last executing test programs:

36.762029416s ago: executing program 2 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x304, 0x0, 0x65dfdbeb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xf6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r3, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

31.008842975s ago: executing program 2 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x304, 0x0, 0x65dfdbeb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xf6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r3, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

22.488204167s ago: executing program 2 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x304, 0x0, 0x65dfdbeb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xf6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r3, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

16.470863631s ago: executing program 2 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x304, 0x0, 0x65dfdbeb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xf6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r3, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

9.909610403s ago: executing program 2 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x304, 0x0, 0x65dfdbeb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xf6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r3, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

3.582506347s ago: executing program 2 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x304, 0x0, 0x65dfdbeb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xf6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r3, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

1.69100435s ago: executing program 1 (id=1505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)={0x2ec, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x3, 0x3, 0x74, 0x1b, 0xc, 0x0, 0x5, 0x60, 0x4, 0x3, 0x3, 0x48, 0x3a, 0x36, 0xb, 0x9, 0x36, 0x60, 0x60, 0x12, 0xb, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeae5, 0xffff, 0x4f55, 0x4, 0x0, 0x5, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x37, 0x48, 0x60, 0x36, 0x6c, 0x48, 0x48, 0x1b, 0x24, 0x6aa6b65aaed107bd, 0x1, 0xc, 0x6c, 0x30, 0xc, 0x5, 0x9, 0x16, 0x60, 0x5]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x9}, {0x5, 0x2}, {0x5, 0x9}, {0x6, 0x8}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0xc}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0x3}, {0x3, 0x1f}, {0x7, 0x9}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x3, 0xa}, {0x2}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x2}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x9}, {0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x9}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x40, 0x9, 0x1, 0x3, 0x826, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0xc, 0x12, 0x1, 0x18, 0x9, 0x16, 0x16, 0x16, 0x9, 0x30, 0x60, 0x5, 0x3, 0x2, 0x48, 0xb, 0xb, 0xc, 0x16, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xb, 0x74f, 0x1, 0x4, 0xe53b, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x0, 0x48, 0x5, 0x0, 0x48, 0x6c, 0x3, 0xc, 0x2, 0x1, 0xc, 0x4, 0x3, 0x48, 0x6c, 0x12, 0x30, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xdcb3, 0x6, 0xe03, 0x200, 0x7, 0x1, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0x101, 0xfffc, 0xb, 0xc6ca, 0xfff7]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x12, 0xb, 0x9, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x5, 0x36, 0x9, 0x3, 0x3, 0x60, 0x24, 0x6c, 0x26, 0x6c, 0x30, 0x9, 0x12, 0xb, 0x4, 0x1, 0x3, 0x4, 0x6, 0x6c, 0x60, 0x12, 0x36, 0x16, 0x24, 0xc, 0xc, 0x24, 0x9, 0x30]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x4}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x7}, {0x4, 0x5}, {}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2e7, 0x1, 0x7, 0x8000, 0x1, 0x5, 0xfff1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1c0, 0x9, 0x381b, 0x1, 0x9, 0xb76, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff, 0x8, 0x0, 0x9, 0x5, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x48, 0xc, 0x6, 0x3, 0x9, 0x1, 0x1, 0x5, 0x30, 0x18, 0x36, 0xc, 0x12, 0x3, 0x1b, 0x6a, 0x9, 0x24, 0x1b, 0x12, 0x5, 0x24, 0x1b, 0x0, 0x12, 0x36]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x0, 0x2, 0xebc, 0x6, 0xa, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x8000, 0x1ef, 0x9, 0x4, 0x2, 0x4, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7134, 0x7, 0x40, 0x9, 0x8000, 0x4, 0x9cd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4004000}, 0x2404c881)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0)

1.371535038s ago: executing program 1 (id=1506):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x10005, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.2066309s ago: executing program 1 (id=1509):
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0xf02f)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'geneve0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xd, 0x2}, {}, {0x1c, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xfd8b}}]}, 0x34}}, 0x24004000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x74, 0x24, 0x1, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x8f, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x80000000, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x74, 0x24, 0x1, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x8f, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x80000000, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', <r11=>0x0, 0x0, 0x7, 0x7f, 0x9, {{0x2a, 0x4, 0x2, 0x8, 0xa8, 0x66, 0x0, 0x5, 0x0, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x94, [@private=0xa010102, @multicast1, @private=0xa010100, @loopback, @multicast2, @loopback, @rand_addr=0x64010101, @private=0xa010102]}, @cipso={0x86, 0x17, 0x1, [{0x3, 0x7, "02d6c28347"}, {0x7, 0xa, "461669d138df4c61"}]}, @generic={0x83, 0x12, "656e082c15457d78940cf47f549d772d"}, @end, @rr={0x7, 0xf, 0x49, [@broadcast, @loopback, @remote]}, @lsrr={0x83, 0x1b, 0x72, [@rand_addr=0x64010100, @broadcast, @loopback, @broadcast, @private=0xa010100, @multicast1]}, @ssrr={0x89, 0x3, 0x17}, @end, @rr={0x7, 0x17, 0xd2, [@dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @rand_addr=0x64010100, @local, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0xdc, 0xa0b56459b1318ec4, @remote, @local, 0x700, 0x20, 0x3, 0x401}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r12=>0x0, 0x2f, 0x5, 0x2, 0xdc, 0xa0b56459b1318ec4, @remote, @local, 0x700, 0x20, 0x3, 0x401}})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="01000300000000000000000000000000000000008edd000020000100", @ANYRES32=r7, @ANYBLOB="01000400e00000020000000000000000000000000000000020000100", @ANYRES32=r3, @ANYBLOB="00030100ff01000000000000000000000000000186dd00002000010015e64d2c1385ff46e2ca74f8fcd55fac271abdf2d53ebe197ccefcf13abd2e8a94ebebeb43a0e6132d83da5408576b69149b796ee3c6f503167331015ca821f078cb1b5fd31affd377146bf7ea1710fb6f4a29b8186a96edebd337950378739fa975ecd66a383c0d764468f2f9ee486f1cf40b25de00802e0f68641fd8193bc2b4907c844f2ad02402d3918b1de0c21adc822257388906b4d34af4863d640eca5de861e1fc81477bd793591ae1dc2f5cea6b569f88f2bc4e3e1fc57ff1102403", @ANYRES32=r11, @ANYRES64=r9, @ANYRES32=r12, @ANYBLOB="030201000000000000000000000000000000000108000000"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="01000300000000000000000000000000000000008edd000020000100", @ANYRES32=r7, @ANYBLOB="01000400e00000020000000000000000000000000000000020000100", @ANYRES32=r3, @ANYBLOB="00030100ff01000000000000000000000000000186dd00002000010015e64d2c1385ff46e2ca74f8fcd55fac271abdf2d53ebe197ccefcf13abd2e8a94ebebeb43a0e6132d83da5408576b69149b796ee3c6f503167331015ca821f078cb1b5fd31affd377146bf7ea1710fb6f4a29b8186a96edebd337950378739fa975ecd66a383c0d764468f2f9ee486f1cf40b25de00802e0f68641fd8193bc2b4907c844f2ad02402d3918b1de0c21adc822257388906b4d34af4863d640eca5de861e1fc81477bd793591ae1dc2f5cea6b569f88f2bc4e3e1fc57ff1102403", @ANYRES32=r11, @ANYRES64=r9, @ANYRES32=r12, @ANYBLOB="030201000000000000000000000000000000000108000000"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r13 = socket(0x29, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
r15 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r16=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f0000000000)={r16, 0x6}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f0000000000)={r16, 0x6}, 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000380)={0x7, 0x1, 0x0, 0x1000, 0xd, 0x4, 0x4, 0x81, r16}, 0x20)

1.11064999s ago: executing program 0 (id=1511):
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x476f9c86)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000000c0)="510003000000", 0x6)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f00000003c0))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ff03000000000000000000000000ff0000000000160d"], 0x50)
close(0x3)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r1, 0x0, r6, 0x0, 0x9, 0x3)
vmsplice(r7, &(0x7f0000000480)=[{&(0x7f00000000c0)="799ec4ef60730db54ba7eb81cdd50b97bca89ccc659604f40b5b797de301a6be6ac46b55ea79409a6416533c203537834d602f6539447b188b45b069318dfe0e67bec1ab000ca6a688400daddf71dca040d97bd49ab721f872efb05db0bf554bcf4d09c190434d57d43ae2fbc5a0b1bd5194125543f0ac961aa97da42c93dfa891a90f9882b125a585f63fc944efcfac2d1d2f1284e92ba2592fc6cfce7944988e3ebcb9cc3ebeeb4a54a44cf1ce89c132988134938a2852765efdbca1e8f64b7ad582242943ad78a4b9931e57336036b47c319283213c9dff0fe05f032650bd21148414161b087cb2b20091a00fa17f0587577346", 0xf5}, {&(0x7f0000000000)="8e9c4b4dceb1f6586168ddf70f36be85544a56aaed3a5c427d13898651404168c5e43c18ebd6725adff05ac2cd4a07fcd7752b4dde7d23a4327f082f7ae4df1efd9e143229ee99", 0x47}, {&(0x7f00000001c0)="22c423c2baa4a1b96cb1ed403a2db8a072e1e87dd8dc6d799405c9c2fc9edc73030cfea90c7ac18cd1562624432d327d1e", 0x31}, {&(0x7f0000000400)="24af31297e0503110db87e40cf93d1cf9c4cf27002d7c6088487b5088ef4450890b377bc93220c3e067d9cfc52822f0d92afe773b4350ec8e7e1877e6008ab42365efaf30f731be2cd4989ffaf26e5c68d65d0a654f135a8bbbb716e58bd41fc908293cdbca944af3dc770dfeb78efd00f170b", 0x73}, {&(0x7f0000000540)="ee926c9c12c5beda0d883e5172900447d19a98485ae115545defdac2467f6dbcf5189323f3e129df203b85cb1ea4e96bc47e3a040f6739101a75434dbf36a619fd498b318025fe4bb0ae530dda25dfc66f0bc112bcc3a0f4834d14c2957324261bdd8c86c3cc07986b7da0373de650de91ba36b3cb7c8fd255f533238359fa62dbd459b946793f69a2039e18d63a0ab557cde3adf19ed209ac080e89c584669f3a3b945a", 0xa4}, {&(0x7f0000000600)="09d84de72791a3da3464c417ec4576b38f01ecaf19f3856a7394e8df465618d0ec395005049e98d065f46414b72e9140f14bf9990a99ddeed414cc9f1fde9b55f216915da70f4e4b808414504c648007db6e67a21579d3960199135b6be4a0f270611b726846d1e1c01d322bfadacf7f8a18cb7389a516dcf5165a5bcbe0db16a8df86425020443b0ea5eb630ef975055222cdb32a85b1c2419e25b5ee8041fabd32561343", 0xa5}, {&(0x7f00000006c0)="a9404e07ac4504391566b92a05c0dab77fd5118ac69a1336e72bdc94a25ee0c1f2d71135eeeea1c416cf2902f58294903d18edfcb3c75402e012975ef808c071e5394e2e39a9a13c0db3aaff758e0288e9337a72152cfacd4dee8c260b28d9b7908dd3cd778c3c72c9cb92f289e1fd55c7759ef1cf8cb8589c0cd9c81d92878a33359087bcb95924ce9645cac79170eef789379147344dc5076470a8cb3417e2f2e621851e5fae2e26c1b2de501812251188099b0654f3754de4ff1a19d10cf5a3409f90f8673722217df4ca59dcfb07ef890513b3793bd82bcc4f2a6e7cb58af8d8e3a4e4ca8f01fc6f6cec13f7753570b760a7d47c5233474fb25047f7415a07f0dcec26cd6bb9ea8d416e1e555044853cacea1a7204df479da50a9d95c52289196e59e4a8af6794d7059edb21cc9db60a6b3529cf1780e45154f420996cff55bc52f10c1b01651c5656e41d2fafd96f2fc47faf5ea8ecedbb06b8d99b6dc8f8f4f58d2ed8cdee509b024fbc7f4c00d26d1a59904493d5dd466cca306f31dce682ab52bd4b1c8aad9240fd4c768dea65078f49cd36f9c3c7d2355ea1019c2646c56ce583e50757720f72fa6e4f9bb71d2d7a7c9fcd04b70674a9da6ff3f24689d69ff6e17d0882763993180d9f3b7f898c1fe6e61038235b7283f869f2ac60fc549ebc4244b92c2324665ac34c6b8a9ec5770283802082188dcd13fc6142f6ba8407ad0b54842da2aef1c8c91b8e42f31a4c48d1c6bfdb1b05ffa9b5f0371162b768a7c5e9f28ef813112eb0b372bb39e4753a3abfbe57461b1955bf1f5cdb42a26e7a2f9fd569a3b1047f7ad25cad9e7b7240714d16be9773699941bdc6581abd3671c4b498bd53a6e60c79b452ec9d097fbb27420fb41a2c30a4ad9c413fd8e3a309473108aaa40749614cc4006ff4d47e5f19114efd9d44f039050ce87223b436c9f36e72067672d1abeca38a8559c13781127db25445fe367e2248062b45f0faf208db3fcd83986632bb6d48babb27c86f8299d5a48f4f01b0ab952a6fb51a13dca0403507baa13d4a89d9e1a4ea34e5e5f1900ac19094cd318edb2f5d70bf4a966231ae4643cb6b1d2b0e86547ec4200d02fecad111a1c90b9ad610328393ab45b008e8e1590fd05985b1f8279a67cb1b2000c11d5b473d7fab663e6a931c895905cac1bac7b2072c4d3554cd92a34942f781d21cb856024c76bb2c639e7a67980edd07004bd8e288ef92014b95c6a850e4c893df5bf8b083a13ed7dc050c626464d6a9a38b1fcb0bc67a3af74a4419ccd85fb2edfbf9fc6afbb9c4552b47c68b7b1a766b53f3290e69b5e657a2e733e5279c5b5fc27d2aab46596b827a4e4e655adf6c03f0474df2fe6f48d9985f4a8b369cb01d14f06297a2ed492f3d677a85bb9f248236cf4c4d27387f90764564e0129a03fcd9ef00de4c25002769561968cbf8e77cd1038e3c8029924c8aeb3bea6366e8b5bbeda5db111e550f2a1eba028a0b81400aa5bad6abd6569abea3799256e82c4454dd07394c3211f47b39230e60da2ce542c2a200cc16f0dc2f0b1f0cd9254cda4894c6048d902b0e529a5155977baf74cbaa1ecb6705fe207eebc2395eceb922064b82977826a36303fd6d6e3ad6578cf26c27613713f910c07b469c24222ef0bfa4758b2a23557d9ab9be486caec8559f0078763c586763d09e8838d891d80ddebc8d6bcc2f0d0015d959f799bf5aae05a989a3", 0x4cc}], 0x7, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000ae080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r8}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r9, 0x400000000000}, 0x18)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x5f, 0x5f, 0x30]}}, 0x0, 0x29, 0x0, 0x0, 0x7}, 0x28)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000300)={<r12=>r6})
sendmsg$IPSET_CMD_SAVE(r12, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x200000c0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
connect$can_j1939(r4, &(0x7f0000000000)={0x1d, 0x0, 0xf, {0x2, 0xf0}, 0x2}, 0x18)

