last executing test programs:

40.565413724s ago: executing program 1 (id=1738):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8810)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12060)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="e5e13de83db3"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00))
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000f1ff02000008000100"], 0x1c}}, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000080000007b0a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x1e}, 0x94)

33.189590495s ago: executing program 1 (id=1738):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8810)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12060)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="e5e13de83db3"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00))
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000f1ff02000008000100"], 0x1c}}, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000080000007b0a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x1e}, 0x94)

25.654747128s ago: executing program 1 (id=1738):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8810)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12060)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="e5e13de83db3"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00))
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000f1ff02000008000100"], 0x1c}}, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000080000007b0a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x1e}, 0x94)

19.501197549s ago: executing program 1 (id=1738):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8810)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12060)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="e5e13de83db3"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00))
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000f1ff02000008000100"], 0x1c}}, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000080000007b0a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x1e}, 0x94)

12.027462361s ago: executing program 1 (id=1738):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8810)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12060)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="e5e13de83db3"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00))
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000f1ff02000008000100"], 0x1c}}, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000080000007b0a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x1e}, 0x94)

4.96284878s ago: executing program 1 (id=1738):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8810)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12060)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="e5e13de83db3"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00))
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000f1ff02000008000100"], 0x1c}}, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb7020000080000007b0a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x1e}, 0x94)

3.172646525s ago: executing program 2 (id=2526):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000491394e000000040000000100000014", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
socket$kcm(0x29, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffc6e}, 0x70)
socket(0x25, 0x801, 0x8000)

3.065885316s ago: executing program 2 (id=2528):
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000fc0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0xfa4, @loopback, 0x3d}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4)
shutdown(r7, 0x1)
setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x83, &(0x7f0000000480)={r9}, 0x8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x4c, r12, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe5c, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000000))

1.38020996s ago: executing program 2 (id=2530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f00006c2000/0x2000)=nil, 0x2000, 0x8, 0x2000000000032, r3, 0x24ea7000)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000540)={<r7=>0x0, 0xb, 0x10}, &(0x7f0000000580)=0xc)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r7, 0x4, 0x6, 0xe, 0x5, 0xffff, 0x3, 0x574e, {<r8=>r7, @in={{0x2, 0x4e24, @empty}}, 0x664e, 0x9, 0x3, 0x9, 0x5}}, &(0x7f00000005c0)=0xffffffffffffffd0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000240)={r8, 0x4, 0x9, 0xde8, 0x28000000, 0x7f}, 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x2c, 0x2, 0x1)
getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x1, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xd, 0xc}, {}, {0xa, 0xd}}}, 0x24}}, 0x404c080)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000100}, 0x1)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x3}, {0x9, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f00000003c0)={'ip6gre0\x00', @random="000f2000"})

1.082186934s ago: executing program 2 (id=2533):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x880)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000080)=0x8, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x3, 0x80000001, 0x3}, 0xc)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r6 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005f000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r6, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname$packet(r6, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)

481.929373ms ago: executing program 0 (id=2539):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000082000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)

480.105766ms ago: executing program 0 (id=2540):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc8f0}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000190001002bbd7000fcdbdf251c2080070001fd000001000046fa0619255abfd29e9cd10298b77a61721943c949afc3fef80a51eb9e72fbae1cd6b426e7ca"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
unshare(0x600)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)

411.195988ms ago: executing program 0 (id=2541):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x798, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3, 0xb}, {}, {0xa, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x14, 0x73}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x5}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x428, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x414, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x5}, {{0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x158, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x9f, 0x5, "5842ef9b52eaf6843c3286540440403d23088ae3f980b51e59ea210dba539c73983b91e40993cff5ea294c368403cad0faee0306d7f737295812b2e57b1fb76aa41a51486a41451bf800ebb7bb77e556d63ff10f232a14eba022d2170693b7f0bde38348af3245db64d2f7f16b4468c6252d28b07087e73f92622a7b4168c62e3b9bd9eb7b4e03c863919b4655311f58ef50f1a83f369690bb7970"}, @TCA_EM_IPT_MATCH_DATA={0x8, 0x5, "f098f47d"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x65, 0x5, "78b11f2a9b32bf181f67dec676b44aa5baa315d5c831d55bffc61952bcadc0de30ff81c1eb5d0e6b48b5fe665437776502594bcb68f7016156e9fcb1a53e8e0ded19505faa222995dccf3986b9584fe7168508d907a38d169bf7fb0a031f55ae54"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xa}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0x5, 0x8, 0x1, 0x0, 0x3, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7ff, 0x8, 0x140a}, {0x3, 0x1, 0x3}}}, @TCF_EM_CONTAINER={0x20, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xf15}, "cee0c41bc067f9c77445bb7da9c0d7b142aa9a05"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x244}}, @TCA_EMATCH_TREE_LIST={0x234, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x3}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x358}, {0x7, 0x9, 0x1, "b32ce473cde14a2bf9"}}}, @TCF_EM_CONTAINER={0xb8, 0x2, 0x0, 0x0, {{0xfff, 0x0, 0x3}, "f55598bb769f3277961b47743d901759ddaf2863a817d1408b11c6439eb18ed21a9f6655e9b821d75173f37633eb080de07ed89e4f0b54e8b6b28ed41c63255b86a0ca4bf90edbcc409a70c9f81eb3ee5e427c34c33758f08aa4de6cf2cecdeed2dfabae6ce507bbda3931a07d014dc45892bbf2ff1e975bb9175b444cde3e7b2ff1ace926b4387bbfc043681c9eaa6e1804fb28ef795067bfde1c8a342820663618d6652d7415ad3f3179"}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x3230}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="e5", @TCF_META_TYPE_VAR="3a786d582a45e803", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xb, 0x1}, {0x4, 0x8}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ab0adb260b25"]}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xfe2, 0x2, 0x8001}, {0x6c0, 0x3, 0x1, "541891"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2d, 0x1, 0x4}, {0x7f, 0x2, 0x2, 0x7, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0xbf, 0x0, 0x7}, "00d69fca0033aa0e6aa54e25dc2cd5dec20e123e5ee5d9359c367e7f56a9c11a85e5d29fc6687271db14ad6b4bde16a7d756e425c5bfa15d3de5e700214c2b7cc2b6b38af2938b55768f5f83fa8c1a34da445bf32ff238d259"}}, @TCF_EM_IPT={0x44, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x7f}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1f, 0x5, "61691d65eb78c46a576db1708098c0053c2effeb3f0bfab7ba89e2"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{}, {0x3, 0x1}}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x2dc, 0x2, [@TCA_U32_SEL={0x2a4, 0x5, {0x1, 0x9, 0x8, 0x7, 0x2, 0x4, 0x7230, 0x47d4, [{0x5, 0x1, 0x80000000, 0x3}, {0x2, 0x80000001, 0xe, 0x6}, {0x5, 0x8, 0xfffffffe, 0x81}, {0x2, 0x1, 0x4, 0x5}, {0x2, 0x7f, 0x2e, 0xc34}, {0x9, 0x3, 0x7c, 0x4}, {0x6, 0xb, 0x9, 0x6}, {0x5, 0x4, 0x3, 0x4}, {0x8000, 0xd, 0x1, 0x97}, {0x3, 0x5, 0x6}, {0x9, 0x4, 0x80000001, 0xfaf7}, {0xff, 0x1, 0x2, 0x3}, {0x8, 0x8, 0x4, 0x8}, {0x9, 0x63f7, 0x4, 0xffff3a24}, {0x73ba, 0x5, 0xfffffffe, 0xe}, {0xa052, 0x80000001, 0x7, 0x2}, {0x7, 0x8, 0x12, 0x6}, {0x0, 0x1f, 0x9, 0x1ff}, {0x4, 0x1, 0x69, 0x9}, {0x6, 0xf, 0x4745, 0x5}, {0xfffff992, 0x7, 0xfffffff9, 0x1}, {0x6422, 0x800, 0x0, 0x9}, {0x6, 0xa4b, 0x4, 0x8}, {0xb, 0x200, 0x4, 0x9}, {0x8, 0x3, 0x80000000, 0x3}, {0x4000000, 0x9, 0x4, 0x4}, {0x7ff, 0x65c1a1b1, 0x1c, 0x1}, {0x9, 0x6, 0x4, 0xa75}, {0x6, 0xffffffc3, 0x7fffffff, 0x6}, {0x7fc, 0x40, 0x7, 0xfffffc01}, {0x3, 0x10, 0x6, 0x1}, {0x0, 0x0, 0x1ff, 0x9}, {0x2, 0x1, 0xe83, 0x9}, {0x0, 0x0, 0x9ce1, 0x80000001}, {0x1, 0x8, 0x9, 0x6}, {0x8, 0x401, 0x3, 0x2}, {0x5, 0xffff, 0x9, 0x37}, {0x3, 0x7, 0x5, 0x30000000}, {0x0, 0x7f, 0x9, 0x2}, {0xea, 0x5a47, 0x401, 0x3ab}, {0x1, 0x5, 0x100, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'hsr0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0x3}}, @TCA_U32_MARK={0x10, 0xa, {0x20000000}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}, @TCA_CHAIN={0x8}]}, 0x798}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x9e)

