last executing test programs:

32.383236523s ago: executing program 2 (id=825):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000015000100000000320000ffffffff00000000000000000000000001000000000000000000000000000000000800000000000000010000000100000006000000000000000000000000000000000000000000000000000000000000e7"], 0xf0}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtaction={0x15c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x148, 0x1, [@m_sample={0x144, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0xffffffffdffffffa, 0x7, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xd, 0x2, 0xb, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xcd, 0x6, "1ccc4dc5288fa6ad31e79c0d0000da0389942fb93e29d10f30f8c224b530bd1080a09977f0c8f5d01ee66f389dcdce7c82df48f3af9ca8f4b3b16e89a823fc92aa0b98a05abad8539ffbdde3e7edebe75ad2faff3e10c439734e8d888bfc781fd55220be5cd3a548ed72ebf38c1c76ca5748c3492599f455b6a5705032ef950ed4fbb7f1caa56440278f11ab7dfe46c45fbadc81c0296bda185bc65d530282ad798370be0f6ab77b2e0dfc62e7b14207eb341928a51103698f3f4acf9d39b9d249f3cbd80ff6a1ea8a"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x15c}}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) (async, rerun: 32)
write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0}) (async)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)

31.962635351s ago: executing program 1 (id=1308):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0)

26.563002217s ago: executing program 2 (id=825):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000015000100000000320000ffffffff00000000000000000000000001000000000000000000000000000000000800000000000000010000000100000006000000000000000000000000000000000000000000000000000000000000e7"], 0xf0}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtaction={0x15c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x148, 0x1, [@m_sample={0x144, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0xffffffffdffffffa, 0x7, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xd, 0x2, 0xb, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xcd, 0x6, "1ccc4dc5288fa6ad31e79c0d0000da0389942fb93e29d10f30f8c224b530bd1080a09977f0c8f5d01ee66f389dcdce7c82df48f3af9ca8f4b3b16e89a823fc92aa0b98a05abad8539ffbdde3e7edebe75ad2faff3e10c439734e8d888bfc781fd55220be5cd3a548ed72ebf38c1c76ca5748c3492599f455b6a5705032ef950ed4fbb7f1caa56440278f11ab7dfe46c45fbadc81c0296bda185bc65d530282ad798370be0f6ab77b2e0dfc62e7b14207eb341928a51103698f3f4acf9d39b9d249f3cbd80ff6a1ea8a"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x15c}}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) (async, rerun: 32)
write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0}) (async)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)

26.081463241s ago: executing program 1 (id=1308):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0)

21.602628234s ago: executing program 2 (id=825):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000015000100000000320000ffffffff00000000000000000000000001000000000000000000000000000000000800000000000000010000000100000006000000000000000000000000000000000000000000000000000000000000e7"], 0xf0}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtaction={0x15c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x148, 0x1, [@m_sample={0x144, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0xffffffffdffffffa, 0x7, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xd, 0x2, 0xb, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xcd, 0x6, "1ccc4dc5288fa6ad31e79c0d0000da0389942fb93e29d10f30f8c224b530bd1080a09977f0c8f5d01ee66f389dcdce7c82df48f3af9ca8f4b3b16e89a823fc92aa0b98a05abad8539ffbdde3e7edebe75ad2faff3e10c439734e8d888bfc781fd55220be5cd3a548ed72ebf38c1c76ca5748c3492599f455b6a5705032ef950ed4fbb7f1caa56440278f11ab7dfe46c45fbadc81c0296bda185bc65d530282ad798370be0f6ab77b2e0dfc62e7b14207eb341928a51103698f3f4acf9d39b9d249f3cbd80ff6a1ea8a"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x15c}}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) (async, rerun: 32)
write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0}) (async)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)

20.470025316s ago: executing program 1 (id=1308):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0)

16.168680484s ago: executing program 2 (id=825):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000015000100000000320000ffffffff00000000000000000000000001000000000000000000000000000000000800000000000000010000000100000006000000000000000000000000000000000000000000000000000000000000e7"], 0xf0}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtaction={0x15c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x148, 0x1, [@m_sample={0x144, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0xffffffffdffffffa, 0x7, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xd, 0x2, 0xb, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xcd, 0x6, "1ccc4dc5288fa6ad31e79c0d0000da0389942fb93e29d10f30f8c224b530bd1080a09977f0c8f5d01ee66f389dcdce7c82df48f3af9ca8f4b3b16e89a823fc92aa0b98a05abad8539ffbdde3e7edebe75ad2faff3e10c439734e8d888bfc781fd55220be5cd3a548ed72ebf38c1c76ca5748c3492599f455b6a5705032ef950ed4fbb7f1caa56440278f11ab7dfe46c45fbadc81c0296bda185bc65d530282ad798370be0f6ab77b2e0dfc62e7b14207eb341928a51103698f3f4acf9d39b9d249f3cbd80ff6a1ea8a"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x15c}}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) (async, rerun: 32)
write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0}) (async)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)

15.115935725s ago: executing program 1 (id=1308):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0)

10.640486468s ago: executing program 2 (id=825):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000015000100000000320000ffffffff00000000000000000000000001000000000000000000000000000000000800000000000000010000000100000006000000000000000000000000000000000000000000000000000000000000e7"], 0xf0}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtaction={0x15c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x148, 0x1, [@m_sample={0x144, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0xffffffffdffffffa, 0x7, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xd, 0x2, 0xb, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xcd, 0x6, "1ccc4dc5288fa6ad31e79c0d0000da0389942fb93e29d10f30f8c224b530bd1080a09977f0c8f5d01ee66f389dcdce7c82df48f3af9ca8f4b3b16e89a823fc92aa0b98a05abad8539ffbdde3e7edebe75ad2faff3e10c439734e8d888bfc781fd55220be5cd3a548ed72ebf38c1c76ca5748c3492599f455b6a5705032ef950ed4fbb7f1caa56440278f11ab7dfe46c45fbadc81c0296bda185bc65d530282ad798370be0f6ab77b2e0dfc62e7b14207eb341928a51103698f3f4acf9d39b9d249f3cbd80ff6a1ea8a"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x15c}}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) (async, rerun: 32)
write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0}) (async)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)

9.610233679s ago: executing program 1 (id=1308):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0)

5.107887077s ago: executing program 2 (id=825):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000015000100000000320000ffffffff00000000000000000000000001000000000000000000000000000000000800000000000000010000000100000006000000000000000000000000000000000000000000000000000000000000e7"], 0xf0}, 0x1, 0x0, 0x0, 0x240000c8}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtaction={0x15c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x148, 0x1, [@m_sample={0x144, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x2, 0xffffffffdffffffa, 0x7, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xd, 0x2, 0xb, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xcd, 0x6, "1ccc4dc5288fa6ad31e79c0d0000da0389942fb93e29d10f30f8c224b530bd1080a09977f0c8f5d01ee66f389dcdce7c82df48f3af9ca8f4b3b16e89a823fc92aa0b98a05abad8539ffbdde3e7edebe75ad2faff3e10c439734e8d888bfc781fd55220be5cd3a548ed72ebf38c1c76ca5748c3492599f455b6a5705032ef950ed4fbb7f1caa56440278f11ab7dfe46c45fbadc81c0296bda185bc65d530282ad798370be0f6ab77b2e0dfc62e7b14207eb341928a51103698f3f4acf9d39b9d249f3cbd80ff6a1ea8a"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x15c}}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) (async, rerun: 32)
write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0}) (async)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)

3.699270722s ago: executing program 1 (id=1308):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50)
setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0)

2.493157092s ago: executing program 0 (id=1498):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2]}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3, 0x0, 0x8000000}, 0x27)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000040601020000000000000002000000090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
pwritev(r6, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416efcb4768e949522f47331d4548861502149843b0606505ad3255eb63568e3c6147e90cc21f78d2323128c8d375102a2bcdb5cd78e7f3d6ff64da1b49a467badc8e4f6d699c789929cf02ca9c7165d13c7f7b8be98dcf5a0eb01a3df3e9bdfde437d11f4f599ad8bb03bf63efc4183d44de47eaf11ec43172db7ef524be9203ad39a624829527f8c30773b6", 0x90}], 0x1, 0x5e, 0xdc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8932, &(0x7f0000000900)={'lo\x00', @remote})
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000040)={0x2, 0x20, @broadcast}, 0x10)

1.553097725s ago: executing program 0 (id=1499):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r3, 0x0) (async)
splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0xa) (async)
close(r0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @private1, 0xdd1}, 0x27)
listen(r4, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r6 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
recvfrom(r5, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) (async)
connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

1.421989879s ago: executing program 0 (id=1500):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10)
getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000002c0)=""/42, &(0x7f0000000340)=0x2a)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r10, 0x0, 0x4}, 0x18)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f00000000c0))
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6, 0x8}]})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0x185, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf)
r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={0x60, r14, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x439013cb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}]}]}, 0x60}}, 0x0)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$ppp(r0, &(0x7f0000000300)="5af9", 0x2)

924.950029ms ago: executing program 0 (id=1501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000f20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000031c5afb7c0aa8bdd8eee00838500000071000000950000000000000005d64b8d6f4db272e397fcc5e5f980a0f8cfc355f60fd288a05a699d3754"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000300)={'batadv_slave_0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}})
syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad2bc4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x34, r9, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8040)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500a7aaca490000050007"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

2.747063ms ago: executing program 0 (id=1502):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x80ff, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)

0s ago: executing program 0 (id=1503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000002000000017000000440006803c00040067636d286165732962480000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88888220100140012800b0001006970766c616e0000040002800800050059f579334ce0091c6615aef870d39585c646fa39b9913559c0e6f7859210a02d3cb08328af25382850951365b96c2df6191e486e446ac102c12d569d8cb4092e049e75416eda8354b9f7595474d84816dd4d0c5155f96ad22ccf8ffc3ac5d31ba6b3ae2ad073", @ANYRES32=r8, @ANYBLOB="b6e9c157ede9f0ff7ff0b5616b371286bba3924a15d9c976c64250bb077a4d4e3016199a19c4a21e3fa22653684cab782e7826f6c6f0e5fdeb06e27b5bedf67320037227df47d96d6308091ea601a36e"], 0x3c}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b"], 0x80}}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac0000000000000003000600000000000200"/128], 0x80}}, 0x0)
r10 = socket(0x10, 0x803, 0x8)
connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfb4, 0x1}, 0xe)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x2, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40)

kernel console output (not intermixed with test programs):

