last executing test programs:

43.357287033s ago: executing program 2 (id=3392):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)

42.371053733s ago: executing program 1 (id=3603):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'pimreg0\x00', {}, 0x5}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})

36.410709107s ago: executing program 2 (id=3392):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)

34.466797445s ago: executing program 1 (id=3603):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'pimreg0\x00', {}, 0x5}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})

29.464752052s ago: executing program 2 (id=3392):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)

28.150824353s ago: executing program 1 (id=3603):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'pimreg0\x00', {}, 0x5}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})

21.82003277s ago: executing program 2 (id=3392):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)

20.320591598s ago: executing program 1 (id=3603):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'pimreg0\x00', {}, 0x5}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})

14.785829582s ago: executing program 2 (id=3392):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)

13.29576767s ago: executing program 1 (id=3603):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'pimreg0\x00', {}, 0x5}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})

8.815801153s ago: executing program 0 (id=3821):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001ac0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000001b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r3, 0x100, 0x70bd2b, 0xfffffffe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x4000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0900000001010000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000bc99092779cdfe92a97f0000000000000000000000000000000000ffffffff"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r7, &(0x7f0000000580), &(0x7f0000000340)=""/95}, 0xb)
r8 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.max.burst\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000003480)=[{&(0x7f0000000280)="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", 0xffb}, {&(0x7f0000000100)="dbe063a4ba89", 0x6}], 0x2, 0xb, 0x4b9)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="6103060506029509010f01"], 0xb)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000004ac0)=0x1e, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', <r12=>0x0, 0x7817, 0x8, 0x9, 0x3ff, {{0x27, 0x4, 0x3, 0x1, 0x9c, 0x66, 0x0, 0x97, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x4, [{@empty, 0x6}, {@local, 0x6}, {@multicast1, 0x7}, {@rand_addr=0x64010101, 0x5}, {@broadcast, 0x9}, {@local, 0x7}]}, @timestamp={0x44, 0x14, 0x4e, 0x0, 0x8, [0x7fff, 0xf, 0x1, 0x7]}, @timestamp_addr={0x44, 0x34, 0x6, 0x1, 0x8, [{@broadcast, 0x4}, {@local}, {@multicast1, 0xffffff00}, {@empty, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x76e3001e}, {@local}]}, @ssrr={0x89, 0xb, 0x10, [@dev={0xac, 0x14, 0x14, 0x14}, @local]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x1580, 0x65, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff1, 0x7}, {0x1, 0xfff1}, {0xffff, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0xc7c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6a0, 0x1024, 0x0, 0x8, 0x2, 0xafa2, 0x5, 0x6e7, 0x7, 0x81, 0x80f9, 0x6d, 0x0, 0x9c, 0xffffffff, 0x9, 0x409, 0xffffffc0, 0x5, 0x200000, 0xffffff82, 0x4, 0x7, 0x8, 0x0, 0x2, 0x4, 0x200, 0x8001, 0x9, 0x7, 0x2, 0x3, 0x1, 0x6, 0x10, 0x80000001, 0xffffff7f, 0x7, 0xffffe8ea, 0x4d2, 0x3ff, 0x9, 0x90a, 0x6, 0x0, 0x6, 0x9, 0x9, 0xd0, 0x5, 0x4, 0x9, 0x81, 0x7, 0x40, 0x1, 0x0, 0x6e, 0x50000, 0x9, 0x6, 0x5, 0x100, 0x2, 0xeb, 0xfffffff1, 0x4, 0xbf16, 0xff, 0x2, 0x2, 0x7, 0x10, 0xfffffff7, 0x5, 0x80000000, 0x2, 0x8, 0x6, 0x6, 0x6, 0x7fff, 0x5, 0x4, 0xbd, 0x8, 0x4, 0x6, 0x8, 0x4, 0xcab1, 0x1, 0x3, 0x1, 0x9, 0x5, 0x5, 0x9, 0x6, 0x8, 0x401, 0x7, 0xf4c8, 0xbed4, 0x10, 0x6, 0x1, 0x665, 0x66eb, 0x10000, 0x2, 0x5, 0x0, 0x8, 0xc0000000, 0x842, 0x1f954e3f, 0x5518, 0x4, 0x3, 0x5, 0x7fffffff, 0x9, 0x8, 0x7f, 0x2, 0x5, 0x3, 0x1000, 0x0, 0x5d3, 0x3, 0x1, 0x4, 0xcc, 0x9, 0x3, 0xcdf, 0x4, 0x5, 0xf3af, 0x2, 0xfffffffb, 0x6, 0xffffff7f, 0x0, 0x499, 0x5, 0x8, 0x436, 0x9, 0xf, 0x1, 0xa90, 0x0, 0x5756, 0x400, 0x100000, 0xb65, 0x100, 0x1, 0x8, 0x1, 0x4, 0xfffeffff, 0xadf7829b, 0x31be, 0x3, 0x6, 0x1, 0x71c, 0x9, 0x2, 0xffff, 0xadae, 0x5, 0x2, 0x40, 0x604, 0x4, 0x1, 0x4, 0x2, 0x40, 0x51, 0x111, 0x0, 0x1, 0x4, 0x4, 0x55f8, 0x1, 0x4, 0x37ca593b, 0x1, 0x9, 0x2, 0x3, 0x11b, 0x800, 0x3, 0x4, 0x1, 0x9, 0x5, 0x5, 0x8, 0x800, 0x5, 0x8, 0x2, 0x3, 0x0, 0x10, 0x8001, 0x6, 0x5, 0x3, 0x9, 0x80000000, 0xffffffff, 0x7, 0x2, 0xc55, 0xe29, 0x0, 0x4, 0x4, 0x494b, 0x1481, 0xb37c, 0x2, 0x10001, 0x2, 0x4, 0x8, 0xd0, 0xffffffff, 0xad1, 0x6, 0x4, 0x8001, 0xfffffffc, 0x8, 0x6, 0x8, 0x3, 0x7fffffff, 0x0, 0xfffffff0, 0x100, 0x0, 0x7, 0x80000001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffffff1, 0x5, 0x7, 0x1, 0xfffffffa, 0x1, 0x0, 0x2, 0x9, 0x7, 0x5, 0x5, 0x5, 0x2f0, 0xffff8000, 0x5, 0xfffffffc, 0x6, 0x9feb, 0x5, 0x9, 0xe, 0x100, 0x6, 0x7ff, 0x2, 0x80000000, 0x4, 0x2, 0x5, 0xd, 0xec98, 0x6, 0x8, 0x3, 0x2, 0x7, 0xbba9, 0x100, 0x6, 0x4, 0x10, 0x7f, 0x10, 0x80, 0x6, 0x10, 0x8, 0x2, 0x0, 0x5, 0x4, 0xfffffffe, 0x81, 0x1, 0xfffc0000, 0x6, 0x1, 0x101, 0x572fad21, 0x8000, 0x0, 0x7, 0x1, 0x6, 0x54dd, 0x4, 0x7, 0x5, 0x7, 0xb8, 0x10, 0xf7ec, 0x80, 0x6, 0x1, 0x3, 0x600, 0x8, 0x7, 0x8, 0x4, 0x6, 0x7, 0x6, 0x7, 0x8, 0x6, 0x80000001, 0x9, 0xe80, 0x4, 0xdb, 0x8, 0x56e7, 0x5, 0x6, 0x2af, 0x4, 0x8, 0x0, 0xff, 0x100, 0x8001, 0x8, 0x6, 0x2, 0x7, 0x1, 0x200, 0x3, 0x3, 0x4, 0xffff18cb, 0x2, 0xb5, 0x9bd9, 0x9, 0x6, 0x800, 0x0, 0xc63b, 0x7, 0x3, 0x9, 0x3, 0xfffff31c, 0x7fff, 0x80000001, 0x1, 0x7, 0x3, 0xfffffffe, 0x2fa, 0x1, 0x8, 0x3ff, 0xb59, 0x1, 0x2, 0xfffffffa, 0x9c, 0x7, 0x1, 0x2d4, 0x9, 0x7, 0x1, 0x4, 0x7, 0x3, 0x1ff, 0xd3c, 0x4, 0x2, 0x5, 0x2, 0x1000, 0x2, 0x200, 0xdd, 0x0, 0x59df125, 0x1, 0x8, 0x7fff, 0x9, 0x87, 0x4, 0x7, 0x3, 0x9, 0x4, 0xe, 0x80, 0xa9df, 0x5, 0x9a58, 0xb, 0x5, 0x7f, 0x1, 0x5, 0x8, 0x7, 0x833, 0x5, 0x3, 0x8e, 0x80000000, 0x800, 0xffff7fff, 0xca3c, 0x0, 0xffffffff, 0x0, 0x8, 0xffff, 0x80000000, 0x7, 0x800, 0x18, 0x762d, 0x80, 0x80000001, 0xe, 0x2, 0x2, 0x0, 0x7, 0x9, 0x9, 0xb7b, 0xe, 0x2, 0x0, 0x2, 0x8, 0x8be, 0x1, 0x6, 0x5, 0x8, 0x5, 0xffff, 0x9, 0x1, 0x401, 0x4, 0x6, 0x9b, 0x6, 0x7, 0x1, 0x80000001, 0x40, 0x6, 0xfff, 0xfd, 0x78, 0x10001, 0x7, 0x7f, 0x6, 0xb9, 0x2800, 0x61, 0x6, 0x8, 0x2, 0xfffffff7, 0xf3, 0x1, 0xb, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x58}, @TCA_ROUTE4_POLICE={0x428, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x401, 0xffff, 0xc53, 0x1, 0x7, 0x5, 0x7, 0x2, 0xffff, 0xd, 0x5, 0x9, 0x9, 0x8, 0x7f, 0xe1d, 0xffffffff, 0x7, 0xffffffff, 0x7ff, 0x7, 0x2, 0xffffffff, 0x10001, 0x0, 0x8, 0x2, 0x0, 0x4, 0x2, 0x7, 0x2, 0x66, 0x7, 0x5, 0xf4, 0x4, 0x5, 0x5, 0x8, 0x6, 0x66c, 0x4, 0xffffffff, 0xfffffffc, 0x7ff, 0x80000001, 0x0, 0x8, 0xffffffff, 0xa8, 0x200, 0x9e0, 0x88, 0x3, 0x7fffffff, 0x4580, 0x0, 0x7, 0xc1, 0x7, 0x80000000, 0x0, 0x7f, 0x6, 0x21, 0xfffffffa, 0x8, 0xd4, 0x72, 0x3, 0x800, 0x8, 0x2, 0x4a00, 0x2, 0x5, 0x3, 0xa, 0x2, 0x7d8c, 0x7, 0x3, 0x80000000, 0x7, 0x8, 0x3, 0x1, 0x80000001, 0xffff, 0x2, 0x10, 0x80000000, 0x4, 0x9, 0xf280, 0xffffffff, 0x4, 0xd, 0x7f00000, 0x1, 0xfffffff9, 0x2, 0x3, 0x18, 0x1, 0x0, 0x4, 0x9, 0x9, 0x0, 0x9, 0x1, 0x100, 0x9, 0x7, 0x9f0f, 0x6, 0x5, 0x3, 0x5, 0x2, 0x9, 0x5, 0xffffffff, 0x6, 0x3, 0x3ff, 0x3, 0x10001, 0x8, 0xffffffff, 0xbfb4, 0xe30, 0xfa4, 0x1, 0xf000, 0x8000, 0x3, 0x1, 0x2, 0x7fffffff, 0x7374, 0xdb, 0xffffffc0, 0x3, 0x3, 0x8, 0x81, 0x975, 0x400, 0x4, 0xfffffffd, 0x8, 0x10000, 0x0, 0xd, 0x9, 0x10001, 0x4, 0x5, 0xfffffffd, 0x7e3f, 0x1, 0x2, 0x1, 0x3, 0x6, 0x4, 0x1, 0x9, 0x7, 0xda, 0x4, 0xfffffffa, 0x8, 0x401, 0xfffffff8, 0x31, 0x7, 0x8, 0x4, 0x5, 0x8, 0x0, 0x2, 0x9, 0x63e78299, 0x4, 0xd, 0x3, 0x9, 0x3, 0x5, 0x4, 0x0, 0x1, 0x2, 0xd, 0x9, 0x6, 0x1, 0x8, 0x8, 0x2, 0xffffffc1, 0x5, 0xd3ab136f, 0x63a, 0x400, 0xaa86, 0x356a, 0x6, 0x239, 0x7, 0x5, 0x5, 0x4, 0x7, 0x4, 0x5, 0x440f, 0x80000001, 0x2, 0x400, 0x3, 0x9, 0xd, 0x1ff0, 0x1, 0x2, 0xff, 0x5, 0x9, 0x7, 0x8, 0x8001, 0x8, 0x80000000, 0x7, 0x6, 0xfffff52f, 0x0, 0xae5, 0xdd000, 0x7, 0x9, 0x8, 0x2c9, 0xff, 0x5, 0x3, 0x3, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xf}}]}}, @filter_kind_options=@f_fw={{0x7}, {0x88c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x20}, @TCA_FW_POLICE={0x42c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3980000, 0x9, 0xe9f4, 0x8, 0x4, 0x26, 0x10001, 0x4, 0x630, 0xfffffffc, 0xe9a8, 0x0, 0x7fff, 0xd7, 0x0, 0x2f69, 0x3, 0x5, 0x7fff, 0x9f4, 0x100, 0x400, 0x7, 0x2, 0x3ff, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0xb, 0x80000000, 0x22, 0xd8b4, 0xc0000000, 0x1, 0x3, 0x4, 0x380, 0x7, 0x7, 0x0, 0x7fffffff, 0x4, 0x8, 0x4, 0xa, 0x4, 0xfffffc79, 0x0, 0x0, 0x3, 0x1, 0xe, 0x3, 0xffff, 0x1efd, 0x9, 0x5, 0x0, 0x4, 0x9, 0x0, 0xe, 0x5fb, 0x3, 0xf7ea, 0x400, 0xf3, 0x4, 0x2, 0x5, 0x0, 0x200, 0x4, 0x8, 0x1ff, 0x6, 0x7, 0x8, 0xd7c, 0x9, 0xbb, 0x0, 0x0, 0x6, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x8, 0x9, 0x40, 0xcad, 0x116e, 0x3, 0x7f, 0x4, 0x3, 0xfffffff2, 0x4, 0x6, 0x63ae6fbc, 0x5, 0x7, 0xfffffffc, 0x7, 0xb, 0x40, 0x883, 0x0, 0x2, 0x0, 0x3, 0x2, 0x6, 0x0, 0xf, 0x0, 0x2, 0x2, 0x5, 0x2, 0x6, 0x3, 0x2, 0x5, 0x8, 0x5, 0x3, 0xca8, 0x3, 0x6, 0x20000000, 0x1, 0x873, 0xa8, 0x100, 0x4, 0x6899, 0x10, 0x5, 0xe9, 0x9, 0x5, 0x9, 0x7, 0x7ba4, 0x1, 0xfff, 0x5, 0xfffffffc, 0x1, 0x3, 0x2, 0x1, 0x2, 0x1, 0x9, 0x5, 0x1ff, 0xfffffffe, 0xac3, 0x9, 0x0, 0x80000000, 0x8, 0x0, 0x7fffffff, 0x3, 0x8000, 0x2, 0x8, 0x3, 0x4, 0x4, 0x9, 0xa206, 0x8e5, 0x41aa, 0x9, 0x6, 0xa79, 0x7, 0x24, 0x200, 0x40, 0x1, 0x1, 0x6, 0xf726, 0x0, 0x0, 0x400, 0x80000000, 0xffffffc0, 0x1, 0x5, 0x6, 0x4, 0xfffffffe, 0x10001, 0x6b, 0x7, 0x7, 0x593, 0x0, 0x4, 0xc, 0x7, 0x40, 0x6, 0x7, 0x10000, 0xff, 0xc, 0xd, 0xfff, 0x35ba, 0x2, 0x3, 0xb7a5, 0x580000, 0x5a, 0x3, 0xb, 0xc, 0xe2, 0xfa2d, 0xf2d, 0x9, 0x0, 0x4, 0x3, 0x6, 0x2, 0x3d4, 0x80000000, 0x228e, 0x1, 0x2, 0xfc, 0xffff, 0x6, 0x401, 0xfffffffb, 0x962a, 0xff, 0x3, 0x5, 0x70000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x56f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_FW_MASK={0x8, 0x5, 0xbf32}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x0, 0x40, 0xbc, {0xd, 0x0, 0x4, 0x7, 0x3, 0x2}, {0x4, 0x1, 0x800, 0x7, 0x4, 0xb}, 0xca, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0xfab8, 0x9, 0x3, 0x3, 0x2, 0x0, 0x0, 0x5, 0x8, 0x3, 0x0, 0x7fffffff, 0x4, 0x8a, 0x1, 0x5, 0x6, 0x80000001, 0x5, 0xfffffff7, 0x5, 0x92, 0x1, 0x3, 0x401, 0x7fffffff, 0x0, 0x4, 0x0, 0x3, 0x6, 0x80000, 0x9af, 0x2, 0x8, 0x81, 0x7f, 0x8, 0xd, 0xb, 0x5f60, 0x1, 0x30000000, 0x3, 0x7, 0xfffffffe, 0x2, 0x10001, 0x7, 0x800, 0xfffffffe, 0x9, 0xce3d, 0x3, 0xe4, 0x3f, 0x6, 0x1, 0x8, 0xffffffff, 0x9, 0xfffffff7, 0x4, 0x5, 0x20000, 0xe7d8, 0x7, 0x0, 0x34e, 0x3, 0xfff, 0x5, 0xb, 0xfffffc01, 0x4, 0x5, 0x6, 0x0, 0x6f2, 0x7, 0x5, 0x5, 0xffff, 0x6, 0x6, 0x2, 0x9, 0x7ff, 0x7849e98e, 0x100, 0x7, 0x9, 0x0, 0xe00, 0x0, 0x3, 0x6, 0xffff, 0x7, 0x3, 0x7, 0xa, 0x9, 0x6, 0x4, 0xfffffff8, 0x0, 0xb2b8, 0x100, 0x8, 0x80, 0xa378, 0x8, 0x6, 0x7, 0x4, 0x7, 0x1, 0x1, 0x8, 0x9, 0x5, 0x1, 0x8217, 0x8000, 0x7f, 0x1, 0x0, 0xb0, 0x0, 0x6, 0x6, 0x260, 0x1, 0x0, 0x98f, 0x2, 0x4, 0xffff, 0xfff, 0x3, 0x5ca, 0x8, 0x681, 0x5, 0x6, 0x3, 0xffff, 0x1, 0x0, 0x2, 0x1, 0x426, 0x0, 0x6, 0x8000, 0x9, 0x8, 0x10, 0x5, 0x8, 0x400, 0x80000001, 0x81, 0x3, 0x6, 0x3, 0x4, 0x100, 0x40, 0xc, 0x400, 0x9f, 0x81, 0x7b, 0x7, 0x10, 0x5, 0x5, 0x4, 0x6, 0xbe, 0x1, 0xd7e, 0x5, 0xffffff81, 0xb3, 0x4, 0x0, 0x80000000, 0x9, 0x38b7, 0xefe2, 0xd, 0x1, 0x7ff, 0x5, 0x80000000, 0x5, 0x6, 0x8, 0x1, 0x2, 0x2, 0x8, 0x5, 0x5, 0x3, 0x2, 0x4, 0x3, 0x2, 0x80000000, 0x71, 0x0, 0x3, 0x2c, 0x3, 0x10, 0xe271, 0x6, 0x86d0, 0x40, 0x3, 0x10001, 0xccc, 0x8, 0x0, 0x2, 0x8, 0x9f5e, 0x8, 0xfffffff8, 0x100, 0x9, 0xfce, 0x2222, 0x4, 0x2, 0x9, 0x8, 0x4, 0x9, 0xb, 0x8, 0x76e2f9d2, 0xc5d5, 0x1, 0x6d71, 0x9000, 0x1, 0x6, 0x800, 0x1000]}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x1580}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x20008844)