345.950803ms ago: executing program 0 (id=2542):
socket$inet6(0xa, 0xa, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000f5ff110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100c0ff00000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000feffffff0200220005003e000000000008003f00ffff0000"], 0x24}}, 0x8000)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4044044)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10)
recvmmsg(r7, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@enum64={0xa, 0x3, 0x0, 0x13, 0x1, 0x3, [{0xa, 0xce24, 0x3}, {0x9, 0x3ff, 0x7e}, {0x6, 0x80000000, 0x7}]}, @func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x61, 0x10, 0x0, 0x5f, 0x30]}}, &(0x7f0000000b40)=""/4096, 0x5c, 0x1000, 0x0, 0xa}, 0x28)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x2, &(0x7f0000000600)=@raw=[@map_idx={0x18, 0x14, 0x5, 0x0, 0x2}], &(0x7f0000000640)='syzkaller\x00', 0x200000, 0x4e, &(0x7f0000000680)=""/78, 0x40e00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x4, 0xe, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xa, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000696c6c250000000000203f0000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600"/64], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x9, &(0x7f0000000440)=""/9, 0x41100, 0x41, '\x00', 0x0, @fallback=0x38, r8, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0xa0000000, 0x7}, 0x10, 0x0, r9, 0x4, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x1, 0x2, 0x9}, {0x3, 0x2, 0x2, 0x8}, {0x2, 0x4, 0x9, 0x2}, {0xfffffffc, 0x1, 0xe, 0x6}], 0x10, 0xf}, 0x94)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
getsockname$packet(r12, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r13, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$packet(r10, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r13}, 0x14)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x4800)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r14, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

102.437382ms ago: executing program 0 (id=2543):
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000400000004000000070000", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20100, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=<r6=>r4, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r7 = socket$kcm(0x23, 0x2, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40)
sendmsg$sock(r7, &(0x7f0000000340)={&(0x7f00000002c0)=@phonet, 0x80, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x19, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r13 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r12, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20) (async)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)

102.004033ms ago: executing program 2 (id=2544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x64000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0xfffffffffffffd51, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r5, {0x9, 0x7}, {}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005f000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

642.956µs ago: executing program 2 (id=2545):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c"], 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48337fa3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59a9e12d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6ae12d}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x1e0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_EXPRESSIONS={0x1a8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_TTL={0x5, 0x2, 0xf}]}}}, {0x68, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x40, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x62}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x370}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r3], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000480)={{r2}, "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"})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000240)={0x0, 0x0})

0s ago: executing program 0 (id=2546):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000480)=""/175, &(0x7f00000001c0)=0xaf)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket(0x27, 0xa, 0x4)
getpeername$packet(r2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x3, 'lblcr\x00', 0xed93b425eb2f0107, 0x4000009, 0x1030}, 0x2c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0xfffffbfe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x25}}}}})

kernel console output (not intermixed with test programs):

 impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.707690][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.723314][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.726306][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.742957][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.814391][T11473] hsr_slave_0: entered promiscuous mode
[  151.817398][T11473] hsr_slave_1: entered promiscuous mode
[  151.820397][T11473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.827895][T11473] Cannot create hsr debugfs directory
[  151.967377][T11531] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  151.971048][T11531] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  151.976989][T11531] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  151.980397][T11531] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  151.985359][T11531] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  152.039170][T11534] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  152.048173][T11534] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  152.218727][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.295654][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.347947][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.476324][ T5855] bridge_slave_1: left allmulticast mode
[  152.478555][ T5855] bridge_slave_1: left promiscuous mode
[  152.481097][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.490917][ T5855] bridge_slave_0: left allmulticast mode
[  152.493353][ T5855] bridge_slave_0: left promiscuous mode
[  152.495857][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.820321][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.825183][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.829137][ T5855] bond0 (unregistering): Released all slaves
[  153.132063][ T5830] Bluetooth: hci0: command tx timeout
[  153.175018][ T5855] hsr_slave_0: left promiscuous mode
[  153.178353][ T5855] hsr_slave_1: left promiscuous mode
[  153.181328][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.185341][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.189930][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.198076][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.229650][ T5855] veth1_macvtap: left promiscuous mode
[  153.232544][ T5855] veth0_macvtap: left promiscuous mode
[  153.234596][ T5855] veth1_vlan: left promiscuous mode
[  153.236617][ T5855] veth0_vlan: left promiscuous mode
[  153.566337][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  153.598498][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  154.015735][T11473] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  154.023833][T11473] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  154.038532][T11473] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  154.057460][T11473] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  154.175047][T11473] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.188385][T11473] 8021q: adding VLAN 0 to HW filter on device team0
[  154.208233][T11606] xt_CT: You must specify a L4 protocol and not use inversions on it
[  154.211953][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.214432][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.218627][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.221243][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.416766][T11473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.438041][T11473] veth0_vlan: entered promiscuous mode
[  154.443539][T11473] veth1_vlan: entered promiscuous mode
[  154.461028][T11473] veth0_macvtap: entered promiscuous mode
[  154.467792][T11473] veth1_macvtap: entered promiscuous mode
[  154.479289][T11473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.491262][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.499583][T11473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.505439][T11473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.509133][T11473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.514253][T11473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.575135][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.578180][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.604273][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.606949][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.281453][T11626] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  155.290996][T11626] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  155.329385][T11632] __nla_validate_parse: 43 callbacks suppressed
[  155.329399][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'.
[  155.332381][T11634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.250741][T11655] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  156.257889][T11655] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  156.615685][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.893112][   T98] block nbd1: Possible stuck request ffff8880220d0000: control (read@0,1024B). Runtime 30 seconds
[  156.897673][   T98] block nbd1: Possible stuck request ffff8880220d0200: control (read@1024,1024B). Runtime 30 seconds
[  156.902676][   T98] block nbd1: Possible stuck request ffff8880220d0400: control (read@2048,1024B). Runtime 30 seconds
[  156.906960][   T98] block nbd1: Possible stuck request ffff8880220d0600: control (read@3072,1024B). Runtime 30 seconds
[  157.027946][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  157.032852][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  157.037130][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  157.042162][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  157.048310][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.223959][T11687] chnl_net:caif_netlink_parms(): no params data found
[  157.294678][T11687] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.297670][T11687] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.300536][T11687] bridge_slave_0: entered allmulticast mode
[  157.305366][T11687] bridge_slave_0: entered promiscuous mode
[  157.310723][T11687] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.314721][T11687] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.317598][T11687] bridge_slave_1: entered allmulticast mode
[  157.321168][T11687] bridge_slave_1: entered promiscuous mode
[  157.369933][T11687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.381363][T11687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.418017][T11687] team0: Port device team_slave_0 added
[  157.424575][T11687] team0: Port device team_slave_1 added
[  157.458312][T11687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.461229][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.475321][T11687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.481110][T11687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.484052][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.498654][T11687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.568036][T11687] hsr_slave_0: entered promiscuous mode
[  157.574817][T11687] hsr_slave_1: entered promiscuous mode
[  157.994352][T11732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1858'.
[  157.997558][T11732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1858'.
[  158.000427][T11732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1858'.
[  158.577133][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.678965][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.725945][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.737524][T11742] validate_nla: 28 callbacks suppressed
[  158.737536][T11742] netlink: 'syz.2.1862': attribute type 15 has an invalid length.
[  158.876801][ T5855] bridge_slave_1: left allmulticast mode
[  158.880769][ T5855] bridge_slave_1: left promiscuous mode
[  158.887847][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.896244][ T5855] bridge_slave_0: left allmulticast mode
[  158.898263][ T5855] bridge_slave_0: left promiscuous mode
[  158.900772][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.135136][ T5830] Bluetooth: hci0: command tx timeout
[  159.197351][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.207047][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.212387][ T5855] bond0 (unregistering): Released all slaves
[  159.232155][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'.
[  159.236284][T11754] erspan0: default FDB implementation only supports local addresses
[  159.480712][ T5855] hsr_slave_0: left promiscuous mode
[  159.483025][ T5855] hsr_slave_1: left promiscuous mode
[  159.485547][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.488081][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.494082][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.497200][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.514129][ T5855] veth1_macvtap: left promiscuous mode
[  159.516045][ T5855] veth0_macvtap: left promiscuous mode
[  159.517924][ T5855] veth1_vlan: left promiscuous mode
[  159.519949][ T5855] veth0_vlan: left promiscuous mode
[  159.847419][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  159.871198][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  160.181473][T11687] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  160.196955][T11687] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  160.208632][T11687] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  160.224476][T11687] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  160.359822][T11687] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.380787][T11687] 8021q: adding VLAN 0 to HW filter on device team0
[  160.390623][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.393659][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.403971][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.406605][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.523779][T11687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.549091][T11687] veth0_vlan: entered promiscuous mode
[  160.555124][T11687] veth1_vlan: entered promiscuous mode
[  160.574976][T11687] veth0_macvtap: entered promiscuous mode
[  160.580123][T11687] veth1_macvtap: entered promiscuous mode
[  160.590231][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.598336][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.604957][T11687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.608136][T11687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.611288][T11687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.615196][T11687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.672472][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.675535][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.698611][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.701448][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.473824][T11807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.678415][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.330240][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  163.333893][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  163.336662][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  163.339273][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  163.342988][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  163.520509][T11835] chnl_net:caif_netlink_parms(): no params data found
[  163.609553][T11835] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.614950][T11835] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.617511][T11835] bridge_slave_0: entered allmulticast mode
[  163.620695][T11835] bridge_slave_0: entered promiscuous mode
[  163.626052][T11835] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.628549][T11835] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.631120][T11835] bridge_slave_1: entered allmulticast mode
[  163.634665][T11835] bridge_slave_1: entered promiscuous mode
[  163.664450][T11835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.670526][T11835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.704677][T11835] team0: Port device team_slave_0 added
[  163.711788][T11835] team0: Port device team_slave_1 added
[  163.733049][T11835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.735469][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.744578][T11835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.749182][T11835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.751363][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.760713][T11835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.789190][T11835] hsr_slave_0: entered promiscuous mode
[  163.792067][T11835] hsr_slave_1: entered promiscuous mode
[  163.794183][T11835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.797110][T11835] Cannot create hsr debugfs directory
[  164.287059][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.339805][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.442185][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.450793][T11888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.596668][   T13] bridge_slave_1: left allmulticast mode
[  164.598507][   T13] bridge_slave_1: left promiscuous mode