T9554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.825346][ T9554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.870823][ T9554] hsr_slave_0: entered promiscuous mode
[  140.873442][ T9554] hsr_slave_1: entered promiscuous mode
[  140.875822][ T9554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.879467][ T9554] Cannot create hsr debugfs directory
[  141.050318][ T9554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.092120][ T9586] sch_fq: defrate 0 ignored.
[  141.159937][ T9554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.250287][ T9554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.338839][ T9554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.359711][ T9594] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1111'.
[  141.472036][ T9554] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  141.477092][ T9554] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  141.482229][ T9554] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  141.488616][ T9554] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  141.583446][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.605184][ T9554] 8021q: adding VLAN 0 to HW filter on device team0
[  141.614181][  T753] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.617010][  T753] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.640274][  T753] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.643265][  T753] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.800902][ T9554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.864474][ T9554] veth0_vlan: entered promiscuous mode
[  141.874314][ T9554] veth1_vlan: entered promiscuous mode
[  141.903554][ T9554] veth0_macvtap: entered promiscuous mode
[  141.915047][ T9554] veth1_macvtap: entered promiscuous mode
[  141.935364][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.953411][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.963266][ T9554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.966924][ T9554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.970728][ T9554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.974591][ T9554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.070967][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.074248][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.120234][  T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.123395][  T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.262857][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'.
[  142.475531][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'.
[  142.591163][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'.
[  142.801419][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'.
[  142.839874][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'.
[  142.934079][ T9636] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1122'.
[  143.506922][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'.
[  143.772407][ T9682] netlink: 'syz.1.1133': attribute type 4 has an invalid length.
[  145.030168][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.045771][ T9708] Unsupported ieee802154 address type: 0
[  145.051333][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.055274][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.059759][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.064482][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.106668][ T9705] lo speed is unknown, defaulting to 1000
[  145.310386][ T9705] chnl_net:caif_netlink_parms(): no params data found
[  145.372319][ T9741] netlink: 'syz.1.1151': attribute type 1 has an invalid length.
[  145.410113][ T9741] 8021q: adding VLAN 0 to HW filter on device bond4
[  145.413663][ T9749] __nla_validate_parse: 9 callbacks suppressed
[  145.413675][ T9749] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1153'.
[  145.452351][ T9741] bond4: (slave veth3): Enslaving as an active interface with a down link
[  145.479138][ T9741] vlan4: entered allmulticast mode
[  145.480757][ T9741] bond4: entered allmulticast mode
[  145.483295][ T9741] bond4: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  145.501472][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'.
[  145.504427][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.506572][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.510557][ T9705] bridge_slave_0: entered allmulticast mode
[  145.513407][ T9705] bridge_slave_0: entered promiscuous mode
[  145.525789][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.537909][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.540297][ T9705] bridge_slave_1: entered allmulticast mode
[  145.543150][ T9705] bridge_slave_1: entered promiscuous mode
[  145.575714][ T9705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.589605][ T9705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.632709][ T9705] team0: Port device team_slave_0 added
[  145.636482][ T9705] team0: Port device team_slave_1 added
[  145.678781][ T9764] rdma_op ffff88811ebc99f0 conn xmit_rdma 0000000000000000
[  145.694311][ T9705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.696630][ T9705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.704932][ T9705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.710495][ T9705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.714779][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  145.716981][ T9705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.729756][ T9705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.761466][ T9705] hsr_slave_0: entered promiscuous mode
[  145.763889][ T9705] hsr_slave_1: entered promiscuous mode
[  145.766197][ T9705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.768990][ T9705] Cannot create hsr debugfs directory
[  145.886407][ T9705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.953553][ T9705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.003270][ T9705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.062748][ T9705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.455730][ T9705] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  146.481648][ T9705] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  146.496247][ T9705] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  146.516069][ T9705] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  146.692039][ T9705] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.726369][ T9705] 8021q: adding VLAN 0 to HW filter on device team0
[  146.733135][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.735405][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.749029][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.751348][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.754602][ T9789] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1163'.
[  146.770811][ T9705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.774053][ T9705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.915753][ T9705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.992347][ T9705] veth0_vlan: entered promiscuous mode
[  147.015732][ T9705] veth1_vlan: entered promiscuous mode
[  147.044500][ T9705] veth0_macvtap: entered promiscuous mode
[  147.051946][ T9705] veth1_macvtap: entered promiscuous mode
[  147.064203][ T9705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.071595][ T9705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.078235][ T9705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.081026][ T9705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.083699][ T9705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.086413][ T9705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.117927][ T5833] Bluetooth: hci1: command tx timeout
[  147.187309][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.189760][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.256130][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1172'.
[  147.256141][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.256155][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.259850][ T9824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1172'.
[  147.397999][ T9833] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1175'.
[  147.481538][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'.
[  147.525860][ T9849] netlink: 'syz.0.1177': attribute type 6 has an invalid length.
[  147.541810][ T9848] netlink: 'syz.0.1177': attribute type 6 has an invalid length.
[  147.758723][ T9866] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1180'.
[  147.940208][ T9876] lo speed is unknown, defaulting to 1000
[  147.993716][ T5833] Bluetooth: hci2: link tx timeout
[  147.995532][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.001363][ T5823] Bluetooth: hci2: link tx timeout
[  148.003194][ T5823] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.006145][ T5823] Bluetooth: hci2: link tx timeout
[  148.009377][ T5823] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.013669][ T5823] Bluetooth: hci2: link tx timeout
[  148.015670][ T5823] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.019143][ T5823] Bluetooth: hci2: link tx timeout
[  148.021123][ T5823] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.024149][ T5823] Bluetooth: hci2: link tx timeout
[  148.026110][ T5823] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.622605][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'.
[  148.635140][ T9884] sctp: [Deprecated]: syz.0.1186 (pid 9884) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.635140][ T9884] Use struct sctp_sack_info instead
[  148.849916][ T9896] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  148.859679][ T9896] netlink: 'syz.0.1190': attribute type 12 has an invalid length.
[  148.862807][ T9896] netlink: 'syz.0.1190': attribute type 29 has an invalid length.
[  148.866376][ T9896] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1190'.
[  148.872349][ T9896] netlink: 'syz.0.1190': attribute type 2 has an invalid length.
[  149.039810][ T9918] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  149.154599][ T9926] netlink: 'syz.1.1199': attribute type 1 has an invalid length.
[  149.179676][ T9926] 8021q: adding VLAN 0 to HW filter on device bond5
[  149.207819][ T5823] Bluetooth: hci1: command 0x041b tx timeout
[  149.447984][ T9937] bond3: entered promiscuous mode
[  149.450109][ T9937] 8021q: adding VLAN 0 to HW filter on device bond3
[  149.554926][ T9954] lo speed is unknown, defaulting to 1000
[  149.563556][ T9955] netlink: 'syz.1.1206': attribute type 4 has an invalid length.
[  149.573743][ T9955] netlink: 'syz.1.1206': attribute type 4 has an invalid length.
[  149.869640][ T9968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  150.077689][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  150.268890][ T9984] lo speed is unknown, defaulting to 1000
[  150.464815][ T9991] __nla_validate_parse: 9 callbacks suppressed
[  150.464836][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'.
[  150.588482][ T9997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  151.698347][T10008] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1224'.
[  151.751498][T10010] IPVS: length: 148 != 24
[  151.778128][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'.
[  151.844380][T10010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.903525][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.907804][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.911237][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.914837][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.919517][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.948743][T10020] lo speed is unknown, defaulting to 1000
[  152.118873][T10040] dvmrp0: left allmulticast mode
[  152.149971][T10020] chnl_net:caif_netlink_parms(): no params data found
[  152.363907][T10020] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.366820][T10020] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.371888][T10020] bridge_slave_0: entered allmulticast mode
[  152.374715][T10020] bridge_slave_0: entered promiscuous mode
[  152.393038][T10020] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.407251][T10020] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.410084][T10020] bridge_slave_1: entered allmulticast mode
[  152.414896][T10020] bridge_slave_1: entered promiscuous mode
[  152.420142][T10060] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1239'.
[  152.437518][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1239'.
[  152.491157][T10020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.498707][T10020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.548027][T10020] team0: Port device team_slave_0 added
[  152.552932][T10020] team0: Port device team_slave_1 added
[  152.615409][T10020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.619983][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.622887][T10020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.642788][T10020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.649094][T10020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.651186][T10020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.667269][T10020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.686390][T10080] Cannot find del_set index 4 as target
[  152.696095][T10080] Cannot find del_set index 4 as target
[  152.700031][T10080] Cannot find del_set index 4 as target
[  152.702213][T10080] Cannot find del_set index 4 as target
[  152.704310][T10080] Cannot find del_set index 4 as target
[  152.706547][T10080] Cannot find del_set index 4 as target
[  152.711953][T10080] Cannot find del_set index 4 as target
[  152.712724][T10020] hsr_slave_0: entered promiscuous mode
[  152.715746][T10080] Cannot find del_set index 4 as target
[  152.716249][T10020] hsr_slave_1: entered promiscuous mode
[  152.721647][T10020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.724477][T10020] Cannot create hsr debugfs directory
[  152.724526][T10080] Cannot find del_set index 4 as target
[  152.733859][T10080] Cannot find del_set index 4 as target
[  152.888373][T10084] batman_adv: batadv0: Interface deactivated: dummy0
[  152.908575][T10084] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  152.911114][T10084] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  152.996176][    T9] lo speed is unknown, defaulting to 1000
[  153.002403][    T9] syz1: Port: 1 Link DOWN
[  153.004688][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'.
[  153.083565][T10020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.180419][T10020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.218939][T10092] netlink: 'syz.1.1248': attribute type 21 has an invalid length.
[  153.222215][T10092] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1248'.
[  153.266855][T10020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.368145][T10020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.551468][T10020] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  153.561426][T10020] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  153.581581][T10020] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  153.589297][T10111] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1256'.
[  153.596532][T10020] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  153.760822][T10020] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.818194][T10020] 8021q: adding VLAN 0 to HW filter on device team0
[  153.833862][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.836744][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.853423][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.855741][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.958684][T10132] siw: device registration error -23
[  154.000678][   T54] Bluetooth: hci1: command tx timeout
[  154.060110][T10020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.122996][T10020] veth0_vlan: entered promiscuous mode
[  154.136260][T10020] veth1_vlan: entered promiscuous mode
[  154.174853][T10020] veth0_macvtap: entered promiscuous mode
[  154.182756][T10020] veth1_macvtap: entered promiscuous mode
[  154.199322][T10020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.211823][T10020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.223995][T10158] syzkaller0: left promiscuous mode
