last executing test programs:

35.926601633s ago: executing program 2 (id=724):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0xda}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711063000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {0x0, 0x0, 0x1000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4)

29.726839512s ago: executing program 2 (id=724):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0xda}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711063000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {0x0, 0x0, 0x1000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4)

23.840577772s ago: executing program 2 (id=724):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0xda}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711063000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {0x0, 0x0, 0x1000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4)

17.977971788s ago: executing program 2 (id=724):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0xda}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711063000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {0x0, 0x0, 0x1000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4)

11.722967884s ago: executing program 2 (id=724):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0xda}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711063000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {0x0, 0x0, 0x1000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4)

4.885640166s ago: executing program 2 (id=724):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0xda}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711063000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009)
connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000500000008000300040003000c0001"], 0x28}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {0x0, 0x0, 0x1000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4)

3.738608481s ago: executing program 0 (id=1507):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x33, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, &(0x7f0000000700)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r5=>0x0, 0xa7c, 0x6}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x208, 0x2, 0x3b, r5}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

2.844899008s ago: executing program 0 (id=1508):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x5e}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)

2.778247006s ago: executing program 0 (id=1509):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048804}, 0x0)

2.479182766s ago: executing program 0 (id=1510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b80)={0x44, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x2c, 0x1, 0x0, 0x1, [@nested={0x28, 0x1c, 0x0, 0x1, [@typed={0xc, 0x37, 0x0, 0x0, @u64=0xfffffffffffffff7}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x11, 0x77, 0x0, 0x0, @str='0000:00:10.0\x00'}]}]}]}]}, 0x44}}, 0x4010)

2.389426217s ago: executing program 0 (id=1511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x7c, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.19583561s ago: executing program 0 (id=1512):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r6}, 0x18)
unshare(0x64000600)
r8 = socket$inet6(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r1, 0x8b22, &(0x7f0000000040))

569.759292ms ago: executing program 1 (id=1519):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9ccf5960ef42b000000e3bd6efb010511000b0002000d000010ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8800)

460.079115ms ago: executing program 1 (id=1520):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)

206.963616ms ago: executing program 1 (id=1521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

121.896282ms ago: executing program 1 (id=1522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)

120.80796ms ago: executing program 1 (id=1523):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000d60000e200000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