[  164.600341][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.613314][   T13] bridge_slave_0: left allmulticast mode
[  164.615306][   T13] bridge_slave_0: left promiscuous mode
[  164.617225][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.895139][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.899881][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.905152][   T13] bond0 (unregistering): Released all slaves
[  164.914304][T11894] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  164.918730][T11894] net_ratelimit: 76 callbacks suppressed
[  164.918739][T11894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.229852][   T13] hsr_slave_0: left promiscuous mode
[  165.233647][   T13] hsr_slave_1: left promiscuous mode
[  165.236518][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.239656][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.247097][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.250147][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.269633][   T13] veth1_macvtap: left promiscuous mode
[  165.272222][   T13] veth0_macvtap: left promiscuous mode
[  165.274764][   T13] veth1_vlan: left promiscuous mode
[  165.276973][   T13] veth0_vlan: left promiscuous mode
[  165.381700][ T5217] Bluetooth: hci0: command tx timeout
[  165.601863][   T13] team0 (unregistering): Port device team_slave_1 removed
[  165.624713][   T13] team0 (unregistering): Port device team_slave_0 removed
[  165.935552][T11835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  165.948871][T11835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  165.970646][T11835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  165.984510][T11835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  166.116550][T11835] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.139692][T11835] 8021q: adding VLAN 0 to HW filter on device team0
[  166.162648][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.165008][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.168869][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.171229][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.321479][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'.
[  166.340653][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'.
[  166.359120][T11835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.396149][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'.
[  166.399659][T11945] erspan0: default FDB implementation only supports local addresses
[  166.481119][T11835] veth0_vlan: entered promiscuous mode
[  166.510928][T11835] veth1_vlan: entered promiscuous mode
[  166.529065][T11953] netlink: 'syz.2.1905': attribute type 15 has an invalid length.
[  166.539558][T11835] veth0_macvtap: entered promiscuous mode
[  166.556438][T11835] veth1_macvtap: entered promiscuous mode
[  166.577316][T11835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.587809][T11835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.599920][T11835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.604525][T11835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.608083][T11835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.613142][T11835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.685623][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.688856][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.716557][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.719442][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.917177][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'.
[  166.925851][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'.
[  166.929504][T11978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'.
[  166.935664][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'.
[  166.941615][T11978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'.
[  166.948508][T11978] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1916'.
[  167.059090][T11985] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1918'.
[  167.069145][T11985] vlan2: entered allmulticast mode
[  167.162558][T11988] netlink: 'syz.0.1919': attribute type 11 has an invalid length.
[  167.165148][T11988] netlink: 'syz.0.1919': attribute type 11 has an invalid length.
[  167.198230][T11990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.447040][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.336295][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  169.340906][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  169.348066][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  169.354542][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  169.358216][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  169.579614][T12032] chnl_net:caif_netlink_parms(): no params data found
[  169.673993][T12032] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.676906][T12032] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.679878][T12032] bridge_slave_0: entered allmulticast mode
[  169.683982][T12032] bridge_slave_0: entered promiscuous mode
[  169.688849][T12032] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.692289][T12032] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.695316][T12032] bridge_slave_1: entered allmulticast mode
[  169.699162][T12032] bridge_slave_1: entered promiscuous mode
[  169.736087][T12032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.743435][T12032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.782856][T12032] team0: Port device team_slave_0 added
[  169.789049][T12032] team0: Port device team_slave_1 added
[  169.818730][T12032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.821784][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.832531][T12032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.838517][T12032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.841397][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.856322][T12032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.886973][T12050] netlink: 'syz.2.1936': attribute type 1 has an invalid length.
[  169.909656][T12050] 8021q: adding VLAN 0 to HW filter on device bond12
[  169.919837][T12032] hsr_slave_0: entered promiscuous mode
[  169.924109][T12032] hsr_slave_1: entered promiscuous mode
[  169.930560][T12050] ipvlan2: entered allmulticast mode
[  169.933191][T12050] bond12: entered allmulticast mode
[  169.957145][T12050] bond12: (slave gretap2): making interface the new active one
[  169.960057][T12050] gretap2: entered allmulticast mode
[  169.963478][T12050] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  169.972043][T12050] syz.2.1936 (12050) used greatest stack depth: 18992 bytes left
[  170.140913][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.200982][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.258237][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.387537][   T12] bridge_slave_1: left allmulticast mode
[  170.389941][   T12] bridge_slave_1: left promiscuous mode
[  170.392676][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.399925][   T12] bridge_slave_0: left allmulticast mode
[  170.405020][   T12] bridge_slave_0: left promiscuous mode
[  170.407913][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.699068][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.704029][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.708862][   T12] bond0 (unregistering): Released all slaves
[  170.905515][T12066] vlan2: entered allmulticast mode
[  171.056112][   T12] hsr_slave_0: left promiscuous mode
[  171.058036][T12077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  171.065114][T12078] netlink: 'syz.0.1943': attribute type 39 has an invalid length.
[  171.067835][   T12] hsr_slave_1: left promiscuous mode
[  171.074017][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.077099][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.103650][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.111414][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.156839][   T12] veth1_macvtap: left promiscuous mode
[  171.158808][   T12] veth0_macvtap: left promiscuous mode
[  171.160793][   T12] veth1_vlan: left promiscuous mode
[  171.163705][   T12] veth0_vlan: left promiscuous mode
[  171.373564][ T5830] Bluetooth: hci0: command tx timeout
[  171.480455][   T12] team0 (unregistering): Port device team_slave_1 removed
[  171.504014][   T12] team0 (unregistering): Port device team_slave_0 removed
[  171.909992][T12032] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.926711][T12032] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  171.956695][T12032] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  171.970495][T12096] __nla_validate_parse: 6 callbacks suppressed
[  171.970511][T12096] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1949'.
[  171.983868][T12032] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  172.065209][T12106] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1950'.
[  172.158781][T12032] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.179047][T12032] 8021q: adding VLAN 0 to HW filter on device team0
[  172.196854][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.199336][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.216526][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'.
[  172.221731][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.224073][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.246638][T12115] netlink: 'syz.0.1953': attribute type 1 has an invalid length.
[  172.281325][T12115] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  172.477305][T12135] netlink: 'syz.2.1960': attribute type 1 has an invalid length.
[  172.494302][T12135] 8021q: adding VLAN 0 to HW filter on device bond13
[  172.551233][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'.
[  172.556121][T12032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.618701][T12032] veth0_vlan: entered promiscuous mode
[  172.624187][T12032] veth1_vlan: entered promiscuous mode
[  172.638026][T12032] veth0_macvtap: entered promiscuous mode
[  172.646553][T12032] veth1_macvtap: entered promiscuous mode
[  172.664736][T12148] delete_channel: no stack
[  172.669690][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1962'.
[  172.673603][T12032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.694896][T12032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.703452][T12032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.706303][T12032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.709137][T12032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.714540][T12032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.782993][T12157] netlink: 'syz.2.1965': attribute type 4 has an invalid length.
[  172.785437][T12157] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1965'.
[  172.804078][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.807105][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.836538][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.839138][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.868476][T12161] netlink: 'syz.0.1966': attribute type 4 has an invalid length.
[  172.871184][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'.
[  172.887617][T12165] netlink: 'syz.2.1968': attribute type 58 has an invalid length.
[  172.897221][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1968'.
[  172.911355][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'.
[  172.987208][T12174] x_tables: duplicate underflow at hook 2
[  173.044823][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'.
[  173.078671][T12180] xt_ecn: cannot match TCP bits for non-tcp packets
[  173.200435][T12193] netlink: set zone limit has 8 unknown bytes
[  173.280019][T12200] vlan2: entered allmulticast mode
[  173.438069][T12210] netlink: 'syz.0.1986': attribute type 1 has an invalid length.
[  173.644599][T12241] vlan2: entered allmulticast mode
[  173.783984][T12251] lo: entered allmulticast mode
[  173.785767][T12251] lo: left allmulticast mode
[  173.844607][T12253] 8021q: adding VLAN 0 to HW filter on device bond14
[  173.862556][T12253] macvlan3: entered promiscuous mode
[  173.864797][T12253] bond14: entered promiscuous mode
[  173.867154][T12253] macvlan3: entered allmulticast mode
[  173.869504][T12253] bond14: entered allmulticast mode
[  173.875910][T12253] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  173.880452][T12253] bond14: left allmulticast mode
[  173.882974][T12253] bond14: left promiscuous mode
[  174.037279][T12256] pimreg: entered allmulticast mode
[  174.041356][T12255] pimreg: left allmulticast mode
[  174.418136][T12270] tap0: tun_chr_ioctl cmd 1074025676
[  174.420398][T12270] tap0: owner set to 0
[  174.584663][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.273466][T12276] syzkaller1: entered promiscuous mode
[  175.275298][T12276] syzkaller1: entered allmulticast mode
[  175.401975][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.405209][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.408180][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.413014][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.416800][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.548785][T12283] chnl_net:caif_netlink_parms(): no params data found
