last executing test programs:

1m30.115706591s ago: executing program 0 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x2, 0x7, 0xb, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async)
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='\a', 0x1}], 0x1)

1m21.216520726s ago: executing program 0 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x2, 0x7, 0xb, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async)
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='\a', 0x1}], 0x1)

1m10.151485747s ago: executing program 0 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x2, 0x7, 0xb, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async)
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='\a', 0x1}], 0x1)

1m2.733014189s ago: executing program 0 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x2, 0x7, 0xb, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async)
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='\a', 0x1}], 0x1)

15.299962247s ago: executing program 0 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x2, 0x7, 0xb, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async)
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='\a', 0x1}], 0x1)

6.319218985s ago: executing program 0 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x2, 0x7, 0xb, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r7}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async)
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='\a', 0x1}], 0x1)

4.482067055s ago: executing program 1 (id=1481):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000007fffffff00000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00fb0000000000000000000032000001073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)

4.481180599s ago: executing program 1 (id=1483):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYBLOB, @ANYRESOCT], 0x38}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="65de5fe2a761dbdfcd302789bf698199b7f32909fe796e45181f81dea196dbafd5a99379672d741de0328dce483cb0a8d3bc10b97569792b276320e3b4db9580882dcf0e834139074be278902e39659181", @ANYBLOB="010000000000000000000f00"], 0x30}}, 0x20088004)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x18}}, 0x0)

3.490187821s ago: executing program 1 (id=1487):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
close(0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x0, 0x1}}, 0x1c}}, 0x0)
unshare(0x22020400)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r4, 0x8004b708, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000024b98c1f6f36a42a38fdb8db2c7da15ce784ea0b5769b302a9b3b8fddc092edb900c0010be530891a759ea74"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xc4, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x27}, @generic={0x7, 0x12, "09908fc3a3000000f40066e4a7b1b4f2"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2}, {"43c82f33abd0a9d0ca1883007b8f8fabcb76a98343ccfe4ea3964f66d846f2b120b7515ccebf6bf20cfec673c0b4bd025fee40acdd424a17d2049d69b09beda4b8657c72f42d26f3500e9195ee13ba8ec70aab23d80dbad879d8018d307e7bb3da84fc657bf8ec00"/118}}}}}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r6=>0x0, <r7=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={r6, r7/1000+60000}, 0x10)
socket$inet(0x2, 0x3, 0x2)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x4048800)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r9, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84)
unshare(0x40000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))

2.868537435s ago: executing program 1 (id=1488):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x42}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000"], 0xbc}}, 0x0)
r5 = socket(0x10, 0x80003, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
recvmsg$unix(r5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'sit0\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x0, 0x10000, 0x6, 0xd9b, 0x5})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r2, 0xffffffffffffffff, 0xfd91fc133e1b2663, 0x2024}, 0x20)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}, "d8"}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

1.787737163s ago: executing program 1 (id=1491):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000003000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

849.977798ms ago: executing program 1 (id=1495):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000095000000000009588f39e2ec00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000180))
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, 0x0)
clock_gettime(0x0, &(0x7f00000004c0)={<r4=>0x0, <r5=>0x0})
ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r0, 0x8}, {r0}, {r0, 0x1001}], 0x4, &(0x7f0000000080)={r4, r5+60000000}, &(0x7f00000000c0)={[0xfff]}, 0x8)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x0, 0x40, "58f2e4", 0x3, 0xfc})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r6}, 0x18)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socketpair(0x1, 0x5, 0x8, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)
sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x4000890}, 0x40080)
pipe(&(0x7f0000000000))

542.203147ms ago: executing program 2 (id=1500):
write$nci(0xffffffffffffffff, &(0x7f0000000000)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x7, 0x1}, 0x4)

470.071591ms ago: executing program 2 (id=1501):
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000041ff020000000000000000000000000001880000000000010000000000000290"], 0x0)

467.62182ms ago: executing program 2 (id=1502):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000b40)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x2, "84f71d5d61340c"})
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0x7, 0x8, 0x41890ab6, 0x4]}, &(0x7f0000000140)=0x78)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001b40)={r1, 0x5})

362.040444ms ago: executing program 2 (id=1503):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
recvmmsg(r1, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x4c, 0x1a, 0x238, 0x2d, 0x378, 0x258, 0x258, 0x378, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x208, 0x238, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@ipv4={'\x00', '\xff\xff', @dev}, @private1, @mcast1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @mcast2, @private2, @dev, @dev, @rand_addr=' \x01\x00', @empty, @loopback, @mcast2, @remote, @private1]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'})

361.768231ms ago: executing program 2 (id=1504):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.high\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000000201050000000000000000000300000a14001980080002005100000008000200480a000008000c400000000234000e800c000280050001003a0000001400018008000100c21414aa080002000a01010106000340000300000600034000000000080008400000ffff0c000f8008000340000000070800034000000081080002400000ee340800034000000ff208000140000000060800084000000006100016400000000b0000000100000009060012"], 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x20000080)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@private2, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0x7})
syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006000000000000000fc010000000000000000000000000000fc0200000000000000000000000000003a010000000000000c520000000000008000000000"], 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040)
unshare(0x60000)
close(0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x0)

0s ago: executing program 2 (id=1505):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0xa, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000100110000000000000000000000000064000100010882848b960c121824"], 0x2e)
nanosleep(&(0x7f0000000340), &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="b0000000d50fe1130800001000000002000000005ebc000000000000000800000000"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108021100000008021100000020000100000001100128828450"], 0x28)

kernel console output (not intermixed with test programs):