0s ago: executing program 1 (id=1524):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/11], 0x48)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53904' (ED25519) to the list of known hosts.
syzkaller login: [   49.332676][ T5792] cgroup: Unknown subsys name 'net'
[   49.461180][ T5792] cgroup: Unknown subsys name 'cpuset'
[   49.466860][ T5792] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.089144][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.071488][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.087378][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.090489][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.094554][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.098244][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.101880][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.105483][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.111005][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.115159][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.118850][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.124420][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.127658][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.131933][ T5222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.135470][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.139569][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.423435][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   55.509191][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   55.520364][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   55.611256][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.614646][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.620764][ T5833] bridge_slave_0: entered allmulticast mode
[   55.624771][ T5833] bridge_slave_0: entered promiscuous mode
[   55.649879][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.653082][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.656412][ T5833] bridge_slave_1: entered allmulticast mode
[   55.660369][ T5833] bridge_slave_1: entered promiscuous mode
[   55.715844][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.718657][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.721012][ T5834] bridge_slave_0: entered allmulticast mode
[   55.723700][ T5834] bridge_slave_0: entered promiscuous mode
[   55.727023][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.729854][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.732164][ T5834] bridge_slave_1: entered allmulticast mode
[   55.735086][ T5834] bridge_slave_1: entered promiscuous mode
[   55.748728][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.760926][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.763340][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.765973][ T5829] bridge_slave_0: entered allmulticast mode
[   55.769986][ T5829] bridge_slave_0: entered promiscuous mode
[   55.774857][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.789457][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.792447][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.795071][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.799617][ T5829] bridge_slave_1: entered allmulticast mode
[   55.802530][ T5829] bridge_slave_1: entered promiscuous mode
[   55.830256][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.845290][ T5833] team0: Port device team_slave_0 added
[   55.873377][ T5833] team0: Port device team_slave_1 added
[   55.879288][ T5834] team0: Port device team_slave_0 added
[   55.883077][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.896924][ T5834] team0: Port device team_slave_1 added
[   55.906675][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.924048][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.927054][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.939244][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.952288][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.954699][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.963297][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.974743][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.977106][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.987114][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.995618][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.998520][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.008160][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.021393][ T5829] team0: Port device team_slave_0 added
[   56.024910][ T5829] team0: Port device team_slave_1 added
[   56.082466][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.084972][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.093189][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.102088][ T5833] hsr_slave_0: entered promiscuous mode
[   56.104989][ T5833] hsr_slave_1: entered promiscuous mode
[   56.112167][ T5834] hsr_slave_0: entered promiscuous mode
[   56.115037][ T5834] hsr_slave_1: entered promiscuous mode
[   56.119428][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.122192][ T5834] Cannot create hsr debugfs directory
[   56.124446][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.127081][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.136709][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.213288][ T5829] hsr_slave_0: entered promiscuous mode
[   56.216465][ T5829] hsr_slave_1: entered promiscuous mode
[   56.219995][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.223357][ T5829] Cannot create hsr debugfs directory
[   56.412639][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.420642][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.453716][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.461794][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.510192][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.519418][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.542769][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.561550][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.612818][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.620469][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.634489][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.644649][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.703180][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.739920][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   56.764672][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.767919][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.782228][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.788982][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.791410][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.816082][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   56.828383][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.830957][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.846033][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.848596][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.861989][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.865307][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.896888][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.936172][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   56.949360][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.952423][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.976813][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.989926][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.992898][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.076346][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.131095][ T5837] Bluetooth: hci2: command tx timeout
[   57.135569][ T5833] veth0_vlan: entered promiscuous mode
[   57.145027][ T5833] veth1_vlan: entered promiscuous mode
[   57.179804][ T5833] veth0_macvtap: entered promiscuous mode
[   57.186752][ T5833] veth1_macvtap: entered promiscuous mode
[   57.207541][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.212301][ T5837] Bluetooth: hci0: command tx timeout
[   57.212365][   T54] Bluetooth: hci1: command tx timeout
[   57.233977][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.245476][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.251339][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.254977][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.259649][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.292089][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.304816][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.393409][ T5829] veth0_vlan: entered promiscuous mode
[   57.397972][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.400338][ T5834] veth0_vlan: entered promiscuous mode
[   57.401338][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.425659][ T5829] veth1_vlan: entered promiscuous mode
[   57.431399][ T5834] veth1_vlan: entered promiscuous mode
[   57.474465][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.478666][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.493915][ T5834] veth0_macvtap: entered promiscuous mode
[   57.501662][ T5834] veth1_macvtap: entered promiscuous mode
[   57.511538][ T5829] veth0_macvtap: entered promiscuous mode
[   57.516099][ T5829] veth1_macvtap: entered promiscuous mode
[   57.531214][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.540717][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.553995][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.567093][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.576862][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.580904][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.583698][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.594163][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.611372][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.630700][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.633495][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.635112][ T5900] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   57.636515][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.643170][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.666296][ T5900] netlink: 550 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.727383][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.749163][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.818169][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.824593][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.852339][ T5906] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   57.854889][ T5906] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6'.
[   57.862065][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.865430][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.869704][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.875152][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.936911][ T5908] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20001
[   57.999855][ T5911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.003145][ T5911] Zero length message leads to an empty skb
[   58.115959][ T5924] netlink: 240 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.430716][ T5942] netlink: 52 bytes leftover after parsing attributes in process `syz.2.20'.
[   58.671178][ T5962] ieee802154 phy0 wpan0: encryption failed: -90
[   58.808164][ T5976] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   58.871746][ T5912] syz.1.2 (5912) used greatest stack depth: 19512 bytes left
[   58.917428][ T5981] xt_hashlimit: size too large, truncated to 1048576
[   58.921160][ T5981] xt_hashlimit: max too large, truncated to 1048576
[   59.111570][ T5997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.176654][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'.
[   59.207749][   T54] Bluetooth: hci2: command tx timeout
[   59.288068][   T54] Bluetooth: hci1: command tx timeout
[   59.298072][   T54] Bluetooth: hci0: command tx timeout
[   59.889364][ T6064] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   59.892011][ T6064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.70'.
[   59.936983][ T6067] netlink: 'syz.1.71': attribute type 20 has an invalid length.
[   60.164790][ T6076] warning: `syz.1.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.255716][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.370857][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.80'.
[   60.373794][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.80'.
[   61.287976][   T54] Bluetooth: hci2: command tx timeout
[   61.368423][ T5837] Bluetooth: hci1: command tx timeout
[   61.371171][   T54] Bluetooth: hci0: command tx timeout
[   61.387127][ T6122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.94'.
[   61.775040][ T6139] gtp0: entered promiscuous mode
[   61.777244][ T6139] gtp0: entered allmulticast mode
[   62.156502][ T6175] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   63.280312][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.292409][ T6257] batadv_slave_1: entered promiscuous mode
[   63.368521][   T54] Bluetooth: hci2: command tx timeout
[   63.448230][   T54] Bluetooth: hci0: command tx timeout
[   63.450274][   T54] Bluetooth: hci1: command tx timeout
[   63.532529][ T6263] bridge0: port 3(veth0_to_bridge) entered blocking state
[   63.543236][ T6263] bridge0: port 3(veth0_to_bridge) entered disabled state
[   63.555805][ T6263] veth0_to_bridge: entered allmulticast mode
[   63.567484][ T6263] veth0_to_bridge: entered promiscuous mode
[   63.569815][ T6263] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.582959][ T6263] bridge0: port 3(veth0_to_bridge) entered blocking state
[   63.585866][ T6263] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   64.062011][ T6289] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.163540][ T6298] syzkaller1: entered promiscuous mode
[   64.165416][ T6298] syzkaller1: entered allmulticast mode
[   64.215263][ T6302] __nla_validate_parse: 4 callbacks suppressed
[   64.215276][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'.
[   64.272552][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'.
[   64.386099][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.171'.
[   64.408616][   T26] wlan1: Trigger new scan to find an IBSS to join
[   64.965401][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'.
