last executing test programs:

47.190249227s ago: executing program 1 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
listen(r4, 0xfff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
readv(r2, &(0x7f0000002540)=[{&(0x7f0000001140)=""/2, 0x2}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/227, 0xe3}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/83, 0x53}], 0x7)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f00000001c0)="313fc008ba6e", 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r8, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb83}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'team0\x00', <r15=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x3c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000140)={0xa, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002640), 0x0, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x48}, 0x2004c0c1)

39.509414033s ago: executing program 1 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
listen(r4, 0xfff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
readv(r2, &(0x7f0000002540)=[{&(0x7f0000001140)=""/2, 0x2}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/227, 0xe3}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/83, 0x53}], 0x7)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f00000001c0)="313fc008ba6e", 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r8, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb83}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'team0\x00', <r15=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x3c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000140)={0xa, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002640), 0x0, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x48}, 0x2004c0c1)

29.442969568s ago: executing program 1 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
listen(r4, 0xfff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
readv(r2, &(0x7f0000002540)=[{&(0x7f0000001140)=""/2, 0x2}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/227, 0xe3}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/83, 0x53}], 0x7)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f00000001c0)="313fc008ba6e", 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r8, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb83}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'team0\x00', <r15=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x3c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000140)={0xa, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002640), 0x0, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x48}, 0x2004c0c1)

21.962859614s ago: executing program 1 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
listen(r4, 0xfff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
readv(r2, &(0x7f0000002540)=[{&(0x7f0000001140)=""/2, 0x2}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/227, 0xe3}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/83, 0x53}], 0x7)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f00000001c0)="313fc008ba6e", 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r8, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb83}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'team0\x00', <r15=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x3c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000140)={0xa, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002640), 0x0, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x48}, 0x2004c0c1)

14.208828853s ago: executing program 1 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
listen(r4, 0xfff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
readv(r2, &(0x7f0000002540)=[{&(0x7f0000001140)=""/2, 0x2}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/227, 0xe3}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/83, 0x53}], 0x7)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f00000001c0)="313fc008ba6e", 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r8, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb83}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'team0\x00', <r15=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x3c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000140)={0xa, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002640), 0x0, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x48}, 0x2004c0c1)

6.524287309s ago: executing program 1 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
listen(r4, 0xfff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
readv(r2, &(0x7f0000002540)=[{&(0x7f0000001140)=""/2, 0x2}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/227, 0xe3}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/83, 0x53}], 0x7)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f00000001c0)="313fc008ba6e", 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r8, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb83}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'team0\x00', <r15=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x3c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000140)={0xa, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002640), 0x0, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x48}, 0x2004c0c1)

689.536083ms ago: executing program 2 (id=1890):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x1000)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000001010000000000"], 0x0, 0x26, 0x0, 0x1}, 0x19)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000b7080800000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x8, 0x17, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f00000003c0)=""/23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

610.09577ms ago: executing program 0 (id=1891):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x26}, 0x28)
unshare(0x22020600) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000002c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r2, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0)
unshare(0x2c060000)
unshare(0x24020400)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r4=>0x0})
r5 = socket(0x2, 0x400000000002, 0x0)
getsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
setsockopt(r5, 0x11, 0x20, &(0x7f00000012c0)="15020000", 0x4) (async)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) (async)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000240)={'vlan0\x00', {0x2, 0x0, @private}}) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x300, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2, 0xa}, {0x0, 0xfffe}, {0xa, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

609.659459ms ago: executing program 2 (id=1892):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
r3 = epoll_create1(0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
close(r4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r5, &(0x7f0000000640)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002fafffeff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xffffffffffffff09, 0x40802, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2e, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080))
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, 0x0, 0x0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, 0x0, 0x0)
setsockopt$inet_tcp_int(r12, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4)

448.961027ms ago: executing program 0 (id=1893):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
recvmmsg(r1, &(0x7f0000000000), 0x0, 0x40000040, 0x0)

390.101135ms ago: executing program 0 (id=1894):
r0 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x4, 0x20, 0x0, 0xfffff024}, {0x6}]}, 0x10)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x20000804)

339.468149ms ago: executing program 2 (id=1895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xc, 0x2, 0x0, 0x1, [{0x4, 0x102}, {0x4}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001069010000000000000000000000000a20000000000a0103040000000000000001000001090000005d797a310000000040000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000140004800800014000000003080002400ce055622c000000050a0102000000000000000001000c460c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xdc}}, 0x0)

339.083224ms ago: executing program 0 (id=1896):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x56}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/273, 0x111}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000000)=0xfc, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010400000000000000000000000008000640000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000310c000b400000000000000000140000001000010000000000000000000084000a1f8a51104430655e58d9c2b95d7c45c55a28aefa4168b3a2db55d9af19a5f2421a8e8ae16a4fe01eef936788a489f482e61510427af05f6a4821bfe4f866e196fcd0ed99c7c4"], 0x78}}, 0x40010)

238.863242ms ago: executing program 0 (id=1897):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0d}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00}, 0x94)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', <r2=>0x0})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x6, 0x2}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdfffffffedbdf2502400000", @ANYRES32=r2, @ANYBLOB="14000300766574682100"], 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r4 = socket(0x1, 0x803, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004)
setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES8=r0, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x804)

110.021382ms ago: executing program 2 (id=1898):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000c10400000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x20, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000000}, 0x50)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x810)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@ldst={0x1, 0x2, 0x1, 0x2, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

99.41873ms ago: executing program 0 (id=1899):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='module_request\x00', r5}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0xc}}, 0x0, 0x8}, 0x90)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf25110045"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4000)
sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x7fffffff, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0xc, 0x2, {0x1, 0xa67, 0x5212}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x4c}}, 0x0)

96.098226ms ago: executing program 2 (id=1900):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x82, &(0x7f0000000040)={0xffff, 0xfc9b1b96cb5ac3c8, 0xf09, 0x7}, &(0x7f0000000080)=0x10)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x22a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0xa, 0x0, "4971324bf1bdd55752da6395846a02e21fd26b6f5aaf1707817e3703f87d92b0170e8eab5cb4c5b28d6ccddf166237f924cffcc4d87e024aa0bfa0f5b4f8c94caffd627e04688e68045cc42070ace7b1"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x22a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0xa, 0x0, "4971324bf1bdd55752da6395846a02e21fd26b6f5aaf1707817e3703f87d92b0170e8eab5cb4c5b28d6ccddf166237f924cffcc4d87e024aa0bfa0f5b4f8c94caffd627e04688e68045cc42070ace7b1"}, 0xd8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xdc}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xdc}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @empty, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="000000000a00030008e7eebc872f0000180012800e0001007769726567756172640000000400028000000000"], 0x44}}, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xa002a0, 0xc, 0x0, &(0x7f0000000800)="e178f2789b76e4074d8840d7", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xa002a0, 0xc, 0x0, &(0x7f0000000800)="e178f2789b76e4074d8840d7", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r4, 0x0, 0xffffffff000) (async)
sendfile(r0, r4, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x19, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x2, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r9, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x20, 0x2, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

0s ago: executing program 2 (id=1901):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x2, [@datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x3, 0xe1, 0x1000e0}], "f1"}]}}, 0x0, 0x36, 0x0, 0x1, 0x100}, 0x28)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f4800400020000000000080001000000000008"], 0x3c}}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f0000000e00), 0x12)
bind$x25(r1, &(0x7f0000000080), 0x12)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

kernel console output (not intermixed with test programs):