341.056597ms ago: executing program 1 (id=1512):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15", 0x9c}], 0x1}, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000900), 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001200000000000000000000000000002000000000180100002020642500000000002020207b1af8ff00000000bf5800000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x5e)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d00010000000000000000000400008004"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9fa9060018000000000000000000000000000000020000000000"], &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xf, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)='%-5lx  \x00'}, 0xfffffffffffffda7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x21, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000007000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008d8440000400000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000008500000082000000184a0000fdffffff0000000000000000181200"/84, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008f200000f7ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x7c, &(0x7f00000014c0)=""/124, 0x41000, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0x10, 0xa2e, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001640)=[r11, r0], &(0x7f0000001680)=[{0x3, 0x2, 0x4, 0x5}], 0x10, 0xf}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r12, &(0x7f0000000040), 0x2, 0x0)

241.164759ms ago: executing program 0 (id=1513):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000d10000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000d10000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

240.975532ms ago: executing program 0 (id=1514):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$sock(r1, &(0x7f0000003240)={0x0, 0x0, 0x0}, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000024}, 0x8001)

139.806268ms ago: executing program 0 (id=1515):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000240900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

138.916373ms ago: executing program 0 (id=1516):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9", 0x3e4}], 0x2, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="bb2d5f2ea7ab02112a0aa7229b30f0575761dd9b1782b3904e300000d6e2bb53d8", @ANYRES64=0x0], 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r10, 0x0, 0x1}, 0x18)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r11=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r11, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r11}, 0x8)
syz_emit_ethernet(0xae, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
r12 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r12)

72.638839ms ago: executing program 1 (id=1517):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0xffffffff}}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_FLAGS_EXT={0x8}]}, 0x38}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x4000000}]}}, 0x0, 0x26}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000180)="6a56fd95d0fc1769fbed5513425e2d63bd6bc0b21d3e0b505ed762e749a59424ea73978f91e5affbae28f6e0d72610bf26507e1bf53b791f090b2b0ed6ae1a2d5351160ec5c4d845445bc241d1d964365dc6831dd82378e9663411b4fd3baf2b47886120d07de299b64ce097cd5f45f03af92236d3e1a4c525f66f6904f63a3d00fc000000000000000000000000be98daba9541850c898d49f0ca3b3e93796a8e16d37f1206eb17", 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x40d6, 0x4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r5, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) (async)
socket(0x1e, 0x1, 0x0) (async)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0xffffffff}}}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_FLAGS_EXT={0x8}]}, 0x38}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x4000000}]}}, 0x0, 0x26}, 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000180)="6a56fd95d0fc1769fbed5513425e2d63bd6bc0b21d3e0b505ed762e749a59424ea73978f91e5affbae28f6e0d72610bf26507e1bf53b791f090b2b0ed6ae1a2d5351160ec5c4d845445bc241d1d964365dc6831dd82378e9663411b4fd3baf2b47886120d07de299b64ce097cd5f45f03af92236d3e1a4c525f66f6904f63a3d00fc000000000000000000000000be98daba9541850c898d49f0ca3b3e93796a8e16d37f1206eb17", 0x0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x40d6, 0x4) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r5, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async)

161.803µs ago: executing program 0 (id=1518):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

0s ago: executing program 1 (id=1519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x8848000000000000, 0x40800}, 0x0)

kernel console output (not intermixed with test programs):