[  175.601380][T12283] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.604051][T12283] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.606584][T12283] bridge_slave_0: entered allmulticast mode
[  175.609448][T12283] bridge_slave_0: entered promiscuous mode
[  175.614212][T12283] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.616954][T12283] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.619709][T12283] bridge_slave_1: entered allmulticast mode
[  175.622880][T12283] bridge_slave_1: entered promiscuous mode
[  175.647999][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.653246][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.677127][T12283] team0: Port device team_slave_0 added
[  175.683485][T12303] bridge_slave_0: entered promiscuous mode
[  175.686144][T12303] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  175.700120][T12283] team0: Port device team_slave_1 added
[  175.726245][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.728683][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.739485][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.745170][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.747584][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.748332][T12305] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  175.756171][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.773862][T12305] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  175.786714][T12283] hsr_slave_0: entered promiscuous mode
[  175.789145][T12283] hsr_slave_1: entered promiscuous mode
[  175.792509][T12283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.796162][T12283] Cannot create hsr debugfs directory
[  176.151068][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.311014][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.349643][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.471218][   T13] bridge_slave_1: left allmulticast mode
[  176.475617][   T13] bridge_slave_1: left promiscuous mode
[  176.478140][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.488949][   T13] bridge_slave_0: left allmulticast mode
[  176.491413][   T13] bridge_slave_0: left promiscuous mode
[  176.497499][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.880478][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.885285][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.889206][   T13] bond0 (unregistering): Released all slaves
[  177.016436][T12317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  177.240770][   T13] hsr_slave_0: left promiscuous mode
[  177.248914][   T13] hsr_slave_1: left promiscuous mode
[  177.255390][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.259728][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.263540][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.266493][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.278906][   T13] veth1_macvtap: left promiscuous mode
[  177.281949][   T13] veth0_macvtap: left promiscuous mode
[  177.284160][   T13] veth1_vlan: left promiscuous mode
[  177.286027][   T13] veth0_vlan: left promiscuous mode
[  177.457750][ T5830] Bluetooth: hci0: command tx timeout
[  177.708394][   T13] team0 (unregistering): Port device team_slave_1 removed
[  177.743314][   T13] team0 (unregistering): Port device team_slave_0 removed
[  178.235284][T12283] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  178.255140][T12283] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  178.268683][T12283] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  178.285287][T12283] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  178.514598][T12283] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.550594][T12283] 8021q: adding VLAN 0 to HW filter on device team0
[  178.566397][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.568737][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.591131][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.593598][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.622771][T12355] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  178.773957][T12367] __nla_validate_parse: 8 callbacks suppressed
[  178.773970][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'.
[  178.799051][T12283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.807513][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'.
[  178.810630][T12367] netlink: 'syz.2.2022': attribute type 5 has an invalid length.
[  178.824129][T12367] netlink: 'syz.2.2022': attribute type 6 has an invalid length.
[  178.831821][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'.
[  178.857036][T12283] veth0_vlan: entered promiscuous mode
[  178.874965][T12283] veth1_vlan: entered promiscuous mode
[  178.898180][T12283] veth0_macvtap: entered promiscuous mode
[  178.914206][T12283] veth1_macvtap: entered promiscuous mode
[  178.939045][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.954277][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.959702][T12283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.969902][T12283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.975711][T12283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.978894][T12283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.068592][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.075195][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.106113][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.109471][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.209829][T12389] pimreg0: tun_chr_ioctl cmd 21731
[  179.416042][T12398] syzkaller1: entered promiscuous mode
[  179.417842][T12398] syzkaller1: entered allmulticast mode
[  179.636787][T12408] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2036'.
[  179.738066][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2037'.
[  179.885548][T12417] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2039'.
[  179.894506][T12417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.994288][T12419] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  180.060234][T12425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2043'.
[  180.260575][T12440] netlink: 'syz.0.2048': attribute type 2 has an invalid length.
[  180.289813][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'.
[  180.338807][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'.
[  180.342395][T12448] netlink: 'syz.0.2050': attribute type 1 has an invalid length.
[  180.345391][T12448] netlink: 'syz.0.2050': attribute type 2 has an invalid length.
[  180.348582][T12448] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2050'.
[  180.625089][T12463] syzkaller1: entered promiscuous mode
[  180.627542][T12463] syzkaller1: entered allmulticast mode
[  180.743448][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  180.780822][T12467] 8021q: adding VLAN 0 to HW filter on device bond11
[  180.796441][T12467] bond11: (slave macvlan2): Opening slave failed
[  180.975564][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.797860][T12473] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  181.808795][T12473] netlink: 'syz.0.2059': attribute type 10 has an invalid length.
[  181.812182][T12473] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  181.814427][T12473] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  181.983680][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.990862][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.996676][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.003153][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.007054][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.170988][T12509] ip_vti0: Master is either lo or non-ether device
[  182.185551][T12484] chnl_net:caif_netlink_parms(): no params data found
[  182.337731][T12484] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.340770][T12484] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.361872][T12484] bridge_slave_0: entered allmulticast mode
[  182.365979][T12484] bridge_slave_0: entered promiscuous mode
[  182.378404][T12484] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.381263][T12484] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.392296][T12484] bridge_slave_1: entered allmulticast mode
[  182.398492][T12484] bridge_slave_1: entered promiscuous mode
[  182.404009][ T5830] Bluetooth: hci2: link tx timeout
[  182.411557][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  182.438178][T12484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.447411][T12484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.472064][T12484] team0: Port device team_slave_0 added
[  182.476924][T12484] team0: Port device team_slave_1 added
[  182.527852][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.584432][T12532] 8021q: adding VLAN 0 to HW filter on device bond12
[  182.587669][T12484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.590020][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.600690][T12484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.634277][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.646657][T12532] macvlan2: entered promiscuous mode
[  182.648645][T12532] macvlan2: entered allmulticast mode
[  182.651476][T12532] bond12: (slave macvlan2): Opening slave failed
[  182.658543][T12484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.665724][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.675073][T12484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.753392][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.800659][T12484] hsr_slave_0: entered promiscuous mode
[  182.820325][T12484] hsr_slave_1: entered promiscuous mode
[  182.913251][T12542] x_tables: duplicate underflow at hook 1
[  183.027383][T12550] 8021q: adding VLAN 0 to HW filter on device bond13
[  183.037081][T12550] bond13: (slave macvlan2): Opening slave failed
[  183.062310][ T5855] bridge_slave_1: left allmulticast mode
[  183.064284][ T5855] bridge_slave_1: left promiscuous mode
[  183.068280][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.074295][ T5855] bridge_slave_0: left allmulticast mode
[  183.076439][ T5855] bridge_slave_0: left promiscuous mode
[  183.078645][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.424044][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.429835][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.436672][ T5855] bond0 (unregistering): Released all slaves
[  183.463615][T12560] ip_vti0: Master is either lo or non-ether device
[  183.634923][T12575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.797971][ T5855] hsr_slave_0: left promiscuous mode
[  183.806541][ T5855] hsr_slave_1: left promiscuous mode
[  183.816896][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.819943][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.828254][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.831207][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.846641][ T5855] veth1_macvtap: left promiscuous mode
[  183.848738][ T5855] veth0_macvtap: left promiscuous mode
[  183.858048][ T5855] veth1_vlan: left promiscuous mode
[  183.859872][ T5855] veth0_vlan: left promiscuous mode
[  184.103830][ T5217] Bluetooth: hci0: command tx timeout
[  184.185284][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  184.211200][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  184.491848][ T5217] Bluetooth: hci2: command 0x0405 tx timeout
[  184.508919][T12595] 8021q: adding VLAN 0 to HW filter on device bond15
[  184.515257][T12595] bond0: (slave bond15): Enslaving as an active interface with an up link
[  184.606740][T12602] __nla_validate_parse: 8 callbacks suppressed
[  184.606750][T12602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2099'.
[  184.616538][T12602] bridge_slave_0: default FDB implementation only supports local addresses
[  184.706747][T12484] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  184.736868][T12484] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  184.751212][T12484] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  184.772047][T12484] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  184.925608][T12484] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.953039][T12484] 8021q: adding VLAN 0 to HW filter on device team0
[  184.978235][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.981329][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.993281][T12642] 8021q: VLANs not supported on ip6tnl0
[  185.014146][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.017229][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.023364][T12643] 8021q: VLANs not supported on ip6tnl0
[  185.083652][T12643] team0: No ports can be present during mode change
[  185.110066][T12649] team0: No ports can be present during mode change
[  185.291163][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2115'.
[  185.312282][T12484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.318030][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2115'.
[  185.399893][T12662] syzkaller1: entered promiscuous mode
[  185.401883][T12662] syzkaller1: entered allmulticast mode