eve2: entered promiscuous mode
[  138.717346][ T9593] geneve2: entered allmulticast mode
[  138.738514][ T9595] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  138.830413][ T9600] pim6reg1: entered promiscuous mode
[  138.833014][ T9600] pim6reg1: entered allmulticast mode
[  138.905596][ T9604] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:0
[  138.937142][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'.
[  139.202214][ T9625] openvswitch: netlink: EtherType 10 is less than min 600
[  139.302451][ T9631] sctp: [Deprecated]: syz.0.1161 (pid 9631) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.302451][ T9631] Use struct sctp_sack_info instead
[  140.418971][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'.
[  140.569725][ T9672] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1170'.
[  140.573402][ T9672] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1170'.
[  140.576854][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  140.597398][ T5860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.652984][ T9674] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  141.694241][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  141.697530][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  141.705454][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  141.710752][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  141.716487][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  141.741702][ T9691] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1175'.
[  141.787069][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'.
[  141.874892][ T5860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.888714][ T9694] chnl_net:caif_netlink_parms(): no params data found
[  141.949290][ T5860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.974636][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.977734][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.982827][ T9694] bridge_slave_0: entered allmulticast mode
[  141.985812][ T9694] bridge_slave_0: entered promiscuous mode
[  141.989537][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.993079][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.996141][ T9694] bridge_slave_1: entered allmulticast mode
[  142.000095][ T9694] bridge_slave_1: entered promiscuous mode
[  142.028323][ T5860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.068468][ T9694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.075437][ T9694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.127730][ T9694] team0: Port device team_slave_0 added
[  142.146793][ T9694] team0: Port device team_slave_1 added
[  142.286174][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.291209][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.304426][ T9694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.311624][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.314532][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.327546][ T9694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.336906][ T5860] bridge_slave_1: left allmulticast mode
[  142.339390][ T5860] bridge_slave_1: left promiscuous mode
[  142.342589][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.347418][ T5860] bridge_slave_0: left allmulticast mode
[  142.349311][ T5860] bridge_slave_0: left promiscuous mode
[  142.354096][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.657915][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.662173][ T5220] Bluetooth: hci0: command tx timeout
[  142.668336][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.675402][ T5860] bond0 (unregistering): Released all slaves
[  142.686716][ T9734] validate_nla: 5 callbacks suppressed
[  142.686731][ T9734] netlink: 'syz.0.1184': attribute type 4 has an invalid length.
[  142.773907][ T9740] netlink: 'syz.0.1187': attribute type 7 has an invalid length.
[  142.777198][ T9740] netlink: 'syz.0.1187': attribute type 8 has an invalid length.
[  142.809639][ T9694] hsr_slave_0: entered promiscuous mode
[  142.825618][ T9694] hsr_slave_1: entered promiscuous mode
[  142.828737][ T9694] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.832768][ T9694] Cannot create hsr debugfs directory
[  142.840178][ T9740] erspan0: entered promiscuous mode
[  142.844181][ T9740] gretap0: entered promiscuous mode
[  142.847333][ T9740] erspan0: left promiscuous mode
[  142.850589][ T9740] gretap0: left promiscuous mode
[  143.207561][ T5860] hsr_slave_0: left promiscuous mode
[  143.216329][ T5860] hsr_slave_1: left promiscuous mode
[  143.219278][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.239076][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.247711][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.250780][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.277755][ T5860] veth1_macvtap: left promiscuous mode
[  143.280181][ T5860] veth0_macvtap: left promiscuous mode
[  143.285098][ T5860] veth1_vlan: left promiscuous mode
[  143.287352][ T5860] veth0_vlan: left promiscuous mode
[  143.353986][ T9765] netlink: 'syz.2.1193': attribute type 4 has an invalid length.
[  143.588259][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  143.610321][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  143.783352][ T5220] Bluetooth: hci2: command tx timeout
[  143.835758][ T9758] netlink: 'syz.0.1192': attribute type 2 has an invalid length.
[  143.841114][ T9758] __nla_validate_parse: 5 callbacks suppressed
[  143.841130][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1192'.
[  143.858594][ T9764] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.870935][ T9764] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.940708][ T9764] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.946836][ T9764] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.966681][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1194'.
[  144.006886][ T9767] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1194'.
[  144.090353][ T9764] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.095696][ T9764] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.216702][ T9764] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.222408][ T9764] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.264077][ T9771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'.
[  144.267740][ T9771] netlink: 'syz.2.1195': attribute type 7 has an invalid length.
[  144.273115][ T9771] netlink: 'syz.2.1195': attribute type 8 has an invalid length.
[  144.275906][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'.
[  144.348163][ T9764] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.352538][ T9764] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.367926][ T9694] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  144.389256][ T9764] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.401365][ T9764] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.413484][ T9764] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.416874][ T9764] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.425537][ T9694] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  144.439618][ T9764] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.462862][ T9764] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.466859][ T9694] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  144.477510][ T9694] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  144.575560][ T9694] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.597010][ T9694] 8021q: adding VLAN 0 to HW filter on device team0
[  144.619201][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.622170][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.636647][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.639188][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.870157][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.889752][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1201'.
[  144.899597][ T9803] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.903383][ T9803] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.906267][ T9803] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.909109][ T9803] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.938801][ T9694] veth0_vlan: entered promiscuous mode
[  144.949967][ T9694] veth1_vlan: entered promiscuous mode
[  144.987538][ T9694] veth0_macvtap: entered promiscuous mode
[  144.995167][ T9694] veth1_macvtap: entered promiscuous mode
[  145.010685][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.026202][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.034099][ T9694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.038104][ T9694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.044402][ T9694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.048249][ T9694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.123625][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.126239][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.143927][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.146621][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.677721][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'.
[  145.725929][ T9812] tipc: Resetting bearer <eth:syzkaller0>
[  145.748805][ T9811] tipc: Resetting bearer <eth:syzkaller0>
[  145.785655][ T9816] tipc: Resetting bearer <eth:syzkaller0>
[  145.811719][ T9818] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1205'.
[  145.823066][ T9818] syz_tun: entered allmulticast mode
[  145.858414][ T9815] tipc: Resetting bearer <eth:syzkaller0>
[  145.866418][ T1088] tipc: Resetting bearer <eth:syzkaller0>
[  145.936850][ T9813] syz_tun: left allmulticast mode
[  145.997060][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'.
[  146.035101][ T9830] xt_hashlimit: size too large, truncated to 1048576
[  146.054067][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'.
[  146.114259][ T9835] netlink: 'syz.0.1211': attribute type 2 has an invalid length.
[  146.122309][ T9835] : entered promiscuous mode
[  146.212178][ T9834] netlink: 'syz.2.1210': attribute type 13 has an invalid length.
[  146.217514][ T9834] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  146.626898][ T9852] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  146.669640][ T9854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.734067][ T9856] batadv_slave_0: entered promiscuous mode
[  146.926573][ T5860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.959416][ T9875] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  147.962892][ T9875] tipc: Bearer <udp:s>: trying with adjusted priority
[  147.965027][ T9875] tipc: Invalid UDP bearer configuration
[  147.965053][ T9875] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  148.007428][ T9879] validate_nla: 3 callbacks suppressed
[  148.007440][ T9879] netlink: 'syz.0.1224': attribute type 7 has an invalid length.
[  148.031580][ T9879] netlink: 'syz.0.1224': attribute type 8 has an invalid length.
[  148.036841][ T9879] erspan0: entered promiscuous mode
[  148.039045][ T9879] gretap0: entered promiscuous mode
[  148.061672][ T9879] erspan0: left promiscuous mode
[  148.071097][ T9879] gretap0: left promiscuous mode
[  148.093312][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  148.096286][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  148.099552][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  148.104307][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  148.113273][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  148.114035][ T5860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.142996][ T9885] netlink: 'syz.2.1226': attribute type 3 has an invalid length.
[  148.226351][ T5860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.305627][ T5860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.492972][ T9882] chnl_net:caif_netlink_parms(): no params data found
[  148.587571][ T5860] bridge_slave_1: left allmulticast mode
[  148.589664][ T5860] bridge_slave_1: left promiscuous mode
[  148.592631][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.597754][ T5860] bridge_slave_0: left allmulticast mode
[  148.599954][ T5860] bridge_slave_0: left promiscuous mode
[  148.604086][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.869427][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.874486][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.878992][ T5860] bond0 (unregistering): Released all slaves
[  148.952784][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.965094][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.968150][ T9882] bridge_slave_0: entered allmulticast mode
[  148.977341][ T9882] bridge_slave_0: entered promiscuous mode
[  148.980749][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.984299][ T9921] netlink: 'syz.0.1239': attribute type 3 has an invalid length.
[  148.987070][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.989743][ T9882] bridge_slave_1: entered allmulticast mode
[  148.994144][ T9882] bridge_slave_1: entered promiscuous mode
[  149.060348][ T9927] __nla_validate_parse: 11 callbacks suppressed
[  149.060367][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'.
[  149.067244][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1242'.
[  149.070648][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'.
[  149.084385][ T9882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.115034][ T9882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.162930][ T9882] team0: Port device team_slave_0 added
[  149.167452][ T9882] team0: Port device team_slave_1 added
[  149.197005][ T5860] hsr_slave_0: left promiscuous mode
[  149.199251][ T5860] hsr_slave_1: left promiscuous mode
[  149.203421][ T9933] x_tables: unsorted underflow at hook 4
[  149.203846][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.207722][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.213677][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.216193][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.229820][ T5860] veth1_macvtap: left promiscuous mode
[  149.232421][ T5860] veth0_macvtap: left promiscuous mode
[  149.234546][ T5860] veth1_vlan: left promiscuous mode
[  149.236399][ T5860] veth0_vlan: left promiscuous mode
[  149.238266][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1245'.
[  149.548046][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  149.573373][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  149.854231][ T9940] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  149.858275][ T9940] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  149.865809][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.868900][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.886682][ T9882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.893909][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.896927][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.908077][ T9882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.970381][ T9882] hsr_slave_0: entered promiscuous mode
[  149.973051][ T9947] block nbd0: shutting down sockets
[  149.984188][ T9882] hsr_slave_1: entered promiscuous mode
[  150.136950][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'.
[  150.183357][ T5838] Bluetooth: hci2: command tx timeout
[  150.205868][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'.
[  150.268967][ T9965] tipc: Failed to remove unknown binding: 66,1,1/7:4057301948/4057301950
[  150.273641][ T9965] tipc: Failed to remove unknown binding: 66,1,1/7:4057301948/4057301950
[  150.276454][ T9965] tipc: Failed to remove unknown binding: 66,1,1/7:4057301948/4057301950
[  150.312419][ T9967] tipc: Resetting bearer <eth:syzkaller0>
[  150.323289][ T9967] netlink: 'syz.0.1255': attribute type 1 has an invalid length.
[  150.326047][ T9967] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1255'.
[  150.329901][ T9967] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1255'.
[  150.334459][ T9967] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1255'.
[  150.346768][ T9966] tipc: Resetting bearer <eth:syzkaller0>
[  150.470551][ T9882] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.476524][ T9882] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.484039][ T9882] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.489463][ T9882] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.537504][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'.
[  150.552744][ T9882] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.563685][ T9882] 8021q: adding VLAN 0 to HW filter on device team0
[  150.575849][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.578933][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.586326][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.588696][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.696051][ T9882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.728002][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.731782][ T9882] veth0_vlan: entered promiscuous mode