romiscuous mode
[   77.493739][ T7898] hsr_slave_1: entered promiscuous mode
[   77.496206][ T7898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.499303][ T7898] Cannot create hsr debugfs directory
[   77.550222][ T7961] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.553421][ T7961] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.556280][ T7961] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.559080][ T7961] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.608079][ T7965] netlink: zone id is out of range
[   77.609875][ T7965] netlink: zone id is out of range
[   77.611692][ T7965] netlink: zone id is out of range
[   77.613598][ T7965] netlink: zone id is out of range
[   77.615451][ T7965] netlink: zone id is out of range
[   77.617135][ T7965] netlink: zone id is out of range
[   77.618826][ T7965] netlink: zone id is out of range
[   77.620511][ T7965] netlink: zone id is out of range
[   77.622826][ T7965] netlink: zone id is out of range
[   77.624529][ T7965] netlink: zone id is out of range
[   77.751531][ T5831] Bluetooth: hci1: command 0x0405 tx timeout
[   77.794757][ T7975] 8021q: adding VLAN 0 to HW filter on device bond9
[   77.801823][ T7975] macvlan7: entered promiscuous mode
[   77.803614][ T7975] macvlan7: entered allmulticast mode
[   77.806223][ T7975] bond9: (slave macvlan7): Opening slave failed
[   77.936901][ T5692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.985719][ T5692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.046222][ T5692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.140032][ T5692] bridge_slave_1: left allmulticast mode
[   78.143245][ T5692] bridge_slave_1: left promiscuous mode
[   78.148132][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.163608][ T5692] bridge_slave_0: left allmulticast mode
[   78.167247][ T5692] bridge_slave_0: left promiscuous mode
[   78.170410][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.365623][ T5692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.369631][ T5692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.374145][ T5692] bond0 (unregistering): Released all slaves
[   78.639066][ T5692] hsr_slave_0: left promiscuous mode
[   78.643675][ T5692] hsr_slave_1: left promiscuous mode
[   78.651437][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.654101][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.664803][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.667139][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.685571][ T5692] veth1_macvtap: left promiscuous mode
[   78.687411][ T5692] veth0_macvtap: left promiscuous mode
[   78.689269][ T5692] veth1_vlan: left promiscuous mode
[   78.691040][ T5692] veth0_vlan: left promiscuous mode
[   78.937662][ T5692] team0 (unregistering): Port device team_slave_1 removed
[   78.956870][ T5692] team0 (unregistering): Port device team_slave_0 removed
[   79.042993][ T5831] Bluetooth: hci2: command tx timeout
[   79.121467][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   79.200242][ T8019] 8021q: adding VLAN 0 to HW filter on device bond7
[   79.205802][ T8020] macvlan7: entered promiscuous mode
[   79.207567][ T8020] macvlan7: entered allmulticast mode
[   79.210003][ T8020] bond7: (slave macvlan7): Opening slave failed
[   79.277897][ T7898] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.294687][ T7898] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.299267][ T7898] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.306632][ T7898] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.405096][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.421211][ T7898] 8021q: adding VLAN 0 to HW filter on device team0
[   79.430972][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.433313][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.455383][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.458274][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.548171][ T8061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.554257][ T8061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.559060][ T8061] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   79.563662][ T8061] bond0 (unregistering): (slave bond2): Releasing backup interface
[   79.567208][ T8061] bond0 (unregistering): Released all slaves
[   79.663810][ T7898] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.698165][ T7898] veth0_vlan: entered promiscuous mode
[   79.705221][ T7898] veth1_vlan: entered promiscuous mode
[   79.728456][ T7898] veth0_macvtap: entered promiscuous mode
[   79.733318][ T7898] veth1_macvtap: entered promiscuous mode
[   79.740915][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.754090][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.760123][ T7898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.763923][ T7898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.767202][ T7898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.770353][ T7898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.836036][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.838607][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.841316][ T8082] delete_channel: no stack
[   79.845051][ T8082] delete_channel: no stack
[   79.857588][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.860136][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.904521][ T8087] 8021q: adding VLAN 0 to HW filter on device bond10
[   79.927903][ T8087] macvlan8: entered promiscuous mode
[   79.929712][ T8087] macvlan8: entered allmulticast mode
[   79.932242][ T8087] bond10: (slave macvlan8): Opening slave failed
[   80.030584][ T8099] xt_bpf: check failed: parse error
[   80.034469][ T8097] netlink: 'syz.0.702': attribute type 6 has an invalid length.
[   80.075781][ T8104] netlink: 'syz.1.705': attribute type 7 has an invalid length.
[   80.083271][ T8104] netlink: 'syz.1.705': attribute type 8 has an invalid length.
[   80.127118][ T8107] netlink: 'syz.0.706': attribute type 12 has an invalid length.
[   80.348361][ T8124] netlink: 'syz.1.713': attribute type 6 has an invalid length.
[   80.351019][ T8124] netlink: 'syz.1.713': attribute type 5 has an invalid length.
[   80.517144][ T8129] netlink: 'syz.1.715': attribute type 1 has an invalid length.
[   80.529712][ T8129] 8021q: adding VLAN 0 to HW filter on device bond11
[   80.537908][ T8129] bond11: (slave gretap1): making interface the new active one
[   80.540894][ T8129] bond11: (slave gretap1): Enslaving as an active interface with an up link
[   80.649153][ T8138] lo speed is unknown, defaulting to 1000
[   80.970382][ T8141] netlink: 'syz.1.718': attribute type 6 has an invalid length.
[   81.036133][    T9] cfg80211: failed to load regulatory.db
[   81.176042][ T8148] lo: entered promiscuous mode
[   81.178383][ T8148] __nla_validate_parse: 78 callbacks suppressed
[   81.178391][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'.
[   81.355462][ T8147] lo: left promiscuous mode
[   81.383760][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'.
[   81.398665][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.409648][ T8150] macvlan7: entered promiscuous mode
[   81.412693][ T8150] macvlan7: entered allmulticast mode
[   81.416007][ T8150] bond0: (slave macvlan7): Opening slave failed
[   81.520596][ T5692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.529590][ T8155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.724'.
[   81.535408][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'.
[   81.538278][ T8155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.724'.
[   81.541098][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'.
[   81.547135][ T8155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.724'.
[   82.130776][ T8160] siw: device registration error -23
[   82.299066][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.304925][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.307565][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.311213][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.317952][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.363708][ T8179] lo speed is unknown, defaulting to 1000
[   82.433647][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'.
[   82.497017][ T8179] chnl_net:caif_netlink_parms(): no params data found
[   82.542734][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'.
[   82.546028][ T8206] netlink: 'syz.1.737': attribute type 7 has an invalid length.
[   82.548632][ T8206] netlink: 'syz.1.737': attribute type 8 has an invalid length.
[   82.549347][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.551174][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'.
[   82.557228][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.559687][ T8179] bridge_slave_0: entered allmulticast mode
[   82.563209][ T8179] bridge_slave_0: entered promiscuous mode
[   82.572917][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.575562][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.577789][ T8179] bridge_slave_1: entered allmulticast mode
[   82.580389][ T8179] bridge_slave_1: entered promiscuous mode
[   82.599391][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.605526][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.627349][ T8179] team0: Port device team_slave_0 added
[   82.630488][ T8179] team0: Port device team_slave_1 added
[   82.650818][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.653146][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.660900][ T8179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.667077][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.669344][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.677866][ T8179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.705116][ T8179] hsr_slave_0: entered promiscuous mode
[   82.707549][ T8179] hsr_slave_1: entered promiscuous mode
[   82.710249][ T8179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.712969][ T8179] Cannot create hsr debugfs directory
[   82.747731][ T8210] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   82.844955][ T5692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.850903][ T8215] netlink: 'syz.1.740': attribute type 3 has an invalid length.
[   83.100066][ T5692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.150546][ T5692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.271966][ T5692] bridge_slave_1: left allmulticast mode
[   83.273765][ T5692] bridge_slave_1: left promiscuous mode
[   83.276159][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.280417][ T5692] bridge_slave_0: left allmulticast mode
[   83.286035][ T5692] bridge_slave_0: left promiscuous mode
[   83.287935][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.489781][ T5692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.495311][ T5692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.499010][ T5692] bond0 (unregistering): Released all slaves
[   83.781079][ T5692] hsr_slave_0: left promiscuous mode
[   83.786720][ T5692] hsr_slave_1: left promiscuous mode
[   83.788805][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.791307][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.794812][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.800192][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.819317][ T5692] veth1_macvtap: left promiscuous mode
[   83.821156][ T5692] veth0_macvtap: left promiscuous mode
[   83.824658][ T5692] veth1_vlan: left promiscuous mode
[   83.826795][ T5692] veth0_vlan: left promiscuous mode
[   84.059692][ T5692] team0 (unregistering): Port device team_slave_1 removed
[   84.078854][ T5692] team0 (unregistering): Port device team_slave_0 removed
[   84.343851][ T8179] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.376623][ T8179] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.390656][ T8179] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.393756][   T54] Bluetooth: hci2: command tx timeout
[   84.412779][ T8179] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.488041][ T8300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.499459][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.504777][ T8301] tipc: Resetting bearer <eth:syzkaller0>
[   84.506936][ T8300] netlink: 'syz.0.762': attribute type 18 has an invalid length.
[   84.509666][ T8301] netlink: 'syz.0.762': attribute type 18 has an invalid length.
[   84.534026][ T8179] 8021q: adding VLAN 0 to HW filter on device team0
[   84.540167][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.542621][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.562005][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.564432][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.765813][ T8179] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.794905][ T8179] veth0_vlan: entered promiscuous mode
[   84.808615][ T8179] veth1_vlan: entered promiscuous mode
[   84.826764][ T8179] veth0_macvtap: entered promiscuous mode
[   84.831063][ T8179] veth1_macvtap: entered promiscuous mode
[   84.840128][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.846200][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.850887][ T8179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.853939][ T8179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.856707][ T8179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.859563][ T8179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.910936][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.916797][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.931611][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.934999][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.550729][ T5692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.263418][ T8341] __nla_validate_parse: 28 callbacks suppressed
[   87.263428][ T8341] netlink: 24960 bytes leftover after parsing attributes in process `syz.0.771'.
[   87.297810][ T8343] netlink: 52 bytes leftover after parsing attributes in process `syz.0.772'.
[   87.300601][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[   87.304661][ T8343] netlink: 52 bytes leftover after parsing attributes in process `syz.0.772'.
[   87.307524][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[   87.310235][ T8343] netlink: 52 bytes leftover after parsing attributes in process `syz.0.772'.
[   87.361769][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.364760][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.367224][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.369831][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.373014][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.397648][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'.
[   87.413075][ T8351] lo speed is unknown, defaulting to 1000
[   87.425537][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'.
[   87.649157][ T8351] chnl_net:caif_netlink_parms(): no params data found
[   87.652434][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'.
[   87.708163][ T8373] 8021q: adding VLAN 0 to HW filter on device bond8
[   87.716223][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'.
[   87.719789][ T8376] IPv6: NLM_F_REPLACE set, but no existing node found!
[   87.725616][ T8377] macvlan0: entered promiscuous mode
[   87.728228][ T8377] macvlan0: entered allmulticast mode
[   87.733101][ T8377] bond8: (slave macvlan0): Opening slave failed
[   87.733558][ T8376] Bluetooth: hci1: Opcode 0x080f failed: -4
[   87.776488][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.778826][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.781120][ T8351] bridge_slave_0: entered allmulticast mode
[   87.783922][ T8351] bridge_slave_0: entered promiscuous mode
[   87.784218][ T8382] netlink: 'syz.1.781': attribute type 5 has an invalid length.
[   87.787154][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.790749][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.794891][ T8351] bridge_slave_1: entered allmulticast mode
[   87.805749][ T8351] bridge_slave_1: entered promiscuous mode
[   87.836033][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.841050][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.872798][ T8351] team0: Port device team_slave_0 added
[   87.875941][ T8351] team0: Port device team_slave_1 added
[   87.917171][ T8393] netlink: 'syz.1.785': attribute type 1 has an invalid length.
[   87.920043][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.923535][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.936563][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.951581][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.953812][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.962021][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.000803][ T8351] hsr_slave_0: entered promiscuous mode
[   88.004582][ T8351] hsr_slave_1: entered promiscuous mode
[   88.006647][ T8351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.008954][ T8351] Cannot create hsr debugfs directory
[   88.057154][ T8406] 8021q: adding VLAN 0 to HW filter on device bond9
[   88.095681][ T8409] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   88.100660][ T8411] syz.0.791 uses old SIOCAX25GETINFO
[   88.123219][ T5692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.163103][ T5692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.163512][ T8411] ip6t_srh: unknown srh invflags 4449
[   88.191171][ T8416] netlink: 'syz.0.792': attribute type 3 has an invalid length.
[   88.225770][ T5692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.344497][ T5692] bridge_slave_1: left allmulticast mode
[   88.346383][ T5692] bridge_slave_1: left promiscuous mode
[   88.348305][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.352914][ T5692] bridge_slave_0: left allmulticast mode
[   88.354680][ T5692] bridge_slave_0: left promiscuous mode
[   88.356475][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.592707][ T5692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.596881][ T5692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.600394][ T5692] bond0 (unregistering): Released all slaves
[   88.818592][ T5692] hsr_slave_0: left promiscuous mode
[   88.820780][ T5692] hsr_slave_1: left promiscuous mode
[   88.824284][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.826739][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.829509][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.834100][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.847050][ T5692] veth1_macvtap: left promiscuous mode
[   88.848937][ T5692] veth0_macvtap: left promiscuous mode
[   88.850754][ T5692] veth1_vlan: left promiscuous mode
[   88.852628][ T5692] veth0_vlan: left promiscuous mode
[   89.085836][ T5692] team0 (unregistering): Port device team_slave_1 removed
[   89.104510][ T5692] team0 (unregistering): Port device team_slave_0 removed
[   89.358545][ T8351] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.369066][ T8351] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.374632][ T8351] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.383662][ T8351] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.434616][   T54] Bluetooth: hci2: command tx timeout
[   89.494193][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.505011][ T8351] 8021q: adding VLAN 0 to HW filter on device team0
[   89.509508][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.511841][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.519323][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.521649][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.620391][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.647690][ T8351] veth0_vlan: entered promiscuous mode
[   89.653776][ T8351] veth1_vlan: entered promiscuous mode