[  185.433220][T12484] veth0_vlan: entered promiscuous mode
[  185.463037][T12680] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2117'.
[  185.469939][T12484] veth1_vlan: entered promiscuous mode
[  185.506483][T12484] veth0_macvtap: entered promiscuous mode
[  185.540665][T12484] veth1_macvtap: entered promiscuous mode
[  185.576192][T12484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.595328][T12484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.607809][T12484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.610730][T12484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.619839][T12484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.628542][T12484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.649322][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'.
[  185.699883][T12693] 8021q: adding VLAN 0 to HW filter on device bond16
[  185.723806][T12693] macvlan3: entered allmulticast mode
[  185.726314][T12693] bond16: (slave macvlan3): Opening slave failed
[  185.737012][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.739694][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.775877][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.779546][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.260130][T12727] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2125'.
[  186.279223][T12727] netlink: 'syz.2.2125': attribute type 29 has an invalid length.
[  186.283155][T12727] netlink: 'syz.2.2125': attribute type 29 has an invalid length.
[  186.286431][T12727] netlink: 488 bytes leftover after parsing attributes in process `syz.2.2125'.
[  186.479968][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'.
[  186.505141][T12743] 8021q: adding VLAN 0 to HW filter on device bond17
[  186.516375][T12743] macvlan3: entered promiscuous mode
[  186.518993][T12743] bond17: (slave macvlan3): Opening slave failed
[  186.734504][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2131'.
[  186.750522][T12752] 8021q: adding VLAN 0 to HW filter on device bond18
[  186.783792][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'.
[  186.786657][T12755] erspan0: default FDB implementation only supports local addresses
[  186.830936][T12761] gretap0: Device is already in use.
[  186.973921][   T98] block nbd1: Possible stuck request ffff8880220d0000: control (read@0,1024B). Runtime 60 seconds
[  186.977537][   T98] block nbd1: Possible stuck request ffff8880220d0200: control (read@1024,1024B). Runtime 60 seconds
[  186.981159][   T98] block nbd1: Possible stuck request ffff8880220d0400: control (read@2048,1024B). Runtime 60 seconds
[  186.984796][   T98] block nbd1: Possible stuck request ffff8880220d0600: control (read@3072,1024B). Runtime 60 seconds
[  187.090990][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.106724][T12774] macvtap1: entered allmulticast mode
[  187.108486][T12774] veth0_macvtap: entered allmulticast mode
[  188.025415][T12789] netlink: 'syz.0.2143': attribute type 13 has an invalid length.
[  188.029556][T12789] gretap0: refused to change device tx_queue_len
[  188.034007][T12789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  188.083182][T12793] netlink: 'syz.2.2145': attribute type 2 has an invalid length.
[  188.196563][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.202260][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.208817][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.219311][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.224911][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.313211][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.428029][T12798] chnl_net:caif_netlink_parms(): no params data found
[  188.498393][T12798] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.500899][T12798] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.504049][T12798] bridge_slave_0: entered allmulticast mode
[  188.506951][T12798] bridge_slave_0: entered promiscuous mode
[  188.512452][T12798] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.515064][T12798] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.517810][T12798] bridge_slave_1: entered allmulticast mode
[  188.520673][T12798] bridge_slave_1: entered promiscuous mode
[  188.542252][T12798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.548481][T12798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.574398][T12798] team0: Port device team_slave_0 added
[  188.578664][T12798] team0: Port device team_slave_1 added
[  188.616095][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.627312][T12798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.629835][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.638913][T12798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.643856][T12798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.646624][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.657104][T12798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.684968][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.707563][T12798] hsr_slave_0: entered promiscuous mode
[  188.710584][T12798] hsr_slave_1: entered promiscuous mode
[  188.713488][T12798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.716319][T12798] Cannot create hsr debugfs directory
[  188.853066][   T13] bridge_slave_1: left allmulticast mode
[  188.857575][   T13] bridge_slave_1: left promiscuous mode
[  188.859763][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.865802][   T13] bridge_slave_0: left allmulticast mode
[  188.867870][   T13] bridge_slave_0: left promiscuous mode
[  188.869813][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.124385][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.128938][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.134191][   T13] bond0 (unregistering): Released all slaves
[  189.331851][T12823] gretap0: Device is already in use.
[  189.477973][T12827] veth0_to_bond: left allmulticast mode
[  189.480572][T12827] veth0_to_bond: left promiscuous mode
[  189.490982][T12827] bridge4: port 2(veth0_to_bond) entered disabled state
[  189.503780][T12827] team_slave_0: left promiscuous mode
[  189.528131][T12827] team0: Port device team_slave_0 removed
[  189.533887][T12827] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  189.627656][   T13] hsr_slave_0: left promiscuous mode
[  189.630838][   T13] hsr_slave_1: left promiscuous mode
[  189.636815][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.639771][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.650910][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.663709][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.680996][   T13] veth1_macvtap: left promiscuous mode
[  189.684460][   T13] veth0_macvtap: left promiscuous mode
[  189.687951][   T13] veth1_vlan: left promiscuous mode
[  189.690121][   T13] veth0_vlan: left promiscuous mode
[  190.050972][   T13] team0 (unregistering): Port device team_slave_1 removed
[  190.084199][   T13] team0 (unregistering): Port device team_slave_0 removed
[  190.252261][ T5217] Bluetooth: hci0: command tx timeout
[  190.368395][T12838] ip_vti0: Master is either lo or non-ether device
[  190.534126][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'.
[  190.538039][T12842] erspan0: default FDB implementation only supports local addresses
[  190.567528][T12798] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  190.589930][T12798] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  190.598938][T12798] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  190.615981][T12798] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  190.651257][T12845] ieee802154 phy0 wpan0: encryption failed: -22
[  190.822365][T12798] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.852006][T12798] 8021q: adding VLAN 0 to HW filter on device team0
[  190.859478][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.862095][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.883068][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.886146][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.924690][T12860] gretap0: Device is already in use.
[  190.968677][T12858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.028963][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'.
[  191.032897][T12798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.074826][T12858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.088155][T12798] veth0_vlan: entered promiscuous mode
[  191.099263][T12798] veth1_vlan: entered promiscuous mode
[  191.115778][T12798] veth0_macvtap: entered promiscuous mode
[  191.129683][T12798] veth1_macvtap: entered promiscuous mode
[  191.163174][T12858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.176685][T12798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.185478][T12798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.227959][T12858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.237381][T12798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.240835][T12798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.245356][T12798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.248588][T12798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.255026][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'.
[  191.258585][T12874] erspan0: default FDB implementation only supports local addresses
[  191.298557][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  191.304497][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2166'.
[  191.391944][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.395285][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.415186][T12858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.454733][T12858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.463962][T12858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.473831][T12858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.477716][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.486733][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.637210][T12886] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2171'.
[  191.691034][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  191.702227][T12891] erspan0: default FDB implementation only supports local addresses
[  191.707156][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  191.710016][T12894] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  191.714607][T12894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.744731][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'.
[  191.751043][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'.
[  191.760157][T12896] 8021q: adding VLAN 0 to HW filter on device bond19
[  191.776871][T12896] bond19: (slave macvlan3): Opening slave failed
[  191.828725][T12901] netlink: 'syz.0.2178': attribute type 10 has an invalid length.
[  191.837015][T12901] dummy0: entered promiscuous mode
[  191.839453][T12901] dummy0: entered allmulticast mode
[  191.842695][T12901] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  192.103801][T12927] syzkaller0: entered promiscuous mode
[  192.106207][T12927] syzkaller0: entered allmulticast mode
[  192.990846][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.016783][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.336699][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.348188][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.354173][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.358306][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.364815][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.433181][T12961] 8021q: adding VLAN 0 to HW filter on device bond14
[  194.441153][T12961] bond14: (slave macvlan2): Opening slave failed
[  194.529994][T12971] No such timeout policy "syz0"
[  194.530930][T12956] chnl_net:caif_netlink_parms(): no params data found
[  194.614169][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.630302][T12956] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.633537][T12956] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.636293][T12956] bridge_slave_0: entered allmulticast mode
[  194.639841][T12956] bridge_slave_0: entered promiscuous mode
[  194.645048][T12956] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.647465][T12956] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.649955][T12956] bridge_slave_1: entered allmulticast mode
[  194.653097][T12956] bridge_slave_1: entered promiscuous mode
[  194.677905][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.698959][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.708865][T12956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.717814][T12956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.754613][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.788422][T12956] team0: Port device team_slave_0 added
[  194.804926][T12956] team0: Port device team_slave_1 added
[  194.839885][T12956] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.844578][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.856145][T12956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.873476][T12956] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.885383][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.939669][T12956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.188174][T12956] hsr_slave_0: entered promiscuous mode
