last executing test programs:

29.620411684s ago: executing program 1 (id=3674):
r0 = socket$netlink(0x10, 0x3, 0x2)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="050003"], 0x28}}, 0x80)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000080)=""/122, &(0x7f0000000100)=0x7a)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

29.473524458s ago: executing program 1 (id=3675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="010026bd7400000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000003b05330000a810000802110000010802110000005050505050509c00c000c081202f02000000010582898004962d1a8000"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c0c0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000b000000050000000200000000000000", @ANYRES32, @ANYBLOB="0000001b430b440f68368a525957e6c723739ca2bce8106bdd730000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)="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", &(0x7f0000001640), 0xb3, r8}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c000180280001004ac2ffef"], 0x6c}}, 0xc800)

25.319073863s ago: executing program 1 (id=3675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="010026bd7400000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000003b05330000a810000802110000010802110000005050505050509c00c000c081202f02000000010582898004962d1a8000"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c0c0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000b000000050000000200000000000000", @ANYRES32, @ANYBLOB="0000001b430b440f68368a525957e6c723739ca2bce8106bdd730000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)="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", &(0x7f0000001640), 0xb3, r8}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c000180280001004ac2ffef"], 0x6c}}, 0xc800)

19.158893734s ago: executing program 1 (id=3675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="010026bd7400000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000003b05330000a810000802110000010802110000005050505050509c00c000c081202f02000000010582898004962d1a8000"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c0c0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000b000000050000000200000000000000", @ANYRES32, @ANYBLOB="0000001b430b440f68368a525957e6c723739ca2bce8106bdd730000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)="f32de553d3951bc875ac6bb9d763f72e17d4bbf173f474d276bff607365c577407f18833f4c63a8cdc561c715b068ce142968dc579267df3bc1fc573f19fa8ca2ca300d5f49161001070366b9debd8c1a8241f7febad75136e268f862dcece6d561191b2808d73033c0a709509c718a315151e05bbbbb031c74e050000009176004cd880dc5a82ee65eafdca8ca0e5d6159a837a1dde93e9a09b6f860c735543e5d1e91dfc0000000000070000fa063ce558b89c63f1869f45d08b9dce77f51f5519601668a69578aa2e7849009c189f7339cce1cead5da4f4193671622d8b0dce70558aef7c6a4da074c9e907840df5ffd1ea1883516f08233aa3ec039296a004b888a92c87d1473b11254dc22a8e1b020015c355de0c30bb91a3968855d1cc2da978317461d6902385c82c761d345580544c9e10ec60c86f0181a4fa760ddb", &(0x7f0000001640), 0xb3, r8}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c000180280001004ac2ffef"], 0x6c}}, 0xc800)

16.609410136s ago: executing program 0 (id=3836):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@random="ff1939698af5", 0x6, 0x0) (async, rerun: 64)
r2 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010}) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2010})
socket$alg(0x26, 0x5, 0x0)

16.529417701s ago: executing program 0 (id=3838):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02000000020000", @ANYRES64=0x0], 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b000100677265746170000054000280050008005a000000080007000a01010008000100", @ANYBLOB="080014"], 0xc0}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b000100677265746170000054000280050008005a000000080007000a01010008000100", @ANYBLOB="080014"], 0xc0}}, 0x0)

15.520460983s ago: executing program 0 (id=3841):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700))
socket(0x2b, 0x80801, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {0x0, 0xc}, {0x3, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x200400d4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x1, 0x0)
vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x100000000000000, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000000}, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4ea1, @private=0xa010101}, 0x10)
getsockname$qrtr(r7, 0x0, &(0x7f0000000280))
write(r4, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r9 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@remote, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0x81, 0x4053e5, 0x9}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x3c}, 0x2, @in=@multicast1, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000002c0000000b0a05000000000000000000070000000900010073797a30000000000c001040000000000000000114000000100001000c000000000000000084000a"], 0x74}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x13, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000d0ff000000000000ffffffff18000000", @ANYRES32, @ANYBLOB="0000000000000010660800000000000018300200000000000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xda, &(0x7f0000000340)=""/218, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa0000000000007110110e000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

15.409919839s ago: executing program 0 (id=3843):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000001d40)={0x1d, r3, 0x3, {0x2, 0x0, 0x4}, 0x1}, 0x18)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r7, 0x0, 0x0)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x24000085}, 0x4000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})

12.618772691s ago: executing program 1 (id=3675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="010026bd7400000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000003b05330000a810000802110000010802110000005050505050509c00c000c081202f02000000010582898004962d1a8000"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c0c0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000b000000050000000200000000000000", @ANYRES32, @ANYBLOB="0000001b430b440f68368a525957e6c723739ca2bce8106bdd730000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)="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", &(0x7f0000001640), 0xb3, r8}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c000180280001004ac2ffef"], 0x6c}}, 0xc800)

11.334817984s ago: executing program 0 (id=3843):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000001d40)={0x1d, r3, 0x3, {0x2, 0x0, 0x4}, 0x1}, 0x18)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r7, 0x0, 0x0)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x24000085}, 0x4000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})

4.819726681s ago: executing program 0 (id=3843):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000001d40)={0x1d, r3, 0x3, {0x2, 0x0, 0x4}, 0x1}, 0x18)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r7, 0x0, 0x0)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x24000085}, 0x4000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})

4.614222985s ago: executing program 1 (id=3675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="010026bd7400000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000003b05330000a810000802110000010802110000005050505050509c00c000c081202f02000000010582898004962d1a8000"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c0c0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000b000000050000000200000000000000", @ANYRES32, @ANYBLOB="0000001b430b440f68368a525957e6c723739ca2bce8106bdd730000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)="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", &(0x7f0000001640), 0xb3, r8}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c000180280001004ac2ffef"], 0x6c}}, 0xc800)

250.335445ms ago: executing program 2 (id=3932):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="14000000000000fc010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

245.252458ms ago: executing program 2 (id=3933):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1, 0x0, 0x600}}], 0x2, 0x20000004)
socket(0x10, 0x803, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x20}}], 0x2, 0x8050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

191.200423ms ago: executing program 2 (id=3934):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051)

120.790215ms ago: executing program 2 (id=3935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2000, @none, 0x2}, 0xe)
listen(r1, 0x1)
close(0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)

61.116942ms ago: executing program 2 (id=3936):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000005000000000000000000000950004e00000000018010000202070250000000000202020db1af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x2)
socket(0x1, 0x803, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000200)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)

0s ago: executing program 2 (id=3937):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054)
socket$netlink(0x10, 0x3, 0x8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

kernel console output (not intermixed with test programs):