[  150.734233][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.740105][ T9882] veth1_vlan: entered promiscuous mode
[  150.766118][ T9882] veth0_macvtap: entered promiscuous mode
[  150.770376][ T9882] veth1_macvtap: entered promiscuous mode
[  150.780105][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.787579][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.793717][ T9882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.796666][ T9882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.799531][ T9882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.803178][ T9882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.844779][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.850722][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.867323][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.870243][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.032192][ T1088] tipc: Resetting bearer <eth:syzkaller0>
[  151.108922][T10011] netlink: 'syz.2.1268': attribute type 3 has an invalid length.
[  151.293361][T10021] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  151.296879][T10021] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  151.338309][T10028] tipc: Resetting bearer <eth:syzkaller0>
[  151.391755][T10027] tipc: Resetting bearer <eth:syzkaller0>
[  151.484673][T10040] netlink: 'syz.0.1277': attribute type 1 has an invalid length.
[  151.802292][   T33] audit: type=1800 audit(1752161218.419:5): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1286" name=14 dev="tmpfs" ino=2504 res=0 errno=0
[  152.142062][ T2248] tipc: Resetting bearer <eth:syzkaller0>
[  152.145177][T10091] syzkaller1: entered promiscuous mode
[  152.147541][T10091] syzkaller1: entered allmulticast mode
[  152.163404][T10091] netlink: 'syz.0.1293': attribute type 1 has an invalid length.
[  152.355070][T10109] netlink: 'syz.0.1298': attribute type 2 has an invalid length.
[  152.898291][ T8571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.087451][T10147] netlink: 'syz.2.1308': attribute type 4 has an invalid length.
[  154.154706][T10154] tipc: Resetting bearer <eth:syzkaller0>
[  154.172891][T10154] tipc: Resetting bearer <eth:syzkaller0>
[  154.287681][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.292512][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.298253][T10168] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  154.301950][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.305485][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.308549][T10168] netlink: 'syz.2.1313': attribute type 2 has an invalid length.
[  154.314640][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.314797][T10168] netlink: 'syz.2.1313': attribute type 8 has an invalid length.
[  154.334435][T10168] __nla_validate_parse: 11 callbacks suppressed
[  154.334446][T10168] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1313'.
[  154.341399][T10168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1313'.
[  154.484763][T10164] chnl_net:caif_netlink_parms(): no params data found
[  154.567848][T10164] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.572615][T10164] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.573727][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1312'.
[  154.575095][T10164] bridge_slave_0: entered allmulticast mode
[  154.592443][T10164] bridge_slave_0: entered promiscuous mode
[  154.599670][T10164] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.602850][T10164] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.605256][T10164] bridge_slave_1: entered allmulticast mode
[  154.608050][T10164] bridge_slave_1: entered promiscuous mode
[  154.664502][ T8571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.676386][T10164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.683138][T10164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.716484][T10190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1317'.
[  154.748538][ T8571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.763259][T10164] team0: Port device team_slave_0 added
[  154.769271][T10164] team0: Port device team_slave_1 added
[  154.799426][T10164] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.809385][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.821526][T10164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.837331][ T8571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.846428][T10164] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.854238][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.865322][T10164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.940053][T10164] hsr_slave_0: entered promiscuous mode
[  154.944846][T10164] hsr_slave_1: entered promiscuous mode
[  154.952359][T10164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.955478][T10164] Cannot create hsr debugfs directory
[  154.968299][T10197] netlink: 'syz.2.1318': attribute type 1 has an invalid length.
[  154.977236][T10197] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1318'.
[  155.027052][ T8571] bridge_slave_1: left allmulticast mode
[  155.033003][ T8571] bridge_slave_1: left promiscuous mode
[  155.037939][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.052548][ T8571] bridge_slave_0: left allmulticast mode
[  155.064780][ T8571] bridge_slave_0: left promiscuous mode
[  155.067347][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.331784][ T8571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.337335][ T8571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.341590][ T8571] bond0 (unregistering): Released all slaves
[  155.357655][  T712] tipc: Resetting bearer <eth:syzkaller0>
[  155.616814][ T8571] hsr_slave_0: left promiscuous mode
[  155.622685][ T8571] hsr_slave_1: left promiscuous mode
[  155.625592][ T8571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.628733][ T8571] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.633406][ T8571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.636112][ T8571] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.639775][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1325'.
[  155.649264][ T8571] veth1_macvtap: left promiscuous mode
[  155.651489][ T8571] veth0_macvtap: left promiscuous mode
[  155.653497][ T8571] veth1_vlan: left promiscuous mode
[  155.655607][ T8571] veth0_vlan: left promiscuous mode
[  155.952938][ T8571] team0 (unregistering): Port device team_slave_1 removed
[  155.976027][ T8571] team0 (unregistering): Port device team_slave_0 removed
[  156.342187][ T5220] Bluetooth: hci2: command tx timeout
[  156.553323][T10164] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  156.559037][T10164] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  156.573670][T10164] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  156.578327][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'.
[  156.584129][T10238] netlink: 'syz.0.1330': attribute type 2 has an invalid length.
[  156.588268][T10238] netlink: 'syz.0.1330': attribute type 1 has an invalid length.
[  156.590788][T10164] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  156.593808][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'.
[  156.729274][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'.
[  156.836215][T10164] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.866155][T10164] 8021q: adding VLAN 0 to HW filter on device team0
[  156.876570][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.879760][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.908238][T10258] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.921809][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.924837][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.037644][T10267] tipc: Resetting bearer <eth:syzkaller0>
[  157.044265][T10266] tipc: Resetting bearer <eth:syzkaller0>
[  157.082748][T10164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.108598][T10164] veth0_vlan: entered promiscuous mode
[  157.117205][T10164] veth1_vlan: entered promiscuous mode
[  157.148750][T10164] veth0_macvtap: entered promiscuous mode
[  157.203457][T10164] veth1_macvtap: entered promiscuous mode
[  157.251915][T10164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.259951][T10164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.266422][T10164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.269622][T10164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.272780][T10164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.275864][T10164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.332807][T10276] tipc: Resetting bearer <eth:syzkaller0>
[  157.337722][T10275] tipc: Resetting bearer <eth:syzkaller0>
[  157.342956][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.345510][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.373628][  T712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.376213][  T712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.471543][  T712] tipc: Resetting bearer <eth:syzkaller0>
[  157.474845][T10282] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1341'.
[  157.479427][T10282] openvswitch: netlink: Flow key attr not present in new flow.
[  157.824118][T10304] netlink: 'syz.0.1348': attribute type 29 has an invalid length.
[  157.827123][T10304] netlink: 'syz.0.1348': attribute type 29 has an invalid length.
[  157.830748][T10304] netlink: 'syz.0.1348': attribute type 16 has an invalid length.
[  157.836222][T10304] unsupported nla_type 58
[  157.842339][T10304] vti0: entered promiscuous mode
[  157.951525][T10308] nbd0: detected capacity change from 0 to 63
[  157.961345][T10311] block nbd0: NBD_DISCONNECT
[  157.965380][T10311] block nbd0: Disconnected due to user request.
[  157.972242][T10311] block nbd0: shutting down sockets
[  157.976073][    C1] blk_print_req_error: 138 callbacks suppressed
[  157.976088][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  157.982406][    C1] buffer_io_error: 138 callbacks suppressed
[  157.982416][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  157.988259][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  157.992180][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  157.995521][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  157.999235][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  158.002602][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.006207][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  158.010615][ T9698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.015717][ T9698] Buffer I/O error on dev nbd0, logical block 0, async page read
[  158.019168][ T9698] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.023841][ T9698] Buffer I/O error on dev nbd0, logical block 1, async page read
[  158.028322][ T9698] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.034527][ T9698] Buffer I/O error on dev nbd0, logical block 2, async page read
[  158.037440][ T9698] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.040573][ T9698] Buffer I/O error on dev nbd0, logical block 3, async page read
[  158.045401][ T9698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.048534][ T9698] Buffer I/O error on dev nbd0, logical block 0, async page read
[  158.052188][ T9698] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.056187][ T9698] Buffer I/O error on dev nbd0, logical block 1, async page read
[  158.062839][ T9698] ldm_validate_partition_table(): Disk read failed.
[  158.066014][ T9698] Dev nbd0: unable to read RDB block 0
[  158.070563][ T9698]  nbd0: unable to read partition table
[  158.079474][ T9698] ldm_validate_partition_table(): Disk read failed.
[  158.083416][ T9698] Dev nbd0: unable to read RDB block 0
[  158.086312][ T9698]  nbd0: unable to read partition table
[  158.260440][T10332] : (slave bridge_slave_1): Enslaving as an active interface with an up link
[  158.306964][T10334] SET target dimension over the limit!
[  158.978809][ T5725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.013083][T10360] tipc: Resetting bearer <eth:syzkaller0>
[  159.088675][T10359] tipc: Resetting bearer <eth:syzkaller0>
[  159.523416][  T712] tipc: Resetting bearer <eth:syzkaller0>
[  160.313140][T10365] __nla_validate_parse: 12 callbacks suppressed
[  160.313149][T10365] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1365'.
[  160.360651][T10364] syzkaller0: entered promiscuous mode
[  160.381371][T10364] syzkaller0: entered allmulticast mode
[  160.398046][T10369] vlan0: entered promiscuous mode
[  160.399756][T10369] veth0: entered promiscuous mode
[  160.497281][T10369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1367'.
[  160.524447][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  160.529053][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  160.533665][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  160.538917][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  160.543601][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.534365][ T5725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.595903][T10377] validate_nla: 2 callbacks suppressed
[  161.595917][T10377] netlink: 'syz.2.1369': attribute type 1 has an invalid length.
[  161.600598][T10377] netlink: 'syz.2.1369': attribute type 4 has an invalid length.
[  161.610791][T10377] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1369'.
[  161.633301][ T5725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.762897][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'.
[  161.855198][ T5725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.868394][T10372] chnl_net:caif_netlink_parms(): no params data found
[  162.019258][T10406] netlink: 'syz.0.1375': attribute type 21 has an invalid length.
[  162.074373][T10372] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.077300][T10372] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.104123][T10372] bridge_slave_0: entered allmulticast mode
[  162.106794][T10372] bridge_slave_0: entered promiscuous mode
[  162.122795][T10372] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.128102][T10372] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.130481][T10372] bridge_slave_1: entered allmulticast mode
[  162.133827][T10372] bridge_slave_1: entered promiscuous mode
[  162.136831][ T5725] bridge_slave_1: left allmulticast mode
[  162.138653][ T5725] bridge_slave_1: left promiscuous mode
[  162.140476][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.146412][ T5725] bridge_slave_0: left allmulticast mode
[  162.148274][ T5725] bridge_slave_0: left promiscuous mode
[  162.150221][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.399925][ T5725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.406308][ T5725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.413715][ T5725] bond0 (unregistering): Released all slaves
[  162.462552][T10372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.468937][T10372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.581458][ T5838] Bluetooth: hci2: command tx timeout
[  162.702585][T10372] team0: Port device team_slave_0 added
[  162.712828][T10426] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  162.717288][T10372] team0: Port device team_slave_1 added
[  162.775223][T10372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.777661][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.786912][T10372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.796201][T10372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.799082][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.808744][T10372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.838295][T10430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1382'.
[  162.841620][T10430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1382'.
[  162.875659][T10430] gretap0: entered promiscuous mode
[  162.879303][T10430] gretap0: left promiscuous mode
[  162.907519][ T5725] hsr_slave_0: left promiscuous mode
[  162.909694][ T5725] hsr_slave_1: left promiscuous mode
[  162.911932][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.914418][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.918255][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.920727][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.932068][ T5725] veth1_macvtap: left promiscuous mode
[  162.933900][ T5725] veth0_macvtap: left promiscuous mode
[  162.935792][ T5725] veth1_vlan: left promiscuous mode
[  162.937561][ T5725] veth0_vlan: left promiscuous mode
[  163.322331][ T5725] team0 (unregistering): Port device team_slave_1 removed
[  163.376746][ T5725] team0 (unregistering): Port device team_slave_0 removed
[  163.774585][T10372] hsr_slave_0: entered promiscuous mode
[  163.777439][T10372] hsr_slave_1: entered promiscuous mode
[  164.039300][T10441] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1385'.
[  164.172023][T10448] sctp: [Deprecated]: syz.0.1387 (pid 10448) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.172023][T10448] Use struct sctp_sack_info instead
