last executing test programs:

2m25.49302723s ago: executing program 1 (id=5842):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x2e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x80000000, 0x9c}})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0)
listen(r4, 0x5)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000000740)=""/241, 0xf1}], 0x1}, 0x1f00)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2cf700002e0001e929bd70100000000008000000", @ANYRES32=r7, @ANYBLOB="0c00008008000900640101010500018099000000"], 0x2c}], 0x1, 0x0, 0xfffffffffffffd2b}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x4048800}, 0x20008801)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x29, 0x1, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES64=r1, @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00060002000000000000000c00060001000000000000000c00060003000000000000000c00020008000000000000000c0008000900000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

2m24.633305282s ago: executing program 1 (id=5846):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x5)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={<r3=>0x0, 0xbf, "0bf5f3f86c58dda913e0c06acaf9247e291d577787aec42abd3289caa8bb7b5732e1d1ffa3357093d0175c7cc995e84855181d6377a8879d0fd32a27f459b71741bdef2bcd09d556da0660ac1c3e43542d3b4d7ebc9de07123052ca5e65cccb7087efe3dc86ecdba7f21d658b06b86778e108a9ec02f1dbb68c222ee11a492d4021bf3dfbbd1ac166cb322e27d563fd4eb953c3a94b8bd1b67f192f38db6abb1b03a116f94344adaec55702bbf3779bed31dd2f184e62e73d02827fc833737"}, &(0x7f0000000240)=0xc7)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x2, 0xfe, 0x9, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x4, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={<r5=>r3, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x2, 0x100, 0x50}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080), 0x4)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r6], 0xc)
shutdown(r0, 0x1)

2m23.799914702s ago: executing program 1 (id=5855):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001020000000000000000000001"], 0x1c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000680)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x14)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080001040000fbdbdf250100000008000100030000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
connect$llc(r7, &(0x7f00000000c0)={0x1a, 0x6, 0x6, 0xb3, 0x3, 0x0, @link_local}, 0x10)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0xfffffffffffffec1, 0x4040001}], 0x1, 0x40804)
listen(r7, 0x2e)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000240)={r9}, &(0x7f0000000280)=0x8)
listen(r1, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911087000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2008000080049000038b1f3db406bf939000000000006907864010101ac141caa94040000890b98ac1414bbe000000201ffff4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780001"], 0x0)

2m23.703555258s ago: executing program 1 (id=5857):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500fc00000000000108000f"], 0x74}}, 0x0)

2m23.643484349s ago: executing program 1 (id=5858):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

2m23.642155935s ago: executing program 1 (id=5859):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x5, 0x9, 0x1}, {0x7, 0x58, 0x2}, {0x3, 0x7, 0x3a, 0x40}, {0x3, 0x6, 0x5, 0x4}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e000000180002801a00120006001800090000000500160002000000"], 0x4c}}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180400000087b56e02e7423886655501a72f3000d74e7c244269b25b242cafb705f393bfe3a5806b904cafe46b48b4cde14cdd14a4f5a097b49f", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="550000000314018ebfafed00fcdbdf250900020073567a32000063f9a2b30041000e000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r7}, 0x18)
unshare(0x64000600)
socket$inet6(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0})

2m8.57260679s ago: executing program 32 (id=5859):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x5, 0x9, 0x1}, {0x7, 0x58, 0x2}, {0x3, 0x7, 0x3a, 0x40}, {0x3, 0x6, 0x5, 0x4}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e000000180002801a00120006001800090000000500160002000000"], 0x4c}}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180400000087b56e02e7423886655501a72f3000d74e7c244269b25b242cafb705f393bfe3a5806b904cafe46b48b4cde14cdd14a4f5a097b49f", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="550000000314018ebfafed00fcdbdf250900020073567a32000063f9a2b30041000e000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r7}, 0x18)
unshare(0x64000600)
socket$inet6(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0})

30.560379894s ago: executing program 3 (id=6342):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r2, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
socket(0x6, 0x6, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a0101020000000000000000000000000000000032"], 0x23c}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x24}, 0x64)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
close(r3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

28.7547481s ago: executing program 0 (id=6351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async)
connect$inet6(r0, &(0x7f0000000080), 0x1c) (async)

25.56810432s ago: executing program 3 (id=6342):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r2, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
socket(0x6, 0x6, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x24}, 0x64)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
close(r3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

23.587839369s ago: executing program 0 (id=6351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async)
connect$inet6(r0, &(0x7f0000000080), 0x1c) (async)

20.347037891s ago: executing program 3 (id=6342):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r2, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
socket(0x6, 0x6, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x24}, 0x64)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
close(r3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

18.068992812s ago: executing program 0 (id=6351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async)
connect$inet6(r0, &(0x7f0000000080), 0x1c) (async)

14.829581425s ago: executing program 3 (id=6342):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r2, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
socket(0x6, 0x6, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x24}, 0x64)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
close(r3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

12.610076728s ago: executing program 0 (id=6351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async)
connect$inet6(r0, &(0x7f0000000080), 0x1c) (async)

8.687988524s ago: executing program 3 (id=6342):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r2, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
socket(0x6, 0x6, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x24}, 0x64)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
close(r3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

6.245341463s ago: executing program 0 (id=6351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async)
connect$inet6(r0, &(0x7f0000000080), 0x1c) (async)

2.993049542s ago: executing program 3 (id=6342):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r2, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
socket(0x6, 0x6, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x24}, 0x64)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
close(r3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

823.726676ms ago: executing program 2 (id=6633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}, 0x1, 0x0, 0xff000000}, 0x0)

689.545725ms ago: executing program 2 (id=6634):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b9e85de1548995cdffafd097a7b30ae96b8ffa4fdae8bd5e2734e320f7824312f230a6f8aef6d4e5c0e8cc62f285a44baa036f70ae23ff19be40e68beeef5acd19904ee6a699cf7f9392ac56fa74af8baa4d87360e6d7e28712b20506f548464f55d5713ab76de651f9e50e5586918315388760c0a89075fc47cb6b1dca9901c33f03d07a30c04c74cccf6b6a9a9882d2c0e2f82f7b4cc29d8dd6e38862543a2acad0c5e1104287d6e46f5e127ab9761"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r1}, 0x20)
shutdown(r1, 0x1) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4)
r4 = socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = gettid()
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000304fdfffffffedbdf2500007400", @ANYRES32=r8, @ANYBLOB="51f003000750050008001300", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400)={0x0, <r11=>0x0}, &(0x7f0000000440)=0xc)
sendmsg$netlink(r5, &(0x7f00000007c0)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000700)={0xb0, 0x3a, 0x2, 0x70bd25, 0x25dfdbfd, "", [@generic="fb44e2361894d74a4fa1a42b8d7e0f305e8fa9e3605feb0a07687999007e8a707249a3632a3ddc6712b94c96fa", @generic="cbbc9acec4267a728614668f106a40feb35ad75aa807223a2f6fdffc6e510d04fc4497c23311b43f33a77088096fcf18ee333159dd008350826e0e55e4f30ead83ae63e0c963ec2b4e810030a393ce6398da2475b20796329839eba0ad1f829efb2b443d671e4127255a490fb1ac37f6"]}, 0xb0}], 0x1, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32, @ANYBLOB="9bf32c5b29c67fa14ae5b3a20fed3f514ac8338aeeee79ae4eb76da7ba902ed25ccbcb9df327afa2e97c11be73797004b05e956b003e52608e177ade9c13d1060563d609decf0316c1e692ee916f2175fcdd9f63da32461ab10353a7ba4933424c83b89c199681de51ab577288f5d51d32e1c0acaf374ee8815dc118b1e5c1d8b57a3c8a3bf8dc4593796f71124125e429"], 0xd8, 0x811}, 0x200408d0) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r12 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r12, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58)
sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc30a0476103c6133c7da6313848373c719a1f43ba5a765b8aa97caf7717fa063166951aa4e72d5616e6b42d6866fb308970430b2ff44c25b7dde2494389d1717c83f83ac7a632da0472bd6b0295b9f1fd1fc43099b1062bef744785158264f636cbf13926e7fcde7ebc1560a20961df3286df51b246ee7fe9474a8d51498bd90230bc89ea8dccb85035edd01aa93ed2f82297c3c3703990cb5201c7b92a04ea7abf9a36a488369161a9bfa42664d84860974fddbabed7eb509350917a3bbd427fe226bd1dd3420a7d711641babb2e36d9637c0b33a41a3578861d75e7e93c22ee94e9594258dc1883c2d749cad6e03b767555610c200efb5f104f91be7fb2513c97f3f279da2baedf7f91ed97ae33edef2ab348dded9df075b1ca5855866843aff902b6678075cb4a3d988ffd8ed61885400d1bcf6dc38c6be9b6428d4eba30711556510eb41b5c04590f11e393317a4fc988b39ecdbe322344c5ec4ed178e1dd35182a00f3ac345bfeea9936b6a015151332962bd28c5e1dbcdd825d51c78ef6db73170d9cfd47f2ca210ce8c103d37be1c61427bd3cf1bb5bcf9888f6e1631f404ea51f9cd8e0725459f9a531af19e2b533532f0b66fb5e9614d0895d35ccda358ac482a824fe67165bdaedcda5ddd86924c4fe5f22a043f92aed7a105fb54ec323273e660c17b8ae89d1546022320711ae0cab37564fc6b394f39e0b216227fa74b76c2a020d42f167891cbaf960fc0288547f2d31dceff3787135659a65878e5df65ce0004104a665098be576ebaf3733b6ba57e40f40ac74aad7d8b41db0f55513389faa84b1ce0fafed7018bcc5a687118bfab115b7a3163fb22af534406206065acf06066a5fb65f0b928cd25838c0c1a7b06bc42e622f502e515b87426b2a184b593bf35a4d454dc56881bbda1b9350f956e086196447a5052288aa0556e638d292bfd1abad58ef5db98f92694b30c3eda5b25a44688b24eadf579616c034ef688fad705c3dc99aafda0f7bbb591fd20e0ff96e8941188b9676b833aa91ba5ab1cf7acbdf16f14c843dd3cfeedf8e7628051f361ba328496c8a05aa68997257cb505dba270e132c437bc6df39134b0807fea53ecb84714ab0d9d8cda271e15bddac37ae4e0534322d649b74c90499919b771679c7211b4df2c80864809991750f966f52d217f63e80b7142b9205576133469a0a950060cd2fa0c25554b89900ebb6a991954990adeee517e55ff3abe4f3f7c07cb735b80be674d53ccc5bef27421c7bb602c7f22dde056ae0c85086f9850fe6a7dd108fd29c7f99f3d1316da10415b2e4e029762a39369cd8738e0a840690c5e2167099a6c1d59a6cc8827630b699da0d592e01c2db8af46daa48575fc2f4eeca2c3abf26ec776906572e712c6f0c57ec39ab4e004d994a341570a6e117edc13626aeaf794266a0f3103c84ae1300e6928b749cce7a1ba4e7609ceca262324cbc503cde9c897848a015c4d7cdb02cfcdcc53c36b8e4", 0x541}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c07b5d9b477bae53e422f8f9c16b2df519bbf67074a59b908b30b11f6b2509f0d30689cd274108e6a7fa45dc5aa7bdf0ace44fd503aa9dda1afc250f8328d1ec09fdac4bc25f279ccd3d4f75156d5dcd306b7bdc17a997a93f39fc13e023f71e4c52a39fd883e427c08b119aa0bd45a4bb0db9ec757f519217f31284f564fa9223a24f4fce98eb7dc39d5b6d267f063b0dcf1685636b463a5dcb6488c8ac150fb5e62ce484d744fe7bef6ff73a8ddbbf5a13f66dd43ab5a247ef6c27fa9eb964026015d60a6f73d22", 0xdb}, {&(0x7f0000000380)="48dc767c95a5b4d29c913593f20bc52fdf11cb7c85ebde381cf99252bdd475a5f479d9a2e89d8e971eafb34ff92728602e7cf2e95d3dfdfb9a7f352293202b5bbae0fc51b4", 0x45}, {&(0x7f00000016c0)="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", 0x421}], 0x3}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a29086fca7", 0x5}], 0x1}}], 0x3, 0x8010)