 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  205.772896][T11723] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  205.777263][T11723] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  205.788426][T11723] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  205.791047][T11723] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  205.802319][T11723] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  205.805242][T11723] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  206.053994][T11752] netlink: 'syz.2.1914': attribute type 10 has an invalid length.
[  206.054322][T11753] netlink: 'syz.2.1914': attribute type 10 has an invalid length.
[  206.061145][T11752] sctp: [Deprecated]: syz.2.1914 (pid 11752) Use of int in max_burst socket option deprecated.
[  206.061145][T11752] Use struct sctp_assoc_value instead
[  207.200576][T11780] __nla_validate_parse: 23 callbacks suppressed
[  207.200594][T11780] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1923'.
[  207.281006][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'.
[  207.531625][T11794] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1930'.
[  207.868251][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.921052][T11813] macsec1: entered allmulticast mode
[  207.923354][T11813] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  207.928713][T11813] batman_adv: batadv0: Adding interface: macsec1
[  207.931219][T11813] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  207.941916][T11813] batman_adv: batadv0: Interface activated: macsec1
[  208.118453][T11822] netlink: 'syz.2.1939': attribute type 1 has an invalid length.
[  208.213902][T11831] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1942'.
[  208.217951][T11831] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1942'.
[  208.221456][T11831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1942'.
[  208.245633][T11829] netlink: 'syz.2.1943': attribute type 64 has an invalid length.
[  208.283849][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'.
[  208.370576][T11842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1946'.
[  208.374181][T11842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1946'.
[  208.380149][T11842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1946'.
[  208.768806][T11850] IPv6: addrconf: prefix option has invalid lifetime
[  208.893055][T11852] nbd: must specify a size in bytes for the device
[  209.528414][T11873] delete_channel: no stack
[  209.960784][T11891] netlink: 'syz.0.1968': attribute type 18 has an invalid length.
[  209.973016][T11892] netlink: 'syz.0.1968': attribute type 18 has an invalid length.
[  210.770456][T11829] Set syz1 is full, maxelem 65536 reached
[  211.445723][T11929] netlink: 'syz.1.1980': attribute type 41 has an invalid length.
[  211.709570][T11944] netlink: 'syz.1.1986': attribute type 64 has an invalid length.
[  212.170124][T11966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.280064][T11980] __nla_validate_parse: 47 callbacks suppressed
[  212.280082][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'.
[  212.307632][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'.
[  212.320894][T11980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2000'.
[  212.533598][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'.
[  212.538871][T11999] bridge0: port 1(veth0_to_bridge) entered blocking state
[  212.541740][T11999] bridge0: port 1(veth0_to_bridge) entered disabled state
[  212.544711][T11999] veth0_to_bridge: entered allmulticast mode
[  212.550899][T11999] veth0_to_bridge: entered promiscuous mode
[  212.684474][T12008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.708829][T12010] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  212.805980][T12016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2015'.
[  212.811656][T12016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2015'.
[  212.830902][T12017] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2015'.
[  212.881630][T12023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2017'.
[  213.024375][T12034] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2021'.
[  213.042628][T12035] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  213.144481][T12040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2023'.
[  213.310322][T12052] ip6gretap0: entered promiscuous mode
[  213.313118][T12052] macsec2: entered promiscuous mode
[  213.315368][T12052] macsec2: entered allmulticast mode
[  213.317463][T12052] ip6gretap0: entered allmulticast mode
[  213.419126][T12060] openvswitch: netlink: Flow key attr not present in new flow.
[  213.466763][T12063] veth0: entered promiscuous mode
[  213.679607][T12072] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.038192][T12053] veth0: left promiscuous mode
[  214.783134][T12142] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.844699][T12154] delete_channel: no stack
[  215.310286][T12188] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  215.322764][T12191] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  215.611070][T12203] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  215.653113][T12210] wg1: entered promiscuous mode
[  215.658544][T12210] wg1: entered allmulticast mode
[  215.673027][T12210] netlink: 'syz.1.2085': attribute type 3 has an invalid length.
[  216.005720][T12218] netlink: 'syz.0.2088': attribute type 64 has an invalid length.
[  217.084466][T12218] Set syz1 is full, maxelem 65536 reached
[  217.273089][T12287] netlink: 'syz.0.2108': attribute type 64 has an invalid length.
[  217.323598][T12295] xt_CT: You must specify a L4 protocol and not use inversions on it
[  217.544094][T12303] pimreg: entered allmulticast mode
[  217.551593][T12303] pimreg: left allmulticast mode
[  218.385863][T12326] __nla_validate_parse: 18 callbacks suppressed
[  218.385880][T12326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2120'.
[  218.404286][T12326] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  218.410254][T12326] tipc: New replicast peer: 255.255.255.255
[  218.414543][T12326] tipc: Enabled bearer <udp:syz2>, priority 10
[  218.421200][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'.
[  218.426755][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'.
[  218.430161][T12328] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2121'.
[  218.440939][T12328] vlan0: entered allmulticast mode
[  218.442935][T12328] veth1: entered allmulticast mode
[  219.154043][T12369] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2131'.
[  219.157909][T12369] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2131'.
[  219.161593][T12369] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2131'.
[  219.201433][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'.
[  219.341395][T12379] erspan0: left allmulticast mode
[  219.378033][T12379] dummy0: left promiscuous mode
[  219.380905][T12379] dummy0: left allmulticast mode
[  219.386337][T12379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.481681][T12381] netlink: 'syz.1.2135': attribute type 3 has an invalid length.
[  219.622423][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2138'.
[  219.664358][T12389] 8021q: VLANs not supported on gre0
[  219.702822][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2141'.
[  219.720333][T12397] netlink: 'syz.1.2142': attribute type 33 has an invalid length.
[  219.730348][T12397] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  219.884739][T12408] IPv6: sit2: Disabled Multicast RS
[  219.887269][T12408] sit2: entered allmulticast mode
[  220.010861][T12421] netlink: 'syz.2.2148': attribute type 2 has an invalid length.
[  220.056368][T12427] xt_TCPMSS: Only works on TCP SYN packets
[  220.077560][T12429] netlink: 'syz.2.2148': attribute type 1 has an invalid length.
[  220.129816][T12432] netlink: 'syz.1.2153': attribute type 3 has an invalid length.
[  220.355205][T12445] : entered promiscuous mode
[  221.059655][T12459] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  221.063177][T12459] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  221.353716][T12474] syz_tun: entered allmulticast mode
[  221.373052][T12474] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  221.620105][T12491] pim6reg1: entered promiscuous mode
[  221.622180][T12491] pim6reg1: entered allmulticast mode
[  222.327628][T12550] netlink: 'syz.2.2185': attribute type 29 has an invalid length.
[  222.962600][T12600] netlink: del zone limit has 4 unknown bytes
[  222.972360][T12600] netlink: del zone limit has 4 unknown bytes
[  222.976951][T12601] nbd: socks must be embedded in a SOCK_ITEM attr
[  222.981335][T12601] block nbd2: shutting down sockets
[  223.386112][T12646] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  223.456544][T12654] __nla_validate_parse: 27 callbacks suppressed
[  223.456559][T12654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2224'.
[  223.608459][T12672] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  223.650580][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'.
[  223.749987][T12686] netlink: 'syz.0.2236': attribute type 10 has an invalid length.
[  223.759450][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2236'.
[  223.763511][T12686] x_tables: duplicate underflow at hook 3
[  224.039467][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'.
[  224.049871][T12717] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  224.081044][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'.
[  224.091501][T12718] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  224.122386][T12718] 8021q: adding VLAN 0 to HW filter on device bond14
[  224.149247][T12718] bond14: (slave gretap1): making interface the new active one
[  224.153476][T12718] bond14: (slave gretap1): Enslaving as an active interface with an up link
[  224.160672][T12723] sctp: [Deprecated]: syz.2.2250 (pid 12723) Use of int in max_burst socket option deprecated.
[  224.160672][T12723] Use struct sctp_assoc_value instead
[  224.172814][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'.
[  224.246837][T12726] netlink: 'syz.2.2250': attribute type 1 has an invalid length.
[  224.338992][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2253'.
[  224.353998][T12735] bridge6: entered promiscuous mode
[  224.357373][T12735] bridge6: entered allmulticast mode
[  224.363896][T12735] team0: Port device bridge6 added
[  224.455429][T12743] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  224.515205][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2256'.
[  224.642174][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'.
[  224.644077][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'.
[  224.663936][T12757] veth0_to_bond: entered allmulticast mode
[  224.888295][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  225.037345][T12793] xfrm1: entered promiscuous mode
[  225.038959][T12793] xfrm1: entered allmulticast mode
[  225.143758][T12809] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  225.725466][T12849] netlink: 'syz.2.2288': attribute type 4 has an invalid length.
[  226.160135][T12870] netlink: 'syz.0.2295': attribute type 1 has an invalid length.
[  226.424375][T12885] netlink: 'syz.0.2301': attribute type 33 has an invalid length.
[  226.449395][T12886] veth0_to_team: entered promiscuous mode
[  226.451784][T12886] veth0_to_team: entered allmulticast mode
[  226.634617][T12898] veth6: entered allmulticast mode
[  226.919629][T12918] netlink: 'syz.1.2311': attribute type 1 has an invalid length.
[  226.943175][T12918] 8021q: adding VLAN 0 to HW filter on device bond15
[  227.311308][T12941] openvswitch: netlink: Flow key attribute not present in set flow.
[  227.857274][T12955] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  227.861128][T12955] gretap4: entered promiscuous mode
[  227.863086][T12955] gretap4: entered allmulticast mode
[  228.244583][T12994] netlink: 'syz.2.2343': attribute type 64 has an invalid length.
[  228.347714][T13002] netlink: 'syz.1.2345': attribute type 21 has an invalid length.
[  229.068412][T13022] __nla_validate_parse: 23 callbacks suppressed
[  229.068434][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'.
[  229.176160][T13026] netlink: 'syz.1.2357': attribute type 10 has an invalid length.
[  229.259446][T13030] bridge: RTM_NEWNEIGH with invalid ether address
[  229.398092][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2360'.
[  229.554203][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2364'.
[  229.562561][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2364'.
[  229.654055][T13047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2366'.
[  229.661487][T13047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2366'.
[  229.665727][T13047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2366'.
[  229.665810][T13045] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2365'.
[  229.687484][T13045] tipc: Cannot configure node identity twice
[  229.952474][T13063] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2374'.
[  229.957610][T13063] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2374'.
[  230.134624][T13076] netlink: 'syz.1.2379': attribute type 1 has an invalid length.
[  230.176151][T13077] veth7: entered promiscuous mode
[  230.233631][T13076] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  230.615744][T13096] netlink: 'syz.1.2386': attribute type 3 has an invalid length.
[  230.763367][T13099] netlink: 'syz.1.2387': attribute type 4 has an invalid length.
[  230.822964][T13105] ip6gre1: entered allmulticast mode
[  231.079228][T12994] Set syz1 is full, maxelem 65536 reached
[  231.249542][T13137] netlink: 'syz.2.2398': attribute type 16 has an invalid length.
[  231.252632][T13137] netlink: 'syz.2.2398': attribute type 17 has an invalid length.
[  231.359605][T13137] 8021q: adding VLAN 0 to HW filter on device team0
[  231.382340][T13137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.417959][T13147] netlink: 'syz.1.2404': attribute type 64 has an invalid length.
[  231.460689][T13152] wg1: entered promiscuous mode
[  231.462560][T13152] wg1: entered allmulticast mode
[  231.600739][T13159] netlink: 'syz.1.2408': attribute type 3 has an invalid length.
[  232.404723][T13194] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:0
[  232.972627][T13229] sctp: [Deprecated]: syz.1.2436 (pid 13229) Use of int in max_burst socket option deprecated.
[  232.972627][T13229] Use struct sctp_assoc_value instead
[  233.602183][T13258] validate_nla: 4 callbacks suppressed
[  233.602201][T13258] netlink: 'syz.1.2446': attribute type 8 has an invalid length.
[  233.611668][ T1117] block nbd1: Possible stuck request ffff8880226c8000: control (read@0,1024B). Runtime 60 seconds
[  233.617430][ T1117] block nbd1: Possible stuck request ffff8880226c8200: control (read@1024,1024B). Runtime 60 seconds
[  233.621570][ T1117] block nbd1: Possible stuck request ffff8880226c8400: control (read@2048,1024B). Runtime 60 seconds
[  233.626119][ T1117] block nbd1: Possible stuck request ffff8880226c8600: control (read@3072,1024B). Runtime 60 seconds
[  233.643115][T13258] netlink: 'syz.1.2446': attribute type 8 has an invalid length.
[  234.060265][T13294] netlink: 'syz.0.2460': attribute type 1 has an invalid length.
[  234.212984][T13311] __nla_validate_parse: 39 callbacks suppressed
[  234.212997][T13311] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2465'.
[  234.218073][T13311] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2465'.
[  234.220841][T13311] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2465'.
[  234.450338][T13333] netlink: 'syz.1.2472': attribute type 10 has an invalid length.
[  234.452828][T13333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2472'.
[  234.497447][T13333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2472'.
[  234.528718][T13333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2472'.
[  234.595227][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'.
[  234.744574][T13350] netlink: 'syz.0.2478': attribute type 64 has an invalid length.
[  234.796114][T13355] syzkaller0: entered allmulticast mode
[  234.803053][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'.
[  234.846995][T13355] syzkaller0 (unregistering): left allmulticast mode
[  234.916125][T13360] netlink: 'syz.2.2480': attribute type 3 has an invalid length.
[  235.052456][T13366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2481'.
[  235.099938][T13372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2484'.
[  236.058375][T13436] netlink: 'syz.2.2499': attribute type 3 has an invalid length.
[  236.199952][T13448] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  236.322785][T13460] netlink: 'syz.0.2508': attribute type 64 has an invalid length.
[  236.713310][T13506] Cannot find add_set index 4 as target
[  236.771082][T13508] netlink: 'syz.2.2523': attribute type 64 has an invalid length.
[  237.008763][T13528] IPv6: NLM_F_CREATE should be specified when creating new route
[  237.089454][T13531] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64)
[  237.103931][T13531] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  237.107799][T13531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  237.152983][   T55] Bluetooth: hci2: link tx timeout