[  154.236152][T10158] syzkaller0: left allmulticast mode
[  154.245766][T10020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.249886][T10020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.253292][T10020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.256970][T10020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.265694][T10158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.380019][  T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.388864][  T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.421774][T10161] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1268'.
[  154.430089][  T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.439741][  T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.481563][T10163] x_tables: duplicate underflow at hook 1
[  154.485958][T10164] openvswitch: netlink: Message has 4 unknown bytes.
[  154.491448][T10164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.495050][T10164] openvswitch: netlink: Message has 4 unknown bytes.
[  154.497807][T10164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.019024][T10181] IPVS: Scheduler module ip_vs_sip not found
[  155.109745][T10184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1277'.
[  155.695232][T10201] __nla_validate_parse: 2 callbacks suppressed
[  155.695247][T10201] netlink: 10894 bytes leftover after parsing attributes in process `syz.1.1285'.
[  155.774156][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  155.819183][T10208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.856301][ T5827] hid-generic 0005:15C2:0007.0002: collection stack underflow
[  155.868004][ T5827] hid-generic 0005:15C2:0007.0002: item 0 0 0 12 parsing failed
[  155.871000][ T5827] hid-generic 0005:15C2:0007.0002: probe with driver hid-generic failed with error -22
[  155.882710][T10211] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  155.884184][T10208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.902935][T10211] syzkaller1: entered promiscuous mode
[  155.904774][T10211] syzkaller1: entered allmulticast mode
[  155.908124][T10214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'.
[  155.965669][T10208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.099407][T10208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.170950][T10208] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.182084][T10208] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.190828][T10208] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.200733][T10208] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.116996][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'.
[  157.126977][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'.
[  157.250240][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  157.254583][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  157.261220][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  157.265178][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  157.268850][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  157.294792][T10228] lo speed is unknown, defaulting to 1000
[  157.441407][T10228] chnl_net:caif_netlink_parms(): no params data found
[  157.519690][T10228] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.523137][T10228] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.525509][T10228] bridge_slave_0: entered allmulticast mode
[  157.530336][T10228] bridge_slave_0: entered promiscuous mode
[  157.534363][T10228] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.547314][T10228] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.550305][T10228] bridge_slave_1: entered allmulticast mode
[  157.553420][T10228] bridge_slave_1: entered promiscuous mode
[  157.563052][T10249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1297'.
[  157.603252][T10228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.612592][T10228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.664653][T10228] team0: Port device team_slave_0 added
[  157.670858][T10228] team0: Port device team_slave_1 added
[  157.700979][T10253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.704420][T10253] IPv6: NLM_F_CREATE should be set when creating new route
[  157.707482][T10253] IPv6: NLM_F_CREATE should be set when creating new route
[  157.710350][T10253] IPv6: NLM_F_CREATE should be set when creating new route
[  157.722121][T10253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.724940][T10255] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1300'.
[  157.725957][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'.
[  157.730453][T10255] nbd: illegal input index 65508
[  157.742206][T10228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.744718][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.755599][T10228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.773432][T10228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.776115][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.790420][T10228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.831616][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'.
[  157.887509][T10228] hsr_slave_0: entered promiscuous mode
[  157.891944][T10228] hsr_slave_1: entered promiscuous mode
[  157.895148][T10228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.900295][T10228] Cannot create hsr debugfs directory
[  157.952585][T10260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1302'.
[  157.955614][T10260] netlink: 'syz.1.1302': attribute type 5 has an invalid length.
[  158.044344][T10263] netlink: 'syz.1.1303': attribute type 13 has an invalid length.
[  158.048670][T10263] netlink: 'syz.1.1303': attribute type 17 has an invalid length.
[  158.146980][T10263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.240423][T10228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.253144][T10265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.259377][T10264] lo speed is unknown, defaulting to 1000
[  158.339536][T10263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.353434][T10228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.413096][T10228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.463196][T10228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.582589][T10228] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  158.589521][T10228] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  158.599275][T10228] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  158.604320][T10228] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  158.655229][T10276] Cannot find add_set index 2 as target
[  158.704263][T10228] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.715541][T10228] 8021q: adding VLAN 0 to HW filter on device team0
[  158.728256][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.730478][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.742970][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.745236][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.768155][T10228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.771395][T10228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.916950][T10228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.956702][T10285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.959597][T10285] IPv6: NLM_F_CREATE should be set when creating new route
[  158.992330][T10228] veth0_vlan: entered promiscuous mode
[  159.024016][T10228] veth1_vlan: entered promiscuous mode
[  159.053062][T10228] veth0_macvtap: entered promiscuous mode
[  159.074614][T10228] veth1_macvtap: entered promiscuous mode
[  159.113450][T10228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.134235][T10228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.169361][T10228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.172423][T10228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.175680][T10228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.179365][T10228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.275116][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.283409][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.325673][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.329022][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.369903][ T5833] Bluetooth: hci1: command tx timeout
[  159.694943][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.699460][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.701229][T10293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.705358][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.705706][T10291] syzkaller0: entered promiscuous mode
[  159.712089][T10291] syzkaller0: entered allmulticast mode
[  159.712149][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.722082][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.729940][T10294] tipc: Resetting bearer <eth:syzkaller0>
[  159.769514][T10289] lo speed is unknown, defaulting to 1000
[  159.865585][T10300] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  159.937297][T10304] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  159.941588][T10304] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  159.960221][T10289] chnl_net:caif_netlink_parms(): no params data found
[  160.071723][T10289] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.074667][T10289] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.080088][T10289] bridge_slave_0: entered allmulticast mode
[  160.084077][T10289] bridge_slave_0: entered promiscuous mode
[  160.089317][T10289] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.092368][T10289] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.095360][T10289] bridge_slave_1: entered allmulticast mode
[  160.099933][T10289] bridge_slave_1: entered promiscuous mode
[  160.138093][T10289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.146466][T10289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.211611][T10289] team0: Port device team_slave_0 added
[  160.222673][T10289] team0: Port device team_slave_1 added
[  160.258102][T10289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.260817][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.275067][T10289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.281642][T10289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.284328][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.294477][T10289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.342378][T10312] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  160.359517][T10312] set_target_v3_checkentry: 55 callbacks suppressed
[  160.359531][T10312] Cannot find del_set index 2 as target
[  160.364681][T10312] xt_hashlimit: max too large, truncated to 1048576
[  160.374400][T10312] No such timeout policy "syz1"
[  160.403711][T10289] hsr_slave_0: entered promiscuous mode
[  160.406800][T10289] hsr_slave_1: entered promiscuous mode
[  160.410678][T10289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.413511][T10289] Cannot create hsr debugfs directory
[  160.579652][T10289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.602184][T10316] syzkaller0: left promiscuous mode
[  160.628529][T10289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.684404][T10318] Bluetooth: MGMT ver 1.23
[  160.702477][T10289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.754565][T10289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.788506][T10320] team0 (unregistering): Port device C removed
[  160.791821][T10320] team0 (unregistering): Port device team_slave_1 removed
[  160.904167][T10289] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  160.911427][T10289] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  160.925838][T10289] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  160.933217][T10289] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  161.074900][T10289] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.123885][T10289] 8021q: adding VLAN 0 to HW filter on device team0
[  161.138983][  T753] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.141722][  T753] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.171454][  T753] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.173706][  T753] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.381601][T10289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.419753][T10289] veth0_vlan: entered promiscuous mode
[  161.428107][T10289] veth1_vlan: entered promiscuous mode
[  161.451286][T10289] veth0_macvtap: entered promiscuous mode
[  161.456512][T10289] veth1_macvtap: entered promiscuous mode
[  161.469494][T10289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.476651][T10289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.484453][T10289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.490232][T10289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.492938][T10289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.495611][T10289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.572052][  T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.574871][  T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.596961][  T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.605397][  T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.415397][T10343] __nla_validate_parse: 9 callbacks suppressed
[  162.415420][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1323'.
[  162.529531][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.534741][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.537855][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.549972][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.553261][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.598885][T10346] lo speed is unknown, defaulting to 1000
[  162.685688][T10353] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  162.694033][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1326'.
[  162.776091][T10346] chnl_net:caif_netlink_parms(): no params data found
[  162.891366][T10346] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.894311][T10346] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.905642][T10346] bridge_slave_0: entered allmulticast mode
[  162.910137][T10346] bridge_slave_0: entered promiscuous mode
[  162.915344][T10346] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.926401][T10346] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.929963][T10346] bridge_slave_1: entered allmulticast mode
[  162.936549][T10346] bridge_slave_1: entered promiscuous mode
[  162.973023][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.981542][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.020843][T10346] team0: Port device team_slave_0 added
[  163.024445][T10346] team0: Port device team_slave_1 added
[  163.059006][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.061704][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.071777][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.086892][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.089969][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.101277][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.168889][T10346] hsr_slave_0: entered promiscuous mode
[  163.171777][T10346] hsr_slave_1: entered promiscuous mode
[  163.174169][T10346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.176645][T10346] Cannot create hsr debugfs directory
[  163.437864][T10346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.510782][T10346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.601955][T10346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.639404][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  163.643080][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  163.646545][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  163.659170][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  163.663344][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  163.689620][T10346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.696040][T10366] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  163.731079][T10364] lo speed is unknown, defaulting to 1000
[  163.935109][T10346] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  163.956786][T10346] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  163.962264][T10346] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  163.971103][T10346] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  164.020965][T10364] chnl_net:caif_netlink_parms(): no params data found