[   89.672839][ T8351] veth0_macvtap: entered promiscuous mode
[   89.676621][ T8351] veth1_macvtap: entered promiscuous mode
[   89.690506][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.698006][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.705463][ T8351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.708189][ T8351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.710850][ T8351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.714016][ T8351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.751688][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[   89.768904][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.776390][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.783557][ T8490] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.792716][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.798587][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.348346][ T8497] netlink: 'syz.0.814': attribute type 10 has an invalid length.
[   90.351126][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.353778][ T8497] bridge0: port 1(1x9) entered disabled state
[   90.692910][ T8528] 8021q: adding VLAN 0 to HW filter on device bond10
[   90.702812][ T8528] macvlan0: entered promiscuous mode
[   90.704489][ T8528] macvlan0: entered allmulticast mode
[   90.706783][ T8528] bond10: (slave macvlan0): Opening slave failed
[   90.733629][ T8533] lo speed is unknown, defaulting to 1000
[   90.971921][ T8541] nbd0: detected capacity change from 0 to 63
[   90.992697][ T8546] block nbd0: Receive control failed (result -104)
[   91.143170][ T8564] 8021q: adding VLAN 0 to HW filter on device bond11
[   91.149534][ T8564] macvlan0: entered promiscuous mode
[   91.151322][ T8564] macvlan0: entered allmulticast mode
[   91.153632][ T8564] bond11: (slave macvlan0): Opening slave failed
[   91.213733][ T8571] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   91.256989][ T8575] IPVS: set_ctl: invalid protocol: 49 172.20.20.170:20000
[   91.943829][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.282392][   T97] block nbd0: Connection timed out, retrying (0/1 alive)
[   93.284952][   T97] block nbd0: Connection timed out, retrying (0/1 alive)
[   93.287164][   T97] block nbd0: Connection timed out, retrying (0/1 alive)
[   93.289356][   T97] block nbd0: Connection timed out, retrying (0/1 alive)
[   93.291862][   T97] block nbd0: Dead connection, failed to find a fallback
[   93.294113][   T97] block nbd0: shutting down sockets
[   93.295927][   T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.298938][   T97] Buffer I/O error on dev nbd0, logical block 3, async page read
[   93.301621][   T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.304477][   T97] Buffer I/O error on dev nbd0, logical block 2, async page read
[   93.306966][   T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.309784][   T97] Buffer I/O error on dev nbd0, logical block 1, async page read
[   93.312577][   T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.315444][   T97] Buffer I/O error on dev nbd0, logical block 0, async page read
[   93.318583][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.321677][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read
[   93.324338][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.327176][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read
[   93.329700][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.374459][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read
[   93.377093][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.379944][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read
[   93.389462][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.392420][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read
[   93.394894][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.397678][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read
[   93.402448][ T5829] ldm_validate_partition_table(): Disk read failed.
[   93.405992][ T5829] Dev nbd0: unable to read RDB block 0
[   93.408834][ T5829]  nbd0: unable to read partition table
[   93.413771][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.420568][ T5829] ldm_validate_partition_table(): Disk read failed.
[   93.423531][ T5829] Dev nbd0: unable to read RDB block 0
[   93.426087][ T5829]  nbd0: unable to read partition table
[   93.603185][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.752828][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.031665][ T5857] bridge_slave_1: left allmulticast mode
[   94.033466][ T5857] bridge_slave_1: left promiscuous mode
[   94.035284][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.121919][ T5857] bridge_slave_0: left allmulticast mode
[   94.123726][ T5857] bridge_slave_0: left promiscuous mode
[   94.125558][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.111552][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.753501][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.862824][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.901928][ T5857] bond0 (unregistering): Released all slaves
[   96.761432][ T5857] hsr_slave_0: left promiscuous mode
[   96.772441][ T5857] hsr_slave_1: left promiscuous mode
[   96.781773][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.784238][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.851818][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.854238][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.926314][ T5857] veth1_macvtap: left promiscuous mode
[   96.928091][ T5857] veth0_macvtap: left promiscuous mode
[   96.929833][ T5857] veth1_vlan: left promiscuous mode
[   97.011477][ T5857] veth0_vlan: left promiscuous mode
[   99.882117][ T5857] team0 (unregistering): Port device team_slave_1 removed
[   99.922586][ T8610] __nla_validate_parse: 61 callbacks suppressed
[   99.922597][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'.
[   99.927384][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'.
[  100.413157][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  100.492973][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'.
[  100.632523][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'.
[  101.066742][ T8617] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  101.883974][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  101.889936][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  101.893930][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  101.897053][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  101.899750][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.930292][ T8683] lo speed is unknown, defaulting to 1000
[  102.079562][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'.
[  102.079635][ T8683] chnl_net:caif_netlink_parms(): no params data found
[  102.156039][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.158652][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.161160][ T8683] bridge_slave_0: entered allmulticast mode
[  102.164352][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'.
[  102.164861][ T8683] bridge_slave_0: entered promiscuous mode
[  102.167136][ T8712] netlink: 'syz.1.867': attribute type 3 has an invalid length.
[  102.167144][ T8712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.867'.
[  102.176256][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.178705][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.181279][ T8683] bridge_slave_1: entered allmulticast mode
[  102.191680][ T8683] bridge_slave_1: entered promiscuous mode
[  102.216444][ T8683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.226532][ T8683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.262334][ T8683] team0: Port device team_slave_0 added
[  102.266153][ T8683] team0: Port device team_slave_1 added
[  102.283384][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.285953][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.294007][ T8683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.298888][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.301262][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.309727][ T8683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.363487][ T8683] hsr_slave_0: entered promiscuous mode
[  102.365944][ T8683] hsr_slave_1: entered promiscuous mode
[  102.368167][ T8683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.370712][ T8683] Cannot create hsr debugfs directory
[  102.586401][ T8739] netlink: 'syz.1.873': attribute type 10 has an invalid length.
[  102.629431][ T8743] siw: device registration error -23
[  102.777847][ T8754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'.
[  102.788265][ T8754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.877'.
[  102.829777][ T8683] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.849534][ T8683] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.855290][ T8683] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.866893][ T8683] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  102.894347][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.896712][ T8683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.899046][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.901283][ T8683] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.919366][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'.
[  102.967628][ T8683] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.977680][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.981034][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.991289][ T8683] 8021q: adding VLAN 0 to HW filter on device team0
[  103.001202][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.003478][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.013214][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.015540][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.144807][ T8796] 8021q: adding VLAN 0 to HW filter on device bond12
[  103.152687][ T8796] macvlan0: entered promiscuous mode
[  103.154398][ T8796] macvlan0: entered allmulticast mode
[  103.156635][ T8796] bond12: (slave macvlan0): Opening slave failed
[  103.208633][ T8683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.237076][ T8809] xfrm2: entered promiscuous mode
[  103.238689][ T8809] xfrm2: entered allmulticast mode
[  103.265576][ T8809] xt_hashlimit: size too large, truncated to 1048576
[  103.270668][ T8683] veth0_vlan: entered promiscuous mode
[  103.289782][ T8683] veth1_vlan: entered promiscuous mode
[  103.333844][ T8683] veth0_macvtap: entered promiscuous mode
[  103.340033][ T8683] veth1_macvtap: entered promiscuous mode
[  103.359474][ T8809] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  103.364119][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.378944][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.393238][ T8683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.396127][ T8683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.398806][ T8683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.414294][ T8683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.490669][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.493905][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.522450][ T8828] batadv_slave_1: entered allmulticast mode
[  103.527655][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.527723][ T8828] netlink: 'syz.1.891': attribute type 1 has an invalid length.
[  103.530237][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.623125][ T8835] netlink: 'syz.1.892': attribute type 1 has an invalid length.
[  103.629560][ T8835] netlink: 'syz.1.892': attribute type 2 has an invalid length.
[  103.647867][ T8838] net_ratelimit: 9 callbacks suppressed
[  103.647876][ T8838] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.706820][ T8847] netlink: 'syz.1.896': attribute type 3 has an invalid length.
[  103.708378][ T8845] xt_l2tp: v2 doesn't support IP mode
[  103.709208][ T8847] netlink: 'syz.1.896': attribute type 7 has an invalid length.
[  103.716940][ T8847] netlink: 'syz.1.896': attribute type 8 has an invalid length.
[  104.140482][ T8891] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 49751 - 0
[  104.144424][ T8891] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 49751 - 0
[  104.147151][ T8891] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 49751 - 0
[  104.149995][ T8891] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 49751 - 0
[  104.155032][ T8891] geneve2: entered promiscuous mode
[  104.156668][ T8891] geneve2: entered allmulticast mode
[  104.528555][ T8932] netlink: 'syz.0.918': attribute type 10 has an invalid length.
[  104.539487][ T8932] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  104.579716][ T8936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
acpid: input device has been disconnected, fd 9
[  104.700856][   T33] audit: type=1800 audit(1752299096.948:2): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.921" name="memory.events" dev="tmpfs" ino=2016 res=0 errno=0
[  104.980835][ T8958] xt_SECMARK: invalid mode: 0
[  105.100738][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.028867][ T8968] 8021q: VLANs not supported on vxcan1
[  106.031297][ T8968] __nla_validate_parse: 17 callbacks suppressed
[  106.031305][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'.
[  106.038359][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.930'.
[  106.056879][ T8973] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  106.069555][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'.
[  106.104677][ T8975] 8021q: adding VLAN 0 to HW filter on device bond13
[  106.104783][ T8978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.932'.
[  106.109502][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  106.112613][ T8975] macvlan0: entered promiscuous mode
[  106.114599][ T8975] macvlan0: entered allmulticast mode
[  106.116927][ T8975] bond13: (slave macvlan0): Opening slave failed
[  106.121170][ T8978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.932'.
[  106.125012][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  106.127848][ T8978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.932'.
[  106.176546][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'.
[  106.189430][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.194507][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.198189][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.208023][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.211839][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.239180][ T8981] lo speed is unknown, defaulting to 1000
[  106.348604][ T8981] chnl_net:caif_netlink_parms(): no params data found
[  106.405040][ T9009] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  106.410193][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.411744][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'.
[  106.413248][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.419023][ T8981] bridge_slave_0: entered allmulticast mode
[  106.423341][ T8981] bridge_slave_0: entered promiscuous mode
[  106.436306][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.438604][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.440879][ T8981] bridge_slave_1: entered allmulticast mode
[  106.444254][ T8981] bridge_slave_1: entered promiscuous mode
[  106.472442][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.477448][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.499931][ T8981] team0: Port device team_slave_0 added
[  106.505253][ T8981] team0: Port device team_slave_1 added
[  106.532563][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.534766][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.550423][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.557826][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.560866][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.571275][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.603252][ T8981] hsr_slave_0: entered promiscuous mode
[  106.605803][ T8981] hsr_slave_1: entered promiscuous mode
[  106.607934][ T8981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.610373][ T8981] Cannot create hsr debugfs directory
[  106.716759][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.727788][ T5872] lo speed is unknown, defaulting to 1000
[  106.734051][ T5872] lo speed is unknown, defaulting to 1000
[  106.820074][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.880776][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.993280][   T12] bridge_slave_1: left allmulticast mode
[  106.995062][   T12] bridge_slave_1: left promiscuous mode
[  106.996887][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.003065][   T12] bridge_slave_0: left allmulticast mode
[  107.012438][   T12] bridge_slave_0: left promiscuous mode
[  107.015671][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.264930][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.270805][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.277869][   T12] bond0 (unregistering): Released all slaves
[  107.329431][ T9035] validate_nla: 4 callbacks suppressed
[  107.329440][ T9035] netlink: 'syz.1.948': attribute type 12 has an invalid length.
[  107.603018][   T12] hsr_slave_0: left promiscuous mode
[  107.611542][   T12] hsr_slave_1: left promiscuous mode
[  107.613967][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.617366][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.620000][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.625888][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.639560][   T12] veth1_macvtap: left promiscuous mode
[  107.641290][   T12] veth0_macvtap: left promiscuous mode
[  107.643109][   T12] veth1_vlan: left promiscuous mode
[  107.644744][   T12] veth0_vlan: left promiscuous mode
[  107.866258][   T12] team0 (unregistering): Port device team_slave_1 removed
[  107.887059][   T12] team0 (unregistering): Port device team_slave_0 removed
[  108.156796][ T9060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.168313][ T9061] syzkaller0: entered promiscuous mode
[  108.170122][ T9061] syzkaller0: entered allmulticast mode
[  108.175597][ T9069] tipc: Resetting bearer <eth:syzkaller0>
[  108.195491][ T9054] tipc: Resetting bearer <eth:syzkaller0>
[  108.210651][ T9054] tipc: Disabling bearer <eth:syzkaller0>
[  108.218426][ T8981] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.224631][ T8981] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.231571][   T54] Bluetooth: hci2: command tx timeout
[  108.235326][ T8981] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.246597][ T8981] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.304721][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.327582][ T8981] 8021q: adding VLAN 0 to HW filter on device team0
[  108.357949][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.360247][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.367594][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.369811][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.390215][ T8981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.402809][ T8981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.451936][ T9088] nbd1: detected capacity change from 0 to 127
[  108.460959][   T55] block nbd1: Receive control failed (result -32)
[  108.465923][ T5829] block nbd1: Dead connection, failed to find a fallback
[  108.468123][ T5829] block nbd1: shutting down sockets
[  108.469725][ T5829] blk_print_req_error: 138 callbacks suppressed
[  108.469732][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.487423][ T5829] buffer_io_error: 138 callbacks suppressed
[  108.487432][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read