7.92556661s ago: executing program 0 (id=3822):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x80, 0x702, 0x3, 0x6, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x62, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast2}}}})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xf77, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x2, 0x5, 0x2, [0x3, 0x0]}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x54, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5)
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082c647000ffdbdf252c0000000c00990000000000f53b000000b98e842381b441fabedaf5fb2d0b12f76b95204613498537337f535be4f4"], 0x20}, 0x1, 0x0, 0x0, 0x62b949f9550b286}, 0x8004)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000040}, 0x200400c0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0xeec7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7c, 0x2}, 0xe)
setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
sendmsg$sock(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8c0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x20000010, &(0x7f0000000140)={0x11, 0x16, r8, 0x1, 0x5, 0x6, @broadcast}, 0x14)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000050601080000000000000000030000090900020073797a3100000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
socket$inet6(0xa, 0x2, 0xf)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r12, 0x400448e7, 0x0)

2.855553101s ago: executing program 0 (id=3823):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x9, 0x0, 0x6, 0x6}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@ipv6_newnexthop={0x98, 0x68, 0x100, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x2a}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x3}}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x20b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}]}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000)

2.855148009s ago: executing program 0 (id=3824):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061105e000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000080000050027"], 0x44}, 0x1, 0x0, 0x0, 0x400c010}, 0x0)

2.685131265s ago: executing program 0 (id=3825):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb14000000000000002900000043000000f61500000000000040f300e54079574989ca428cdabb2e667086ea99875372360d065175697ddc57d6"], 0x40}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0xa000000c})

2.544723166s ago: executing program 0 (id=3826):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff})
sendfile(r1, r5, &(0x7f0000000380)=0x2, 0x9)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r6, @ANYRES32=r7], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.061198018s ago: executing program 2 (id=3392):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)

0s ago: executing program 1 (id=3603):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'pimreg0\x00', {}, 0x5}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})

kernel console output (not intermixed with test programs):