597.694557ms ago: executing program 2 (id=6635):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x45, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000101010200000000000000000a0000000c00198008000200050000000600124000030000380002802c00018014000300fe8000000000000000000000000000bb14000400f28800000000000000000000000000010600034000000000d982d13b16cc273876d3946e3320030b326697f81de3078dd86ef31253fb042d034fa07c1cc38ef91ddeb04b8c01307c474c8d553383a56d894e678f7005360008"], 0x60}, 0x1, 0x0, 0x0, 0x20800}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00'})
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000100)=0x28)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28800000140a01010000000000000000020000090c0006400000000000000001080003400000000614000000110001c83709b80000000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x14048040)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x30, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "753212e625dc9e585e3dd16bb4c1940c0cafe886"}, @window={0x3, 0x3, 0xec}]}}}}}}}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='cma_release\x00', r8, 0x0, 0x4}, 0x18)
r9 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x80, 0x0}, 0x0)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r4, 0x1ad72f7)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000", 0x17}], 0x1}, 0x0)
close(0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0105c9bf31d7ba22001800000000000000180000000000000004de661a9bd00b5f46684aa0726b6b659b2d9f8247d081af032fd182f5211ac010a4be4521a6d44b4b0cc4730f769fe0e612714c942bb2051e2ea11fef9d105c2780a918d1fdf3e58303fe9abcce4c0de8badbcdacd416fa6d53fa6ee3e6064b2a"], &(0x7f00000003c0)=""/253, 0x1c, 0xfd, 0x1}, 0x28)

280.37079ms ago: executing program 2 (id=6636):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x24044001)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x194, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x897}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c044}, 0x20000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x161c, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000054)
r4 = socket$netlink(0x10, 0x3, 0x1b)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={<r6=>0x0, @empty, @broadcast}, &(0x7f00000007c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl1\x00', <r7=>0x0, 0x2f, 0xb, 0x8, 0x2, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x80, 0x1, 0x8000, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000008c0)={'vcan0\x00', <r8=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000940)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000009c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000a00)={'batadv0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', <r12=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a80)={<r13=>0x0, @broadcast, @dev}, &(0x7f0000000ac0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', <r14=>0x0, 0x29, 0x5, 0xfb, 0x7, 0x1, @loopback, @mcast2, 0x8, 0x8000, 0x200}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c80)={'ip6tnl0\x00', &(0x7f0000000c00)={'syztnl2\x00', <r16=>0x0, 0x29, 0x2, 0x8a, 0x6, 0x40, @empty, @private0, 0x10, 0x8, 0x3, 0xffff8000}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'ip6tnl0\x00', &(0x7f0000000cc0)={'syztnl2\x00', <r17=>0x0, 0x2f, 0x4, 0x2, 0x0, 0x5a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0xff, 0x1a4000}})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x194, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008000}, 0x200080d0)
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000001000), r4)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x4c, r18, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40c01)
r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000011c0)={'wlan0\x00', <r20=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, r19, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r20}, @val={0xc, 0x99, {0x4, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000001680)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)={0x2d8, r19, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r20}, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_NAN_FUNC={0x2b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x174, 0xe, 0x0, 0x1, [{0xed, 0x0, "dcab229c85440e8c8c53a5fa007f7fbd5c455757ed1397390c0bdbe634dcac1a24bb30c34a32a24a8b6b4f11bec62b931f19c5350b3bbbdba1a2e51647b1b80c42dcbf6d96cb643763ae0fe0fa2ff0a5df17fd766c4f72e043172874800189a1d8a7c0969018a67b9e04352233b42d218b3fe6b780bb017c00d90015d6321c095ee00e8c1ec1785174c3bb204c969b79f051bc993a7bf74954f2f10dfcca5d57b9eec0f6a9c477ec03b04f01ce3f0d59b890c8213760ee8f3a5a6172a47e906baa89f8c56f3234dcb28106fbcce0509438e39c5859d4a6b1e070d3d40d69e15de3bd6e635e7ab7fd47"}, {0x80, 0x0, "1a0e4686cf40d681072852832749886dfe2d15762f70baf2dd2130fb5b593d98ddd8e3db59dadca73cba1ad8a7c810c231e5ce370d775225399340d5d005aeb2ea1410fbe6d7bd11959c140128568515d03ab205e5bc82526c1c42475635d6373f138f3bb7018c7436574c3487cd85e5e3d616ffaaf0174b1be66d31"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x120, 0xd, 0x0, 0x1, [{0x93, 0x0, "01a87c81c87d86279b7ddd8adb82c5610bb871e5b9517ef96629f8590a709594dd7bf6889eb5dbf76d19cfaa5e9dcba67b4d07662fea482608e1a8778fd6438c14b34800e0d13af1efa08f742a451a1e2d9dfa24e272cd20c578b56a5c0ba17cf1783ac9b8ffbde8015867386431c929fb93760b219db9f478384f9d01045d3ecf49dc42f728b533ca3e823ca4b5f0"}, {0x14, 0x0, "b8c36ead52686578ec2b6fa19042ad75"}, {0x74, 0x0, "f002c5fca95618838db7b0f4bf9dbea0d3af6416d33e0e9f7cbf17d239b80ecf298d11e1d0c6279004bd7a98d3364e5f7593dbcfa41b61c3c04cfd16c54822374d211cbeb2d73d469a01c3abf12f874c05a3401b6d579803af8527f24918f755666d36a72e954fc1a4f307ec188f45ee"}]}]}]}, 0x2d8}}, 0x890)

85.065174ms ago: executing program 2 (id=6637):
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6d}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_FILS_KEK={0x12, 0xf2, "ef689e5ad1101d43d0e28f3bd898"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff0}}, 0x101, 0x1}, &(0x7f00000002c0)=0x90)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={<r2=>r1, 0x3, 0xc7}, &(0x7f0000000340)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000380)="e174c1bdc7bdc31b291ac2c04f2ddff1dc651920455a3099c8b4298661818fd8a2190479ac8e9faa942f7e70cc490dd1d279ded3c271949c0888de379197a021f0c606a14420cb601130858e32e0b471359fba2b25aadc7ea4debd628c6c1e0adddab72062626fa0f6fcf48421f7560f7aef0bbbec7d37b6c95d0128c24dc6e2724d7b5f6147f2ca1ea0266f2c8c95e9eb9a97b30e1e5af716dcbf5876247dd60d599bebfcf9fb342080610d1dd76d5cba3a590855daa32ac542abd44bf292a19a23cdc74f3e331ee71dfe48eb67df4f3b611c22f36bd7539d520b9e6e4dd8942df85a440805d3e65c478202ee40be41", 0xf0, 0x0, &(0x7f00000004c0)={0x11, 0x4, r3, 0x1, 0x3}, 0x14)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000005c0)={0x5, &(0x7f0000000500)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x16}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x824c}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x6000014)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000880)={<r7=>r5})
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@gettfilter={0x44, 0x2e, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x3}, {0xffe0, 0xfffc}, {0xffeb, 0x9}}, [{0x8, 0xb, 0xbb}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x81)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000a00)={@multicast1, @local, 0xffffffffffffffff, "9fc0c4317145a1b7b3b781676c21d5d99cc86e351a53f3ae082fce3fa57a7189", 0x4, 0x6, 0x3, 0x3}, 0x3c)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000a40)={r2, 0x35}, 0x8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/63, 0x3f, 0x0, &(0x7f0000000ac0)=""/235, 0xeb}, &(0x7f0000000c00)=0x40)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c40)={@loopback, 0x1, 0x1, 0x1, 0xe, 0xcc, 0xe}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'pim6reg1\x00'})
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000cc0)={r1, 0x0, 0x2, 0x8, 0x7, 0x1}, &(0x7f0000000d00)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)=@ipv6_getroute={0x118, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x10, 0x20, 0xe, 0xfc, 0x4, 0xfd, 0x7, 0x2800}, [@RTA_METRICS={0xd6, 0x8, 0x0, 0x1, "00c2799408d5b8547e1b020e8dba31c428ffc4bccddb10d4a4809fbc7796c8e3873624bb24f2b1c6a38526f68527ce18ddb89c52111f3543c6efc986db97dbdb3e44c51d96e307e3e74a28194c85cd06b5551a7ca4d8518fbea9c58cdb63bb5d59ef66b92be1ae0293dbfcad0a93a72e54294bcbd8483bf6ba5432ba313d57bd73a3121b25b88572d6e9b70a48e240fd27c88fe531cc120a397979e1c4baebd91f5b85d02e1c9a2f0bdec6943e14658f944d39805abeabb1fe46cdbce5a90c2ba5d236586b05b16fdbb9bce752068dba3028"}, @RTA_PREF={0x5, 0x14, 0x3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000f40)={r2, @in6={{0xa, 0x4e23, 0x8, @remote, 0x7}}, 0x1ff, 0x7}, 0x90)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001080)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, r9, 0x120, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000001200)={'ip6_vti0\x00', {0x2, 0x0, @multicast2}})

1.479447ms ago: executing program 2 (id=6638):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0xf3a, 0x0)
splice(r1, 0x0, r8, 0x0, 0x80, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$phonet_pipe(r9, 0x0, 0x0, 0x80800)
read(r1, &(0x7f0000000240)=""/233, 0xe9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendto$rxrpc(r7, &(0x7f0000000440)="10fa07061815e196d5df16a9f0ba3da74ac3bd320b0f7fc5b7df13a2fd6cce47acfcb2d652a2bb7befdcb3c703eb6861c14566004a1ec53c04a25899c98b9cc79898f0d0da967808383cdfb4febcfce810c4100f1bca8d55a130bade8481a0d5bf273b17f716360c7da321281de2e8158defac3d3ffd9fe36ce05dd65a609bb4d226726cb854773a6c4992137af3a0cb22041873865335cb241ce771ab45db8ccb39b9c501ea296790a2134e288081e2a413f111b53aeffd27b6a62ed94161566b1885b5e79c46f6e54fd254c8e62d576ca9456e4aca7d02d28f64ad452d5c8ae5", 0xe1, 0x94, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}})
write(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r11, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011)