[  237.155320][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  237.239363][T13537] netlink: 'syz.2.2535': attribute type 3 has an invalid length.
[  237.357445][T13549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.424271][T13558] mac80211_hwsim hwsim4 ": renamed from wlan0
[  238.299907][T13617] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.304000][T13617] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.373709][T13617] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.377934][T13617] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.441228][T13617] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.447873][T13617] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.503018][T13617] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.506852][T13617] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.601538][T13617] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.604876][T13617] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.616826][T13617] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.620091][T13617] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.644094][T13617] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.653182][T13617] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.669387][T13617] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.672675][T13617] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.802434][T13630] validate_nla: 4 callbacks suppressed
[  238.802466][T13630] netlink: 'syz.2.2566': attribute type 7 has an invalid length.
[  239.112325][T13654] netlink: 'syz.1.2574': attribute type 23 has an invalid length.
[  239.206576][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  239.448902][T13672] __nla_validate_parse: 40 callbacks suppressed
[  239.448925][T13672] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2578'.
[  239.460758][T13672] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2578'.
[  239.464149][T13672] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2578'.
[  239.779071][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'.
[  239.806444][T13690] Bluetooth: MGMT ver 1.23
[  240.114319][T13707] netlink: 'syz.0.2590': attribute type 7 has an invalid length.
[  240.200296][T13709] xt_CT: No such helper "syz0"
[  240.202740][T13717] delete_channel: no stack
[  240.330373][T13723] netlink: 'syz.2.2596': attribute type 11 has an invalid length.
[  240.550787][T13747] netlink: 'syz.2.2603': attribute type 23 has an invalid length.
[  240.627682][T13751] netlink: 'syz.2.2605': attribute type 64 has an invalid length.
[  240.678705][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'.
[  240.834912][T13758] vlan0: entered promiscuous mode
[  240.837274][T13758] vlan0: entered allmulticast mode
[  240.839517][T13758] hsr_slave_1: entered allmulticast mode
[  240.882227][T13759] netlink: 'syz.2.2607': attribute type 11 has an invalid length.
[  241.044505][T13769] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2610'.
[  241.263639][T13778] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2614'.
[  241.268251][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'.
[  241.275143][T13779] netlink: 'syz.2.2612': attribute type 1 has an invalid length.
[  241.278256][T13779] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2612'.
[  241.281833][T13779] netlink: 'syz.2.2612': attribute type 1 has an invalid length.
[  241.290137][T13778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2614'.
[  241.299771][T13779] netlink: 'syz.2.2612': attribute type 13 has an invalid length.
[  241.662772][T13801] netlink: 'syz.0.2619': attribute type 10 has an invalid length.
[  241.760988][T13808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.124096][T13822] IPVS: set_ctl: invalid protocol: 98 172.20.20.23:20003
[  243.436295][T13885] batadv_slave_1: entered promiscuous mode
[  243.451294][T13884] batadv_slave_1: left promiscuous mode
[  243.694622][T13903] team0: Cannot enslave team device to itself
[  243.729783][T13905] x_tables: duplicate underflow at hook 1
[  243.740935][T13905] x_tables: duplicate underflow at hook 2
[  243.869630][T13917] validate_nla: 21 callbacks suppressed
[  243.869655][T13917] netlink: 'syz.0.2653': attribute type 1 has an invalid length.
[  243.895917][T13917] netlink: 'syz.0.2653': attribute type 64 has an invalid length.
[  244.246311][T13941] netlink: 'syz.0.2660': attribute type 142 has an invalid length.
[  244.489743][T13966] __nla_validate_parse: 39 callbacks suppressed
[  244.489758][T13966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2663'.
[  244.639473][T13974] netlink: 'syz.2.2668': attribute type 3 has an invalid length.
[  244.680493][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'.
[  244.701434][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'.
[  244.718336][T13980] gtp0: entered promiscuous mode
[  244.720359][T13980] gtp0: entered allmulticast mode
[  244.782116][T13985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'.
[  244.786907][T13985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'.
[  244.789620][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2671'.
[  244.793454][T13985] netlink: 'syz.2.2671': attribute type 64 has an invalid length.
[  244.828850][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'.
[  245.073012][T14003] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000
[  245.083136][T14004] syzkaller0: entered promiscuous mode
[  245.087531][T14004] syzkaller0: entered allmulticast mode
[  245.194263][T14011] bridge7: entered allmulticast mode
[  245.330271][T14022] netlink: 'syz.2.2681': attribute type 64 has an invalid length.
[  245.388104][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2681'.
[  245.458969][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'.
[  245.464671][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'.
[  245.520667][T14040] lo: entered promiscuous mode
[  245.548701][T14040] tunl0: entered promiscuous mode
[  245.550773][T14040] gre0: entered promiscuous mode
[  245.552604][T14040] gretap0: entered promiscuous mode
[  245.554690][T14040] erspan0: entered promiscuous mode
[  245.557331][T14040] erspan0: left allmulticast mode
[  245.559329][T14040] ip_vti0: entered promiscuous mode
[  245.561540][T14040] ip6_vti0: entered promiscuous mode
[  245.563621][T14040] sit0: entered promiscuous mode
[  245.579833][T14040] ip6tnl0: entered promiscuous mode
[  245.582473][T14040] ip6gre0: entered promiscuous mode
[  245.595320][T14040] ip6gretap0: entered promiscuous mode
[  245.597961][T14040] vcan0: entered promiscuous mode
[  245.601456][T14040] 8021q: adding VLAN 0 to HW filter on device team0
[  245.604580][T14040] nlmon0: entered promiscuous mode
[  245.609086][T14052] netlink: 'syz.0.2685': attribute type 9 has an invalid length.
[  245.611856][T14040] caif0: entered promiscuous mode
[  245.614250][T14040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.692789][T14056] netlink: 'syz.1.2689': attribute type 7 has an invalid length.
[  245.799875][T14058] netlink: 'syz.1.2690': attribute type 29 has an invalid length.
[  245.973805][T14069] netlink: 'syz.1.2693': attribute type 21 has an invalid length.
[  247.368378][T14118] delete_channel: no stack
[  247.696661][T14134] Cannot find del_set index 4 as target
[  248.044866][T14171] openvswitch: netlink: Multiple metadata blocks provided
[  248.298367][T14203] dvmrp0: entered allmulticast mode
[  248.367031][T14211] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  248.724115][T14240] nbd: must specify a size in bytes for the device
[  248.950140][T14257] can: request_module (can-proto-0) failed.
[  249.160273][T14285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.239129][T14290] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  249.254966][T14290] macsec1: entered promiscuous mode
[  249.259582][T14290] macsec1: entered allmulticast mode
[  249.261690][T14290] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  249.271135][T14290] macsec2: entered promiscuous mode
[  249.273051][T14290] macsec2: entered allmulticast mode
[  249.281156][T14290] macsec3: entered promiscuous mode
[  249.283148][T14290] macsec3: entered allmulticast mode
[  249.292087][T14290] macsec4: entered promiscuous mode
[  249.294019][T14290] macsec4: entered allmulticast mode
[  249.302525][T14290] macsec5: entered promiscuous mode
[  249.304379][T14290] macsec5: entered allmulticast mode
[  249.311847][T14290] macsec6: entered promiscuous mode
[  249.313722][T14290] macsec6: entered allmulticast mode
[  249.321798][T14290] macsec7: entered promiscuous mode
[  249.324000][T14290] macsec7: entered allmulticast mode
[  249.331519][T14290] macsec8: entered promiscuous mode
[  249.333405][T14290] macsec8: entered allmulticast mode
[  249.341359][T14290] macsec9: entered promiscuous mode
[  249.343793][T14290] macsec9: entered allmulticast mode
[  249.351996][T14290] macsec10: entered promiscuous mode
[  249.354083][T14290] macsec10: entered allmulticast mode
[  249.361753][T14290] macsec11: entered promiscuous mode
[  249.364037][T14290] macsec11: entered allmulticast mode
[  249.373197][T14290] macsec12: entered promiscuous mode
[  249.375343][T14290] macsec12: entered allmulticast mode
[  249.387240][T14290] macsec13: entered promiscuous mode
[  249.389473][T14290] macsec13: entered allmulticast mode
[  249.398290][T14290] macsec14: entered promiscuous mode
[  249.400640][T14290] macsec14: entered allmulticast mode
[  249.408261][T14290] macsec15: entered promiscuous mode
[  249.410239][T14290] macsec15: entered allmulticast mode
[  249.413428][T14295] tipc: Enabling of bearer <eth:pimreg1> rejected, failed to enable media
[  249.421697][T14290] macsec16: entered promiscuous mode
[  249.424120][T14290] macsec16: entered allmulticast mode
[  249.432948][T14290] macsec17: entered promiscuous mode
[  249.435273][T14290] macsec17: entered allmulticast mode
[  249.446986][T14290] macsec18: entered promiscuous mode
[  249.450433][T14290] macsec18: entered allmulticast mode
[  249.460978][T14290] macsec19: entered promiscuous mode
[  249.462917][T14290] macsec19: entered allmulticast mode
[  249.470143][T14290] macsec20: entered promiscuous mode
[  249.472100][T14290] macsec20: entered allmulticast mode
[  249.481394][T14290] macsec21: entered promiscuous mode
[  249.483323][T14290] macsec21: entered allmulticast mode
[  249.491887][T14290] macsec22: entered promiscuous mode
[  249.492288][T14299] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  249.493858][T14290] macsec22: entered allmulticast mode
[  249.502311][T14300] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  249.506638][T14290] macsec23: entered promiscuous mode
[  249.510986][T14290] macsec23: entered allmulticast mode
[  249.521520][T14290] macsec24: entered promiscuous mode
[  249.523457][T14290] macsec24: entered allmulticast mode
[  249.530597][T14290] macsec25: entered promiscuous mode
[  249.532582][T14290] macsec25: entered allmulticast mode
[  249.539653][T14290] macsec26: entered promiscuous mode
[  249.541525][T14290] macsec26: entered allmulticast mode
[  249.549331][T14290] macsec27: entered promiscuous mode
[  249.551182][T14290] macsec27: entered allmulticast mode
[  249.558449][T14290] macsec28: entered promiscuous mode
[  249.560314][T14290] macsec28: entered allmulticast mode
[  249.567347][T14290] macsec29: entered promiscuous mode
[  249.569252][T14290] macsec29: entered allmulticast mode
[  249.573517][T14304] __nla_validate_parse: 24 callbacks suppressed
[  249.573533][T14304] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2763'.
[  249.576299][T14290] macsec30: entered promiscuous mode
[  249.576389][T14290] macsec30: entered allmulticast mode
[  249.598566][T14290] macsec31: entered promiscuous mode
[  249.600562][T14290] macsec31: entered allmulticast mode
[  249.619883][T14290] macsec32: entered promiscuous mode
[  249.622058][T14290] macsec32: entered allmulticast mode
[  249.631538][T14290] macsec33: entered promiscuous mode
[  249.633536][T14290] macsec33: entered allmulticast mode
[  249.794621][T14311] validate_nla: 7 callbacks suppressed
[  249.794640][T14311] netlink: 'syz.0.2764': attribute type 13 has an invalid length.
[  250.008681][T14318] can: request_module (can-proto-0) failed.
[  250.025598][T14318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2767'.
[  250.144972][T14321] netlink: 'syz.2.2768': attribute type 3 has an invalid length.
[  250.300416][T14338] netlink: 'syz.0.2772': attribute type 64 has an invalid length.
[  250.341151][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2772'.
[  250.418078][T14343] x_tables: duplicate underflow at hook 1
[  250.420773][T14343] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2775'.
[  250.577053][T14353] IPVS: Scheduler module ip_vs_sip not found
[  250.579685][T14353] IPVS: length: 8 != 446622349272
[  250.582986][T14356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2780'.
[  250.847540][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'.
[  251.195396][T14391] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2788'.
[  251.283652][T14397] xt_TCPMSS: Only works on TCP SYN packets
[  251.359995][T14404] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2792'.
[  251.362787][T14404] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2792'.
[  251.366876][T14404] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2792'.
[  251.583200][T14419] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  251.603879][T14419] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  251.607709][T14419] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  251.611047][T14421] syzkaller1: entered promiscuous mode
[  251.613164][T14421] syzkaller1: entered allmulticast mode
[  252.519365][T14432] netlink: 'syz.2.2802': attribute type 3 has an invalid length.
[  252.575800][T14434] lo: entered allmulticast mode
[  252.579150][T14336] Set syz1 is full, maxelem 65536 reached
[  252.579727][T14433] lo: left allmulticast mode
[  252.620028][T14436] xt_recent: Unsupported userspace flags (00000048)
[  252.685124][T14440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.760457][T14448] netlink: 'syz.2.2810': attribute type 3 has an invalid length.
[  252.851312][T14459] netlink: 'syz.2.2812': attribute type 64 has an invalid length.
[  252.887106][T14466] x_tables: duplicate underflow at hook 1
[  252.915052][T14464] nbd: socks must be embedded in a SOCK_ITEM attr
[  252.917081][T14464] block nbd2: shutting down sockets
[  252.928254][T14459] dvmrp0: left allmulticast mode
[  252.968110][T14473] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  253.252459][T14498] bond7: (slave erspan0): Releasing active interface
[  253.257905][T14498] veth0_to_bridge: left allmulticast mode
[  253.259707][T14498] veth0_to_bridge: left promiscuous mode
[  253.266507][T14498] bridge0: port 1(veth0_to_bridge) entered disabled state
[  253.278957][T14498] bond7: (slave veth3): Releasing active interface
[  253.289437][T14498] bond8: (slave gretap2): Releasing active interface
[  253.307303][T14498] bond9: (slave gretap3): Releasing active interface
[  253.310942][T14498] batman_adv: batadv0: Interface deactivated: macsec1
[  253.313683][T14498] batman_adv: batadv0: Removing interface: macsec1
[  253.321289][T14500] syzkaller0: entered allmulticast mode
[  253.323097][T14501] netlink: 'syz.2.2821': attribute type 1 has an invalid length.
[  253.351776][T14499] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check.
[  253.375517][T14485] netlink: 'syz.2.2821': attribute type 10 has an invalid length.
[  253.378915][T14497] syzkaller0 (unregistering): left allmulticast mode
[  253.483212][T14485] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  253.486857][T14485] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  253.691355][T14524] netlink: 'syz.0.2827': attribute type 64 has an invalid length.
[  253.938579][T14531] netlink: 'syz.0.2829': attribute type 12 has an invalid length.
[  254.759500][T14596] __nla_validate_parse: 22 callbacks suppressed
[  254.759530][T14596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2848'.
[  254.821559][T14604] xt_TCPMSS: Only works on TCP SYN packets
[  254.839063][T14596] xt_TCPMSS: Only works on TCP SYN packets
[  254.852930][T14606] netlink: 'syz.0.2851': attribute type 64 has an invalid length.
[  254.910416][T14611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2852'.
[  254.919880][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'.
[  254.986909][T14606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2851'.
[  255.007280][T14617] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2854'.
[  255.072481][T14619] netlink: 'syz.2.2855': attribute type 11 has an invalid length.
[  255.078481][T14619] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2855'.
[  255.327548][T14642] netlink: 'syz.1.2863': attribute type 64 has an invalid length.
[  255.381829][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'.
[  255.843576][T14663] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2870'.
[  255.877539][T14665] netlink: 'syz.1.2871': attribute type 64 has an invalid length.
[  255.914882][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'.
[  256.083990][T14677] xt_cgroup: invalid path, errno=-2
[  256.203174][T14689] 8021q: VLANs not supported on ip6gre0
[  256.207983][T14687] syz_tun: entered allmulticast mode