, priority 10
[  114.167448][ T8161] hsr_slave_0: entered promiscuous mode
[  114.178501][ T8161] hsr_slave_1: entered promiscuous mode
[  114.182591][ T8161] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.185646][ T8161] Cannot create hsr debugfs directory
[  114.212465][   T13] bridge_slave_1: left allmulticast mode
[  114.214773][   T13] bridge_slave_1: left promiscuous mode
[  114.217148][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.229708][ T8211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.232944][ T8211] IPv6: NLM_F_CREATE should be set when creating new route
[  114.239027][   T13] bridge_slave_0: left allmulticast mode
[  114.247575][   T13] bridge_slave_0: left promiscuous mode
[  114.250166][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.255089][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'.
[  114.669508][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.676789][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.682250][   T13] bond0 (unregistering): Released all slaves
[  115.217254][   T13] hsr_slave_0: left promiscuous mode
[  115.225522][   T13] hsr_slave_1: left promiscuous mode
[  115.227911][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.230228][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.235447][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.238996][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.265840][   T13] veth1_macvtap: left promiscuous mode
[  115.267911][   T13] veth0_macvtap: left promiscuous mode
[  115.270204][   T13] veth1_vlan: left promiscuous mode
[  115.278203][   T13] veth0_vlan: left promiscuous mode
[  115.282297][ T5222] Bluetooth: hci0: command tx timeout
[  115.466215][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'.
[  115.469518][ T8268] netlink: 120 bytes leftover after parsing attributes in process `syz.2.601'.
[  115.724350][   T13] team0 (unregistering): Port device team_slave_1 removed
[  115.748409][   T13] team0 (unregistering): Port device team_slave_0 removed
[  116.203179][ T8272] netlink: 'syz.1.602': attribute type 3 has an invalid length.
[  116.206654][ T8272] netlink: 'syz.1.602': attribute type 2 has an invalid length.
[  116.531710][ T8161] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  116.542028][ T8161] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  116.548775][ T8161] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  116.564974][ T8161] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  116.920244][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.956699][ T8161] 8021q: adding VLAN 0 to HW filter on device team0
[  116.978304][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.981241][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.007012][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.009733][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.278285][ T8161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.300475][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'.
[  117.314461][ T8320] netlink: 'syz.1.610': attribute type 4 has an invalid length.
[  117.325085][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'.
[  117.343717][ T8319] tap0: tun_chr_ioctl cmd 1074025677
[  117.346018][ T8319] tap0: linktype set to 0
[  117.361870][ T5222] Bluetooth: hci0: command tx timeout
[  117.409313][ T8161] veth0_vlan: entered promiscuous mode
[  117.429323][ T8161] veth1_vlan: entered promiscuous mode
[  117.457110][ T8161] veth0_macvtap: entered promiscuous mode
[  117.466318][ T8161] veth1_macvtap: entered promiscuous mode
[  117.476709][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.495988][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.512949][ T8161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.515999][ T8161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.518719][ T8161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.523992][ T8161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.599738][ T6029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.605019][ T6029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.624504][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.628160][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.088709][ T8349] erspan0: left allmulticast mode
[  118.090557][ T8349] erspan0: left promiscuous mode
[  118.092778][ T8349] bridge0: port 3(erspan0) entered disabled state
[  118.329524][ T8359] __nla_validate_parse: 1 callbacks suppressed
[  118.329541][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.625'.
[  118.340987][ T8359] netlink: 240 bytes leftover after parsing attributes in process `syz.1.625'.
[  118.349891][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'.
[  118.356968][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'.
[  118.360483][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'.
[  118.588322][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'.
[  118.592205][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.177535][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.837782][ T8393] netlink: 'syz.1.635': attribute type 1 has an invalid length.
[  119.851758][ T8393] netlink: 228 bytes leftover after parsing attributes in process `syz.1.635'.
[  119.857279][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'.
[  119.966189][ T8399] netlink: 68 bytes leftover after parsing attributes in process `syz.1.635'.
[  120.126337][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.134977][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.140172][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.152221][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.159240][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.566524][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.634296][ T8405] chnl_net:caif_netlink_parms(): no params data found
[  120.730095][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.733356][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.736305][ T8405] bridge_slave_0: entered allmulticast mode
[  120.740317][ T8405] bridge_slave_0: entered promiscuous mode
[  120.746128][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.748756][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.753356][ T8405] bridge_slave_1: entered allmulticast mode
[  120.757687][ T8405] bridge_slave_1: entered promiscuous mode
[  120.803806][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.848063][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.858205][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.922131][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.018712][ T8405] team0: Port device team_slave_0 added
[  121.039600][ T8405] team0: Port device team_slave_1 added
[  121.090958][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.097411][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.110735][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.118503][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.125375][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.138379][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.205464][ T8430] syzkaller1: entered promiscuous mode
[  121.208868][ T8430] syzkaller1: entered allmulticast mode
[  121.388677][ T8405] hsr_slave_0: entered promiscuous mode
[  121.405176][ T8405] hsr_slave_1: entered promiscuous mode
[  121.409022][   T13] bridge_slave_1: left allmulticast mode
[  121.413583][   T13] bridge_slave_1: left promiscuous mode
[  121.418673][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.440368][   T13] bridge_slave_0: left allmulticast mode
[  121.448969][   T13] bridge_slave_0: left promiscuous mode
[  121.451645][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.546071][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'.
[  121.555555][ T8440] netlink: 'syz.1.644': attribute type 13 has an invalid length.
[  121.558755][ T8440] netlink: 'syz.1.644': attribute type 17 has an invalid length.
[  121.838183][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.849114][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.855737][   T13] bond0 (unregistering): Released all slaves
[  122.257767][ T5222] Bluetooth: hci0: command tx timeout
[  122.339628][   T13] hsr_slave_0: left promiscuous mode
[  122.342652][   T13] hsr_slave_1: left promiscuous mode
[  122.345035][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.347940][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.353495][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.356887][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.377102][   T13] veth1_macvtap: left promiscuous mode
[  122.379520][   T13] veth0_macvtap: left promiscuous mode
[  122.382026][   T13] veth1_vlan: left promiscuous mode
[  122.383839][   T13] veth0_vlan: left promiscuous mode
[  122.859853][   T13] team0 (unregistering): Port device team_slave_1 removed
[  122.896789][   T13] team0 (unregistering): Port device team_slave_0 removed
[  123.856450][ T8479] netlink: 'syz.2.653': attribute type 13 has an invalid length.
[  123.859534][ T8479] netlink: 'syz.2.653': attribute type 17 has an invalid length.
[  123.984025][ T8479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.325817][ T5222] Bluetooth: hci0: command tx timeout
[  124.617501][ T8405] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  124.637767][ T8405] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  124.661999][ T8405] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  124.695157][ T8405] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  124.828613][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.880695][ T8405] 8021q: adding VLAN 0 to HW filter on device team0
[  124.918570][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.921340][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.948668][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.950902][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.991892][ T8528] __nla_validate_parse: 1 callbacks suppressed
[  124.991906][ T8528] netlink: 84 bytes leftover after parsing attributes in process `syz.2.657'.
[  125.165222][ T8544] netlink: 76 bytes leftover after parsing attributes in process `syz.2.659'.
[  125.313214][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.385709][ T8405] veth0_vlan: entered promiscuous mode
[  125.394759][ T8405] veth1_vlan: entered promiscuous mode
[  125.439899][ T8405] veth0_macvtap: entered promiscuous mode
[  125.451759][ T8405] veth1_macvtap: entered promiscuous mode
[  125.467534][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.476918][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.545333][ T8405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.548521][ T8405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.564399][ T8405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.567547][ T8405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.764969][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.769647][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.812126][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.815320][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.892338][ T8569] netlink: 'syz.2.667': attribute type 3 has an invalid length.
[  125.897546][ T8569] netlink: 'syz.2.667': attribute type 2 has an invalid length.
[  126.325552][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.676'.
[  126.329096][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'.
[  126.333905][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.676'.
[  126.337496][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.676'.
[  126.415782][ T8601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.676'.
[  126.557178][ T8607] netlink: 'syz.1.681': attribute type 10 has an invalid length.
[  126.569139][ T8607] team0: Device ipvlan1 failed to register rx_handler
[  126.587225][ T8607] netlink: 277 bytes leftover after parsing attributes in process `syz.1.681'.
[  127.629030][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.213195][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'.
[  128.231738][ T8650] netlink: 216 bytes leftover after parsing attributes in process `syz.1.689'.
[  128.393388][ T8655] netlink: 'syz.2.692': attribute type 10 has an invalid length.
[  128.404075][ T8655] netlink: 'syz.2.692': attribute type 17 has an invalid length.
[  128.465599][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.470062][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.482520][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.487510][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.491325][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.839444][ T8660] chnl_net:caif_netlink_parms(): no params data found
[  128.934106][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.937575][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.940287][ T8660] bridge_slave_0: entered allmulticast mode
[  128.945719][ T8660] bridge_slave_0: entered promiscuous mode
[  128.950350][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.953343][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.955883][ T8660] bridge_slave_1: entered allmulticast mode
[  128.957781][ T8677] x_tables: duplicate underflow at hook 1
[  128.959070][ T8660] bridge_slave_1: entered promiscuous mode
[  128.996896][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.003885][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.070574][ T8660] team0: Port device team_slave_0 added
[  129.076457][ T8679] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  129.081054][ T8679] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  129.088073][ T8660] team0: Port device team_slave_1 added
[  129.264894][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.283695][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.288554][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.300257][ T8660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.306672][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.309286][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.321776][ T8660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.344840][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.445473][ T8660] hsr_slave_0: entered promiscuous mode
[  129.448032][ T8660] hsr_slave_1: entered promiscuous mode
[  129.450286][ T8660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.454658][ T8660] Cannot create hsr debugfs directory
[  129.483885][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.754797][   T13] bridge_slave_1: left allmulticast mode
[  129.756904][   T13] bridge_slave_1: left promiscuous mode
[  129.759085][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.768780][   T13] bridge_slave_0: left allmulticast mode
[  129.770953][   T13] bridge_slave_0: left promiscuous mode
[  129.775947][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.123252][ T8708] netlink: 'syz.1.708': attribute type 13 has an invalid length.
[  130.127993][ T8708] netlink: 'syz.1.708': attribute type 17 has an invalid length.
[  130.205792][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.212175][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.215982][   T13] bond0 (unregistering): Released all slaves
[  130.255748][ T8708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.364631][ T8716] __nla_validate_parse: 56 callbacks suppressed
[  130.364647][ T8716] netlink: 68 bytes leftover after parsing attributes in process `syz.1.710'.
[  130.516528][ T3015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  130.564762][   T54] Bluetooth: hci0: command tx timeout
[  130.744016][   T13] hsr_slave_0: left promiscuous mode
[  130.750306][   T13] hsr_slave_1: left promiscuous mode
[  130.756647][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.759640][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.765388][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.768516][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.791091][   T13] veth1_macvtap: left promiscuous mode