0s ago: executing program 0 (id=6351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x20000080) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async)
connect$inet6(r0, &(0x7f0000000080), 0x1c) (async)

kernel console output (not intermixed with test programs):

reconfigured BSSID 50:50:50:50:50:50
[  595.904361][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.596633][T27530] __nla_validate_parse: 1 callbacks suppressed
[  596.596650][T27530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6503'.
[  597.672011][T23857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  597.677219][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  597.683016][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  597.687346][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  597.691225][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  597.737338][T27543] wg1 speed is unknown, defaulting to 1000
[  597.924579][T27543] chnl_net:caif_netlink_parms(): no params data found
[  598.010872][T27543] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.013847][T27543] bridge0: port 1(bridge_slave_0) entered disabled state
[  598.016992][T27543] bridge_slave_0: entered allmulticast mode
[  598.021508][T27543] bridge_slave_0: entered promiscuous mode
[  598.026116][T27543] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.037418][T27543] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.040790][T27543] bridge_slave_1: entered allmulticast mode
[  598.044634][T27543] bridge_slave_1: entered promiscuous mode
[  598.087273][T27543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  598.094414][T27543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.129324][T27543] team0: Port device team_slave_0 added
[  598.139229][T27543] team0: Port device team_slave_1 added
[  598.178628][T27543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.181475][T27543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.191927][T27543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.198695][T27543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.201512][T27543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.212363][T27543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  598.263590][T27543] hsr_slave_0: entered promiscuous mode
[  598.266832][T27543] hsr_slave_1: entered promiscuous mode
[  598.275681][T27543] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  598.278797][T27543] Cannot create hsr debugfs directory
[  598.384404][T27543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.477210][T27543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.564410][T27543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.637159][T27543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.743611][T27543] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  598.750552][T27543] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  598.758621][T27543] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  598.763900][T27543] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  598.800672][T27543] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.803269][T27543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.806330][T27543] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.809436][T27543] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.877114][T27543] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.911250][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state
[  598.914577][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.933822][T27543] 8021q: adding VLAN 0 to HW filter on device team0
[  598.942021][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.944613][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.975568][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.978147][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.983405][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  598.996825][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  599.000578][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  599.003632][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  599.008680][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  599.037103][T27571] wg1 speed is unknown, defaulting to 1000
[  599.169549][T27543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  599.181159][T27571] chnl_net:caif_netlink_parms(): no params data found
[  599.254963][T27571] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.257387][T27571] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.261116][T27571] bridge_slave_0: entered allmulticast mode
[  599.263849][T27571] bridge_slave_0: entered promiscuous mode
[  599.267501][T27571] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.271966][T27571] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.278522][T27571] bridge_slave_1: entered allmulticast mode
[  599.285135][T27571] bridge_slave_1: entered promiscuous mode
[  599.328448][T27571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  599.339476][T27571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  599.408148][T27543] veth0_vlan: entered promiscuous mode
[  599.423098][T27594] xt_hashlimit: max too large, truncated to 1048576
[  599.425338][T27594] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  599.439132][T27594] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6513'.
[  599.453405][T27571] team0: Port device team_slave_0 added
[  599.456339][T27543] veth1_vlan: entered promiscuous mode
[  599.478124][T27571] team0: Port device team_slave_1 added
[  599.542955][T27571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  599.545950][T27571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  599.567626][T27571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  599.576452][T27571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  599.580293][T27571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  599.592980][T27571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  599.644532][T27571] hsr_slave_0: entered promiscuous mode
[  599.647022][T27571] hsr_slave_1: entered promiscuous mode
[  599.652083][T27571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  599.655372][T27571] Cannot create hsr debugfs directory
[  599.748560][ T5830] Bluetooth: hci1: command tx timeout
[  599.811407][T27543] veth0_macvtap: entered promiscuous mode
[  599.837167][T27543] veth1_macvtap: entered promiscuous mode
[  599.899827][T27571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.923128][T27543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  599.931317][T27543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  599.943373][T27543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  599.946182][T27543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.949958][T27543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.952690][T27543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.029772][T27571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.077908][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.080518][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.125690][T27571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.147313][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.151416][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.205852][T27571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.406361][T27571] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  600.411263][T27571] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  600.441149][T27571] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  600.445754][T27571] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  600.545230][T27571] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.563757][T27571] 8021q: adding VLAN 0 to HW filter on device team0
[  600.573230][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.575639][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  600.586423][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.588957][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  600.735364][T27571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.773610][T27571] veth0_vlan: entered promiscuous mode
[  600.780187][T27571] veth1_vlan: entered promiscuous mode
[  600.823552][T27571] veth0_macvtap: entered promiscuous mode
[  600.827638][T27571] veth1_macvtap: entered promiscuous mode
[  600.854262][T27571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  600.864953][T27571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  600.891758][T27571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.895328][T27571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.899270][T27571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.902355][T27571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.004887][ T8784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  601.009825][ T8784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  601.029165][ T5830] Bluetooth: hci3: command tx timeout
[  601.064506][ T8784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  601.068895][ T8784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.561857][T27622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6517'.
[  602.564829][T27622] netlink: 'syz.2.6517': attribute type 5 has an invalid length.
[  602.567518][T27622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6517'.
[  602.577187][T27622] geneve41: entered promiscuous mode
[  602.585700][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  602.589068][T27622] geneve41: entered allmulticast mode
[  602.593462][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  602.598070][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  602.602748][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  602.606752][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  602.639075][T27623] wg1 speed is unknown, defaulting to 1000
[  602.732927][T27623] chnl_net:caif_netlink_parms(): no params data found
[  602.784199][T27623] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.786500][T27623] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.802484][T27623] bridge_slave_0: entered allmulticast mode
[  602.808575][T27623] bridge_slave_0: entered promiscuous mode
[  602.819783][T27623] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.822088][T27623] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.824558][T27623] bridge_slave_1: entered allmulticast mode
[  602.827354][T27623] bridge_slave_1: entered promiscuous mode
[  602.867454][T27623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.900707][T27623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.953294][T27623] team0: Port device team_slave_0 added
[  602.957278][T27623] team0: Port device team_slave_1 added
[  603.003477][T27623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.005931][T27623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.014710][T27623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.021667][T27623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.024576][T27623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.035980][T27623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.069294][T27623] hsr_slave_0: entered promiscuous mode
[  603.072665][T27623] hsr_slave_1: entered promiscuous mode
[  603.075928][T27623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  603.078958][T27623] Cannot create hsr debugfs directory
[  603.174267][T27623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.231369][T27623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.305414][T27623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.358689][T27623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.500211][T27623] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  603.504559][T27623] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  603.508823][T27623] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  603.514202][T27623] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  603.556236][T27623] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.571306][T27623] 8021q: adding VLAN 0 to HW filter on device team0
[  603.577178][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.579562][ T8784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.589630][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.591979][ T8784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.713211][T27623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.739735][T27623] veth0_vlan: entered promiscuous mode
[  603.745074][T27623] veth1_vlan: entered promiscuous mode
[  603.760362][T27623] veth0_macvtap: entered promiscuous mode
[  603.764586][T27623] veth1_macvtap: entered promiscuous mode
[  603.773909][T27623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.780648][T27623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.786333][T27623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.790137][T27623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.793021][T27623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.796445][T27623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.847013][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.849962][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.873804][ T8788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.877249][ T8788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.972150][T27648] IPv6: sit4: Disabled Multicast RS
[  603.974944][T27648] sit4: entered allmulticast mode
[  604.092838][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  604.097233][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  604.104795][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  604.116166][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  604.125389][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  604.187528][T27652] wg1 speed is unknown, defaulting to 1000
[  604.265018][T27666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6524'.
[  604.270314][T27666] netlink: 'syz.2.6524': attribute type 5 has an invalid length.
[  604.272820][T27666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6524'.
[  604.287317][T27666] geneve42: entered promiscuous mode
[  604.291728][T27666] geneve42: entered allmulticast mode
[  604.334738][T27652] chnl_net:caif_netlink_parms(): no params data found
[  604.367047][T27671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6526'.
[  604.436686][T27652] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.439767][T27652] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.442220][T27652] bridge_slave_0: entered allmulticast mode
[  604.445100][T27652] bridge_slave_0: entered promiscuous mode
[  604.448759][T27652] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.451042][T27652] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.453444][T27652] bridge_slave_1: entered allmulticast mode
[  604.456298][T27652] bridge_slave_1: entered promiscuous mode
[  604.495832][T27652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.505795][T27652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.538306][T27652] team0: Port device team_slave_0 added
[  604.543665][T27652] team0: Port device team_slave_1 added
[  604.580981][T27671] wg1 speed is unknown, defaulting to 1000
[  604.581953][T27652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.585570][T27652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.598146][T27652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.606242][T27652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.614315][T27652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.627269][T27652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.703758][T27652] hsr_slave_0: entered promiscuous mode
[  604.706508][T27652] hsr_slave_1: entered promiscuous mode
[  604.712926][T27652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  604.715932][T27652] Cannot create hsr debugfs directory
[  604.900547][T27680] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6527'.
[  604.902396][T27652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.990192][T27652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.062442][T27652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.154567][T27652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.170485][T27692] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6530'.
[  605.173684][T27692] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6530'.
[  605.268903][T27652] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  605.277609][T27652] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  605.288705][T27652] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  605.296554][T27652] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  605.366873][T27652] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.387412][T27652] 8021q: adding VLAN 0 to HW filter on device team0
[  605.396884][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.399396][ T8788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.434878][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.437380][ T8788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.577112][T27652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.621151][T27652] veth0_vlan: entered promiscuous mode
[  605.627325][T27652] veth1_vlan: entered promiscuous mode
[  605.651517][T27652] veth0_macvtap: entered promiscuous mode
[  605.660585][T27652] veth1_macvtap: entered promiscuous mode
[  605.684444][T27652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.692441][T27652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.699927][T27652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.702767][T27652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.705716][T27652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.710109][T27652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.796414][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.799354][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.816042][ T8788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.819302][ T8788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.624585][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  607.630621][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  607.634647][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  607.640181][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  607.644061][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  607.676019][T27746] wg1 speed is unknown, defaulting to 1000
[  607.827724][T27746] chnl_net:caif_netlink_parms(): no params data found
[  607.900423][T27746] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.908212][T27746] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.919973][T27746] bridge_slave_0: entered allmulticast mode
[  607.925677][T27746] bridge_slave_0: entered promiscuous mode
[  607.933694][T27746] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.936202][T27746] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.943568][T27746] bridge_slave_1: entered allmulticast mode
[  607.946891][T27746] bridge_slave_1: entered promiscuous mode
[  608.004698][T27746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  608.022537][T27746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.058207][T27746] team0: Port device team_slave_0 added
[  608.063604][T27746] team0: Port device team_slave_1 added
[  608.087017][T27746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.090140][T27746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  608.108920][T27746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.115113][T27746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.126039][T27746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  608.136600][T27746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.178358][T27746] hsr_slave_0: entered promiscuous mode
[  608.181260][T27746] hsr_slave_1: entered promiscuous mode
[  608.183662][T27746] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  608.186301][T27746] Cannot create hsr debugfs directory