dv_slave_0
[  326.085661][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.088050][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.111640][   T13] veth1_macvtap: left promiscuous mode
[  326.113410][   T13] veth0_macvtap: left promiscuous mode
[  326.118039][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  326.121949][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  326.124662][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  326.127618][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  326.130792][   T13] veth1_vlan: left promiscuous mode
[  326.132799][   T13] veth0_vlan: left promiscuous mode
[  326.134904][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  326.495944][   T13] team0 (unregistering): Port device team_slave_1 removed
[  326.525869][   T13] team0 (unregistering): Port device team_slave_0 removed
[  326.908573][T21997] lo speed is unknown, defaulting to 1000
[  326.930706][ T5833] Bluetooth: hci1: command tx timeout
[  327.116537][T22003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3676'.
[  327.187011][T21997] chnl_net:caif_netlink_parms(): no params data found
[  327.330081][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.345250][T21979] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  327.353946][T21979] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  327.359372][T21997] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.362843][T21997] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.365692][T21997] bridge_slave_0: entered allmulticast mode
[  327.369555][T21997] bridge_slave_0: entered promiscuous mode
[  327.376091][T21997] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.379282][T21997] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.383492][T21997] bridge_slave_1: entered allmulticast mode
[  327.388178][T21997] bridge_slave_1: entered promiscuous mode
[  327.392069][T21979] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  327.429769][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.471451][T21979] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  327.477770][T21997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.482572][T21997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.507094][T21997] team0: Port device team_slave_0 added
[  327.534930][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.546521][T21997] team0: Port device team_slave_1 added
[  327.560361][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3679'.
[  327.563117][T22021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3679'.
[  327.565899][T22021] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3679'.
[  327.568694][T22021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3679'.
[  327.589032][T21997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.591426][T21997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.599206][T21997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.614396][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.626159][T21997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.628971][T21997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.640554][T21997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.732010][T21997] hsr_slave_0: entered promiscuous mode
[  327.734598][T21997] hsr_slave_1: entered promiscuous mode
[  327.812049][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'.
[  327.832076][   T13] bridge_slave_1: left allmulticast mode
[  327.833881][   T13] bridge_slave_1: left promiscuous mode
[  327.835673][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.842349][   T13] bridge_slave_0: left allmulticast mode
[  327.844151][   T13] bridge_slave_0: left promiscuous mode
[  327.846032][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.169104][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.174097][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.178047][   T13] bond0 (unregistering): Released all slaves
[  328.195103][T22033] bond15: option mode: unable to set because the bond device has slaves
[  328.210688][ T5833] Bluetooth: hci2: command tx timeout
[  328.230116][T22034] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  328.237747][T22034] bond15: (slave macvlan9): Enslaving as a backup interface with a down link
[  328.246682][T22035] bond15: (slave macvlan4): Releasing backup interface
[  328.248859][T22035] bond15: (slave macvlan4): the permanent HWaddr of slave - 22:77:fd:14:89:a7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  328.262435][T22035] bond61: (slave gretap8): Releasing active interface
[  328.283917][T22035] bond15: (slave macvlan9): Releasing backup interface
[  328.375160][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'.
[  328.378157][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3682'.
[  328.382013][T22037] netlink: 'syz.0.3682': attribute type 1 has an invalid length.
[  328.393208][T21979] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.435209][T21979] 8021q: adding VLAN 0 to HW filter on device team0
[  328.472520][  T754] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.474714][  T754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.547929][T22040] pim6reg1: entered allmulticast mode
[  328.562152][  T754] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.564453][  T754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.727389][   T13] hsr_slave_0: left promiscuous mode
[  328.729631][   T13] hsr_slave_1: left promiscuous mode
[  328.741158][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.743406][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.746572][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.748952][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.779896][   T13] veth1_macvtap: left promiscuous mode
[  328.782364][   T13] veth0_macvtap: left promiscuous mode
[  328.784188][   T13] veth1_vlan: left promiscuous mode
[  328.785869][   T13] veth0_vlan: left promiscuous mode
[  329.010934][ T5833] Bluetooth: hci1: command tx timeout
[  329.225683][   T13] team0 (unregistering): Port device team_slave_1 removed
[  329.254695][   T13] team0 (unregistering): Port device team_slave_0 removed
[  329.588715][T22044] lo speed is unknown, defaulting to 1000
[  329.599835][T21979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.673302][T21997] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  329.684666][T21997] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  329.689164][T21997] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  329.705722][T21997] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  329.743623][T21979] veth0_vlan: entered promiscuous mode
[  329.749353][T21979] veth1_vlan: entered promiscuous mode
[  329.820017][T21979] veth0_macvtap: entered promiscuous mode
[  329.841190][T21979] veth1_macvtap: entered promiscuous mode
[  329.858449][T21979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.868282][T21979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.876650][T21979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.879423][T21979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.883265][T21979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.885955][T21979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.919841][T21997] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.967533][T21997] 8021q: adding VLAN 0 to HW filter on device team0
[  329.976871][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.979053][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.008534][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.010865][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.039012][T19374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.044064][T19374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.088670][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.092990][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.214948][T21997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.245110][T21997] veth0_vlan: entered promiscuous mode
[  330.252282][T21997] veth1_vlan: entered promiscuous mode
[  330.269854][T21997] veth0_macvtap: entered promiscuous mode
[  330.283350][T21997] veth1_macvtap: entered promiscuous mode
[  330.290728][ T5833] Bluetooth: hci2: command tx timeout
[  330.297146][T21997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.305512][T21997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.312548][T21997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.315395][T21997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.318566][T21997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.322103][T21997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.355014][T22060] : entered promiscuous mode
[  330.368923][T22060] netlink: 'syz.0.3686': attribute type 1 has an invalid length.
[  330.384299][T22060] 8021q: adding VLAN 0 to HW filter on device bond63
[  330.417091][ T7774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.421174][ T7774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.455395][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.457811][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.554169][T22064] vxcan1: entered allmulticast mode
[  330.582159][T22071] netlink: 'syz.0.3688': attribute type 9 has an invalid length.
[  330.763346][ T5698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.486795][ T5698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.899012][T22081] x_tables: duplicate underflow at hook 2
[  331.948819][ T5698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.986385][T22083] __nla_validate_parse: 4 callbacks suppressed
[  331.986395][T22083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3691'.
[  331.996740][ T8083] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  331.999086][ T8083] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  332.026671][   T51] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  332.034373][T22087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3692'.
[  332.039885][T22087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3692'.
[  332.045812][T22087] syzkaller0: Caught tx_queue_len zero misconfig
[  332.091370][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  332.098030][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  332.101918][  T790] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  332.104602][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  332.107876][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  332.111604][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  332.143541][ T5698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.167692][T22091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'.
[  332.174079][T22090] lo speed is unknown, defaulting to 1000
[  332.265083][ T5698] bridge_slave_1: left allmulticast mode
[  332.266855][ T5698] bridge_slave_1: left promiscuous mode
[  332.268687][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.274344][ T5698] bridge_slave_0: left allmulticast mode
[  332.276152][ T5698] bridge_slave_0: left promiscuous mode
[  332.277991][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.570649][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.575122][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.578976][ T5698] bond0 (unregistering): Released all slaves
[  332.660918][  T790] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  332.695654][T22090] chnl_net:caif_netlink_parms(): no params data found
[  332.772352][T22090] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.774673][T22090] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.776955][T22090] bridge_slave_0: entered allmulticast mode
[  332.779732][T22090] bridge_slave_0: entered promiscuous mode
[  332.783997][T22090] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.786232][T22090] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.788439][T22090] bridge_slave_1: entered allmulticast mode
[  332.792150][T22090] bridge_slave_1: entered promiscuous mode
[  332.846487][T22090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.878447][T22090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.954389][T22090] team0: Port device team_slave_0 added
[  332.966254][T22090] team0: Port device team_slave_1 added
[  333.021933][ T5698] hsr_slave_0: left promiscuous mode
[  333.024090][ T5698] hsr_slave_1: left promiscuous mode
[  333.026151][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.028366][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.041781][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.044134][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.049530][T22112] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3696'.
[  333.097122][ T5698] veth1_macvtap: left promiscuous mode
[  333.102875][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  333.103377][ T5698] veth0_macvtap: left promiscuous mode
[  333.108090][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  333.108303][ T5698] veth1_vlan: left promiscuous mode
[  333.112846][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  333.115497][ T5698] veth0_vlan: left promiscuous mode
[  333.118670][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  333.121611][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  333.123361][T22115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3696'.
[  333.523668][ T5698] team0 (unregistering): Port device team_slave_1 removed
[  333.555087][ T5698] team0 (unregistering): Port device team_slave_0 removed
[  333.864456][T22090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.866549][T22090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.874491][T22090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.917078][T22090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.919174][T22090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.927230][T22090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.967775][T22113] lo speed is unknown, defaulting to 1000
[  333.973912][T22090] hsr_slave_0: entered promiscuous mode
[  333.981731][T22090] hsr_slave_1: entered promiscuous mode
[  333.983827][T22090] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.986057][T22090] Cannot create hsr debugfs directory
[  334.035022][T22118] x_tables: duplicate underflow at hook 2
[  334.131187][ T5831] Bluetooth: hci1: command tx timeout
[  334.334664][ T5698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.438182][ T5698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.469020][T22113] chnl_net:caif_netlink_parms(): no params data found
[  334.531977][ T5698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.569670][T22146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3702'.
[  334.575692][ T5698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.600043][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3702'.
[  334.623559][T22113] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.625741][T22113] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.627933][T22113] bridge_slave_0: entered allmulticast mode
[  334.630809][T22113] bridge_slave_0: entered promiscuous mode
[  334.633954][T22113] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.636090][T22113] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.638229][T22113] bridge_slave_1: entered allmulticast mode
[  334.644350][T22113] bridge_slave_1: entered promiscuous mode
[  334.668954][T22113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.687668][T22113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.754729][T22113] team0: Port device team_slave_0 added
[  334.767692][T22113] team0: Port device team_slave_1 added
[  334.797565][T22148] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3703'.
[  334.824221][T22113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.826473][T22113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.835052][T22113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.842191][ T5698] bridge_slave_1: left allmulticast mode
[  334.844519][ T5698] bridge_slave_1: left promiscuous mode
[  334.846776][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.865420][ T5698] bridge_slave_0: left allmulticast mode
[  334.867577][ T5698] bridge_slave_0: left promiscuous mode
[  334.869884][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.165359][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.169625][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.172748][ T5831] Bluetooth: hci2: command tx timeout
[  335.178206][ T5698] bond0 (unregistering): Released all slaves
[  335.186192][T22113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.188339][T22113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.198362][T22113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.208599][T22090] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  335.221798][T22090] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  335.266890][T22090] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  335.273607][T22090] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  335.315121][T22113] hsr_slave_0: entered promiscuous mode
[  335.317584][T22113] hsr_slave_1: entered promiscuous mode
[  335.319752][T22113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  335.323144][T22113] Cannot create hsr debugfs directory
[  335.381118][T22157] netlink: 'syz.0.3704': attribute type 1 has an invalid length.
[  335.439677][T22157] 8021q: adding VLAN 0 to HW filter on device bond64
[  335.473659][T22160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'.
[  335.575123][ T5698] hsr_slave_0: left promiscuous mode
[  335.577327][ T5698] hsr_slave_1: left promiscuous mode
[  335.579376][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.582352][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.585094][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.587351][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.609923][ T5698] veth1_macvtap: left promiscuous mode
[  335.612158][ T5698] veth0_macvtap: left promiscuous mode
[  335.613862][ T5698] veth1_vlan: left promiscuous mode
[  335.615462][ T5698] veth0_vlan: left promiscuous mode
[  335.964245][ T5698] team0 (unregistering): Port device team_slave_1 removed
[  335.994171][ T5698] team0 (unregistering): Port device team_slave_0 removed
[  336.220797][ T5831] Bluetooth: hci1: command tx timeout
[  336.370474][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  336.469951][T22090] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.496353][T22090] 8021q: adding VLAN 0 to HW filter on device team0
[  336.509333][T13953] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.511692][T13953] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.523157][T13953] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.525377][T13953] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.560361][T22090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  336.563563][T22090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  336.587771][T22167] smc: net device bond0 applied user defined pnetid SYZ2