[  130.795998][   T13] veth0_macvtap: left promiscuous mode
[  130.798319][   T13] veth1_vlan: left promiscuous mode
[  130.801868][   T13] veth0_vlan: left promiscuous mode
[  131.427091][   T13] team0 (unregistering): Port device team_slave_1 removed
[  131.480989][   T13] team0 (unregistering): Port device team_slave_0 removed
[  132.103160][ T8747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.167519][ T8748] syzkaller0: entered promiscuous mode
[  132.169357][ T8748] syzkaller0: entered allmulticast mode
[  132.172500][ T8748] tipc: Resetting bearer <eth:syzkaller0>
[  132.285163][ T8744] tipc: Resetting bearer <eth:syzkaller0>
[  132.496470][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.499282][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.642158][   T54] Bluetooth: hci0: command 0x041b tx timeout
[  134.415814][ T8744] tipc: Disabling bearer <eth:syzkaller0>
[  134.589004][ T8660] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  134.640664][ T8660] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  134.656696][ T8660] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  134.667488][ T8771] netlink: 277 bytes leftover after parsing attributes in process `syz.1.725'.
[  134.681538][ T8660] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  134.722091][ T5222] Bluetooth: hci0: command 0x041b tx timeout
[  134.756544][ T8784] netlink: 304 bytes leftover after parsing attributes in process `syz.1.727'.
[  135.098219][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.136969][ T8660] 8021q: adding VLAN 0 to HW filter on device team0
[  135.169012][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.172283][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.331126][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.334180][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.675695][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.678521][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.698248][ T8817] batman_adv: batadv0: Interface deactivated: dummy0
[  135.797834][ T8817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.826700][ T8817] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.973813][ T8817] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.976642][ T8817] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.979315][ T8817] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.983087][ T8817] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.080347][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.131539][ T8826] netlink: 272 bytes leftover after parsing attributes in process `syz.2.733'.
[  136.159169][ T8826] netlink: 84 bytes leftover after parsing attributes in process `syz.2.733'.
[  136.171710][ T8660] veth0_vlan: entered promiscuous mode
[  136.195810][ T8660] veth1_vlan: entered promiscuous mode
[  136.228603][ T8660] veth0_macvtap: entered promiscuous mode
[  136.235649][ T8660] veth1_macvtap: entered promiscuous mode
[  136.259973][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.282494][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.303902][ T8660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.311778][ T8660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.315225][ T8660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.318585][ T8660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.339984][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  136.344388][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  136.490621][  T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.504233][  T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.550429][  T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.556057][  T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.806244][ T5694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.542861][ T5694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.619676][ T8906] netlink: 88 bytes leftover after parsing attributes in process `syz.2.753'.
[  138.692158][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.697564][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.701277][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.708668][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.716999][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.971187][ T5694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.991332][ T8927] netlink: 'syz.2.759': attribute type 3 has an invalid length.
[  138.998235][ T8927] netlink: 'syz.2.759': attribute type 2 has an invalid length.
[  139.026791][ T8913] chnl_net:caif_netlink_parms(): no params data found
[  139.077281][ T5694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.118395][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'.
[  139.134280][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'.
[  139.189539][ T8938] netlink: 165 bytes leftover after parsing attributes in process `syz.1.764'.
[  139.261157][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.274076][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.277171][ T8913] bridge_slave_0: entered allmulticast mode
[  139.281025][ T8913] bridge_slave_0: entered promiscuous mode
[  139.308290][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.315277][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.318123][ T8913] bridge_slave_1: entered allmulticast mode
[  139.324313][ T8913] bridge_slave_1: entered promiscuous mode
[  139.387944][ T8913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.466231][ T8913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.506558][ T5694] bridge_slave_1: left allmulticast mode
[  139.508436][ T5694] bridge_slave_1: left promiscuous mode
[  139.510217][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.519480][ T5694] bridge_slave_0: left allmulticast mode
[  139.521309][ T5694] bridge_slave_0: left promiscuous mode
[  139.531158][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.942499][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.948687][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.954200][ T5694] bond0 (unregistering): Released all slaves
[  140.064173][ T8913] team0: Port device team_slave_0 added
[  140.111732][ T8913] team0: Port device team_slave_1 added
[  140.115338][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'.
[  140.163258][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.165511][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.174298][ T8913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.190908][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.195357][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.204027][ T8913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.405815][ T8913] hsr_slave_0: entered promiscuous mode
[  140.409150][ T8913] hsr_slave_1: entered promiscuous mode
[  140.552226][ T5694] hsr_slave_0: left promiscuous mode
[  140.554483][ T5694] hsr_slave_1: left promiscuous mode
[  140.560162][ T5694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.568396][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.583776][ T5694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.587029][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.607459][ T5694] veth1_macvtap: left promiscuous mode
[  140.610087][ T5694] veth0_macvtap: left promiscuous mode
[  140.613894][ T5694] veth1_vlan: left promiscuous mode
[  140.615907][ T5694] veth0_vlan: left promiscuous mode
[  140.805886][ T5222] Bluetooth: hci0: command tx timeout
[  141.015624][ T5694] team0 (unregistering): Port device team_slave_1 removed
[  141.043310][ T5694] team0 (unregistering): Port device team_slave_0 removed
[  141.487602][ T8993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.772'.
[  141.739356][ T9003] netlink: 'syz.1.774': attribute type 13 has an invalid length.
[  141.747519][ T9003] netlink: 'syz.1.774': attribute type 17 has an invalid length.
[  141.785305][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.788803][ T9003] 8021q: adding VLAN 0 to HW filter on device team0
[  141.795547][ T9003] batman_adv: batadv0: Interface activated: dummy0
[  141.800251][ T9003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.992996][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.053439][ T9008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.116270][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.204265][ T8913] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  142.213601][ T8913] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  142.219159][ T8913] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  142.232500][ T8913] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  142.320449][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.340565][ T8913] 8021q: adding VLAN 0 to HW filter on device team0
[  142.349836][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.352898][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.373792][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.376427][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.546053][ T8913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.615703][ T8913] veth0_vlan: entered promiscuous mode
[  142.627287][ T8913] veth1_vlan: entered promiscuous mode
[  142.677193][ T8913] veth0_macvtap: entered promiscuous mode
[  142.681818][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'.
[  142.693971][ T8913] veth1_macvtap: entered promiscuous mode
[  142.796972][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.799883][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'.
[  142.813061][ T9049] netlink: 312 bytes leftover after parsing attributes in process `syz.2.780'.
[  142.824064][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.828084][ T9046] netlink: 312 bytes leftover after parsing attributes in process `syz.2.780'.
[  142.838917][ T8913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.849415][ T8913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.857117][ T8913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.860105][ T8913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.882937][ T5222] Bluetooth: hci0: command tx timeout
[  142.964882][ T9056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'.
[  143.000981][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.006625][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.053511][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.057000][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.556663][ T9086] netem: incorrect gi model size
[  143.560007][ T9086] netlink: 277 bytes leftover after parsing attributes in process `syz.2.792'.
[  143.583213][ T9088] tc_dump_action: action bad kind
[  143.837211][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  144.387305][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'.
[  144.390053][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'.
[  144.426832][ T9132] bridge0: port 3(erspan0) entered blocking state
[  144.429758][ T9132] bridge0: port 3(erspan0) entered disabled state
[  144.434547][ T9132] erspan0: entered allmulticast mode
[  144.437690][ T9132] erspan0: entered promiscuous mode
[  144.441727][ T9132] bridge0: port 3(erspan0) entered blocking state
[  144.443860][ T9132] bridge0: port 3(erspan0) entered forwarding state
[  144.447620][ T9132] erspan0: left allmulticast mode
[  144.449242][ T9132] erspan0: left promiscuous mode
[  144.450956][ T9132] bridge0: port 3(erspan0) entered disabled state
[  144.616692][ T9143] dvmrp0: left allmulticast mode
[  144.669227][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.953930][ T1269] IPVS: starting estimator thread 0...
[  145.960376][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  145.965263][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  145.968690][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  145.979815][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  145.983500][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.041709][ T9162] IPVS: using max 62 ests per chain, 148800 per kthread
[  146.195608][ T9163] chnl_net:caif_netlink_parms(): no params data found
[  146.246356][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.300238][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.302815][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.305841][ T9163] bridge_slave_0: entered allmulticast mode
[  146.310969][ T9163] bridge_slave_0: entered promiscuous mode
[  146.334959][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.341916][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.344353][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.346831][ T9163] bridge_slave_1: entered allmulticast mode
[  146.350555][ T9163] bridge_slave_1: entered promiscuous mode
[  146.379860][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.389798][ T9187] netlink: 'syz.2.829': attribute type 13 has an invalid length.
[  146.395386][ T9187] netlink: 'syz.2.829': attribute type 17 has an invalid length.
[  146.405653][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.416787][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.424001][ T9187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.478929][ T9163] team0: Port device team_slave_0 added
[  146.499339][ T9163] team0: Port device team_slave_1 added
[  146.564411][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.575889][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.579901][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.592522][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.622277][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.635097][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.637992][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.649464][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.679059][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.768154][ T9163] hsr_slave_0: entered promiscuous mode
[  146.771896][ T9163] hsr_slave_1: entered promiscuous mode
[  146.774977][ T9163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.778849][ T9163] Cannot create hsr debugfs directory
[  146.782312][   T13] bridge_slave_1: left allmulticast mode
[  146.785311][   T13] bridge_slave_1: left promiscuous mode
[  146.787890][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.795154][   T13] bridge_slave_0: left allmulticast mode
[  146.797679][   T13] bridge_slave_0: left promiscuous mode
[  146.800178][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.952959][ T9191] __nla_validate_parse: 1 callbacks suppressed
[  146.952976][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'.
[  147.005704][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'.
[  147.136204][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.144653][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.149285][   T13] bond0 (unregistering): Released all slaves
[  147.424090][ T9203] netlink: 'syz.2.832': attribute type 13 has an invalid length.
[  147.427040][ T9203] netlink: 'syz.2.832': attribute type 17 has an invalid length.
[  147.477581][ T9203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.494436][ T9208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'.
[  147.619978][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.683485][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.689483][   T13] hsr_slave_0: left promiscuous mode
[  147.692966][   T13] hsr_slave_1: left promiscuous mode
[  147.695987][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.699016][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.708534][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.712595][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.735050][   T13] veth1_macvtap: left promiscuous mode
[  147.737654][   T13] veth0_macvtap: left promiscuous mode
[  147.739370][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.740184][   T13] veth1_vlan: left promiscuous mode
[  147.749284][   T13] veth0_vlan: left promiscuous mode