[  256.225482][T14685] syz_tun: left allmulticast mode
[  256.283463][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2880'.
[  256.616519][T14723] netlink: 'syz.0.2890': attribute type 64 has an invalid length.
[  256.742063][T14734] netlink: 'syz.2.2894': attribute type 2 has an invalid length.
[  256.744715][T14734] netlink: 'syz.2.2894': attribute type 1 has an invalid length.
[  256.753094][T14734] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  256.758044][T14734] bond10: (slave vcan1): Error -95 calling set_mac_address
[  256.998214][T14761] netlink: 'syz.2.2903': attribute type 64 has an invalid length.
[  257.207654][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  257.432063][T14787] netlink: 'syz.0.2911': attribute type 13 has an invalid length.
[  257.434480][T14787] netlink: 'syz.0.2911': attribute type 11 has an invalid length.
[  257.649344][   T33] audit: type=1800 audit(1752117453.378:5): pid=14800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2915" name="bpf-map" dev="anon_inodefs" ino=30 res=0 errno=0
[  258.476153][T14833] gre0: left promiscuous mode
[  258.634132][T14842] netlink: 'syz.2.2930': attribute type 5 has an invalid length.
[  259.033528][   T33] audit: type=1107 audit(1752117454.758:6): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  259.181934][T14876] 8021q: adding VLAN 0 to HW filter on device bond9
[  259.198214][T14876] 8021q: adding VLAN 0 to HW filter on device bond9
[  259.200557][T14876] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  259.205316][T14876] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  259.252270][T14878] bond9: (slave bridge8): Enslaving as an active interface with a down link
[  259.522181][T14886] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.526781][T14886] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.559883][T14886] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.563629][T14886] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.613726][T14886] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.617731][T14886] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.672073][T14886] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.677321][T14886] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.748772][T14886] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.752057][T14886] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.761731][T14886] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.767259][T14886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.779178][T14886] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.782446][T14886] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.796159][T14886] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.799422][T14886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.131713][T14904] IPVS: set_ctl: invalid protocol: 185 172.30.0.2:20000
[  260.242775][T14908] __nla_validate_parse: 17 callbacks suppressed
[  260.242797][T14908] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2954'.
[  260.249933][T14908] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2954'.
[  260.253714][T14908] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2954'.
[  260.485059][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  260.568900][T14932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2963'.
[  260.572070][T14932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2963'.
[  260.578421][T14932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2963'.
[  260.730076][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  261.089176][T14946] xt_CT: No such helper "snmp"
[  261.820562][T14982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2975'.
[  261.823706][T14982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2975'.
[  261.830220][T14982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2975'.
[  261.836115][T14983] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2974'.
[  261.991445][T15004] syzkaller0: entered allmulticast mode
[  262.195256][T15020] batadv_slave_1: entered promiscuous mode
[  263.126091][T15102] validate_nla: 6 callbacks suppressed
[  263.126107][T15102] netlink: 'syz.0.3010': attribute type 13 has an invalid length.
[  263.131140][T15102] netlink: 'syz.0.3010': attribute type 17 has an invalid length.
[  263.185868][T15102] ip6gre0: left promiscuous mode
[  263.190353][T15102] ip6gre0: left allmulticast mode
[  263.229399][T15102] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.231760][T15102] bridge0: port 2(bridge_slave_1) entered listening state
[  263.234108][T15102] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.236403][T15102] bridge0: port 1(bridge_slave_0) entered listening state
[  263.253520][T15102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.631260][T15110] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  263.696665][ T1117] block nbd1: Possible stuck request ffff8880226c8000: control (read@0,1024B). Runtime 90 seconds
[  263.701008][ T1117] block nbd1: Possible stuck request ffff8880226c8200: control (read@1024,1024B). Runtime 90 seconds
[  263.705857][ T1117] block nbd1: Possible stuck request ffff8880226c8400: control (read@2048,1024B). Runtime 90 seconds
[  263.710116][ T1117] block nbd1: Possible stuck request ffff8880226c8600: control (read@3072,1024B). Runtime 90 seconds
[  263.952026][T15130] xt_CT: You must specify a L4 protocol and not use inversions on it
[  263.982678][T15134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.203434][T15152] netlink: 'syz.1.3028': attribute type 12 has an invalid length.
[  264.746140][  T789] tipc: Node number set to 2619250699
[  265.130710][T15206] netlink: 'syz.2.3047': attribute type 1 has an invalid length.
[  265.171359][T15206] bond11: (slave vti1): The slave device specified does not support setting the MAC address
[  265.180031][T15206] bond11: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  265.189439][T15206] bond11: (slave vti1): making interface the new active one
[  265.192669][T15206] bond11: (slave vti1): Enslaving as an active interface with an up link
[  265.201524][T15208] IPv6: sit2: Disabled Multicast RS
[  265.273128][T15219] bond10: entered promiscuous mode
[  265.275173][T15219] bond10: entered allmulticast mode
[  265.277226][T15219] 8021q: adding VLAN 0 to HW filter on device bond10
[  265.359977][T15235] netlink: 'syz.0.3055': attribute type 8 has an invalid length.
[  265.603618][T15256] __nla_validate_parse: 11 callbacks suppressed
[  265.603639][T15256] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3061'.
[  265.656144][T15261] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3062'.
[  265.818903][T15275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3068'.
[  265.896578][T15282] tun0: tun_chr_ioctl cmd 1074025673
[  265.903007][T15280] tun0: tun_chr_ioctl cmd 2148553947
[  265.906535][T15282] tun0: tun_chr_ioctl cmd 2148553947
[  265.984610][T15285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3071'.
[  265.988507][T15285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3071'.
[  265.992000][T15285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3071'.
[  266.025720][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'.
[  266.030192][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'.
[  266.033758][T15287] netlink: 'syz.1.3072': attribute type 5 has an invalid length.
[  266.040373][T15287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3072'.
[  266.103839][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3075'.
[  266.673749][T15326] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.685063][T15326] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.748751][T15326] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.753890][T15326] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.791910][T15326] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.796594][T15326] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.840776][T15326] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.843792][T15326] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.913438][T15326] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.916655][T15326] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.926784][T15326] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.929355][T15326] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.937908][T15326] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.940492][T15326] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.948560][T15326] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  266.951194][T15326] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.957196][T15329] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.961106][T15329] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.019961][T15329] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.024018][T15329] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.083447][T15329] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.087409][T15329] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.142125][T15329] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.148229][T15329] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.970394][ T5280] udevd[5280]: worker [9692] /devices/virtual/block/nbd1 is taking a long time
[  268.778986][T15358] netlink: 'syz.2.3096': attribute type 15 has an invalid length.
[  268.980459][T15365] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  269.172373][T15374] netlink: 'syz.2.3102': attribute type 3 has an invalid length.
[  269.174923][T15374] netlink: 'syz.2.3102': attribute type 1 has an invalid length.
[  269.897036][T15399] veth0: entered promiscuous mode
[  269.902708][T15399] veth0 (unregistering): left promiscuous mode
[  269.967561][T15405] netlink: 'syz.0.3112': attribute type 21 has an invalid length.
[  269.970719][T15405] netlink: 'syz.0.3112': attribute type 22 has an invalid length.
[  269.975318][T15405] netlink: 'syz.0.3112': attribute type 23 has an invalid length.
[  269.981424][T15405] netlink: 'syz.0.3112': attribute type 25 has an invalid length.
[  269.984355][T15405] netlink: 'syz.0.3112': attribute type 26 has an invalid length.
[  270.187643][T15426] netlink: 'syz.2.3119': attribute type 4 has an invalid length.
[  270.192661][T15426] netlink: 'syz.2.3119': attribute type 4 has an invalid length.
[  270.352651][T15434] vti0: entered promiscuous mode
[  270.540285][T15446] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  270.611466][T15446] __nla_validate_parse: 83 callbacks suppressed
[  270.611485][T15446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3128'.
[  270.620640][T15446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3128'.
[  270.624180][T15446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3128'.
[  270.646594][T15329] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.649791][T15329] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.660260][T15329] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.663535][T15329] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.676912][T15329] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.680344][T15329] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.692090][T15329] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.697670][T15329] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.758506][T15455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3131'.
[  270.851749][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3133'.
[  270.855984][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3133'.
[  270.859326][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3133'.
[  271.137636][T15483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3142'.
[  271.141809][T15483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3142'.
[  271.148895][T15483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3142'.
[  271.603066][T15519] x_tables: duplicate underflow at hook 1
[  271.700011][T15527] syzkaller0: entered promiscuous mode
[  271.702438][T15527] syzkaller0: entered allmulticast mode
[  271.711136][T15526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.778127][T15526] tipc: Resetting bearer <eth:syzkaller0>
[  271.803029][T15526] tipc: Disabling bearer <eth:syzkaller0>
[  272.559806][T15605] ip6erspan0: entered allmulticast mode
[  273.066063][T15657] tipc: New replicast peer: 0.0.255.255
[  273.068873][T15657] tipc: Enabled bearer <udp:>, priority 10
[  273.440259][T15676] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.443756][T15676] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.447406][T15676] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.450326][T15676] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  273.461330][T15676] ip6gretap0: left allmulticast mode
[  273.478992][T15676] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.482259][T15676] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.485881][T15676] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.489171][T15676] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.089861][T15715] xt_CT: No such helper "snmp"
[  274.816011][T15792] validate_nla: 8 callbacks suppressed
[  274.816029][T15792] netlink: 'syz.2.3221': attribute type 9 has an invalid length.
[  275.239129][T15826] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  275.265192][T15819] bpq0: entered promiscuous mode
[  275.267240][T15819] bpq0: entered allmulticast mode
[  275.276339][T15829] netlink: 'syz.0.3232': attribute type 1 has an invalid length.
[  275.279764][T15829] netlink: 'syz.0.3232': attribute type 2 has an invalid length.
[  275.282315][T15830] netlink: 'syz.0.3232': attribute type 1 has an invalid length.
[  275.288259][T15830] netlink: 'syz.0.3232': attribute type 2 has an invalid length.
[  275.512213][T15846] dvmrp1: entered allmulticast mode
[  275.518250][T15846] dvmrp1: left allmulticast mode
[  275.760496][T15860] __nla_validate_parse: 16 callbacks suppressed
[  275.760537][T15860] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3241'.
[  275.818008][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  276.211426][T15870] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3244'.
[  276.360798][T15875] netlink: 'syz.0.3245': attribute type 5 has an invalid length.
[  276.363243][T15875] netlink: 'syz.0.3245': attribute type 7 has an invalid length.
[  276.575635][T15883] netlink: 'syz.0.3249': attribute type 2 has an invalid length.
[  276.658843][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3251'.
[  277.086393][T15914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3260'.
[  277.094968][T15914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3260'.
[  277.098261][T15914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3260'.
[  277.251446][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3266'.
[  277.314176][T15940] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3268'.
[  277.318154][T15940] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3268'.
[  277.935060][T15984] netlink: 'syz.2.3282': attribute type 4 has an invalid length.
[  277.940843][T15984] netlink: 'syz.2.3282': attribute type 4 has an invalid length.
[  278.013547][T15986] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  278.462585][T16015] 8021q: adding VLAN 0 to HW filter on device bond12
[  278.479501][T16015] erspan0: left promiscuous mode
[  278.481713][T16015] erspan0: entered allmulticast mode
[  279.110540][T16053] erspan0: entered allmulticast mode
[  279.385603][T16064] nbd: error processing sock list
[  279.387999][T16064] block nbd2: shutting down sockets
[  280.827752][T16118] validate_nla: 3 callbacks suppressed
[  280.827764][T16118] netlink: 'syz.2.3332': attribute type 1 has an invalid length.
[  280.844237][T16118] 8021q: adding VLAN 0 to HW filter on device bond13
[  280.954036][T16123] syz.2.3334 (16123) used obsolete PPPIOCDETACH ioctl
[  281.057881][T16125] __nla_validate_parse: 18 callbacks suppressed
[  281.057897][T16125] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3335'.
[  281.063902][T16125] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3335'.
[  281.068313][T16125] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3335'.
[  281.169246][T16131] netlink: 'syz.2.3337': attribute type 39 has an invalid length.
[  281.178918][T16131] netlink: 'syz.2.3337': attribute type 3 has an invalid length.
[  281.181908][T16131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3337'.
[  281.294288][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'.
[  281.300024][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'.
[  281.529212][T16144] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3343'.
[  281.666905][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3346'.
[  281.668313][T16148] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.673278][T16148] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.683782][T16148] tipc: Resetting bearer <eth:macvtap0>
[  281.688130][T16148] tipc: Resetting bearer <eth:macvtap0>
[  281.722847][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'.
[  281.731925][  T434] tipc: Resetting bearer <eth:macvtap0>
[  281.762206][T16155] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3348'.
[  281.788048][T16157] netlink: 'syz.0.3349': attribute type 3 has an invalid length.