[  608.292524][T27746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.355124][T27746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.393329][T27746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.443403][T27746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.608683][T27746] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  608.636577][T27746] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  608.651839][T27746] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  608.658878][T27746] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  608.766444][T27746] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.784608][T27746] 8021q: adding VLAN 0 to HW filter on device team0
[  608.803495][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.806499][ T8788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.824668][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.827850][ T8788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.978473][T27746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  609.014480][T27746] veth0_vlan: entered promiscuous mode
[  609.037207][T27746] veth1_vlan: entered promiscuous mode
[  609.055509][T27746] veth0_macvtap: entered promiscuous mode
[  609.062826][T27746] veth1_macvtap: entered promiscuous mode
[  609.083168][T27746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  609.094360][T27746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  609.103088][T27746] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.106008][T27746] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.110344][T27746] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.113839][T27746] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.204925][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  609.209267][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  609.212393][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  609.215920][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  609.219501][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  609.251121][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.254544][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.283285][T27774] wg1 speed is unknown, defaulting to 1000
[  609.345727][ T7375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.350262][ T7375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.487566][T27774] chnl_net:caif_netlink_parms(): no params data found
[  609.551321][T27774] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.553802][T27774] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.556393][T27774] bridge_slave_0: entered allmulticast mode
[  609.559553][T27774] bridge_slave_0: entered promiscuous mode
[  609.563764][T27774] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.566283][T27774] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.568942][T27774] bridge_slave_1: entered allmulticast mode
[  609.572034][T27774] bridge_slave_1: entered promiscuous mode
[  609.602524][T27774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.608453][T27774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.633621][T27774] team0: Port device team_slave_0 added
[  609.646988][T27774] team0: Port device team_slave_1 added
[  609.690587][T27774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.693689][T27774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  609.711046][T27774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.715973][T27774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.721864][T27774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  609.736880][T27774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.779468][T27774] hsr_slave_0: entered promiscuous mode
[  609.782464][T27774] hsr_slave_1: entered promiscuous mode
[  609.784818][T27774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  609.787506][T27774] Cannot create hsr debugfs directory
[  609.896302][T27774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.928289][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6543'.
[  609.931234][T27783] netlink: 'syz.2.6543': attribute type 5 has an invalid length.
[  609.934009][T27783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6543'.
[  609.967189][T27774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.015377][T27774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.083593][T27774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.222332][T27774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  610.223068][T27794] netlink: 'syz.2.6547': attribute type 4 has an invalid length.
[  610.247181][T27774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  610.259667][T27774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  610.264637][T27774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  610.441327][T27774] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.496182][T27774] 8021q: adding VLAN 0 to HW filter on device team0
[  610.515002][  T199] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.518019][  T199] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.534534][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.537510][ T7374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.695428][T27774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.734098][T27774] veth0_vlan: entered promiscuous mode
[  610.741831][T27774] veth1_vlan: entered promiscuous mode
[  610.764701][T27774] veth0_macvtap: entered promiscuous mode
[  610.769427][T27774] veth1_macvtap: entered promiscuous mode
[  610.780844][T27774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.789608][T27774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.796227][T27774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.799703][T27774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.802538][T27774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.805441][T27774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.852745][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.855304][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.882201][ T7374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  610.885017][ T7374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.563025][T27823] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6550'.
[  612.567082][T27823] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6550'.
[  612.752505][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  612.757343][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  612.762560][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  612.767014][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  612.770697][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  612.803547][T27824] wg1 speed is unknown, defaulting to 1000
[  612.934626][T27824] chnl_net:caif_netlink_parms(): no params data found
[  613.063182][T27824] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.066388][T27824] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.070197][T27824] bridge_slave_0: entered allmulticast mode
[  613.074394][T27824] bridge_slave_0: entered promiscuous mode
[  613.080434][T27824] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.083634][T27824] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.086156][T27824] bridge_slave_1: entered allmulticast mode
[  613.090337][T27824] bridge_slave_1: entered promiscuous mode
[  613.126267][T27824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  613.134377][T27824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.167609][T27824] team0: Port device team_slave_0 added
[  613.173708][T27824] team0: Port device team_slave_1 added
[  613.200066][T27824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.202939][T27824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.212238][T27824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.218528][T27824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.228455][T27824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.240229][T27824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.281895][T27824] hsr_slave_0: entered promiscuous mode
[  613.285323][T27824] hsr_slave_1: entered promiscuous mode
[  613.288604][T27824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  613.291749][T27824] Cannot create hsr debugfs directory
[  613.431231][T27824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.486017][T27824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.549819][T27824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.627042][T27824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.700525][T27824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  613.705389][T27824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  613.710758][T27824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  613.717128][T27824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  613.750017][T27824] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.752698][T27824] bridge0: port 2(bridge_slave_1) entered forwarding state
[  613.755229][T27824] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.757579][T27824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.790024][T27824] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.799077][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.802154][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.819855][T27824] 8021q: adding VLAN 0 to HW filter on device team0
[  613.828359][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.831084][ T8788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.841656][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.844076][ T8788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  613.945426][T27824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.972635][T27824] veth0_vlan: entered promiscuous mode
[  613.980814][T27824] veth1_vlan: entered promiscuous mode
[  614.008584][T27824] veth0_macvtap: entered promiscuous mode
[  614.014675][T27824] veth1_macvtap: entered promiscuous mode
[  614.029902][T27824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.045912][T27824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.072847][T27824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.076538][T27824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.102733][T27824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.106534][T27824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.360635][T27848] syzkaller0: entered promiscuous mode
[  614.362923][T27848] syzkaller0: entered allmulticast mode
[  614.371497][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.374691][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.395913][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  614.401117][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  614.405000][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  614.417571][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  614.421531][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  614.475836][T27849] wg1 speed is unknown, defaulting to 1000
[  614.489265][ T7374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.492118][ T7374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.606583][T27849] chnl_net:caif_netlink_parms(): no params data found
[  614.674085][T27849] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.676574][T27849] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.679429][T27849] bridge_slave_0: entered allmulticast mode
[  614.682908][T27849] bridge_slave_0: entered promiscuous mode
[  614.686394][T27849] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.689191][T27849] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.691905][T27849] bridge_slave_1: entered allmulticast mode
[  614.694848][T27849] bridge_slave_1: entered promiscuous mode
[  614.738353][T27849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  614.745541][T27849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  614.797389][T27849] team0: Port device team_slave_0 added
[  614.806395][T27849] team0: Port device team_slave_1 added
[  614.841097][T27849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  614.844178][T27849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.854974][T27849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  614.866965][T27849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  614.876753][T27849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.887337][T27849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  614.966959][T27849] hsr_slave_0: entered promiscuous mode
[  614.977329][T27849] hsr_slave_1: entered promiscuous mode
[  614.981239][T27849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  614.983814][T27849] Cannot create hsr debugfs directory
[  616.478614][ T5839] Bluetooth: hci3: command tx timeout
[  616.572352][T27859] IPVS: Error connecting to the multicast addr
[  616.639711][T27849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.692967][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6555'.
[  616.719813][T27849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.799722][T27849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.915514][T27849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.091890][T27849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  617.099878][T27849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  617.115071][T27849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  617.121696][T27849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  617.203235][T27849] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.221497][T27849] 8021q: adding VLAN 0 to HW filter on device team0
[  617.227225][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.229835][ T7374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.239229][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.241626][ T7374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.446070][T27849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  617.472777][T27849] veth0_vlan: entered promiscuous mode
[  617.478382][T27849] veth1_vlan: entered promiscuous mode
[  617.496735][T27849] veth0_macvtap: entered promiscuous mode
[  617.503409][T27849] veth1_macvtap: entered promiscuous mode
[  617.541521][T27849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.558949][T27849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.570994][T27849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.574638][T27849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.587636][T27849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.594203][T27849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.653721][ T7375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.656293][ T7375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.685449][ T7375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.689598][ T7375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.452578][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  618.457123][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  618.461271][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  618.465630][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  618.473513][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  618.504953][T27885] wg1 speed is unknown, defaulting to 1000
[  618.631028][T27885] chnl_net:caif_netlink_parms(): no params data found
[  619.119517][T27885] bridge0: port 1(bridge_slave_0) entered blocking state
[  619.121886][T27885] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.124244][T27885] bridge_slave_0: entered allmulticast mode
[  619.127500][T27885] bridge_slave_0: entered promiscuous mode
[  619.137557][T27885] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.139977][T27885] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.142377][T27885] bridge_slave_1: entered allmulticast mode
[  619.145159][T27885] bridge_slave_1: entered promiscuous mode
[  619.183118][T27885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.191258][T27913] xt_ecn: cannot match TCP bits for non-tcp packets
[  619.197114][T27885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.276752][T27885] team0: Port device team_slave_0 added
[  619.282314][T27885] team0: Port device team_slave_1 added
[  619.316031][T27885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.318566][T27885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.326913][T27885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.331762][T27885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  619.333963][T27885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.342498][T27885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.374041][T27885] hsr_slave_0: entered promiscuous mode
[  619.376527][T27885] hsr_slave_1: entered promiscuous mode
[  619.381689][T27885] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  619.384234][T27885] Cannot create hsr debugfs directory
[  619.645065][T27885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.695000][T27885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.767257][T27885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.844510][T27885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.913649][T27885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  619.918177][T27885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  619.922369][T27885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  619.926525][T27885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  619.996030][T27885] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.006359][T27885] 8021q: adding VLAN 0 to HW filter on device team0
[  620.012118][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.014416][ T7375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.028806][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.031202][ T7375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.044265][T27885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  620.047654][T27885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  620.147570][T27885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.178681][T27885] veth0_vlan: entered promiscuous mode
[  620.192265][T27885] veth1_vlan: entered promiscuous mode
[  620.212017][T27885] veth0_macvtap: entered promiscuous mode
[  620.216093][T27885] veth1_macvtap: entered promiscuous mode
[  620.228349][T27885] batman_adv: batadv0: Interface activated: batadv_slave_0
[  620.237571][T27885] batman_adv: batadv0: Interface activated: batadv_slave_1
[  620.243185][T27885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.246207][T27885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.250412][T27885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.253236][T27885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.318925][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.321814][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.342871][ T7375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.345368][ T7375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.026543][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  621.034528][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  621.037902][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  621.041810][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  621.045070][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  621.076170][T27932] wg1 speed is unknown, defaulting to 1000
[  621.212868][T27932] chnl_net:caif_netlink_parms(): no params data found
[  621.346191][T27932] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.352884][T27932] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.355712][T27932] bridge_slave_0: entered allmulticast mode
[  621.369046][T27932] bridge_slave_0: entered promiscuous mode
[  621.378531][T27932] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.381373][T27932] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.383869][T27932] bridge_slave_1: entered allmulticast mode
[  621.387094][T27932] bridge_slave_1: entered promiscuous mode
[  621.445182][T27932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.452675][T27932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.495853][T27932] team0: Port device team_slave_0 added
[  621.504448][T27932] team0: Port device team_slave_1 added