[  148.012616][   T54] Bluetooth: hci0: command tx timeout
[  148.226450][   T13] team0 (unregistering): Port device team_slave_1 removed
[  148.261598][   T13] team0 (unregistering): Port device team_slave_0 removed
[  148.689520][ T9215] bridge0: port 3(erspan0) entered blocking state
[  148.700021][ T9215] bridge0: port 3(erspan0) entered disabled state
[  148.712223][ T9215] erspan0: entered allmulticast mode
[  148.714972][ T9215] erspan0: entered promiscuous mode
[  148.724234][ T9215] bridge0: port 3(erspan0) entered blocking state
[  148.726956][ T9215] bridge0: port 3(erspan0) entered forwarding state
[  148.952794][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'.
[  149.308339][ T9242] netlink: 'syz.1.841': attribute type 11 has an invalid length.
[  149.341881][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'.
[  149.349493][ T9163] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  149.355584][ T9163] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  149.366141][ T9163] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.385947][ T9163] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.504389][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.525047][ T9163] 8021q: adding VLAN 0 to HW filter on device team0
[  149.540311][  T180] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.542733][  T180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.566066][  T180] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.568483][  T180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.595962][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  149.602815][ T9163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.626092][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  149.646492][ T9263] bridge0: entered promiscuous mode
[  149.775813][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.847369][ T9163] veth0_vlan: entered promiscuous mode
[  149.875363][ T9163] veth1_vlan: entered promiscuous mode
[  149.911114][ T9163] veth0_macvtap: entered promiscuous mode
[  149.923936][ T9163] veth1_macvtap: entered promiscuous mode
[  149.955926][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.973365][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.014428][ T9163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.017340][ T9163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.020189][ T9163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.072504][ T9163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.093021][   T54] Bluetooth: hci0: command tx timeout
[  150.172369][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.848'.
[  150.205009][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.208173][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.251635][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.254675][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.382611][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  151.390868][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  151.399499][ T9348] bridge0: entered promiscuous mode
[  151.519228][ T9355] bridge3: entered promiscuous mode
[  151.520909][ T9355] bridge3: entered allmulticast mode
[  151.544495][ T9355] team0: Port device bridge3 added
[  151.726008][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.810711][ T9355] infiniband syz1: set active
[  151.815167][ T9355] infiniband syz1: added macvlan1
[  151.857251][ T9355] RDS/IB: syz1: added
[  151.859919][ T9355] smc: adding ib device syz1 with port count 1
[  151.862974][ T9355] smc:    ib device syz1 port 1 has pnetid 
[  153.028989][ T9380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.868'.
[  153.037018][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'.
[  153.047334][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'.
[  153.050705][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[  153.051125][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.060194][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.065601][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.069601][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.075163][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.308016][ T9397] netlink: 68 bytes leftover after parsing attributes in process `syz.2.874'.
[  153.344908][ T9399] Bluetooth: MGMT ver 1.23
[  153.381098][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.445436][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.509784][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.619957][   T13] bridge_slave_1: left allmulticast mode
[  153.623283][   T13] bridge_slave_1: left promiscuous mode
[  153.625612][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.630331][   T13] bridge_slave_0: left allmulticast mode
[  153.634768][   T13] bridge_slave_0: left promiscuous mode
[  153.637694][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.028111][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.035425][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.039624][   T13] bond0 (unregistering): Released all slaves
[  154.052352][ T9379] chnl_net:caif_netlink_parms(): no params data found
[  154.064960][ T9411] erspan0: left allmulticast mode
[  154.067269][ T9411] erspan0: left promiscuous mode
[  154.070653][ T9411] bridge0: port 3(erspan0) entered disabled state
[  154.244491][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.252823][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.256105][ T9379] bridge_slave_0: entered allmulticast mode
[  154.276165][ T9379] bridge_slave_0: entered promiscuous mode
[  154.357649][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.360790][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.382519][ T9379] bridge_slave_1: entered allmulticast mode
[  154.390843][ T9379] bridge_slave_1: entered promiscuous mode
[  154.470391][ T9379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.480834][ T9379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.660103][ T9379] team0: Port device team_slave_0 added
[  154.697785][ T9379] team0: Port device team_slave_1 added
[  154.800155][   T13] hsr_slave_0: left promiscuous mode
[  154.807631][   T13] hsr_slave_1: left promiscuous mode
[  154.810741][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.814255][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.818555][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.821691][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.840486][   T13] veth1_macvtap: left promiscuous mode
[  154.845965][   T13] veth0_macvtap: left promiscuous mode
[  154.848411][   T13] veth1_vlan: left promiscuous mode
[  154.850878][   T13] veth0_vlan: left promiscuous mode
[  154.993796][ T9445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.138844][ T5222] Bluetooth: hci0: command tx timeout
[  155.347849][   T13] team0 (unregistering): Port device team_slave_1 removed
[  155.384223][   T13] team0 (unregistering): Port device team_slave_0 removed
[  155.882471][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.885252][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.899764][ T9379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.920347][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.928352][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.939308][ T9379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.043421][ T9379] hsr_slave_0: entered promiscuous mode
[  156.045817][ T9379] hsr_slave_1: entered promiscuous mode
[  156.437764][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'.
[  156.634157][ T9465] netlink: 104 bytes leftover after parsing attributes in process `syz.2.892'.
[  156.656878][ T9465] netlink: 104 bytes leftover after parsing attributes in process `syz.2.892'.
[  156.665884][ T9467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.892'.
[  156.751070][ T9379] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  156.776531][ T9379] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  156.785217][ T9469] netlink: 'syz.2.893': attribute type 3 has an invalid length.
[  156.788413][ T9469] netlink: 'syz.2.893': attribute type 2 has an invalid length.
[  156.791860][ T9379] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  156.798305][ T9379] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  156.880793][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.907445][ T9379] 8021q: adding VLAN 0 to HW filter on device team0
[  156.922034][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.924479][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.939968][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.942253][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.973055][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'.
[  157.010383][ T9486] netlink: 'syz.1.896': attribute type 10 has an invalid length.
[  157.015363][ T9486] bridge0: left promiscuous mode
[  157.030955][ T9486] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  157.203600][ T5222] Bluetooth: hci0: command tx timeout
[  157.448648][ T9379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.538086][ T9379] veth0_vlan: entered promiscuous mode
[  157.556986][ T9379] veth1_vlan: entered promiscuous mode
[  157.634488][ T9379] veth0_macvtap: entered promiscuous mode
[  157.655182][ T9379] veth1_macvtap: entered promiscuous mode
[  157.697804][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.716093][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.733957][ T9379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.737642][ T9379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.741060][ T9379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.745398][ T9379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.960961][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.967863][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.008907][ T5189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.012677][ T5189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.892865][ T9537] __nla_validate_parse: 3 callbacks suppressed
[  158.892884][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  158.898875][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  159.135485][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.195142][ T9544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.253239][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.313639][ T5858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.685753][ T5858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.707779][ T9554] netlink: 'syz.2.916': attribute type 13 has an invalid length.
[  160.716845][ T9554] netlink: 'syz.2.916': attribute type 17 has an invalid length.
[  160.794976][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  160.800424][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  160.805638][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  160.809606][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  160.817389][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  160.830332][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  160.880714][ T5858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.959649][ T5858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.032174][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  161.178724][ T5858] bridge_slave_1: left allmulticast mode
[  161.189276][ T5858] bridge_slave_1: left promiscuous mode
[  161.193315][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.216209][ T5858] bridge_slave_0: left allmulticast mode
[  161.218807][ T5858] bridge_slave_0: left promiscuous mode
[  161.233505][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.712774][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.718232][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.723412][ T5858] bond0 (unregistering): Released all slaves
[  161.746957][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'.
[  162.103912][ T9591] netlink: 68 bytes leftover after parsing attributes in process `syz.2.923'.
[  162.207338][ T9555] chnl_net:caif_netlink_parms(): no params data found
[  162.463398][ T5858] hsr_slave_0: left promiscuous mode
[  162.475003][ T5858] hsr_slave_1: left promiscuous mode
[  162.477929][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.480910][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.587249][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.590003][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.607468][ T5858] veth1_macvtap: left promiscuous mode
[  162.609490][ T5858] veth0_macvtap: left promiscuous mode
[  162.620880][ T5858] veth1_vlan: left promiscuous mode
[  162.624525][ T5858] veth0_vlan: left promiscuous mode
[  162.881778][   T54] Bluetooth: hci0: command tx timeout
[  163.045840][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  163.080368][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  163.462735][ T9616] macvlan0: entered allmulticast mode
[  163.468277][ T9616] netlink: 'syz.2.930': attribute type 1 has an invalid length.
[  163.472284][ T9616] netlink: 'syz.2.930': attribute type 2 has an invalid length.
[  163.623284][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.625613][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.628071][ T9555] bridge_slave_0: entered allmulticast mode
[  163.648951][ T9555] bridge_slave_0: entered promiscuous mode
[  163.658075][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.661187][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.688942][ T9555] bridge_slave_1: entered allmulticast mode
[  163.703117][ T9555] bridge_slave_1: entered promiscuous mode
[  163.812171][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.826152][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.930540][ T9555] team0: Port device team_slave_0 added
[  163.947796][ T9555] team0: Port device team_slave_1 added
[  164.028171][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.035777][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.050319][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.063927][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.067009][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.081042][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.315082][ T9555] hsr_slave_0: entered promiscuous mode
[  164.318391][ T9555] hsr_slave_1: entered promiscuous mode
[  164.961587][   T54] Bluetooth: hci0: command tx timeout
[  165.203041][ T9670] netlink: 'syz.1.939': attribute type 4 has an invalid length.
[  165.248635][ T9664] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  165.625400][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'.
[  165.651645][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'.
[  165.877488][ T9555] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  165.884275][ T9555] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  165.898837][ T9555] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  165.915174][ T9555] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  166.014678][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.040951][ T9555] 8021q: adding VLAN 0 to HW filter on device team0
[  166.049488][  T180] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.052198][  T180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.063241][  T180] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.065558][  T180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.298226][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.354877][ T9555] veth0_vlan: entered promiscuous mode
[  166.375151][ T9555] veth1_vlan: entered promiscuous mode
[  166.443699][ T9555] veth0_macvtap: entered promiscuous mode
[  166.450431][ T9555] veth1_macvtap: entered promiscuous mode