[  281.790994][T16157] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  281.817319][T16157] 8021q: adding VLAN 0 to HW filter on device bond12
[  281.823325][T16157] erspan0: entered allmulticast mode
[  281.977984][T16171] xt_CT: You must specify a L4 protocol and not use inversions on it
[  282.228248][T16193] openvswitch: netlink: IP tunnel dst address not specified
[  282.342470][T16207] x_tables: duplicate underflow at hook 2
[  282.347221][T16207] netlink: ct family unspecified
[  282.349009][T16207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.823484][T16238] macsec34: entered promiscuous mode
[  282.829427][T16238] macsec34: entered allmulticast mode
[  282.984000][T16247] netlink: 'syz.1.3378': attribute type 10 has an invalid length.
[  283.119583][T16258] netlink: 'syz.1.3382': attribute type 1 has an invalid length.
[  283.382539][T16280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.385708][T16280] syzkaller0: entered promiscuous mode
[  283.388440][T16280] syzkaller0: entered allmulticast mode
[  283.395605][T16280] netlink: 'syz.1.3391': attribute type 1 has an invalid length.
[  283.419626][T16280] 8021q: adding VLAN 0 to HW filter on device bond19
[  283.483856][T16288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.524018][T16280] tipc: Resetting bearer <eth:syzkaller0>
[  283.535215][T16279] tipc: Resetting bearer <eth:syzkaller0>
[  283.549483][T16279] tipc: Disabling bearer <eth:syzkaller0>
[  284.366601][T16332] x_tables: duplicate underflow at hook 1
[  284.366754][T16331] x_tables: duplicate underflow at hook 1
[  284.571548][T16347] syzkaller1: entered promiscuous mode
[  284.574233][T16347] syzkaller1: entered allmulticast mode
[  284.579355][T16349] netlink: 'syz.2.3415': attribute type 1 has an invalid length.
[  284.607509][T16349] 8021q: adding VLAN 0 to HW filter on device bond14
[  284.910513][T16363] bond_slave_0: entered promiscuous mode
[  284.913175][T16363] bond_slave_1: entered promiscuous mode
[  284.916669][T16363] vlan0: entered promiscuous mode
[  284.918676][T16363] bond0: entered promiscuous mode
[  284.920979][T16363] bond4: entered promiscuous mode
[  284.984648][T16364] vlan0: entered promiscuous mode
[  285.850713][T16411] netlink: 'syz.2.3436': attribute type 1 has an invalid length.
[  285.882570][T16411] 8021q: adding VLAN 0 to HW filter on device bond15
[  286.330092][T16436] __nla_validate_parse: 87 callbacks suppressed
[  286.330110][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3444'.
[  286.337249][T16436] nbd: must specify at least one socket
[  286.649534][T16460] xt_policy: too many policy elements
[  286.717837][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'.
[  286.720323][T16465] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3455'.
[  286.930356][T16481] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3459'.
[  286.968491][T16484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.088382][T16497] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  287.177135][T16507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3467'.
[  287.184467][T16507] netlink: 'syz.2.3467': attribute type 4 has an invalid length.
[  287.194707][T16507] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3467'.
[  287.251538][T16513] netlink: 'syz.1.3468': attribute type 2 has an invalid length.
[  287.257175][T16511] ip6t_srh: unknown srh invflags 4449
[  287.259732][T16513] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3468'.
[  287.322256][T16520] netlink: 'syz.1.3470': attribute type 1 has an invalid length.
[  287.352217][T16520] 8021q: adding VLAN 0 to HW filter on device bond20
[  287.479118][T16530] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3473'.
[  287.491743][T16530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3473'.
[  287.511189][T16534] netlink: 'syz.2.3474': attribute type 3 has an invalid length.
[  287.614674][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3476'.
[  287.649101][T16538] netlink: 'syz.2.3476': attribute type 29 has an invalid length.
[  287.667022][T16538] netlink: 'syz.2.3476': attribute type 29 has an invalid length.
[  287.952510][T16552] netlink: 'syz.2.3482': attribute type 11 has an invalid length.
[  287.956823][T16552] netlink: 'syz.2.3482': attribute type 11 has an invalid length.
[  288.465946][T16578] netlink: 'syz.0.3490': attribute type 1 has an invalid length.
[  288.489326][T16578] 8021q: adding VLAN 0 to HW filter on device bond13
[  288.717060][T16587] netlink: 'syz.0.3493': attribute type 5 has an invalid length.
[  288.909195][T16591] bond0 (unregistering): Released all slaves
[  289.192472][T16601] erspan0: left allmulticast mode
[  289.198424][T16601] syz_tun: left allmulticast mode
[  289.200820][T16601] ip6gretap0: left promiscuous mode
[  289.206570][T16601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.569018][T16614] netlink: 'syz.1.3503': attribute type 1 has an invalid length.
[  289.605933][    C1] vcan0: j1939_tp_rxtimer: 0xffff888037766c00: rx timeout, send abort
[  289.609396][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888037766c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  290.302749][T16665] bond0: (slave gre0): refused to change device type
[  290.311705][T16665] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  290.343555][T16667] IPVS: Unknown mcast interface: wg0
[  291.768530][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  292.081097][T16693] validate_nla: 2 callbacks suppressed
[  292.081109][T16693] netlink: 'syz.1.3528': attribute type 1 has an invalid length.
[  292.106039][T16693] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.174260][T16700] netlink: 'syz.1.3531': attribute type 1 has an invalid length.
[  292.210443][T16700] 8021q: adding VLAN 0 to HW filter on device bond21
[  292.220634][T16703] __nla_validate_parse: 21 callbacks suppressed
[  292.220646][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3532'.
[  292.226362][T16703] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3532'.
[  292.232924][T16700] erspan0: entered allmulticast mode
[  292.267558][T16708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3533'.
[  292.277245][T16708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3533'.
[  292.280379][T16708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3533'.
[  292.301423][T16710] netlink: 'syz.1.3534': attribute type 1 has an invalid length.
[  292.314859][T16710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  292.326437][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'.
[  292.374168][T16716] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3536'.
[  292.451241][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3539'.
[  292.500136][T16723] sock: sock_set_timeout: `syz.1.3540' (pid 16723) tries to set negative timeout
[  292.510660][T16719] bond11: (slave vti1): Releasing backup interface
[  292.638607][T16736] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3544'.
[  292.681045][T16741] netlink: 'syz.2.3546': attribute type 1 has an invalid length.
[  292.706800][T16741] 8021q: adding VLAN 0 to HW filter on device bond16
[  292.720855][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.723812][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.781288][T16738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.786947][T16746] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64)
[  292.791374][T16737] tipc: Disabling bearer <eth:syzkaller0>
[  292.910468][T16752] netlink: 'syz.1.3550': attribute type 1 has an invalid length.
[  292.930484][T16752] 8021q: adding VLAN 0 to HW filter on device bond22
[  293.382906][T16785] netlink: 'syz.0.3561': attribute type 1 has an invalid length.
[  293.404081][T16785] 8021q: adding VLAN 0 to HW filter on device bond14
[  293.471193][T16788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.480302][T16788] syzkaller0: MTU too low for tipc bearer
[  293.483145][T16788] tipc: Disabling bearer <eth:syzkaller0>
[  293.629059][T16794] netlink: 'syz.0.3565': attribute type 1 has an invalid length.
[  293.649641][T16794] 8021q: adding VLAN 0 to HW filter on device bond15
[  293.770132][ T1117] block nbd1: Possible stuck request ffff8880226c8000: control (read@0,1024B). Runtime 120 seconds
[  293.774165][ T1117] block nbd1: Possible stuck request ffff8880226c8200: control (read@1024,1024B). Runtime 120 seconds
[  293.778848][ T1117] block nbd1: Possible stuck request ffff8880226c8400: control (read@2048,1024B). Runtime 120 seconds
[  293.782674][ T1117] block nbd1: Possible stuck request ffff8880226c8600: control (read@3072,1024B). Runtime 120 seconds
[  293.821554][T16803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.379520][T16821] netlink: 'syz.2.3574': attribute type 1 has an invalid length.
[  294.404113][T16821] 8021q: adding VLAN 0 to HW filter on device bond17
[  294.425652][T16821] netlink: 'syz.2.3574': attribute type 6 has an invalid length.
[  294.428630][T16821] openvswitch: netlink: IPv4 tun info is not correct
[  294.471281][T16826] vlan0: left allmulticast mode
[  294.473243][T16826] hsr_slave_1: left allmulticast mode
[  294.654412][T16838] netlink: 'syz.0.3580': attribute type 1 has an invalid length.
[  294.670633][T16838] 8021q: adding VLAN 0 to HW filter on device bond16
[  294.776002][T16848] IPVS: stopping backup sync thread 16853 ...
[  294.939560][T16873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.986660][T16876] Cannot find add_set index 0 as target
[  295.214412][T16886] 8021q: adding VLAN 0 to HW filter on device bond17
[  295.418665][T16906] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  295.870546][T16930] 8021q: adding VLAN 0 to HW filter on device bond18
[  296.493359][T16953] 8021q: adding VLAN 0 to HW filter on device bond19
[  296.611677][T16959] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  296.829922][T16966] 8021q: adding VLAN 0 to HW filter on device bond23
[  297.082776][T16993] xt_socket: unknown flags 0x8
[  297.312378][T17011] validate_nla: 7 callbacks suppressed
[  297.312396][T17011] netlink: 'syz.1.3642': attribute type 1 has an invalid length.
[  297.346613][T17014] __nla_validate_parse: 26 callbacks suppressed
[  297.346625][T17014] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3644'.
[  297.352289][T17014] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3644'.
[  297.354510][T17011] 8021q: adding VLAN 0 to HW filter on device bond24
[  297.356260][T17014] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3644'.
[  297.398375][T17016] vlan1: entered promiscuous mode
[  297.400149][T17016] vlan1: entered allmulticast mode
[  297.402064][T17016] gretap0: entered allmulticast mode
[  297.412234][T17018] netlink: 'syz.1.3646': attribute type 1 has an invalid length.
[  297.573254][T17030] netlink: 'syz.2.3649': attribute type 5 has an invalid length.
[  297.583276][T17030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3649'.
[  297.624648][T17034] netlink: 'syz.2.3651': attribute type 3 has an invalid length.
[  297.631182][T17034] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3651'.
[  297.691627][T17034] dvmrp0: entered allmulticast mode
[  297.832181][T17045] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3655'.
[  298.055232][T17056] syzkaller0: left promiscuous mode
[  298.056971][T17056] syzkaller0: left allmulticast mode
[  298.094048][T17060] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3662'.
[  298.134496][T17065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3664'.
[  298.140302][T17065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3664'.
[  298.220489][T17071] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3667'.
[  298.633610][T17098] netlink: 'syz.1.3673': attribute type 1 has an invalid length.
[  298.668876][T17098] 8021q: adding VLAN 0 to HW filter on device bond25
[  299.207586][T17085] delete_channel: no stack
[  299.296920][T17123] 8021q: adding VLAN 0 to HW filter on device batadv1
[  299.299477][T17123] batadv1: entered promiscuous mode
[  299.301579][T17123] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  299.304319][T17123] team0: Failed to send options change via netlink (err -105)
[  299.310999][T17123] team0: Port device batadv1 added
[  299.369505][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.373126][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.384997][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.389688][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.392791][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.594468][T17126] chnl_net:caif_netlink_parms(): no params data found
[  299.708166][T17126] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.710625][T17126] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.712839][T17126] bridge_slave_0: entered allmulticast mode
[  299.719012][T17126] bridge_slave_0: entered promiscuous mode
[  299.724615][T17126] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.727323][T17126] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.729557][T17126] bridge_slave_1: entered allmulticast mode
[  299.733072][T17126] bridge_slave_1: entered promiscuous mode
[  299.762872][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.768206][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.801053][T17126] team0: Port device team_slave_0 added
[  299.810215][T17126] team0: Port device team_slave_1 added
[  299.844556][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.849951][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.862944][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.869714][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.871996][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.879922][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.941911][T17126] hsr_slave_0: entered promiscuous mode
[  299.944210][T17126] hsr_slave_1: entered promiscuous mode
[  299.953900][T17126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.963315][T17126] Cannot create hsr debugfs directory
[  300.368533][T17126] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  300.386946][T17126] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  300.398908][T17126] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  300.412767][T17126] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  300.527117][T17126] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.551540][T17126] 8021q: adding VLAN 0 to HW filter on device team0
[  300.558443][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.560633][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.613926][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.616268][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.817038][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.893543][T17126] veth0_vlan: entered promiscuous mode
[  300.911972][T17126] veth1_vlan: entered promiscuous mode
[  300.959157][T17126] veth0_macvtap: entered promiscuous mode
[  300.963754][T17126] veth1_macvtap: entered promiscuous mode
[  300.978096][T17126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.997184][T17126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.013271][T17126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.018094][T17126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.020739][T17126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.023301][T17126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.059323][T17245] netlink: 'syz.0.3712': attribute type 1 has an invalid length.
[  301.170559][T17248] tipc: Resetting bearer <eth:macvtap0>
[  301.268409][  T434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.271390][  T434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.318139][  T434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.320477][  T434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.431470][T17289] xt_CT: You must specify a L4 protocol and not use inversions on it
[  302.587448][T17301] __nla_validate_parse: 10 callbacks suppressed
[  302.587466][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3731'.
[  302.630768][T17305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3733'.
[  302.633786][T17305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3733'.
[  302.637818][T17305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3733'.
[  302.804036][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'.
[  302.813365][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'.
[  302.819481][T17324] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3739'.
[  302.869735][T17328] netlink: 'syz.2.3741': attribute type 1 has an invalid length.
[  302.878128][T17328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3741'.
[  302.881587][T17328] netlink: 'syz.2.3741': attribute type 1 has an invalid length.
[  302.927914][T17333] geneve3: entered promiscuous mode
[  302.998313][T17338] netlink: 'syz.0.3744': attribute type 1 has an invalid length.
[  303.023333][T17338] 8021q: adding VLAN 0 to HW filter on device bond19
[  303.071716][ T7374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.219451][T17343] batadv_slave_0: entered promiscuous mode
[  303.221746][T17343] batadv_slave_0: entered allmulticast mode
[  303.363368][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  303.368250][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  303.371044][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  303.374248][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  303.377936][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.382505][T17349] ip6tnl4: entered promiscuous mode