[  336.756800][T22090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.765954][T22113] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  336.775201][T22113] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  336.779874][T22113] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  336.786754][T22113] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  336.853889][T22090] veth0_vlan: entered promiscuous mode
[  336.894333][T22090] veth1_vlan: entered promiscuous mode
[  336.923520][T22090] veth0_macvtap: entered promiscuous mode
[  336.932300][T22090] veth1_macvtap: entered promiscuous mode
[  336.937726][T22113] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.964423][T22113] 8021q: adding VLAN 0 to HW filter on device team0
[  336.973590][T19374] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.975784][T19374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.992021][T22090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.996786][T22090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.002617][T19374] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.004816][T19374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.008695][T22187] netlink: 'syz.0.3709': attribute type 6 has an invalid length.
[  337.020890][T22187] __nla_validate_parse: 1 callbacks suppressed
[  337.020900][T22187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3709'.
[  337.033480][T22090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.036561][T22090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.039259][T22090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.042435][T22090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.067042][T22113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  337.157948][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.161937][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.222938][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.225287][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.237456][T22113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.246773][T22205] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3712'.
[  337.250863][ T5831] Bluetooth: hci2: command tx timeout
[  337.264389][T22205] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  337.277343][T22113] veth0_vlan: entered promiscuous mode
[  337.308792][T22113] veth1_vlan: entered promiscuous mode
[  337.327933][T22113] veth0_macvtap: entered promiscuous mode
[  337.334523][T22113] veth1_macvtap: entered promiscuous mode
[  337.345387][T22113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.352417][T22113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.357496][T22113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.362107][T22113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.364910][T22113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.367568][T22113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.428516][ T7774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.434883][ T7774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.455798][  T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.458221][  T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.189065][T22213] netlink: 'syz.0.3714': attribute type 21 has an invalid length.
[  338.191768][T22213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3714'.
[  338.194716][T22215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3714'.
[  338.197436][T22215] netlink: 'syz.0.3714': attribute type 7 has an invalid length.
[  338.211807][T22215] netlink: 'syz.0.3714': attribute type 8 has an invalid length.
[  338.217812][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3714'.
[  338.335510][T22223] netlink: 600 bytes leftover after parsing attributes in process `syz.0.3717'.
[  338.488074][ T8083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.525795][ T8083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.575032][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  339.578784][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  339.581799][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  339.585099][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  339.587653][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  339.612987][T22231] lo speed is unknown, defaulting to 1000
[  339.785090][T22231] chnl_net:caif_netlink_parms(): no params data found
[  339.834572][T22231] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.836917][T22231] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.839099][T22231] bridge_slave_0: entered allmulticast mode
[  339.842542][T22231] bridge_slave_0: entered promiscuous mode
[  339.845876][T22231] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.848078][T22231] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.851090][T22231] bridge_slave_1: entered allmulticast mode
[  339.854501][T22231] bridge_slave_1: entered promiscuous mode
[  339.878885][T22231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.884728][T22231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.912471][T22231] team0: Port device team_slave_0 added
[  339.916277][T22231] team0: Port device team_slave_1 added
[  339.936243][T22231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.938420][T22231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.946757][T22231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.952194][T22231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.954320][T22231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.963234][T22231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.995526][T22231] hsr_slave_0: entered promiscuous mode
[  339.997984][T22231] hsr_slave_1: entered promiscuous mode
[  340.137298][ T8083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.206366][ T8083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.320981][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.325109][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.325205][ T8083] bridge_slave_1: left allmulticast mode
[  340.327803][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.330036][ T8083] bridge_slave_1: left promiscuous mode
[  340.333741][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.335552][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.338666][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.346132][ T8083] bridge_slave_0: left allmulticast mode
[  340.347945][ T8083] bridge_slave_0: left promiscuous mode
[  340.349870][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.641646][ T8083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.646032][ T8083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.649729][ T8083] bond0 (unregistering): Released all slaves
[  340.691725][T22258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3723'.
[  340.694857][T22258] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  340.697166][T22258] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  340.721943][T22254] lo speed is unknown, defaulting to 1000
[  340.803817][T22265] x_tables: duplicate underflow at hook 2
[  341.148603][ T8083] hsr_slave_0: left promiscuous mode
[  341.150934][ T8083] hsr_slave_1: left promiscuous mode
[  341.153015][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.155279][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.158008][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.163479][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.188899][ T8083] veth1_macvtap: left promiscuous mode
[  341.190992][ T8083] veth0_macvtap: left promiscuous mode
[  341.192768][ T8083] veth1_vlan: left promiscuous mode
[  341.194396][ T8083] veth0_vlan: left promiscuous mode
[  341.504342][ T8083] team0 (unregistering): Port device team_slave_1 removed
[  341.537063][ T8083] team0 (unregistering): Port device team_slave_0 removed
[  341.651316][ T5831] Bluetooth: hci1: command tx timeout
[  341.833992][T22254] chnl_net:caif_netlink_parms(): no params data found
[  341.969184][T22231] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  341.981749][T22231] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  341.998267][T22231] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  342.004369][T22254] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.007047][T22254] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.009709][T22254] bridge_slave_0: entered allmulticast mode
[  342.018241][T22254] bridge_slave_0: entered promiscuous mode
[  342.022804][T22231] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  342.029674][T22254] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.040796][T22254] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.043115][T22254] bridge_slave_1: entered allmulticast mode
[  342.051449][T22254] bridge_slave_1: entered promiscuous mode
[  342.124023][T22254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.129779][T22254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.187576][T22254] team0: Port device team_slave_0 added
[  342.192320][T22254] team0: Port device team_slave_1 added
[  342.229116][ T8083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.298882][ T8083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.322197][T22254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.324352][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.335461][T22254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.342235][T22254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.344406][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.352881][T22254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.380620][ T5831] Bluetooth: hci2: command tx timeout
[  342.396043][ T8083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.417740][T22231] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.452296][ T8083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.462158][T22254] hsr_slave_0: entered promiscuous mode
[  342.464686][T22254] hsr_slave_1: entered promiscuous mode
[  342.467104][T22254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.469747][T22254] Cannot create hsr debugfs directory
[  342.493123][T22231] 8021q: adding VLAN 0 to HW filter on device team0
[  342.506800][T22314] dvmrp1: entered allmulticast mode
[  342.531131][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.533783][ T7779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.565119][ T4646] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.567426][ T4646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.598784][T22316] x_tables: duplicate underflow at hook 2
[  342.672607][ T8083] bridge_slave_1: left allmulticast mode
[  342.674506][ T8083] bridge_slave_1: left promiscuous mode
[  342.676342][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.691172][ T8083] bridge_slave_0: left allmulticast mode
[  342.693465][ T8083] bridge_slave_0: left promiscuous mode
[  342.695800][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.878041][T22320] netlink: 'syz.0.3735': attribute type 4 has an invalid length.
[  342.968499][ T8083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.973312][ T8083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.977166][ T8083] bond0 (unregistering): Released all slaves
[  343.157400][T22231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.224425][T22231] veth0_vlan: entered promiscuous mode
[  343.233739][T22231] veth1_vlan: entered promiscuous mode
[  343.278712][T22231] veth0_macvtap: entered promiscuous mode
[  343.285393][T22231] veth1_macvtap: entered promiscuous mode
[  343.299765][T22231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.321928][T22231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.329947][T22231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.334733][T22231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.337615][T22231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.341132][T22231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.401464][ T8083] hsr_slave_0: left promiscuous mode
[  343.403589][ T8083] hsr_slave_1: left promiscuous mode
[  343.405697][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.407985][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.411404][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.413689][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.436928][ T8083] veth1_macvtap: left promiscuous mode
[  343.438709][ T8083] veth0_macvtap: left promiscuous mode
[  343.440550][ T8083] veth1_vlan: left promiscuous mode
[  343.442244][ T8083] veth0_vlan: left promiscuous mode
[  343.592794][T22329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3736'.
[  343.743087][ T5831] Bluetooth: hci1: command tx timeout
[  343.852883][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'.
[  343.855851][T22344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'.
[  343.894312][ T8083] team0 (unregistering): Port device team_slave_1 removed
[  343.933121][ T8083] team0 (unregistering): Port device team_slave_0 removed
[  344.301548][T22345] tipc: Resetting bearer <eth:syzkaller0>
[  344.303947][T22345] syzkaller0: left promiscuous mode
[  344.305625][T22345] syzkaller0: left allmulticast mode
[  344.343311][T22345] sit8: left promiscuous mode
[  344.351388][T22345] vxcan1: left allmulticast mode
[  344.451226][ T5831] Bluetooth: hci2: command tx timeout
[  344.461208][T19374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.463696][T19374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.529148][ T4646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.533332][ T4646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.559016][T22349] x_tables: duplicate underflow at hook 2
[  344.575364][T22254] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  344.609939][T22254] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  344.653583][T22254] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  344.658476][T22254] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  344.716957][T22357] lo speed is unknown, defaulting to 1000
[  344.738991][T22254] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.755516][T22254] 8021q: adding VLAN 0 to HW filter on device team0
[  344.762000][T19374] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.764235][T19374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.776961][T19374] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.779266][T19374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.918034][T22254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.971207][T22254] veth0_vlan: entered promiscuous mode
[  344.988842][T22254] veth1_vlan: entered promiscuous mode
[  345.047263][T22254] veth0_macvtap: entered promiscuous mode
[  345.052745][T22254] veth1_macvtap: entered promiscuous mode
[  345.065487][T22254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.076397][T22254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.093030][T22254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.095754][T22254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.098994][T22254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.110525][T22254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.202065][T22366] batadv_slave_0: entered promiscuous mode
[  345.266499][T19374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.268899][T19374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.286365][T22368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3744'.
[  345.305543][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.308134][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.327418][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  345.446948][T22368] hsr_slave_1 (unregistering): left promiscuous mode
[  345.503812][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  345.532677][ T5698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.546757][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  345.549843][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  345.553503][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  345.556227][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  345.779372][ T5698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.413890][ T5698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.475152][ T5698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.551709][ T5698] bridge_slave_1: left allmulticast mode
[  346.553536][ T5698] bridge_slave_1: left promiscuous mode
[  346.555367][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.559066][ T5698] bridge_slave_0: left allmulticast mode
[  346.561423][ T5698] bridge_slave_0: left promiscuous mode
[  346.563198][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.894602][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.899368][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.904113][ T5698] bond0 (unregistering): Released all slaves
[  346.935638][T22374] lo speed is unknown, defaulting to 1000
[  346.951706][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.955650][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.958384][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.961130][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.963604][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  347.089891][T22376] lo speed is unknown, defaulting to 1000
[  347.364927][ T5698] hsr_slave_0: left promiscuous mode
[  347.367092][ T5698] hsr_slave_1: left promiscuous mode
[  347.369234][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.372628][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.375589][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.377855][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.407624][ T5698] veth1_macvtap: left promiscuous mode
[  347.409562][ T5698] veth0_macvtap: left promiscuous mode
[  347.412177][ T5698] veth1_vlan: left promiscuous mode
[  347.413892][ T5698] veth0_vlan: left promiscuous mode
[  347.783019][ T5698] team0 (unregistering): Port device team_slave_1 removed
[  347.812983][ T5698] team0 (unregistering): Port device team_slave_0 removed
[  348.209945][T22376] chnl_net:caif_netlink_parms(): no params data found
[  348.304664][T22376] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.306988][T22376] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.309538][T22376] bridge_slave_0: entered allmulticast mode
[  348.321298][T22376] bridge_slave_0: entered promiscuous mode
[  348.326308][T22376] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.328677][T22376] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.340646][T22376] bridge_slave_1: entered allmulticast mode
[  348.343508][T22376] bridge_slave_1: entered promiscuous mode
[  348.389438][T22376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.398443][T22376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.425457][T22376] team0: Port device team_slave_0 added