[  166.545148][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.567961][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.699727][ T9555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.715342][ T9555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.718704][ T9555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.723193][ T9555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.012970][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.016968][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.082495][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.084980][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.276987][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'.
[  167.955007][ T9798] bridge0: port 3(erspan0) entered blocking state
[  167.957629][ T9798] bridge0: port 3(erspan0) entered disabled state
[  167.960559][ T9798] erspan0: entered allmulticast mode
[  167.965342][ T9798] erspan0: entered promiscuous mode
[  167.968031][ T9798] bridge0: port 3(erspan0) entered blocking state
[  167.970163][ T9798] bridge0: port 3(erspan0) entered forwarding state
[  167.974212][ T9798] erspan0: left allmulticast mode
[  167.975910][ T9798] erspan0: left promiscuous mode
[  167.977633][ T9798] bridge0: port 3(erspan0) entered disabled state
[  168.601752][ T5694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.696021][ T5694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.804900][ T5694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.915517][ T5694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.978148][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  169.983263][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  169.987321][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  169.990567][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  169.993475][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  170.214019][ T5694] bridge_slave_1: left allmulticast mode
[  170.216289][ T5694] bridge_slave_1: left promiscuous mode
[  170.218670][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.250408][ T5694] bridge_slave_0: left allmulticast mode
[  170.254685][ T5694] bridge_slave_0: left promiscuous mode
[  170.257124][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.396727][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'.
[  170.411880][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'.
[  170.471727][ T9856] ipt_REJECT: TCP_RESET invalid for non-tcp
[  170.851285][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.857956][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.863770][ T5694] bond0 (unregistering): Released all slaves
[  171.432072][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'.
[  171.559099][ T9829] chnl_net:caif_netlink_parms(): no params data found
[  171.639470][ T5694] hsr_slave_0: left promiscuous mode
[  171.642768][ T5694] hsr_slave_1: left promiscuous mode
[  171.645730][ T5694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.648152][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.651106][ T5694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.653645][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.664907][ T5694] veth1_macvtap: left promiscuous mode
[  171.667289][ T5694] veth0_macvtap: left promiscuous mode
[  171.669642][ T5694] veth1_vlan: left promiscuous mode
[  171.671599][ T5694] veth0_vlan: left promiscuous mode
[  172.021256][ T5222] Bluetooth: hci0: command tx timeout
[  172.171257][ T5694] team0 (unregistering): Port device team_slave_1 removed
[  172.214826][ T5694] team0 (unregistering): Port device team_slave_0 removed
[  172.692750][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'.
[  172.971194][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.988248][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.000093][ T9829] bridge_slave_0: entered allmulticast mode
[  173.010634][ T9829] bridge_slave_0: entered promiscuous mode
[  173.034962][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.037867][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.052233][ T9829] bridge_slave_1: entered allmulticast mode
[  173.057672][ T9829] bridge_slave_1: entered promiscuous mode
[  173.138252][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.162962][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.217217][ T9829] team0: Port device team_slave_0 added
[  173.219926][ T9909] syzkaller1: entered promiscuous mode
[  173.223094][ T9909] syzkaller1: entered allmulticast mode
[  173.226567][ T9909] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  173.228063][ T9829] team0: Port device team_slave_1 added
[  173.290134][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.292966][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.303291][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.314174][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.323712][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.342018][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.447538][ T9829] hsr_slave_0: entered promiscuous mode
[  173.450075][ T9829] hsr_slave_1: entered promiscuous mode
[  173.473567][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'.
[  173.574566][   T33] audit: type=1800 audit(1752175702.164:2): pid=9925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.999" name="memory.events" dev="tmpfs" ino=2152 res=0 errno=0
[  174.001703][   T33] audit: type=1804 audit(1752175702.584:3): pid=9929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.999" name="/newroot/419/memory.events" dev="tmpfs" ino=2152 res=1 errno=0
[  174.081728][ T5222] Bluetooth: hci0: command tx timeout
[  174.696858][ T9829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  174.736693][ T9829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  174.752298][ T9829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  174.766714][ T9829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  174.948286][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.964979][ T9829] 8021q: adding VLAN 0 to HW filter on device team0
[  174.992250][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.995257][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.012505][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.015870][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.447204][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.469612][ T9829] veth0_vlan: entered promiscuous mode
[  175.478806][ T9829] veth1_vlan: entered promiscuous mode
[  175.537672][ T9829] veth0_macvtap: entered promiscuous mode
[  175.554648][ T9829] veth1_macvtap: entered promiscuous mode
[  175.582825][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.588485][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.597922][ T9829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.600644][ T9829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.612843][ T9829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.621828][ T9829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.745493][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1013'.
[  175.863294][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.865741][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.906928][ T5189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.910147][ T5189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.958571][T10013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'.
[  176.089184][T10018] netlink: 'syz.2.1017': attribute type 1 has an invalid length.
[  176.094149][T10018] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1017'.
[  176.515169][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'.
[  176.658996][T10033] syzkaller0: entered promiscuous mode
[  176.661687][T10033] syzkaller0: entered allmulticast mode
[  178.774090][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.787724][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.792592][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.796581][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.799442][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.803283][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.877554][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1027'.
[  179.058795][T10075] veth2: entered allmulticast mode
[  179.069043][T10073] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1031'.
[  179.169576][T10061] chnl_net:caif_netlink_parms(): no params data found
[  179.310125][T10061] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.313928][T10061] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.316374][T10061] bridge_slave_0: entered allmulticast mode
[  179.319287][T10061] bridge_slave_0: entered promiscuous mode
[  179.350688][T10087] batman_adv: batadv0: Interface deactivated: dummy0
[  179.398149][T10087] geneve2: left promiscuous mode
[  179.405134][T10061] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.407575][T10061] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.410374][T10061] bridge_slave_1: entered allmulticast mode
[  179.415137][T10061] bridge_slave_1: entered promiscuous mode
[  179.448295][T10061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.459131][T10061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.505025][T10061] team0: Port device team_slave_0 added
[  179.514609][T10061] team0: Port device team_slave_1 added
[  179.552939][T10061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.555156][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.563492][T10061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.570097][T10061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.575168][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.583477][T10061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.627764][T10093] net veth1_virt_wifi : renamed from virt_wifi0
[  179.684654][T10098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.688925][T10099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.706892][T10061] hsr_slave_0: entered promiscuous mode
[  179.709372][T10061] hsr_slave_1: entered promiscuous mode
[  179.722157][T10061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.724585][T10061] Cannot create hsr debugfs directory
[  179.787095][T10103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.287957][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.484912][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.557637][T10113] netlink: 'syz.2.1041': attribute type 13 has an invalid length.
[  180.560714][T10113] netlink: 'syz.2.1041': attribute type 17 has an invalid length.
[  180.572946][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.585306][T10113] bridge0: left promiscuous mode
[  180.595050][T10113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.644220][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  180.727000][T10114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.744423][   T13] bridge_slave_1: left allmulticast mode
[  180.746698][   T13] bridge_slave_1: left promiscuous mode
[  180.749103][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.772216][   T13] bridge_slave_0: left allmulticast mode
[  180.774905][   T13] bridge_slave_0: left promiscuous mode
[  180.777379][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.804388][T10114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.866865][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.881803][ T5836] Bluetooth: hci0: command tx timeout
[  181.253834][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.258201][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.262390][   T13] bond0 (unregistering): Released all slaves
[  181.894590][   T13] hsr_slave_0: left promiscuous mode
[  181.902817][   T13] hsr_slave_1: left promiscuous mode
[  181.907247][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.910027][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.922123][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.924450][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.936719][   T13] veth1_macvtap: left promiscuous mode
[  181.938570][   T13] veth0_macvtap: left promiscuous mode
[  181.942642][   T13] veth1_vlan: left promiscuous mode
[  181.944756][   T13] veth0_vlan: left promiscuous mode
[  182.521073][   T13] team0 (unregistering): Port device team_slave_1 removed
[  182.568048][   T13] team0 (unregistering): Port device team_slave_0 removed
[  182.963369][ T5836] Bluetooth: hci0: command tx timeout
[  183.091698][T10061] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  183.113387][T10061] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  183.146441][T10061] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  183.169979][T10061] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  183.316507][T10061] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.373528][T10159] netlink: 'syz.1.1048': attribute type 13 has an invalid length.
[  183.376766][T10159] netlink: 'syz.1.1048': attribute type 17 has an invalid length.
[  183.387277][T10061] 8021q: adding VLAN 0 to HW filter on device team0
[  183.420705][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.424003][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.460061][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.463449][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.507901][T10061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  183.514289][T10061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  183.876589][T10061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.013458][T10174] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1049'.
[  184.118674][T10061] veth0_vlan: entered promiscuous mode
[  184.141732][T10061] veth1_vlan: entered promiscuous mode
[  184.180278][T10061] veth0_macvtap: entered promiscuous mode
[  184.196916][T10061] veth1_macvtap: entered promiscuous mode
[  185.051766][ T5836] Bluetooth: hci0: command tx timeout
[  187.023151][T10061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.034182][T10061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.055535][T10061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.059076][T10061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.068711][T10061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.074953][T10061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.134624][ T5836] Bluetooth: hci0: command tx timeout
[  187.193204][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.198488][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.276472][ T5189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.279782][ T5189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.316352][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1054'.
[  187.661048][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.669083][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.834258][T10214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'.
[  188.297307][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.836585][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.000615][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.061965][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.250350][ T5864] bridge_slave_1: left allmulticast mode
[  189.255388][ T5864] bridge_slave_1: left promiscuous mode
[  189.258047][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.264363][ T5864] bridge_slave_0: left allmulticast mode
[  189.266855][ T5864] bridge_slave_0: left promiscuous mode
[  189.269411][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.719395][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.726382][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.731345][ T5864] bond0 (unregistering): Released all slaves
[  189.983922][T10230] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1065'.
[  190.205903][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.210621][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.214209][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.218702][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.221982][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.342746][T10243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.349135][T10243] syzkaller0: entered promiscuous mode
[  190.352457][T10243] syzkaller0: entered allmulticast mode