[  303.384362][T17349] ip6tnl4: entered allmulticast mode
[  303.388040][T17349] team0: Device ip6tnl4 is of different type
[  303.416189][T17350] ip6tnl4: entered promiscuous mode
[  303.418213][T17350] ip6tnl4: entered allmulticast mode
[  303.421347][T17350] team0: Device ip6tnl4 is of different type
[  303.597419][T17346] chnl_net:caif_netlink_parms(): no params data found
[  303.642749][T17359] netlink: 'syz.0.3750': attribute type 3 has an invalid length.
[  303.671573][T17346] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.673890][T17346] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.677141][T17346] bridge_slave_0: entered allmulticast mode
[  303.680424][T17346] bridge_slave_0: entered promiscuous mode
[  303.683885][T17346] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.689704][T17346] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.692196][T17346] bridge_slave_1: entered allmulticast mode
[  303.696177][T17346] bridge_slave_1: entered promiscuous mode
[  303.720264][T17346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.726095][T17346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.748767][T17367] netlink: 'syz.0.3752': attribute type 10 has an invalid length.
[  303.760137][T17367] dummy0: entered promiscuous mode
[  303.763022][T17367] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  303.779540][T17346] team0: Port device team_slave_0 added
[  303.783739][T17346] team0: Port device team_slave_1 added
[  303.807478][T17346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.809819][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.818791][T17346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.827858][T17346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.830279][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.840430][T17346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.893089][T17346] hsr_slave_0: entered promiscuous mode
[  303.897704][T17346] hsr_slave_1: entered promiscuous mode
[  303.900637][T17346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  303.903523][T17346] Cannot create hsr debugfs directory
[  304.048578][T17374] netlink: 'syz.0.3754': attribute type 1 has an invalid length.
[  304.051757][T17374] netlink: 'syz.0.3754': attribute type 2 has an invalid length.
[  304.059477][T17374] syzkaller0: entered promiscuous mode
[  304.061175][T17374] syzkaller0: entered allmulticast mode
[  304.522926][T17399] netlink: 'syz.0.3764': attribute type 58 has an invalid length.
[  304.755505][ T7374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.811014][ T7374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.880693][ T7374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.992743][ T7374] bridge_slave_1: left allmulticast mode
[  304.994623][ T7374] bridge_slave_1: left promiscuous mode
[  304.999009][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.006091][ T7374] bridge_slave_0: left allmulticast mode
[  305.007818][ T7374] bridge_slave_0: left promiscuous mode
[  305.009791][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.284249][ T7374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.293198][ T7374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.297960][ T7374] bond0 (unregistering): Released all slaves
[  305.454969][ T5831] Bluetooth: hci0: command tx timeout
[  305.597000][ T7374] hsr_slave_0: left promiscuous mode
[  305.599250][ T7374] hsr_slave_1: left promiscuous mode
[  305.601227][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.603705][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.610643][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.613167][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.634234][ T7374] veth1_macvtap: left promiscuous mode
[  305.636603][ T7374] veth0_macvtap: left promiscuous mode
[  305.638355][ T7374] veth1_vlan: left promiscuous mode
[  305.640009][ T7374] veth0_vlan: left promiscuous mode
[  305.714014][T17402] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3765'.
[  305.717062][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3765'.
[  306.081417][ T7374] team0 (unregistering): Port device team_slave_1 removed
[  306.114590][ T7374] team0 (unregistering): Port device team_slave_0 removed
[  306.733101][T17346] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  306.748159][T17346] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  306.752805][T17346] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  306.783695][T17346] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  306.915205][T17346] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.942804][T17346] 8021q: adding VLAN 0 to HW filter on device team0
[  306.963901][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.966804][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.994720][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.997112][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.214372][T17346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.297502][T17346] veth0_vlan: entered promiscuous mode
[  307.310616][T17346] veth1_vlan: entered promiscuous mode
[  307.359059][T17346] veth0_macvtap: entered promiscuous mode
[  307.370312][T17346] veth1_macvtap: entered promiscuous mode
[  307.391691][T17346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.408532][T17346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.418879][T17346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.422468][T17346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.426748][T17346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.433816][T17346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.525610][ T5831] Bluetooth: hci0: command tx timeout
[  307.558430][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.561202][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.645266][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.648270][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.988365][T17485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.994086][T17485] tipc: Resetting bearer <eth:syzkaller0>
[  308.001111][T17484] tipc: Disabling bearer <eth:syzkaller0>
[  308.342949][   T33] audit: type=1804 audit(1752117504.068:7): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3796" name="/newroot/1269/cgroup.controllers" dev="tmpfs" ino=6471 res=1 errno=0
[  308.354562][   T33] audit: type=1800 audit(1752117504.068:8): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3796" name="cgroup.controllers" dev="tmpfs" ino=6471 res=0 errno=0
[  308.372750][   T33] audit: type=1804 audit(1752117504.098:9): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3796" name="/newroot/1269/cgroup.controllers" dev="tmpfs" ino=6471 res=1 errno=0
[  308.511855][T17511] __nla_validate_parse: 6 callbacks suppressed
[  308.511872][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'.
[  308.522417][T17505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3798'.
[  308.589742][T17513] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  308.609372][T17513] 8021q: adding VLAN 0 to HW filter on device bond20
[  308.939881][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3805'.
[  309.030548][T17530] netlink: 'syz.0.3807': attribute type 10 has an invalid length.
[  309.037685][T17530] team0: Cannot enslave team device to itself
[  309.258852][ T5860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.593084][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.599281][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.602634][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.608629][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.614590][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  309.887736][T17555] chnl_net:caif_netlink_parms(): no params data found
[  309.923187][T17571] xt_hashlimit: size too large, truncated to 1048576
[  309.966417][T17555] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.969271][T17555] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.972145][T17555] bridge_slave_0: entered allmulticast mode
[  309.978145][T17555] bridge_slave_0: entered promiscuous mode
[  309.986633][T17555] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.989618][T17555] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.992592][T17555] bridge_slave_1: entered allmulticast mode
[  309.996338][T17555] bridge_slave_1: entered promiscuous mode
[  310.023216][T17555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.029344][T17555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.066513][T17555] team0: Port device team_slave_0 added
[  310.072288][T17555] team0: Port device team_slave_1 added
[  310.109367][T17555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.112143][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.122954][T17555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.129669][T17555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.131989][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.141753][T17555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.182238][T17555] hsr_slave_0: entered promiscuous mode
[  310.185816][T17555] hsr_slave_1: entered promiscuous mode
[  310.188649][T17555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.191646][T17555] Cannot create hsr debugfs directory
[  310.460935][T17585] nft_compat: unsupported protocol 0
[  310.602680][ T5860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.688856][ T5860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.783193][ T5860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.860312][T17596] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3826'.
[  310.863141][T17596] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3826'.
[  310.871567][T17596] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3826'.
[  310.993483][ T5860] bridge_slave_1: left allmulticast mode
[  310.999486][ T5860] bridge_slave_1: left promiscuous mode
[  311.001969][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.020574][ T5860] bridge_slave_0: left allmulticast mode
[  311.021548][T17600] netlink: 'syz.2.3828': attribute type 21 has an invalid length.
[  311.022738][ T5860] bridge_slave_0: left promiscuous mode
[  311.023063][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.034461][T17600] netlink: 'syz.2.3828': attribute type 22 has an invalid length.
[  311.042693][T17600] netlink: 'syz.2.3828': attribute type 23 has an invalid length.
[  311.052368][T17600] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3828'.
[  311.520916][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.529032][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.536669][ T5860] bond0 (unregistering): Released all slaves
[  311.687963][ T5831] Bluetooth: hci0: command tx timeout
[  311.848911][T17634] siw: device registration error -23
[  311.851329][T17635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3838'.
[  311.858664][T17634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3838'.
[  311.861549][T17634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3838'.
[  311.872361][ T5860] hsr_slave_0: left promiscuous mode
[  311.874535][ T5860] hsr_slave_1: left promiscuous mode
[  311.880688][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.882951][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.887241][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.889829][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.908622][ T5860] veth1_macvtap: left promiscuous mode
[  311.910509][ T5860] veth0_macvtap: left promiscuous mode
[  311.912292][ T5860] veth1_vlan: left promiscuous mode
[  311.913929][ T5860] veth0_vlan: left promiscuous mode
[  312.345272][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  312.382619][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  312.909157][T17555] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  312.931184][T17555] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  312.962513][T17555] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  312.987272][T17555] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  313.185569][T17555] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.204136][T17555] 8021q: adding VLAN 0 to HW filter on device team0
[  313.211849][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.215053][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.231339][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.233574][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.270701][T17655] syzkaller1: entered promiscuous mode
[  313.272443][T17655] syzkaller1: entered allmulticast mode
[  313.414122][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.425036][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.432582][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.437184][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.440033][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.453551][T17555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.534159][T17555] veth0_vlan: entered promiscuous mode
[  313.608075][T17555] veth1_vlan: entered promiscuous mode
[  313.624216][T17660] chnl_net:caif_netlink_parms(): no params data found
[  313.637382][T17674] __nla_validate_parse: 1 callbacks suppressed
[  313.637393][T17674] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3848'.
[  313.688627][T17555] veth0_macvtap: entered promiscuous mode
[  313.701453][T17555] veth1_macvtap: entered promiscuous mode
[  313.753839][T17660] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.757159][T17660] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.760228][T17660] bridge_slave_0: entered allmulticast mode
[  313.764041][T17660] bridge_slave_0: entered promiscuous mode
[  313.773000][T17555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.776553][ T5831] Bluetooth: hci0: command tx timeout
[  313.779668][T17660] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.782591][T17660] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.786892][T17660] bridge_slave_1: entered allmulticast mode
[  313.790046][T17660] bridge_slave_1: entered promiscuous mode
[  313.801472][T17555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.834014][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.839013][T17555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.842387][T17555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.850828][T17555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.854237][T17555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.866433][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.920389][T17660] team0: Port device team_slave_0 added
[  313.939873][T17660] team0: Port device team_slave_1 added
[  313.975475][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.978047][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.987870][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.017953][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.025316][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.037174][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.113092][T17660] hsr_slave_0: entered promiscuous mode
[  314.117514][T17660] hsr_slave_1: entered promiscuous mode
[  314.120077][T17660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.122528][T17660] Cannot create hsr debugfs directory
[  314.126519][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.129582][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.187947][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.195573][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.320892][T17660] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  314.323988][T17660] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  314.370418][T17660] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  314.373480][T17660] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  314.447961][T17660] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  314.451307][T17660] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  314.548803][T17660] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  314.552342][T17660] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  314.687819][T17660] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  314.692960][T17660] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  314.697936][T17660] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  314.702327][T17660] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  314.763775][T17660] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.775758][T17660] 8021q: adding VLAN 0 to HW filter on device team0
[  314.784201][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.786403][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.794577][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.796839][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.833094][T17660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  314.959433][T17660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.990289][T17702] netlink: 'syz.2.3853': attribute type 1 has an invalid length.
[  315.006749][T17702] 8021q: adding VLAN 0 to HW filter on device bond20
[  315.022348][T17660] veth0_vlan: entered promiscuous mode
[  315.028554][T17660] veth1_vlan: entered promiscuous mode