[  195.191045][T12956] hsr_slave_1: entered promiscuous mode
[  195.237029][ T5855] bridge_slave_1: left allmulticast mode
[  195.242180][ T5855] bridge_slave_1: left promiscuous mode
[  195.246363][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.277523][ T5855] bridge_slave_0: left allmulticast mode
[  195.285424][ T5855] bridge_slave_0: left promiscuous mode
[  195.288817][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.602997][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.608565][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.613558][ T5855] bond0 (unregistering): Released all slaves
[  195.657642][T13004] 8021q: adding VLAN 0 to HW filter on device bond15
[  195.680725][T13008] macvlan2: entered allmulticast mode
[  195.683908][T13008] bond15: (slave macvlan2): Opening slave failed
[  196.006474][T13026] bond16: entered promiscuous mode
[  196.114728][ T5855] hsr_slave_0: left promiscuous mode
[  196.118410][ T5855] hsr_slave_1: left promiscuous mode
[  196.121340][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.135221][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.146120][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.149155][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.186805][ T5855] veth1_macvtap: left promiscuous mode
[  196.189590][ T5855] veth0_macvtap: left promiscuous mode
[  196.192658][ T5855] veth1_vlan: left promiscuous mode
[  196.194418][ T5855] veth0_vlan: left promiscuous mode
[  196.194598][T13042] __nla_validate_parse: 9 callbacks suppressed
[  196.194609][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'.
[  196.411677][ T5830] Bluetooth: hci0: command tx timeout
[  196.629695][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  196.660252][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  197.042389][T13047] netlink: 'syz.0.2212': attribute type 1 has an invalid length.
[  197.128074][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'.
[  197.138523][T13052] IPVS: Unknown mcast interface: vcan0
[  197.174769][T13054] netlink: 'syz.2.2214': attribute type 8 has an invalid length.
[  197.339793][T13065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.474860][T12956] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  197.485372][T12956] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  197.512404][T12956] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  197.524814][T12956] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  197.558423][T13076] syzkaller1: entered promiscuous mode
[  197.560800][T13076] syzkaller1: entered allmulticast mode
[  197.618620][T13084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.675824][T13087] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2224'.
[  197.702584][T12956] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.735933][T12956] 8021q: adding VLAN 0 to HW filter on device team0
[  197.754054][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.757039][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.787918][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.790942][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.017378][T12956] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.071278][T13118] netlink: 'syz.2.2231': attribute type 1 has an invalid length.
[  198.079770][T13118] netlink: 'syz.2.2231': attribute type 4 has an invalid length.
[  198.080347][T12956] veth0_vlan: entered promiscuous mode
[  198.086487][T13118] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2231'.
[  198.099272][T12956] veth1_vlan: entered promiscuous mode
[  198.105574][T13118] netlink: 'syz.2.2231': attribute type 1 has an invalid length.
[  198.108090][T13118] netlink: 'syz.2.2231': attribute type 4 has an invalid length.
[  198.110630][T13118] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2231'.
[  198.146777][T12956] veth0_macvtap: entered promiscuous mode
[  198.150871][T12956] veth1_macvtap: entered promiscuous mode
[  198.168246][T12956] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.179823][T12956] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.194541][T12956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.197347][T12956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.207485][T12956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.210338][T12956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.230455][T13125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2232'.
[  198.293568][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.300859][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.317689][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.320251][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.446227][T13131] bpq0: entered promiscuous mode
[  198.448082][T13131] bpq0: entered allmulticast mode
[  198.475864][T13135] gretap0: Device is already in use.
[  198.535364][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'.
[  198.787287][T13149] syzkaller1: entered promiscuous mode
[  198.789457][T13149] syzkaller1: entered allmulticast mode
[  198.838441][T13151] 8021q: adding VLAN 0 to HW filter on device bond17
[  198.841037][T13151] bridge0: port 1(bond17) entered blocking state
[  198.843562][T13151] bridge0: port 1(bond17) entered disabled state
[  198.845717][T13151] bond17: entered allmulticast mode
[  198.848960][T13151] bond17: entered promiscuous mode
[  198.853525][T13151] bridge0: port 1(bond17) entered blocking state
[  198.855972][T13151] bridge0: port 1(bond17) entered forwarding state
[  199.072130][T13168] syzkaller1: entered promiscuous mode
[  199.073947][T13168] syzkaller1: entered allmulticast mode
[  199.088959][T13166] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2248'.
[  199.137528][ T1089] bridge0: port 1(bond17) entered disabled state
[  199.216906][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'.
[  199.235765][T13173] 8021q: adding VLAN 0 to HW filter on device bond20
[  199.246290][T13173] macvlan5: entered promiscuous mode
[  199.248244][T13173] macvlan5: entered allmulticast mode
[  199.251059][T13173] bond20: (slave macvlan5): Opening slave failed
[  199.406411][T13178] bond21: entered promiscuous mode
[  199.408147][T13178] bond21: entered allmulticast mode
[  199.410217][T13178] 8021q: adding VLAN 0 to HW filter on device bond21
[  199.491063][T13183] bond22: entered promiscuous mode
[  199.494566][T13183] bond22: entered allmulticast mode
[  199.496624][T13183] 8021q: adding VLAN 0 to HW filter on device bond22
[  199.577281][T13188] gretap0: Device is already in use.
[  199.930385][T13197] netlink: 'syz.0.2258': attribute type 30 has an invalid length.
[  200.090809][T13206] netlink: 'syz.0.2261': attribute type 1 has an invalid length.
[  200.094221][T13206] netlink: 'syz.0.2261': attribute type 3 has an invalid length.
[  200.097076][T13206] netlink: 'syz.0.2261': attribute type 1 has an invalid length.
[  200.100025][T13206] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2261'.
[  200.103808][T13206] NCSI netlink: No device for ifindex 0
[  200.191169][T13213] syzkaller1: entered promiscuous mode
[  200.193268][T13213] syzkaller1: entered allmulticast mode
[  200.458433][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.593081][T13228] xt_ipcomp: unknown flags F7
[  201.613177][T13229] ip_vti0: Master is either lo or non-ether device
[  201.755775][T13238] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  201.797886][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.805698][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.809738][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.814897][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.818351][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.967870][T13241] chnl_net:caif_netlink_parms(): no params data found
[  202.010215][T13253] netlink: zone id is out of range
[  202.013196][T13253] netlink: zone id is out of range
[  202.015974][T13253] netlink: zone id is out of range
[  202.018578][T13253] netlink: zone id is out of range
[  202.020883][T13253] netlink: zone id is out of range
[  202.025570][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.032469][T13253] netlink: zone id is out of range
[  202.034908][T13253] netlink: zone id is out of range
[  202.037516][T13253] netlink: zone id is out of range
[  202.039911][T13253] netlink: zone id is out of range
[  202.098658][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.133464][T13241] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.133851][T13258] netlink: 'syz.0.2274': attribute type 10 has an invalid length.
[  202.136008][T13241] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.145413][T13241] bridge_slave_0: entered allmulticast mode
[  202.148266][T13241] bridge_slave_0: entered promiscuous mode
[  202.170844][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.185813][T13241] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.188338][T13241] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.190802][T13241] bridge_slave_1: entered allmulticast mode
[  202.195869][T13241] bridge_slave_1: entered promiscuous mode
[  202.255434][T13241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.260630][T13241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.291926][T13241] team0: Port device team_slave_0 added
[  202.305966][T13241] team0: Port device team_slave_1 added
[  202.353333][T13241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.356765][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.370273][T13241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.377445][T13241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.379704][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.389006][T13241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.396397][ T5855] bridge_slave_1: left allmulticast mode
[  202.398283][ T5855] bridge_slave_1: left promiscuous mode
[  202.400230][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.407656][ T5855] bridge_slave_0: left allmulticast mode
[  202.409551][ T5855] bridge_slave_0: left promiscuous mode
[  202.411454][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.700611][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.709214][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.713818][ T5855] bond0 (unregistering): Released all slaves
[  202.785801][T13241] hsr_slave_0: entered promiscuous mode
[  202.789069][T13241] hsr_slave_1: entered promiscuous mode
[  202.791451][T13241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.799393][T13241] Cannot create hsr debugfs directory
[  202.839031][T13272] syzkaller1: entered promiscuous mode
[  202.840954][T13272] syzkaller1: entered allmulticast mode
[  203.073241][T13286] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2280'.
[  203.827369][ T5855] hsr_slave_0: left promiscuous mode
[  203.829649][ T5855] hsr_slave_1: left promiscuous mode
[  203.833763][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.836256][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.838967][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.841461][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.851706][ T5217] Bluetooth: hci0: command tx timeout
[  203.863644][ T5855] veth1_macvtap: left promiscuous mode
[  203.865638][ T5855] veth0_macvtap: left promiscuous mode
[  203.867944][ T5855] veth1_vlan: left promiscuous mode
[  203.870240][ T5855] veth0_vlan: left promiscuous mode
[  204.174110][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  204.201017][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  204.562376][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'.
[  204.926870][T13313] bridge: RTM_NEWNEIGH with invalid ether address
[  204.984054][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'.
[  205.103746][T13241] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  205.117172][T13241] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  205.125159][T13241] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  205.131458][T13241] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  205.220718][T13241] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.243447][T13241] 8021q: adding VLAN 0 to HW filter on device team0
[  205.254263][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.256752][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.295755][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.298317][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.478876][T13241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.525554][T13241] veth0_vlan: entered promiscuous mode
[  205.541069][T13360] syzkaller1: entered promiscuous mode
[  205.546482][T13360] syzkaller1: entered allmulticast mode
[  205.551933][T13241] veth1_vlan: entered promiscuous mode
[  205.580351][T13241] veth0_macvtap: entered promiscuous mode
[  205.585322][T13241] veth1_macvtap: entered promiscuous mode