[  164.414578][T10372] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  164.425335][T10372] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  164.442456][T10372] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  164.449457][T10372] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  164.570678][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  164.578094][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'.
[  164.584161][T10459] netlink: 'syz.2.1389': attribute type 13 has an invalid length.
[  164.587628][T10459] netlink: 'syz.2.1389': attribute type 12 has an invalid length.
[  164.606395][T10459] syzkaller1: entered promiscuous mode
[  164.608683][T10459] syzkaller1: entered allmulticast mode
[  164.650394][T10372] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.661828][ T5838] Bluetooth: hci2: command tx timeout
[  164.677016][T10372] 8021q: adding VLAN 0 to HW filter on device team0
[  164.699240][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.702295][ T9006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.735221][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.738335][ T9006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.839395][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'.
[  164.845810][T10372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.904768][T10372] veth0_vlan: entered promiscuous mode
[  164.916281][T10372] veth1_vlan: entered promiscuous mode
[  164.970979][T10372] veth0_macvtap: entered promiscuous mode
[  164.986608][T10372] veth1_macvtap: entered promiscuous mode
[  165.004079][T10372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.011471][T10372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.017964][T10372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.021666][T10372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.024793][T10372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.028045][T10372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.084209][T10471] tipc: Resetting bearer <eth:syzkaller0>
[  165.090024][T10470] tipc: Resetting bearer <eth:syzkaller0>
[  165.103135][ T9006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.112655][ T9006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.150394][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.154473][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.543344][T10475] __nla_validate_parse: 1 callbacks suppressed
[  165.543359][T10475] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1392'.
[  165.761180][ T9006] tipc: Resetting bearer <eth:syzkaller0>
[  165.816842][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1394'.
[  165.825106][T10483] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.1394'.
[  166.026782][T10497] tipc: Resetting bearer <eth:syzkaller0>
[  166.042040][T10495] tipc: Resetting bearer <eth:syzkaller0>
[  166.355367][T10520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1407'.
[  166.573078][T10532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1413'.
[  166.577411][T10532] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1413'.
[  166.628487][T10534] netlink: 'syz.0.1414': attribute type 4 has an invalid length.
[  166.714033][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'.
[  166.787642][T10544] tipc: Resetting bearer <eth:syzkaller0>
[  166.807462][T10546] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1418'.
[  166.846829][T10543] tipc: Resetting bearer <eth:syzkaller0>
[  166.849721][ T1088] tipc: Resetting bearer <eth:syzkaller0>
[  166.879062][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.162075][T10551] netlink: 'syz.2.1420': attribute type 1 has an invalid length.
[  168.165255][T10551] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1420'.
[  168.169009][T10551] netlink: 'syz.2.1420': attribute type 1 has an invalid length.
[  168.283310][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1422'.
[  168.393785][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.397414][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.400475][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.404256][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.406973][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.543394][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.549101][T10556] netem: change failed
[  168.673032][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.728774][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.971583][T10585] xt_policy: too many policy elements
[  168.974424][T10559] chnl_net:caif_netlink_parms(): no params data found
[  168.974445][T10585] --map-set only usable from mangle table
[  168.985314][T10583] xt_CT: No such helper "pptp"
[  168.999899][T10585] xt_CT: No such helper "pptp"
[  169.054248][ T5875] bridge_slave_1: left allmulticast mode
[  169.056753][ T5875] bridge_slave_1: left promiscuous mode
[  169.059355][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.083149][ T5875] bridge_slave_0: left allmulticast mode
[  169.085373][ T5875] bridge_slave_0: left promiscuous mode
[  169.088384][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.438819][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.445254][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.450059][ T5875] bond0 (unregistering): Released all slaves
[  169.473112][T10592] tipc: Resetting bearer <eth:syzkaller0>
[  169.597331][T10559] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.599753][T10559] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.603005][T10559] bridge_slave_0: entered allmulticast mode
[  169.608231][T10559] bridge_slave_0: entered promiscuous mode
[  169.612145][T10559] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.615068][T10559] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.618211][T10559] bridge_slave_1: entered allmulticast mode
[  169.623016][T10559] bridge_slave_1: entered promiscuous mode
[  169.667629][T10559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.679679][T10559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.701631][T10591] tipc: Resetting bearer <eth:syzkaller0>
[  169.774532][T10559] team0: Port device team_slave_0 added
[  169.788025][ T5875] hsr_slave_0: left promiscuous mode
[  169.790335][ T5875] hsr_slave_1: left promiscuous mode
[  169.793674][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.796596][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.799632][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.803268][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.814787][ T5875] veth1_macvtap: left promiscuous mode
[  169.816995][ T5875] veth0_macvtap: left promiscuous mode
[  169.819176][ T5875] veth1_vlan: left promiscuous mode
[  169.822254][ T5875] veth0_vlan: left promiscuous mode
[  170.287340][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  170.313155][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  170.423735][ T5220] Bluetooth: hci2: command tx timeout
[  170.556347][T10559] team0: Port device team_slave_1 added
[  170.563122][  T712] tipc: Resetting bearer <eth:syzkaller0>
[  170.614307][T10559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.616595][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.622658][T10620] __nla_validate_parse: 2 callbacks suppressed
[  170.622671][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'.
[  170.626144][T10559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.643266][T10559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.645457][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.654055][T10559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.734393][T10559] hsr_slave_0: entered promiscuous mode
[  170.736757][T10559] hsr_slave_1: entered promiscuous mode
[  170.741086][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'.
[  171.034716][T10640] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  171.233722][T10559] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.246270][T10559] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  171.263997][T10559] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  171.268386][T10559] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  171.399725][T10559] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.429497][T10559] 8021q: adding VLAN 0 to HW filter on device team0
[  171.445033][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.447601][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.466238][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.469111][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.504131][T10559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.507857][T10559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.584493][T10559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.596328][T10668] netlink: 'syz.0.1451': attribute type 3 has an invalid length.
[  171.609645][T10668] netlink: 'syz.0.1451': attribute type 3 has an invalid length.
[  171.637934][T10559] veth0_vlan: entered promiscuous mode
[  171.643812][T10559] veth1_vlan: entered promiscuous mode
[  171.659004][T10559] veth0_macvtap: entered promiscuous mode
[  171.664149][T10559] veth1_macvtap: entered promiscuous mode
[  171.672691][T10559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.679378][T10559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.684658][T10559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.687493][T10559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.691230][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'.
[  171.694315][T10559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.697664][T10559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.752743][T10673] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  171.787442][ T2248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.790110][ T2248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.824876][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.827810][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.992427][T10680] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1454'.
[  171.996254][T10680] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1454'.
[  172.233345][T10695] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1458'.
[  172.322103][T10693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1457'.
[  172.413834][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'.
[  172.973844][T10719] netlink: 'syz.2.1466': attribute type 2 has an invalid length.
[  172.977195][T10719] netlink: 'syz.2.1466': attribute type 2 has an invalid length.
[  172.996073][T10719] x_tables: duplicate underflow at hook 3
[  173.481285][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'.
[  173.868182][T10759] tipc: Resetting bearer <eth:syzkaller0>
[  173.941975][T10759] tipc: Resetting bearer <eth:syzkaller0>
[  173.990475][T10765] netlink: 'syz.2.1479': attribute type 1 has an invalid length.
[  174.016062][T10765] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1479'.
[  174.024100][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.662443][  T712] tipc: Resetting bearer <eth:syzkaller0>
[  175.733856][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.754110][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.757361][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.762637][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.765965][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.769875][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.809791][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.885085][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.001602][T10784] chnl_net:caif_netlink_parms(): no params data found
[  176.053972][ T5875] bridge_slave_1: left allmulticast mode
[  176.056422][ T5875] bridge_slave_1: left promiscuous mode
[  176.059304][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.065179][ T5875] bridge_slave_0: left allmulticast mode
[  176.067554][ T5875] bridge_slave_0: left promiscuous mode
[  176.070137][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.376462][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.383085][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.389424][ T5875] bond0 (unregistering): Released all slaves
[  176.542641][T10784] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.545934][T10784] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.549078][T10784] bridge_slave_0: entered allmulticast mode
[  176.558913][T10784] bridge_slave_0: entered promiscuous mode
[  176.590283][T10804] __nla_validate_parse: 1 callbacks suppressed
[  176.590303][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1485'.
[  176.635867][T10784] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.638989][T10784] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.642542][T10784] bridge_slave_1: entered allmulticast mode
[  176.646373][T10784] bridge_slave_1: entered promiscuous mode
[  176.786430][T10784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.874673][T10784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.928104][T10784] team0: Port device team_slave_0 added
[  176.945078][T10784] team0: Port device team_slave_1 added
[  176.958566][T10818] netlink: 'syz.2.1492': attribute type 5 has an invalid length.
[  177.008262][ T5875] hsr_slave_0: left promiscuous mode
[  177.012153][ T5875] hsr_slave_1: left promiscuous mode
[  177.015184][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.021829][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.034191][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.036792][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.062972][ T5875] veth1_macvtap: left promiscuous mode
[  177.065587][ T5875] veth0_macvtap: left promiscuous mode
[  177.068036][ T5875] veth1_vlan: left promiscuous mode
[  177.070462][ T5875] veth0_vlan: left promiscuous mode
[  177.538719][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  177.611780][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  177.781042][ T5220] Bluetooth: hci2: command tx timeout
[  177.897028][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1495'.
[  178.283588][T10820] macsec2: entered promiscuous mode
[  178.286052][T10820] macvlan1: entered promiscuous mode
[  178.299697][T10820] macvlan1: left promiscuous mode
[  178.352110][T10784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.355179][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.381194][T10784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.387364][T10784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.390256][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.430956][T10784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.558062][T10784] hsr_slave_0: entered promiscuous mode
[  178.560445][T10784] hsr_slave_1: entered promiscuous mode
[  178.922940][T10848] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1502'.
[  179.037872][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1502'.
[  179.120321][T10784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  179.134611][T10784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  179.147973][T10784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  179.157549][T10784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  179.338189][T10784] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.389150][T10784] 8021q: adding VLAN 0 to HW filter on device team0
[  179.398260][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.401408][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.415619][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.418200][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.647361][T10784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.737662][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'.
[  179.759755][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'.
[  179.773557][T10784] veth0_vlan: entered promiscuous mode
[  179.785359][T10879] bond0: entered promiscuous mode
[  179.787108][T10879] bond_slave_0: entered promiscuous mode
[  179.801438][T10879] bond_slave_1: entered promiscuous mode
[  179.804218][T10879] bridge0: entered promiscuous mode
[  179.811181][T10879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.813657][T10879] Cannot create hsr debugfs directory
[  179.815531][T10879] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  179.819145][T10879] hsr0: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network
[  179.849878][T10784] veth1_vlan: entered promiscuous mode
[  179.862531][ T5220] Bluetooth: hci2: command tx timeout
[  179.873178][T10784] veth0_macvtap: entered promiscuous mode
[  179.877561][T10784] veth1_macvtap: entered promiscuous mode
[  179.902610][T10784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.923132][T10784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.936524][T10784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.943348][T10784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.948590][T10784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.959099][T10784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.069866][ T2248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.077304][ T2248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.097848][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.100465][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.172680][T10895] netlink: 'syz.2.1513': attribute type 1 has an invalid length.