[  348.433033][T22376] team0: Port device team_slave_1 added
[  348.467359][ T5698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.471541][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  348.474750][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  348.478878][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  348.485388][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  348.487984][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  348.512450][T22376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.514533][T22376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.525498][T22376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.532106][T22376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.534241][T22376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.543213][T22376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.552226][T22398] x_tables: duplicate underflow at hook 2
[  348.576891][T22376] hsr_slave_0: entered promiscuous mode
[  348.581188][T22376] hsr_slave_1: entered promiscuous mode
[  348.584168][T22395] lo speed is unknown, defaulting to 1000
[  348.806724][ T5698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.839767][T22395] chnl_net:caif_netlink_parms(): no params data found
[  348.871815][ T5698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.923655][T22395] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.926051][T22395] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.928354][T22395] bridge_slave_0: entered allmulticast mode
[  348.934775][T22395] bridge_slave_0: entered promiscuous mode
[  348.950054][ T5698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.963728][T22395] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.965895][T22395] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.968153][T22395] bridge_slave_1: entered allmulticast mode
[  348.971177][T22395] bridge_slave_1: entered promiscuous mode
[  348.997225][T22395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.003151][T22395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.010677][ T5833] Bluetooth: hci1: command tx timeout
[  349.049429][T22395] team0: Port device team_slave_0 added
[  349.057977][T22395] team0: Port device team_slave_1 added
[  349.095278][T22395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.097589][T22395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.106632][T22395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.129790][T22395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.132299][T22395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.140132][T22395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.156473][T22376] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  349.166062][T22376] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  349.199427][T22376] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  349.207397][T22395] hsr_slave_0: entered promiscuous mode
[  349.211944][T22395] hsr_slave_1: entered promiscuous mode
[  349.214617][T22395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.217320][T22395] Cannot create hsr debugfs directory
[  349.227426][T22376] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  349.233865][ T5698] bridge_slave_1: left allmulticast mode
[  349.235693][ T5698] bridge_slave_1: left promiscuous mode
[  349.237524][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.245559][ T5698] bridge_slave_0: left allmulticast mode
[  349.247392][ T5698] bridge_slave_0: left promiscuous mode
[  349.249305][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.566301][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.571273][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.575233][ T5698] bond0 (unregistering): Released all slaves
[  349.599915][T22413] __nla_validate_parse: 27 callbacks suppressed
[  349.599925][T22413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3750'.
[  349.600060][T22409] veth83: entered promiscuous mode
[  349.931743][T22429] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  349.954194][T22376] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.003996][T22376] 8021q: adding VLAN 0 to HW filter on device team0
[  350.022512][T19374] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.024700][T19374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.049073][T22436] x_tables: duplicate underflow at hook 2
[  350.070671][T19374] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.072799][T19374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.155520][ T5698] hsr_slave_0: left promiscuous mode
[  350.158109][ T5698] hsr_slave_1: left promiscuous mode
[  350.168176][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.170949][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.173770][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.176117][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.204953][ T5698] veth1_macvtap: left promiscuous mode
[  350.206848][ T5698] veth0_macvtap: left promiscuous mode
[  350.208620][ T5698] veth1_vlan: left promiscuous mode
[  350.210361][ T5698] veth0_vlan: left promiscuous mode
[  350.535348][ T5833] Bluetooth: hci2: command tx timeout
[  350.566333][ T5698] team0 (unregistering): Port device team_slave_1 removed
[  350.597844][ T5698] team0 (unregistering): Port device team_slave_0 removed
[  350.993412][T22395] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  350.998071][T22395] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  351.016432][T22395] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  351.026898][T22395] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  351.100084][T22376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.102564][ T5833] Bluetooth: hci1: command tx timeout
[  351.175957][T22376] veth0_vlan: entered promiscuous mode
[  351.182149][T22395] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.203220][T22376] veth1_vlan: entered promiscuous mode
[  351.211062][T22395] 8021q: adding VLAN 0 to HW filter on device team0
[  351.222482][T19374] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.224727][T19374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.234597][T19374] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.236982][T19374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.258656][T22376] veth0_macvtap: entered promiscuous mode
[  351.275201][T22376] veth1_macvtap: entered promiscuous mode
[  351.310617][T22376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.318280][T22376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.324660][T22376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.327774][T22376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.332394][T22376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.335946][T22376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.404145][T19374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.406585][T19374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.445512][T22395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.450023][ T7774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.453255][ T7774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.474728][T22395] veth0_vlan: entered promiscuous mode
[  351.484706][T22395] veth1_vlan: entered promiscuous mode
[  351.505423][T22395] veth0_macvtap: entered promiscuous mode
[  351.515284][T22395] veth1_macvtap: entered promiscuous mode
[  351.546083][T22395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.555065][T22395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.566186][T22395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.568910][T22395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.574491][T22395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.577664][T22395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.666115][T19374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.668536][T19374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.691347][ T4646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.693801][ T4646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.917150][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3758'.
[  352.072608][T22466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3760'.
[  352.104094][T22470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3761'.
[  352.108170][T22470] mac80211_hwsim hwsim113 wlan1: entered allmulticast mode
[  352.116311][T22470] netlink: 'syz.0.3761': attribute type 10 has an invalid length.
[  352.121166][T22470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  352.124659][T22470] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  352.359439][ T5856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.995279][ T5856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.569945][ T5856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.812894][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  353.815939][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  353.819064][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  353.823469][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  353.825902][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  353.846927][T22475] lo speed is unknown, defaulting to 1000
[  353.944245][ T5856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.053283][ T5856] bridge_slave_1: left allmulticast mode
[  354.055328][ T5856] bridge_slave_1: left promiscuous mode
[  354.057453][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.065156][ T5856] bridge_slave_0: left allmulticast mode
[  354.066999][ T5856] bridge_slave_0: left promiscuous mode
[  354.068809][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.390245][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.394779][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.398723][ T5856] bond0 (unregistering): Released all slaves
[  354.411056][T22475] chnl_net:caif_netlink_parms(): no params data found
[  354.524885][T22475] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.527080][T22475] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.529380][T22475] bridge_slave_0: entered allmulticast mode
[  354.532809][T22475] bridge_slave_0: entered promiscuous mode
[  354.536816][T22475] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.539010][T22475] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.542855][T22475] bridge_slave_1: entered allmulticast mode
[  354.546577][T22475] bridge_slave_1: entered promiscuous mode
[  354.569349][T22485] netlink: 'syz.0.3763': attribute type 1 has an invalid length.
[  354.669828][T22475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.699478][T22475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.724922][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  354.728568][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  354.732264][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  354.735185][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  354.737809][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  354.797992][T22475] team0: Port device team_slave_0 added
[  354.828949][T22487] lo speed is unknown, defaulting to 1000
[  354.832649][T22475] team0: Port device team_slave_1 added
[  354.926112][T22475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.928204][T22475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.950951][T22475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.968918][T22475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.976342][T22475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.992197][T22475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.026127][ T5856] hsr_slave_0: left promiscuous mode
[  355.028261][ T5856] hsr_slave_1: left promiscuous mode
[  355.031145][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.033484][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.036200][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.038449][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.061803][ T5856] veth1_macvtap: left promiscuous mode
[  355.063614][ T5856] veth0_macvtap: left promiscuous mode
[  355.065425][ T5856] veth1_vlan: left promiscuous mode
[  355.067128][ T5856] veth0_vlan: left promiscuous mode
[  355.409723][ T5856] team0 (unregistering): Port device team_slave_1 removed
[  355.442540][ T5856] team0 (unregistering): Port device team_slave_0 removed
[  355.904720][ T5833] Bluetooth: hci1: command tx timeout
[  355.911496][T22475] hsr_slave_0: entered promiscuous mode
[  355.914330][T22475] hsr_slave_1: entered promiscuous mode
[  356.067311][T22506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3767'.
[  356.143988][T22502] xt_l2tp: v2 tid > 0xffff: 4294967295
[  356.174846][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'.
[  356.293289][T22487] chnl_net:caif_netlink_parms(): no params data found
[  356.406766][T22487] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.409656][T22487] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.413055][T22487] bridge_slave_0: entered allmulticast mode
[  356.416822][T22487] bridge_slave_0: entered promiscuous mode
[  356.421768][T22487] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.424690][T22487] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.427619][T22487] bridge_slave_1: entered allmulticast mode
[  356.430489][T22487] bridge_slave_1: entered promiscuous mode
[  356.461795][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'.
[  356.465031][T22518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3770'.
[  356.495870][T22487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.535530][ T5856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.547048][T22487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.587345][T22487] team0: Port device team_slave_0 added
[  356.616341][ T5856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.632013][T22487] team0: Port device team_slave_1 added
[  356.676401][T22522] lo speed is unknown, defaulting to 1000
[  356.680120][T22487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.682377][T22487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.691978][T22487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.697120][T22487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.699323][T22487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.707925][T22487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.735214][ T5856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.783315][ T5833] Bluetooth: hci2: command tx timeout
[  356.833017][ T5856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.847449][T22487] hsr_slave_0: entered promiscuous mode
[  356.849715][T22487] hsr_slave_1: entered promiscuous mode
[  356.858731][T22487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  356.861737][T22487] Cannot create hsr debugfs directory
[  357.004181][T22475] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  357.009917][T22475] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  357.045147][T22475] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  357.049777][T22475] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  357.081726][ T5856] bridge_slave_1: left allmulticast mode
[  357.083528][ T5856] bridge_slave_1: left promiscuous mode
[  357.085576][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.093510][ T5856] bridge_slave_0: left allmulticast mode
[  357.095486][ T5856] bridge_slave_0: left promiscuous mode
[  357.097487][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.418583][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.424073][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.428106][ T5856] bond0 (unregistering): Released all slaves
[  357.448163][T22531] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  357.593061][T22475] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.614242][T22475] 8021q: adding VLAN 0 to HW filter on device team0
[  357.623048][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.625187][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.628634][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.630886][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.674962][T22543] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  357.718374][T22545] netlink: 'syz.0.3777': attribute type 13 has an invalid length.
[  357.724199][T22545] netlink: 'syz.0.3777': attribute type 17 has an invalid length.
[  357.756417][T22545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  357.845747][T22545] lo speed is unknown, defaulting to 1000
[  357.938205][T22475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.963176][ T5856] hsr_slave_0: left promiscuous mode
[  357.965534][ T5856] hsr_slave_1: left promiscuous mode
[  357.970671][ T5833] Bluetooth: hci1: command tx timeout
[  357.972053][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.974564][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  357.977659][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  357.979948][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.015862][ T5856] veth1_macvtap: left promiscuous mode
[  358.017752][ T5856] veth0_macvtap: left promiscuous mode
[  358.019614][ T5856] veth1_vlan: left promiscuous mode
[  358.024781][ T5856] veth0_vlan: left promiscuous mode
[  358.431741][ T5856] team0 (unregistering): Port device team_slave_1 removed
[  358.466063][ T5856] team0 (unregistering): Port device team_slave_0 removed
[  358.828769][T22475] veth0_vlan: entered promiscuous mode
[  358.850641][ T5833] Bluetooth: hci2: command tx timeout
[  358.879275][T22475] veth1_vlan: entered promiscuous mode
[  358.882081][T22487] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  358.898368][T22487] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  358.903261][T22487] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  358.915220][T22487] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  358.959352][T22475] veth0_macvtap: entered promiscuous mode
[  358.971733][T22475] veth1_macvtap: entered promiscuous mode
[  359.005408][T22475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.021899][T22475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.030826][T22475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.033888][T22475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.036599][T22475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.039585][T22475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.075050][T22487] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.124722][T22487] 8021q: adding VLAN 0 to HW filter on device team0
[  359.162876][ T4646] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.165213][ T4646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.192550][  T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.195180][  T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.225307][ T4646] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.227658][ T4646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.308857][ T7774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.311410][T22569] netlink: 'syz.0.3781': attribute type 1 has an invalid length.