[   65.089541][ T6341] netlink: 'syz.0.183': attribute type 2 has an invalid length.
[   65.290990][ T6355] tipc: Started in network mode
[   65.293655][ T6355] tipc: Node identity 125731a348fe, cluster identity 4711
[   65.299436][ T6355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.303379][ T6355] syzkaller0: entered promiscuous mode
[   65.305922][ T6355] syzkaller0: entered allmulticast mode
[   65.331050][ T6355] tipc: Resetting bearer <eth:syzkaller0>
[   65.336410][ T6354] tipc: Resetting bearer <eth:syzkaller0>
[   65.346689][ T6354] tipc: Disabling bearer <eth:syzkaller0>
[   65.489832][ T6373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.199'.
[   65.642127][ T6383] netlink: 128 bytes leftover after parsing attributes in process `syz.0.205'.
[   65.704078][ T6391] netlink: 'syz.2.207': attribute type 1 has an invalid length.
[   65.846581][ T6406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.963453][ T6416] netlink: 'syz.0.220': attribute type 15 has an invalid length.
[   66.288066][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'.
[   66.332915][ T6441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.232'.
[   66.338739][ T6441] netlink: 43 bytes leftover after parsing attributes in process `syz.0.232'.
[   66.342737][ T6441] netlink: 'syz.0.232': attribute type 6 has an invalid length.
[   66.346856][ T6441] netlink: 'syz.0.232': attribute type 5 has an invalid length.
[   66.349560][ T6441] netlink: 43 bytes leftover after parsing attributes in process `syz.0.232'.
[   66.410321][ T6447] netlink: 'syz.0.235': attribute type 9 has an invalid length.
[   66.413260][ T6447] netlink: 'syz.0.235': attribute type 7 has an invalid length.
[   66.416168][ T6447] netlink: 'syz.0.235': attribute type 8 has an invalid length.
[   66.735172][ T6456] bridge0: port 3(veth0_to_bridge) entered disabled state
[   66.738626][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.742016][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.806241][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.817988][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.859840][ T6456] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.862717][ T6456] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.865614][ T6456] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.868750][ T6456] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.906728][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.913212][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.917311][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.922215][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.182163][ T6484] bond0: Unable to set peer notification delay as MII monitoring is disabled
[   67.512923][ T6515] netlink: 'syz.1.268': attribute type 6 has an invalid length.
[   68.753434][ T6594] netlink: 'syz.1.303': attribute type 1 has an invalid length.
[   69.549961][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.554651][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.577508][ T6639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.865409][ T6656] __nla_validate_parse: 7 callbacks suppressed
[   69.865431][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'.
[   69.966807][ T6660] IPv6: NLM_F_CREATE should be specified when creating new route
[   69.970904][ T6660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.974245][ T6660] IPv6: NLM_F_CREATE should be set when creating new route
[   69.977371][ T6660] IPv6: NLM_F_CREATE should be set when creating new route
[   69.980718][ T6660] IPv6: NLM_F_CREATE should be set when creating new route
[   70.043379][ T6663] netlink: 60 bytes leftover after parsing attributes in process `syz.1.336'.
[   70.313635][ T6680] netlink: 204 bytes leftover after parsing attributes in process `syz.1.345'.
[   70.318115][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'.
[   70.849299][ T6724] xt_ecn: cannot match TCP bits for non-tcp packets
[   70.890934][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.895027][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.284265][ T6779] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.392'.
[   71.411229][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'.
[   71.446515][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[   71.837059][ T6820] tipc: Started in network mode
[   71.838974][ T6820] tipc: Node identity 5e78f9c308a9, cluster identity 4711
[   71.841822][ T6820] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   71.875616][ T6820] tipc: Resetting bearer <eth:syzkaller0>
[   71.882314][ T6818] tipc: Resetting bearer <eth:syzkaller0>
[   72.799077][ T6818] tipc: Disabling bearer <eth:syzkaller0>
[   72.867860][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'.
[   73.828656][ T6881] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.953818][ T6898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'.
[   74.076894][   T10] IPVS: starting estimator thread 0...
[   74.167820][ T6915] IPVS: using max 39 ests per chain, 93600 per kthread
[   74.235280][ T6927] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   74.295301][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[   74.503096][ T6943] syzkaller0: entered allmulticast mode
[   74.643631][ T6954] ieee802154 phy0 wpan0: encryption failed: -22
[   74.825621][   T51] IPVS: starting estimator thread 0...
[   74.910378][ T6979] C: renamed from team_slave_0 (while UP)
[   74.915900][ T6979] validate_nla: 3 callbacks suppressed
[   74.915913][ T6979] netlink: 'syz.1.477': attribute type 3 has an invalid length.
[   74.919456][ T6969] IPVS: using max 80 ests per chain, 192000 per kthread
[   74.924739][ T6979] netlink: 152 bytes leftover after parsing attributes in process `syz.1.477'.
[   74.924772][ T6979] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   75.149465][   T51] IPVS: starting estimator thread 0...
[   75.184130][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'.
[   75.188707][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'.
[   75.191921][ T7006] netlink: 'syz.2.491': attribute type 12 has an invalid length.
[   75.201326][ T7006] netlink: 'syz.2.491': attribute type 14 has an invalid length.
[   75.249974][ T7002] IPVS: using max 80 ests per chain, 192000 per kthread
[   75.372238][   T33] audit: type=1800 audit(1752131316.891:2): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.493" name="memory.events" dev="tmpfs" ino=764 res=0 errno=0
[   75.906063][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'.
[   75.920793][ T7069] vlan2: entered promiscuous mode
[   75.922887][ T7069] bridge0: entered promiscuous mode
[   76.563736][ T7120] netlink: 'syz.1.544': attribute type 13 has an invalid length.
[   76.813376][ T7132] tipc: Started in network mode
[   76.819549][ T7132] tipc: Node identity 368f1f78de0a, cluster identity 4711
[   76.824301][ T7132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.831461][ T7132] syzkaller0: entered promiscuous mode
[   76.834131][ T7132] syzkaller0: entered allmulticast mode
[   76.855783][ T7132] tipc: Resetting bearer <eth:syzkaller0>
[   76.860341][ T7131] tipc: Resetting bearer <eth:syzkaller0>
[   76.871618][ T7131] tipc: Disabling bearer <eth:syzkaller0>
[   77.859952][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[   78.107332][ T7163] Bluetooth: MGMT ver 1.23
[   78.906366][ T7184] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   79.025864][ T7194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.032041][ T7194] syzkaller0: entered promiscuous mode
[   79.034567][ T7194] syzkaller0: entered allmulticast mode
[   79.054412][ T7194] tipc: Resetting bearer <eth:syzkaller0>
[   79.057480][ T7193] tipc: Resetting bearer <eth:syzkaller0>
[   79.066338][ T7193] tipc: Disabling bearer <eth:syzkaller0>
[   79.400143][ T7206] netlink: 'syz.1.578': attribute type 13 has an invalid length.
[   79.403177][ T7206] netlink: 'syz.1.578': attribute type 17 has an invalid length.
[   79.454049][ T7206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.556318][ T7211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.615642][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.672797][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.281079][ T7254] ieee802154 phy0 wpan0: encryption failed: -22
[   80.327043][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[   80.332480][ T7257] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   80.423276][ T7266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.603'.
[   80.427104][ T7266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'.
[   80.581204][ T7283] netlink: 'syz.0.611': attribute type 15 has an invalid length.
[   80.679332][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'.
[   80.790043][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[   80.810774][ T7305] netlink: 'syz.2.623': attribute type 2 has an invalid length.
[   81.048014][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[   81.098273][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'.
[   81.105531][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'.
[   81.113163][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[   81.128838][  T788] cfg80211: failed to load regulatory.db
[   81.223728][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'.
[   81.226464][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'.
[   81.230549][ T7335] netlink: 'syz.1.637': attribute type 18 has an invalid length.
[   81.500185][ T7357] netlink: 'syz.1.647': attribute type 84 has an invalid length.
[   82.923536][ T7438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.013080][ T7452] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   83.017831][ T7452] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   83.030095][ T7448] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   83.071904][ T7448] tipc: Resetting bearer <eth:syzkaller0>
[   83.087910][ T7447] tipc: Resetting bearer <eth:syzkaller0>
[   83.142497][ T7464] netlink: 'syz.0.696': attribute type 1 has an invalid length.
[   83.145233][ T7464] netlink: 'syz.0.696': attribute type 1 has an invalid length.
[   83.862127][ T7447] tipc: Disabling bearer <eth:syzkaller0>
[   84.079715][ T7485] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   84.499037][ T7516] ip6t_rpfilter: unknown options
[   84.948738][   T13] veth0_to_bridge: left allmulticast mode
[   84.957917][   T13] veth0_to_bridge: left promiscuous mode
[   84.960878][   T13] bridge0: port 3(veth0_to_bridge) entered disabled state
[   84.998906][   T13] bridge_slave_1: left allmulticast mode
[   85.000976][   T13] bridge_slave_1: left promiscuous mode
[   85.002830][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.029925][   T13] bridge_slave_0: left allmulticast mode
[   85.031738][   T13] bridge_slave_0: left promiscuous mode
[   85.043037][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.075278][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.084346][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.088148][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.092013][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.099150][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.116080][ T7550] tipc: Failed to remove unknown binding: 66,1,1/0:2865575904/2865575906
[   85.323498][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.328580][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.332343][   T13] bond0 (unregistering): Released all slaves
[   85.416772][   T13] tipc: Left network mode
[   85.513610][   T33] audit: type=1804 audit(1752131327.031:3): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.736" name="/newroot/229/cgroup.controllers" dev="tmpfs" ino=1170 res=1 errno=0
[   85.540067][   T33] audit: type=1800 audit(1752131327.031:4): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.736" name="cgroup.controllers" dev="tmpfs" ino=1170 res=0 errno=0
[   85.677178][ T7546] chnl_net:caif_netlink_parms(): no params data found
[   85.726998][   T13] hsr_slave_0: left promiscuous mode
[   85.734965][   T13] hsr_slave_1: left promiscuous mode
[   85.737418][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.745770][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.006626][   T13] team0 (unregistering): Port device team_slave_1 removed
[   86.042197][   T13] team0 (unregistering): Port device team_slave_0 removed
[   86.438860][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.441267][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.443710][ T7546] bridge_slave_0: entered allmulticast mode
[   86.446551][ T7546] bridge_slave_0: entered promiscuous mode
[   86.459595][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.462879][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.465588][ T7546] bridge_slave_1: entered allmulticast mode
[   86.470021][ T7546] bridge_slave_1: entered promiscuous mode
[   86.534793][ T7596] __nla_validate_parse: 7 callbacks suppressed
[   86.534844][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   86.560855][ T7596] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   86.563811][ T7596] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   86.575455][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.592180][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.657458][ T7603] 8021q: VLANs not supported on ipvlan1
[   86.664372][ T7546] team0: Port device team_slave_0 added
[   86.674015][ T7546] team0: Port device team_slave_1 added
[   86.745050][ T7612] netlink: 'syz.1.753': attribute type 1 has an invalid length.
[   86.750215][ T7612] netlink: 112 bytes leftover after parsing attributes in process `syz.1.753'.
[   86.772030][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.774941][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.786197][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.794569][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.797338][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.808138][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.817261][   T13] IPVS: stop unused estimator thread 0...
[   86.877385][ T7546] hsr_slave_0: entered promiscuous mode
[   86.882285][ T7546] hsr_slave_1: entered promiscuous mode
[   87.127861][   T54] Bluetooth: hci1: command tx timeout