[  108.502274][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.505087][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read
[  108.507572][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.516714][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read
[  108.519227][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.533988][ T9107] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  108.537023][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read
[  108.539699][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.561432][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read
[  108.564086][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.578253][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read
[  108.581236][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.584264][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read
[  108.586811][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.589639][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read
[  108.600069][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.612121][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read
[  108.614657][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.617463][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read
[  108.620898][ T5829] ldm_validate_partition_table(): Disk read failed.
[  108.625250][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.655340][ T5829] Dev nbd1: unable to read RDB block 0
[  108.657933][ T5829]  nbd1: unable to read partition table
[  108.660979][ T8981] veth0_vlan: entered promiscuous mode
[  108.667380][ T8981] veth1_vlan: entered promiscuous mode
[  108.680115][ T5829] ldm_validate_partition_table(): Disk read failed.
[  108.690596][ T8981] veth0_macvtap: entered promiscuous mode
[  108.696328][ T8981] veth1_macvtap: entered promiscuous mode
[  108.705281][ T5829] Dev nbd1: unable to read RDB block 0
[  108.707857][ T5829]  nbd1: unable to read partition table
[  108.725391][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.735928][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.739586][ T8981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.748989][ T8981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.765525][ T8981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.772702][ T8981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.042258][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.044733][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.058223][ T9191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.060706][ T9191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.783774][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.788582][ T9268] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  111.793342][ T9268] netlink: 'syz.1.985': attribute type 11 has an invalid length.
[  111.795740][ T9268] __nla_validate_parse: 12 callbacks suppressed
[  111.795746][ T9268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.985'.
[  111.869600][ T9274] C: renamed from lo
[  111.879002][ T9274] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  111.887382][ T9274] netlink: 100 bytes leftover after parsing attributes in process `syz.1.988'.
[  111.896612][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.899726][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.905989][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.909588][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.912767][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.932791][ T9275] lo speed is unknown, defaulting to 1000
[  111.947762][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'.
[  111.950777][ T9280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.990'.
[  112.011241][ T9275] chnl_net:caif_netlink_parms(): no params data found
[  112.100536][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.104002][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.106267][ T9275] bridge_slave_0: entered allmulticast mode
[  112.108812][ T9275] bridge_slave_0: entered promiscuous mode
[  112.113199][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.115573][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.117909][ T9275] bridge_slave_1: entered allmulticast mode
[  112.120442][ T5872] IPVS: starting estimator thread 0...
[  112.120610][ T9275] bridge_slave_1: entered promiscuous mode
[  112.145458][ T9275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.150858][ T9275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.178293][ T9301] syzkaller1: tun_chr_ioctl cmd 1074025672
[  112.180330][ T9301] syzkaller1: ignored: set checksum enabled
[  112.189337][ T9275] team0: Port device team_slave_0 added
[  112.194601][ T9275] team0: Port device team_slave_1 added
[  112.210394][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.220159][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.221592][ T9297] IPVS: using max 78 ests per chain, 187200 per kthread
[  112.228869][ T9275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.235235][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.237486][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.246376][ T9275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.274502][ T9275] hsr_slave_0: entered promiscuous mode
[  112.276781][ T9275] hsr_slave_1: entered promiscuous mode
[  112.282656][ T9275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.285067][ T9275] Cannot create hsr debugfs directory
[  112.300323][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.348420][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.422414][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.500286][ T5857] bridge_slave_1: left allmulticast mode
[  112.505026][ T5857] bridge_slave_1: left promiscuous mode
[  112.508095][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.511715][ T5857] bridge_slave_0: left allmulticast mode
[  112.513550][ T5857] bridge_slave_0: left promiscuous mode
[  112.515450][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.690674][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.694972][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.698523][ T5857] bond0 (unregistering): Released all slaves
[  113.005582][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.015525][ T9341] lo speed is unknown, defaulting to 1000
[  113.068067][ T5857] hsr_slave_0: left promiscuous mode
[  113.070219][ T5857] hsr_slave_1: left promiscuous mode
[  113.073713][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.076280][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.079054][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.082014][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.094470][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.098343][ T5857] veth1_macvtap: left promiscuous mode
[  113.100168][ T5857] veth0_macvtap: left promiscuous mode
[  113.102635][ T5857] veth1_vlan: left promiscuous mode
[  113.104813][ T5857] veth0_vlan: left promiscuous mode
[  113.107896][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.357701][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  113.376848][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  113.621255][ T9334] syz.0.1002 (9334) used greatest stack depth: 19848 bytes left
[  113.664493][ T9275] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  113.675908][ T9275] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  113.686661][ T9275] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.704067][ T9358] x_tables: duplicate underflow at hook 2
[  113.704067][ T9360] x_tables: duplicate underflow at hook 2
[  113.708046][ T9275] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.715896][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'.
[  113.808602][ T9378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1010'.
[  113.819233][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  113.825437][ T9378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1010'.
[  113.828388][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  113.832555][ T9378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1010'.
[  113.849235][ T9275] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.860988][ T9275] 8021q: adding VLAN 0 to HW filter on device team0
[  113.868079][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.870392][ T9191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.880148][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.882444][ T9191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.967506][ T9388] tc_dump_action: action bad kind
[  113.970185][ T9388] netlink: 'syz.0.1013': attribute type 58 has an invalid length.
[  114.002323][ T5831] Bluetooth: hci2: command tx timeout
[  114.069977][ T9275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.113054][ T9275] veth0_vlan: entered promiscuous mode
[  114.136831][ T9275] veth1_vlan: entered promiscuous mode
[  114.164793][ T9275] veth0_macvtap: entered promiscuous mode
[  114.175422][ T9275] veth1_macvtap: entered promiscuous mode
[  114.194652][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.200731][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.205842][ T9275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.208666][ T9275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.211979][ T9275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.215926][ T9275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.257882][ T9242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.261495][ T9242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.277613][ T9243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.280158][ T9243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.269256][ T9453] netlink: 'syz.1.1034': attribute type 7 has an invalid length.
[  115.272375][ T9453] netlink: 'syz.1.1034': attribute type 8 has an invalid length.
[  115.707819][ T9501] 8021q: VLANs not supported on wg1
[  115.760381][ T9505] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.838520][ T9511] netlink: 'syz.1.1059': attribute type 10 has an invalid length.
[  115.844094][ T9511] veth0_vlan: left promiscuous mode
[  115.847093][ T9511] veth0_vlan: entered promiscuous mode
[  115.850054][ T9511] team0: Device veth0_vlan failed to register rx_handler
[  115.855793][ T9511] tipc: Resetting bearer <eth:vlan0>
[  115.950012][ T9521] netlink: 'syz.1.1063': attribute type 12 has an invalid length.
[  115.976022][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.123544][ T9533] netlink: 'syz.1.1066': attribute type 3 has an invalid length.
[  117.143173][ T9536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.183550][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  117.187139][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  117.189801][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  117.194840][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  117.201617][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  117.218578][ T9544] __nla_validate_parse: 30 callbacks suppressed
[  117.218588][ T9544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[  117.225013][ T9544] netlink: 'syz.0.1071': attribute type 7 has an invalid length.
[  117.225726][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.227574][ T9544] netlink: 'syz.0.1071': attribute type 8 has an invalid length.
[  117.235459][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'.
[  117.250632][ T9540] lo speed is unknown, defaulting to 1000
[  117.360012][ T9547] lo speed is unknown, defaulting to 1000
[  117.384152][ T9540] chnl_net:caif_netlink_parms(): no params data found
[  117.424836][ T9559] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1075'.
[  117.427933][ T9559] netlink: zone id is out of range
[  117.429632][ T9559] netlink: zone id is out of range
[  117.442937][ T9559] netlink: get zone limit has 8 unknown bytes
[  117.446975][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  117.505223][ T9565] x_tables: duplicate underflow at hook 3
[  117.515445][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.517849][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.520266][ T9540] bridge_slave_0: entered allmulticast mode
[  117.532375][ T9540] bridge_slave_0: entered promiscuous mode
[  117.535783][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.538176][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.540641][ T9540] bridge_slave_1: entered allmulticast mode
[  117.548455][ T9540] bridge_slave_1: entered promiscuous mode
[  117.566763][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.590260][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.595031][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.616123][ T9540] team0: Port device team_slave_0 added
[  117.625671][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.635141][ T9540] team0: Port device team_slave_1 added
[  117.651022][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.653723][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.661974][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.666219][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.668428][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.676681][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.699953][ T9540] hsr_slave_0: entered promiscuous mode
[  117.702326][ T9540] hsr_slave_1: entered promiscuous mode
[  117.704394][ T9540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.706738][ T9540] Cannot create hsr debugfs directory
[  117.764706][   T12] bridge_slave_1: left allmulticast mode
[  117.766500][   T12] bridge_slave_1: left promiscuous mode
[  117.768347][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.773343][   T12] bridge_slave_0: left allmulticast mode
[  117.775176][   T12] bridge_slave_0: left promiscuous mode
[  117.776965][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.970108][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.974628][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.978277][   T12] bond0 (unregistering): Released all slaves
[  118.209591][ T9580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'.
[  118.216943][ T9580] netlink: 'syz.1.1078': attribute type 7 has an invalid length.
[  118.220001][ T9580] netlink: 'syz.1.1078': attribute type 8 has an invalid length.
[  118.222605][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'.
[  118.248737][   T12] hsr_slave_0: left promiscuous mode
[  118.250933][   T12] hsr_slave_1: left promiscuous mode
[  118.253840][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.256275][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.258922][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.262955][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.274393][   T12] veth1_macvtap: left promiscuous mode
[  118.276247][   T12] veth0_macvtap: left promiscuous mode
[  118.278115][   T12] veth1_vlan: left promiscuous mode
[  118.279934][   T12] veth0_vlan: left promiscuous mode
[  118.390262][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'.
[  118.394102][ T9585] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1079'.
[  118.564964][   T12] team0 (unregistering): Port device team_slave_1 removed
[  118.584967][   T12] team0 (unregistering): Port device team_slave_0 removed
[  119.008955][ T9540] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  119.023569][ T9540] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  119.028326][ T9540] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  119.030338][ T9605] sctp: [Deprecated]: syz.0.1085 (pid 9605) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.030338][ T9605] Use struct sctp_sack_info instead
[  119.038590][ T9540] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  119.045475][ T9605] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1085'.
[  119.075635][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'.
[  119.079360][ T9613] netlink: 'syz.0.1086': attribute type 7 has an invalid length.
[  119.082817][ T9613] netlink: 'syz.0.1086': attribute type 8 has an invalid length.
[  119.125492][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.138305][ T9540] 8021q: adding VLAN 0 to HW filter on device team0
[  119.146368][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.149283][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.157406][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.160314][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.273183][   T54] Bluetooth: hci2: command tx timeout
[  119.287442][ T9626] can: request_module (can-proto-5) failed.
[  119.326217][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.375729][ T9540] veth0_vlan: entered promiscuous mode
[  119.401471][ T9640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.405155][ T9641] tipc: Resetting bearer <eth:syzkaller0>
[  119.408687][ T9540] veth1_vlan: entered promiscuous mode
[  119.435932][ T9638] tipc: Disabling bearer <eth:syzkaller0>
[  119.455734][ T9540] veth0_macvtap: entered promiscuous mode
[  119.459689][ T9540] veth1_macvtap: entered promiscuous mode
[  119.468197][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.478469][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.483930][ T9540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.486764][ T9540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.489580][ T9540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.493664][ T9540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.507070][ T9644] openvswitch: netlink: Missing key (keys=40, expected=100)
[  119.551169][ T9240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.559769][ T9240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.589758][ T9242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.593017][ T9242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.655539][ T9668] netlink: 'syz.1.1100': attribute type 7 has an invalid length.
[  119.658018][ T9668] netlink: 'syz.1.1100': attribute type 8 has an invalid length.
[  119.664181][ T9666] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  119.788905][ T9681] netlink: 'syz.1.1104': attribute type 11 has an invalid length.
[  119.793270][ T9681] netlink: 'syz.1.1104': attribute type 11 has an invalid length.
[  119.924160][ T9703] netlink: 'syz.1.1110': attribute type 7 has an invalid length.
[  119.926682][ T9703] netlink: 'syz.1.1110': attribute type 8 has an invalid length.
[  120.043173][   T33] audit: type=1107 audit(1752299112.298:3): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  120.260328][ T9732] netlink: 'syz.1.1121': attribute type 7 has an invalid length.
[  120.264520][ T9732] netlink: 'syz.1.1121': attribute type 8 has an invalid length.
[  120.973176][ T9765] netlink: 'syz.1.1130': attribute type 64 has an invalid length.
[  121.010255][ T9761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.057852][ T9761] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  121.060240][ T9761] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  121.065019][ T9761] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.067958][ T9761] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.070914][ T9761] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.078219][ T9761] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.084703][ T9761] batadv1: left allmulticast mode
[  121.089376][ T9761] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.092671][ T9761] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.095660][ T9761] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.098712][ T9761] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.119497][ T5872] lo speed is unknown, defaulting to 1000
[  121.121750][ T5872] syz2: Port: 1 Link DOWN