[  315.058968][T17660] veth0_macvtap: entered promiscuous mode
[  315.063289][T17660] veth1_macvtap: entered promiscuous mode
[  315.086300][T17660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.095946][T17660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.105491][T17660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.108258][T17660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.112217][T17660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.117096][T17660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.193331][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.197975][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.214103][T17710] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.3856'.
[  315.228751][T17711] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.3856'.
[  315.246798][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.250309][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.790054][ T5860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.551280][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  316.559139][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  316.567911][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  316.573862][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  316.581468][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.678032][T17744] bridge0: port 1(gretap0) entered blocking state
[  316.680645][T17744] bridge0: port 1(gretap0) entered disabled state
[  316.693057][T17744] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[  316.750311][T17734] chnl_net:caif_netlink_parms(): no params data found
[  316.849413][T17734] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.852164][T17734] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.859185][T17734] bridge_slave_0: entered allmulticast mode
[  316.876401][T17734] bridge_slave_0: entered promiscuous mode
[  316.881324][T17734] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.884147][T17734] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.888028][T17734] bridge_slave_1: entered allmulticast mode
[  316.893106][T17734] bridge_slave_1: entered promiscuous mode
[  316.940871][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.951985][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.002254][T17734] team0: Port device team_slave_0 added
[  317.009318][T17734] team0: Port device team_slave_1 added
[  317.059268][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.061396][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.080657][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.096194][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.098315][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.108507][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.140059][T17734] hsr_slave_0: entered promiscuous mode
[  317.142344][T17734] hsr_slave_1: entered promiscuous mode
[  317.144413][T17734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.150184][T17734] Cannot create hsr debugfs directory
[  317.258619][ T5860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.325591][T17765] netlink: 'syz.2.3875': attribute type 1 has an invalid length.
[  317.360553][T17765] 8021q: adding VLAN 0 to HW filter on device bond21
[  317.415825][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.419326][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.434148][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.453913][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.461718][ T5860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.467914][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.547838][ T5860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.657488][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3880'.
[  317.662372][T17780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3880'.
[  317.710205][T17767] chnl_net:caif_netlink_parms(): no params data found
[  317.823349][ T5860] bridge_slave_1: left allmulticast mode
[  317.827173][ T5860] bridge_slave_1: left promiscuous mode
[  317.829539][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.847193][ T5860] bridge_slave_0: left allmulticast mode
[  317.848906][ T5860] bridge_slave_0: left promiscuous mode
[  317.850918][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.201283][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.208314][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.212955][ T5860] bond0 (unregistering): Released all slaves
[  318.380347][T17767] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.383466][T17767] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.387785][T17767] bridge_slave_0: entered allmulticast mode
[  318.392008][T17767] bridge_slave_0: entered promiscuous mode
[  318.402260][T17767] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.408881][T17767] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.412024][T17767] bridge_slave_1: entered allmulticast mode
[  318.416508][T17767] bridge_slave_1: entered promiscuous mode
[  318.519960][T17767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.543780][T17767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.602993][T17767] team0: Port device team_slave_0 added
[  318.614390][ T5860] hsr_slave_0: left promiscuous mode
[  318.622562][ T5860] hsr_slave_1: left promiscuous mode
[  318.627243][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.629842][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.632935][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.637317][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.656004][ T5831] Bluetooth: hci0: command tx timeout
[  318.671278][ T5860] veth1_macvtap: left promiscuous mode
[  318.673693][ T5860] veth0_macvtap: left promiscuous mode
[  318.676883][ T5860] veth1_vlan: left promiscuous mode
[  318.679162][ T5860] veth0_vlan: left promiscuous mode
[  319.032683][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3887'.
[  319.272840][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  319.309117][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  319.528886][ T5831] Bluetooth: hci2: command tx timeout
[  319.683928][T17767] team0: Port device team_slave_1 added
[  319.751879][T17767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.766926][T17767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.777862][T17767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.783784][T17767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.792978][T17767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.811390][T17767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.870994][T17767] hsr_slave_0: entered promiscuous mode
[  319.873385][T17767] hsr_slave_1: entered promiscuous mode
[  319.878049][T17767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.880448][T17767] Cannot create hsr debugfs directory
[  320.052144][T17734] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  320.076379][T17734] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  320.121212][T17734] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  320.134423][T17734] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  320.179480][T17817] netlink: 'syz.2.3890': attribute type 1 has an invalid length.
[  320.221544][T17817] 8021q: adding VLAN 0 to HW filter on device bond22
[  320.246915][T17817] veth1: entered promiscuous mode
[  320.281051][T17767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.374739][T17767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.419354][T17734] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.461736][T17767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.481869][T17734] 8021q: adding VLAN 0 to HW filter on device team0
[  320.488549][  T434] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.491432][  T434] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.512514][  T434] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.515381][  T434] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.544108][T17767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.563740][T17831] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3893'.
[  320.613934][T17834] netlink: 'syz.2.3894': attribute type 11 has an invalid length.
[  320.621715][T17834] netlink: 'syz.2.3894': attribute type 11 has an invalid length.
[  320.624032][T17834] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3894'.
[  320.674138][ T5860] bridge_slave_1: left allmulticast mode
[  320.680713][ T5860] bridge_slave_1: left promiscuous mode
[  320.683078][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.702686][ T5860] bridge_slave_0: left allmulticast mode
[  320.704467][ T5860] bridge_slave_0: left promiscuous mode
[  320.708447][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.725877][ T5831] Bluetooth: hci0: command tx timeout
[  320.957876][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.962932][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.967811][ T5860] bond0 (unregistering): Released all slaves
[  321.050311][T17767] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  321.071376][T17767] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  321.114132][T17767] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  321.122582][T17767] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  321.160761][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.236514][T17734] veth0_vlan: entered promiscuous mode
[  321.298443][ T5860] hsr_slave_0: left promiscuous mode
[  321.301195][ T5860] hsr_slave_1: left promiscuous mode
[  321.303904][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.311267][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3901'.
[  321.314068][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.318720][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.321024][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.337954][ T5860] veth1_macvtap: left promiscuous mode
[  321.339777][ T5860] veth0_macvtap: left promiscuous mode
[  321.341990][ T5860] veth1_vlan: left promiscuous mode
[  321.344095][ T5860] veth0_vlan: left promiscuous mode
[  321.367983][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'.
[  321.607921][ T5831] Bluetooth: hci2: command tx timeout
[  321.697831][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  321.727294][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  322.090143][T17734] veth1_vlan: entered promiscuous mode
[  322.152908][T17767] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.193296][T17767] 8021q: adding VLAN 0 to HW filter on device team0
[  322.205580][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.207767][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.237419][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.240285][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.276357][T17734] veth0_macvtap: entered promiscuous mode
[  322.302517][T17734] veth1_macvtap: entered promiscuous mode
[  322.332905][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.350648][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.359265][T17734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.362014][T17734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.374286][T17734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.378326][T17734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.471613][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.474103][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.519011][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.521618][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.534550][T17878] netlink: 'syz.2.3905': attribute type 1 has an invalid length.
[  322.539196][T17878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3905'.
[  322.542204][T17878] netlink: 'syz.2.3905': attribute type 1 has an invalid length.
[  322.592585][T17767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.673366][T17767] veth0_vlan: entered promiscuous mode
[  322.683509][T17767] veth1_vlan: entered promiscuous mode
[  322.702206][T17767] veth0_macvtap: entered promiscuous mode
[  322.708439][T17767] veth1_macvtap: entered promiscuous mode
[  322.720022][T17767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.728124][T17767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.736223][T17767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.739242][T17767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.742273][T17767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.746846][T17767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.808149][  T434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.813693][  T434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.838671][  T434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.841439][  T434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.574492][ T7371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.809092][ T7371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.845736][ T1117] block nbd1: Possible stuck request ffff8880226c8000: control (read@0,1024B). Runtime 150 seconds
[  323.850303][ T1117] block nbd1: Possible stuck request ffff8880226c8200: control (read@1024,1024B). Runtime 150 seconds
[  323.855564][ T1117] block nbd1: Possible stuck request ffff8880226c8400: control (read@2048,1024B). Runtime 150 seconds
[  323.861370][ T1117] block nbd1: Possible stuck request ffff8880226c8600: control (read@3072,1024B). Runtime 150 seconds
[  324.014319][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.023614][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.027810][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.033255][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.042521][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.061065][ T7371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.205021][T17890] chnl_net:caif_netlink_parms(): no params data found
[  324.264400][T17890] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.267468][T17890] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.270088][T17890] bridge_slave_0: entered allmulticast mode
[  324.273831][T17890] bridge_slave_0: entered promiscuous mode
[  324.279834][T17890] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.282430][T17890] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.285758][T17890] bridge_slave_1: entered allmulticast mode
[  324.288924][T17890] bridge_slave_1: entered promiscuous mode
[  324.331456][T17890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.359175][T17890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.418078][ T7371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.430230][T17890] team0: Port device team_slave_0 added
[  324.441326][T17890] team0: Port device team_slave_1 added
[  324.502879][T17890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.513892][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.535470][T17890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.541414][T17890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.556014][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.571744][T17890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.589461][T17905] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3911'.
[  324.595115][T17905] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3911'.
[  324.598002][T17905] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3911'.
[  324.636502][T17890] hsr_slave_0: entered promiscuous mode
[  324.639781][T17890] hsr_slave_1: entered promiscuous mode
[  324.643036][T17890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.650501][T17890] Cannot create hsr debugfs directory
[  324.715398][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  324.718888][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  324.722770][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  324.731488][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  324.734342][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  324.800019][T17913] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3914'.
[  324.938668][T17918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3916'.
[  324.943955][T17918] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3916'.
[  324.958980][T17908] chnl_net:caif_netlink_parms(): no params data found
[  325.044300][T17908] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.050943][T17908] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.054082][T17908] bridge_slave_0: entered allmulticast mode
[  325.061620][T17908] bridge_slave_0: entered promiscuous mode
[  325.092604][T17908] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.096119][T17908] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.098934][T17908] bridge_slave_1: entered allmulticast mode
[  325.102348][T17908] bridge_slave_1: entered promiscuous mode
[  325.146771][T17908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.156495][T17908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.233312][ T7371] bridge_slave_1: left allmulticast mode
[  325.236899][ T7371] bridge_slave_1: left promiscuous mode
[  325.238804][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.243074][ T7371] bridge_slave_0: left allmulticast mode
[  325.252288][ T7371] bridge_slave_0: left promiscuous mode
[  325.254283][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.494371][T17947] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3922'.