[   87.293659][ T7628] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   87.368040][ T7633] openvswitch: netlink: IP tunnel dst address not specified
[   87.446743][ T7640] netlink: 'syz.1.761': attribute type 1 has an invalid length.
[   87.555119][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.558323][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.793423][ T7641] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.796991][ T7641] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.800789][ T7641] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.805104][ T7641] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.166689][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'.
[   88.255362][ T7546] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.273538][ T7546] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.289840][ T7546] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.310778][ T7546] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.560794][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.592539][ T7546] 8021q: adding VLAN 0 to HW filter on device team0
[   88.656082][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.658811][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.679453][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.681989][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.953748][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.012639][ T7546] veth0_vlan: entered promiscuous mode
[   89.025823][ T7546] veth1_vlan: entered promiscuous mode
[   89.079066][ T7546] veth0_macvtap: entered promiscuous mode
[   89.088740][ T7546] veth1_macvtap: entered promiscuous mode
[   89.116762][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.131974][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.149645][ T7546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.153420][ T7546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.159709][ T7546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.166486][ T7546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.218849][   T54] Bluetooth: hci1: command tx timeout
[   89.282910][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.286854][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.343956][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.351507][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.999977][ T7788] xt_ecn: cannot match TCP bits for non-tcp packets
[   90.932004][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.256797][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.262668][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.271630][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.275422][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.278640][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.514096][ T7821] chnl_net:caif_netlink_parms(): no params data found
[   91.624135][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.629095][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.632698][ T7821] bridge_slave_0: entered allmulticast mode
[   91.638690][ T7821] bridge_slave_0: entered promiscuous mode
[   91.643840][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.648108][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.651067][ T7821] bridge_slave_1: entered allmulticast mode
[   91.654805][ T7821] bridge_slave_1: entered promiscuous mode
[   91.685166][ T7821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.704128][ T7821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.725690][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'.
[   91.733531][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'.
[   91.737138][ T7854] netlink: 'syz.1.826': attribute type 12 has an invalid length.
[   91.741386][ T7821] team0: Port device team_slave_0 added
[   91.742102][ T7854] netlink: 'syz.1.826': attribute type 14 has an invalid length.
[   91.746056][ T7821] team0: Port device team_slave_1 added
[   91.772017][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.782531][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.793832][ T7821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.799358][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.801745][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.822398][ T7821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.878737][ T7821] hsr_slave_0: entered promiscuous mode
[   91.882010][ T7821] hsr_slave_1: entered promiscuous mode
[   91.884926][ T7821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.889262][ T7821] Cannot create hsr debugfs directory
[   92.581724][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.660190][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.729512][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.893578][ T5863] bridge_slave_1: left allmulticast mode
[   92.895534][ T5863] bridge_slave_1: left promiscuous mode
[   92.900615][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.923861][ T5863] bridge_slave_0: left allmulticast mode
[   92.925838][ T5863] bridge_slave_0: left promiscuous mode
[   92.930458][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.060814][   T33] audit: type=1800 audit(1752131334.581:5): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.831" name="memory.events" dev="tmpfs" ino=1578 res=0 errno=0
[   93.163324][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.171303][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.175118][ T5863] bond0 (unregistering): Released all slaves
[   93.368288][ T5837] Bluetooth: hci1: command tx timeout
[   93.600304][ T5863] hsr_slave_0: left promiscuous mode
[   93.603498][ T5863] hsr_slave_1: left promiscuous mode
[   93.606267][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.611859][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.629958][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.642438][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.686604][ T5863] veth1_macvtap: left promiscuous mode
[   93.689948][ T5863] veth0_macvtap: left promiscuous mode
[   93.692559][ T5863] veth1_vlan: left promiscuous mode
[   93.704977][ T5863] veth0_vlan: left promiscuous mode
[   94.083574][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   94.110126][ T5863] team0 (unregistering): Port device team_slave_0 removed
[   94.402167][ T7928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.405800][ T7929] syzkaller0: entered promiscuous mode
[   94.408965][ T7929] syzkaller0: entered allmulticast mode
[   94.423254][ T7937] tipc: Resetting bearer <eth:syzkaller0>
[   94.441337][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[   94.450894][ T7925] tipc: Disabling bearer <eth:syzkaller0>
[   94.532006][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'.
[   94.552842][ T7821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.565977][ T7821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.591727][ T7821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.616533][ T7821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.738115][ T7957] netlink: 280 bytes leftover after parsing attributes in process `syz.1.857'.
[   94.764005][ T7821] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.782330][ T7821] 8021q: adding VLAN 0 to HW filter on device team0
[   94.818876][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.821268][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.824838][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.827708][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.841875][ T7821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.845434][ T7821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.868194][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'.
[   94.992011][ T7821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.060139][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'.
[   95.064916][ T7988] bridge_slave_1: left allmulticast mode
[   95.066940][ T7988] bridge_slave_1: left promiscuous mode
[   95.069310][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.073515][ T7988] bridge_slave_0: left allmulticast mode
[   95.079001][ T7988] bridge_slave_0: left promiscuous mode
[   95.080952][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.185613][ T7821] veth0_vlan: entered promiscuous mode
[   95.206674][ T7821] veth1_vlan: entered promiscuous mode
[   95.260330][ T7821] veth0_macvtap: entered promiscuous mode
[   95.269520][ T7821] veth1_macvtap: entered promiscuous mode
[   95.285355][ T7821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.300032][ T7821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.306249][ T7821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.310284][ T7821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.314201][ T7821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.318249][ T7821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.378711][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.382179][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.441870][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.444546][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.447802][ T5837] Bluetooth: hci1: command tx timeout
[   95.892800][ T8017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.882'.
[   95.981245][ T8022] netlink: 'syz.1.881': attribute type 4 has an invalid length.
[   96.109962][ T8025] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   96.113986][ T8025] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   97.629914][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.819596][   T33] audit: type=1800 audit(1752131339.341:6): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.895" name="@" dev="tmpfs" ino=1757 res=0 errno=0
[   97.835665][   T33] audit: type=1804 audit(1752131339.341:7): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.895" name="@" dev="tmpfs" ino=1757 res=1 errno=0
[   98.081578][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.085492][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.089217][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.092928][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.096404][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.216559][ T8076] chnl_net:caif_netlink_parms(): no params data found
[   98.231255][ T8086] netlink: 636 bytes leftover after parsing attributes in process `syz.1.905'.
[   98.303213][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.907'.
[   98.310054][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.313067][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.316170][ T8076] bridge_slave_0: entered allmulticast mode
[   98.321437][ T8076] bridge_slave_0: entered promiscuous mode
[   98.330284][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.333410][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.336485][ T8076] bridge_slave_1: entered allmulticast mode
[   98.340222][ T8076] bridge_slave_1: entered promiscuous mode
[   98.376047][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.391041][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.423887][ T8076] team0: Port device team_slave_0 added
[   98.429684][ T8076] team0: Port device team_slave_1 added
[   98.457492][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.476185][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.494347][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.502860][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.510036][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.519417][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.567203][ T8076] hsr_slave_0: entered promiscuous mode
[   98.576093][ T8076] hsr_slave_1: entered promiscuous mode
[   99.046434][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.931'.
[   99.334635][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.415705][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.457104][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.940'.
[   99.490994][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.636948][   T13] bridge_slave_1: left allmulticast mode
[   99.640767][   T13] bridge_slave_1: left promiscuous mode
[   99.642676][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.649075][   T13] bridge_slave_0: left allmulticast mode
[   99.651196][   T13] bridge_slave_0: left promiscuous mode
[   99.653640][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.855975][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.860902][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.864530][   T13] bond0 (unregistering): Released all slaves
[   99.975652][ T8182] netlink: 732 bytes leftover after parsing attributes in process `syz.0.949'.
[   99.982535][ T8182] netlink: 732 bytes leftover after parsing attributes in process `syz.0.949'.
[  100.152740][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  100.162770][ T8194] netlink: 'syz.0.952': attribute type 30 has an invalid length.
[  100.167885][   T54] Bluetooth: hci1: command tx timeout
[  100.179476][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'.
[  100.251208][   T13] hsr_slave_0: left promiscuous mode
[  100.260588][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'.
[  100.266512][   T13] hsr_slave_1: left promiscuous mode
[  100.279239][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.281977][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.290105][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.292707][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.310525][   T13] veth1_macvtap: left promiscuous mode
[  100.312490][   T13] veth0_macvtap: left promiscuous mode
[  100.314609][   T13] veth1_vlan: left promiscuous mode
[  100.316529][   T13] veth0_vlan: left promiscuous mode
[  100.676570][   T13] team0 (unregistering): Port device team_slave_1 removed
[  100.699507][   T13] team0 (unregistering): Port device team_slave_0 removed
[  100.950434][ T8219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.960'.
[  100.969055][ T8076] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  100.986802][ T8076] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  101.001042][ T8076] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  101.022350][ T8076] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  101.133171][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.153260][ T8076] 8021q: adding VLAN 0 to HW filter on device team0