[  621.532537][T27932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.534888][T27932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.544248][T27932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.549709][T27932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.552088][T27932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  621.561263][T27932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.589289][T27932] hsr_slave_0: entered promiscuous mode
[  621.591957][T27932] hsr_slave_1: entered promiscuous mode
[  621.594298][T27932] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  621.596829][T27932] Cannot create hsr debugfs directory
[  621.776478][T27932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.860066][T27932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.915618][T27932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.011860][T27932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.135500][T27932] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  622.141399][T27932] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  622.145784][T27932] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  622.151746][T27932] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  622.215350][T27932] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.227581][T27932] 8021q: adding VLAN 0 to HW filter on device team0
[  622.238309][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.241185][ T8786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.260101][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.263190][ T8786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.395274][T27966] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6570'.
[  622.449109][T27932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.497268][T27932] veth0_vlan: entered promiscuous mode
[  622.512940][T27932] veth1_vlan: entered promiscuous mode
[  622.545458][T27932] veth0_macvtap: entered promiscuous mode
[  622.559968][T27932] veth1_macvtap: entered promiscuous mode
[  622.572909][T27932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.591254][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6571'.
[  622.595469][T27932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.609331][T27932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.612832][T27932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.615698][T27932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.619214][T27932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.740653][ T7375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.748026][ T7375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.777108][ T7374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.780473][ T7374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.919488][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  624.138445][T27984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6575'.
[  624.142067][T27984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6575'.
[  624.161180][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  624.164466][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  624.168357][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  624.183397][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  624.186323][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  624.221880][T27985] wg1 speed is unknown, defaulting to 1000
[  624.352542][T27985] chnl_net:caif_netlink_parms(): no params data found
[  624.441922][T27985] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.444319][T27985] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.446759][T27985] bridge_slave_0: entered allmulticast mode
[  624.449911][T27985] bridge_slave_0: entered promiscuous mode
[  624.453614][T27985] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.455886][T27985] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.458387][T27985] bridge_slave_1: entered allmulticast mode
[  624.461363][T27985] bridge_slave_1: entered promiscuous mode
[  624.501858][T27985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  624.507812][T27985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  624.553165][T27985] team0: Port device team_slave_0 added
[  624.557597][T27985] team0: Port device team_slave_1 added
[  624.612960][T27985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  624.615249][T27985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.625358][T27985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  624.631752][T27985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  624.633993][T27985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.643139][T27985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.677065][T27985] hsr_slave_0: entered promiscuous mode
[  624.679998][T27985] hsr_slave_1: entered promiscuous mode
[  624.682641][T27985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  624.685538][T27985] Cannot create hsr debugfs directory
[  624.826152][T27985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.908332][T27985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.951425][T27985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.008480][T27985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.120258][T27985] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  625.128749][T27985] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  625.135152][T27985] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  625.142801][T27985] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  625.226250][T27985] 8021q: adding VLAN 0 to HW filter on device bond0
[  625.236662][T27985] 8021q: adding VLAN 0 to HW filter on device team0
[  625.243072][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.245430][ T7374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  625.259647][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.262069][ T7374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  625.393106][T27985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  625.433400][T27985] veth0_vlan: entered promiscuous mode
[  625.439069][T27985] veth1_vlan: entered promiscuous mode
[  625.458511][T27985] veth0_macvtap: entered promiscuous mode
[  625.466351][T27985] veth1_macvtap: entered promiscuous mode
[  625.477091][T27985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  625.490858][T27985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  625.496240][T27985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.499992][T27985] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.502765][T27985] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.505708][T27985] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.566300][ T7375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.569408][ T7375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.591209][ T7374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.593819][ T7374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  626.406417][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  626.410081][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  626.412801][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  626.415403][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  626.418340][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  626.450502][T28036] wg1 speed is unknown, defaulting to 1000
[  626.595687][T28036] chnl_net:caif_netlink_parms(): no params data found
[  626.706928][T28036] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.711856][T28036] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.715087][T28036] bridge_slave_0: entered allmulticast mode
[  626.723591][T28036] bridge_slave_0: entered promiscuous mode
[  626.749440][T28036] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.758039][T28036] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.768111][T28036] bridge_slave_1: entered allmulticast mode
[  626.772013][T28036] bridge_slave_1: entered promiscuous mode
[  626.823642][T28036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.858305][T28036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.906442][T28036] team0: Port device team_slave_0 added
[  626.911975][T28036] team0: Port device team_slave_1 added
[  626.982290][T28065] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6593'.
[  626.987487][T28062] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  627.009377][T28062] syzkaller0: entered promiscuous mode
[  627.011891][T28062] syzkaller0: entered allmulticast mode
[  627.016794][T28036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  627.023041][T28036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.040798][T28036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  627.057204][T28036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  627.060235][T28036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.070981][T28036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  627.121799][T28036] hsr_slave_0: entered promiscuous mode
[  627.125966][T28036] hsr_slave_1: entered promiscuous mode
[  627.129234][T28036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  627.132367][T28036] Cannot create hsr debugfs directory
[  627.290656][T28036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.347281][T28036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.414013][T28036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.499181][T28036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.636150][T28036] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  627.642341][T28036] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  627.646566][T28036] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  627.652042][T28036] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  628.471739][ T5830] Bluetooth: hci1: command tx timeout
[  629.151324][T28036] 8021q: adding VLAN 0 to HW filter on device bond0
[  629.170264][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  629.173997][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  629.176998][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  629.183337][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  629.184510][T28036] 8021q: adding VLAN 0 to HW filter on device team0
[  629.190585][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  629.219232][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6594'.
[  629.220823][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.224744][ T8788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  629.250179][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.252564][ T8788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  629.256205][T28073] wg1 speed is unknown, defaulting to 1000
[  629.367286][T28082] ipvlan0: entered promiscuous mode
[  629.378121][T28082] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  629.418012][T28036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  629.569682][T28036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  629.579876][T28073] chnl_net:caif_netlink_parms(): no params data found
[  629.676268][T28036] veth0_vlan: entered promiscuous mode
[  629.731517][T28073] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.734622][T28073] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.737962][T28073] bridge_slave_0: entered allmulticast mode
[  629.741979][T28073] bridge_slave_0: entered promiscuous mode
[  629.754833][T28073] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.758579][T28073] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.761724][T28073] bridge_slave_1: entered allmulticast mode
[  629.765787][T28073] bridge_slave_1: entered promiscuous mode
[  629.769888][T28036] veth1_vlan: entered promiscuous mode
[  629.804066][T28073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  629.838857][T28100] nbd1: detected capacity change from 0 to 127
[  629.843954][T28073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  629.946653][T28073] team0: Port device team_slave_0 added
[  629.951357][T28073] team0: Port device team_slave_1 added
[  629.955218][T28036] veth0_macvtap: entered promiscuous mode
[  629.979142][T28073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.981608][T28073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  629.991361][T28073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.996058][T28073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.998609][T28073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  630.009424][T28073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  630.025912][T28036] veth1_macvtap: entered promiscuous mode
[  630.055072][T28073] hsr_slave_0: entered promiscuous mode
[  630.057654][T28073] hsr_slave_1: entered promiscuous mode
[  630.060357][T28073] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  630.062896][T28073] Cannot create hsr debugfs directory
[  630.114157][T28036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.177279][T28036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.206849][T28036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.213755][T28036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.227407][T28036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.233304][T28036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.284168][T28073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.353006][T28073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.400148][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.402783][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.432947][T28073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.451089][  T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.453720][  T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.503963][T28073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.564859][   T55] block nbd1: Receive control failed (result -32)
[  630.656051][T28073] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  630.666110][T28073] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  630.672672][T28073] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  630.682231][T28073] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  630.779011][T28073] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.791581][T28073] 8021q: adding VLAN 0 to HW filter on device team0
[  630.796836][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.799230][ T7371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.807192][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.809592][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.922554][T28073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.966063][T28073] veth0_vlan: entered promiscuous mode
[  630.972353][T28073] veth1_vlan: entered promiscuous mode
[  630.996899][T28073] veth0_macvtap: entered promiscuous mode
[  631.010121][T28073] veth1_macvtap: entered promiscuous mode
[  631.027633][T28073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  631.052484][T28073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  631.059446][T28073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.063149][T28073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.066525][T28073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.070533][T28073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.165954][ T7371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.169959][ T7371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.203677][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.206366][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.834868][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  632.838018][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  632.840938][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  632.844555][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  632.848768][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  632.874368][T28127] wg1 speed is unknown, defaulting to 1000
[  633.012695][T28127] chnl_net:caif_netlink_parms(): no params data found
[  633.060574][T28127] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.062943][T28127] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.065381][T28127] bridge_slave_0: entered allmulticast mode
[  633.068643][T28127] bridge_slave_0: entered promiscuous mode
[  633.072342][T28127] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.074935][T28127] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.077600][T28127] bridge_slave_1: entered allmulticast mode
[  633.081026][T28127] bridge_slave_1: entered promiscuous mode
[  633.111863][T28127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.117000][T28127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.157244][T28127] team0: Port device team_slave_0 added
[  633.164779][T28127] team0: Port device team_slave_1 added
[  633.202491][T28127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  633.205451][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.216702][T28127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  633.223608][T28127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  633.226547][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.236568][T28127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.267622][T28127] hsr_slave_0: entered promiscuous mode
[  633.271058][T28127] hsr_slave_1: entered promiscuous mode
[  633.274190][T28127] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  633.277418][T28127] Cannot create hsr debugfs directory
[  633.399514][T28127] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.461495][T28127] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.556967][T28127] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.638700][T28127] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.751321][T28127] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  633.755532][T28127] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  633.766098][T28127] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  633.771450][T28127] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  633.834564][T28127] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.844217][T28127] 8021q: adding VLAN 0 to HW filter on device team0
[  633.855742][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.858085][ T8784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.866912][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.869277][ T8784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.041670][T28127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.080952][T28127] veth0_vlan: entered promiscuous mode
[  634.090567][T28127] veth1_vlan: entered promiscuous mode
[  634.127075][T28127] veth0_macvtap: entered promiscuous mode
[  634.133549][T28127] veth1_macvtap: entered promiscuous mode
[  634.188843][T28127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  634.201371][T28127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  634.223956][T28127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.227584][T28127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.238215][T28127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.241967][T28127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.352271][ T8786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.355528][ T8786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.391856][ T8786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.394386][ T8786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.785525][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  634.796279][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  634.803805][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  634.810658][T28153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  634.814533][T28153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  634.852250][T28150] wg1 speed is unknown, defaulting to 1000
[  634.982475][T28150] chnl_net:caif_netlink_parms(): no params data found
[  635.052331][T28150] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.055264][T28150] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.059174][T28150] bridge_slave_0: entered allmulticast mode
[  635.062466][T28150] bridge_slave_0: entered promiscuous mode
[  635.067061][T28150] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.069934][T28150] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.072470][T28150] bridge_slave_1: entered allmulticast mode