[  164.129492][T10364] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.132272][T10364] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.135044][T10364] bridge_slave_0: entered allmulticast mode
[  164.140031][T10364] bridge_slave_0: entered promiscuous mode
[  164.148530][T10364] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.151031][T10364] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.153752][T10364] bridge_slave_1: entered allmulticast mode
[  164.156989][T10364] bridge_slave_1: entered promiscuous mode
[  164.194750][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.200223][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.233483][T10391] syzkaller0: entered promiscuous mode
[  164.241969][T10364] team0: Port device team_slave_0 added
[  164.254107][T10364] team0: Port device team_slave_1 added
[  164.313281][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.315482][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.327683][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.341871][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.343981][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.353215][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.369107][T10346] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.435928][T10364] hsr_slave_0: entered promiscuous mode
[  164.441527][T10364] hsr_slave_1: entered promiscuous mode
[  164.443797][T10364] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.446704][T10364] Cannot create hsr debugfs directory
[  164.475743][T10346] 8021q: adding VLAN 0 to HW filter on device team0
[  164.533994][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.536325][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.551669][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.554512][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.639196][   T54] Bluetooth: hci0: command tx timeout
[  164.652463][T10404] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  164.766083][T10364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.782929][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  164.807342][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  164.861217][T10364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.900975][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.956169][T10364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.001891][T10346] veth0_vlan: entered promiscuous mode
[  165.042281][T10364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.076111][T10418] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  165.086638][T10346] veth1_vlan: entered promiscuous mode
[  165.151590][T10346] veth0_macvtap: entered promiscuous mode
[  165.176427][T10346] veth1_macvtap: entered promiscuous mode
[  165.229253][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.234838][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.240215][T10346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.243639][T10346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.246921][T10346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.251576][T10346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.441430][T10427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1344'.
[  165.444914][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'.
[  165.447705][  T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.451523][  T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.493822][T10364] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  165.510900][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1344'.
[  165.514560][T10364] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  165.515024][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.523477][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.542481][T10364] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  165.542556][T10427] netlink: 'syz.0.1344': attribute type 2 has an invalid length.
[  165.548929][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1344'.
[  165.569512][T10364] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  165.755870][T10364] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.760795][   T54] Bluetooth: hci1: command tx timeout
[  165.825358][T10364] 8021q: adding VLAN 0 to HW filter on device team0
[  165.833931][T10437] tipc: Enabling of bearer <udp:syz.> rejected, failed to enable media
[  165.843935][  T757] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.846437][  T757] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.869676][  T757] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.872477][  T757] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.920040][T10439] batman_adv: batadv0: Removing interface: dummy0
[  165.926864][T10439] bridge_slave_0: left promiscuous mode
[  165.929945][T10439] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.944080][T10439] bridge_slave_1: left allmulticast mode
[  165.946591][T10439] bridge_slave_1: left promiscuous mode
[  165.949877][T10439] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.958055][T10439] bond0: (slave bond_slave_0): Releasing backup interface
[  165.961019][T10439] bond_slave_0: left promiscuous mode
[  165.962992][T10439] bond_slave_0: left allmulticast mode
[  165.971005][T10439] bond0: (slave bond_slave_1): Releasing backup interface
[  165.976044][T10439] bond_slave_1: left promiscuous mode
[  165.979188][T10439] bond_slave_1: left allmulticast mode
[  165.982126][T10439] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.987216][T10439] bond0: (slave wlan1): Releasing backup interface
[  165.990959][T10439] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  165.993711][T10439] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  166.221465][T10364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.256945][T10364] veth0_vlan: entered promiscuous mode
[  166.269534][T10364] veth1_vlan: entered promiscuous mode
[  166.304651][T10364] veth0_macvtap: entered promiscuous mode
[  166.319451][T10364] veth1_macvtap: entered promiscuous mode
[  166.335828][T10364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.347371][T10364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.353367][T10364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.356038][T10364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.360615][T10364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.363165][T10364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.456153][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.461995][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.531965][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.535687][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.893259][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1348'.
[  168.110882][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.115830][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.132098][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.136282][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.142935][T10463] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  168.148004][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.186574][T10460] lo speed is unknown, defaulting to 1000
[  168.343128][T10460] chnl_net:caif_netlink_parms(): no params data found
[  168.385774][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'.
[  168.398499][T10468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'.
[  168.498121][T10475] netlink: 'syz.0.1354': attribute type 1 has an invalid length.
[  168.501193][T10475] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1354'.
[  168.512701][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'.
[  168.512881][T10460] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.516116][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1354'.
[  168.522816][T10460] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.525481][T10460] bridge_slave_0: entered allmulticast mode
[  168.533728][T10460] bridge_slave_0: entered promiscuous mode
[  168.550612][T10460] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.553552][T10460] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.556765][T10460] bridge_slave_1: entered allmulticast mode
[  168.576582][T10460] bridge_slave_1: entered promiscuous mode
[  168.586658][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  168.592216][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  168.595990][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  168.601882][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  168.607884][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  168.646454][T10460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.655316][T10460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.733822][T10460] team0: Port device team_slave_0 added
[  168.742304][T10460] team0: Port device team_slave_1 added
[  168.790775][T10460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.805900][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.817539][T10460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.830421][T10479] lo speed is unknown, defaulting to 1000
[  168.838956][T10460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.841752][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.871360][T10460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.003900][T10460] hsr_slave_0: entered promiscuous mode
[  169.007322][T10460] hsr_slave_1: entered promiscuous mode
[  169.010247][T10460] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.013107][T10460] Cannot create hsr debugfs directory
[  169.015462][T10489] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  169.024546][T10489] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  169.367776][T10460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.404321][T10479] chnl_net:caif_netlink_parms(): no params data found
[  169.461898][T10509] netlink: 'syz.0.1362': attribute type 2 has an invalid length.
[  169.465315][T10509] netlink: 'syz.0.1362': attribute type 1 has an invalid length.
[  169.471381][T10509] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1362'.
[  169.506081][T10460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.622581][T10460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.649156][T10479] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.652144][T10479] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.655199][T10479] bridge_slave_0: entered allmulticast mode
[  169.665173][T10479] bridge_slave_0: entered promiscuous mode
[  169.671228][T10479] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.674313][T10479] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.683505][T10479] bridge_slave_1: entered allmulticast mode
[  169.699501][T10479] bridge_slave_1: entered promiscuous mode
[  169.749600][T10460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.779079][T10479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.786382][T10479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.841396][T10479] team0: Port device team_slave_0 added
[  169.851774][T10479] team0: Port device team_slave_1 added
[  169.904234][T10479] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.907190][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.917543][T10479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.937627][T10479] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.940307][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.951061][T10479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.035597][T10460] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  170.059005][T10479] hsr_slave_0: entered promiscuous mode
[  170.062201][T10479] hsr_slave_1: entered promiscuous mode
[  170.065024][T10479] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.068402][T10479] Cannot create hsr debugfs directory
[  170.070628][T10460] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  170.079755][T10460] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  170.131062][T10460] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  170.267480][ T5833] Bluetooth: hci0: command tx timeout
[  170.386991][T10479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.504312][T10479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.547953][T10535] netlink: 'syz.0.1367': attribute type 2 has an invalid length.
[  170.579598][T10460] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.638121][ T5833] Bluetooth: hci1: command tx timeout
[  170.645469][T10479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.696099][T10460] 8021q: adding VLAN 0 to HW filter on device team0
[  170.705406][  T757] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.708440][  T757] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.766097][T10479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.779365][  T757] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.782371][  T757] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.794905][T10540] netlink: 'syz.0.1368': attribute type 21 has an invalid length.
[  170.798444][T10540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1368'.
[  170.998946][T10479] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.004011][T10479] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  171.016346][T10479] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  171.026056][T10479] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  171.161723][T10460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.188344][T10479] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.241874][T10479] 8021q: adding VLAN 0 to HW filter on device team0
[  171.269797][ T2180] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.272791][ T2180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.283397][T10460] veth0_vlan: entered promiscuous mode
[  171.300984][ T2180] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.304075][ T2180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.325221][T10460] veth1_vlan: entered promiscuous mode
[  171.405007][T10479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.444396][T10460] veth0_macvtap: entered promiscuous mode
[  171.465024][T10460] veth1_macvtap: entered promiscuous mode
[  171.505783][T10460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.542725][T10460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.559393][T10460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.566463][T10460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.574983][T10460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.584521][T10460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.648048][T10479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.702326][T10479] veth0_vlan: entered promiscuous mode
[  171.711266][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.717131][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.731360][T10479] veth1_vlan: entered promiscuous mode
[  171.769984][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.772888][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.788300][T10479] veth0_macvtap: entered promiscuous mode
[  171.804921][T10479] veth1_macvtap: entered promiscuous mode
[  171.860642][T10479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.866387][T10479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.883132][T10479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.886632][T10479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.891838][T10479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.895374][T10479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.042502][  T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.054639][  T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.100615][  T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.104815][  T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.328889][T10574] ip6tnl0: entered promiscuous mode
[  172.343500][T10573] ip6tnl0: left promiscuous mode
[  172.483242][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'.
[  172.529002][T10584] netlink: 'syz.0.1379': attribute type 2 has an invalid length.