[  325.499187][T17947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3922'.
[  325.555487][T17948] netlink: 'syz.2.3922': attribute type 4 has an invalid length.
[  325.610911][ T7371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  325.613862][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3922'.
[  325.618313][ T7371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  325.622685][ T7371] bond0 (unregistering): Released all slaves
[  325.708363][T17908] team0: Port device team_slave_0 added
[  325.728379][T17908] team0: Port device team_slave_1 added
[  325.810317][T17908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.812550][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.826561][T17908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.839685][T17908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.842635][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.854263][T17908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.956642][T17908] hsr_slave_0: entered promiscuous mode
[  325.959384][T17908] hsr_slave_1: entered promiscuous mode
[  325.962297][T17908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.966334][T17908] Cannot create hsr debugfs directory
[  325.974652][ T7371] hsr_slave_0: left promiscuous mode
[  325.978395][ T7371] hsr_slave_1: left promiscuous mode
[  325.980471][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.982931][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.986651][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.988896][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.011734][ T7371] veth1_macvtap: left promiscuous mode
[  326.013600][ T7371] veth0_macvtap: left promiscuous mode
[  326.015729][ T7371] veth1_vlan: left promiscuous mode
[  326.017595][ T7371] veth0_vlan: left promiscuous mode
[  326.029088][   T33] audit: type=1804 audit(1752117521.758:10): pid=17955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3924" name="/newroot/1434/cgroup.controllers" dev="tmpfs" ino=7298 res=1 errno=0
[  326.030409][T17955] xt_TPROXY: Can be used only with -p tcp or -p udp
[  326.043095][   T33] audit: type=1800 audit(1752117521.758:11): pid=17955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3924" name="cgroup.controllers" dev="tmpfs" ino=7298 res=0 errno=0
[  326.085310][ T5831] Bluetooth: hci0: command tx timeout
[  326.532508][ T7371] team0 (unregistering): Port device team_slave_1 removed
[  326.572697][ T7371] team0 (unregistering): Port device team_slave_0 removed
[  326.807370][ T5831] Bluetooth: hci2: command tx timeout
[  327.081274][T17957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3925'.
[  327.186425][T17890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  327.190795][T17959] ip6_vti0: left promiscuous mode
[  327.194487][T17959] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  327.222099][T17890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  327.226819][T17890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  327.261280][T17908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.270551][T17890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  327.349436][T17908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.432892][T17908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.503975][T17908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.522116][T17890] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.541356][T17890] 8021q: adding VLAN 0 to HW filter on device team0
[  327.568285][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.570484][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.576155][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.578346][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.633838][ T7371] bridge_slave_1: left allmulticast mode
[  327.645139][ T7371] bridge_slave_1: left promiscuous mode
[  327.647039][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.661915][ T7371] bridge_slave_0: left allmulticast mode
[  327.663713][ T7371] bridge_slave_0: left promiscuous mode
[  327.675906][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.962440][ T7371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.971790][ T7371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.978073][ T7371] bond0 (unregistering): Released all slaves
[  328.033600][T17908] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  328.062498][T17908] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  328.093914][T17908] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  328.117446][T17908] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  328.167072][ T5831] Bluetooth: hci0: command tx timeout
[  328.198679][T17890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.357297][T17890] veth0_vlan: entered promiscuous mode
[  328.370612][T17908] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.379231][ T7371] hsr_slave_0: left promiscuous mode
[  328.381351][ T7371] hsr_slave_1: left promiscuous mode
[  328.383535][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.386844][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.389996][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.392253][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.421147][ T7371] veth1_macvtap: left promiscuous mode
[  328.422935][ T7371] veth0_macvtap: left promiscuous mode
[  328.424694][ T7371] veth1_vlan: left promiscuous mode
[  328.427470][ T7371] veth0_vlan: left promiscuous mode
[  328.796534][ T7371] team0 (unregistering): Port device team_slave_1 removed
[  328.830270][ T7371] team0 (unregistering): Port device team_slave_0 removed
[  328.885080][ T5831] Bluetooth: hci2: command tx timeout
[  329.390799][T18006] bpq0: left promiscuous mode
[  329.392744][T18006] bpq0: left allmulticast mode
[  329.397397][T18006] 
[  329.398418][T18006] ======================================================
[  329.401147][T18006] WARNING: possible circular locking dependency detected
[  329.403884][T18006] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  329.407746][T18006] ------------------------------------------------------
[  329.410443][T18006] syz.2.3937/18006 is trying to acquire lock:
[  329.412718][T18006] ffff88811951a470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720
[  329.416441][T18006] 
[  329.416441][T18006] but task is already holding lock:
[  329.419268][T18006] ffffffff8f6753b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  329.422853][T18006] 
[  329.422853][T18006] which lock already depends on the new lock.
[  329.422853][T18006] 
[  329.426733][T18006] 
[  329.426733][T18006] the existing dependency chain (in reverse order) is:
[  329.430106][T18006] 
[  329.430106][T18006] -> #2 (nr_node_list_lock){+...}-{3:3}:
[  329.433032][T18006]        lock_acquire+0x120/0x360
[  329.434986][T18006]        _raw_spin_lock_bh+0x36/0x50
[  329.437063][T18006]        nr_rt_device_down+0xa9/0x720
[  329.439134][T18006]        nr_device_event+0x137/0x150
[  329.441161][T18006]        notifier_call_chain+0x1b6/0x3e0
[  329.443320][T18006]        __dev_notify_flags+0x18d/0x2e0
[  329.445099][T18006]        netif_change_flags+0xe8/0x1a0
[  329.446852][T18006]        dev_change_flags+0x130/0x260
[  329.448838][T18006]        dev_ioctl+0x7b4/0x1150
[  329.450758][T18006]        sock_do_ioctl+0x22c/0x300
[  329.452737][T18006]        sock_ioctl+0x576/0x790
[  329.454342][T18006]        __se_sys_ioctl+0xfc/0x170
[  329.455892][T18006]        do_syscall_64+0xfa/0x3b0
[  329.457539][T18006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.460026][T18006] 
[  329.460026][T18006] -> #1 (nr_neigh_list_lock){+...}-{3:3}:
[  329.462747][T18006]        lock_acquire+0x120/0x360
[  329.464281][T18006]        _raw_spin_lock_bh+0x36/0x50
[  329.466294][T18006]        nr_remove_neigh+0x25/0xe0
[  329.468317][T18006]        nr_add_node+0x1d9f/0x2570
[  329.470243][T18006]        nr_rt_ioctl+0xc12/0xd50
[  329.472141][T18006]        sock_do_ioctl+0xdc/0x300
[  329.473997][T18006]        sock_ioctl+0x576/0x790
[  329.475470][T18006]        __se_sys_ioctl+0xfc/0x170
[  329.477088][T18006]        do_syscall_64+0xfa/0x3b0
[  329.478858][T18006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.481061][T18006] 
[  329.481061][T18006] -> #0 (&nr_node->node_lock){+...}-{3:3}:
[  329.483431][T18006]        validate_chain+0xb9b/0x2140
[  329.485056][T18006]        __lock_acquire+0xab9/0xd20
[  329.486737][T18006]        lock_acquire+0x120/0x360
[  329.488528][T18006]        _raw_spin_lock_bh+0x36/0x50
[  329.490259][T18006]        nr_rt_device_down+0x12a/0x720
[  329.491912][T18006]        nr_device_event+0x137/0x150
[  329.493467][T18006]        notifier_call_chain+0x1b6/0x3e0
[  329.495151][T18006]        __dev_notify_flags+0x18d/0x2e0
[  329.496822][T18006]        netif_change_flags+0xe8/0x1a0
[  329.498457][T18006]        dev_change_flags+0x130/0x260
[  329.500134][T18006]        dev_ioctl+0x7b4/0x1150
[  329.501638][T18006]        sock_do_ioctl+0x22c/0x300
[  329.503204][T18006]        sock_ioctl+0x576/0x790
[  329.504712][T18006]        __se_sys_ioctl+0xfc/0x170
[  329.506286][T18006]        do_syscall_64+0xfa/0x3b0
[  329.507893][T18006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.509956][T18006] 
[  329.509956][T18006] other info that might help us debug this:
[  329.509956][T18006] 
[  329.513212][T18006] Chain exists of:
[  329.513212][T18006]   &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock
[  329.513212][T18006] 
[  329.517581][T18006]  Possible unsafe locking scenario:
[  329.517581][T18006] 
[  329.519793][T18006]        CPU0                    CPU1
[  329.521410][T18006]        ----                    ----
[  329.523002][T18006]   lock(nr_node_list_lock);
[  329.524398][T18006]                                lock(nr_neigh_list_lock);
[  329.526698][T18006]                                lock(nr_node_list_lock);
[  329.528950][T18006]   lock(&nr_node->node_lock);
[  329.530419][T18006] 
[  329.530419][T18006]  *** DEADLOCK ***
[  329.530419][T18006] 
[  329.533215][T18006] 3 locks held by syz.2.3937/18006:
[  329.535063][T18006]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  329.538175][T18006]  #1: ffffffff8f675358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  329.541216][T18006]  #2: ffffffff8f6753b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  329.544294][T18006] 
[  329.544294][T18006] stack backtrace:
[  329.546150][T18006] CPU: 0 UID: 0 PID: 18006 Comm: syz.2.3937 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
[  329.546162][T18006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  329.546169][T18006] Call Trace:
[  329.546175][T18006]  <TASK>
[  329.546182][T18006]  dump_stack_lvl+0x189/0x250
[  329.546197][T18006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.546208][T18006]  ? __pfx__printk+0x10/0x10
[  329.546223][T18006]  ? print_lock_name+0xde/0x100
[  329.546235][T18006]  print_circular_bug+0x2ee/0x310
[  329.546248][T18006]  check_noncircular+0x134/0x160
[  329.546260][T18006]  validate_chain+0xb9b/0x2140
[  329.546270][T18006]  ? rt6_disable_ip+0x6b3/0x720
[  329.546282][T18006]  ? look_up_lock_class+0x74/0x170
[  329.546291][T18006]  ? register_lock_class+0x51/0x320
[  329.546300][T18006]  __lock_acquire+0xab9/0xd20
[  329.546310][T18006]  ? nr_rt_device_down+0x12a/0x720
[  329.546318][T18006]  lock_acquire+0x120/0x360
[  329.546326][T18006]  ? nr_rt_device_down+0x12a/0x720
[  329.546338][T18006]  ? nr_rt_device_down+0x12a/0x720
[  329.546346][T18006]  _raw_spin_lock_bh+0x36/0x50
[  329.546357][T18006]  ? nr_rt_device_down+0x12a/0x720
[  329.546365][T18006]  nr_rt_device_down+0x12a/0x720
[  329.546374][T18006]  nr_device_event+0x137/0x150
[  329.546385][T18006]  notifier_call_chain+0x1b6/0x3e0
[  329.546396][T18006]  __dev_notify_flags+0x18d/0x2e0
[  329.546407][T18006]  ? __pfx___dev_notify_flags+0x10/0x10
[  329.546416][T18006]  ? __dev_change_flags+0x52e/0x6d0
[  329.546427][T18006]  ? __pfx___dev_change_flags+0x10/0x10
[  329.546436][T18006]  ? dev_ioctl+0x7a4/0x1150
[  329.546444][T18006]  ? full_name_hash+0x92/0xe0
[  329.546459][T18006]  netif_change_flags+0xe8/0x1a0
[  329.546470][T18006]  dev_change_flags+0x130/0x260
[  329.546480][T18006]  dev_ioctl+0x7b4/0x1150
[  329.546488][T18006]  sock_do_ioctl+0x22c/0x300
[  329.546496][T18006]  ? __pfx_sock_do_ioctl+0x10/0x10
[  329.546502][T18006]  ? __lock_acquire+0xab9/0xd20
[  329.546512][T18006]  sock_ioctl+0x576/0x790
[  329.546524][T18006]  ? __pfx_sock_ioctl+0x10/0x10
[  329.546585][T18006]  ? __fget_files+0x2a/0x420
[  329.546599][T18006]  ? __fget_files+0x3a0/0x420
[  329.546610][T18006]  ? __fget_files+0x2a/0x420
[  329.546622][T18006]  ? bpf_lsm_file_ioctl+0x9/0x20
[  329.546632][T18006]  ? __pfx_sock_ioctl+0x10/0x10
[  329.546643][T18006]  __se_sys_ioctl+0xfc/0x170
[  329.546652][T18006]  do_syscall_64+0xfa/0x3b0
[  329.546660][T18006]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.546667][T18006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.546674][T18006]  ? exc_page_fault+0x9f/0xf0
[  329.546685][T18006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.546693][T18006] RIP: 0033:0x7f0b29f8e929
[  329.546703][T18006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.546713][T18006] RSP: 002b:00007f0b2ad78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  329.546723][T18006] RAX: ffffffffffffffda RBX: 00007f0b2a1b6080 RCX: 00007f0b29f8e929
[  329.546729][T18006] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007
[  329.546737][T18006] RBP: 00007f0b2a010b39 R08: 0000000000000000 R09: 0000000000000000
[  329.546742][T18006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.546748][T18006] R13: 0000000000000000 R14: 00007f0b2a1b6080 R15: 00007ffc3f9e59a8
[  329.546758][T18006]  </TASK>
[  329.676768][T17890] veth1_vlan: entered promiscuous mode
[  329.723489][T17908] 8021q: adding VLAN 0 to HW filter on device team0
[  329.753008][T17890] veth0_macvtap: entered promiscuous mode
[  329.759213][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.761703][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.777911][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.780747][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.809126][T17890] veth1_macvtap: entered promiscuous mode
[  329.861965][T17890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.882774][T17890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.626462][ T5860] bridge_slave_1: left allmulticast mode
[  330.628760][ T5860] bridge_slave_1: left promiscuous mode
[  330.631114][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.636325][ T5860] bridge_slave_0: left allmulticast mode
[  330.638565][ T5860] bridge_slave_0: left promiscuous mode
[  330.640693][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.737196][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.742144][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.748107][ T5860] bond0 (unregistering): Released all slaves
[  330.829309][ T5860] hsr_slave_0: left promiscuous mode
[  330.831979][ T5860] hsr_slave_1: left promiscuous mode
[  330.834534][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.838687][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.939798][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  330.950178][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  331.595247][ T5860] bridge_slave_1: left allmulticast mode
[  331.597178][ T5860] bridge_slave_1: left promiscuous mode
[  331.599094][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.605480][ T5860] bridge_slave_0: left allmulticast mode
[  331.607234][ T5860] bridge_slave_0: left promiscuous mode
[  331.609124][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.689033][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.693231][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.697059][ T5860] bond0 (unregistering): Released all slaves
[  331.809183][ T5860] hsr_slave_0: left promiscuous mode
[  331.811808][ T5860] hsr_slave_1: left promiscuous mode
[  331.814289][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.818953][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.821802][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.824595][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  331.831349][ T5860] veth1_macvtap: left promiscuous mode
[  331.833555][ T5860] veth0_macvtap: left promiscuous mode
[  331.836073][ T5860] veth1_vlan: left promiscuous mode
[  331.837712][ T5860] veth0_vlan: left promiscuous mode
[  332.008299][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  332.037874][ T5860] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
03:18:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000037de RDI=00000000000037df RBP=00000000000003f8 RSP=ffffc9000287f030
R8 =ffff888020f78237 R9 =1ffff110041ef046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7904 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0b2ad786c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0b29e5ef00 CR3=000000003ab62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=14636770368bca00 RBX=ffffffff81975d58 RCX=14636770368bca00 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d1000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555652b6d000 CR3=0000000110448000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