[  635.075296][T28150] bridge_slave_1: entered promiscuous mode
[  635.095771][T28150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  635.101272][T28150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  635.139221][T28150] team0: Port device team_slave_0 added
[  635.143446][T28150] team0: Port device team_slave_1 added
[  635.166371][T28150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  635.169453][T28150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.178437][T28150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  635.183063][T28150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  635.185234][T28150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.194438][T28150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.227443][T28150] hsr_slave_0: entered promiscuous mode
[  635.230581][T28150] hsr_slave_1: entered promiscuous mode
[  635.233010][T28150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  635.241432][T28150] Cannot create hsr debugfs directory
[  635.368578][T28150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.437115][T28150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.538832][T28150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.583341][T28161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6603'.
[  635.639021][T28150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.766786][T28150] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  635.771779][T28150] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  635.775964][T28150] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  635.781786][T28150] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  635.845142][T28150] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.862074][T28170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6606'.
[  635.883295][T28150] 8021q: adding VLAN 0 to HW filter on device team0
[  635.899723][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.902058][ T7370] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.930632][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.932972][ T7370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  636.112520][T28150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  636.169538][T28150] veth0_vlan: entered promiscuous mode
[  636.181277][T28150] veth1_vlan: entered promiscuous mode
[  636.210871][T28150] veth0_macvtap: entered promiscuous mode
[  636.219304][T28150] veth1_macvtap: entered promiscuous mode
[  636.230323][T28150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.235107][T28150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.242235][T28150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.245092][T28150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.248677][T28150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.251771][T28150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.348697][ T7370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  636.351406][ T7370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  636.377852][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  636.380427][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.987226][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  637.996599][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  638.005166][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  638.009738][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  638.012750][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  638.038489][T28193] wg1 speed is unknown, defaulting to 1000
[  638.081532][T28199] sit0: left allmulticast mode
[  638.195841][T28193] chnl_net:caif_netlink_parms(): no params data found
[  638.261637][T28193] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.263978][T28193] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.266629][T28193] bridge_slave_0: entered allmulticast mode
[  638.270338][T28193] bridge_slave_0: entered promiscuous mode
[  638.273687][T28193] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.276147][T28193] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.278827][T28193] bridge_slave_1: entered allmulticast mode
[  638.281609][T28193] bridge_slave_1: entered promiscuous mode
[  638.303829][T28193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.314243][T28193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  638.352804][T28193] team0: Port device team_slave_0 added
[  638.357056][T28193] team0: Port device team_slave_1 added
[  638.381021][T28193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  638.383915][T28193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.396148][T28193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  638.402117][T28193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  638.404688][T28193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.418288][T28193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  638.446459][T28193] hsr_slave_0: entered promiscuous mode
[  638.449267][T28193] hsr_slave_1: entered promiscuous mode
[  638.451527][T28193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  638.453903][T28193] Cannot create hsr debugfs directory
[  638.556820][T28193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.612002][T28193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.705816][T28193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.762322][T28193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.854167][T28193] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  638.866606][T28193] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  638.872463][T28193] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  638.876648][T28193] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  638.920119][T28193] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.947573][T28193] 8021q: adding VLAN 0 to HW filter on device team0
[  638.962049][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.964389][ T8786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.971412][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.973688][ T8786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.117470][T28193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.144326][T28193] veth0_vlan: entered promiscuous mode
[  639.151982][T28193] veth1_vlan: entered promiscuous mode
[  639.174449][T28193] veth0_macvtap: entered promiscuous mode
[  639.182030][T28193] veth1_macvtap: entered promiscuous mode
[  639.203497][T28193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.211407][T28193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.216462][T28193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.219317][T28193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.222052][T28193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.224751][T28193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.291304][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.293871][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.313668][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.316274][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.967586][T28220] netlink: 'syz.2.6611': attribute type 11 has an invalid length.
[  639.974125][T28220] sctp: [Deprecated]: syz.2.6611 (pid 28220) Use of int in max_burst socket option.
[  639.974125][T28220] Use struct sctp_assoc_value instead
[  639.984716][T28220] syzkaller1: entered promiscuous mode
[  639.986977][T28220] syzkaller1: entered allmulticast mode
[  640.121200][T28153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  640.124678][T28153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  640.127473][T28153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  640.130923][T28153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  640.135047][T28153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  640.183521][T28221] wg1 speed is unknown, defaulting to 1000
[  640.275071][T28221] chnl_net:caif_netlink_parms(): no params data found
[  640.395796][T28221] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.400415][T28221] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.402998][T28221] bridge_slave_0: entered allmulticast mode
[  640.405850][T28221] bridge_slave_0: entered promiscuous mode
[  640.413651][T28221] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.416267][T28221] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.419183][T28221] bridge_slave_1: entered allmulticast mode
[  640.426487][T28221] bridge_slave_1: entered promiscuous mode
[  640.471203][T28221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  640.476245][T28221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  640.500023][T28221] team0: Port device team_slave_0 added
[  640.508980][T28242] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6614'.
[  640.509754][T28221] team0: Port device team_slave_1 added
[  640.530624][T28221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  640.533555][T28221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.542136][T28221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  640.546146][T28242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6614'.
[  640.547226][T28221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  640.555839][T28221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.573212][T28221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  640.619420][T28221] hsr_slave_0: entered promiscuous mode
[  640.623215][T28221] hsr_slave_1: entered promiscuous mode
[  640.626409][T28221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  640.630902][T28221] Cannot create hsr debugfs directory
[  640.783082][T28221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.853751][T28221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.933799][T28221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.014507][T28221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.164257][T28221] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  641.170880][T28221] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  641.185882][T28221] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  641.195689][T28221] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  641.220812][T28221] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.223519][T28221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  641.226048][T28221] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.228713][T28221] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.285961][T28221] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.309350][T28221] 8021q: adding VLAN 0 to HW filter on device team0
[  641.312645][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.318686][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.352409][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.354787][ T7371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.373339][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.375720][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  641.577283][T28221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  641.623671][T28221] veth0_vlan: entered promiscuous mode
[  641.629748][T28221] veth1_vlan: entered promiscuous mode
[  641.646956][T28221] veth0_macvtap: entered promiscuous mode
[  641.652436][T28221] veth1_macvtap: entered promiscuous mode
[  641.661756][T28221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  641.674661][T28221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.682282][T28221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.685953][T28221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.698420][T28221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.701278][T28221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.779557][ T8788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.782804][ T8788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.820656][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.823994][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.279021][T28153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  643.285057][T28153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  643.289468][T28153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  643.294498][T28153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  643.299983][T28153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  643.345977][T28264] wg1 speed is unknown, defaulting to 1000
[  643.545314][T28264] chnl_net:caif_netlink_parms(): no params data found
[  643.713878][T28264] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.721732][T28264] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.728471][T28264] bridge_slave_0: entered allmulticast mode
[  643.746922][T28264] bridge_slave_0: entered promiscuous mode
[  643.865291][T28264] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.872204][T28264] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.878449][T28264] bridge_slave_1: entered allmulticast mode
[  643.882355][T28264] bridge_slave_1: entered promiscuous mode
[  643.905072][T28264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  643.916596][T28264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  643.962049][T28264] team0: Port device team_slave_0 added
[  643.966066][T28264] team0: Port device team_slave_1 added
[  643.987652][T28264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.992183][T28264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.001208][T28264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.006211][T28264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.008738][T28264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.017361][T28264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.061919][T28264] hsr_slave_0: entered promiscuous mode
[  644.064763][T28264] hsr_slave_1: entered promiscuous mode
[  644.067319][T28264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  644.070844][T28264] Cannot create hsr debugfs directory
[  644.177633][T28264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.259812][T28264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.305379][T28264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.344189][T28264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.485900][T28264] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  644.492623][T28264] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  644.499423][T28264] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  644.503998][T28264] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  644.522454][T28264] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.524888][T28264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.527454][T28264] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.530237][T28264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.550915][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.561739][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.612160][T28264] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.631433][T28264] 8021q: adding VLAN 0 to HW filter on device team0
[  644.662522][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.665133][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.681479][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.683996][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.817222][T28264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  644.844686][T28264] veth0_vlan: entered promiscuous mode
[  644.851000][T28264] veth1_vlan: entered promiscuous mode
[  644.881619][T28264] veth0_macvtap: entered promiscuous mode
[  644.888162][T28264] veth1_macvtap: entered promiscuous mode
[  644.903016][T28264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  644.913651][T28264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  644.922862][T28264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.925727][T28264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.928758][T28264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.931768][T28264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.011722][T28116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.014309][T28116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.048531][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.051008][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.729038][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  645.733706][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  645.737398][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  645.742719][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  645.747096][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  645.795466][T28288] wg1 speed is unknown, defaulting to 1000
[  645.965330][T28288] chnl_net:caif_netlink_parms(): no params data found
[  646.029981][T28288] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.032729][T28288] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.035352][T28288] bridge_slave_0: entered allmulticast mode
[  646.038714][T28288] bridge_slave_0: entered promiscuous mode
[  646.042876][T28288] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.045401][T28288] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.048118][T28288] bridge_slave_1: entered allmulticast mode
[  646.051312][T28288] bridge_slave_1: entered promiscuous mode
[  646.086983][T28288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  646.102415][T28288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.144225][T28288] team0: Port device team_slave_0 added
[  646.151974][T28288] team0: Port device team_slave_1 added
[  646.176556][T28288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  646.180640][T28288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  646.197726][T28288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  646.203753][T28288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  646.206115][T28288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  646.215735][T28288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  646.249675][T28288] hsr_slave_0: entered promiscuous mode
[  646.253003][T28288] hsr_slave_1: entered promiscuous mode
[  646.255449][T28288] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  646.258205][T28288] Cannot create hsr debugfs directory
[  646.368991][T28288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.435788][T28288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.495580][T28288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.597563][T28288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.684482][T28288] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  646.691582][T28288] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  646.721411][T28288] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  646.726150][T28288] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  646.848163][T28288] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.889203][T28288] 8021q: adding VLAN 0 to HW filter on device team0
[  646.901979][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.904465][ T7371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.925156][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.927701][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  647.076588][T28288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.135699][T28288] veth0_vlan: entered promiscuous mode
[  647.144205][T28288] veth1_vlan: entered promiscuous mode
[  647.162573][T28288] veth0_macvtap: entered promiscuous mode
[  647.166871][T28288] veth1_macvtap: entered promiscuous mode
[  647.178457][T28288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.193775][T28288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  647.200354][T28288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.203247][T28288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.206263][T28288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.210259][T28288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.301061][ T7371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.304118][ T7371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.346653][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.351639][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.086046][T28153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  649.092719][T28153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  649.096712][T28153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  649.101270][T28153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  649.105352][T28153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  649.145495][T28322] wg1 speed is unknown, defaulting to 1000