[  121.122727][ T9763] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.126215][ T9763] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.129139][ T9763] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.132221][ T9763] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.290487][ T9778] netlink: 'syz.0.1137': attribute type 7 has an invalid length.
[  121.781172][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.989609][ T9789] xt_hashlimit: max too large, truncated to 1048576
[  123.002927][ T9789] Cannot find add_set index 3 as target
[  123.005392][ T9789] __nla_validate_parse: 32 callbacks suppressed
[  123.005400][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1141'.
[  123.010445][ T9789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.109869][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.113906][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.118558][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.122664][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.125489][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.155122][ T9799] lo speed is unknown, defaulting to 1000
[  123.217101][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'.
[  123.242019][ T9799] chnl_net:caif_netlink_parms(): no params data found
[  123.253831][ T9817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1150'.
[  123.299600][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.302086][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.304406][ T9799] bridge_slave_0: entered allmulticast mode
[  123.312586][ T9799] bridge_slave_0: entered promiscuous mode
[  123.319175][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.321575][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.323965][ T9799] bridge_slave_1: entered allmulticast mode
[  123.326561][ T9799] bridge_slave_1: entered promiscuous mode
[  123.347925][ T9799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.353199][ T9799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.376645][ T9799] team0: Port device team_slave_0 added
[  123.380607][ T9799] team0: Port device team_slave_1 added
[  123.415215][ T9830] dummy0: entered promiscuous mode
[  123.417673][ T9830] batadv0: entered promiscuous mode
[  123.419912][ T9830] hsr2: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  123.423296][ T9830] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  123.427327][ T9830] dummy0: left promiscuous mode
[  123.429399][ T9830] batadv0: left promiscuous mode
[  123.439752][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.444339][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.454951][ T9799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.475776][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.486479][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.491393][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.493579][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1154'.
[  123.509473][ T9799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.544502][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.567610][ T9838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1157'.
[  123.595280][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.606555][ T9799] hsr_slave_0: entered promiscuous mode
[  123.608862][ T9799] hsr_slave_1: entered promiscuous mode
[  123.611040][ T9799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.613763][ T9799] Cannot create hsr debugfs directory
[  123.805914][   T12] bridge_slave_1: left allmulticast mode
[  123.807716][   T12] bridge_slave_1: left promiscuous mode
[  123.809574][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.825779][   T12] bridge_slave_0: left allmulticast mode
[  123.827657][   T12] bridge_slave_0: left promiscuous mode
[  123.829555][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.067733][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.071990][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.075721][   T12] bond0 (unregistering): Released all slaves
[  124.085501][ T9848] lo speed is unknown, defaulting to 1000
[  124.318456][   T12] hsr_slave_0: left promiscuous mode
[  124.324332][   T12] hsr_slave_1: left promiscuous mode
[  124.326530][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.328934][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.335824][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.339446][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.367161][   T12] veth1_macvtap: left promiscuous mode
[  124.378985][   T12] veth0_macvtap: left promiscuous mode
[  124.380846][   T12] veth1_vlan: left promiscuous mode
[  124.397075][   T12] veth0_vlan: left promiscuous mode
[  124.696522][   T12] team0 (unregistering): Port device team_slave_1 removed
[  124.718505][   T12] team0 (unregistering): Port device team_slave_0 removed
[  125.029114][ T9799] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.039706][ T9799] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.057177][ T9799] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.072031][ T9799] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.155525][ T9799] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.166218][ T9799] 8021q: adding VLAN 0 to HW filter on device team0
[  125.173645][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.176015][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.182034][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.184487][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.204179][ T5831] Bluetooth: hci2: command tx timeout
[  125.310068][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.349527][ T9799] veth0_vlan: entered promiscuous mode
[  125.356800][ T9799] veth1_vlan: entered promiscuous mode
[  125.357880][ T9897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1169'.
[  125.363411][ T9897] validate_nla: 2 callbacks suppressed
[  125.363419][ T9897] netlink: 'syz.1.1169': attribute type 7 has an invalid length.
[  125.367779][ T9897] netlink: 'syz.1.1169': attribute type 8 has an invalid length.
[  125.370358][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[  125.373229][ T9799] veth0_macvtap: entered promiscuous mode
[  125.387015][ T9799] veth1_macvtap: entered promiscuous mode
[  125.396271][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.403153][ T9899] xt_CT: No such helper "syz0"
[  125.407140][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.416232][ T9799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.419081][ T9799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.423499][ T9799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.426828][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1170'.
[  125.431575][ T9799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.469954][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'.
[  125.487478][ T9240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.490015][ T9240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.518100][ T9240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.521295][ T9240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.831502][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  125.854771][ T9928] netlink: 'syz.0.1181': attribute type 1 has an invalid length.
[  125.857399][ T9928] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1181'.
[  127.206918][ T9946] nbd: must specify a size in bytes for the device
[  127.339242][ T9950] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  127.375977][ T9952] netlink: 'syz.0.1192': attribute type 3 has an invalid length.
[  127.409532][ T9954] netlink: 'syz.0.1193': attribute type 3 has an invalid length.
[  127.412335][ T9954] netlink: 'syz.0.1193': attribute type 7 has an invalid length.
[  127.414965][ T9954] netlink: 'syz.0.1193': attribute type 8 has an invalid length.
[  127.483944][ T5692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.814687][ T9958] __nla_validate_parse: 6 callbacks suppressed
[  128.814697][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'.
[  128.935607][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'.
[  128.938539][ T9974] netlink: 'syz.0.1200': attribute type 3 has an invalid length.
[  128.941147][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1200'.
[  128.959850][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.964198][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.967990][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.971995][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.975168][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.999915][ T9975] lo speed is unknown, defaulting to 1000
[  129.065774][ T9983] syzkaller1: entered promiscuous mode
[  129.067598][ T9983] syzkaller1: entered allmulticast mode
[  129.075654][ T9986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1203'.
[  129.079303][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'.
[  129.085513][ T9986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1203'.
[  129.089175][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'.
[  129.089895][ T9975] chnl_net:caif_netlink_parms(): no params data found
[  129.092843][ T9986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1203'.
[  129.169529][   T33] audit: type=1800 audit(1752299121.418:4): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1204" name="memory.events" dev="tmpfs" ino=2758 res=0 errno=0
[  129.217303][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.219630][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.225071][ T9975] bridge_slave_0: entered allmulticast mode
[  129.233408][ T9975] bridge_slave_0: entered promiscuous mode
[  129.236600][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.238921][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.241227][ T9975] bridge_slave_1: entered allmulticast mode
[  129.245832][ T9975] bridge_slave_1: entered promiscuous mode
[  129.263182][T10006] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.1209'.
[  129.268315][ T5692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.304411][T10008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1210'.
[  131.031920][   T54] Bluetooth: hci2: command tx timeout
[  131.255515][ T9975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.261640][ T9975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.276444][T10011] x_tables: duplicate underflow at hook 2
[  131.284107][ T5692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.310444][ T9975] team0: Port device team_slave_0 added
[  131.314260][ T9975] team0: Port device team_slave_1 added
[  131.331307][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.335678][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.344275][ T9975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.358571][ T5692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.364690][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.366894][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.376901][ T9975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.409600][ T9975] hsr_slave_0: entered promiscuous mode
[  131.413230][ T9975] hsr_slave_1: entered promiscuous mode
[  131.415279][ T9975] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.417584][ T9975] Cannot create hsr debugfs directory
[  131.440553][T10022] netlink: 'syz.0.1216': attribute type 21 has an invalid length.
[  131.450613][T10016] syzkaller0: entered promiscuous mode
[  131.453382][T10016] syzkaller0: entered allmulticast mode
[  131.466437][T10022] netlink: 'syz.0.1216': attribute type 4 has an invalid length.
[  131.468893][T10022] netlink: 'syz.0.1216': attribute type 5 has an invalid length.
[  131.580743][ T5692] bridge_slave_1: left allmulticast mode
[  131.583445][ T5692] bridge_slave_1: left promiscuous mode
[  131.586203][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.589222][T10030] netlink: 'syz.0.1219': attribute type 21 has an invalid length.
[  131.593187][ T5692] bridge_slave_0: left allmulticast mode
[  131.595129][ T5692] bridge_slave_0: left promiscuous mode
[  131.597096][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.789745][ T5692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.794895][ T5692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.798529][ T5692] bond0 (unregistering): Released all slaves
[  131.864871][T10035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.875166][T10035] syzkaller0: mtu less than device minimum
[  132.110736][ T5692] hsr_slave_0: left promiscuous mode
[  132.125842][ T5692] hsr_slave_1: left promiscuous mode
[  132.127845][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.130260][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.145157][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.147479][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.167647][ T5692] veth1_macvtap: left promiscuous mode
[  132.169633][ T5692] veth0_macvtap: left promiscuous mode
[  132.171723][ T5692] veth1_vlan: left promiscuous mode
[  132.173514][ T5692] veth0_vlan: left promiscuous mode
[  132.237088][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.239195][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.413790][ T5692] team0 (unregistering): Port device team_slave_1 removed
[  132.434611][ T5692] team0 (unregistering): Port device team_slave_0 removed
[  133.112748][   T54] Bluetooth: hci2: command tx timeout
[  133.498467][ T9975] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  133.527368][ T9975] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  133.543613][ T9975] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  133.561483][ T9975] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  133.582545][T10079] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  133.678128][ T9975] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.705741][ T9975] 8021q: adding VLAN 0 to HW filter on device team0
[  133.735739][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.738032][ T9242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.741261][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.743531][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.754969][ T9975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  133.760271][ T9975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  133.873638][ T9975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.933022][ T9975] veth0_vlan: entered promiscuous mode
[  133.938290][T10119] __nla_validate_parse: 12 callbacks suppressed
[  133.938299][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'.
[  133.938451][ T9975] veth1_vlan: entered promiscuous mode
[  133.946435][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'.
[  133.949166][T10119] netlink: 'syz.1.1236': attribute type 7 has an invalid length.
[  133.977454][ T9975] veth0_macvtap: entered promiscuous mode
[  133.995763][ T9975] veth1_macvtap: entered promiscuous mode
[  134.000699][T10124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1237'.
[  134.024864][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.046404][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.050122][ T9975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.054344][ T9975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.057051][ T9975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.059695][ T9975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.124169][ T9239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.124449][T10131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'.
[  134.126623][ T9239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.133926][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'.
[  134.161064][ T9191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.166157][ T9191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.278509][T10151] netlink: 'syz.0.1243': attribute type 1 has an invalid length.
[  134.280907][T10151] netlink: 'syz.0.1243': attribute type 4 has an invalid length.
[  134.284697][T10151] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1243'.
[  134.318101][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'.
[  134.321198][T10155] netlink: 'syz.0.1245': attribute type 7 has an invalid length.
[  134.323865][T10155] netlink: 'syz.0.1245': attribute type 8 has an invalid length.
[  134.326374][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'.
[  134.434803][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'.
[  134.551263][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'.
[  134.554639][T10170] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  134.630096][T10176] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  135.087329][T10206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.090475][T10206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.094268][T10206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.097396][T10206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.100470][T10206] geneve3: entered promiscuous mode
[  135.102496][T10206] geneve3: entered allmulticast mode
[  135.654275][T10241] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  135.827745][T10254] veth10: entered allmulticast mode
[  135.835512][T10254] veth11: entered promiscuous mode
[  136.017061][ T5692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.185600][ T5692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.363902][ T5692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.464407][ T5692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.577829][T10271] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  137.702712][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  137.706438][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  137.709127][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  137.712447][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  137.714964][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  137.729328][ T5692] bridge_slave_1: left allmulticast mode
[  137.731121][ T5692] bridge_slave_1: left promiscuous mode
[  137.739386][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.759607][ T5692] bridge_slave_0: left allmulticast mode
[  137.764028][ T5692] bridge_slave_0: left promiscuous mode
[  137.765995][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.010577][ T5692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.015819][ T5692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.019439][ T5692] bond0 (unregistering): Released all slaves
[  138.052496][T10275] lo speed is unknown, defaulting to 1000
[  138.297088][T10275] chnl_net:caif_netlink_parms(): no params data found
[  138.347042][ T5692] hsr_slave_0: left promiscuous mode
[  138.349259][ T5692] hsr_slave_1: left promiscuous mode
[  138.351258][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.354361][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.358452][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.360865][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.377723][ T5692] veth1_macvtap: left promiscuous mode
[  138.379627][ T5692] veth0_macvtap: left promiscuous mode
[  138.382065][ T5692] veth1_vlan: left promiscuous mode
[  138.383825][ T5692] veth0_vlan: left promiscuous mode
[  138.613958][ T5692] team0 (unregistering): Port device team_slave_1 removed
[  138.636898][ T5692] team0 (unregistering): Port device team_slave_0 removed
[  138.943801][T10275] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.946337][T10275] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.949361][T10275] bridge_slave_0: entered allmulticast mode
[  138.955086][T10275] bridge_slave_0: entered promiscuous mode
[  138.967193][T10330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.970595][T10330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49751 - 0