[  359.313105][ T7774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.333690][T22569] 8021q: adding VLAN 0 to HW filter on device bond66
[  359.372046][T22569] veth85: entered promiscuous mode
[  359.384483][T22569] bond66: (slave veth85): Enslaving as an active interface with a down link
[  359.813165][T22487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.879993][T22487] veth0_vlan: entered promiscuous mode
[  359.894504][T22487] veth1_vlan: entered promiscuous mode
[  359.929717][T22487] veth0_macvtap: entered promiscuous mode
[  359.934718][T22487] veth1_macvtap: entered promiscuous mode
[  360.004268][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.062121][T22487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.090471][T22487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.107833][T22487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.117271][T22487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.122315][T22487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.127389][T22487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.371607][ T4646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.373956][ T4646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.391646][ T4646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.394241][ T4646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.571272][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.935499][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.097521][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.275797][   T12] bridge_slave_1: left allmulticast mode
[  361.278135][   T12] bridge_slave_1: left promiscuous mode
[  361.279897][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.284883][   T12] bridge_slave_0: left allmulticast mode
[  361.286665][   T12] bridge_slave_0: left promiscuous mode
[  361.288468][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.611904][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.618125][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.623197][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.626015][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.629356][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.636551][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.639522][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.646363][   T12] bond0 (unregistering): Released all slaves
[  361.679167][T22584] lo speed is unknown, defaulting to 1000
[  361.956963][T22584] chnl_net:caif_netlink_parms(): no params data found
[  362.029711][   T12] hsr_slave_0: left promiscuous mode
[  362.047714][   T12] hsr_slave_1: left promiscuous mode
[  362.054823][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.057616][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.061097][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.063345][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.088206][   T12] veth1_macvtap: left promiscuous mode
[  362.089965][   T12] veth0_macvtap: left promiscuous mode
[  362.093848][   T12] veth1_vlan: left promiscuous mode
[  362.095497][   T12] veth0_vlan: left promiscuous mode
[  362.397939][   T12] team0 (unregistering): Port device team_slave_1 removed
[  362.433956][   T12] team0 (unregistering): Port device team_slave_0 removed
[  362.664133][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.678268][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.682032][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.685115][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.687522][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.821811][T22591] lo speed is unknown, defaulting to 1000
[  362.874253][T22584] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.877795][T22584] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.880080][T22584] bridge_slave_0: entered allmulticast mode
[  362.883026][T22584] bridge_slave_0: entered promiscuous mode
[  362.893628][T22584] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.899064][T22584] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.907134][T22584] bridge_slave_1: entered allmulticast mode
[  362.910157][T22584] bridge_slave_1: entered promiscuous mode
[  362.956160][T22594] lo speed is unknown, defaulting to 1000
[  362.966481][T22584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.009316][T22584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.074766][T22584] team0: Port device team_slave_0 added
[  363.079253][T22584] team0: Port device team_slave_1 added
[  363.116630][T22584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.118761][T22584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.136344][T22584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.142123][T22584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.144204][T22584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.152839][T22584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.195420][T22584] hsr_slave_0: entered promiscuous mode
[  363.197780][T22584] hsr_slave_1: entered promiscuous mode
[  363.391710][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.444514][T22611] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3787'.
[  363.447221][T22611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3787'.
[  363.466915][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.474685][T22611] dvmrp1: left allmulticast mode
[  363.496303][T22594] chnl_net:caif_netlink_parms(): no params data found
[  363.509885][T22614] rdma_rxe: rxe_newlink: failed to add lo
[  363.512695][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3787'.
[  363.564626][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.585300][T22594] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.587848][T22594] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.593643][T22594] bridge_slave_0: entered allmulticast mode
[  363.596510][T22594] bridge_slave_0: entered promiscuous mode
[  363.605481][T22619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3788'.
[  363.608630][T22594] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.614212][T22594] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.616530][T22594] bridge_slave_1: entered allmulticast mode
[  363.619405][T22594] bridge_slave_1: entered promiscuous mode
[  363.643693][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.660580][ T5833] Bluetooth: hci1: command tx timeout
[  363.672603][T22594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.678135][T22594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.692001][T22621] netlink: 'syz.0.3789': attribute type 1 has an invalid length.
[  363.713574][T22621] 8021q: adding VLAN 0 to HW filter on device bond67
[  363.725783][T22621] netlink: 'syz.0.3789': attribute type 2 has an invalid length.
[  363.728132][T22621] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3789'.
[  363.733434][T22594] team0: Port device team_slave_0 added
[  363.741786][T22594] team0: Port device team_slave_1 added
[  363.775797][T22621] veth87: entered promiscuous mode
[  363.779523][T22621] erspan0: entered allmulticast mode
[  363.785437][T22594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.787493][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.811045][T22594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.815430][T22594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.823658][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.835141][T22594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.886393][T22594] hsr_slave_0: entered promiscuous mode
[  363.893429][T22594] hsr_slave_1: entered promiscuous mode
[  363.895663][T22594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.903247][T22594] Cannot create hsr debugfs directory
[  363.954516][   T12] bridge_slave_1: left allmulticast mode
[  363.956271][   T12] bridge_slave_1: left promiscuous mode
[  363.958008][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.966164][   T12] bridge_slave_0: left allmulticast mode
[  363.967910][   T12] bridge_slave_0: left promiscuous mode
[  363.969629][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.286815][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.292609][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.296409][   T12] bond0 (unregistering): Released all slaves
[  364.411516][T22584] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  364.447519][T22584] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  364.452524][T22584] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  364.493228][T22584] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  364.621276][T22584] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.633013][T22584] 8021q: adding VLAN 0 to HW filter on device team0
[  364.639918][T19374] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.642083][T19374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.665631][T19374] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.667818][T19374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.695319][T22584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  364.780551][ T5833] Bluetooth: hci2: command tx timeout
[  364.814582][   T12] hsr_slave_0: left promiscuous mode
[  364.817198][   T12] hsr_slave_1: left promiscuous mode
[  364.819289][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.825087][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.828417][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.831126][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.856553][   T12] veth1_macvtap: left promiscuous mode
[  364.858336][   T12] veth0_macvtap: left promiscuous mode
[  364.860049][   T12] veth1_vlan: left promiscuous mode
[  364.862580][   T12] veth0_vlan: left promiscuous mode
[  365.215782][   T12] team0 (unregistering): Port device team_slave_1 removed
[  365.245175][   T12] team0 (unregistering): Port device team_slave_0 removed
[  365.585237][T22584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.621807][T22584] veth0_vlan: entered promiscuous mode
[  365.627232][T22584] veth1_vlan: entered promiscuous mode
[  365.657693][T22584] veth0_macvtap: entered promiscuous mode
[  365.677812][T22584] veth1_macvtap: entered promiscuous mode
[  365.712716][T22584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.730518][ T5833] Bluetooth: hci1: command tx timeout
[  365.754848][T22584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.769408][T22584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.774115][T22584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.777153][T22584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.786996][T22584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.796740][T22658] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.3796'.
[  365.799549][T22658] netlink: get zone limit has 8 unknown bytes
[  365.809546][T22658] netlink: 'syz.0.3796': attribute type 1 has an invalid length.
[  365.835077][T22658] 8021q: adding VLAN 0 to HW filter on device bond68
[  365.839260][T22594] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  365.867068][T22658] 8021q: adding VLAN 0 to HW filter on device bond68
[  365.869449][T22658] bond68: (slave vxcan3): The slave device specified does not support setting the MAC address
[  365.875169][T22658] bond68: (slave vxcan3): Error -95 calling set_mac_address
[  365.884269][T22594] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  365.895410][T22594] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  365.919821][T22660] bond68: (slave bridge33): Enslaving as an active interface with a down link
[  365.924471][T22594] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  365.985117][T19374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.987874][T19374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.031518][ T4646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.036171][ T4646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.155780][T22594] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.167278][T22594] 8021q: adding VLAN 0 to HW filter on device team0
[  366.173189][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.175402][ T7774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.188024][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.190346][ T7774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.293964][T22673] lo: entered promiscuous mode
[  366.296382][T22673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'.
[  366.314667][T22594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.342390][T22594] veth0_vlan: entered promiscuous mode
[  366.347797][T22594] veth1_vlan: entered promiscuous mode
[  366.367726][T22594] veth0_macvtap: entered promiscuous mode
[  366.375978][T22594] veth1_macvtap: entered promiscuous mode
[  366.385853][T22594] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.399302][T22594] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.405030][T22594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.407693][T22594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.411973][T22594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.414915][T22594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.467445][T22673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'.
[  366.496400][T22672] lo: left promiscuous mode
[  366.498206][ T4646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.506300][ T4646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.536301][T13953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.538716][T13953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.845672][T22691] netlink: 'syz.0.3802': attribute type 3 has an invalid length.
[  366.855041][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3802'.
[  367.022788][T22324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.068472][T22324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.447243][T22697] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3804'.
[  368.573412][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  368.578257][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  368.578810][T22324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.584923][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  368.588789][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  368.594911][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  368.625647][T22698] lo speed is unknown, defaulting to 1000
[  368.643018][T22324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.719021][T22324] bridge_slave_1: left allmulticast mode
[  368.721392][T22324] bridge_slave_1: left promiscuous mode
[  368.723157][T22324] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.727335][T22324] bridge_slave_0: left allmulticast mode
[  368.729046][T22324] bridge_slave_0: left promiscuous mode
[  368.735257][T22324] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.977737][T22324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.985256][T22324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.989202][T22324] bond0 (unregistering): Released all slaves
[  369.117023][T22698] chnl_net:caif_netlink_parms(): no params data found
[  369.188595][T22698] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.191768][T22698] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.194329][T22698] bridge_slave_0: entered allmulticast mode
[  369.197067][T22698] bridge_slave_0: entered promiscuous mode
[  369.200977][T22698] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.203146][T22698] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.205922][T22698] bridge_slave_1: entered allmulticast mode
[  369.208966][T22698] bridge_slave_1: entered promiscuous mode
[  369.246695][T22698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.261870][T22698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.306383][T22698] team0: Port device team_slave_0 added
[  369.310130][T22698] team0: Port device team_slave_1 added
[  369.326677][T22324] hsr_slave_0: left promiscuous mode
[  369.328867][T22324] hsr_slave_1: left promiscuous mode
[  369.331587][T22324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.333849][T22324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.336596][T22324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.338902][T22324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.373868][T22324] veth1_macvtap: left promiscuous mode
[  369.375588][T22324] veth0_macvtap: left promiscuous mode
[  369.378090][T22324] veth1_vlan: left promiscuous mode
[  369.379801][T22324] veth0_vlan: left promiscuous mode
[  369.726267][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.730784][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.739193][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.742969][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.746039][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.778588][T22324] team0 (unregistering): Port device team_slave_1 removed
[  369.813021][T22324] team0 (unregistering): Port device team_slave_0 removed
[  370.180353][T22698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.182545][T22698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.205735][T22698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.209372][T22710] lo speed is unknown, defaulting to 1000
[  370.211693][T22698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.213867][T22698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.227128][T22698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.268924][T22713] syzkaller1: entered promiscuous mode
[  370.280687][T22713] syzkaller1: entered allmulticast mode
[  370.295749][T22698] hsr_slave_0: entered promiscuous mode
[  370.298393][T22698] hsr_slave_1: entered promiscuous mode
[  370.413822][T22715] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  370.417794][T22715] CPU: 1 UID: 0 PID: 22715 Comm: syz.0.3807 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  370.417806][T22715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  370.417812][T22715] Call Trace:
[  370.417817][T22715]  <TASK>
[  370.417821][T22715]  dump_stack_lvl+0x189/0x250
[  370.417852][T22715]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.417863][T22715]  ? __pfx__printk+0x10/0x10
[  370.417876][T22715]  ? kernfs_path_from_node+0x2c/0x260
[  370.417888][T22715]  ? kernfs_path_from_node+0x2c/0x260
[  370.417898][T22715]  ? kernfs_path_from_node+0x2c/0x260
[  370.417910][T22715]  ? kernfs_path_from_node+0x22c/0x260
[  370.417920][T22715]  ? kernfs_path_from_node+0x2c/0x260
[  370.417932][T22715]  sysfs_warn_dup+0x8e/0xa0
[  370.417943][T22715]  sysfs_do_create_link_sd+0xc0/0x110
[  370.417956][T22715]  device_add_class_symlinks+0x1cf/0x240
[  370.417968][T22715]  device_add+0x475/0xb50
[  370.417981][T22715]  wiphy_register+0x199a/0x26b0
[  370.418000][T22715]  ? __pfx_wiphy_register+0x10/0x10