[  172.532070][T10584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1379'.
[  172.650559][T10338] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec
[  172.781424][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.784374][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.818744][T10593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.776365][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.782632][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.794385][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.797886][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.800340][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.841677][T10601] lo speed is unknown, defaulting to 1000
[  174.086124][T10601] chnl_net:caif_netlink_parms(): no params data found
[  174.204075][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.212232][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.216408][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.224148][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.231100][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.312650][T10601] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.316346][T10601] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.323785][T10601] bridge_slave_0: entered allmulticast mode
[  174.326838][T10601] bridge_slave_0: entered promiscuous mode
[  174.335364][T10601] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.342711][T10601] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.345118][T10601] bridge_slave_1: entered allmulticast mode
[  174.349283][T10601] bridge_slave_1: entered promiscuous mode
[  174.360907][T10612] lo speed is unknown, defaulting to 1000
[  174.372061][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.383235][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.464202][T10601] team0: Port device team_slave_0 added
[  174.483694][T10601] team0: Port device team_slave_1 added
[  174.540158][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.542612][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.551839][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.571269][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.573535][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.582025][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.648206][T10601] hsr_slave_0: entered promiscuous mode
[  174.650751][T10601] hsr_slave_1: entered promiscuous mode
[  174.652927][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.655621][T10601] Cannot create hsr debugfs directory
[  175.084170][T10612] chnl_net:caif_netlink_parms(): no params data found
[  175.256220][T10601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.426461][T10601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.518560][T10601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.532624][T10612] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.534955][T10612] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.537803][T10612] bridge_slave_0: entered allmulticast mode
[  175.541884][T10612] bridge_slave_0: entered promiscuous mode
[  175.548893][T10612] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.551808][T10612] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.554918][T10612] bridge_slave_1: entered allmulticast mode
[  175.565136][T10612] bridge_slave_1: entered promiscuous mode
[  175.608753][T10601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.674075][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.687644][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.773865][T10612] team0: Port device team_slave_0 added
[  175.779061][T10612] team0: Port device team_slave_1 added
[  175.844108][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'.
[  175.849485][ T5833] Bluetooth: hci0: command tx timeout
[  175.862435][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.864485][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.874633][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.881480][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.884410][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.895271][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.972834][T10601] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  175.996259][T10601] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  176.043099][T10601] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  176.051572][T10601] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  176.063769][T10638] netlink: 'syz.0.1391': attribute type 39 has an invalid length.
[  176.075522][T10612] hsr_slave_0: entered promiscuous mode
[  176.085062][T10612] hsr_slave_1: entered promiscuous mode
[  176.088253][T10612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.091326][T10612] Cannot create hsr debugfs directory
[  176.317694][ T5833] Bluetooth: hci1: command tx timeout
[  176.378333][T10612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.428317][T10601] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.473366][T10612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.490020][T10601] 8021q: adding VLAN 0 to HW filter on device team0
[  176.498542][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.501440][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.519327][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.522020][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.564376][T10612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.678077][T10612] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.849639][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.909450][T10612] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  176.921896][T10612] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  176.934004][T10601] veth0_vlan: entered promiscuous mode
[  176.940485][T10612] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  176.955797][T10612] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  176.995334][T10601] veth1_vlan: entered promiscuous mode
[  177.146518][T10601] veth0_macvtap: entered promiscuous mode
[  177.160539][T10601] veth1_macvtap: entered promiscuous mode
[  177.219808][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.229683][T10612] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.241287][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.253397][T10601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.256895][T10601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.261954][T10601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.265371][T10601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.313362][T10612] 8021q: adding VLAN 0 to HW filter on device team0
[  177.354728][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.357150][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.383440][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.385783][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.393062][T10663] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1395'.
[  177.526754][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.539724][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.638795][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.641868][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.725624][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'.
[  177.774966][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.940598][T10612] veth0_vlan: entered promiscuous mode
[  177.965401][T10612] veth1_vlan: entered promiscuous mode
[  178.000755][T10612] veth0_macvtap: entered promiscuous mode
[  178.005101][T10612] veth1_macvtap: entered promiscuous mode
[  178.035653][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.046219][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.061781][T10612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.064984][T10612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.075586][T10612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.079604][T10612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.128466][T10682] lo speed is unknown, defaulting to 1000
[  178.289984][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.311895][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.376470][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.382498][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.398628][ T5833] Bluetooth: hci1: command tx timeout
[  178.520303][T10691] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1403'.
[  178.524373][T10691] batadv_slave_1: entered promiscuous mode
[  178.806095][T10698] can: request_module (can-proto-3) failed.
[  179.705472][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  179.710529][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  179.714694][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  179.719424][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  179.723024][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  179.769747][T10704] lo speed is unknown, defaulting to 1000
[  179.912009][T10704] chnl_net:caif_netlink_parms(): no params data found
[  179.971111][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1406'.
[  180.048318][T10704] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.050868][T10704] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.053467][T10704] bridge_slave_0: entered allmulticast mode
[  180.057855][T10704] bridge_slave_0: entered promiscuous mode
[  180.061534][T10704] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.063845][T10704] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.066589][T10704] bridge_slave_1: entered allmulticast mode
[  180.079539][T10704] bridge_slave_1: entered promiscuous mode
[  180.130283][T10704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.145196][T10721] netlink: 'syz.0.1408': attribute type 5 has an invalid length.
[  180.150577][T10704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.155157][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'.
[  180.188783][T10721] bridge6: entered promiscuous mode
[  180.190951][T10721] bridge6: entered allmulticast mode
[  180.214408][T10704] team0: Port device team_slave_0 added
[  180.225922][T10704] team0: Port device team_slave_1 added
[  180.284445][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.290223][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.293980][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.302323][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.302796][T10704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.305648][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.354173][T10704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.377663][T10704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.396180][T10704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.403405][T10704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.418925][T10704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.474731][T10704] hsr_slave_0: entered promiscuous mode
[  180.485250][T10704] hsr_slave_1: entered promiscuous mode
[  180.492020][T10704] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.494615][T10704] Cannot create hsr debugfs directory
[  180.505399][T10723] lo speed is unknown, defaulting to 1000
[  180.727143][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  180.873803][T10704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.977430][T10704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.990890][T10723] chnl_net:caif_netlink_parms(): no params data found
[  181.099046][T10704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.185155][T10704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.221089][T10723] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.223683][T10723] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.226332][T10723] bridge_slave_0: entered allmulticast mode
[  181.231279][T10723] bridge_slave_0: entered promiscuous mode
[  181.238932][T10723] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.241911][T10723] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.244376][T10723] bridge_slave_1: entered allmulticast mode
[  181.248168][T10723] bridge_slave_1: entered promiscuous mode
[  181.307973][T10723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.314832][T10723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.425538][T10723] team0: Port device team_slave_0 added
[  181.444801][T10723] team0: Port device team_slave_1 added
[  181.478364][T10704] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  181.489535][T10704] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  181.511730][T10704] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  181.522526][T10723] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.525219][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.533508][T10723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.538306][T10704] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  181.556697][T10723] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.559980][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.572021][T10723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.623666][T10723] hsr_slave_0: entered promiscuous mode
[  181.638862][T10723] hsr_slave_1: entered promiscuous mode
[  181.641068][T10723] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.643438][T10723] Cannot create hsr debugfs directory
[  181.770687][   T54] Bluetooth: hci0: command tx timeout
[  181.924460][T10723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.940320][T10704] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.969173][T10704] 8021q: adding VLAN 0 to HW filter on device team0
[  182.005150][T10723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.029033][  T750] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.031395][  T750] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.068391][  T750] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.071176][  T750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.163788][T10723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.265036][T10723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.355121][T10704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.388164][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  182.408963][   T54] Bluetooth: hci1: command tx timeout
[  182.453352][T10723] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  182.461165][T10723] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  182.471452][T10723] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  182.484375][T10723] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  182.516778][T10778] IPv6: sit1: Disabled Multicast RS
[  182.529886][T10704] veth0_vlan: entered promiscuous mode
[  182.546116][T10704] veth1_vlan: entered promiscuous mode
[  182.603016][T10704] veth0_macvtap: entered promiscuous mode
[  182.613617][T10704] veth1_macvtap: entered promiscuous mode
[  182.636194][T10704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.649454][T10704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.663468][T10704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.666350][T10704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.676347][T10704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.681169][T10704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.692342][T10723] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.726736][T10723] 8021q: adding VLAN 0 to HW filter on device team0
[  182.751814][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.754089][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.778158][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.780359][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.823728][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.826268][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.869079][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.871483][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.036868][T10723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.091082][T10723] veth0_vlan: entered promiscuous mode
[  183.098460][T10723] veth1_vlan: entered promiscuous mode
[  183.125849][T10723] veth0_macvtap: entered promiscuous mode
[  183.130911][T10723] veth1_macvtap: entered promiscuous mode
