 CR4: 00000000000006f0
[  159.073185][ T5817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  159.077178][ T5817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  159.080432][ T5817] Kernel panic - not syncing: Fatal exception
[  159.083730][ T5817] Kernel Offset: disabled
[  159.085522][ T5817] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:18:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002d6ef10
R8 =ffff8880215f8237 R9 =1ffff110042bf046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4912 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4f2d181178 CR3=000000010cbf6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f0e523da24994b00 RBX=ffffffff81974d58 RCX=f0e523da24994b00 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2f11581178 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2f11411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