[  180.214292][T10895] 8021q: adding VLAN 0 to HW filter on device bond7
[  180.219251][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'.
[  180.230945][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'.
[  180.303829][T10903] netlink: 'syz.0.1516': attribute type 4 has an invalid length.
[  180.304803][T10905] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1517'.
[  180.312570][T10903] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.362863][T10907] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  180.366183][T10907] x_tables: ip_tables: osf match: only valid for protocol 6
[  180.389610][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'.
[  180.394944][T10907] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.398298][T10907] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.401612][T10907] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.404272][T10907] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.414471][T10907] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.417300][T10907] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.419938][T10907] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.422905][T10907] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.428036][T10907] tipc: Resetting bearer <eth:syzkaller0>
[  180.446291][T10910] netlink: 'syz.2.1519': attribute type 1 has an invalid length.
[  180.539437][T10909] bond9: (slave ip6gretap1): making interface the new active one
[  180.542881][T10909] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  180.874486][T10940] netlink: 'syz.2.1529': attribute type 1 has an invalid length.
[  180.877835][T10940] NCSI netlink: No device for ifindex 813332851
[  181.024402][T10953] netlink: 'syz.0.1533': attribute type 15 has an invalid length.
[  181.027817][T10953] netlink: 'syz.0.1533': attribute type 18 has an invalid length.
[  181.477049][ T8571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.376908][ T8571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.086928][T10974] __nla_validate_parse: 9 callbacks suppressed
[  183.086941][T10974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'.
[  183.146215][ T8571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.293022][ T8571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.328678][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.333241][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.336154][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.347394][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.353194][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.504911][ T8571] bridge_slave_1: left allmulticast mode
[  183.506917][ T8571] bridge_slave_1: left promiscuous mode
[  183.508811][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.514635][ T8571] bridge_slave_0: left allmulticast mode
[  183.516629][ T8571] bridge_slave_0: left promiscuous mode
[  183.518574][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.641760][T10989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.785727][ T8571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.790799][ T8571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.794963][ T8571] bond0 (unregistering): Released all slaves
[  183.917846][T10980] chnl_net:caif_netlink_parms(): no params data found
[  184.191318][T10980] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.193882][T10980] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.196957][T10980] bridge_slave_0: entered allmulticast mode
[  184.208610][T10980] bridge_slave_0: entered promiscuous mode
[  184.320391][ T8571] hsr_slave_0: left promiscuous mode
[  184.325488][ T8571] hsr_slave_1: left promiscuous mode
[  184.334568][ T8571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.337728][ T8571] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.352158][ T8571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.355424][ T8571] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.379026][ T8571] veth1_macvtap: left promiscuous mode
[  184.381546][ T8571] veth0_macvtap: left promiscuous mode
[  184.384047][ T8571] veth1_vlan: left promiscuous mode
[  184.386314][ T8571] veth0_vlan: left promiscuous mode
[  184.912549][ T8571] team0 (unregistering): Port device team_slave_1 removed
[  184.946880][ T8571] team0 (unregistering): Port device team_slave_0 removed
[  185.279951][T10980] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.291060][T10980] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.294036][T10980] bridge_slave_1: entered allmulticast mode
[  185.308810][T10980] bridge_slave_1: entered promiscuous mode
[  185.377522][T10980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.381423][T11016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1550'.
[  185.387800][T11016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1550'.
[  185.391859][ T5838] Bluetooth: hci2: command tx timeout
[  185.393583][T10980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.442194][T10980] team0: Port device team_slave_0 added
[  185.448442][T10980] team0: Port device team_slave_1 added
[  185.482257][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1551'.
[  185.510151][T10980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.514731][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.526076][T10980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.537610][T10980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.540692][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.570334][T10980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.641301][T10980] hsr_slave_0: entered promiscuous mode
[  185.643984][T10980] hsr_slave_1: entered promiscuous mode
[  186.338641][T10980] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  186.407512][T10980] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.424441][T10980] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.438459][T10980] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  186.636185][T11060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'.
[  186.653880][T10980] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.677223][T10980] 8021q: adding VLAN 0 to HW filter on device team0
[  186.696011][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.699073][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.715507][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.718592][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.879702][T11069] netlink: 'syz.2.1563': attribute type 1 has an invalid length.
[  186.902516][T11069] 8021q: adding VLAN 0 to HW filter on device bond10
[  186.945582][T11069] 8021q: adding VLAN 0 to HW filter on device bond10
[  186.948288][T11069] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  186.962791][T11069] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  187.014003][T11072] veth31: entered promiscuous mode
[  187.032540][T11072] bond10: (slave veth31): Enslaving as an active interface with a down link
[  187.046529][T10980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.069006][T11069] erspan0: entered allmulticast mode
[  187.101708][T10980] veth0_vlan: entered promiscuous mode
[  187.110459][T10980] veth1_vlan: entered promiscuous mode
[  187.167370][T10980] veth0_macvtap: entered promiscuous mode
[  187.175792][T11078] netlink: 4012 bytes leftover after parsing attributes in process `syz.0.1565'.
[  187.180008][T10980] veth1_macvtap: entered promiscuous mode
[  187.196468][T10980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.214190][T10980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.236433][T10980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.250921][T10980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.254837][T10980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.259311][T10980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.378818][T11086] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1567'.
[  187.406548][T11086] syzkaller1: entered promiscuous mode
[  187.408825][T11086] syzkaller1: entered allmulticast mode
[  187.462582][ T5838] Bluetooth: hci2: command tx timeout
[  187.470092][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.478436][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.572516][ T9006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.575138][ T9006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.641800][T11090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1568'.
[  187.648798][T11078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1565'.
[  187.655891][T11078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'.
[  188.163225][T11113] __nla_validate_parse: 1 callbacks suppressed
[  188.163238][T11113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1574'.
[  188.208973][T11118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1575'.
[  188.270349][T11120] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1576'.
[  188.280388][T11120] netlink: zone id is out of range
[  188.282650][T11120] netlink: zone id is out of range
[  188.284411][T11120] netlink: zone id is out of range
[  188.287050][T11120] netlink: zone id is out of range
[  188.288769][T11120] netlink: zone id is out of range
[  188.291925][T11120] netlink: zone id is out of range
[  188.293808][T11120] netlink: zone id is out of range
[  188.295510][T11120] netlink: zone id is out of range
[  188.297159][T11120] netlink: zone id is out of range
[  188.312234][T11120] netlink: zone id is out of range
[  188.357722][T11124] x_tables: duplicate underflow at hook 2
[  188.384442][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'.
[  188.502338][T11129] netlink: 'syz.0.1579': attribute type 2 has an invalid length.
[  188.510621][T11129] : entered promiscuous mode
[  188.832788][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1585'.
[  188.999395][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.539032][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.603116][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.697230][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.731711][T11164] netlink: 'syz.2.1590': attribute type 1 has an invalid length.
[  190.734934][T11164] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1590'.
[  190.738732][T11164] netlink: 'syz.2.1590': attribute type 1 has an invalid length.
[  190.761647][T11163] can: request_module (can-proto-5) failed.
[  190.790954][T11164] netlink: 'syz.2.1590': attribute type 1 has an invalid length.
[  190.961451][   T13] bridge_slave_1: left allmulticast mode
[  190.964672][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.967504][   T13] bridge_slave_1: left promiscuous mode
[  190.973355][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.976358][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.976467][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.983676][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.989023][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.007500][   T13] bridge_slave_0: left allmulticast mode
[  191.009960][   T13] bridge_slave_0: left promiscuous mode
[  191.018602][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.554349][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.564001][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.579179][   T13] bond0 (unregistering): Released all slaves
[  191.590298][T11179] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  191.650218][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1596'.
[  191.653142][T11194] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1595'.
[  191.789411][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'.
[  191.811008][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'.
[  191.933506][T11206] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:1
[  192.002023][   T13] hsr_slave_0: left promiscuous mode
[  192.004619][   T13] hsr_slave_1: left promiscuous mode
[  192.007342][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.010327][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.032338][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.035458][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.059009][   T13] veth1_macvtap: left promiscuous mode
[  192.071128][   T13] veth0_macvtap: left promiscuous mode
[  192.081696][   T13] veth1_vlan: left promiscuous mode
[  192.084101][   T13] veth0_vlan: left promiscuous mode
[  192.554047][   T13] team0 (unregistering): Port device team_slave_1 removed
[  192.589602][   T13] team0 (unregistering): Port device team_slave_0 removed
[  192.911274][T11214] netlink: 'syz.0.1603': attribute type 12 has an invalid length.
[  193.013500][T11175] chnl_net:caif_netlink_parms(): no params data found
[  193.061197][ T5220] Bluetooth: hci2: command tx timeout
[  193.158616][T11175] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.170435][T11175] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.173766][T11175] bridge_slave_0: entered allmulticast mode
[  193.177669][T11175] bridge_slave_0: entered promiscuous mode
[  193.181418][T11175] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.183787][T11175] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.186219][T11175] bridge_slave_1: entered allmulticast mode
[  193.190815][T11237] __nla_validate_parse: 2 callbacks suppressed
[  193.203586][T11175] bridge_slave_1: entered promiscuous mode
[  193.210587][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1607'.
[  193.253954][T11237] netlink: 'syz.0.1607': attribute type 3 has an invalid length.
[  193.259302][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.274814][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.368294][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'.
[  193.374868][T11248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1609'.
[  193.388227][T11175] team0: Port device team_slave_0 added
[  193.403060][T11175] team0: Port device team_slave_1 added
[  193.451297][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.454017][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.482770][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.494861][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'.
[  193.499208][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.511192][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.528921][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.622484][T11175] hsr_slave_0: entered promiscuous mode
[  193.626593][T11175] hsr_slave_1: entered promiscuous mode
[  193.700610][T11262] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1614'.
[  193.747137][T11262] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1614'.
[  193.943529][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  193.987009][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1619'.
[  194.117839][T11283] net_ratelimit: 75 callbacks suppressed
[  194.117856][T11283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.199751][T11289] syzkaller0: entered allmulticast mode
[  194.329893][T11175] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  194.338773][T11294] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  194.358376][T11175] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  194.367070][T11293] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  194.373279][T11175] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  194.380135][T11294] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  194.384099][T11294] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  194.387045][T11293] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  194.390146][T11175] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  194.485886][T11175] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.512188][T11175] 8021q: adding VLAN 0 to HW filter on device team0
[  194.525433][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.528457][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.543738][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.546715][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.712877][T11175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.745961][T11175] veth0_vlan: entered promiscuous mode
[  194.753652][T11175] veth1_vlan: entered promiscuous mode
[  194.776046][T11175] veth0_macvtap: entered promiscuous mode
[  194.792176][T11175] veth1_macvtap: entered promiscuous mode