[  190.497880][T10251] sch_fq: defrate 257 ignored.
[  190.545453][T10255] tipc: Resetting bearer <eth:syzkaller0>
[  190.602536][ T5864] hsr_slave_0: left promiscuous mode
[  190.605383][ T5864] hsr_slave_1: left promiscuous mode
[  190.607811][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.610398][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.616310][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.622649][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.649676][ T5864] veth1_macvtap: left promiscuous mode
[  190.661847][ T5864] veth0_macvtap: left promiscuous mode
[  190.663753][ T5864] veth1_vlan: left promiscuous mode
[  190.665547][ T5864] veth0_vlan: left promiscuous mode
[  190.745118][T10264] xt_hashlimit: size too large, truncated to 1048576
[  191.117820][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  191.167976][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  191.411723][   T24] tipc: Node number set to 1145773597
[  191.689828][T10242] tipc: Resetting bearer <eth:syzkaller0>
[  191.725132][T10242] tipc: Disabling bearer <eth:syzkaller0>
[  192.100552][T10244] chnl_net:caif_netlink_parms(): no params data found
[  192.184404][T10302] netlink: 'syz.2.1076': attribute type 10 has an invalid length.
[  192.187549][T10302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1076'.
[  192.216142][T10302] batman_adv: batadv0: Adding interface: 
[  192.218643][T10302] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.229180][T10302] batman_adv: batadv0: Interface activated: 
[  192.325992][ T5836] Bluetooth: hci0: command tx timeout
[  192.461563][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'.
[  192.503789][T10244] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.506158][T10244] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.508686][T10244] bridge_slave_0: entered allmulticast mode
[  192.511747][T10244] bridge_slave_0: entered promiscuous mode
[  192.516705][T10244] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.519075][T10244] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.521490][T10244] bridge_slave_1: entered allmulticast mode
[  192.527446][T10244] bridge_slave_1: entered promiscuous mode
[  192.568735][T10244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.575374][T10244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.625725][T10244] team0: Port device team_slave_0 added
[  192.632414][T10244] team0: Port device team_slave_1 added
[  192.667993][T10244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.670401][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.684491][T10244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.689482][T10244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.694344][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.704380][T10244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.746238][T10244] hsr_slave_0: entered promiscuous mode
[  192.749426][T10244] hsr_slave_1: entered promiscuous mode
[  193.210689][T10244] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  193.215983][T10244] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  193.220949][T10244] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  193.227582][T10244] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  193.307350][T10244] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.326250][T10244] 8021q: adding VLAN 0 to HW filter on device team0
[  193.336207][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.338764][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.354876][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.357796][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.466313][T10339] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  193.582570][T10244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.638662][T10244] veth0_vlan: entered promiscuous mode
[  193.656914][T10244] veth1_vlan: entered promiscuous mode
[  193.679283][T10244] veth0_macvtap: entered promiscuous mode
[  193.695038][T10244] veth1_macvtap: entered promiscuous mode
[  193.726382][T10244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.733480][T10244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.742376][T10244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.745071][T10244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.747621][T10244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.750251][T10244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.842261][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.846266][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.902289][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.905634][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.926591][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  193.937358][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.942890][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.998308][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'.
[  195.002602][T10398] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  195.738228][ T5858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.247362][ T5858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.329715][ T5858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.343558][T10420] smc: net device bond0 applied user defined pnetid SYZ2
[  197.433909][ T5858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.536883][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.544403][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.548669][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.553100][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.557725][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.628939][ T5858] bridge_slave_1: left allmulticast mode
[  197.631016][ T5858] bridge_slave_1: left promiscuous mode
[  197.634917][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.642611][ T5858] bridge_slave_0: left allmulticast mode
[  197.644950][ T5858] bridge_slave_0: left promiscuous mode
[  197.647382][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.988622][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.993102][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.996791][ T5858] bond0 (unregistering): Released all slaves
[  198.437240][ T5858] hsr_slave_0: left promiscuous mode
[  198.439476][ T5858] hsr_slave_1: left promiscuous mode
[  198.445087][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.447361][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.460382][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.465404][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.484234][ T5858] veth1_macvtap: left promiscuous mode
[  198.486067][ T5858] veth0_macvtap: left promiscuous mode
[  198.487921][ T5858] veth1_vlan: left promiscuous mode
[  198.489593][ T5858] veth0_vlan: left promiscuous mode
[  198.904018][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  198.938049][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  199.338381][T10425] chnl_net:caif_netlink_parms(): no params data found
[  199.450219][T10425] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.452842][T10425] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.456370][T10425] bridge_slave_0: entered allmulticast mode
[  199.463550][T10425] bridge_slave_0: entered promiscuous mode
[  199.473071][T10425] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.475355][T10425] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.477691][T10425] bridge_slave_1: entered allmulticast mode
[  199.496409][T10425] bridge_slave_1: entered promiscuous mode
[  199.552966][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.568055][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.607554][   T54] Bluetooth: hci0: command tx timeout
[  199.636479][T10425] team0: Port device team_slave_0 added
[  199.647987][T10425] team0: Port device team_slave_1 added
[  199.704248][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.707917][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.722296][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.728618][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.731352][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.743774][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.795173][T10425] hsr_slave_0: entered promiscuous mode
[  199.797968][T10425] hsr_slave_1: entered promiscuous mode
[  200.329054][T10425] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  200.338328][T10425] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  200.348246][T10425] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  200.357641][T10425] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  200.390644][T10425] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.393606][T10425] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.397970][T10425] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.400828][T10425] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.415336][  T180] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.425133][  T180] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.485645][T10425] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.499950][T10425] 8021q: adding VLAN 0 to HW filter on device team0
[  200.507280][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.509596][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.522937][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.525260][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.647730][T10425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.676414][T10425] veth0_vlan: entered promiscuous mode
[  200.683616][T10425] veth1_vlan: entered promiscuous mode
[  200.707329][T10425] veth0_macvtap: entered promiscuous mode
[  200.723958][T10425] veth1_macvtap: entered promiscuous mode
[  200.737902][T10425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.748231][T10425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.755963][T10425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.758778][T10425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.765878][T10425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.768578][T10425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.832246][ T5194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.834718][ T5194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.864494][ T5194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.867716][ T5194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.903542][T10517] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  201.260181][T10535] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  201.681774][ T5836] Bluetooth: hci0: command tx timeout
[  201.890958][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'.
[  202.192110][T10547] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1112'.
[  203.747041][T10559] netlink: 'syz.2.1116': attribute type 13 has an invalid length.
[  203.749975][T10559] netlink: 'syz.2.1116': attribute type 17 has an invalid length.
[  203.760680][T10559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.865349][T10566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.921005][T10566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.006096][T10559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.154215][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'.
[  205.157699][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.160526][T10618] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.166397][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.169287][T10618] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.175614][T10618] batman_adv: batadv0: Interface deactivated: 
[  205.178190][T10618] batman_adv: batadv0: Removing interface: 
[  205.182957][T10618] tipc: Resetting bearer <eth:batadv0>
[  205.217158][T10618] tipc: Disabling bearer <eth:batadv0>
[  205.281652][T10618] delete_channel: no stack
[  205.323263][T10622] netlink: 'syz.2.1134': attribute type 13 has an invalid length.
[  205.325765][T10622] netlink: 'syz.2.1134': attribute type 17 has an invalid length.
[  205.334261][T10622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.412241][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.469106][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.531105][T10622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.080263][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[  206.086282][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[  207.106442][T10633] netlink: 'syz.2.1138': attribute type 13 has an invalid length.
[  207.109216][T10633] netlink: 'syz.2.1138': attribute type 17 has an invalid length.
[  207.118819][T10633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.258627][T10642] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1141'.
[  207.344108][T10648] netlink: 'syz.1.1143': attribute type 3 has an invalid length.
[  207.347248][T10648] netlink: 'syz.1.1143': attribute type 2 has an invalid length.
[  207.822182][T10678] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  208.173464][T10704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1164'.
[  208.263387][T10707] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1165'.
[  209.084924][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'.
[  209.376907][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'.
[  209.380676][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'.
[  209.547304][T10756] SET target dimension over the limit!
[  209.654503][T10762] netlink: 'syz.1.1184': attribute type 13 has an invalid length.
[  209.659990][T10762] netlink: 'syz.1.1184': attribute type 17 has an invalid length.
[  209.703980][T10762] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.707948][T10762] 8021q: adding VLAN 0 to HW filter on device team0
[  209.714707][T10762] batman_adv: batadv0: Interface activated: dummy0
[  209.719608][T10762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.732276][T10767] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  209.756161][T10762] syz.1.1184 (10762) used greatest stack depth: 19168 bytes left
[  210.049764][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'.
[  210.107743][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'.
[  210.740393][T10824] netlink: 'syz.1.1200': attribute type 1 has an invalid length.
[  210.743540][T10824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.567922][T10824] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  211.625623][T10830] netlink: 'syz.1.1202': attribute type 3 has an invalid length.
[  211.628201][T10830] netlink: 'syz.1.1202': attribute type 2 has an invalid length.
[  211.795964][T10841] netlink: 'syz.1.1207': attribute type 15 has an invalid length.
[  211.800924][T10841] netlink: 'syz.1.1207': attribute type 2 has an invalid length.
[  211.806160][T10841] xt_l2tp: missing protocol rule (udp|l2tpip)
[  211.809899][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'.
[  211.879571][T10843] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1208'.
[  212.812309][ T5836] Bluetooth: hci2: command 0x0401 tx timeout
[  213.856488][T10871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'.
[  214.104495][T10848] Set syz1 is full, maxelem 65536 reached
[  214.404876][T10885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1221'.
[  214.979685][T10880] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  215.224949][T10892] netlink: 'syz.1.1223': attribute type 13 has an invalid length.
[  215.228190][T10892] netlink: 'syz.1.1223': attribute type 17 has an invalid length.
[  215.506690][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1227'.
[  215.940072][T10907] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1229'.
[  216.161587][ T5836] Bluetooth: hci2: command 0x0401 tx timeout
[  216.279556][T10910] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000
[  219.156395][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'.
[  219.359110][T10948] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1240'.