[  649.406589][T28322] chnl_net:caif_netlink_parms(): no params data found
[  649.502604][T28322] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.505819][T28322] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.518377][T28322] bridge_slave_0: entered allmulticast mode
[  649.522639][T28322] bridge_slave_0: entered promiscuous mode
[  649.539360][T28322] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.542419][T28322] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.545740][T28322] bridge_slave_1: entered allmulticast mode
[  649.559922][T28322] bridge_slave_1: entered promiscuous mode
[  649.617384][T28322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.625872][T28322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.650811][T28322] team0: Port device team_slave_0 added
[  649.654740][T28322] team0: Port device team_slave_1 added
[  649.688582][T28322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.690884][T28322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  649.700371][T28322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.705594][T28322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.708646][T28322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  649.717910][T28322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  649.749704][T28322] hsr_slave_0: entered promiscuous mode
[  649.752287][T28322] hsr_slave_1: entered promiscuous mode
[  649.754542][T28322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  649.756909][T28322] Cannot create hsr debugfs directory
[  649.850984][T28322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.942518][T28322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.032803][T28322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.100333][T28322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.225838][T28322] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  650.232077][T28322] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  650.237375][T28322] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  650.250382][T28322] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  650.292161][T28322] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.294627][T28322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.297080][T28322] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.299500][T28322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.337245][T28322] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.347519][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.351995][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.370797][T28322] 8021q: adding VLAN 0 to HW filter on device team0
[  650.376583][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.379401][ T8786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.399735][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.402189][ T8786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.544977][T28322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.607327][T28322] veth0_vlan: entered promiscuous mode
[  650.624964][T28322] veth1_vlan: entered promiscuous mode
[  650.645031][T28322] veth0_macvtap: entered promiscuous mode
[  650.649398][T28322] veth1_macvtap: entered promiscuous mode
[  650.658807][T28322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.669685][T28322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.677091][T28322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.681271][T28322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.684200][T28322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.686963][T28322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.771285][ T7370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.773834][ T7370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.831646][T28116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.834942][T28116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.450119][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  651.456339][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  651.460482][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  651.465007][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  651.469077][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  651.529312][T28347] wg1 speed is unknown, defaulting to 1000
[  651.678872][T28347] chnl_net:caif_netlink_parms(): no params data found
[  651.783652][T28347] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.786333][T28347] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.789507][T28347] bridge_slave_0: entered allmulticast mode
[  651.793690][T28347] bridge_slave_0: entered promiscuous mode
[  651.798143][T28347] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.801478][T28347] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.805019][T28347] bridge_slave_1: entered allmulticast mode
[  651.810891][T28347] bridge_slave_1: entered promiscuous mode
[  651.859587][T28347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.873130][T28347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.901871][T28347] team0: Port device team_slave_0 added
[  651.906580][T28347] team0: Port device team_slave_1 added
[  651.960308][T28347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.962503][T28347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.972000][T28347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.978689][T28347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.981051][T28347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.990489][T28347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  652.049030][T28347] hsr_slave_0: entered promiscuous mode
[  652.052553][T28347] hsr_slave_1: entered promiscuous mode
[  652.055629][T28347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  652.059269][T28347] Cannot create hsr debugfs directory
[  652.231198][T28357] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6625'.
[  652.239547][T28357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6625'.
[  652.248430][T28357] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6625'.
[  652.252230][T28357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6625'.
[  652.293622][T28347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.397665][T28347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.491957][T28347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.592756][T28347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.703951][T28347] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  652.722366][T28347] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  652.730105][T28347] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  652.739526][T28347] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  652.822594][T28347] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.839574][T28347] 8021q: adding VLAN 0 to HW filter on device team0
[  652.846739][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.849192][ T7375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.871027][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.874058][ T7375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.109989][T28347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.132303][T28347] veth0_vlan: entered promiscuous mode
[  653.139702][T28347] veth1_vlan: entered promiscuous mode
[  653.166724][T28347] veth0_macvtap: entered promiscuous mode
[  653.174339][T28347] veth1_macvtap: entered promiscuous mode
[  653.185475][T28347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.197121][T28347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.204980][T28347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.209533][T28347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.213145][T28347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.216728][T28347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.303381][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.306611][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.340574][  T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.343801][  T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.990482][T28370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6626'.
[  655.049227][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6626'.
[  655.181414][T28153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  655.186531][T28153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  655.191600][T28153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  655.196246][T28153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  655.200696][T28153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  655.247366][T28378] wg1 speed is unknown, defaulting to 1000
[  655.549731][T28378] chnl_net:caif_netlink_parms(): no params data found
[  655.628710][T28378] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.631229][T28378] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.633712][T28378] bridge_slave_0: entered allmulticast mode
[  655.636708][T28378] bridge_slave_0: entered promiscuous mode
[  655.640565][T28378] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.642834][T28378] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.645184][T28378] bridge_slave_1: entered allmulticast mode
[  655.648149][T28378] bridge_slave_1: entered promiscuous mode
[  655.670044][T28378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.675213][T28378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.700253][T28378] team0: Port device team_slave_0 added
[  655.704303][T28378] team0: Port device team_slave_1 added
[  655.745789][T28378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.749518][T28378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  655.760425][T28378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.768402][T28378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.771376][T28378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  655.782349][T28378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.826380][T28378] hsr_slave_0: entered promiscuous mode
[  655.830898][T28378] hsr_slave_1: entered promiscuous mode
[  655.833308][T28378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  655.835799][T28378] Cannot create hsr debugfs directory
[  656.021350][T28378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.102600][T28378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.164321][T28378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.237688][T28378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.321508][T28378] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  656.325775][T28378] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  656.345865][T28378] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  656.355497][T28378] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  656.372637][T28378] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.375010][T28378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.377542][T28378] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.380073][T28378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.426502][T28378] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.449437][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.452687][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.463918][T28378] 8021q: adding VLAN 0 to HW filter on device team0
[  656.483717][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.486153][ T7371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.493879][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.496184][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.660302][T28378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.694547][T28378] veth0_vlan: entered promiscuous mode
[  656.701239][T28378] veth1_vlan: entered promiscuous mode
[  656.719064][T28378] veth0_macvtap: entered promiscuous mode
[  656.723639][T28378] veth1_macvtap: entered promiscuous mode
[  656.733628][T28378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.748812][T28378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.755044][T28378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.758973][T28378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.761897][T28378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.764621][T28378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.816058][ T7370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.819296][ T7370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.855419][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.859281][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.478589][T28408] netlink: 'syz.2.6629': attribute type 83 has an invalid length.
[  657.675341][T28153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  657.688993][T28153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  657.693667][T28153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  657.698360][T28153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  657.702298][T28153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  657.728989][T28413] wg1 speed is unknown, defaulting to 1000
[  657.913019][T28413] chnl_net:caif_netlink_parms(): no params data found
[  658.025252][T28413] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.028565][T28413] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.031870][T28413] bridge_slave_0: entered allmulticast mode
[  658.036109][T28413] bridge_slave_0: entered promiscuous mode
[  658.048683][T28413] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.051741][T28413] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.055001][T28413] bridge_slave_1: entered allmulticast mode
[  658.060237][T28413] bridge_slave_1: entered promiscuous mode
[  658.108016][T28413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.117308][T28413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.160404][T28413] team0: Port device team_slave_0 added
[  658.167128][T28413] team0: Port device team_slave_1 added
[  658.211364][T28413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.214400][T28413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.225244][T28413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.232302][T28413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.235243][T28413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.246465][T28413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.318211][T28413] hsr_slave_0: entered promiscuous mode
[  658.322000][T28413] hsr_slave_1: entered promiscuous mode
[  658.325254][T28413] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  658.328559][T28413] Cannot create hsr debugfs directory
[  658.518817][T28413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.573159][T28413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.648822][T28413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.703899][T28426] netlink: 'syz.2.6632': attribute type 83 has an invalid length.
[  658.763239][T28413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.958630][T28413] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  658.966340][T28413] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  658.973412][T28413] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  658.981092][T28413] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  659.092225][T28413] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.218511][T28413] 8021q: adding VLAN 0 to HW filter on device team0
[  659.225938][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.228372][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.260606][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.262879][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.372092][T28413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.437492][T28413] veth0_vlan: entered promiscuous mode
[  659.449092][T28413] veth1_vlan: entered promiscuous mode
[  659.465816][T28413] veth0_macvtap: entered promiscuous mode
[  659.472162][T28413] veth1_macvtap: entered promiscuous mode
[  659.482235][T28413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  659.490215][T28413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  659.496080][T28413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  659.499889][T28413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  659.502939][T28413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  659.513875][T28413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  659.570703][ T8786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.573433][ T8786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.597668][ T8788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.603086][ T8788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  661.115604][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  661.121303][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  661.124259][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  661.128376][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  661.131283][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  661.164520][T28447] wg1 speed is unknown, defaulting to 1000
[  661.300291][T28447] chnl_net:caif_netlink_parms(): no params data found
[  661.465152][T28447] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.468818][T28447] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.471896][T28447] bridge_slave_0: entered allmulticast mode
[  661.475909][T28447] bridge_slave_0: entered promiscuous mode
[  661.482412][T28447] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.498265][T28447] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.501585][T28447] bridge_slave_1: entered allmulticast mode
[  661.505617][T28447] bridge_slave_1: entered promiscuous mode
[  661.587340][T28447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  661.611305][T28447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  661.700848][T28447] team0: Port device team_slave_0 added
[  661.720690][T28447] team0: Port device team_slave_1 added
[  661.762439][T28447] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.764756][T28447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.784466][T28447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.795141][T28447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.797393][T28447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.812072][T28447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.884427][T28447] hsr_slave_0: entered promiscuous mode
[  661.887171][T28447] hsr_slave_1: entered promiscuous mode
[  661.889810][T28447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  661.892267][T28447] Cannot create hsr debugfs directory
[  662.018572][T28447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.101177][T28447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.183538][T28447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.257296][T28447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.388558][T28447] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  662.393263][T28447] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  662.397489][T28447] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  662.402366][T28447] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  662.457346][T28447] 8021q: adding VLAN 0 to HW filter on device bond0
[  662.520787][T28447] 8021q: adding VLAN 0 to HW filter on device team0
[  662.532031][T28116] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.535029][T28116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  662.545920][T28116] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.548385][T28116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.735461][T28447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.765832][T28447] veth0_vlan: entered promiscuous mode
[  662.774428][T28447] veth1_vlan: entered promiscuous mode
[  662.809706][T28447] veth0_macvtap: entered promiscuous mode