[  194.802553][T11175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.818642][T11175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.830751][T11175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.840270][T11175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.844382][T11175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.847465][T11175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.899371][  T712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.908059][  T712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.934348][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.937530][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.187662][T11310] netlink: 'syz.2.1626': attribute type 10 has an invalid length.
[  195.192006][T11310] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  195.220615][T11307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.235413][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'.
[  195.403186][T11319] xt_l2tp: invalid flags combination: c
[  195.558305][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'.
[  195.604378][T11330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1633'.
[  195.759006][T11332] netlink: 'syz.2.1634': attribute type 4 has an invalid length.
[  196.776763][ T5725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.214160][ T5725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.285243][ T5725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.352370][ T5725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.464029][ T5725] bridge_slave_1: left allmulticast mode
[  198.466268][ T5725] bridge_slave_1: left promiscuous mode
[  198.468799][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.481988][ T5725] bridge_slave_0: left allmulticast mode
[  198.483912][ T5725] bridge_slave_0: left promiscuous mode
[  198.501349][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.676629][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.681817][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.686729][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  198.694673][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  198.697939][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.893396][ T5725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.903941][ T5725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.908032][ T5725] bond0 (unregistering): Released all slaves
[  199.136801][T11378] chnl_net:caif_netlink_parms(): no params data found
[  199.220403][T11394] IPVS: set_ctl: invalid protocol: 59 172.30.0.1:20000
[  199.283496][ T5725] hsr_slave_0: left promiscuous mode
[  199.293941][ T5725] hsr_slave_1: left promiscuous mode
[  199.296258][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.302303][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.305193][T11399] netlink: 'syz.2.1648': attribute type 21 has an invalid length.
[  199.307850][T11399] __nla_validate_parse: 3 callbacks suppressed
[  199.307856][T11399] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1648'.
[  199.315220][T11403] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  199.319451][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.341178][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.358270][ T5725] veth1_macvtap: left promiscuous mode
[  199.360669][ T5725] veth0_macvtap: left promiscuous mode
[  199.371484][ T5725] veth1_vlan: left promiscuous mode
[  199.373515][ T5725] veth0_vlan: left promiscuous mode
[  199.704074][ T5725] team0 (unregistering): Port device team_slave_1 removed
[  199.733719][ T5725] team0 (unregistering): Port device team_slave_0 removed
[  200.084791][T11399] netlink: 'syz.2.1648': attribute type 4 has an invalid length.
[  200.087817][T11399] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1648'.
[  200.202085][T11378] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.205305][T11378] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.208374][T11378] bridge_slave_0: entered allmulticast mode
[  200.212527][T11378] bridge_slave_0: entered promiscuous mode
[  200.217173][T11378] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.220266][T11378] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.223584][T11378] bridge_slave_1: entered allmulticast mode
[  200.228054][T11378] bridge_slave_1: entered promiscuous mode
[  200.295916][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.314122][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.385491][T11378] team0: Port device team_slave_0 added
[  200.433200][T11378] team0: Port device team_slave_1 added
[  200.532292][T11417] netlink: 'syz.2.1654': attribute type 11 has an invalid length.
[  200.562640][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1656'.
[  200.741574][ T5838] Bluetooth: hci2: command tx timeout
[  202.822096][ T5838] Bluetooth: hci2: command tx timeout
[  203.414116][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.417146][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.427974][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.437592][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.440748][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.454072][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.584310][T11378] hsr_slave_0: entered promiscuous mode
[  203.587656][T11378] hsr_slave_1: entered promiscuous mode
[  204.048590][T11455] IPVS: set_ctl: invalid protocol: 7568 172.20.20.170:20001
[  204.070588][T11457] IPVS: Unknown mcast interface: vlan0
[  204.077459][T11457] IPVS: stopping backup sync thread 7838 ...
[  204.187041][T11461] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1672'.
[  204.218436][T11459] syzkaller0: entered allmulticast mode
[  204.241077][T11459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.286692][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1673'.
[  204.343015][T11465] netlink: 'syz.0.1674': attribute type 2 has an invalid length.
[  204.345851][T11465] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1674'.
[  204.363165][T11378] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  204.368488][T11378] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  204.378290][T11378] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  204.388699][T11378] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  204.544395][T11477] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1676'.
[  204.549755][T11378] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.573138][T11378] 8021q: adding VLAN 0 to HW filter on device team0
[  204.583864][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.586897][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.608455][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.611614][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.846585][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.848039][T11489] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1678'.
[  204.853716][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1678'.
[  204.892727][T11378] veth0_vlan: entered promiscuous mode
[  204.898084][T11378] veth1_vlan: entered promiscuous mode
[  204.902431][ T5838] Bluetooth: hci2: command tx timeout
[  204.958620][T11378] veth0_macvtap: entered promiscuous mode
[  204.979002][T11378] veth1_macvtap: entered promiscuous mode
[  205.014551][T11378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.034868][T11378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.039507][T11495] tipc: Enabling of bearer <et:g> rejected, media not registered
[  205.054010][T11378] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.063541][T11378] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.068546][T11378] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.072222][T11378] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.145681][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.153414][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.174788][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'.
[  205.197894][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.202679][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.771450][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'.
[  206.117576][T11537] netlink: 'syz.0.1695': attribute type 1 has an invalid length.
[  206.120995][T11537] netlink: 'syz.0.1695': attribute type 2 has an invalid length.
[  206.287359][T11543] netlink: 'syz.0.1698': attribute type 2 has an invalid length.
[  206.293232][T11543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1698'.
[  206.456956][T11549] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1700'.
[  206.511489][ T6344] page_pool_release_retry() stalled pool shutdown: id 90, 1 inflight 60 sec
[  206.644155][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1704'.
[  206.752814][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'.
[  206.785149][ T8571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.290239][ T8571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.422869][ T8571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.487027][ T8571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.606159][ T8571] bridge_slave_1: left allmulticast mode
[  208.608114][ T8571] bridge_slave_1: left promiscuous mode
[  208.610000][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.622923][ T8571] bridge_slave_0: left allmulticast mode
[  208.625248][ T8571] bridge_slave_0: left promiscuous mode
[  208.627376][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.753961][T11579] xt_TCPMSS: Only works on TCP SYN packets
[  208.965630][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  208.981202][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  208.985121][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  208.988440][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.991666][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  209.123368][ T8571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.130120][ T8571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.136751][ T8571] bond0 (unregistering): Released all slaves
[  209.339693][T11598] netlink: 'syz.2.1709': attribute type 1 has an invalid length.
[  209.351159][T11598] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1709'.
[  209.455470][T11599] xt_CT: No such helper "snmp"
[  209.662049][T11585] chnl_net:caif_netlink_parms(): no params data found
[  209.724446][ T8571] hsr_slave_0: left promiscuous mode
[  209.728992][ T8571] hsr_slave_1: left promiscuous mode
[  209.753086][ T8571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.756324][ T8571] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.772100][ T8571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.775197][ T8571] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.804895][T11615] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1714'.
[  209.828243][ T8571] veth1_macvtap: left promiscuous mode
[  209.841419][ T8571] veth0_macvtap: left promiscuous mode
[  209.843806][ T8571] veth1_vlan: left promiscuous mode
[  209.845977][ T8571] veth0_vlan: left promiscuous mode
[  209.854372][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1715'.
[  210.258020][ T8571] team0 (unregistering): Port device team_slave_1 removed
[  210.289071][ T8571] team0 (unregistering): Port device team_slave_0 removed
[  210.683994][T11585] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.686541][T11585] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.689330][T11585] bridge_slave_0: entered allmulticast mode
[  210.695125][T11585] bridge_slave_0: entered promiscuous mode
[  210.705377][T11585] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.711369][T11585] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.715725][T11585] bridge_slave_1: entered allmulticast mode
[  210.719740][T11585] bridge_slave_1: entered promiscuous mode
[  210.846295][T11585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.861155][T11585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.920280][T11585] team0: Port device team_slave_0 added
[  210.944610][T11585] team0: Port device team_slave_1 added
[  210.964030][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'.
[  210.996299][T11585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.998846][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.017737][T11585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.038169][T11585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.040645][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.060136][T11585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.071868][ T5220] Bluetooth: hci2: command tx timeout
[  211.103016][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1724'.
[  211.128305][T11585] hsr_slave_0: entered promiscuous mode
[  211.145577][T11585] hsr_slave_1: entered promiscuous mode
[  211.191192][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  211.287640][T11655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.297862][T11655] syzkaller0: entered promiscuous mode
[  211.299630][T11655] syzkaller0: entered allmulticast mode
[  211.329128][T11656] tipc: Resetting bearer <eth:syzkaller0>
[  211.343410][T11651] tipc: Resetting bearer <eth:syzkaller0>
[  211.362420][T11651] tipc: Disabling bearer <eth:syzkaller0>
[  211.367728][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'.
[  211.603505][T11671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1731'.
[  211.636482][T11585] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  211.654564][T11585] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  211.668152][T11585] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  211.674576][T11585] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  211.683022][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1732'.
[  211.756663][T11585] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.778036][T11585] 8021q: adding VLAN 0 to HW filter on device team0
[  211.812338][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.814660][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.817902][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.820193][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.965416][T11585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.002110][T11585] veth0_vlan: entered promiscuous mode
[  212.015070][T11585] veth1_vlan: entered promiscuous mode
[  212.048871][T11585] veth0_macvtap: entered promiscuous mode
[  212.055402][T11585] veth1_macvtap: entered promiscuous mode
[  212.067652][T11585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.079212][T11585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.096043][T11585] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.099287][T11585] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.123162][T11585] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.127176][T11585] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.147589][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'.
[  212.153910][T11696] sctp: [Deprecated]: syz.2.1736 (pid 11696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.153910][T11696] Use struct sctp_sack_info instead
[  212.223286][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.226986][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.272643][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.275912][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.304922][T11767] bridge_slave_1: left allmulticast mode
[  213.307118][T11767] bridge_slave_1: left promiscuous mode
[  213.309944][T11767] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.341589][T11767] bond0: (slave bond_slave_0): Releasing backup interface
[  213.347835][T11767] bond_slave_0: left promiscuous mode
[  213.362946][T11767] bond0: (slave bond_slave_1): Releasing backup interface
[  213.371667][T11767] bond_slave_1: left promiscuous mode
[  213.382354][T11767] team0: Port device team_slave_0 removed
[  213.401110][T11767] team0: Port device team_slave_1 removed
[  213.403178][T11767] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.406086][T11767] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.469860][T11767] team0: Mode changed to "broadcast"
[  213.579849][T11781] netlink: 'syz.0.1763': attribute type 39 has an invalid length.
[  213.674917][T11790] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  213.955514][T11808] netlink: 'syz.0.1771': attribute type 21 has an invalid length.
[  213.958689][T11808] netlink: 'syz.0.1771': attribute type 21 has an invalid length.
[  213.984765][T11811] openvswitch: netlink: EtherType 10 is less than min 600
[  214.255180][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.702038][ T5220] Bluetooth: hci0: command tx timeout
[  216.014541][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.094350][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.229271][T11835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.273864][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.510023][T11845] __nla_validate_parse: 10 callbacks suppressed
[  216.510040][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'.
[  216.547006][   T13] bridge_slave_1: left allmulticast mode
[  216.549420][   T13] bridge_slave_1: left promiscuous mode
[  216.571535][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.599672][   T13] bridge_slave_0: left allmulticast mode