[  101.160657][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.163583][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.184181][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.187400][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.392880][ T8251] netlink: 'syz.1.971': attribute type 5 has an invalid length.
[  101.415005][ T8076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.441446][ T8257] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  101.457002][ T8076] veth0_vlan: entered promiscuous mode
[  101.481364][ T8076] veth1_vlan: entered promiscuous mode
[  101.503398][ T8076] veth0_macvtap: entered promiscuous mode
[  101.513776][ T8076] veth1_macvtap: entered promiscuous mode
[  101.534123][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.551575][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.559730][ T8076] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.562959][ T8076] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.566429][ T8076] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.569684][ T8076] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.635344][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.642006][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.670349][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.672989][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.719672][ T8279] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  102.130794][ T8310] netlink: 'syz.0.998': attribute type 2 has an invalid length.
[  102.140965][ T8310] : entered promiscuous mode
[  102.646711][ T8341] netlink: 'syz.0.1013': attribute type 1 has an invalid length.
[  102.690826][ T8343] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  102.954835][ T8359] sctp: [Deprecated]: syz.0.1022 (pid 8359) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.954835][ T8359] Use struct sctp_sack_info instead
[  103.013704][ T8361] netlink: zone id is out of range
[  103.016017][ T8361] netlink: zone id is out of range
[  103.019115][ T8361] netlink: zone id is out of range
[  103.021418][ T8361] netlink: zone id is out of range
[  103.023985][ T8361] netlink: zone id is out of range
[  103.026199][ T8361] netlink: zone id is out of range
[  103.033284][ T8361] netlink: zone id is out of range
[  103.035429][ T8361] netlink: zone id is out of range
[  103.038010][ T8361] netlink: zone id is out of range
[  103.305605][ T8383] netlink: 'syz.0.1034': attribute type 10 has an invalid length.
[  103.311074][ T8383] __nla_validate_parse: 3 callbacks suppressed
[  103.311094][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1034'.
[  103.399818][ T8387] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.446805][ T8392] netlink: 'syz.1.1037': attribute type 11 has an invalid length.
[  103.507425][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.142767][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.149830][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.154766][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.171423][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.175391][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.194695][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'.
[  104.316492][ T8405] chnl_net:caif_netlink_parms(): no params data found
[  104.348141][ T8425] nbd: must specify an index to disconnect
[  104.392778][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.395320][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.397871][ T8405] bridge_slave_0: entered allmulticast mode
[  104.400582][ T8405] bridge_slave_0: entered promiscuous mode
[  104.404977][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.407518][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.413870][ T8405] bridge_slave_1: entered allmulticast mode
[  104.416620][ T8405] bridge_slave_1: entered promiscuous mode
[  104.440475][ T8431] x9: renamed from bridge_slave_0
[  104.450455][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.455091][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.492469][ T8405] team0: Port device team_slave_0 added
[  104.506137][ T8405] team0: Port device team_slave_1 added
[  104.548253][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.550762][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.561597][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.569079][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.573787][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.588004][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.645439][ T8405] hsr_slave_0: entered promiscuous mode
[  104.648074][ T8405] hsr_slave_1: entered promiscuous mode
[  104.652589][ T8405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.658783][ T8405] Cannot create hsr debugfs directory
[  104.897107][ T8461] veth0_to_team: entered promiscuous mode
[  104.905368][ T8461] veth0_to_team: entered allmulticast mode
[  105.016868][ T8471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1072'.
[  105.028668][ T8471] unsupported nlmsg_type 40
[  105.045914][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.124736][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.208009][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.296815][ T8496] netlink: 'syz.1.1078': attribute type 1 has an invalid length.
[  105.300343][ T8496] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1078'.
[  105.407933][ T5863] bridge_slave_1: left allmulticast mode
[  105.410356][ T5863] bridge_slave_1: left promiscuous mode
[  105.412810][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.426776][ T5863] bridge_slave_0: left allmulticast mode
[  105.429957][ T5863] bridge_slave_0: left promiscuous mode
[  105.433326][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.717087][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.724745][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.730030][ T5863] bond0 (unregistering): Released all slaves
[  105.887466][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'.
[  105.902456][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'.
[  105.911504][ T8511] netlink: 'syz.0.1085': attribute type 19 has an invalid length.
[  105.985588][ T5863] hsr_slave_0: left promiscuous mode
[  105.992402][ T5863] hsr_slave_1: left promiscuous mode
[  105.999247][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.017774][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.028492][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.032100][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.072679][ T5863] veth1_macvtap: left promiscuous mode
[  106.074949][ T5863] veth0_macvtap: left promiscuous mode
[  106.080771][ T5863] veth1_vlan: left promiscuous mode
[  106.083053][ T5863] veth0_vlan: left promiscuous mode
[  106.257693][   T54] Bluetooth: hci1: command tx timeout
[  106.483319][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  106.528779][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  106.944349][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1090'.
[  107.074415][ T8405] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  107.155598][ T8405] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  107.188809][ T8405] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  107.210562][ T8405] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  107.282763][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.307010][ T8405] 8021q: adding VLAN 0 to HW filter on device team0
[  107.314361][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.316620][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.333608][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.335922][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.444813][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'.
[  107.464079][ T8557] vlan2: entered promiscuous mode
[  107.470459][ T8557] bond0: entered promiscuous mode
[  107.477469][ T8557] bond_slave_0: entered promiscuous mode
[  107.482029][ T8557] bond_slave_1: entered promiscuous mode
[  107.579297][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.599335][ T8562] bond0: (slave bond_slave_0): Releasing backup interface
[  107.602072][ T8562] bond_slave_0: left promiscuous mode
[  107.606243][ T8562] bond0: (slave bond_slave_1): Releasing backup interface
[  107.609847][ T8562] bond_slave_1: left promiscuous mode
[  107.615811][ T8562] team0: Port device team_slave_0 removed
[  107.622417][ T8562] team0: Port device team_slave_1 removed
[  107.645266][ T8405] veth0_vlan: entered promiscuous mode
[  107.653071][ T8405] veth1_vlan: entered promiscuous mode
[  107.683980][ T8405] veth0_macvtap: entered promiscuous mode
[  107.694779][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  107.699350][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  107.704891][ T8405] veth1_macvtap: entered promiscuous mode
[  107.723886][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.734734][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.752464][ T8405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.756420][ T8405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.761796][ T8405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.766066][ T8405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.831407][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.833999][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.853717][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.856232][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.985455][ T8578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.988617][ T8578] D: renamed from syzkaller0
[  107.991157][ T8578] tipc: Disabling bearer <eth:syzkaller0>
[  107.993561][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.115395][ T8593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  108.338677][   T54] Bluetooth: hci1: command 0x041b tx timeout
[  108.505529][ T8623] __nla_validate_parse: 1 callbacks suppressed
[  108.505540][ T8623] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1126'.
[  108.552113][ T8627] bridge0: entered promiscuous mode
[  108.554162][ T8627] vlan2: entered promiscuous mode
[  109.741351][ T5679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.578813][ T8661] netlink: 'syz.1.1141': attribute type 1 has an invalid length.
[  110.611104][ T8661] bond2: entered promiscuous mode
[  110.612986][ T8661] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.641304][ T8661] bond2: (slave bridge4): making interface the new active one
[  110.651600][ T8661] bridge4: entered promiscuous mode
[  110.654551][ T8661] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  110.685748][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.693276][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.696750][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.700739][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.704187][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.839300][ T8668] chnl_net:caif_netlink_parms(): no params data found
[  110.853514][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'.
[  110.886771][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'.
[  110.991908][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.994392][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.007801][ T8668] bridge_slave_0: entered allmulticast mode
[  111.031968][ T8668] bridge_slave_0: entered promiscuous mode
[  111.036960][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.039781][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.042035][ T8668] bridge_slave_1: entered allmulticast mode
[  111.044836][ T8668] bridge_slave_1: entered promiscuous mode
[  111.086566][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.092288][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.135196][ T8668] team0: Port device team_slave_0 added
[  111.139354][ T8708] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1160'.
[  111.159726][ T8668] team0: Port device team_slave_1 added
[  111.179773][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.182047][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.192038][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.196799][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.199618][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.218276][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.252966][ T8668] hsr_slave_0: entered promiscuous mode
[  111.255316][ T8668] hsr_slave_1: entered promiscuous mode
[  111.413943][ T5679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.485058][ T5679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.540194][ T5679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.656909][ T5679] bridge_slave_1: left allmulticast mode
[  111.659020][ T5679] bridge_slave_1: left promiscuous mode
[  111.663530][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.671170][ T5679] bridge_slave_0: left allmulticast mode
[  111.673362][ T5679] bridge_slave_0: left promiscuous mode
[  111.675650][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.881425][ T5679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.886650][ T5679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.890475][ T5679] bond0 (unregistering): Released all slaves
[  112.236932][ T5679] hsr_slave_0: left promiscuous mode
[  112.240464][ T5679] hsr_slave_1: left promiscuous mode
[  112.242770][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.245505][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.262168][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.264584][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.286016][ T5679] veth1_macvtap: left promiscuous mode
[  112.294706][ T5679] veth0_macvtap: left promiscuous mode
[  112.298976][ T5679] veth1_vlan: left promiscuous mode
[  112.300774][ T5679] veth0_vlan: left promiscuous mode
[  112.612225][ T5679] team0 (unregistering): Port device team_slave_1 removed
[  112.637099][ T5679] team0 (unregistering): Port device team_slave_0 removed
[  112.729975][ T5837] Bluetooth: hci1: command tx timeout
[  112.999687][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1175'.
[  113.003892][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1175'.
[  113.011351][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1175'.