[  183.142502][T10723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.158704][T10723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.172095][T10723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.174821][T10723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.185566][T10723] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.189308][T10723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.301936][ T2180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.305014][ T2180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.380826][ T2180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.383800][ T2180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.095498][T10796] netlink: 'syz.0.1422': attribute type 10 has an invalid length.
[  185.101225][T10796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1422'.
[  185.104565][T10796] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  185.281469][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.284954][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.288098][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.291232][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.295145][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.338988][T10797] lo speed is unknown, defaulting to 1000
[  185.468271][T10797] chnl_net:caif_netlink_parms(): no params data found
[  185.530849][T10797] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.533166][T10797] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.535490][T10797] bridge_slave_0: entered allmulticast mode
[  185.539138][T10797] bridge_slave_0: entered promiscuous mode
[  185.543034][T10797] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.545229][T10797] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.548850][T10797] bridge_slave_1: entered allmulticast mode
[  185.551949][T10797] bridge_slave_1: entered promiscuous mode
[  185.583244][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.589163][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.629314][T10797] team0: Port device team_slave_0 added
[  185.633456][T10797] team0: Port device team_slave_1 added
[  185.708541][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.715237][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.737789][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.742511][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.744730][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.756664][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.839283][T10811] syzkaller1: entered promiscuous mode
[  185.841005][T10811] syzkaller1: entered allmulticast mode
[  185.875978][T10797] hsr_slave_0: entered promiscuous mode
[  185.887756][T10797] hsr_slave_1: entered promiscuous mode
[  185.890044][T10797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.892430][T10797] Cannot create hsr debugfs directory
[  185.906368][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.910395][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.913311][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.916071][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.931450][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.982734][T10815] lo speed is unknown, defaulting to 1000
[  186.168890][T10797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.292230][T10797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.351751][T10797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.366990][T10815] chnl_net:caif_netlink_parms(): no params data found
[  186.439249][T10797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.491883][T10815] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.494163][T10815] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.496459][T10815] bridge_slave_0: entered allmulticast mode
[  186.500050][T10815] bridge_slave_0: entered promiscuous mode
[  186.503564][T10815] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.505885][T10815] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.508951][T10815] bridge_slave_1: entered allmulticast mode
[  186.512437][T10815] bridge_slave_1: entered promiscuous mode
[  186.535845][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'.
[  186.548102][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.557755][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.628822][T10815] team0: Port device team_slave_0 added
[  186.634635][T10815] team0: Port device team_slave_1 added
[  186.704108][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.706666][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.715766][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.738366][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.740452][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.749130][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.829029][T10797] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  186.846600][T10815] hsr_slave_0: entered promiscuous mode
[  186.850080][T10815] hsr_slave_1: entered promiscuous mode
[  186.852915][T10815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.855761][T10815] Cannot create hsr debugfs directory
[  186.859318][T10797] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  186.866936][T10797] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  186.926370][T10797] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  186.989810][T10840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.095463][T10815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.195493][T10815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.249427][T10797] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.320580][T10815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.333481][T10797] 8021q: adding VLAN 0 to HW filter on device team0
[  187.346130][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.348450][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.353049][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.355383][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.431817][T10815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.697958][T10853] macvlan0: entered allmulticast mode
[  187.700325][T10853] netlink: 'syz.0.1431': attribute type 1 has an invalid length.
[  187.703389][T10853] netlink: 'syz.0.1431': attribute type 2 has an invalid length.
[  187.743833][T10797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.794385][T10815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  187.812606][T10815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  187.854529][T10815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  187.873872][T10815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  187.948731][T10797] veth0_vlan: entered promiscuous mode
[  187.978481][T10797] veth1_vlan: entered promiscuous mode
[  187.998386][   T54] Bluetooth: hci1: command tx timeout
[  188.061268][T10797] veth0_macvtap: entered promiscuous mode
[  188.081541][T10797] veth1_macvtap: entered promiscuous mode
[  188.154599][T10797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.211621][T10797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.259976][T10815] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.279627][T10797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.282961][T10797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.296867][T10797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.300933][T10797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.335008][T10815] 8021q: adding VLAN 0 to HW filter on device team0
[  188.380559][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.383342][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.436610][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.439513][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.527400][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.548238][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.602502][  T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.604957][  T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.694360][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.819253][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.882645][T10815] veth0_vlan: entered promiscuous mode
[  188.896874][T10815] veth1_vlan: entered promiscuous mode
[  188.924105][T10815] veth0_macvtap: entered promiscuous mode
[  188.930718][T10815] veth1_macvtap: entered promiscuous mode
[  188.949720][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.959912][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.964854][T10815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.968654][T10815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.971393][T10815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.973952][T10815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.062283][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.064639][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.094643][  T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.098062][  T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.268724][T10889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1438'.
[  189.450661][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'.
[  190.615589][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.619996][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.624131][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.630560][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.633786][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.663615][T10898] lo speed is unknown, defaulting to 1000
[  190.800017][T10898] chnl_net:caif_netlink_parms(): no params data found
[  190.859550][T10898] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.861720][T10898] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.863918][T10898] bridge_slave_0: entered allmulticast mode
[  190.866611][T10898] bridge_slave_0: entered promiscuous mode
[  190.870331][T10898] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.872524][T10898] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.874793][T10898] bridge_slave_1: entered allmulticast mode
[  190.879251][T10898] bridge_slave_1: entered promiscuous mode
[  190.905919][T10898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.912051][T10898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.943472][T10898] team0: Port device team_slave_0 added
[  190.948017][T10898] team0: Port device team_slave_1 added
[  190.968626][T10898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.970777][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.978984][T10898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.983493][T10898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.985581][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.997649][T10898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.026073][T10898] hsr_slave_0: entered promiscuous mode
[  191.030318][T10898] hsr_slave_1: entered promiscuous mode
[  191.032494][T10898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.034786][T10898] Cannot create hsr debugfs directory
[  191.162057][T10898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.275889][T10898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.301314][T10912] netlink: 'syz.0.1442': attribute type 39 has an invalid length.
[  191.375486][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.381571][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.385776][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.392435][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.396309][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.440742][T10898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.468181][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1442'.
[  191.508907][T10913] lo speed is unknown, defaulting to 1000
[  191.552826][T10898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.809588][T10913] chnl_net:caif_netlink_parms(): no params data found
[  191.940473][T10898] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  191.955184][T10898] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  192.022559][T10938] netlink: 'syz.0.1448': attribute type 3 has an invalid length.
[  192.051597][T10898] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  192.066902][T10913] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.070181][T10913] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.073408][T10913] bridge_slave_0: entered allmulticast mode
[  192.094045][T10913] bridge_slave_0: entered promiscuous mode
[  192.101801][T10898] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  192.108428][T10941] siw: device registration error -23
[  192.127961][T10913] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.130818][T10913] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.133985][T10913] bridge_slave_1: entered allmulticast mode
[  192.149120][T10913] bridge_slave_1: entered promiscuous mode
[  192.245262][T10913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.255586][T10956] netlink: 'syz.0.1451': attribute type 21 has an invalid length.
[  192.258848][T10913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.305778][T10913] team0: Port device team_slave_0 added
[  192.339192][T10913] team0: Port device team_slave_1 added
[  192.395340][T10913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.400973][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.411554][T10913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.454310][T10913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.457292][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.466893][T10913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.589339][T10913] hsr_slave_0: entered promiscuous mode
[  192.592641][T10913] hsr_slave_1: entered promiscuous mode
[  192.595851][T10913] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.600142][T10913] Cannot create hsr debugfs directory
[  192.727704][   T54] Bluetooth: hci0: command tx timeout
[  192.822414][T10898] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.846116][T10964] netlink: 'syz.0.1455': attribute type 1 has an invalid length.
[  192.849042][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1455'.
[  192.872847][T10913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.914881][T10898] 8021q: adding VLAN 0 to HW filter on device team0
[  192.922095][T10964] netlink: 'syz.0.1455': attribute type 4 has an invalid length.
[  192.970433][T10913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.988370][ T2180] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.991181][ T2180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.008551][ T2180] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.011047][ T2180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.070492][T10913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.131113][T10913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.227566][T10975] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1459'.
[  193.230661][T10975] netlink: 'syz.0.1459': attribute type 1 has an invalid length.
[  193.333686][T10913] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.342139][T10913] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.355309][T10913] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.364014][T10913] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.431012][T10898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.438346][   T54] Bluetooth: hci1: command tx timeout
[  193.496294][T10913] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.532390][T10993] netlink: 'syz.0.1462': attribute type 1 has an invalid length.
[  193.555360][T10993] 8021q: adding VLAN 0 to HW filter on device bond5
[  193.563283][T10898] veth0_vlan: entered promiscuous mode
[  193.577337][T10993] erspan0: entered allmulticast mode
[  193.583216][T10993] bond5: (slave erspan0): making interface the new active one
[  193.596690][T10993] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  193.624702][T10993] pim6reg1: entered promiscuous mode
[  193.626780][T10993] pim6reg1: entered allmulticast mode
[  193.665864][T10898] veth1_vlan: entered promiscuous mode
[  193.691171][T10913] 8021q: adding VLAN 0 to HW filter on device team0