[  216.604868][   T13] bridge_slave_0: left promiscuous mode
[  216.608593][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.612851][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.617684][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.624385][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  216.630524][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  216.634450][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.962292][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.968855][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.974841][   T13] bond0 (unregistering): Released all slaves
[  217.355340][T11873] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  217.370020][T11852] chnl_net:caif_netlink_parms(): no params data found
[  217.468074][   T13] hsr_slave_0: left promiscuous mode
[  217.476488][   T13] hsr_slave_1: left promiscuous mode
[  217.492099][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.495210][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.499063][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.502968][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.522986][   T13] veth1_macvtap: left promiscuous mode
[  217.526683][   T13] veth0_macvtap: left promiscuous mode
[  217.529734][   T13] veth1_vlan: left promiscuous mode
[  217.532642][   T13] veth0_vlan: left promiscuous mode
[  217.942388][   T13] team0 (unregistering): Port device team_slave_1 removed
[  217.973318][   T13] team0 (unregistering): Port device team_slave_0 removed
[  218.326938][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'.
[  218.438222][T11852] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.440711][T11852] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.446477][T11852] bridge_slave_0: entered allmulticast mode
[  218.449823][T11852] bridge_slave_0: entered promiscuous mode
[  218.457744][T11852] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.460501][T11852] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.463379][T11852] bridge_slave_1: entered allmulticast mode
[  218.466404][T11852] bridge_slave_1: entered promiscuous mode
[  218.525870][T11852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.533204][T11852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.627909][T11852] team0: Port device team_slave_0 added
[  218.653896][T11852] team0: Port device team_slave_1 added
[  218.665365][ T5220] Bluetooth: hci2: command tx timeout
[  218.729610][T11852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.733424][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.762016][T11852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.781563][T11905] batman_adv: batadv0: Adding interface: dummy0
[  218.783814][T11905] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.796259][T11905] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  218.802833][T11852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.805660][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.847035][T11852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.883521][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'.
[  218.958659][T11852] hsr_slave_0: entered promiscuous mode
[  218.961907][T11852] hsr_slave_1: entered promiscuous mode
[  218.985275][T11916] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  219.063586][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  219.076436][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  219.652410][T11852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  219.666919][T11852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  219.672419][T11852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  219.683202][T11852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  219.724257][T11949] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004
[  219.798250][T11852] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.833592][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'.
[  219.840664][T11962] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1808'.
[  219.858457][T11852] 8021q: adding VLAN 0 to HW filter on device team0
[  219.871700][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.874615][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.886031][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.888835][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.147807][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.216645][T11852] veth0_vlan: entered promiscuous mode
[  220.237408][T11852] veth1_vlan: entered promiscuous mode
[  220.273360][T11852] veth0_macvtap: entered promiscuous mode
[  220.288925][T11852] veth1_macvtap: entered promiscuous mode
[  220.322465][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.338526][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.349813][T11852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.358283][T11852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.368468][T11852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.372281][T11852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.488797][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.495344][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.550174][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.554786][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.768997][T11970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1810'.
[  220.844075][T11972] netlink: 'syz.0.1811': attribute type 2 has an invalid length.
[  220.849675][T11972] atomic_op ffff888104d6c198 conn xmit_atomic 0000000000000000
[  220.856462][T11972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.900134][T11974] SET target dimension over the limit!
[  220.963932][T11974] netlink: 'syz.0.1812': attribute type 39 has an invalid length.
[  221.185959][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'.
[  221.189784][T11979] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  221.193146][T11979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.354240][T11984] tipc: Resetting bearer <eth:syzkaller0>
[  222.045644][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.085805][T11980] tipc: Resetting bearer <eth:syzkaller0>
[  222.553238][  T712] tipc: Resetting bearer <eth:syzkaller0>
[  223.334464][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.554567][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.644704][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.811019][   T13] bridge_slave_1: left allmulticast mode
[  223.813434][   T13] bridge_slave_1: left promiscuous mode
[  223.816087][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.842483][   T13] bridge_slave_0: left allmulticast mode
[  223.844931][   T13] bridge_slave_0: left promiscuous mode
[  223.847457][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.177223][T11999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1819'.
[  224.502011][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  224.505656][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  224.508531][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  224.512263][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  224.514962][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  224.519406][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.531752][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.538805][   T13] bond0 (unregistering): Released all slaves
[  224.549265][T12020] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1822'.
[  224.780326][T12030] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1824'.
[  224.792818][T12030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1824'.
[  224.862900][T12017] chnl_net:caif_netlink_parms(): no params data found
[  224.907663][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'.
[  224.924517][T12038] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  224.927448][T12038] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  224.930209][T12038] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  224.942109][T12038] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  225.063108][T12052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1830'.
[  225.097240][T12054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1831'.
[  225.167271][   T13] hsr_slave_0: left promiscuous mode
[  225.170427][   T13] hsr_slave_1: left promiscuous mode
[  225.175331][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.178410][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.182865][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.185781][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.208000][   T13] veth1_macvtap: left promiscuous mode
[  225.210404][   T13] veth0_macvtap: left promiscuous mode
[  225.213915][   T13] veth1_vlan: left promiscuous mode
[  225.216248][   T13] veth0_vlan: left promiscuous mode
[  225.553295][T12067] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1833'.
[  225.778177][   T13] team0 (unregistering): Port device team_slave_1 removed
[  225.790671][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'.
[  225.794107][T12072] netlink: 'syz.0.1834': attribute type 5 has an invalid length.
[  225.815658][   T13] team0 (unregistering): Port device team_slave_0 removed
[  226.275586][T12017] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.278138][T12017] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.292380][T12017] bridge_slave_0: entered allmulticast mode
[  226.295117][T12017] bridge_slave_0: entered promiscuous mode
[  226.303685][T12017] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.309719][T12017] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.312752][T12017] bridge_slave_1: entered allmulticast mode
[  226.322952][T12017] bridge_slave_1: entered promiscuous mode
[  226.388405][T12077] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  226.396964][T12077] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  226.399871][T12077] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  226.411178][T12077] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  226.421531][T12077] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.425224][T12077] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.428785][T12077] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.428987][T12091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1838'.
[  226.443629][T12077] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.446753][T12077] geneve3: entered promiscuous mode
[  226.448555][T12077] geneve3: entered allmulticast mode
[  226.456507][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.462039][T12091] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  226.482736][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.547966][T12017] team0: Port device team_slave_0 added
[  226.552982][T12017] team0: Port device team_slave_1 added
[  226.586915][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.589126][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.601887][ T5838] Bluetooth: hci2: command tx timeout
[  226.611397][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.621883][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.624288][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.651050][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.736747][T12017] hsr_slave_0: entered promiscuous mode
[  226.739701][T12017] hsr_slave_1: entered promiscuous mode
[  227.278202][T12017] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  227.286886][T12017] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  227.300705][T12017] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  227.306394][T12017] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  227.483378][T12017] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.502766][T12017] 8021q: adding VLAN 0 to HW filter on device team0
[  227.507495][T12121] sctp: [Deprecated]: syz.2.1845 (pid 12121) Use of struct sctp_assoc_value in delayed_ack socket option.
[  227.507495][T12121] Use struct sctp_sack_info instead
[  227.523259][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.526091][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.552335][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.554746][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.728023][T12017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.737169][T12131] xt_hashlimit: size too large, truncated to 1048576
[  227.820552][T12017] veth0_vlan: entered promiscuous mode
[  227.839050][T12017] veth1_vlan: entered promiscuous mode
[  227.896328][T12017] veth0_macvtap: entered promiscuous mode
[  227.904913][T12017] veth1_macvtap: entered promiscuous mode
[  227.966241][T12017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.984567][T12017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.996298][T12017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.000005][T12017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.004118][T12017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.007652][T12017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.097966][  T712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.108320][  T712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.144746][  T712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.148031][  T712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.534845][T12154] "syz.2.1856" (12154) uses obsolete ecb(arc4) skcipher
[  229.446044][T12172] No such timeout policy "syz1"
[  229.514470][T12177] __nla_validate_parse: 5 callbacks suppressed
[  229.514485][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'.
[  229.612308][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'.
[  229.766148][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.202736][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.275335][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.346719][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.453198][ T5875] bridge_slave_1: left allmulticast mode
[  231.455697][ T5875] bridge_slave_1: left promiscuous mode
[  231.458247][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.466695][ T5875] bridge_slave_0: left allmulticast mode
[  231.469117][ T5875] bridge_slave_0: left promiscuous mode
[  231.472530][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.865449][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.871734][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.915236][ T5875] bond0 (unregistering): Released all slaves
[  231.927017][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'.
[  231.931805][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1864'.
[  232.061158][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  232.070041][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  232.081159][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  232.096802][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  232.101998][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  232.130502][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1866'.
[  232.155491][T12192] openvswitch: netlink: Message has 20 unknown bytes.
[  232.167913][T12192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.183536][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'.
[  232.287219][ T5875] hsr_slave_0: left promiscuous mode
[  232.292829][ T5875] hsr_slave_1: left promiscuous mode
[  232.296193][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.299900][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.303364][T12198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1869'.
[  232.305395][T12196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'.
[  232.311970][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.315369][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.331794][ T5875] veth1_macvtap: left promiscuous mode
[  232.334284][ T5875] veth0_macvtap: left promiscuous mode
[  232.336764][ T5875] veth1_vlan: left promiscuous mode
[  232.339081][ T5875] veth0_vlan: left promiscuous mode
[  232.359775][T12199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'.
[  232.372250][T12200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1869'.
[  232.791495][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  232.833120][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  233.407868][T12188] chnl_net:caif_netlink_parms(): no params data found
[  233.662439][T12188] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.665534][T12188] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.668526][T12188] bridge_slave_0: entered allmulticast mode
[  233.677235][T12188] bridge_slave_0: entered promiscuous mode
[  233.687792][T12188] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.712494][T12188] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.725880][T12188] bridge_slave_1: entered allmulticast mode
[  233.742282][T12188] bridge_slave_1: entered promiscuous mode
[  233.767430][T12238] openvswitch: netlink: Flow key attr not present in new flow.