[  221.006213][T10982] netlink: 'syz.1.1246': attribute type 10 has an invalid length.
[  221.282667][T10991] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[  221.285691][T10991] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[  221.984926][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1252'.
[  221.988848][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1252'.
[  222.003976][T10996] veth0_to_team: entered promiscuous mode
[  222.006402][T10996] veth0_to_team: entered allmulticast mode
[  222.078779][T11000] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1254'.
[  222.084550][T11000] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1254'.
[  222.088705][T11000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1254'.
[  222.102362][T11000] macvlan1: entered promiscuous mode
[  222.106732][T11000] ipvlan0: entered promiscuous mode
[  222.114300][T11000] ipvlan0: left promiscuous mode
[  222.126862][T11000] macvlan1: left promiscuous mode
[  222.155955][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'.
[  222.233385][T11005] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  223.654397][T11048] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1269'.
[  224.001631][ T5836] Bluetooth: hci2: command 0x0401 tx timeout
[  224.372239][T11056] netlink: 'syz.2.1270': attribute type 13 has an invalid length.
[  224.376509][T11056] netlink: 'syz.2.1270': attribute type 17 has an invalid length.
[  224.405722][T11056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.451235][T11059] netlink: 'syz.1.1271': attribute type 13 has an invalid length.
[  224.454873][T11059] netlink: 'syz.1.1271': attribute type 17 has an invalid length.
[  224.473170][T11059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.489379][T11057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.555180][T11057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.616358][T11061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.863533][T11058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.968533][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'.
[  225.973711][T11096] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  226.287609][T11107] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  227.187765][T11126] netlink: 'syz.2.1288': attribute type 13 has an invalid length.
[  227.190351][T11126] netlink: 'syz.2.1288': attribute type 17 has an invalid length.
[  227.197207][T11126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.275238][T11127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.331643][T11127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.388109][T11127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.108177][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1293'.
[  228.155958][T11144] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1294'.
[  228.823327][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'.
[  228.826972][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'.
[  228.840918][T11171] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1303'.
[  228.848350][T11171] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1303'.
[  229.929247][T11212] netlink: 'syz.2.1314': attribute type 3 has an invalid length.
[  229.933554][T11212] netlink: 'syz.2.1314': attribute type 3 has an invalid length.
[  230.005955][T11216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1316'.
[  230.014710][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'.
[  230.046046][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'.
[  230.050197][T11217] syz_tun: entered allmulticast mode
[  230.099983][T11218] dvmrp8: entered allmulticast mode
[  230.168110][T11216] syz_tun: left allmulticast mode
[  230.527939][T11240] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  230.761349][T11256] netlink: 'syz.2.1329': attribute type 3 has an invalid length.
[  230.769659][T11256] netlink: 'syz.2.1329': attribute type 2 has an invalid length.
[  231.798006][T11283] __nla_validate_parse: 5 callbacks suppressed
[  231.798026][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'.
[  231.865968][T11283] ipt_rpfilter: unknown options
[  232.047796][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'.
[  232.052126][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'.
[  232.089179][T11296] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  232.304114][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1352'.
[  232.533151][T11341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.568973][T11342] netlink: 'syz.2.1356': attribute type 13 has an invalid length.
[  232.575669][T11342] netlink: 'syz.2.1356': attribute type 17 has an invalid length.
[  232.590546][T11342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.677721][T11349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.744946][T11354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.811760][T11342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.665691][T11390] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1367'.
[  233.759398][T11398] ipvlan2: entered promiscuous mode
[  234.943827][T11435] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  234.969930][T11433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.975664][T11433] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1379'.
[  235.072307][T11440] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1382'.
[  235.093620][T11440] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:21
[  235.179759][T11446] netlink: 'syz.2.1384': attribute type 1 has an invalid length.
[  235.183279][T11446] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1384'.
[  235.197273][T11446] ipvlan3: entered promiscuous mode
[  235.201906][T11446] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  235.249226][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1385'.
[  235.263113][T11447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1383'.
[  235.267597][T11447] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  235.401047][T11457] netlink: 'syz.2.1387': attribute type 13 has an invalid length.
[  235.404503][T11457] netlink: 'syz.2.1387': attribute type 17 has an invalid length.
[  235.410896][T11457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.485660][T11458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.549032][T11458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.611319][T11457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.204984][T11524] __nla_validate_parse: 1 callbacks suppressed
[  237.205000][T11524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1400'.
[  237.224225][T11526] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1405'.
[  237.228177][T11526] hsr_slave_0: left promiscuous mode
[  237.232427][T11526] 0: left promiscuous mode
[  237.382649][T11531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1402'.
[  237.434282][T11535] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1403'.
[  237.450789][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'.
[  237.525114][ T6036] wlan0: Trigger new scan to find an IBSS to join
[  237.620384][T11535] team0 (unregistering): Port device team_slave_0 removed
[  237.629200][T11535] team0 (unregistering): Port device team_slave_1 removed
[  237.636885][T11535] team0 (unregistering): Port device bridge3 removed
[  237.655728][T11537] netlink: 'syz.1.1404': attribute type 3 has an invalid length.
[  237.659022][T11537] netlink: 'syz.1.1404': attribute type 2 has an invalid length.
[  237.779678][T11550] netlink: 'syz.1.1409': attribute type 10 has an invalid length.
[  237.858288][T11556] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  237.983744][T11567] netlink: 'syz.1.1416': attribute type 1 has an invalid length.
[  237.986855][T11567] netlink: 'syz.1.1416': attribute type 11 has an invalid length.
[  237.990150][T11567] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1416'.
[  238.003866][T11567] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1416'.
[  238.047807][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1418'.
[  238.050950][T11574] netlink: 'syz.2.1418': attribute type 7 has an invalid length.
[  238.053499][T11574] netlink: 'syz.2.1418': attribute type 8 has an invalid length.
[  238.056025][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  239.098236][T11590] netlink: 'syz.2.1424': attribute type 13 has an invalid length.
[  239.103557][T11590] netlink: 'syz.2.1424': attribute type 17 has an invalid length.
[  239.145128][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  239.213827][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  239.584368][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1430'.
[  240.063947][ T5836] Bluetooth: hci2: link tx timeout
[  240.066994][ T5836] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  240.078408][ T5222] Bluetooth: hci2: link tx timeout
[  240.080699][ T5222] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  240.091567][ T5222] Bluetooth: hci2: link tx timeout
[  240.093756][ T5222] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  240.096746][ T5222] Bluetooth: hci2: link tx timeout
[  240.098868][ T5222] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  240.102290][ T5222] Bluetooth: hci2: link tx timeout
[  240.104511][ T5222] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  240.176961][T11618] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  240.515425][T11636] netlink: 'syz.1.1438': attribute type 5 has an invalid length.
[  240.565596][ T6036] wlan0: Trigger new scan to find an IBSS to join
[  241.708460][T11670] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  242.081536][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  243.051715][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.128017][T11678] netlink: 'syz.2.1447': attribute type 12 has an invalid length.
[  243.233358][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.309638][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.369603][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.432582][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.528485][   T13] bridge_slave_1: left allmulticast mode
[  243.530955][   T13] bridge_slave_1: left promiscuous mode
[  243.534026][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.541240][   T13] bridge_slave_0: left allmulticast mode
[  243.544036][   T13] bridge_slave_0: left promiscuous mode
[  243.546560][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.907271][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  243.913813][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.917821][   T13] bond0 (unregistering): Released all slaves
[  244.249710][   T13] hsr_slave_0: left promiscuous mode
[  244.252217][   T13] hsr_slave_1: left promiscuous mode
[  244.254469][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.256818][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.259536][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.278887][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.289619][   T13] veth1_macvtap: left promiscuous mode
[  244.298190][   T13] veth0_macvtap: left promiscuous mode
[  244.299988][   T13] veth1_vlan: left promiscuous mode
[  244.301845][   T13] veth0_vlan: left promiscuous mode
[  244.873778][   T13] team0 (unregistering): Port device team_slave_1 removed
[  244.934383][   T13] team0 (unregistering): Port device team_slave_0 removed
[  244.994899][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.009036][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.023586][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.028624][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.034548][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.848516][T11693] chnl_net:caif_netlink_parms(): no params data found
[  245.943508][T11707] __nla_validate_parse: 4 callbacks suppressed
[  245.943522][T11707] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1453'.
[  246.773225][T11693] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.776042][T11693] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.779431][T11693] bridge_slave_0: entered allmulticast mode
[  246.784074][T11693] bridge_slave_0: entered promiscuous mode
[  246.800143][T11693] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.803753][T11693] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.806855][T11693] bridge_slave_1: entered allmulticast mode
[  246.810681][T11693] bridge_slave_1: entered promiscuous mode
[  247.051571][   T54] Bluetooth: hci0: command tx timeout
[  248.976956][T11693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.992444][T11715] ieee802154 phy0 wpan0: encryption failed: -22
[  249.034825][T11693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.087043][T11693] team0: Port device team_slave_0 added
[  249.090896][T11693] team0: Port device team_slave_1 added
[  249.121713][   T54] Bluetooth: hci0: command tx timeout
[  249.129178][T11717] netlink: 'syz.1.1455': attribute type 13 has an invalid length.
[  249.133108][T11717] netlink: 'syz.1.1455': attribute type 17 has an invalid length.
[  249.168126][T11717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.210629][T11693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.213190][T11693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.221303][T11693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.235452][T11693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.239338][T11693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.250004][T11693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.258921][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.324624][T11719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.330501][T11693] hsr_slave_0: entered promiscuous mode
[  249.335683][T11693] hsr_slave_1: entered promiscuous mode
[  249.380726][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.863629][T11693] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  249.873401][T11693] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  249.878270][T11693] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  249.885590][T11693] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  249.953617][T11693] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.974422][T11693] 8021q: adding VLAN 0 to HW filter on device team0
[  249.981088][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.983528][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.992091][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.994458][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.165536][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'.
[  250.168328][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'.
[  250.198583][T11759] veth0_to_team: left promiscuous mode
[  250.200761][T11759] veth0_to_team: left allmulticast mode
[  250.221247][T11693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.331291][T11693] veth0_vlan: entered promiscuous mode
[  250.334873][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'.
[  250.337949][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'.
[  250.340631][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'.
[  250.362918][T11693] veth1_vlan: entered promiscuous mode
[  250.425629][T11693] veth0_macvtap: entered promiscuous mode
[  250.443434][T11693] veth1_macvtap: entered promiscuous mode
[  250.467724][T11693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.479725][T11693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.485644][T11693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.488490][T11693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.491231][T11693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.494185][T11693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.574483][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.577147][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.590887][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.594172][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.056921][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'.