[  113.045037][ T8668] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  113.061236][ T8668] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  113.078605][ T8668] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.091875][ T8668] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.166802][ T8767] netlink: 'syz.0.1177': attribute type 1 has an invalid length.
[  113.216773][ T8767] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  113.241399][ T5863] net_ratelimit: 15 callbacks suppressed
[  113.241420][ T5863] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  113.242290][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.281078][ T8767] veth5: entered promiscuous mode
[  113.285488][ T8767] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  113.309655][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.340933][ T8668] 8021q: adding VLAN 0 to HW filter on device team0
[  113.369556][ T5862] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  113.373601][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1180'.
[  113.385506][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1180'.
[  113.393481][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.396659][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.421840][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.424296][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.617277][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.664623][ T8668] veth0_vlan: entered promiscuous mode
[  113.673383][ T8668] veth1_vlan: entered promiscuous mode
[  113.695048][ T8668] veth0_macvtap: entered promiscuous mode
[  113.702286][ T8668] veth1_macvtap: entered promiscuous mode
[  113.722281][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.733676][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.740145][ T8668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.744663][ T8668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.748403][ T8668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.751622][ T8668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.802644][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.805292][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.822918][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.825919][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.855843][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'.
[  114.084382][ T8826] netlink: 'syz.1.1200': attribute type 1 has an invalid length.
[  114.093697][ T8826] netlink: 'syz.1.1200': attribute type 11 has an invalid length.
[  114.097162][ T8826] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1200'.
[  114.139207][ T8828] netlink: 'syz.1.1201': attribute type 2 has an invalid length.
[  114.225981][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'.
[  114.229826][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1203'.
[  114.259170][ T8834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1204'.
[  114.263494][ T8834] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1204'.
[  114.275580][ T8834] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  114.282761][ T8834] gretap1: entered promiscuous mode
[  114.285230][ T8834] gretap1: entered allmulticast mode
[  114.632761][ T8851] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1212'.
[  114.635921][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'.
[  114.640257][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'.
[  114.644416][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'.
[  115.185894][ T8885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.641321][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.575137][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  116.590363][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  116.597749][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  116.603734][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  116.608962][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  116.795521][ T8939] chnl_net:caif_netlink_parms(): no params data found
[  116.901292][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.904470][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.907762][ T8939] bridge_slave_0: entered allmulticast mode
[  116.914875][ T8939] bridge_slave_0: entered promiscuous mode
[  116.920157][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.924442][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.928828][ T8939] bridge_slave_1: entered allmulticast mode
[  116.933174][ T8939] bridge_slave_1: entered promiscuous mode
[  116.966914][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.975619][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.019294][ T8939] team0: Port device team_slave_0 added
[  117.023462][ T8939] team0: Port device team_slave_1 added
[  117.069713][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.072371][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.082624][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.104258][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.106761][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.116464][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.167979][ T8939] hsr_slave_0: entered promiscuous mode
[  117.170582][ T8939] hsr_slave_1: entered promiscuous mode
[  117.172772][ T8939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.175346][ T8939] Cannot create hsr debugfs directory
[  117.251133][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.312717][ T9002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.316756][ T9002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.323406][ T9002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.327272][ T9002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.334434][ T9002] geneve2: entered allmulticast mode
[  117.381551][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.466436][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.472529][ T9010] netlink: 'syz.0.1284': attribute type 5 has an invalid length.
[  117.475502][ T9012] debugfs: Directory 'netdev:nicvf0' with parent 'phy5' already present!
[  117.692528][ T5863] bridge_slave_1: left allmulticast mode
[  117.695065][ T5863] bridge_slave_1: left promiscuous mode
[  117.697642][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.735872][ T5863] bridge_slave_0: left allmulticast mode
[  117.747707][ T5863] bridge_slave_0: left promiscuous mode
[  117.751710][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.096357][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.102378][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.106348][ T5863] bond0 (unregistering): Released all slaves
[  118.391928][ T5863] hsr_slave_0: left promiscuous mode
[  118.401825][ T5863] hsr_slave_1: left promiscuous mode
[  118.403996][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.406500][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.418407][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.421129][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.446777][ T5863] veth1_macvtap: left promiscuous mode
[  118.449088][ T5863] veth0_macvtap: left promiscuous mode
[  118.451238][ T5863] veth1_vlan: left promiscuous mode
[  118.453086][ T5863] veth0_vlan: left promiscuous mode
[  118.595156][ T9061] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  118.602610][ T9061] ipt_ECN: cannot use operation on non-tcp rule
[  118.651706][   T54] Bluetooth: hci1: command tx timeout
[  118.776768][ T9070] netlink: 'syz.1.1304': attribute type 1 has an invalid length.
[  118.869651][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  118.901415][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  119.213600][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.218273][ T9079] batadv_slave_0: entered promiscuous mode
[  119.220880][ T9079] batadv_slave_0: entered allmulticast mode
[  119.274243][ T8939] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  119.279422][ T8939] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  119.284708][ T8939] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  119.291811][ T8939] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  119.476084][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.487465][ T8939] 8021q: adding VLAN 0 to HW filter on device team0
[  119.500350][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.503381][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.510529][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.513867][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.726331][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.770920][ T8939] veth0_vlan: entered promiscuous mode
[  119.779553][ T8939] veth1_vlan: entered promiscuous mode
[  119.804474][ T8939] veth0_macvtap: entered promiscuous mode
[  119.812185][ T8939] veth1_macvtap: entered promiscuous mode
[  119.826213][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.836509][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.842169][ T8939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.845759][ T8939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.849749][ T8939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.853119][ T8939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.908403][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.911092][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.936292][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.939943][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.582965][ T9136] netlink: 'syz.0.1322': attribute type 1 has an invalid length.
[  120.609865][ T9138] __nla_validate_parse: 8 callbacks suppressed
[  120.609879][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1323'.
[  120.962461][ T9160] !: renamed from dummy0 (while UP)
[  121.196316][ T9173] netlink: 'syz.1.1335': attribute type 4 has an invalid length.
[  121.206221][ T9173] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1335'.
[  121.214130][ T9173] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  121.331311][ T9184] netlink: 'syz.1.1337': attribute type 10 has an invalid length.
[  121.351930][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.355349][ T9184] bridge_slave_1: left allmulticast mode
[  121.357763][ T9184] bridge_slave_1: left promiscuous mode
[  121.360089][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.404825][ T9184] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  121.649853][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.614778][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.620410][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.624244][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.630780][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.635153][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.659396][ T9256] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1348'.
[  122.769623][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.843588][ T9252] chnl_net:caif_netlink_parms(): no params data found
[  122.945593][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.952722][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.955681][ T9252] bridge_slave_0: entered allmulticast mode
[  122.969389][ T9252] bridge_slave_0: entered promiscuous mode
[  122.972803][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.975313][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.981537][ T9252] bridge_slave_1: entered allmulticast mode
[  122.985268][ T9252] bridge_slave_1: entered promiscuous mode
[  123.011733][ T9252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.016193][ T9252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.072769][ T9252] team0: Port device team_slave_0 added
[  123.076391][ T9252] team0: Port device team_slave_1 added
[  123.133727][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.151628][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.154504][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.166084][ T9252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.172230][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.175111][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.185781][ T9252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.214384][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.274569][ T9252] hsr_slave_0: entered promiscuous mode
[  123.279875][ T9252] hsr_slave_1: entered promiscuous mode
[  123.361503][ T9283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.400469][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'.
[  123.440926][ T9283] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  123.456855][ T9283] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  123.495227][ T5863] bridge_slave_1: left allmulticast mode
[  123.497787][ T5863] bridge_slave_1: left promiscuous mode
[  123.499936][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.504774][ T5863] bridge_slave_0: left allmulticast mode
[  123.506992][ T5863] bridge_slave_0: left promiscuous mode
[  123.518617][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.910443][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.915121][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.920751][ T5863] bond0 (unregistering): Released all slaves
[  124.251082][ T5863] hsr_slave_0: left promiscuous mode
[  124.255583][ T5863] hsr_slave_1: left promiscuous mode
[  124.264635][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.267031][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.279729][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.282550][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.302315][ T5863] veth1_macvtap: left promiscuous mode
[  124.304543][ T5863] veth0_macvtap: left promiscuous mode
[  124.306623][ T5863] veth1_vlan: left promiscuous mode
[  124.315398][ T5863] veth0_vlan: left promiscuous mode
[  124.334233][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'.
[  124.594532][ T9313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  124.727837][ T5837] Bluetooth: hci1: command tx timeout
[  124.740115][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  124.781998][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  125.338077][ T9252] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.353428][ T9252] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.363241][ T9252] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.373825][ T9252] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.545180][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.571403][ T9252] 8021q: adding VLAN 0 to HW filter on device team0