[  138.979154][T10275] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.988668][T10275] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.991726][T10275] bridge_slave_1: entered allmulticast mode
[  138.994820][T10275] bridge_slave_1: entered promiscuous mode
[  139.046913][T10330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.050199][T10330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49751 - 0
[  139.058061][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.065337][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.115114][T10330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.118466][T10330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49751 - 0
[  139.134056][T10275] team0: Port device team_slave_0 added
[  139.137736][T10275] team0: Port device team_slave_1 added
[  139.158407][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.160703][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.172522][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.186100][T10330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.189515][T10330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49751 - 0
[  139.198026][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.200239][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.209692][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.220316][T10348] __nla_validate_parse: 15 callbacks suppressed
[  139.220325][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1299'.
[  139.248280][T10275] hsr_slave_0: entered promiscuous mode
[  139.250745][T10275] hsr_slave_1: entered promiscuous mode
[  139.253106][T10275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.255575][T10275] Cannot create hsr debugfs directory
[  139.292251][T10330] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 49751 - 0
[  139.294891][T10330] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  139.310315][T10330] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 49751 - 0
[  139.313209][T10330] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  139.335809][T10330] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 49751 - 0
[  139.338521][T10330] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  139.359203][T10330] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 49751 - 0
[  139.362092][T10330] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  139.447142][T10361] pim6reg9: entered allmulticast mode
[  139.724360][T10275] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  139.732475][T10275] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  139.738771][T10275] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  139.744682][T10275] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  139.751290][T10382] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  139.761908][   T54] Bluetooth: hci2: command tx timeout
[  139.839682][T10275] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.853191][T10275] 8021q: adding VLAN 0 to HW filter on device team0
[  139.861107][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.863477][ T9191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.880566][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.883168][ T9169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.000374][T10275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.027931][T10275] veth0_vlan: entered promiscuous mode
[  140.034014][T10275] veth1_vlan: entered promiscuous mode
[  140.059628][T10275] veth0_macvtap: entered promiscuous mode
[  140.078178][T10275] veth1_macvtap: entered promiscuous mode
[  140.084771][T10413] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.087590][T10413] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.104161][T10275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.109770][T10275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.116587][T10275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.119406][T10275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.123106][T10275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.125878][T10275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.185370][ T9191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.187886][ T9191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.211030][ T9191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.214607][ T9191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.247917][T10424] validate_nla: 1 callbacks suppressed
[  140.247927][T10424] netlink: 'syz.0.1310': attribute type 83 has an invalid length.
[  140.336133][T10433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1313'.
[  140.520471][T10454] x_tables: duplicate underflow at hook 1
[  140.583783][T10455] lo speed is unknown, defaulting to 1000
[  141.852976][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'.
[  141.927256][T10517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1340'.
[  141.930195][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'.
[  141.933481][T10517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1340'.
[  141.936449][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'.
[  141.939316][T10517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1340'.
[  142.018337][ T5692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.502921][ T5692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.518563][T10526] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1342'.
[  143.522173][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'.
[  143.581268][ T5692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.647682][ T5692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.696008][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.699506][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.704028][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.707316][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.709840][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.769273][ T5692] bridge_slave_1: left allmulticast mode
[  143.772801][ T5692] bridge_slave_1: left promiscuous mode
[  143.775399][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.779294][ T5692] bridge_slave_0: left allmulticast mode
[  143.781264][ T5692] bridge_slave_0: left promiscuous mode
[  143.783797][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.992866][ T5692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.997337][ T5692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.001620][ T5692] bond0 (unregistering): Released all slaves
[  144.022859][T10531] lo speed is unknown, defaulting to 1000
[  144.186249][T10531] chnl_net:caif_netlink_parms(): no params data found
[  144.258192][ T5692] hsr_slave_0: left promiscuous mode
[  144.260367][ T5692] hsr_slave_1: left promiscuous mode
[  144.265655][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.268210][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.270997][ T5692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.273465][ T5692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.284250][ T5692] veth1_macvtap: left promiscuous mode
[  144.286158][ T5692] veth0_macvtap: left promiscuous mode
[  144.288063][ T5692] veth1_vlan: left promiscuous mode
[  144.289851][ T5692] veth0_vlan: left promiscuous mode
[  144.555642][ T5692] team0 (unregistering): Port device team_slave_1 removed
[  144.576567][ T5692] team0 (unregistering): Port device team_slave_0 removed
[  144.868118][T10531] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.876433][T10531] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.881226][T10531] bridge_slave_0: entered allmulticast mode
[  144.884282][T10531] bridge_slave_0: entered promiscuous mode
[  144.886984][T10552] lo speed is unknown, defaulting to 1000
[  144.889932][T10531] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.897577][T10531] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.903662][T10531] bridge_slave_1: entered allmulticast mode
[  144.908806][T10531] bridge_slave_1: entered promiscuous mode
[  144.965172][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.979437][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.022478][T10564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.023483][T10531] team0: Port device team_slave_0 added
[  145.029232][T10531] team0: Port device team_slave_1 added
[  145.063930][T10564] syzkaller1: entered promiscuous mode
[  145.065864][T10564] syzkaller1: entered allmulticast mode
[  145.090042][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.093429][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.103775][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.140178][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.146344][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.155305][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.186918][T10573] vti0: entered promiscuous mode
[  145.239537][T10531] hsr_slave_0: entered promiscuous mode
[  145.244475][T10531] hsr_slave_1: entered promiscuous mode
[  145.246982][T10531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.253628][T10531] Cannot create hsr debugfs directory
[  145.751486][ T5831] Bluetooth: hci2: command tx timeout
[  146.093478][T10581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.096889][T10610] __nla_validate_parse: 1 callbacks suppressed
[  146.096898][T10610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'.
[  146.108264][T10610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1358'.
[  146.115830][T10531] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  146.143173][T10531] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  146.147511][T10531] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  146.157687][T10531] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  146.176764][T10614] ipvlan2: entered promiscuous mode
[  146.181211][T10614] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  146.305887][T10531] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.316926][T10637] @: renamed from vlan0
[  146.319917][T10637] tipc: Disabling bearer <eth:vlan0>
[  146.327888][T10531] 8021q: adding VLAN 0 to HW filter on device team0
[  146.337734][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.340646][ T9191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.364366][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.366727][ T9191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.376306][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1365'.
[  146.384730][T10643] netlink: 'syz.1.1365': attribute type 7 has an invalid length.
[  146.387271][T10643] netlink: 'syz.1.1365': attribute type 8 has an invalid length.
[  146.389752][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'.
[  146.506462][T10531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.555260][T10531] veth0_vlan: entered promiscuous mode
[  146.561099][T10531] veth1_vlan: entered promiscuous mode
[  146.578007][T10531] veth0_macvtap: entered promiscuous mode
[  146.585293][T10531] veth1_macvtap: entered promiscuous mode
[  146.616518][T10531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.626881][T10531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.648914][T10531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.662625][T10531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.666584][T10531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.670348][T10531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.753699][T10682] C: entered allmulticast mode
[  146.756761][ T9191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.760237][ T9191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.777564][ T9169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.780026][ T9169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.856053][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1375'.
[  146.859032][T10695] netlink: 'syz.0.1375': attribute type 7 has an invalid length.
[  146.862586][T10695] netlink: 'syz.0.1375': attribute type 8 has an invalid length.
[  146.865169][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  147.266594][T10745] netlink: 'syz.1.1388': attribute type 7 has an invalid length.
[  147.275529][T10745] xt_hashlimit: max too large, truncated to 1048576
[  147.278295][T10745] xt_hashlimit: overflow, rate too high: 0
[  147.327295][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1391'.
[  147.330845][T10753] netlink: 'syz.0.1391': attribute type 7 has an invalid length.
[  147.335222][T10753] netlink: 'syz.0.1391': attribute type 8 has an invalid length.
[  147.338312][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'.
[  147.588768][T10769] netlink: zone id is out of range
[  147.590729][T10769] netlink: zone id is out of range
[  147.593615][T10769] netlink: zone id is out of range
[  147.595587][T10769] netlink: zone id is out of range
[  147.597489][T10769] netlink: zone id is out of range
[  147.599390][T10769] netlink: zone id is out of range
[  147.601311][T10769] netlink: zone id is out of range
[  147.604218][T10769] netlink: zone id is out of range
[  147.606653][T10769] netlink: zone id is out of range
[  147.814990][T10787] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1403'.
[  147.846128][T10789] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1404'.
[  148.007709][T10805] vlan0: entered allmulticast mode
[  148.009828][T10805] erspan0: entered allmulticast mode
[  148.441215][ T9191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.444145][ T9191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.572236][T10537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.953478][T10537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.000966][T10537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.039753][T10537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.142406][T10537] bridge_slave_1: left allmulticast mode
[  150.144299][T10537] bridge_slave_1: left promiscuous mode
[  150.149490][T10537] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.159150][T10537] bridge_slave_0: left allmulticast mode
[  150.161038][T10537] bridge_slave_0: left promiscuous mode
[  150.171667][T10537] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.183755][T10854] xt_CT: No such helper "pptp"
[  150.200408][T10854] --map-set only usable from mangle table
[  150.340695][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.345754][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.352856][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.357489][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.367553][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.477240][T10537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.481457][T10537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.485081][T10537] bond0 (unregistering): Released all slaves
[  150.521663][T10867] lo speed is unknown, defaulting to 1000
[  150.759491][T10537] hsr_slave_0: left promiscuous mode
[  150.762252][T10537] hsr_slave_1: left promiscuous mode
[  150.764897][T10537] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.767520][T10537] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.770781][T10537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.778811][T10537] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.796870][T10537] veth1_macvtap: left promiscuous mode
[  150.799191][T10537] veth0_macvtap: left promiscuous mode
[  150.801176][T10537] veth1_vlan: left promiscuous mode
[  150.803279][T10537] veth0_vlan: left promiscuous mode
[  150.909713][T10907] netlink: 'syz.0.1439': attribute type 1 has an invalid length.
[  151.064439][T10537] team0 (unregistering): Port device team_slave_1 removed
[  151.084658][T10537] team0 (unregistering): Port device team_slave_0 removed
[  151.306257][T10867] chnl_net:caif_netlink_parms(): no params data found
[  151.389249][T10867] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.394404][T10918] __nla_validate_parse: 9 callbacks suppressed
[  151.394417][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'.
[  151.399238][T10867] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.402942][T10867] bridge_slave_0: entered allmulticast mode
[  151.405729][T10867] bridge_slave_0: entered promiscuous mode
[  151.427247][T10867] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.429817][T10867] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.432645][T10867] bridge_slave_1: entered allmulticast mode
[  151.435493][T10867] bridge_slave_1: entered promiscuous mode
[  151.456506][T10867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.470754][T10867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.500520][T10867] team0: Port device team_slave_0 added
[  151.508005][T10867] team0: Port device team_slave_1 added
[  151.524114][T10867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.526385][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.534656][T10867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.538870][T10867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.541145][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.550715][T10867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.580633][T10867] hsr_slave_0: entered promiscuous mode
[  151.584488][T10867] hsr_slave_1: entered promiscuous mode
[  151.587418][T10867] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.589932][T10867] Cannot create hsr debugfs directory
[  151.592656][T10925] Bluetooth: MGMT ver 1.23
[  151.672453][T10930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1443'.
[  151.675500][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'.
[  151.678545][T10930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1443'.
[  151.692508][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'.
[  151.703608][T10930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1443'.
[  151.734584][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'.
[  151.737759][T10933] netlink: 'syz.0.1444': attribute type 3 has an invalid length.
[  151.740248][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'.
[  151.773806][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1445'.
[  151.848132][T10945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1448'.
[  152.034612][T10967] netlink: 'syz.1.1453': attribute type 180 has an invalid length.
[  152.135346][T10867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  152.145000][T10867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  152.155949][T10867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  152.162861][T10867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  152.189257][T10867] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.191642][T10867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.194031][T10867] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.196948][T10867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.243217][T10867] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.257621][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.260668][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.302745][T10867] 8021q: adding VLAN 0 to HW filter on device team0
[  152.333066][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.335291][ T9243] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.338542][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.340870][ T9243] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.391800][ T5831] Bluetooth: hci2: command tx timeout
[  152.498084][T10867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.519515][T10867] veth0_vlan: entered promiscuous mode
[  152.526688][T10867] veth1_vlan: entered promiscuous mode
[  152.548537][T10867] veth0_macvtap: entered promiscuous mode
[  152.552728][T10867] veth1_macvtap: entered promiscuous mode