[  370.418008][T22715]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  370.418023][T22715]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  370.418037][T22715]  ieee80211_register_hw+0x33e1/0x4120
[  370.418057][T22715]  ? ieee80211_register_hw+0x1491/0x4120
[  370.418072][T22715]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  370.418085][T22715]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  370.418101][T22715]  ? __hrtimer_setup+0x187/0x210
[  370.418111][T22715]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  370.418124][T22715]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  370.418149][T22715]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  370.418158][T22715]  ? trace_kmalloc+0x1f/0xd0
[  370.418188][T22715]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  370.418198][T22715]  ? kstrndup+0xbf/0x160
[  370.418215][T22715]  hwsim_new_radio_nl+0xea4/0x1b10
[  370.418232][T22715]  ? __pfx___nla_validate_parse+0x10/0x10
[  370.418248][T22715]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  370.418264][T22715]  ? __nla_parse+0x40/0x60
[  370.418274][T22715]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  370.418291][T22715]  genl_family_rcv_msg_doit+0x215/0x300
[  370.418307][T22715]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  370.418325][T22715]  ? bpf_lsm_capable+0x9/0x20
[  370.418335][T22715]  ? security_capable+0x7e/0x2e0
[  370.418350][T22715]  genl_rcv_msg+0x60e/0x790
[  370.418365][T22715]  ? __pfx_genl_rcv_msg+0x10/0x10
[  370.418376][T22715]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  370.418393][T22715]  netlink_rcv_skb+0x208/0x470
[  370.418403][T22715]  ? __pfx_genl_rcv_msg+0x10/0x10
[  370.418416][T22715]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  370.418434][T22715]  ? down_read+0x1ad/0x2e0
[  370.418444][T22715]  genl_rcv+0x28/0x40
[  370.418454][T22715]  netlink_unicast+0x75c/0x8e0
[  370.418469][T22715]  netlink_sendmsg+0x805/0xb30
[  370.418484][T22715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.418496][T22715]  ? aa_sock_msg_perm+0x94/0x160
[  370.418511][T22715]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  370.418524][T22715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.418534][T22715]  __sock_sendmsg+0x21c/0x270
[  370.418544][T22715]  ____sys_sendmsg+0x505/0x830
[  370.418557][T22715]  ? __pfx_____sys_sendmsg+0x10/0x10
[  370.418572][T22715]  ? import_iovec+0x74/0xa0
[  370.418583][T22715]  ___sys_sendmsg+0x21f/0x2a0
[  370.418595][T22715]  ? __pfx____sys_sendmsg+0x10/0x10
[  370.418624][T22715]  ? __fget_files+0x2a/0x420
[  370.418634][T22715]  ? __fget_files+0x3a0/0x420
[  370.418650][T22715]  __x64_sys_sendmsg+0x19b/0x260
[  370.418661][T22715]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  370.418676][T22715]  ? rcu_is_watching+0x15/0xb0
[  370.418689][T22715]  ? do_syscall_64+0xbe/0x3b0
[  370.418699][T22715]  do_syscall_64+0xfa/0x3b0
[  370.418706][T22715]  ? lockdep_hardirqs_on+0x9c/0x150
[  370.418718][T22715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.418725][T22715]  ? exc_page_fault+0x9f/0xf0
[  370.418738][T22715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.418745][T22715] RIP: 0033:0x7fdb12f8e929
[  370.418754][T22715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.418762][T22715] RSP: 002b:00007fdb13de5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  370.418771][T22715] RAX: ffffffffffffffda RBX: 00007fdb131b5fa0 RCX: 00007fdb12f8e929
[  370.418777][T22715] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  370.418782][T22715] RBP: 00007fdb13010b39 R08: 0000000000000000 R09: 0000000000000000
[  370.418787][T22715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  370.418792][T22715] R13: 0000000000000000 R14: 00007fdb131b5fa0 R15: 00007ffc9bc68708
[  370.418805][T22715]  </TASK>
[  370.615433][ T5833] Bluetooth: hci1: command tx timeout
[  370.653043][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3808'.
[  370.688318][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3808'.
[  370.715508][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'.
[  370.766057][T22710] chnl_net:caif_netlink_parms(): no params data found
[  370.774610][T22723] netlink: 'syz.0.3809': attribute type 58 has an invalid length.
[  370.776992][T22723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3809'.
[  370.813208][T22324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.865570][T22726] sock: sock_timestamping_bind_phc: sock not bind to device
[  370.890073][T22324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.911101][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'.
[  370.950863][T22710] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.953140][T22710] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.955489][T22710] bridge_slave_0: entered allmulticast mode
[  370.958330][T22710] bridge_slave_0: entered promiscuous mode
[  370.964742][T22710] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.967097][T22710] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.969384][T22710] bridge_slave_1: entered allmulticast mode
[  370.972759][T22710] bridge_slave_1: entered promiscuous mode
[  371.011302][T22324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.053409][T22710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.058092][T22710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.079672][T22733] netlink: 'syz.0.3812': attribute type 1 has an invalid length.
[  371.089304][T22324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.128230][T22733] 8021q: adding VLAN 0 to HW filter on device bond69
[  371.138782][T22710] team0: Port device team_slave_0 added
[  371.145342][T22733] ipvlan1: entered allmulticast mode
[  371.147048][T22733] bond69: entered allmulticast mode
[  371.148824][T22698] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  371.162829][T22710] team0: Port device team_slave_1 added
[  371.186954][T22710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.189113][T22710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.198298][T22710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.206931][T22698] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  371.232631][T22710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.234836][T22710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.244177][T22710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.252890][T22739] bridge_slave_0: entered promiscuous mode
[  371.255930][T22698] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  371.283558][T22698] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  371.294033][T22741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.299778][T22710] hsr_slave_0: entered promiscuous mode
[  371.303146][T22741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3814'.
[  371.306490][T22710] hsr_slave_1: entered promiscuous mode
[  371.308633][T22710] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.311540][T22710] Cannot create hsr debugfs directory
[  371.328385][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3814'.
[  371.332838][T22741] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  371.335530][T22741] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  371.415825][T22324] bridge_slave_1: left allmulticast mode
[  371.417672][T22324] bridge_slave_1: left promiscuous mode
[  371.419538][T22324] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.434739][T22324] bridge_slave_0: left allmulticast mode
[  371.436530][T22324] bridge_slave_0: left promiscuous mode
[  371.438378][T22324] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.501791][T22755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3816'.
[  371.505447][T22755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3816'.
[  371.706938][T22324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.711839][T22324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.715558][T22324] bond0 (unregistering): Released all slaves
[  371.811766][ T5833] Bluetooth: hci2: command tx timeout
[  371.893014][T22759] netlink: 'syz.0.3818': attribute type 1 has an invalid length.
[  371.906134][T22759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3818'.
[  371.975457][T22698] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.025816][T22698] 8021q: adding VLAN 0 to HW filter on device team0
[  372.056164][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.058413][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.084687][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.086946][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.131845][T22324] hsr_slave_0: left promiscuous mode
[  372.134139][T22324] hsr_slave_1: left promiscuous mode
[  372.136227][T22324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.138556][T22324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.151619][T22324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.154280][T22324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.176555][T22324] veth1_macvtap: left promiscuous mode
[  372.178363][T22324] veth0_macvtap: left promiscuous mode
[  372.180146][T22324] veth1_vlan: left promiscuous mode
[  372.182073][T22324] veth0_vlan: left promiscuous mode
[  372.544391][T22324] team0 (unregistering): Port device team_slave_1 removed
[  372.578023][T22324] team0 (unregistering): Port device team_slave_0 removed
[  372.692054][ T5831] Bluetooth: hci1: command tx timeout
[  373.033901][ T8083] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  373.107194][T22698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.147639][T22698] veth0_vlan: entered promiscuous mode
[  373.155208][T22698] veth1_vlan: entered promiscuous mode
[  373.177292][T22698] veth0_macvtap: entered promiscuous mode
[  373.182335][T22698] veth1_macvtap: entered promiscuous mode
[  373.192054][T22698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.198622][T22698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.207534][T22698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.211076][T22698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.213637][T22698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.216230][T22698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.894133][ T5831] Bluetooth: hci2: command tx timeout
[  374.022936][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  374.770925][ T5831] Bluetooth: hci1: command tx timeout
[  375.044139][   T12] bond1 (unregistering): Released all slaves
[  375.131806][   T12] bond2 (unregistering): Released all slaves
[  375.224899][   T12] bond3 (unregistering): Released all slaves
[  375.329148][   T12] bond4 (unregistering): Released all slaves
[  375.337538][   T12] bond5 (unregistering): Released all slaves
[  375.436453][   T12] bond6 (unregistering): Released all slaves
[  375.528196][   T12] bond7 (unregistering): Released all slaves
[  375.605790][   T12] bond8 (unregistering): Released all slaves
[  375.613708][   T12] bond9 (unregistering): Released all slaves
[  375.699508][   T12] bond10 (unregistering): Released all slaves
[  375.709162][   T12] bond11 (unregistering): Released all slaves
[  375.718588][   T12] bond12 (unregistering): Released all slaves
[  375.814596][   T12] bond13 (unregistering): Released all slaves
[  375.822302][   T12] bond14 (unregistering): Released all slaves
[  375.829726][   T12] bond15 (unregistering): Released all slaves
[  375.936409][   T12] bond16 (unregistering): Released all slaves
[  375.980290][ T5831] Bluetooth: hci2: command tx timeout
[  376.021528][   T12] bond17 (unregistering): Released all slaves
[  376.106118][   T12] bond18 (unregistering): Released all slaves
[  376.183550][   T12] bond19 (unregistering): Released all slaves
[  376.267177][   T12] bond20 (unregistering): Released all slaves
[  376.355537][   T12] bond21 (unregistering): Released all slaves
[  376.363092][   T12] bond22 (unregistering): Released all slaves
[  376.459667][   T12] bond23 (unregistering): Released all slaves
[  376.467105][   T12] bond24 (unregistering): Released all slaves
[  376.546869][   T12] bond25 (unregistering): Released all slaves
[  376.554377][   T12] bond26 (unregistering): Released all slaves
[  376.561822][   T12] bond27 (unregistering): Released all slaves
[  376.651724][   T12] bond28 (unregistering): Released all slaves
[  376.729584][   T12] bond29 (unregistering): Released all slaves
[  376.737013][   T12] bond30 (unregistering): Released all slaves
[  376.822296][   T12] bond31 (unregistering): Released all slaves
[  376.861437][ T5831] Bluetooth: hci1: command tx timeout
[  376.902574][   T12] bond32 (unregistering): Released all slaves
[  376.987100][   T12] bond33 (unregistering): Released all slaves
[  376.995636][   T12] bond34 (unregistering): Released all slaves
[  377.077476][   T12] bond35 (unregistering): Released all slaves
[  377.166322][   T12] bond36 (unregistering): Released all slaves
[  377.253657][   T12] bond37 (unregistering): Released all slaves
[  377.262270][   T12] bond38 (unregistering): Released all slaves
[  377.269396][   T12] bond39 (unregistering): Released all slaves
[  377.367230][   T12] bond40 (unregistering): Released all slaves
[  377.464626][   T12] bond41 (unregistering): Released all slaves
[  377.557808][   T12] bond42 (unregistering): Released all slaves
[  377.565691][   T12] bond43 (unregistering): Released all slaves
[  377.573331][   T12] bond44 (unregistering): Released all slaves
[  377.666824][   T12] bond45 (unregistering): Released all slaves
[  377.674389][   T12] bond46 (unregistering): Released all slaves
[  377.784554][   T12] bond0 (unregistering): Released all slaves
[  377.798298][   T12] bond47 (unregistering): Released all slaves
[  377.809243][   T12] bond48 (unregistering): Released all slaves
[  377.899305][   T12] bond49 (unregistering): Released all slaves
[  377.978058][   T12] bond50 (unregistering): Released all slaves
[  377.985567][   T12] bond51 (unregistering): Released all slaves
[  378.054159][ T5831] Bluetooth: hci2: command tx timeout
[  378.079732][   T12] bond52 (unregistering): Released all slaves
[  378.160138][   T12] bond53 (unregistering): Released all slaves
[  378.238294][   T12] bond54 (unregistering): Released all slaves
[  378.320893][   T12] bond55 (unregistering): Released all slaves
[  378.397022][   T12] bond56 (unregistering): Released all slaves
[  378.404305][   T12] bond57 (unregistering): Released all slaves
[  378.484674][   T12] bond58 (unregistering): Released all slaves
[  378.578651][   T12] bond59 (unregistering): Released all slaves
[  378.661318][   T12] bond60 (unregistering): Released all slaves
[  378.744742][   T12] bond61 (unregistering): Released all slaves
[  378.828761][   T12] bond62 (unregistering): Released all slaves
[  378.839715][T22710] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  378.845529][T22783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  378.850123][T22710] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  378.861831][T22710] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  378.887030][T22710] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  378.954904][ T7779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.957329][ T7779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.008243][T22795] __nla_validate_parse: 4 callbacks suppressed
[  379.008252][T22795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3824'.
[  379.039318][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.046041][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.089869][T22801] pim6reg1: entered promiscuous mode
[  379.096082][T22801] pim6reg1: entered allmulticast mode
[  379.210759][   T12] tipc: Left network mode
[  379.217652][T22803] netlink: 'syz.0.3826': attribute type 11 has an invalid length.
[  379.220144][T22803] netlink: 'syz.0.3826': attribute type 4 has an invalid length.
[  379.223999][T22803] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3826'.
[  379.235206][T22803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3826'.
[  379.235841][T22710] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.290611][T22710] 8021q: adding VLAN 0 to HW filter on device team0
[  379.300110][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.302492][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.330313][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.332736][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.435191][T22710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  379.618100][T22710] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.667194][T22710] veth0_vlan: entered promiscuous mode
[  379.766061][T22710] veth1_vlan: entered promiscuous mode
[  379.787891][T22710] veth0_macvtap: entered promiscuous mode
[  379.792144][T22710] veth1_macvtap: entered promiscuous mode
[  379.806719][T22710] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.816117][T22710] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.819935][T22710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.828094][T22710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.830919][T22710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.833562][T22710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.933312][ T9422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.936240][ T9422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.158841][   T12] pim6reg (unregistering): left allmulticast mode
[  380.618216][ T9422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.627913][ T9422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.922418][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.601983][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.607494][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.615790][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.619475][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.624577][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.625077][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.655677][T22812] lo speed is unknown, defaulting to 1000
[  381.678790][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.727877][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.928237][T22812] chnl_net:caif_netlink_parms(): no params data found
[  381.994277][T22812] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.996547][T22812] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.998674][T22812] bridge_slave_0: entered allmulticast mode
[  382.004043][T22812] bridge_slave_0: entered promiscuous mode
[  382.007270][T22812] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.009480][T22812] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.011957][T22812] bridge_slave_1: entered allmulticast mode
[  382.014700][T22812] bridge_slave_1: entered promiscuous mode
[  382.039339][T22812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.049964][T22812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.072455][T22812] team0: Port device team_slave_0 added