[  193.728242][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.731031][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.742908][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.745787][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.793660][T10898] veth0_macvtap: entered promiscuous mode
[  193.806332][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'.
[  193.840905][T10898] veth1_macvtap: entered promiscuous mode
[  193.889275][T10898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.906321][T10898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.924801][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.932738][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  193.942601][T10898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.945943][T10898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.966231][T10898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.977384][T10898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.066904][T11002] No such timeout policy "syz0"
[  194.095297][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.115196][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.150872][  T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.153597][  T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.212808][T10913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.355979][T10913] veth0_vlan: entered promiscuous mode
[  194.378182][T11008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1467'.
[  194.383094][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'.
[  194.391060][T10913] veth1_vlan: entered promiscuous mode
[  194.445282][T10913] veth0_macvtap: entered promiscuous mode
[  194.454165][T11015] xt_l2tp: missing protocol rule (udp|l2tpip)
[  194.463339][T10913] veth1_macvtap: entered promiscuous mode
[  194.504415][T11017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1470'.
[  194.508634][T10913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.520158][T10913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.528789][T10913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.532703][T10913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.536645][T10913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.540415][T10913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.717904][ T2180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.721001][ T2180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.764038][T11021] lo speed is unknown, defaulting to 1000
[  194.808779][ T2180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.812965][ T2180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.072996][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.078090][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.082119][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.086550][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.089654][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.143882][T11030] lo speed is unknown, defaulting to 1000
[  196.270179][T11030] chnl_net:caif_netlink_parms(): no params data found
[  196.361750][T11030] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.364136][T11030] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.366541][T11030] bridge_slave_0: entered allmulticast mode
[  196.370584][T11030] bridge_slave_0: entered promiscuous mode
[  196.375375][T11030] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.377901][T11030] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.380267][T11030] bridge_slave_1: entered allmulticast mode
[  196.383494][T11030] bridge_slave_1: entered promiscuous mode
[  196.418605][T11030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.425690][T11030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.491182][T11030] team0: Port device team_slave_0 added
[  196.496887][T11030] team0: Port device team_slave_1 added
[  196.543358][T11030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.545495][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.555465][T11030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.563790][T11030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.566535][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.576577][T11030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.614599][T11030] hsr_slave_0: entered promiscuous mode
[  196.618273][T11030] hsr_slave_1: entered promiscuous mode
[  196.626864][T11030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.630428][T11030] Cannot create hsr debugfs directory
[  196.902805][T11030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.019914][T11030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.069745][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.073938][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.078179][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.082427][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.085786][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.154692][T11030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.255296][T11030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.276842][T11048] lo speed is unknown, defaulting to 1000
[  197.324035][T11054] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  197.573232][T11030] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  197.585035][T11030] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  197.606682][T11030] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  197.635580][T11030] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  197.662913][T11048] chnl_net:caif_netlink_parms(): no params data found
[  197.965051][T11048] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.977373][T11048] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.980060][T11048] bridge_slave_0: entered allmulticast mode
[  197.984066][T11048] bridge_slave_0: entered promiscuous mode
[  198.002074][T11048] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.007323][T11048] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.010340][T11048] bridge_slave_1: entered allmulticast mode
[  198.018199][T11048] bridge_slave_1: entered promiscuous mode
[  198.102410][T11048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.110612][T11048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.150423][T11048] team0: Port device team_slave_0 added
[  198.161599][   T54] Bluetooth: hci0: command tx timeout
[  198.168935][T11048] team0: Port device team_slave_1 added
[  198.201608][T11030] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.251409][T11048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.253764][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.287825][T11048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.295084][T11048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.301079][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.309521][T11048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.382747][T11048] hsr_slave_0: entered promiscuous mode
[  198.386241][T11048] hsr_slave_1: entered promiscuous mode
[  198.408095][T11048] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.410908][T11048] Cannot create hsr debugfs directory
[  198.415668][T11030] 8021q: adding VLAN 0 to HW filter on device team0
[  198.460168][T11085] netlink: 'syz.0.1482': attribute type 21 has an invalid length.
[  198.477819][T11085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.480553][T11085] IPv6: NLM_F_CREATE should be set when creating new route
[  198.482973][T11085] IPv6: NLM_F_CREATE should be set when creating new route
[  198.485810][T11085] IPv6: NLM_F_CREATE should be set when creating new route
[  198.493177][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'.
[  198.496608][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'.
[  198.500636][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'.
[  198.504864][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'.
[  198.509810][ T2180] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.512050][ T2180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.559217][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.561533][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.697014][T11048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.769643][T11048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.848351][T11048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.866887][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.945204][T11048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.030701][T11030] veth0_vlan: entered promiscuous mode
[  199.050560][T11030] veth1_vlan: entered promiscuous mode
[  199.127879][   T54] Bluetooth: hci1: command tx timeout
[  199.161376][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'.
[  199.211665][T11030] veth0_macvtap: entered promiscuous mode
[  199.220696][T11048] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.230977][T11048] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  199.239909][T11030] veth1_macvtap: entered promiscuous mode
[  199.245199][T11048] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  199.259793][T11048] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  199.332319][T11030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.355736][T11030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.373433][T11030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.376179][T11030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.382624][T11030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.391385][T11030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.534558][T11048] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.545500][T11111] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1488'.
[  199.557224][ T2180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.560344][ T2180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.612000][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.614535][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.624285][T11048] 8021q: adding VLAN 0 to HW filter on device team0
[  199.658242][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.661089][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.671240][T11114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1489'.
[  199.675402][T11113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1489'.
[  199.689333][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.692189][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.855247][T11048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.860614][T11048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.908264][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1491'.
[  199.911709][T11118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1491'.
[  199.930489][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'.
[  199.939722][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'.
[  199.964084][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'.
[  200.006287][T11048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.072295][T11048] veth0_vlan: entered promiscuous mode
[  200.094283][T11048] veth1_vlan: entered promiscuous mode
[  200.128462][T11131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.153995][T11048] veth0_macvtap: entered promiscuous mode
[  200.165085][T11048] veth1_macvtap: entered promiscuous mode
[  200.180203][T11048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.195431][T11048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.210083][T11048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.212780][T11048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.215788][T11048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.218861][T11048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.364865][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.372761][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.424658][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.428205][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.826661][T11135] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1494'.
[  201.834936][T11135] netlink: 'syz.0.1494': attribute type 4 has an invalid length.
[  202.038578][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  202.042965][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  202.046438][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  202.059863][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  202.063868][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  202.096627][T11138] lo speed is unknown, defaulting to 1000
[  202.225255][T11138] chnl_net:caif_netlink_parms(): no params data found
[  202.340129][T11138] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.342929][T11138] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.345835][T11138] bridge_slave_0: entered allmulticast mode
[  202.349841][T11138] bridge_slave_0: entered promiscuous mode
[  202.353470][T11138] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.362847][T11138] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.365845][T11138] bridge_slave_1: entered allmulticast mode
[  202.369703][T11138] bridge_slave_1: entered promiscuous mode
[  202.423510][T11138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.428668][T11138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.453144][T11138] team0: Port device team_slave_0 added
[  202.463902][T11138] team0: Port device team_slave_1 added
[  202.485235][T11138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.488070][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.497258][T11138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.502325][T11138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.504619][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.512683][T11138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.542816][T11138] hsr_slave_0: entered promiscuous mode
[  202.545310][T11138] hsr_slave_1: entered promiscuous mode
[  202.547968][T11138] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.550335][T11138] Cannot create hsr debugfs directory
[  202.689981][T11138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.791275][T11138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.912241][T11138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.024095][T11138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.045531][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  203.049293][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  203.053031][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  203.056450][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  203.062741][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  203.106869][T11158] lo speed is unknown, defaulting to 1000
[  203.196333][ T5838] nci: nci_rx_work: unknown MT 0x1
[  203.359031][T11158] chnl_net:caif_netlink_parms(): no params data found
[  203.439057][T11158] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.441692][T11158] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.444571][T11158] bridge_slave_0: entered allmulticast mode
[  203.449737][T11158] bridge_slave_0: entered promiscuous mode
[  203.454484][T11158] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.457723][T11158] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.460718][T11158] bridge_slave_1: entered allmulticast mode
[  203.464765][T11158] bridge_slave_1: entered promiscuous mode
[  203.521537][T11158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.574048][T11158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.640071][T11158] team0: Port device team_slave_0 added
[  203.645480][T11158] team0: Port device team_slave_1 added
[  203.697592][T11158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.700509][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.711076][T11158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.719497][T11158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.722215][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.732128][T11158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.783404][T11158] hsr_slave_0: entered promiscuous mode
[  203.786129][T11158] hsr_slave_1: entered promiscuous mode
[  203.794013][T11158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.797991][T11158] Cannot create hsr debugfs directory