[  152.562951][T10867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.571983][T10867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.578923][T10867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.582854][T10867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.585782][T10867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.588715][T10867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.656811][ T9239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.659349][ T9239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.682637][ T9243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.685708][ T9243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.739778][T11047] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  153.047994][T11073] delete_channel: no stack
[  153.073294][T11076] net_ratelimit: 5 callbacks suppressed
[  153.073304][T11076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.210809][T11085] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  153.302825][T11097] xt_hashlimit: invalid rate
[  153.340227][T11096] lo speed is unknown, defaulting to 1000
[  153.365428][T11101] netlink: 'syz.1.1485': attribute type 10 has an invalid length.
[  153.375715][T11101] team0: Port device dummy0 added
[  153.577212][T11107] lo speed is unknown, defaulting to 1000
[  153.656202][T11112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.692654][T11112] syzkaller0: entered promiscuous mode
[  153.694527][T11112] syzkaller0: entered allmulticast mode
[  153.696709][T11112] tipc: Resetting bearer <eth:syzkaller0>
[  153.702822][T11111] tipc: Resetting bearer <eth:syzkaller0>
[  154.502846][T11111] tipc: Disabling bearer <eth:syzkaller0>
[  154.710288][T11136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.716117][T11136] syzkaller0: entered promiscuous mode
[  154.718011][T11136] syzkaller0: entered allmulticast mode
[  154.726764][T11136] tipc: Resetting bearer <eth:syzkaller0>
[  154.742030][T11135] tipc: Resetting bearer <eth:syzkaller0>
[  154.748966][T11135] tipc: Disabling bearer <eth:syzkaller0>
[  154.830958][T11150] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20004
[  154.922510][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.463992][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.523063][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.580394][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.650043][T11159] __nla_validate_parse: 20 callbacks suppressed
[  156.650053][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'.
[  156.657273][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'.
[  156.686665][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'.
[  156.731221][   T13] bridge_slave_1: left allmulticast mode
[  156.733792][   T13] bridge_slave_1: left promiscuous mode
[  156.736025][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.751960][   T13] bridge_slave_0: left allmulticast mode
[  156.753731][   T13] bridge_slave_0: left promiscuous mode
[  156.755587][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.818031][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  156.823360][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  156.826701][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  156.833118][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  156.836252][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  157.006262][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.010431][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.015444][   T13] bond0 (unregistering): Released all slaves
[  157.058520][T11169] lo speed is unknown, defaulting to 1000
[  157.114095][T11177] netlink: 'syz.0.1507': attribute type 1 has an invalid length.
[  157.116787][T11177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1507'.
[  157.247936][T11187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1509'.
[  157.263994][T11169] chnl_net:caif_netlink_parms(): no params data found
[  157.332252][T11189] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1509'.
[  157.339693][T11194] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1509'.
[  157.384393][   T13] hsr_slave_0: left promiscuous mode
[  157.387109][   T13] hsr_slave_1: left promiscuous mode
[  157.389137][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.391595][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.394282][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.396986][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.409636][   T13] veth1_macvtap: left promiscuous mode
[  157.411748][   T13] veth0_macvtap: left promiscuous mode
[  157.413681][   T13] veth1_vlan: left promiscuous mode
[  157.415450][   T13] veth0_vlan: left promiscuous mode
[  157.651072][   T13] team0 (unregistering): Port device team_slave_1 removed
[  157.673237][   T13] team0 (unregistering): Port device team_slave_0 removed
[  157.906144][T11169] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.908583][T11169] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.910973][T11169] bridge_slave_0: entered allmulticast mode
[  157.919580][T11169] bridge_slave_0: entered promiscuous mode
[  157.928404][T11169] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.930908][T11169] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.936337][T11169] bridge_slave_1: entered allmulticast mode
[  157.939121][T11169] bridge_slave_1: entered promiscuous mode
[  157.968242][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.972832][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.007620][T11169] team0: Port device team_slave_0 added
[  158.013375][T11169] team0: Port device team_slave_1 added
[  158.033897][T11169] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.036658][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.045514][T11169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.050181][T11169] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.052769][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.062945][T11169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.108138][T11169] hsr_slave_0: entered promiscuous mode
[  158.110903][T11169] hsr_slave_1: entered promiscuous mode
[  158.120200][T11169] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.124854][T11169] Cannot create hsr debugfs directory
[  158.252143][T11215] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  158.309079][T11221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1515'.
[  158.312845][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'.
[  158.317125][T11221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1515'.
[  158.515037][T10272] ==================================================================
[  158.517676][T10272] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  158.520137][T10272] Read of size 8 at addr ffff8881130f00a0 by task khidpd_16c05505/10272
[  158.523860][T10272] 
[  158.524809][T10272] CPU: 1 UID: 0 PID: 10272 Comm: khidpd_16c05505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  158.524825][T10272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.524832][T10272] Call Trace:
[  158.524837][T10272]  <TASK>
[  158.524842][T10272]  dump_stack_lvl+0x189/0x250
[  158.524856][T10272]  ? __virt_addr_valid+0x1c8/0x5c0
[  158.524886][T10272]  ? rcu_is_watching+0x15/0xb0
[  158.524895][T10272]  ? __kasan_check_byte+0x12/0x40
[  158.524904][T10272]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.524912][T10272]  ? rcu_is_watching+0x15/0xb0
[  158.524920][T10272]  ? lock_release+0x4b/0x3e0
[  158.524928][T10272]  ? __virt_addr_valid+0x1c8/0x5c0
[  158.524937][T10272]  ? __virt_addr_valid+0x4a5/0x5c0
[  158.524946][T10272]  print_report+0xd2/0x2b0
[  158.524953][T10272]  ? __mutex_lock+0x738/0xe80
[  158.524960][T10272]  kasan_report+0x118/0x150
[  158.524969][T10272]  ? __mutex_lock+0x738/0xe80
[  158.524976][T10272]  __mutex_lock+0x738/0xe80
[  158.524983][T10272]  ? __mutex_lock+0x51b/0xe80
[  158.524990][T10272]  ? l2cap_unregister_user+0x6a/0x1b0
[  158.525002][T10272]  ? __pfx___mutex_lock+0x10/0x10
[  158.525009][T10272]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.525022][T10272]  l2cap_unregister_user+0x6a/0x1b0
[  158.525033][T10272]  hidp_session_thread+0x3c9/0x410
[  158.525041][T10272]  ? __pfx_hidp_session_thread+0x10/0x10
[  158.525047][T10272]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.525057][T10272]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  158.525065][T10272]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  158.525071][T10272]  ? __kthread_parkme+0x7b/0x200
[  158.525080][T10272]  ? __kthread_parkme+0x1a1/0x200
[  158.525089][T10272]  kthread+0x711/0x8a0
[  158.525099][T10272]  ? __pfx_hidp_session_thread+0x10/0x10
[  158.525106][T10272]  ? __pfx_kthread+0x10/0x10
[  158.525115][T10272]  ? _raw_spin_unlock_irq+0x23/0x50
[  158.525124][T10272]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.525134][T10272]  ? __pfx_kthread+0x10/0x10
[  158.525144][T10272]  ret_from_fork+0x3fc/0x770
[  158.525152][T10272]  ? __pfx_ret_from_fork+0x10/0x10
[  158.525160][T10272]  ? __switch_to_asm+0x39/0x70
[  158.525168][T10272]  ? __switch_to_asm+0x33/0x70
[  158.525177][T10272]  ? __pfx_kthread+0x10/0x10
[  158.525186][T10272]  ret_from_fork_asm+0x1a/0x30
[  158.525198][T10272]  </TASK>
[  158.525201][T10272] 
[  158.602041][T10272] Allocated by task 5833:
[  158.603487][T10272]  kasan_save_track+0x3e/0x80
[  158.605056][T10272]  __kasan_kmalloc+0x93/0xb0
[  158.606580][T10272]  __kmalloc_noprof+0x27a/0x4f0
[  158.608198][T10272]  hci_alloc_dev_priv+0x28/0x2040
[  158.609857][T10272]  vhci_create_device+0x120/0x6e0
[  158.611535][T10272]  vhci_write+0x3ce/0x4a0
[  158.612980][T10272]  vfs_write+0x54b/0xa90
[  158.614370][T10272]  ksys_write+0x145/0x250
[  158.615766][T10272]  do_syscall_64+0xfa/0x3b0
[  158.617262][T10272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.619194][T10272] 
[  158.620001][T10272] Freed by task 5833:
[  158.621327][T10272]  kasan_save_track+0x3e/0x80
[  158.622845][T10272]  kasan_save_free_info+0x46/0x50
[  158.624518][T10272]  __kasan_slab_free+0x62/0x70
[  158.626103][T10272]  kfree+0x18e/0x440
[  158.627341][T10272]  bt_host_release+0x82/0x90
[  158.628763][T10272]  device_release+0x9c/0x1c0
[  158.630220][T10272]  kobject_put+0x22b/0x480
[  158.631688][T10272]  vhci_release+0x88/0xd0
[  158.633061][T10272]  __fput+0x44c/0xa70
[  158.634355][T10272]  task_work_run+0x1d4/0x260
[  158.635889][T10272]  do_exit+0x6b5/0x22e0
[  158.637206][T10272]  do_group_exit+0x21c/0x2d0
[  158.638666][T10272]  __x64_sys_exit_group+0x3f/0x40
[  158.640257][T10272]  x64_sys_call+0x21ba/0x21c0
[  158.641743][T10272]  do_syscall_64+0xfa/0x3b0
[  158.643194][T10272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.645052][T10272] 
[  158.645797][T10272] Last potentially related work creation:
[  158.647578][T10272]  kasan_save_stack+0x3e/0x60
[  158.649095][T10272]  kasan_record_aux_stack+0xbd/0xd0
[  158.650801][T10272]  insert_work+0x3d/0x330
[  158.652240][T10272]  __queue_work+0xbd9/0xfe0
[  158.653734][T10272]  queue_work_on+0x181/0x270
[  158.655275][T10272]  process_scheduled_works+0xae1/0x17b0
[  158.657104][T10272]  worker_thread+0x8a0/0xda0
[  158.658633][T10272]  kthread+0x711/0x8a0
[  158.660000][T10272]  ret_from_fork+0x3fc/0x770
[  158.661530][T10272]  ret_from_fork_asm+0x1a/0x30
[  158.663122][T10272] 
[  158.663907][T10272] Second to last potentially related work creation:
[  158.665909][T10272]  kasan_save_stack+0x3e/0x60
[  158.667434][T10272]  kasan_record_aux_stack+0xbd/0xd0
[  158.669141][T10272]  insert_work+0x3d/0x330
[  158.670560][T10272]  __queue_work+0xcfc/0xfe0
[  158.672013][T10272]  call_timer_fn+0x17e/0x5f0
[  158.673499][T10272]  __run_timer_base+0x646/0x860
[  158.675059][T10272]  run_timer_softirq+0xb7/0x180
[  158.676656][T10272]  handle_softirqs+0x286/0x870
[  158.678237][T10272]  __irq_exit_rcu+0xca/0x1f0
[  158.679757][T10272]  irq_exit_rcu+0x9/0x30
[  158.681160][T10272]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  158.683006][T10272]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  158.684933][T10272] 
[  158.685691][T10272] The buggy address belongs to the object at ffff8881130f0000
[  158.685691][T10272]  which belongs to the cache kmalloc-8k of size 8192
[  158.690065][T10272] The buggy address is located 160 bytes inside of
[  158.690065][T10272]  freed 8192-byte region [ffff8881130f0000, ffff8881130f2000)
[  158.694484][T10272] 
[  158.695287][T10272] The buggy address belongs to the physical page:
[  158.697369][T10272] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1130f0
[  158.700229][T10272] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  158.702977][T10272] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  158.705460][T10272] page_type: f5(slab)
[  158.706781][T10272] raw: 057ff00000000040 ffff88801a442280 ffffea0004451200 dead000000000002
[  158.709564][T10272] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  158.712275][T10272] head: 057ff00000000040 ffff88801a442280 ffffea0004451200 dead000000000002
[  158.715077][T10272] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  158.717887][T10272] head: 057ff00000000003 ffffea00044c3c01 00000000ffffffff 00000000ffffffff
[  158.720567][T10272] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  158.723360][T10272] page dumped because: kasan: bad access detected
[  158.725436][T10272] page_owner tracks the page as allocated
[  158.727294][T10272] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5573, tgid 5573 (start-stop-daem), ts 26909489321, free_ts 26902709391
[  158.733908][T10272]  post_alloc_hook+0x240/0x2a0
[  158.735471][T10272]  get_page_from_freelist+0x21e4/0x22c0
[  158.737211][T10272]  __alloc_frozen_pages_noprof+0x181/0x370
[  158.739130][T10272]  alloc_pages_mpol+0x232/0x4a0
[  158.740742][T10272]  allocate_slab+0x8a/0x3b0
[  158.742257][T10272]  ___slab_alloc+0xbfc/0x1480
[  158.743774][T10272]  __kmalloc_cache_noprof+0x296/0x3d0
[  158.745473][T10272]  tomoyo_init_log+0x111f/0x1f70
[  158.747076][T10272]  tomoyo_supervisor+0x340/0x1480
[  158.748650][T10272]  tomoyo_env_perm+0x149/0x1e0
[  158.750220][T10272]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  158.751982][T10272]  tomoyo_bprm_check_security+0x11c/0x180
[  158.753782][T10272]  security_bprm_check+0x89/0x270
[  158.755421][T10272]  bprm_execve+0x8ee/0x1450
[  158.756860][T10272]  do_execveat_common+0x510/0x6a0
[  158.758421][T10272]  __x64_sys_execve+0x94/0xb0
[  158.759944][T10272] page last free pid 5573 tgid 5573 stack trace:
[  158.762011][T10272]  __free_frozen_pages+0xc71/0xe70
[  158.763674][T10272]  __put_partials+0x161/0x1c0
[  158.765149][T10272]  put_cpu_partial+0x17c/0x250
[  158.766629][T10272]  __slab_free+0x2f7/0x400
[  158.768039][T10272]  qlist_free_all+0x97/0x140
[  158.769492][T10272]  kasan_quarantine_reduce+0x148/0x160
[  158.771292][T10272]  __kasan_slab_alloc+0x22/0x80
[  158.772888][T10272]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  158.774671][T10272]  getname_flags+0xb8/0x540
[  158.776187][T10272]  vfs_fstatat+0x43/0x170
[  158.777610][T10272]  __x64_sys_newfstatat+0x116/0x190
[  158.779302][T10272]  do_syscall_64+0xfa/0x3b0
[  158.780789][T10272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.782662][T10272] 
[  158.783430][T10272] Memory state around the buggy address:
[  158.785140][T10272]  ffff8881130eff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  158.787701][T10272]  ffff8881130f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.790323][T10272] >ffff8881130f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.792946][T10272]                                ^
[  158.794605][T10272]  ffff8881130f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.797193][T10272]  ffff8881130f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.799743][T10272] ==================================================================
[  158.802911][T10272] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  158.805239][T10272] CPU: 1 UID: 0 PID: 10272 Comm: khidpd_16c05505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  158.809277][T10272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.812426][T10272] Call Trace:
[  158.813522][T10272]  <TASK>
[  158.814507][T10272]  dump_stack_lvl+0x99/0x250
[  158.816034][T10272]  ? __asan_memcpy+0x40/0x70
[  158.817552][T10272]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.819265][T10272]  ? __pfx__printk+0x10/0x10
[  158.820772][T10272]  panic+0x2db/0x790
[  158.822021][T10272]  ? __pfx_panic+0x10/0x10
[  158.823427][T10272]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  158.825271][T10272]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.827097][T10272]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  158.829051][T10272]  ? print_memory_metadata+0x314/0x400
[  158.830791][T10272]  ? __mutex_lock+0x738/0xe80
[  158.832282][T10272]  check_panic_on_warn+0x89/0xb0
[  158.833918][T10272]  ? __mutex_lock+0x738/0xe80
[  158.835459][T10272]  end_report+0x78/0x160
[  158.836888][T10272]  kasan_report+0x129/0x150
[  158.838391][T10272]  ? __mutex_lock+0x738/0xe80
[  158.839952][T10272]  __mutex_lock+0x738/0xe80
[  158.841410][T10272]  ? __mutex_lock+0x51b/0xe80
[  158.842886][T10272]  ? l2cap_unregister_user+0x6a/0x1b0
[  158.844637][T10272]  ? __pfx___mutex_lock+0x10/0x10
[  158.846316][T10272]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.848261][T10272]  l2cap_unregister_user+0x6a/0x1b0
[  158.849977][T10272]  hidp_session_thread+0x3c9/0x410
[  158.851653][T10272]  ? __pfx_hidp_session_thread+0x10/0x10
[  158.853497][T10272]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.855438][T10272]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  158.857480][T10272]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  158.859527][T10272]  ? __kthread_parkme+0x7b/0x200
[  158.861171][T10272]  ? __kthread_parkme+0x1a1/0x200
[  158.862826][T10272]  kthread+0x711/0x8a0
[  158.864195][T10272]  ? __pfx_hidp_session_thread+0x10/0x10
[  158.866041][T10272]  ? __pfx_kthread+0x10/0x10
[  158.867622][T10272]  ? _raw_spin_unlock_irq+0x23/0x50
[  158.869292][T10272]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.871050][T10272]  ? __pfx_kthread+0x10/0x10
[  158.872582][T10272]  ret_from_fork+0x3fc/0x770
[  158.874135][T10272]  ? __pfx_ret_from_fork+0x10/0x10
[  158.875817][T10272]  ? __switch_to_asm+0x39/0x70
[  158.877306][T10272]  ? __switch_to_asm+0x33/0x70
[  158.878769][T10272]  ? __pfx_kthread+0x10/0x10
[  158.880210][T10272]  ret_from_fork_asm+0x1a/0x30
[  158.881678][T10272]  </TASK>
[  158.883278][T10272] Kernel Offset: disabled
[  158.884706][T10272] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:45:50  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff824dceb4 RBX=ffff88801dc91f48 RCX=ffff888022bf8000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90003ab76e8
R8 =ffff88811001e087 R9 =1ffff11022003c10 R10=dffffc0000000000 R11=ffffed1022003c11
R12=ffff88801dc91f48 R13=dffffc0000000000 R14=ffff888024222460 R15=ffff888022d131a0
RIP=ffffffff824dceb4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f022bece270 CR3=0000000035306000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043ff370
R8 =ffff888020cb8237 R9 =1ffff11004197046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d3 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f31769b7bac CR3=0000000028f3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=326874652f74656e 2f326d6973766564 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=000055f545bce7a0 00007ff20074656e XMM03=0000000000000000 ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000021 0000000000354875
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=0000000000000021 0000000000357475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