[  125.576772][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.579386][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.609478][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.611828][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.680970][ T9252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.684391][ T9252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.854035][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1373'.
[  125.872379][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.937514][ T9252] veth0_vlan: entered promiscuous mode
[  125.950161][ T9252] veth1_vlan: entered promiscuous mode
[  125.976661][ T9252] veth0_macvtap: entered promiscuous mode
[  125.992575][ T9252] veth1_macvtap: entered promiscuous mode
[  126.021065][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.043100][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.050733][ T9252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.054455][ T9252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.061543][ T9252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.065774][ T9252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.081874][ T9369] vxcan1 speed is unknown, defaulting to 1000
[  126.092347][ T9369] vxcan1 speed is unknown, defaulting to 1000
[  126.095494][ T9369] vxcan1 speed is unknown, defaulting to 1000
[  126.171883][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.178113][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.208377][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.211613][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.341329][ T2283] vxcan1 speed is unknown, defaulting to 1000
[  126.346049][ T9369] infiniband syz2: set down
[  126.352493][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'.
[  126.354134][ T9369] infiniband syz2: added vxcan1
[  126.432380][ T9369] RDS/IB: syz2: added
[  126.434366][ T9369] smc: adding ib device syz2 with port count 1
[  126.439293][ T9369] smc:    ib device syz2 port 1 has pnetid 
[  126.446120][   T51] vxcan1 speed is unknown, defaulting to 1000
[  126.456125][ T9369] vxcan1 speed is unknown, defaulting to 1000
[  126.520399][ T9388] veth0_to_team: left promiscuous mode
[  126.522798][ T9388] veth0_to_team: left allmulticast mode
[  126.527440][ T9388] netlink: 'syz.1.1384': attribute type 16 has an invalid length.
[  126.531122][ T9388] netlink: 'syz.1.1384': attribute type 17 has an invalid length.
[  126.548077][ T9388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.576962][ T9369] vxcan1 speed is unknown, defaulting to 1000
[  126.689290][ T9369] vxcan1 speed is unknown, defaulting to 1000
[  126.894707][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'.
[  127.073968][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  127.425101][ T9419] vxcan1 speed is unknown, defaulting to 1000
[  127.533284][ T9425] netlink: 'syz.1.1402': attribute type 1 has an invalid length.
[  127.537485][ T9425] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1402'.
[  127.549270][ T9425] NCSI netlink: No device for ifindex 813332851
[  127.688013][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1400'.
[  127.781872][ T5679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.939316][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.943941][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.948563][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.954809][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.960394][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.976909][ T9450] vxcan3: entered allmulticast mode
[  129.026261][ T9448] vxcan1 speed is unknown, defaulting to 1000
[  129.113207][ T5679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.183968][ T5679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.245640][ T5679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.431095][ T9448] chnl_net:caif_netlink_parms(): no params data found
[  129.440223][ T5679] bridge_slave_1: left allmulticast mode
[  129.442945][ T5679] bridge_slave_1: left promiscuous mode
[  129.445784][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.453892][ T5679] bridge_slave_0: left allmulticast mode
[  129.457938][ T5679] bridge_slave_0: left promiscuous mode
[  129.460258][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.749386][ T5679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.760351][ T5679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.766238][ T5679] bond0 (unregistering): Released all slaves
[  130.009118][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.011820][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.021790][ T9448] bridge_slave_0: entered allmulticast mode
[  130.030789][ T9448] bridge_slave_0: entered promiscuous mode
[  130.062063][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.069318][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.075310][ T9448] bridge_slave_1: entered allmulticast mode
[  130.092061][ T9448] bridge_slave_1: entered promiscuous mode
[  130.298897][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.315603][ T5679] hsr_slave_0: left promiscuous mode
[  130.320411][ T5679] hsr_slave_1: left promiscuous mode
[  130.323336][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.326200][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.329273][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.331717][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.346484][ T5679] veth1_macvtap: left promiscuous mode
[  130.352980][ T5679] veth0_macvtap: left promiscuous mode
[  130.355547][ T5679] veth1_vlan: left promiscuous mode
[  130.358103][ T5679] veth0_vlan: left promiscuous mode
[  130.429497][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1426'.
[  130.454304][ T9507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1427'.
[  130.696810][ T5679] team0 (unregistering): Port device team_slave_1 removed
[  130.722462][ T5679] team0 (unregistering): Port device team_slave_0 removed
[  130.966547][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.016440][ T9448] team0: Port device team_slave_0 added
[  131.027485][ T9448] team0: Port device team_slave_1 added
[  131.049553][   T54] Bluetooth: hci1: command tx timeout
[  131.119912][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.122198][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.134088][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.138869][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.141597][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.151179][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.231083][ T9448] hsr_slave_0: entered promiscuous mode
[  131.233346][ T9448] hsr_slave_1: entered promiscuous mode
[  131.488857][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'.
[  131.834202][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'.
[  132.142059][ T9448] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  132.185720][ T9448] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  132.205176][ T9448] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  132.219617][ T9448] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  132.330965][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.403298][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.441113][ T9448] 8021q: adding VLAN 0 to HW filter on device team0
[  132.454230][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.456870][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.476587][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.479128][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.697260][ T9613] pim6reg: entered allmulticast mode
[  132.711914][ T9613] pim6reg: left allmulticast mode
[  132.753654][ T9448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.796879][ T9448] veth0_vlan: entered promiscuous mode
[  132.805221][ T9448] veth1_vlan: entered promiscuous mode
[  132.852617][ T9448] veth0_macvtap: entered promiscuous mode
[  132.856610][ T9448] veth1_macvtap: entered promiscuous mode
[  132.881865][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.897454][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.905950][ T9448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.910475][ T9448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.917792][ T9448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.925195][ T9448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.071655][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.074830][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.109145][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.112293][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.127955][   T54] Bluetooth: hci1: command tx timeout
[  133.227958][   T54] Bluetooth: hci2: link tx timeout
[  133.231768][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.248914][ T5837] Bluetooth: hci2: link tx timeout
[  133.251362][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.255971][ T5837] Bluetooth: hci2: link tx timeout
[  133.258397][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.557213][ T9664] veth0_to_bond: entered allmulticast mode
[  133.631935][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'.
[  133.650047][ T9670] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  133.652547][ T9670] team0: Device ipvlan2 is already an upper device of the team interface
[  134.075044][ T9696] netlink: 'syz.0.1482': attribute type 1 has an invalid length.
[  134.077887][ T9696] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1482'.
[  134.544236][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1502'.
[  134.556332][ T9738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1503'.
[  134.617044][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.289645][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  135.838619][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.842572][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.846334][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.851389][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.855690][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.890158][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.926031][ T9750] vxcan1 speed is unknown, defaulting to 1000
[  136.009617][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.091700][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.366989][   T13] bridge_slave_1: left allmulticast mode
[  136.374078][   T13] bridge_slave_1: left promiscuous mode
[  136.379059][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.392313][   T13] bridge_slave_0: left allmulticast mode
[  136.396954][   T13] bridge_slave_0: left promiscuous mode
[  136.400829][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.569412][ T9761] ipt_REJECT: TCP_RESET invalid for non-tcp
[  136.777535][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.784795][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.792054][   T13] bond0 (unregistering): Released all slaves
[  136.853797][ T9763] netlink: 'syz.0.1509': attribute type 3 has an invalid length.
[  136.954855][ T9766] netlink: zone id is out of range
[  136.957023][ T9766] netlink: zone id is out of range
[  136.970618][ T9750] chnl_net:caif_netlink_parms(): no params data found
[  136.977786][ T9766] netlink: set zone limit has 4 unknown bytes
[  137.096131][ T9774] netlink: 'syz.0.1511': attribute type 5 has an invalid length.
[  137.142788][ T9774] ip6erspan0: entered promiscuous mode
[  137.319720][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.322713][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.325414][ T9750] bridge_slave_0: entered allmulticast mode
[  137.348599][ T9750] bridge_slave_0: entered promiscuous mode
[  137.353156][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.356108][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.376503][ T9750] bridge_slave_1: entered allmulticast mode
[  137.379650][ T9750] bridge_slave_1: entered promiscuous mode
[  137.434711][   T13] hsr_slave_0: left promiscuous mode
[  137.440329][   T13] hsr_slave_1: left promiscuous mode
[  137.447907][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.453323][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.459205][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.462181][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.502774][   T13] veth1_macvtap: left promiscuous mode
[  137.504641][   T13] veth0_macvtap: left promiscuous mode
[  137.506883][   T13] veth1_vlan: left promiscuous mode
[  137.510061][   T13] veth0_vlan: left promiscuous mode
[  137.604866][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1512'.
[  137.841510][   T13] team0 (unregistering): Port device team_slave_1 removed
[  137.873402][   T13] team0 (unregistering): Port device team_slave_0 removed
[  137.930706][ T5837] Bluetooth: hci1: command tx timeout
[  138.244420][ T9785] netlink: 'syz.0.1512': attribute type 12 has an invalid length.
[  138.276619][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.280663][ T9779] vxcan1 speed is unknown, defaulting to 1000
[  138.289602][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.380498][ T9750] team0: Port device team_slave_0 added
[  138.392001][ T9750] team0: Port device team_slave_1 added
[  138.474423][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.476683][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.497998][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.515624][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.533173][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.548250][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.599148][ T9784] vxcan1 speed is unknown, defaulting to 1000
[  138.665514][ T9750] hsr_slave_0: entered promiscuous mode
[  138.669580][ T9750] hsr_slave_1: entered promiscuous mode
[  138.889848][ T9809] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1519'.
[  138.895392][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.459818][ T9831] 
[  139.460646][ T9831] ======================================================
[  139.462906][ T9831] WARNING: possible circular locking dependency detected
[  139.465140][ T9831] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  139.468808][ T9831] ------------------------------------------------------