[  382.076016][T22812] team0: Port device team_slave_1 added
[  382.101303][T22812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.103393][T22812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.111228][T22812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.115485][T22812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.117633][T22812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.126364][T22812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.159223][T22812] hsr_slave_0: entered promiscuous mode
[  382.161636][T22812] hsr_slave_1: entered promiscuous mode
[  382.163684][T22812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  382.165923][T22812] Cannot create hsr debugfs directory
[  382.205576][   T12] bridge_slave_1: left allmulticast mode
[  382.207423][   T12] bridge_slave_1: left promiscuous mode
[  382.209550][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.214414][   T12] bridge_slave_0: left allmulticast mode
[  382.216307][   T12] bridge_slave_0: left promiscuous mode
[  382.218329][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.553382][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.557795][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.564640][   T12] bond0 (unregistering): Released all slaves
[  383.109576][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  383.264856][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.268319][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.271566][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.274504][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.277172][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.650610][ T5833] Bluetooth: hci0: command tx timeout
[  384.559752][   T12] bond68 (unregistering): (slave bridge33): Releasing active interface
[  384.744181][   T12] bond1 (unregistering): Released all slaves
[  384.826612][   T12] bond2 (unregistering): Released all slaves
[  384.834388][   T12] bond3 (unregistering): Released all slaves
[  384.913649][   T12] bond4 (unregistering): Released all slaves
[  384.992232][   T12] bond5 (unregistering): Released all slaves
[  385.070141][   T12] bond6 (unregistering): Released all slaves
[  385.144103][   T12] bond7 (unregistering): Released all slaves
[  385.217339][   T12] bond8 (unregistering): Released all slaves
[  385.295999][   T12] bond9 (unregistering): Released all slaves
[  385.303378][   T12] bond10 (unregistering): Released all slaves
[  385.341075][ T5833] Bluetooth: hci1: command tx timeout
[  385.383454][   T12] bond11 (unregistering): Released all slaves
[  385.463035][   T12] bond12 (unregistering): Released all slaves
[  385.544243][   T12] bond13 (unregistering): Released all slaves
[  385.622132][   T12] bond14 (unregistering): Released all slaves
[  385.698378][   T12] bond15 (unregistering): Released all slaves
[  385.730607][ T5833] Bluetooth: hci0: command tx timeout
[  385.778734][   T12] bond16 (unregistering): Released all slaves
[  385.854035][   T12] bond17 (unregistering): Released all slaves
[  385.861388][   T12] bond18 (unregistering): Released all slaves
[  385.941851][   T12] bond19 (unregistering): Released all slaves
[  386.017265][   T12] bond20 (unregistering): Released all slaves
[  386.094080][   T12] bond21 (unregistering): Released all slaves
[  386.101566][   T12] bond22 (unregistering): Released all slaves
[  386.163546][   T12] smc: removing net device bond0 with user defined pnetid SYZ2
[  386.166953][   T12] bond0 (unregistering): Released all slaves
[  386.175305][   T12] bond23 (unregistering): Released all slaves
[  386.255625][   T12] bond24 (unregistering): Released all slaves
[  386.331742][   T12] bond25 (unregistering): Released all slaves
[  386.338738][   T12] bond26 (unregistering): Released all slaves
[  386.346143][   T12] bond27 (unregistering): Released all slaves
[  386.424635][   T12] bond28 (unregistering): Released all slaves
[  386.498944][   T12] bond29 (unregistering): Released all slaves
[  386.506182][   T12] bond30 (unregistering): Released all slaves
[  386.513387][   T12] bond31 (unregistering): Released all slaves
[  386.520766][   T12] bond32 (unregistering): Released all slaves
[  386.608386][   T12] bond33 (unregistering): Released all slaves
[  386.617245][   T12] bond34 (unregistering): Released all slaves
[  386.700840][   T12] bond35 (unregistering): Released all slaves
[  386.707865][   T12] bond36 (unregistering): Released all slaves
[  386.789532][   T12] bond37 (unregistering): Released all slaves
[  386.871377][   T12] bond38 (unregistering): Released all slaves
[  386.958312][   T12] bond39 (unregistering): Released all slaves
[  386.965815][   T12] bond40 (unregistering): Released all slaves
[  387.049461][   T12] bond41 (unregistering): Released all slaves
[  387.127377][   T12] bond42 (unregistering): Released all slaves
[  387.134914][   T12] bond43 (unregistering): Released all slaves
[  387.215682][   T12] bond44 (unregistering): Released all slaves
[  387.289603][   T12] bond45 (unregistering): Released all slaves
[  387.363681][   T12] bond46 (unregistering): Released all slaves
[  387.371133][   T12] bond47 (unregistering): Released all slaves
[  387.420527][ T5833] Bluetooth: hci1: command tx timeout
[  387.448750][   T12] bond48 (unregistering): Released all slaves
[  387.524401][   T12] bond49 (unregistering): Released all slaves
[  387.531757][   T12] bond50 (unregistering): Released all slaves
[  387.610460][   T12] bond51 (unregistering): Released all slaves
[  387.685560][   T12] bond52 (unregistering): Released all slaves
[  387.766432][   T12] bond53 (unregistering): Released all slaves
[  387.820528][ T5833] Bluetooth: hci0: command tx timeout
[  387.844038][   T12] bond54 (unregistering): Released all slaves
[  387.851760][   T12] bond55 (unregistering): Released all slaves
[  387.858687][   T12] bond56 (unregistering): Released all slaves
[  387.866280][   T12] bond57 (unregistering): Released all slaves
[  387.875493][   T12] bond58 (unregistering): Released all slaves
[  387.964300][   T12] bond59 (unregistering): Released all slaves
[  388.045870][   T12] bond60 (unregistering): Released all slaves
[  388.125236][   T12] bond61 (unregistering): Released all slaves
[  388.201295][   T12] bond62 (unregistering): Released all slaves
[  388.277332][   T12] bond63 (unregistering): Released all slaves
[  388.389161][   T12] bond64 (unregistering): Released all slaves
[  388.396571][   T12] bond65 (unregistering): Released all slaves
[  388.473309][   T12] bond66 (unregistering): (slave veth85): Releasing active interface
[  388.476870][   T12] bond66 (unregistering): Released all slaves
[  388.553478][   T12] bond67 (unregistering): Released all slaves
[  388.626728][   T12] bond68 (unregistering): Released all slaves
[  388.705989][   T12] bond69 (unregistering): Released all slaves
[  388.743811][T22822] lo speed is unknown, defaulting to 1000
[  389.043466][   T12] : left promiscuous mode
[  389.138700][   T12] _Z`Ԁ@: left promiscuous mode
[  389.188771][   T12] : left promiscuous mode
[  389.202488][T22822] chnl_net:caif_netlink_parms(): no params data found
[  389.265986][   T12] `: left promiscuous mode
[  389.359481][T22822] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.365456][T22822] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.367673][T22822] bridge_slave_0: entered allmulticast mode
[  389.370840][T22822] bridge_slave_0: entered promiscuous mode
[  389.373581][   T12] : left promiscuous mode
[  389.378022][T22812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  389.382509][T22822] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.384769][T22822] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.386994][T22822] bridge_slave_1: entered allmulticast mode
[  389.389701][T22822] bridge_slave_1: entered promiscuous mode
[  389.399600][T22812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  389.445047][T22822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.448021][T22812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  389.454554][   T12] tipc: Left network mode
[  389.455240][T22812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  389.467692][T22822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.500743][ T5833] Bluetooth: hci1: command tx timeout
[  389.524849][T22822] team0: Port device team_slave_0 added
[  389.528627][T22822] team0: Port device team_slave_1 added
[  389.573306][T22822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.575543][T22822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.586715][T22822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.598271][T22822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.600949][T22822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.608876][T22822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.648093][T22822] hsr_slave_0: entered promiscuous mode
[  389.652611][T22822] hsr_slave_1: entered promiscuous mode
[  389.654747][T22822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  389.657079][T22822] Cannot create hsr debugfs directory
[  389.784052][T22812] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.818396][T22822] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.837152][T22812] 8021q: adding VLAN 0 to HW filter on device team0
[  389.842859][ T4646] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.845097][ T4646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.863748][ T4646] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.865990][ T4646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.890920][T22822] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.891149][ T5833] Bluetooth: hci0: command tx timeout
[  389.904268][T22812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  389.907913][T22812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.984056][T22822] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.035320][T22822] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.056072][T22812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.109822][T22812] veth0_vlan: entered promiscuous mode
[  390.116832][T22812] veth1_vlan: entered promiscuous mode
[  390.137628][T22812] veth0_macvtap: entered promiscuous mode
[  390.143012][T22812] veth1_macvtap: entered promiscuous mode
[  390.170736][T22812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.182482][T22812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.201600][T22812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.204346][T22812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.207041][T22812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.209727][T22812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.216068][T22822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  390.227367][T22822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  390.244945][T22822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  390.268943][T22822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  390.381370][ T4646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.383864][ T4646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.453676][T22822] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.459634][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.464170][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.490132][T22822] 8021q: adding VLAN 0 to HW filter on device team0
[  390.501806][T19374] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.504016][T19374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.525866][T19374] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.528077][T19374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.595705][   T12] hsr_slave_0: left promiscuous mode
[  390.606664][   T12] hsr_slave_1: left promiscuous mode
[  390.608879][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.615706][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.618757][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.621832][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.633840][   T12] hsr_slave_0: left promiscuous mode
[  390.647802][   T12] veth1_macvtap: left promiscuous mode
[  390.649564][   T12] veth0_macvtap: left promiscuous mode
[  390.654741][   T12] veth1_vlan: left promiscuous mode
[  390.656475][   T12] veth0_vlan: left promiscuous mode
[  390.965840][   T12] team0 (unregistering): Port device team_slave_1 removed
[  390.994163][   T12] team0 (unregistering): Port device team_slave_0 removed
[  391.545613][   T12] pim6reg (unregistering): left allmulticast mode
[  391.570715][ T5833] Bluetooth: hci1: command tx timeout
[  391.646658][   T12] pim6reg9 (unregistering): left allmulticast mode
[  391.751029][   T12] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  391.754686][   T12] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  391.757666][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  391.762238][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  391.765347][   T12] Workqueue: netns cleanup_net
[  391.766844][   T12] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0
[  391.768598][   T12] Code: ff ff ff e8 a9 02 42 01 89 c5 31 ff 89 c6 e8 7e f1 92 f7 85 ed 74 45 e8 35 ed 92 f7 eb 05 e8 2e ed 92 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 6f f6 f7 49 8b 2c 24 49 8d 7c
[  391.774358][   T12] RSP: 0018:ffffc900000f72e0 EFLAGS: 00010206
[  391.776202][   T12] RAX: 000000001fffe000 RBX: 1ffff110240e1f82 RCX: ffff88801c2dd640
[  391.778636][   T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  391.781034][   T12] RBP: 0000000000000001 R08: ffffffff8fa1f5f7 R09: 1ffffffff1f43ebe
[  391.783444][   T12] R10: dffffc0000000000 R11: fffffbfff1f43ebf R12: 00000000ffff0000
[  391.785855][   T12] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88812070fc10
[  391.788189][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  391.790784][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  391.792713][   T12] CR2: 00007ff7440d1440 CR3: 000000000df38000 CR4: 00000000000006f0
[  391.795078][   T12] Call Trace:
[  391.796085][   T12]  <TASK>
[  391.797021][   T12]  mld_clear_delrec+0x105/0x5d0
[  391.798512][   T12]  ipv6_mc_destroy_dev+0x45/0x5a0
[  391.800038][   T12]  ? addrconf_ifdown+0x1396/0x1880
[  391.801564][   T12]  addrconf_ifdown+0x139e/0x1880
[  391.803061][   T12]  ? tls_dev_event+0x717/0xec0
[  391.804522][   T12]  ? __pfx_addrconf_ifdown+0x10/0x10
[  391.806124][   T12]  addrconf_notify+0x1bc/0x1010
[  391.807653][   T12]  notifier_call_chain+0x1b6/0x3e0
[  391.809234][   T12]  unregister_netdevice_many_notify+0x15d8/0x2320
[  391.811180][   T12]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  391.813180][   T12]  ? unregister_netdevice_queue+0x1b3/0x380
[  391.814978][   T12]  ? __pfx_veth_dellink+0x10/0x10
[  391.816528][   T12]  default_device_exit_batch+0x819/0x890
[  391.818253][   T12]  ? __pfx___might_resched+0x10/0x10
[  391.819895][   T12]  ? __pfx_default_device_exit_batch+0x10/0x10
[  391.821801][   T12]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  391.823496][   T12]  ? net_generic+0x1e/0x240
[  391.824923][   T12]  ? __pfx_default_device_exit_batch+0x10/0x10
[  391.826822][   T12]  ops_undo_list+0x525/0x990
[  391.828208][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  391.829770][   T12]  cleanup_net+0x4c5/0x800
[  391.831110][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  391.832615][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  391.834199][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  391.835919][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  391.837605][   T12]  process_scheduled_works+0xae1/0x17b0
[  391.839303][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  391.841156][   T12]  worker_thread+0x8a0/0xda0
[  391.842592][   T12]  kthread+0x711/0x8a0
[  391.843850][   T12]  ? __pfx_worker_thread+0x10/0x10
[  391.845445][   T12]  ? __pfx_kthread+0x10/0x10
[  391.846861][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  391.848454][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  391.850039][   T12]  ? __pfx_kthread+0x10/0x10
[  391.851464][   T12]  ret_from_fork+0x3fc/0x770
[  391.852884][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  391.854466][   T12]  ? __switch_to_asm+0x39/0x70
[  391.855938][   T12]  ? __switch_to_asm+0x33/0x70
[  391.857391][   T12]  ? __pfx_kthread+0x10/0x10
[  391.858787][   T12]  ret_from_fork_asm+0x1a/0x30
[  391.860214][   T12]  </TASK>
[  391.861143][   T12] Modules linked in:
[  391.862932][   T12] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  391.880507][   T12] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0
[  391.882291][   T12] Code: ff ff ff e8 a9 02 42 01 89 c5 31 ff 89 c6 e8 7e f1 92 f7 85 ed 74 45 e8 35 ed 92 f7 eb 05 e8 2e ed 92 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 6f f6 f7 49 8b 2c 24 49 8d 7c
[  391.888210][   T12] RSP: 0018:ffffc900000f72e0 EFLAGS: 00010206
[  391.890115][   T12] RAX: 000000001fffe000 RBX: 1ffff110240e1f82 RCX: ffff88801c2dd640
[  391.892794][   T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  391.895231][   T12] RBP: 0000000000000001 R08: ffffffff8fa1f5f7 R09: 1ffffffff1f43ebe
[  391.897668][   T12] R10: dffffc0000000000 R11: fffffbfff1f43ebf R12: 00000000ffff0000
[  391.900086][   T12] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88812070fc10
[  391.902720][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  391.905355][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  391.907354][   T12] CR2: 00007fb54f0e7d60 CR3: 000000000df38000 CR4: 00000000000006f0
[  391.909761][   T12] Kernel panic - not syncing: Fatal exception
[  391.912187][   T12] Kernel Offset: disabled
[  391.913566][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:55:40  Registers:
info registers vcpu 0

CPU#0
RAX=e06f5376796b2d00 RBX=ffffffff81976c78 RCX=e06f5376796b2d00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f44d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0ecb61440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 ff00000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=0000000000000000 00007f6652a11b1f
XMM06=0000000000000000 00007f6652a11b19 XMM07=0000000000000000 00007f6652a11b2d
XMM08=0000000000000000 00007f6652a11bb3 XMM09=0000000000000000 00007f6652a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6a70
R8 =ffff888108118237 R9 =1ffff11021023046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c8 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7440d1440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fb54e585d00
XMM02=0000000000000045 0104818800000000 XMM03=00007fb54e585d50 000055556a70da80
XMM04=0000000000000000 0000000000000011 XMM05=0000000000000000 000000000001df8a
XMM06=1000421000060170 bc20100000000047 XMM07=1000060100000000 0007a00300080007
XMM08=9803010000120806 0790030000000046 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