[  662.813896][T28447] veth1_macvtap: entered promiscuous mode
[  662.824261][T28447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.831746][T28447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.837115][T28447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  662.841374][T28447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.844869][T28447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.849190][T28447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.926774][ T7375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.937932][ T7375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.974598][ T8788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.978384][ T8788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  663.609841][   T34] INFO: task kworker/u8:3:5859 blocked for more than 143 seconds.
[  663.612957][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  663.623628][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  663.627358][   T34] task:kworker/u8:3    state:D stack:22904 pid:5859  tgid:5859  ppid:2      task_flags:0x4208060 flags:0x00004000
[  663.632449][   T34] Workqueue: netns cleanup_net
[  663.634413][   T34] Call Trace:
[  663.635788][   T34]  <TASK>
[  663.637013][   T34]  __schedule+0x16f5/0x4d00
[  663.639729][   T34]  ? __lock_acquire+0xab9/0xd20
[  663.641725][   T34]  ? schedule+0x165/0x360
[  663.643485][   T34]  ? __pfx___schedule+0x10/0x10
[  663.645490][   T34]  ? schedule+0x91/0x360
[  663.647251][   T34]  schedule+0x165/0x360
[  663.649497][   T34]  schedule_preempt_disabled+0x13/0x30
[  663.651293][   T34]  __mutex_lock+0x724/0xe80
[  663.652794][   T34]  ? __mutex_lock+0x51b/0xe80
[  663.654330][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  663.656042][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  663.658021][   T34]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  663.659831][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  663.661804][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  663.663455][   T34]  ? _raw_spin_unlock+0x28/0x50
[  663.665024][   T34]  rdma_dev_change_netns+0x39/0x300
[  663.666682][   T34]  rdma_dev_exit_net+0x203/0x340
[  663.672407][   T34]  ? __pfx___might_resched+0x10/0x10
[  663.674276][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  663.675994][   T34]  ? net_generic+0x1e/0x240
[  663.677437][   T34]  ? mutex_is_locked+0x17/0x50
[  663.682086][   T34]  ? rtnl_is_locked+0x15/0x20
[  663.684037][   T34]  ops_undo_list+0x49a/0x990
[  663.685877][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  663.688710][   T34]  cleanup_net+0x4c5/0x800
[  663.690604][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  663.692546][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  663.694594][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  663.696902][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  663.699283][   T34]  process_scheduled_works+0xae1/0x17b0
[  663.701522][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  663.714710][   T34]  worker_thread+0x8a0/0xda0
[  663.716674][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  663.719544][   T34]  ? __kthread_parkme+0x7b/0x200
[  663.721576][   T34]  kthread+0x711/0x8a0
[  663.723275][   T34]  ? __pfx_worker_thread+0x10/0x10
[  663.725308][   T34]  ? __pfx_kthread+0x10/0x10
[  663.727151][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  663.729405][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.731564][   T34]  ? __pfx_kthread+0x10/0x10
[  663.733552][   T34]  ret_from_fork+0x3fc/0x770
[  663.735449][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  663.737567][   T34]  ? __switch_to_asm+0x39/0x70
[  663.739743][   T34]  ? __switch_to_asm+0x33/0x70
[  663.741727][   T34]  ? __pfx_kthread+0x10/0x10
[  663.743670][   T34]  ret_from_fork_asm+0x1a/0x30
[  663.745663][   T34]  </TASK>
[  663.747035][   T34] INFO: task syz.1.5859:25134 blocked for more than 143 seconds.
[  663.752900][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  663.756294][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  663.760104][   T34] task:syz.1.5859      state:D stack:23184 pid:25134 tgid:25133 ppid:5835   task_flags:0x400140 flags:0x00004004
[  663.764873][   T34] Call Trace:
[  663.766234][   T34]  <TASK>
[  663.767485][   T34]  __schedule+0x16f5/0x4d00
[  663.769553][   T34]  ? __sock_sendmsg+0x21c/0x270
[  663.771572][   T34]  ? ____sys_sendmsg+0x505/0x830
[  663.773581][   T34]  ? do_syscall_64+0xfa/0x3b0
[  663.775483][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.778142][   T34]  ? schedule+0x165/0x360
[  663.779901][   T34]  ? __lock_acquire+0xab9/0xd20
[  663.781899][   T34]  ? __pfx___schedule+0x10/0x10
[  663.783867][   T34]  ? schedule+0x91/0x360
[  663.785688][   T34]  schedule+0x165/0x360
[  663.787451][   T34]  schedule_timeout+0x9a/0x270
[  663.789579][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  663.791757][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  663.793854][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.795940][   T34]  ? wait_for_completion+0x267/0x5d0
[  663.798301][   T34]  wait_for_completion+0x2bf/0x5d0
[  663.800407][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  663.802646][   T34]  ? up_write+0x1c4/0x420
[  663.812067][   T34]  ? remove_client_context+0xc0/0x1e0
[  663.813777][   T34]  disable_device+0x1c6/0x320
[  663.815254][   T34]  ? __pfx_disable_device+0x10/0x10
[  663.816908][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  663.818832][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  663.821094][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  663.822878][   T34]  nldev_dellink+0x2d1/0x320
[  663.824354][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  663.825998][   T34]  ? rcu_is_watching+0x15/0xb0
[  663.827519][   T34]  ? apparmor_capable+0x137/0x1b0
[  663.832250][   T34]  ? bpf_lsm_capable+0x9/0x20
[  663.834146][   T34]  ? security_capable+0x7e/0x2e0
[  663.835995][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  663.837897][   T34]  rdma_nl_rcv+0x6ae/0x980
[  663.839531][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  663.841324][   T34]  ? __lock_acquire+0xab9/0xd20
[  663.843047][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  663.844864][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  663.846595][   T34]  netlink_unicast+0x75b/0x8d0
[  663.848403][   T34]  netlink_sendmsg+0x805/0xb30
[  663.850042][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.851844][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  663.853628][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  663.878073][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.879834][   T34]  __sock_sendmsg+0x21c/0x270
[  663.881346][   T34]  ____sys_sendmsg+0x505/0x830
[  663.882918][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  663.884631][   T34]  ? import_iovec+0x74/0xa0
[  663.886091][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  663.887614][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  663.923087][   T34]  ? __fget_files+0x2a/0x420
[  663.924609][   T34]  ? __fget_files+0x3a0/0x420
[  663.926112][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  663.927703][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  663.948003][   T34]  ? rcu_is_watching+0x15/0xb0
[  663.949614][   T34]  ? do_syscall_64+0xbe/0x3b0
[  663.951155][   T34]  do_syscall_64+0xfa/0x3b0
[  663.952626][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.954286][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.956246][   T34]  ? exc_page_fault+0x9f/0xf0
[  663.977873][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.979882][   T34] RIP: 0033:0x7ff67e18e929
[  663.981381][   T34] RSP: 002b:00007ff67f0e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  663.992271][   T34] RAX: ffffffffffffffda RBX: 00007ff67e3b5fa0 RCX: 00007ff67e18e929
[  663.994865][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b
[  663.997519][   T34] RBP: 00007ff67e210b39 R08: 0000000000000000 R09: 0000000000000000
[  664.028057][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  664.031393][   T34] R13: 0000000000000000 R14: 00007ff67e3b5fa0 R15: 00007ffc7365dc48
[  664.034809][   T34]  </TASK>
[  664.079041][   T34] 
[  664.079041][   T34] Showing all locks held in the system:
[  664.082275][   T34] 3 locks held by kworker/1:0/24:
[  664.084149][   T34] 1 lock held by khungtaskd/34:
[  664.085862][   T34]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  664.101235][   T34] 2 locks held by getty/5656:
[  664.102775][   T34]  #0: ffff88810f8990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  664.105810][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  664.119706][   T34] 1 lock held by syz-executor/5827:
[  664.121535][   T34] 4 locks held by kworker/u8:3/5859:
[  664.123242][   T34]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  664.126725][   T34]  #1: ffffc90003e0fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  664.138077][   T34]  #2: ffffffff8f50fd50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  664.141103][   T34]  #3: ffff8881140b06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  664.144711][   T34] 3 locks held by kworker/0:7/9568:
[  664.146470][   T34] 3 locks held by kworker/u8:4/17355:
[  664.178063][   T34] 2 locks held by syz.1.5859/25134:
[  664.179766][   T34]  #0: ffffffff99e74b18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  664.183085][   T34]  #1: ffff8881140b06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  664.186818][   T34] 1 lock held by syz-executor/28437:
[  664.208170][   T34] 
[  664.209045][   T34] =============================================
[  664.209045][   T34] 
[  664.211682][   T34] NMI backtrace for cpu 1
[  664.211691][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  664.211700][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  664.211705][   T34] Call Trace:
[  664.211709][   T34]  <TASK>
[  664.211712][   T34]  dump_stack_lvl+0x189/0x250
[  664.211724][   T34]  ? __wake_up_klogd+0xd9/0x110
[  664.211736][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  664.211745][   T34]  ? __pfx__printk+0x10/0x10
[  664.211760][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  664.211772][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  664.211781][   T34]  ? _printk+0xcf/0x120
[  664.211792][   T34]  ? __pfx__printk+0x10/0x10
[  664.211802][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  664.211810][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  664.211821][   T34]  watchdog+0xfee/0x1030
[  664.211830][   T34]  ? watchdog+0x1de/0x1030
[  664.211839][   T34]  kthread+0x711/0x8a0
[  664.211851][   T34]  ? __pfx_watchdog+0x10/0x10
[  664.211858][   T34]  ? __pfx_kthread+0x10/0x10
[  664.211868][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  664.211879][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.211886][   T34]  ? __pfx_kthread+0x10/0x10
[  664.211896][   T34]  ret_from_fork+0x3fc/0x770
[  664.211905][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  664.211915][   T34]  ? __switch_to_asm+0x39/0x70
[  664.211924][   T34]  ? __switch_to_asm+0x33/0x70
[  664.211932][   T34]  ? __pfx_kthread+0x10/0x10
[  664.211943][   T34]  ret_from_fork_asm+0x1a/0x30
[  664.211957][   T34]  </TASK>
[  664.211980][   T34] Sending NMI from CPU 1 to CPUs 0:
[  664.323982][    C0] NMI backtrace for cpu 0
[  664.323998][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  664.324012][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  664.324019][    C0] RIP: 0010:kasan_check_range+0x9f/0x2c0
[  664.324040][    C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
[  664.324050][    C0] RSP: 0018:ffffc900001268d0 EFLAGS: 00000246
[  664.324063][    C0] RAX: ffff88801c6c3901 RBX: fffffffffffffffb RCX: ffffffff8172c2d6
[  664.324072][    C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc90000126988
[  664.324080][    C0] RBP: 0000000000000000 R08: ffffc900001269e7 R09: 1ffff92000024d3c
[  664.324088][    C0] R10: dffffc0000000000 R11: fffff52000024d38 R12: 000000000000000c
[  664.324096][    C0] R13: ffff88801c6c3980 R14: fffff52000024d3d R15: 1ffff92000024d31
[  664.324104][    C0] FS:  0000000000000000(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  664.324113][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  664.324121][    C0] CR2: 00007eff38bb6038 CR3: 0000000000c0e000 CR4: 00000000000006f0
[  664.324154][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  664.324163][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  664.324170][    C0] Call Trace:
[  664.324175][    C0]  <TASK>
[  664.324182][    C0]  __asan_memset+0x22/0x50
[  664.324196][    C0]  __unwind_start+0x36/0x760
[  664.324215][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  664.324231][    C0]  arch_stack_walk+0xe4/0x150
[  664.324250][    C0]  stack_trace_save+0x9c/0xe0
[  664.324264][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  664.324282][    C0]  kasan_save_stack+0x3e/0x60
[  664.324314][    C0]  kasan_record_aux_stack+0xbd/0xd0
[  664.324324][    C0]  kvfree_call_rcu+0xbb/0x410
[  664.324341][    C0]  cfg80211_update_known_bss+0x634/0x1330
[  664.324353][    C0]  ? cmp_bss+0x8b3/0xe80
[  664.324365][    C0]  ? cmp_bss+0x8b3/0xe80
[  664.324375][    C0]  __cfg80211_bss_update+0x147/0x2120
[  664.324394][    C0]  ? do_raw_spin_lock+0x121/0x290
[  664.324411][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  664.324426][    C0]  ? trace_kmalloc+0x1f/0xd0
[  664.324440][    C0]  ? cfg80211_inform_single_bss_data+0xb90/0x1ac0
[  664.324457][    C0]  cfg80211_inform_single_bss_data+0xba9/0x1ac0
[  664.324476][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  664.324500][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.324512][    C0]  ? queue_work_on+0x1ed/0x270
[  664.324526][    C0]  ? cfg80211_inform_bss_data+0x1e8/0x3b20
[  664.324544][    C0]  cfg80211_inform_bss_data+0x1fb/0x3b20
[  664.324560][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.324570][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  664.324584][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  664.324599][    C0]  ? ieee80211_rx_handlers+0xbc67/0xbce0
[  664.324617][    C0]  ? ieee80211_rx_handlers+0xbc67/0xbce0
[  664.324635][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  664.324658][    C0]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  664.324684][    C0]  ? unwind_next_frame+0xa5/0x2390
[  664.324702][    C0]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  664.324719][    C0]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  664.324738][    C0]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  664.324756][    C0]  ieee80211_bss_info_update+0x746/0x9e0
[  664.324774][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  664.324795][    C0]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  664.324812][    C0]  ieee80211_scan_rx+0x593/0xa20
[  664.324831][    C0]  ieee80211_rx_list+0x22fc/0x2d80
[  664.324843][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  664.324862][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  664.324877][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  664.324888][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  664.324902][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  664.324912][    C0]  ieee80211_rx_napi+0x1a8/0x3d0
[  664.324922][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  664.324935][    C0]  ? skb_dequeue+0x10e/0x150
[  664.324948][    C0]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  664.325007][    C0]  tasklet_action_common+0x36c/0x580
[  664.325021][    C0]  ? trace_sched_exit_tp+0x38/0x120
[  664.325034][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  664.325050][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  664.325065][    C0]  handle_softirqs+0x286/0x870
[  664.325076][    C0]  ? schedule+0x165/0x360
[  664.325092][    C0]  ? run_ksoftirqd+0x9b/0x100
[  664.325106][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  664.325119][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  664.325133][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  664.325144][    C0]  run_ksoftirqd+0x9b/0x100
[  664.325156][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  664.325171][    C0]  smpboot_thread_fn+0x542/0xa60
[  664.325184][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  664.325199][    C0]  kthread+0x711/0x8a0
[  664.325214][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  664.325227][    C0]  ? __pfx_kthread+0x10/0x10
[  664.325242][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  664.325256][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.325265][    C0]  ? __pfx_kthread+0x10/0x10
[  664.325279][    C0]  ret_from_fork+0x3fc/0x770
[  664.325291][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  664.325304][    C0]  ? __switch_to_asm+0x39/0x70
[  664.325317][    C0]  ? __switch_to_asm+0x33/0x70
[  664.325329][    C0]  ? __pfx_kthread+0x10/0x10
[  664.325342][    C0]  ret_from_fork_asm+0x1a/0x30
[  664.325359][    C0]  </TASK>
[  664.577974][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  664.580459][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  664.584574][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  664.588210][   T34] Call Trace:
[  664.589347][   T34]  <TASK>
[  664.590377][   T34]  dump_stack_lvl+0x99/0x250
[  664.592306][   T34]  ? __asan_memcpy+0x40/0x70
[  664.594085][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  664.596235][   T34]  ? __pfx__printk+0x10/0x10
[  664.597854][   T34]  panic+0x2db/0x790
[  664.599189][   T34]  ? __pfx_panic+0x10/0x10
[  664.600651][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  664.602486][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  664.604223][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  664.606392][   T34]  watchdog+0x102d/0x1030
[  664.607851][   T34]  ? watchdog+0x1de/0x1030
[  664.609405][   T34]  kthread+0x711/0x8a0
[  664.610913][   T34]  ? __pfx_watchdog+0x10/0x10
[  664.612611][   T34]  ? __pfx_kthread+0x10/0x10
[  664.614261][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  664.616163][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.618160][   T34]  ? __pfx_kthread+0x10/0x10
[  664.619999][   T34]  ret_from_fork+0x3fc/0x770
[  664.621780][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  664.623752][   T34]  ? __switch_to_asm+0x39/0x70
[  664.625602][   T34]  ? __switch_to_asm+0x33/0x70
[  664.627486][   T34]  ? __pfx_kthread+0x10/0x10
[  664.629301][   T34]  ret_from_fork_asm+0x1a/0x30
[  664.631195][   T34]  </TASK>
[  664.633167][   T34] Kernel Offset: disabled
[  664.634868][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:49:45  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1b7798c RBX=0000000000000000 RCX=d688eae3711f0600 RDX=ffff8881092a0000
RSI=ffffffff8be28fa0 RDI=ffffffff8be28f60 RBP=ffffc900032af9d0 RSP=ffffc900032af880
R8 =0000000000000000 R9 =ffffffff8b379e68 R10=dffffc0000000000 R11=ffffed1022d08d17
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff8dbbcc60 R15=dffffc0000000000
RIP=ffffffff81a72364 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd15408d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f29c4d856a3 00007f29c4d856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 00007f29c4c11b1f
XMM06=0000000000000000 00007f29c4c11b19 XMM07=0000000000000000 00007f29c4c11b2d
XMM08=0000000000000000 00007f29c4c11bb3 XMM09=0000000000000000 00007f29c4c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff88801ffd0237 R9 =1ffff11003ffa046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7918 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f065b696440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffff00ffffffffff ff00000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ffff00ffffff ffffff0000000000 XMM05=0000000000000000 00007f29c4c11b1f
XMM06=0000000000000000 00007f29c4c11b19 XMM07=0000000000000000 00007f29c4c11b2d
XMM08=0000000000000000 00007f29c4c11bb3 XMM09=0000000000000000 00007f29c4c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