[  139.471196][ T9831] syz.1.1524/9831 is trying to acquire lock:
[  139.473395][ T9831] ffff88801af1b188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  139.477688][ T9831] 
[  139.477688][ T9831] but task is already holding lock:
[  139.480365][ T9831] ffff88801af1b230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  139.483337][ T9831] 
[  139.483337][ T9831] which lock already depends on the new lock.
[  139.483337][ T9831] 
[  139.486555][ T9831] 
[  139.486555][ T9831] the existing dependency chain (in reverse order) is:
[  139.489388][ T9831] 
[  139.489388][ T9831] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  139.491837][ T9831]        lock_acquire+0x120/0x360
[  139.493430][ T9831]        __mutex_lock+0x182/0xe80
[  139.495068][ T9831]        refcount_dec_and_mutex_lock+0x30/0xa0
[  139.497068][ T9831]        nbd_config_put+0x2c/0x790
[  139.498693][ T9831]        nbd_release+0xfe/0x140
[  139.500300][ T9831]        bdev_release+0x536/0x650
[  139.501915][ T9831]        blkdev_release+0x15/0x20
[  139.503519][ T9831]        __fput+0x44c/0xa70
[  139.505008][ T9831]        fput_close_sync+0x119/0x200
[  139.506743][ T9831]        __x64_sys_close+0x7f/0x110
[  139.508652][ T9831]        do_syscall_64+0xfa/0x3b0
[  139.510456][ T9831]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.512530][ T9831] 
[  139.512530][ T9831] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  139.514980][ T9831]        lock_acquire+0x120/0x360
[  139.516626][ T9831]        __mutex_lock+0x182/0xe80
[  139.518576][ T9831]        __del_gendisk+0x129/0x9e0
[  139.520668][ T9831]        del_gendisk+0xe8/0x160
[  139.522704][ T9831]        nbd_dev_remove_work+0x47/0xe0
[  139.524630][ T9831]        process_scheduled_works+0xae1/0x17b0
[  139.527124][ T9831]        worker_thread+0x8a0/0xda0
[  139.529287][ T9831]        kthread+0x711/0x8a0
[  139.531192][ T9831]        ret_from_fork+0x3fc/0x770
[  139.533246][ T9831]        ret_from_fork_asm+0x1a/0x30
[  139.535303][ T9831] 
[  139.535303][ T9831] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  139.537904][ T9831]        validate_chain+0xb9b/0x2140
[  139.539575][ T9831]        __lock_acquire+0xab9/0xd20
[  139.541223][ T9831]        lock_acquire+0x120/0x360
[  139.542799][ T9831]        down_write+0x96/0x1f0
[  139.544502][ T9831]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  139.546822][ T9831]        nbd_start_device+0x16c/0xac0
[  139.548588][ T9831]        nbd_genl_connect+0x1250/0x1930
[  139.550335][ T9831]        genl_family_rcv_msg_doit+0x215/0x300
[  139.552626][ T9831]        genl_rcv_msg+0x60e/0x790
[  139.554489][ T9831]        netlink_rcv_skb+0x208/0x470
[  139.556431][ T9831]        genl_rcv+0x28/0x40
[  139.558019][ T9831]        netlink_unicast+0x75b/0x8d0
[  139.559744][ T9831]        netlink_sendmsg+0x805/0xb30
[  139.561394][ T9831]        __sock_sendmsg+0x21c/0x270
[  139.563070][ T9831]        ____sys_sendmsg+0x505/0x830
[  139.564764][ T9831]        ___sys_sendmsg+0x21f/0x2a0
[  139.566405][ T9831]        __x64_sys_sendmsg+0x19b/0x260
[  139.568246][ T9831]        do_syscall_64+0xfa/0x3b0
[  139.569819][ T9831]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.571841][ T9831] 
[  139.571841][ T9831] other info that might help us debug this:
[  139.571841][ T9831] 
[  139.574998][ T9831] Chain exists of:
[  139.574998][ T9831]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  139.574998][ T9831] 
[  139.579458][ T9831]  Possible unsafe locking scenario:
[  139.579458][ T9831] 
[  139.581947][ T9831]        CPU0                    CPU1
[  139.583690][ T9831]        ----                    ----
[  139.585476][ T9831]   lock(&nbd->config_lock);
[  139.587084][ T9831]                                lock(&disk->open_mutex);
[  139.589394][ T9831]                                lock(&nbd->config_lock);
[  139.591836][ T9831]   lock(&set->update_nr_hwq_lock);
[  139.593496][ T9831] 
[  139.593496][ T9831]  *** DEADLOCK ***
[  139.593496][ T9831] 
[  139.596165][ T9831] 3 locks held by syz.1.1524/9831:
[  139.597917][ T9831]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  139.600615][ T9831]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  139.603399][ T9831]  #2: ffff88801af1b230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  139.606582][ T9831] 
[  139.606582][ T9831] stack backtrace:
[  139.608524][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.1.1524 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  139.608536][ T9831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.608541][ T9831] Call Trace:
[  139.608546][ T9831]  <TASK>
[  139.608552][ T9831]  dump_stack_lvl+0x189/0x250
[  139.608569][ T9831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.608578][ T9831]  ? __pfx__printk+0x10/0x10
[  139.608588][ T9831]  ? print_lock_name+0xde/0x100
[  139.608597][ T9831]  print_circular_bug+0x2ee/0x310
[  139.608609][ T9831]  check_noncircular+0x134/0x160
[  139.608620][ T9831]  validate_chain+0xb9b/0x2140
[  139.608634][ T9831]  __lock_acquire+0xab9/0xd20
[  139.608642][ T9831]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  139.608652][ T9831]  lock_acquire+0x120/0x360
[  139.608659][ T9831]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  139.608667][ T9831]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  139.608675][ T9831]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.608686][ T9831]  down_write+0x96/0x1f0
[  139.608694][ T9831]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  139.608702][ T9831]  ? __pfx_down_write+0x10/0x10
[  139.608733][ T9831]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  139.608743][ T9831]  ? nbd_add_socket+0x688/0x9a0
[  139.608752][ T9831]  ? nbd_add_socket+0x688/0x9a0
[  139.608761][ T9831]  nbd_start_device+0x16c/0xac0
[  139.608770][ T9831]  ? __nla_parse+0x40/0x60
[  139.608779][ T9831]  nbd_genl_connect+0x1250/0x1930
[  139.608789][ T9831]  ? __pfx_nbd_genl_connect+0x10/0x10
[  139.608800][ T9831]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  139.608809][ T9831]  genl_family_rcv_msg_doit+0x215/0x300
[  139.608822][ T9831]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  139.608838][ T9831]  genl_rcv_msg+0x60e/0x790
[  139.608851][ T9831]  ? __pfx_genl_rcv_msg+0x10/0x10
[  139.608862][ T9831]  ? __pfx_nbd_genl_connect+0x10/0x10
[  139.608871][ T9831]  netlink_rcv_skb+0x208/0x470
[  139.608880][ T9831]  ? __pfx_genl_rcv_msg+0x10/0x10
[  139.608890][ T9831]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  139.608901][ T9831]  ? down_read+0x1ad/0x2e0
[  139.608908][ T9831]  genl_rcv+0x28/0x40
[  139.608918][ T9831]  netlink_unicast+0x75b/0x8d0
[  139.608927][ T9831]  netlink_sendmsg+0x805/0xb30
[  139.608937][ T9831]  ? __pfx_netlink_sendmsg+0x10/0x10
[  139.608946][ T9831]  ? aa_sock_msg_perm+0x94/0x160
[  139.608958][ T9831]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  139.608965][ T9831]  ? __pfx_netlink_sendmsg+0x10/0x10
[  139.608973][ T9831]  __sock_sendmsg+0x21c/0x270
[  139.608981][ T9831]  ____sys_sendmsg+0x505/0x830
[  139.608991][ T9831]  ? __pfx_____sys_sendmsg+0x10/0x10
[  139.609001][ T9831]  ? import_iovec+0x74/0xa0
[  139.609010][ T9831]  ___sys_sendmsg+0x21f/0x2a0
[  139.609020][ T9831]  ? __pfx____sys_sendmsg+0x10/0x10
[  139.609034][ T9831]  ? __fget_files+0x2a/0x420
[  139.609043][ T9831]  ? __fget_files+0x3a0/0x420
[  139.609054][ T9831]  __x64_sys_sendmsg+0x19b/0x260
[  139.609063][ T9831]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  139.609073][ T9831]  ? rcu_is_watching+0x15/0xb0
[  139.609083][ T9831]  ? do_syscall_64+0xbe/0x3b0
[  139.609091][ T9831]  do_syscall_64+0xfa/0x3b0
[  139.609098][ T9831]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.609104][ T9831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.609112][ T9831]  ? exc_page_fault+0x9f/0xf0
[  139.609122][ T9831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.609129][ T9831] RIP: 0033:0x7f7de318e929
[  139.609138][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.609145][ T9831] RSP: 002b:00007f7de4000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.609152][ T9831] RAX: ffffffffffffffda RBX: 00007f7de33b5fa0 RCX: 00007f7de318e929
[  139.609158][ T9831] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[  139.609162][ T9831] RBP: 00007f7de3210b39 R08: 0000000000000000 R09: 0000000000000000
[  139.609166][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.609170][ T9831] R13: 0000000000000000 R14: 00007f7de33b5fa0 R15: 00007ffde4e77758
[  139.609178][ T9831]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  139.819415][ T9831] nbd1: detected capacity change from 0 to 63
[  139.822602][ T9832] block nbd1: NBD_DISCONNECT
[  139.825181][ T9832] block nbd1: Disconnected due to user request.
[  139.829962][ T9832] block nbd1: shutting down sockets
[  139.830011][ T6808] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.834725][ T6808] Buffer I/O error on dev nbd1, logical block 0, async page read
[  139.838656][   T60] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0
[  139.842392][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[  139.845678][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[  139.850531][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[  139.853930][ T6808] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.856830][ T6808] Buffer I/O error on dev nbd1, logical block 0, async page read
[  139.859508][ T6808] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.862746][ T6808] Buffer I/O error on dev nbd1, logical block 1, async page read
[  139.865808][ T6808] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.890605][ T6808] Buffer I/O error on dev nbd1, logical block 2, async page read
[  139.893533][ T6808] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.896521][ T6808] Buffer I/O error on dev nbd1, logical block 3, async page read
[  139.914747][ T6808] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.935278][ T6808] Buffer I/O error on dev nbd1, logical block 0, async page read
[  139.938428][ T6808] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.941270][ T6808] Buffer I/O error on dev nbd1, logical block 1, async page read
[  139.943990][ T6808] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.948147][ T6808] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.952522][ T6808] ldm_validate_partition_table(): Disk read failed.
[  139.955086][ T6808] Dev nbd1: unable to read RDB block 0
[  139.957321][ T6808]  nbd1: unable to read partition table
[  139.978687][ T6808] ldm_validate_partition_table(): Disk read failed.
[  139.981205][ T6808] Dev nbd1: unable to read RDB block 0
[  139.983370][ T6808]  nbd1: unable to read partition table
[  140.417821][ T9789] bridge_slave_1: left allmulticast mode
[  140.420356][ T9789] bridge_slave_1: left promiscuous mode
[  140.425726][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.430985][ T9789] bridge_slave_0: left allmulticast mode
[  140.433365][ T9789] bridge_slave_0: left promiscuous mode
[  140.436023][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.485365][ T9789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.489977][ T9789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.494009][ T9789] bond0 (unregistering): Released all slaves
[  140.601747][ T9789] hsr_slave_0: left promiscuous mode
[  140.603841][ T9789] hsr_slave_1: left promiscuous mode
[  140.605791][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.621089][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.707262][ T9789] team0 (unregistering): Port device team_slave_1 removed
[  140.726750][ T9789] team0 (unregistering): Port device team_slave_0 removed
[  141.069444][ T9789] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.117447][ T9789] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.188711][ T9789] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.220978][ T9789] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.278273][ T9789] bridge_slave_0: left allmulticast mode
[  141.280384][ T9789] bridge_slave_0: left promiscuous mode
[  141.282571][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.565047][ T9789] bond2 (unregistering): (slave bridge4): Releasing backup interface
[  141.568195][ T9789] bridge4 (unregistering): left promiscuous mode
[  141.676321][ T9789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.681134][ T9789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.685044][ T9789] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  141.689196][ T9789] bond0 (unregistering): Released all slaves
[  141.753644][ T9789] bond1 (unregistering): Released all slaves
[  141.759789][ T9789] bond2 (unregistering): Released all slaves
[  141.765344][ T9789] bond3 (unregistering): Released all slaves
[  141.831036][ T9789] tipc: Left network mode
[  142.052622][ T9789] hsr_slave_0: left promiscuous mode
[  142.054774][ T9789] hsr_slave_1: left promiscuous mode
[  142.057226][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.061126][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.064484][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.073317][ T9789] veth1_macvtap: left promiscuous mode
[  142.075325][ T9789] veth0_macvtap: left promiscuous mode
[  142.077547][ T9789] veth1_vlan: left promiscuous mode
[  142.086625][ T9789] veth0_vlan: left promiscuous mode
[  142.238583][ T9789] team0 (unregistering): Port device team_slave_1 removed
[  142.251976][ T9789] team0 (unregistering): Port device C removed
[  142.603849][ T9789] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
07:09:41  Registers:
info registers vcpu 0

CPU#0
RAX=a42f2c6884521300 RBX=ffffffff81975d58 RCX=a42f2c6884521300 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1dff0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558c453eaa18 CR3=00000000292bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f062ec11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000032da RDI=00000000000032db RBP=00000000000003f8 RSP=ffffc9000317e710
R8 =ffff888021a10237 R9 =1ffff11004342046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af790e R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7de40006c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ac0 CR3=000000010a8ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f7de3211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