[  233.812100][T12188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.825519][T12188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.898356][T12188] team0: Port device team_slave_0 added
[  233.974738][T12188] team0: Port device team_slave_1 added
[  234.053592][T12188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.056242][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.078422][T12188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.128810][T12188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.131466][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.140634][T12188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.191806][ T5838] Bluetooth: hci2: command tx timeout
[  234.288236][T12188] hsr_slave_0: entered promiscuous mode
[  234.295129][T12188] hsr_slave_1: entered promiscuous mode
[  234.374794][T12257] bridge3: entered promiscuous mode
[  234.376696][T12257] bridge3: entered allmulticast mode
[  234.952996][T12264] __nla_validate_parse: 7 callbacks suppressed
[  234.953011][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1886'.
[  234.959498][T12188] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  234.959963][T12263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1886'.
[  234.973383][T12188] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  234.981910][T12188] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  234.992330][T12188] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  235.104528][T12188] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.132108][T12188] 8021q: adding VLAN 0 to HW filter on device team0
[  235.142478][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.145176][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.157328][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.160043][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.372447][T12188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.411477][T12188] veth0_vlan: entered promiscuous mode
[  235.417451][T12188] veth1_vlan: entered promiscuous mode
[  235.436778][T12188] veth0_macvtap: entered promiscuous mode
[  235.443188][T12188] veth1_macvtap: entered promiscuous mode
[  235.459811][T12188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.468466][T12188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.485099][T12188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.500459][T12188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.500531][T12280] xt_CT: No such helper "syz0"
[  235.504097][T12188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.508704][T12188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.597526][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.600820][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.624349][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.627394][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.922175][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'.
[  236.150566][T12320] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1901'.
[  236.201733][ T5875] 
[  236.202821][ T5875] ======================================================
[  236.205698][ T5875] WARNING: possible circular locking dependency detected
[  236.208485][ T5875] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  236.212528][ T5875] ------------------------------------------------------
[  236.215514][ T5875] kworker/u8:4/5875 is trying to acquire lock:
[  236.218143][ T5875] ffff8880227b2f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[  236.222098][ T5875] 
[  236.222098][ T5875] but task is already holding lock:
[  236.225256][ T5875] ffff88802a309d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  236.229235][ T5875] 
[  236.229235][ T5875] which lock already depends on the new lock.
[  236.229235][ T5875] 
[  236.233444][ T5875] 
[  236.233444][ T5875] the existing dependency chain (in reverse order) is:
[  236.237074][ T5875] 
[  236.237074][ T5875] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}:
[  236.240554][ T5875]        lock_acquire+0x120/0x360
[  236.242647][ T5875]        _raw_spin_lock+0x2e/0x40
[  236.244840][ T5875]        sch_direct_xmit+0x153/0x4b0
[  236.246918][ T5875]        __dev_queue_xmit+0x17b6/0x3a70
[  236.249192][ T5875]        hsr_forward_skb+0x158b/0x2860
[  236.251547][ T5875]        hsr_dev_xmit+0x1a5/0x220
[  236.253720][ T5875]        dev_hard_start_xmit+0x2d7/0x830
[  236.256152][ T5875]        __dev_queue_xmit+0x1adf/0x3a70
[  236.258479][ T5875]        ip6_finish_output2+0x11fe/0x16a0
[  236.260905][ T5875]        ip6_finish_output+0x234/0x7d0
[  236.263320][ T5875]        NF_HOOK+0x9e/0x380
[  236.265233][ T5875]        mld_sendpack+0x800/0xd80
[  236.267398][ T5875]        mld_ifc_work+0x835/0xde0
[  236.269469][ T5875]        process_scheduled_works+0xae1/0x17b0
[  236.272115][ T5875]        worker_thread+0x8a0/0xda0
[  236.274337][ T5875]        kthread+0x711/0x8a0
[  236.276355][ T5875]        ret_from_fork+0x3fc/0x770
[  236.278544][ T5875]        ret_from_fork_asm+0x1a/0x30
[  236.280814][ T5875] 
[  236.280814][ T5875] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}:
[  236.284147][ T5875]        validate_chain+0xb9b/0x2140
[  236.286411][ T5875]        __lock_acquire+0xab9/0xd20
[  236.288638][ T5875]        lock_acquire+0x120/0x360
[  236.290831][ T5875]        _raw_spin_lock_bh+0x36/0x50
[  236.293049][ T5875]        hsr_dev_xmit+0x19a/0x220
[  236.295045][ T5875]        dev_hard_start_xmit+0x2d7/0x830
[  236.297251][ T5875]        __dev_queue_xmit+0x1adf/0x3a70
[  236.299463][ T5875]        NF_HOOK+0x310/0x3a0
[  236.301333][ T5875]        arp_xmit+0x16c/0x270
[  236.303360][ T5875]        arp_solicit+0xc1d/0xe60
[  236.306298][ T5875]        __neigh_event_send+0xf70/0x1560
[  236.309631][ T5875]        neigh_resolve_output+0x198/0x750
[  236.312889][ T5875]        ip_finish_output2+0xd40/0x1160
[  236.315758][ T5875]        iptunnel_xmit+0x571/0xa00
[  236.318821][ T5875]        ip_tunnel_xmit+0x1c3c/0x2380
[  236.321551][ T5875]        gre_tap_xmit+0x590/0x7a0
[  236.323621][ T5875]        dev_hard_start_xmit+0x2d7/0x830
[  236.325790][ T5875]        sch_direct_xmit+0x241/0x4b0
[  236.327920][ T5875]        __dev_queue_xmit+0x17b6/0x3a70
[  236.330098][ T5875]        alb_send_lp_vid+0x324/0x510
[  236.332281][ T5875]        alb_send_learning_packets+0x10d/0x2c0
[  236.334897][ T5875]        bond_alb_monitor+0x3e4/0x1800
[  236.337282][ T5875]        process_scheduled_works+0xae1/0x17b0
[  236.339945][ T5875]        worker_thread+0x8a0/0xda0
[  236.342036][ T5875]        kthread+0x711/0x8a0
[  236.344082][ T5875]        ret_from_fork+0x3fc/0x770
[  236.346314][ T5875]        ret_from_fork_asm+0x1a/0x30
[  236.348629][ T5875] 
[  236.348629][ T5875] other info that might help us debug this:
[  236.348629][ T5875] 
[  236.353021][ T5875]  Possible unsafe locking scenario:
[  236.353021][ T5875] 
[  236.356243][ T5875]        CPU0                    CPU1
[  236.358544][ T5875]        ----                    ----
[  236.360831][ T5875]   lock(&qdisc_xmit_lock_key#4);
[  236.363000][ T5875]                                lock(&hsr->seqnr_lock);
[  236.366036][ T5875]                                lock(&qdisc_xmit_lock_key#4);
[  236.369276][ T5875]   lock(&hsr->seqnr_lock);
[  236.371246][ T5875] 
[  236.371246][ T5875]  *** DEADLOCK ***
[  236.371246][ T5875] 
[  236.374640][ T5875] 9 locks held by kworker/u8:4/5875:
[  236.376925][ T5875]  #0: ffff88810ede2948 ((wq_completion)bond4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  236.381558][ T5875]  #1: ffffc9000340fbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  236.387037][ T5875]  #2: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800
[  236.390958][ T5875]  #3: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  236.395099][ T5875]  #4: ffff8880005ad258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  236.400381][ T5875]  #5: ffff88802a309d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  236.404695][ T5875]  #6: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  236.408813][ T5875]  #7: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  236.412576][ T5875]  #8: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  236.416689][ T5875] 
[  236.416689][ T5875] stack backtrace:
[  236.419130][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  236.419146][ T5875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.419156][ T5875] Workqueue: bond4 bond_alb_monitor
[  236.419174][ T5875] Call Trace:
[  236.419181][ T5875]  <TASK>
[  236.419187][ T5875]  dump_stack_lvl+0x189/0x250
[  236.419203][ T5875]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.419216][ T5875]  ? __pfx__printk+0x10/0x10
[  236.419232][ T5875]  ? print_lock_name+0xde/0x100
[  236.419248][ T5875]  print_circular_bug+0x2ee/0x310
[  236.419264][ T5875]  check_noncircular+0x134/0x160
[  236.419280][ T5875]  validate_chain+0xb9b/0x2140
[  236.419294][ T5875]  ? unwind_next_frame+0xa5/0x2390
[  236.419308][ T5875]  ? unwind_next_frame+0xa5/0x2390
[  236.419321][ T5875]  ? unwind_next_frame+0xa5/0x2390
[  236.419335][ T5875]  __lock_acquire+0xab9/0xd20
[  236.419349][ T5875]  ? hsr_dev_xmit+0x19a/0x220
[  236.419363][ T5875]  lock_acquire+0x120/0x360
[  236.419374][ T5875]  ? hsr_dev_xmit+0x19a/0x220
[  236.419388][ T5875]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  236.419405][ T5875]  ? hsr_dev_xmit+0x19a/0x220
[  236.419418][ T5875]  _raw_spin_lock_bh+0x36/0x50
[  236.419433][ T5875]  ? hsr_dev_xmit+0x19a/0x220
[  236.419447][ T5875]  hsr_dev_xmit+0x19a/0x220
[  236.419462][ T5875]  dev_hard_start_xmit+0x2d7/0x830
[  236.419482][ T5875]  __dev_queue_xmit+0x1adf/0x3a70
[  236.419498][ T5875]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.419511][ T5875]  ? __dev_queue_xmit+0x27e/0x3a70
[  236.419528][ T5875]  ? arpt_do_table+0x1dc4/0x1fd0
[  236.419547][ T5875]  ? __pfx___dev_queue_xmit+0x10/0x10
[  236.419583][ T5875]  ? arpt_do_table+0x238/0x1fd0
[  236.419597][ T5875]  ? __pfx_arpt_do_table+0x10/0x10
[  236.419616][ T5875]  ? NF_HOOK+0x9e/0x3a0
[  236.419628][ T5875]  NF_HOOK+0x310/0x3a0
[  236.419637][ T5875]  ? __pfx_arp_xmit_finish+0x10/0x10
[  236.419648][ T5875]  ? NF_HOOK+0x9e/0x3a0
[  236.419658][ T5875]  ? __pfx_NF_HOOK+0x10/0x10
[  236.419668][ T5875]  ? __pfx_arp_xmit_finish+0x10/0x10
[  236.419680][ T5875]  arp_xmit+0x16c/0x270
[  236.419689][ T5875]  ? arp_xmit+0x23/0x270
[  236.419698][ T5875]  arp_solicit+0xc1d/0xe60
[  236.419710][ T5875]  ? arp_solicit+0x11a/0xe60
[  236.419720][ T5875]  ? __pfx_arp_solicit+0x10/0x10
[  236.419733][ T5875]  ? __neigh_event_send+0xf08/0x1560
[  236.419745][ T5875]  ? __pfx_arp_solicit+0x10/0x10
[  236.419755][ T5875]  __neigh_event_send+0xf70/0x1560
[  236.419770][ T5875]  neigh_resolve_output+0x198/0x750
[  236.419782][ T5875]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  236.419795][ T5875]  ip_finish_output2+0xd40/0x1160
[  236.419806][ T5875]  ? ip_skb_dst_mtu+0x147/0xc50
[  236.419824][ T5875]  ? ip_finish_output2+0x452/0x1160
[  236.419834][ T5875]  ? __pfx_ip_finish_output2+0x10/0x10
[  236.419844][ T5875]  ? ip_skb_dst_mtu+0x147/0xc50
[  236.419887][ T5875]  ? ip_skb_dst_mtu+0x147/0xc50
[  236.419906][ T5875]  ? ip_skb_dst_mtu+0x970/0xc50
[  236.419922][ T5875]  ? __ip_finish_output+0x336/0x3f0
[  236.419933][ T5875]  iptunnel_xmit+0x571/0xa00
[  236.419956][ T5875]  ip_tunnel_xmit+0x1c3c/0x2380
[  236.419974][ T5875]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  236.419984][ T5875]  ? gre_build_header+0x3fd/0xa40
[  236.420003][ T5875]  ? __pfx_gre_build_header+0x10/0x10
[  236.420019][ T5875]  ? iptunnel_handle_offloads+0x2fd/0x630
[  236.420035][ T5875]  gre_tap_xmit+0x590/0x7a0
[  236.420051][ T5875]  ? __pfx_gre_tap_xmit+0x10/0x10
[  236.420065][ T5875]  ? __lock_acquire+0xab9/0xd20
[  236.420079][ T5875]  dev_hard_start_xmit+0x2d7/0x830
[  236.420099][ T5875]  sch_direct_xmit+0x241/0x4b0
[  236.420114][ T5875]  ? __pfx_sch_direct_xmit+0x10/0x10
[  236.420129][ T5875]  __dev_queue_xmit+0x17b6/0x3a70
[  236.420148][ T5875]  ? __dev_queue_xmit+0x27e/0x3a70
[  236.420167][ T5875]  ? __pfx___dev_queue_xmit+0x10/0x10
[  236.420182][ T5875]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  236.420195][ T5875]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  236.420210][ T5875]  ? __build_skb_around+0x257/0x3e0
[  236.420229][ T5875]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  236.420244][ T5875]  ? alb_send_lp_vid+0x139/0x510
[  236.420257][ T5875]  alb_send_lp_vid+0x324/0x510
[  236.420270][ T5875]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  236.420286][ T5875]  alb_send_learning_packets+0x10d/0x2c0
[  236.420303][ T5875]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  236.420321][ T5875]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  236.420357][ T5875]  bond_alb_monitor+0x3e4/0x1800
[  236.420377][ T5875]  ? bond_alb_monitor+0xf1/0x1800
[  236.420393][ T5875]  ? process_scheduled_works+0x9ef/0x17b0
[  236.420406][ T5875]  ? __pfx_bond_alb_monitor+0x10/0x10
[  236.420422][ T5875]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.420438][ T5875]  ? process_scheduled_works+0x9ef/0x17b0
[  236.420449][ T5875]  ? process_scheduled_works+0x9ef/0x17b0
[  236.420462][ T5875]  process_scheduled_works+0xae1/0x17b0
[  236.420482][ T5875]  ? __pfx_process_scheduled_works+0x10/0x10
[  236.420499][ T5875]  worker_thread+0x8a0/0xda0
[  236.420513][ T5875]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.420532][ T5875]  ? __kthread_parkme+0x7b/0x200
[  236.420548][ T5875]  kthread+0x711/0x8a0
[  236.420564][ T5875]  ? __pfx_worker_thread+0x10/0x10
[  236.420577][ T5875]  ? __pfx_kthread+0x10/0x10
[  236.420592][ T5875]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.420607][ T5875]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.420616][ T5875]  ? __pfx_kthread+0x10/0x10
[  236.420631][ T5875]  ret_from_fork+0x3fc/0x770
[  236.420644][ T5875]  ? __pfx_ret_from_fork+0x10/0x10
[  236.420658][ T5875]  ? __switch_to_asm+0x39/0x70
[  236.420672][ T5875]  ? __switch_to_asm+0x33/0x70
[  236.420685][ T5875]  ? __pfx_kthread+0x10/0x10
[  236.420700][ T5875]  ret_from_fork_asm+0x1a/0x30
[  236.420719][ T5875]  </TASK>
[  236.648513][T12327] openvswitch: netlink: Missing key (keys=40, expected=80)
[  236.651400][T12327] netlink: 'syz.0.1904': attribute type 4 has an invalid length.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  238.009355][T11370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.634498][T11370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.685727][T11370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.755171][T11370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.827871][T11370] bridge_slave_1: left allmulticast mode
[  239.829792][T11370] bridge_slave_1: left promiscuous mode
[  239.832687][T11370] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.838950][T11370] bridge_slave_0: left allmulticast mode
[  239.842445][T11370] bridge_slave_0: left promiscuous mode
[  239.844963][T11370] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.931672][T11370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.936709][T11370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.941397][T11370] bond0 (unregistering): Released all slaves
[  240.156710][T11370] hsr_slave_0: left promiscuous mode
[  240.159650][T11370] hsr_slave_1: left promiscuous mode
[  240.162458][T11370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.165707][T11370] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.169355][T11370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.172763][T11370] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.178921][T11370] veth1_macvtap: left promiscuous mode
[  240.182904][T11370] veth0_macvtap: left promiscuous mode
[  240.185318][T11370] veth1_vlan: left promiscuous mode
[  240.187619][T11370] veth0_vlan: left promiscuous mode
[  240.292341][T11370] team0 (unregistering): Port device team_slave_1 removed
[  240.313779][T11370] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
15:28:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000340dbb0
R8 =ffff888106d10237 R9 =1ffff11020da2046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78fa R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd04d86520 CR3=000000012f964000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00005555720727e0 00005555720727e0 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbd04c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4e920 RBX=ffff88813663b1c0 RCX=ffff888106019cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000434f800 RSP=ffffc9000434f6a0
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa38061bfc8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fa3804ed100 00007fa37f985440 XMM05=00007fa37f985458 00007fa37f9854a0
XMM06=00007fa37f985498 00007fa37f985490 XMM07=00007fa37f985488 00007fa37f985480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa37f811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