[  251.389958][T11816] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1469'.
[  251.681218][T11833] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  251.794448][T11835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1475'.
[  251.798601][T11835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.801764][T11835] IPv6: NLM_F_CREATE should be set when creating new route
[  251.807070][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1475'.
[  251.984674][T11842] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  252.174117][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.186579][T11853] netlink: 'syz.1.1480': attribute type 13 has an invalid length.
[  252.189059][T11853] netlink: 'syz.1.1480': attribute type 17 has an invalid length.
[  252.218224][T11853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.488465][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.770966][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.830979][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.103991][ T5864] bridge_slave_1: left allmulticast mode
[  254.111620][ T5864] bridge_slave_1: left promiscuous mode
[  254.115057][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.129721][ T5864] bridge_slave_0: left allmulticast mode
[  254.132292][ T5864] bridge_slave_0: left promiscuous mode
[  254.134809][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.246214][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  254.261294][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  254.276281][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  254.290415][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  254.295962][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  254.678585][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.685305][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.690866][ T5864] bond0 (unregistering): Released all slaves
[  254.956470][T11879] netlink: 'syz.1.1487': attribute type 10 has an invalid length.
[  255.274552][T11871] chnl_net:caif_netlink_parms(): no params data found
[  255.365232][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.367290][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.432471][T11871] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.435676][T11871] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.439419][T11871] bridge_slave_0: entered allmulticast mode
[  255.459774][T11871] bridge_slave_0: entered promiscuous mode
[  255.476012][T11871] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.488809][T11871] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.521641][T11871] bridge_slave_1: entered allmulticast mode
[  255.536012][T11871] bridge_slave_1: entered promiscuous mode
[  255.551919][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'.
[  255.556732][ T5864] hsr_slave_0: left promiscuous mode
[  255.559450][ T5864] hsr_slave_1: left promiscuous mode
[  255.564113][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.567173][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.570788][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.574105][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.592362][ T5864] veth1_macvtap: left promiscuous mode
[  255.594715][ T5864] veth0_macvtap: left promiscuous mode
[  255.597067][ T5864] veth1_vlan: left promiscuous mode
[  255.599427][ T5864] veth0_vlan: left promiscuous mode
[  255.615312][T11876] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  256.059031][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  256.095405][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  256.405434][   T54] Bluetooth: hci0: command tx timeout
[  256.594522][T11871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.599107][T11871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.694569][T11871] team0: Port device team_slave_0 added
[  256.704473][T11903] gretap1: entered promiscuous mode
[  256.706611][T11903] gretap1: entered allmulticast mode
[  256.715287][T11871] team0: Port device team_slave_1 added
[  256.770950][T11871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.774267][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.784699][T11871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.791040][T11871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.794553][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.804207][T11871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.823876][T11911] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1492'.
[  256.853541][T11871] hsr_slave_0: entered promiscuous mode
[  256.856489][T11871] hsr_slave_1: entered promiscuous mode
[  257.073329][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  257.075979][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  257.095069][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID v0.06 Device [syz0] on aa:aa:aa:aa:aa:aa
[  257.557244][T11871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  257.569037][T11871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  257.582020][T11871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  257.589084][T11871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  257.627133][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'.
[  257.668244][T11871] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.680955][T11871] 8021q: adding VLAN 0 to HW filter on device team0
[  257.694871][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.697835][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.725300][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.728303][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.923366][T11871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.969195][T11963] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1502'.
[  257.975326][T11871] veth0_vlan: entered promiscuous mode
[  257.985537][T11871] veth1_vlan: entered promiscuous mode
[  258.026662][T11871] veth0_macvtap: entered promiscuous mode
[  258.035241][T11871] veth1_macvtap: entered promiscuous mode
[  258.053157][T11871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.063766][T11871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.066516][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'.
[  258.075469][T11871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.079247][T11871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.084042][T11871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.087727][T11871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.163900][T11968] netlink: 'syz.2.1504': attribute type 13 has an invalid length.
[  258.166556][T11968] netlink: 'syz.2.1504': attribute type 17 has an invalid length.
[  258.214178][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  258.250591][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.258998][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.299710][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.304249][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.384576][T11943] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  258.440200][T11871] 
[  258.441291][T11871] ======================================================
[  258.444053][T11871] WARNING: possible circular locking dependency detected
[  258.446798][T11871] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  258.450498][T11871] ------------------------------------------------------
[  258.453606][T11871] syz-executor/11871 is trying to acquire lock:
[  258.456066][T11871] ffff8880381ef840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  258.460577][T11871] 
[  258.460577][T11871] but task is already holding lock:
[  258.463496][T11871] ffff8880381efb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  258.466967][T11871] 
[  258.466967][T11871] which lock already depends on the new lock.
[  258.466967][T11871] 
[  258.470954][T11871] 
[  258.470954][T11871] the existing dependency chain (in reverse order) is:
[  258.474463][T11871] 
[  258.474463][T11871] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  258.477365][T11871]        lock_acquire+0x120/0x360
[  258.479365][T11871]        __mutex_lock+0x182/0xe80
[  258.481327][T11871]        l2cap_info_timeout+0x60/0xa0
[  258.483406][T11871]        process_scheduled_works+0xae1/0x17b0
[  258.485836][T11871]        worker_thread+0x8a0/0xda0
[  258.487864][T11871]        kthread+0x711/0x8a0
[  258.489691][T11871]        ret_from_fork+0x3fc/0x770
[  258.491671][T11871]        ret_from_fork_asm+0x1a/0x30
[  258.493853][T11871] 
[  258.493853][T11871] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  258.497735][T11871]        validate_chain+0xb9b/0x2140
[  258.499811][T11871]        __lock_acquire+0xab9/0xd20
[  258.501844][T11871]        lock_acquire+0x120/0x360
[  258.503802][T11871]        __flush_work+0x6b8/0xbc0
[  258.505804][T11871]        __cancel_work_sync+0xbe/0x110
[  258.507891][T11871]        l2cap_conn_del+0x4f0/0x680
[  258.509877][T11871]        hci_conn_hash_flush+0x10d/0x230
[  258.512033][T11871]        hci_dev_close_sync+0xaef/0x1330
[  258.514185][T11871]        hci_unregister_dev+0x21a/0x510
[  258.516330][T11871]        vhci_release+0x80/0xd0
[  258.518207][T11871]        __fput+0x44c/0xa70
[  258.519947][T11871]        task_work_run+0x1d4/0x260
[  258.522013][T11871]        do_exit+0x6b5/0x22e0
[  258.523885][T11871]        do_group_exit+0x21c/0x2d0
[  258.525927][T11871]        __x64_sys_exit_group+0x3f/0x40
[  258.528111][T11871]        x64_sys_call+0x21ba/0x21c0
[  258.530134][T11871]        do_syscall_64+0xfa/0x3b0
[  258.532092][T11871]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.534556][T11871] 
[  258.534556][T11871] other info that might help us debug this:
[  258.534556][T11871] 
[  258.538396][T11871]  Possible unsafe locking scenario:
[  258.538396][T11871] 
[  258.541301][T11871]        CPU0                    CPU1
[  258.543422][T11871]        ----                    ----
[  258.545477][T11871]   lock(&conn->lock#2);
[  258.547187][T11871]                                lock((work_completion)(&(&conn->info_timer)->work));
[  258.550871][T11871]                                lock(&conn->lock#2);
[  258.553486][T11871]   lock((work_completion)(&(&conn->info_timer)->work));
[  258.556215][T11871] 
[  258.556215][T11871]  *** DEADLOCK ***
[  258.556215][T11871] 
[  258.559514][T11871] 5 locks held by syz-executor/11871:
[  258.561683][T11871]  #0: ffff888122948dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  258.565554][T11871]  #1: ffff8881229480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  258.569336][T11871]  #2: ffffffff8f684a48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  258.573223][T11871]  #3: ffff8880381efb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  258.576849][T11871]  #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  258.580439][T11871] 
[  258.580439][T11871] stack backtrace:
[  258.582853][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  258.582875][T11871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.582886][T11871] Call Trace:
[  258.582896][T11871]  <TASK>
[  258.582933][T11871]  dump_stack_lvl+0x189/0x250
[  258.582958][T11871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.582974][T11871]  ? __pfx__printk+0x10/0x10
[  258.582993][T11871]  ? print_lock_name+0xde/0x100
[  258.583012][T11871]  print_circular_bug+0x2ee/0x310
[  258.583033][T11871]  check_noncircular+0x134/0x160
[  258.583052][T11871]  validate_chain+0xb9b/0x2140
[  258.583068][T11871]  ? do_raw_spin_lock+0x121/0x290
[  258.583088][T11871]  ? look_up_lock_class+0x74/0x170
[  258.583102][T11871]  ? register_lock_class+0x51/0x320
[  258.583117][T11871]  __lock_acquire+0xab9/0xd20
[  258.583132][T11871]  ? __flush_work+0xd2/0xbc0
[  258.583149][T11871]  lock_acquire+0x120/0x360
[  258.583161][T11871]  ? __flush_work+0xd2/0xbc0
[  258.583181][T11871]  ? __flush_work+0xd2/0xbc0
[  258.583197][T11871]  __flush_work+0x6b8/0xbc0
[  258.583212][T11871]  ? __flush_work+0xd2/0xbc0
[  258.583229][T11871]  ? __flush_work+0xd2/0xbc0
[  258.583246][T11871]  ? __pfx___flush_work+0x10/0x10
[  258.583262][T11871]  ? __pfx_wq_barrier_func+0x10/0x10
[  258.583283][T11871]  ? __pfx___cancel_work+0x10/0x10
[  258.583300][T11871]  ? hci_conn_drop+0x14d/0x280
[  258.583322][T11871]  __cancel_work_sync+0xbe/0x110
[  258.583338][T11871]  l2cap_conn_del+0x4f0/0x680
[  258.583359][T11871]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  258.583375][T11871]  hci_conn_hash_flush+0x10d/0x230
[  258.583396][T11871]  hci_dev_close_sync+0xaef/0x1330
[  258.583417][T11871]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  258.583432][T11871]  ? up_write+0x1c4/0x420
[  258.583452][T11871]  hci_unregister_dev+0x21a/0x510
[  258.583466][T11871]  vhci_release+0x80/0xd0
[  258.583481][T11871]  ? __pfx_vhci_release+0x10/0x10
[  258.583494][T11871]  __fput+0x44c/0xa70
[  258.583509][T11871]  task_work_run+0x1d4/0x260
[  258.583529][T11871]  ? __pfx_task_work_run+0x10/0x10
[  258.583547][T11871]  ? kmem_cache_free+0x18f/0x400
[  258.583573][T11871]  do_exit+0x6b5/0x22e0
[  258.583593][T11871]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  258.583611][T11871]  ? __pfx_do_exit+0x10/0x10
[  258.583658][T11871]  ? _raw_spin_unlock_irq+0x23/0x50
[  258.583675][T11871]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.583686][T11871]  do_group_exit+0x21c/0x2d0
[  258.583703][T11871]  __x64_sys_exit_group+0x3f/0x40
[  258.583717][T11871]  x64_sys_call+0x21ba/0x21c0
[  258.583733][T11871]  do_syscall_64+0xfa/0x3b0
[  258.583745][T11871]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.583756][T11871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.583766][T11871]  ? exc_page_fault+0x9f/0xf0
[  258.583800][T11871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.583812][T11871] RIP: 0033:0x7f7232d8e929
[  258.583824][T11871] Code: Unable to access opcode bytes at 0x7f7232d8e8ff.
[  258.583830][T11871] RSP: 002b:00007fff86e3ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  258.583846][T11871] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7232d8e929
[  258.583856][T11871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  258.583863][T11871] RBP: 00007f7232dee8f0 R08: 00007fff86e38a17 R09: 0000000000000003
[  258.583870][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.583877][T11871] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff86e3ae30
[  258.583889][T11871]  </TASK>
[  258.584968][   T54] Bluetooth: hci0: command 0x041b tx timeout
[  258.613880][T11971] netlink: 'syz.2.1505': attribute type 13 has an invalid length.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  258.718066][T11971] netlink: 'syz.2.1505': attribute type 17 has an invalid length.
[  258.804211][T11971] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  258.806938][T11971] caif:caif_disconnect_client(): nothing to disconnect
[  258.809649][T11971] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  258.813437][T11971] chnl_net:chnl_net_open(): state disconnected
[  258.815426][T11971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.213030][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)

VM DIAGNOSIS:
19:29:47  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000284ee30
R8 =ffff8880209d8237 R9 =1ffff1100413b046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af790b R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555e7f3500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002fc0 CR3=0000000116168000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ffbe1811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d2eae1cdb327f300 RBX=ffffffff81975d58 RCX=d2eae1cdb327f300 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555624a0808 CR3=0000000116162000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffff0000
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f92c2611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