[  203.856908][T11138] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  203.889568][T11138] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  203.941626][T11138] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  203.953684][T11138] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  204.049193][T11158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.091470][   T54] Bluetooth: hci0: command tx timeout
[  204.189156][T11158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.309540][T11158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.400064][T11158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.438871][T11138] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.456697][T11138] 8021q: adding VLAN 0 to HW filter on device team0
[  204.492091][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.494900][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.522665][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.525415][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.616882][T11138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.790166][T11158] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  204.804408][T11158] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  204.823353][T11158] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  204.832411][T11158] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  204.972754][T11138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.039067][T11158] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.079986][T11158] 8021q: adding VLAN 0 to HW filter on device team0
[  205.099147][T11138] veth0_vlan: entered promiscuous mode
[  205.120052][   T54] Bluetooth: hci1: command tx timeout
[  205.135031][T11138] veth1_vlan: entered promiscuous mode
[  205.143213][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.146082][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.160141][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.162985][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.259365][T11138] veth0_macvtap: entered promiscuous mode
[  205.270141][T11138] veth1_macvtap: entered promiscuous mode
[  205.347784][T11138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.365175][T11138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.384646][T11138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.391043][T11138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.399261][T11138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.404408][T11138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.525658][T11158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.574297][T11211] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  205.611353][T11211] 8021q: adding VLAN 0 to HW filter on device bond6
[  205.623312][ T2180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.626280][ T2180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.676933][T11210] bond6: (slave gretap1): making interface the new active one
[  205.685364][T11210] 
[  205.686373][T11210] ============================================
[  205.688765][T11210] WARNING: possible recursive locking detected
[  205.691132][T11210] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  205.694578][T11210] --------------------------------------------
[  205.697000][T11210] syz.0.1503/11210 is trying to acquire lock:
[  205.699299][T11210] ffff888027798558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  205.702614][T11210] 
[  205.702614][T11210] but task is already holding lock:
[  205.704829][T11210] ffff88803cb91158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  205.707976][T11210] 
[  205.707976][T11210] other info that might help us debug this:
[  205.710761][T11210]  Possible unsafe locking scenario:
[  205.710761][T11210] 
[  205.713043][T11210]        CPU0
[  205.714075][T11210]        ----
[  205.715107][T11210]   lock(&qdisc_xmit_lock_key#4);
[  205.716721][T11210]   lock(&qdisc_xmit_lock_key#4);
[  205.718612][T11210] 
[  205.718612][T11210]  *** DEADLOCK ***
[  205.718612][T11210] 
[  205.721466][T11210]  May be due to missing lock nesting notation
[  205.721466][T11210] 
[  205.724024][T11210] 9 locks held by syz.0.1503/11210:
[  205.725642][T11210]  #0: ffffffff8fa394e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  205.728920][T11210]  #1: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  205.731856][T11210]  #2: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  205.735298][T11210]  #3: ffff888047692258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  205.740008][T11210]  #4: ffff88803cb91158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  205.743257][T11210]  #5: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  205.746141][T11210]  #6: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  205.749179][T11210]  #7: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  205.752441][T11210]  #8: ffff88811a01b258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  205.756789][T11210] 
[  205.756789][T11210] stack backtrace:
[  205.758966][T11210] CPU: 0 UID: 0 PID: 11210 Comm: syz.0.1503 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  205.758988][T11210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.758998][T11210] Call Trace:
[  205.759005][T11210]  <TASK>
[  205.759012][T11210]  dump_stack_lvl+0x189/0x250
[  205.759035][T11210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.759053][T11210]  ? __pfx__printk+0x10/0x10
[  205.759074][T11210]  ? print_lock_name+0xde/0x100
[  205.759092][T11210]  print_deadlock_bug+0x28b/0x2a0
[  205.759109][T11210]  validate_chain+0x1a3f/0x2140
[  205.759125][T11210]  ? validate_xmit_xfrm+0xbf/0x1130
[  205.759148][T11210]  ? is_bpf_text_address+0x26/0x2b0
[  205.759162][T11210]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  205.759187][T11210]  __lock_acquire+0xab9/0xd20
[  205.759212][T11210]  ? sch_direct_xmit+0x153/0x4b0
[  205.759228][T11210]  lock_acquire+0x120/0x360
[  205.759242][T11210]  ? sch_direct_xmit+0x153/0x4b0
[  205.759261][T11210]  _raw_spin_lock+0x2e/0x40
[  205.759281][T11210]  ? sch_direct_xmit+0x153/0x4b0
[  205.759295][T11210]  sch_direct_xmit+0x153/0x4b0
[  205.759311][T11210]  ? __pfx_sch_direct_xmit+0x10/0x10
[  205.759330][T11210]  __dev_queue_xmit+0x17b6/0x3a70
[  205.759351][T11210]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.759376][T11210]  ? __dev_queue_xmit+0x27e/0x3a70
[  205.759398][T11210]  ? arpt_do_table+0x1dc4/0x1fd0
[  205.759451][T11210]  ? __pfx___dev_queue_xmit+0x10/0x10
[  205.759471][T11210]  ? arpt_do_table+0x238/0x1fd0
[  205.759487][T11210]  ? __pfx_arpt_do_table+0x10/0x10
[  205.759506][T11210]  ? NF_HOOK+0x9e/0x3a0
[  205.759516][T11210]  NF_HOOK+0x310/0x3a0
[  205.759527][T11210]  ? __pfx_arp_xmit_finish+0x10/0x10
[  205.759537][T11210]  ? NF_HOOK+0x9e/0x3a0
[  205.759546][T11210]  ? __pfx_NF_HOOK+0x10/0x10
[  205.759559][T11210]  ? __pfx_arp_xmit_finish+0x10/0x10
[  205.759576][T11210]  arp_xmit+0x16c/0x270
[  205.759586][T11210]  ? arp_xmit+0x23/0x270
[  205.759595][T11210]  arp_solicit+0xc1d/0xe60
[  205.759607][T11210]  ? arp_solicit+0x11a/0xe60
[  205.759617][T11210]  ? __pfx_arp_solicit+0x10/0x10
[  205.759630][T11210]  ? __neigh_event_send+0xf08/0x1560
[  205.759643][T11210]  ? __pfx_arp_solicit+0x10/0x10
[  205.759655][T11210]  __neigh_event_send+0xf70/0x1560
[  205.759674][T11210]  neigh_resolve_output+0x198/0x750
[  205.759691][T11210]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  205.759709][T11210]  ip_finish_output2+0xd40/0x1160
[  205.759722][T11210]  ? ip_skb_dst_mtu+0x147/0xc50
[  205.759744][T11210]  ? ip_finish_output2+0x452/0x1160
[  205.759758][T11210]  ? __pfx_ip_finish_output2+0x10/0x10
[  205.759771][T11210]  ? ip_skb_dst_mtu+0x147/0xc50
[  205.759789][T11210]  ? ip_skb_dst_mtu+0x147/0xc50
[  205.759809][T11210]  ? ip_skb_dst_mtu+0x970/0xc50
[  205.759830][T11210]  ? __ip_finish_output+0x336/0x3f0
[  205.759843][T11210]  iptunnel_xmit+0x571/0xa00
[  205.759865][T11210]  ip_tunnel_xmit+0x1c3c/0x2380
[  205.759887][T11210]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  205.759899][T11210]  ? gre_build_header+0x3fd/0xa40
[  205.759923][T11210]  ? __pfx_gre_build_header+0x10/0x10
[  205.759946][T11210]  gre_tap_xmit+0x590/0x7a0
[  205.759967][T11210]  ? __pfx_gre_tap_xmit+0x10/0x10
[  205.759985][T11210]  ? __lock_acquire+0xab9/0xd20
[  205.760003][T11210]  dev_hard_start_xmit+0x2d7/0x830
[  205.760028][T11210]  sch_direct_xmit+0x241/0x4b0
[  205.760046][T11210]  ? __pfx_sch_direct_xmit+0x10/0x10
[  205.760061][T11210]  ? netlink_rcv_skb+0x208/0x470
[  205.760080][T11210]  __dev_queue_xmit+0x17b6/0x3a70
[  205.760103][T11210]  ? __dev_queue_xmit+0x27e/0x3a70
[  205.760128][T11210]  ? __pfx___dev_queue_xmit+0x10/0x10
[  205.760149][T11210]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  205.760165][T11210]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  205.760184][T11210]  ? __build_skb_around+0x257/0x3e0
[  205.760217][T11210]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  205.760234][T11210]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  205.760256][T11210]  ? alb_send_lp_vid+0x139/0x510
[  205.760279][T11210]  alb_send_lp_vid+0x324/0x510
[  205.760302][T11210]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  205.760326][T11210]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[  205.760347][T11210]  alb_send_learning_packets+0x10d/0x2c0
[  205.760366][T11210]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  205.760389][T11210]  ? alb_swap_mac_addr+0x221/0x320
[  205.760408][T11210]  ? dev_addr_check+0x20/0x250
[  205.760455][T11210]  alb_fasten_mac_swap+0x665/0xfa0
[  205.760480][T11210]  bond_alb_handle_active_change+0xc10/0xec0
[  205.760506][T11210]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[  205.760533][T11210]  ? __local_bh_enable_ip+0x12d/0x1c0
[  205.760554][T11210]  bond_change_active_slave+0x1048/0x3770
[  205.760580][T11210]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  205.760602][T11210]  ? __pfx_bond_change_active_slave+0x10/0x10
[  205.760621][T11210]  ? __queue_work+0x103/0xfe0
[  205.760639][T11210]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  205.760656][T11210]  ? mod_delayed_work_on+0x128/0x200
[  205.760672][T11210]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.760694][T11210]  ? mod_delayed_work_on+0x1ac/0x200
[  205.760712][T11210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.760730][T11210]  ? netdev_change_features+0x8d/0xd0
[  205.760754][T11210]  bond_select_active_slave+0x8e2/0xd00
[  205.760777][T11210]  ? __pfx_bond_select_active_slave+0x10/0x10
[  205.760796][T11210]  ? __pfx_bond_set_carrier+0x10/0x10
[  205.760817][T11210]  ? netdev_is_rx_handler_busy+0x6e/0x140
[  205.760837][T11210]  ? __pfx_bond_handle_frame+0x10/0x10
[  205.760858][T11210]  bond_enslave+0x229c/0x3a20
[  205.760887][T11210]  ? __pfx_bond_enslave+0x10/0x10
[  205.760912][T11210]  ? __pfx___dev_notify_flags+0x10/0x10
[  205.760930][T11210]  ? mutex_is_locked+0x17/0x50
[  205.760948][T11210]  do_set_master+0x533/0x6d0
[  205.760968][T11210]  rtnl_newlink_create+0x677/0xb00
[  205.760989][T11210]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  205.761006][T11210]  ? rtnl_newlink+0x8db/0x1c70
[  205.761020][T11210]  ? __pfx___mutex_lock+0x10/0x10
[  205.761037][T11210]  ? ns_capable+0x8a/0xf0
[  205.761054][T11210]  rtnl_newlink+0x16d6/0x1c70
[  205.761074][T11210]  ? __pfx_rtnl_newlink+0x10/0x10
[  205.761091][T11210]  ? __lock_acquire+0xab9/0xd20
[  205.761110][T11210]  ? __lock_acquire+0xab9/0xd20
[  205.761130][T11210]  ? is_bpf_text_address+0x26/0x2b0
[  205.761148][T11210]  ? is_bpf_text_address+0x292/0x2b0
[  205.761162][T11210]  ? is_bpf_text_address+0x26/0x2b0
[  205.761178][T11210]  ? kernel_text_address+0xa5/0xe0
[  205.761203][T11210]  ? __lock_acquire+0xab9/0xd20
[  205.761227][T11210]  ? __pfx_rtnl_newlink+0x10/0x10
[  205.761242][T11210]  rtnetlink_rcv_msg+0x7cf/0xb70
[  205.761259][T11210]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  205.761274][T11210]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  205.761294][T11210]  netlink_rcv_skb+0x208/0x470
[  205.761311][T11210]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  205.761327][T11210]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  205.761347][T11210]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.761364][T11210]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.761382][T11210]  netlink_unicast+0x75c/0x8e0
[  205.761400][T11210]  netlink_sendmsg+0x805/0xb30
[  205.761456][T11210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.761477][T11210]  ? aa_sock_msg_perm+0x94/0x160
[  205.761499][T11210]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  205.761519][T11210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.761535][T11210]  __sock_sendmsg+0x21c/0x270
[  205.761549][T11210]  ____sys_sendmsg+0x505/0x830
[  205.761570][T11210]  ? __pfx_____sys_sendmsg+0x10/0x10
[  205.761590][T11210]  ? import_iovec+0x74/0xa0
[  205.761607][T11210]  ___sys_sendmsg+0x21f/0x2a0
[  205.761626][T11210]  ? __pfx____sys_sendmsg+0x10/0x10
[  205.761657][T11210]  ? __fget_files+0x2a/0x420
[  205.761675][T11210]  ? __fget_files+0x3a0/0x420
[  205.761697][T11210]  __x64_sys_sendmsg+0x19b/0x260
[  205.761715][T11210]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  205.761736][T11210]  ? __sys_socketpair+0x112/0x560
[  205.761752][T11210]  ? do_syscall_64+0xbe/0x3b0
[  205.761767][T11210]  do_syscall_64+0xfa/0x3b0
[  205.761780][T11210]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.761802][T11210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.761816][T11210]  ? exc_page_fault+0x9f/0xf0
[  205.761837][T11210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.761852][T11210] RIP: 0033:0x7f4a3098e929
[  205.761866][T11210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.761879][T11210] RSP: 002b:00007f4a31865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.761895][T11210] RAX: ffffffffffffffda RBX: 00007f4a30bb5fa0 RCX: 00007f4a3098e929
[  205.761906][T11210] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000005
[  205.761916][T11210] RBP: 00007f4a30a10b39 R08: 0000000000000000 R09: 0000000000000000
[  205.761925][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.761934][T11210] R13: 0000000000000000 R14: 00007f4a30bb5fa0 R15: 00007ffff30a84a8
[  205.761951][T11210]  </TASK>
[  206.057910][T11210] bond6: (slave gretap1): Enslaving as an active interface with an up link
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  206.076373][T11210] syz.0.1503 (11210) used greatest stack depth: 16040 bytes left
[  206.093503][T11158] veth0_vlan: entered promiscuous mode
[  206.097978][T11158] veth1_vlan: entered promiscuous mode
[  206.113603][T11158] veth0_macvtap: entered promiscuous mode
[  206.116977][T11158] veth1_macvtap: entered promiscuous mode
[  206.124080][T11158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.128128][T11158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.131744][T11158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.134644][T11158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.137274][T11158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.139985][T11158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.169039][   T54] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
08:35:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=000000000002e120 RDI=000000000002e121 RBP=00000000000003f9 RSP=ffffc90006864970
R8 =ffff888108c20237 R9 =1ffff11021184046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4a318656c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffffffffffffff CR3=0000000128ee6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f4a30a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c139e0d95380f800 RBX=ffffffff81976c78 RCX=c139e0d95380f800 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000014c0 CR3=00000000466be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=096c000003000000 000000306e616c77
XMM02=668600007fff0b60 668c000000010000 XMM03=0000000000000000 0000000000000000
XMM04=0000ffff00ffffff ffffff0000000000 XMM05=0000000000000000 00007fce2aa11b1f
XMM06=0000000000000000 00007fce2aa11b19 XMM07=0000000000000000 00007fce2aa11b2d
XMM08=0000000000000000 00007fce2aa11bb3 XMM09=0000000000000000 00007fce2aa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