[  205.594995][T13241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.601221][T13241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.609324][T13241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.613050][T13241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.616696][T13241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.619651][T13241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.637338][T13362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.645395][T13362] syzkaller0: entered promiscuous mode
[  205.647840][T13362] syzkaller0: entered allmulticast mode
[  205.690066][T13362] tipc: Resetting bearer <eth:syzkaller0>
[  205.697884][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.709004][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.742824][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.745490][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.788077][T13366] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2296'.
[  205.876338][T13371] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2299'.
[  205.936217][T13378] gretap0: Device is already in use.
[  205.973029][T13382] netlink: 'syz.0.2302': attribute type 23 has an invalid length.
[  205.981073][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'.
[  205.985268][T13383] netlink: 'syz.0.2302': attribute type 23 has an invalid length.
[  206.155976][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2306'.
[  206.219224][T13402] ip_vti0: Master is either lo or non-ether device
[  206.324358][T13408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2309'.
[  206.342121][T13411] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  206.371093][T13411] bond23: entered promiscuous mode
[  206.374902][T13411] 8021q: adding VLAN 0 to HW filter on device bond23
[  206.390647][T13411] 8021q: adding VLAN 0 to HW filter on device bond23
[  206.397429][T13411] bond23: (slave vcan0): The slave device specified does not support setting the MAC address
[  206.401197][T13411] bond23: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  206.409643][T13411] bond23: (slave vcan0): making interface the new active one
[  206.413561][T13411] vcan0: entered promiscuous mode
[  206.417519][T13411] bond23: (slave vcan0): Enslaving as an active interface with an up link
[  206.421188][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'.
[  206.426338][T13415] erspan0: default FDB implementation only supports local addresses
[  206.480168][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'.
[  206.519670][T13417] 8021q: adding VLAN 0 to HW filter on device bond19
[  206.635146][T13427] 8021q: adding VLAN 0 to HW filter on device bond24
[  206.667639][T13427] bond24: (slave macvlan5): Opening slave failed
[  206.790860][T13437] netlink: 'syz.0.2320': attribute type 29 has an invalid length.
[  206.794696][T13437] netlink: 'syz.0.2320': attribute type 29 has an invalid length.
[  207.699628][T13449] netlink: 'syz.2.2324': attribute type 21 has an invalid length.
[  207.820395][T13452] 8021q: adding VLAN 0 to HW filter on device bond25
[  207.858173][ T5857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.880485][T13452] bond25: (slave macvlan5): Opening slave failed
[  209.001765][ T5277] udevd[5277]: worker [5826] /devices/virtual/block/nbd1 is taking a long time
[  209.034791][T13459] __nla_validate_parse: 4 callbacks suppressed
[  209.034809][T13459] netlink: 5372 bytes leftover after parsing attributes in process `syz.2.2327'.
[  209.092233][T13459] x_tables: unsorted entry at hook 1
[  209.094721][T13461] x_tables: unsorted entry at hook 1
[  209.146283][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'.
[  209.326203][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.332171][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.337577][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.354502][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.358454][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.415990][ T5857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.456866][T13488] netlink: 'syz.0.2332': attribute type 3 has an invalid length.
[  209.486970][ T5857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.539122][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2333'.
[  209.568815][T13492] 8021q: adding VLAN 0 to HW filter on device bond26
[  209.596034][ T5857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.620505][T13492] bond26: (slave macvlan5): Opening slave failed
[  210.013363][ T5857] bridge_slave_1: left allmulticast mode
[  210.015924][ T5857] bridge_slave_1: left promiscuous mode
[  210.018549][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.050644][ T5857] bridge_slave_0: left allmulticast mode
[  210.068962][ T5857] bridge_slave_0: left promiscuous mode
[  210.086426][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.507103][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.512076][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.516080][ T5857] bond0 (unregistering): Released all slaves
[  210.537909][T13483] chnl_net:caif_netlink_parms(): no params data found
[  210.581374][T13516] syzkaller1: entered promiscuous mode
[  210.583707][T13516] syzkaller1: entered allmulticast mode
[  210.724017][T13483] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.726434][T13483] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.728837][T13483] bridge_slave_0: entered allmulticast mode
[  210.734518][T13483] bridge_slave_0: entered promiscuous mode
[  210.806008][T13483] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.808721][T13483] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.811336][T13483] bridge_slave_1: entered allmulticast mode
[  210.820041][T13532] ipt_REJECT: TCP_RESET invalid for non-tcp
[  210.820938][T13483] bridge_slave_1: entered promiscuous mode
[  210.901184][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.907417][T13532] netlink: 'syz.2.2341': attribute type 3 has an invalid length.
[  210.924463][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.983323][ T5857] hsr_slave_0: left promiscuous mode
[  210.988086][ T5857] hsr_slave_1: left promiscuous mode
[  210.998299][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.001084][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.016190][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.019470][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.034662][ T5857] veth1_macvtap: left promiscuous mode
[  211.036621][ T5857] veth0_macvtap: left promiscuous mode
[  211.038525][ T5857] veth1_vlan: left promiscuous mode
[  211.040320][ T5857] veth0_vlan: left promiscuous mode
[  211.403759][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  211.429970][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  211.453974][ T5830] Bluetooth: hci0: command tx timeout
[  211.780811][T13483] team0: Port device team_slave_0 added
[  211.812717][T13483] team0: Port device team_slave_1 added
[  211.870654][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.875446][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.888246][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.898035][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.904948][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.941849][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.026413][T13483] hsr_slave_0: entered promiscuous mode
[  212.029849][T13483] hsr_slave_1: entered promiscuous mode
[  212.120783][ T6868] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0
[  212.141784][ T6868] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0
[  212.145033][ T6868] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0
[  212.148599][ T6868] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0
[  212.159339][ T6868] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0
[  212.162255][ T6868] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x3
[  212.171850][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'.
[  212.201397][ T6868] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  212.215307][T13569] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  212.535985][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2348'.
[  212.706813][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'.
[  212.717377][T13583] erspan0: default FDB implementation only supports local addresses
[  213.055786][T13483] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  213.070241][T13483] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  213.097344][T13483] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  213.107931][T13616] xt_HMARK: spi-set and port-set can't be combined
[  213.117884][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'.
[  213.123095][T13483] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  213.169496][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2358'.
[  213.233947][T13625] 8021q: adding VLAN 0 to HW filter on device bond27
[  213.256065][T13629] bond27: (slave macvlan5): Opening slave failed
[  213.263864][T13630] netlink: 'syz.0.2359': attribute type 3 has an invalid length.
[  213.266467][T13630] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2359'.
[  213.284074][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'.
[  213.361373][T13483] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.407139][T13483] 8021q: adding VLAN 0 to HW filter on device team0
[  213.427236][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.430426][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.496112][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.498639][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.535218][ T5830] Bluetooth: hci0: command tx timeout
[  213.593790][T13653] ip_vti0: Master is either lo or non-ether device
[  213.771882][T13483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.830035][T13483] veth0_vlan: entered promiscuous mode
[  213.838174][T13483] veth1_vlan: entered promiscuous mode
[  213.881309][T13483] veth0_macvtap: entered promiscuous mode
[  213.886830][T13678] netlink: 'syz.2.2370': attribute type 2 has an invalid length.
[  213.887734][T13483] veth1_macvtap: entered promiscuous mode
[  213.908442][T13678] : entered promiscuous mode
[  213.923928][T13483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.943667][T13483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.948736][T13483] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.954853][T13483] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.957812][T13483] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.960973][T13483] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.975646][T13686] Bluetooth: MGMT ver 1.23
[  214.043375][T13689] __nla_validate_parse: 1 callbacks suppressed
[  214.043396][T13689] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2374'.
[  214.142945][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.145531][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.196336][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.197233][T13703] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2376'.
[  214.205943][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.205989][T13698] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2376'.
[  214.234416][T13698] tap0: tun_chr_ioctl cmd 1074025677
[  214.236962][T13698] tap0: linktype set to 823
[  214.417509][T13711] netlink: 'syz.2.2379': attribute type 1 has an invalid length.
[  214.420965][T13711] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2379'.
[  214.520637][T13714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2380'.
[  215.356366][T12086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.286620][T12086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.649777][T13722] bridge10: entered promiscuous mode
[  216.651803][T13722] bridge10: entered allmulticast mode
[  216.656587][T13722] team0: Port device bridge10 added
[  216.664662][T13725] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  216.796346][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  216.799722][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.807594][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.810611][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.815679][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.825779][T13731] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2384'.
[  216.984454][T13736] chnl_net:caif_netlink_parms(): no params data found
[  217.054646][   T98] block nbd1: Possible stuck request ffff8880220d0000: control (read@0,1024B). Runtime 90 seconds
[  217.059176][   T98] block nbd1: Possible stuck request ffff8880220d0200: control (read@1024,1024B). Runtime 90 seconds
[  217.064341][   T98] block nbd1: Possible stuck request ffff8880220d0400: control (read@2048,1024B). Runtime 90 seconds
[  217.068754][   T98] block nbd1: Possible stuck request ffff8880220d0600: control (read@3072,1024B). Runtime 90 seconds
[  217.122408][T13736] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.125423][T13736] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.128516][T13736] bridge_slave_0: entered allmulticast mode
[  217.135178][T13736] bridge_slave_0: entered promiscuous mode
[  217.146133][T13736] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.151488][T13736] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.155443][T13736] bridge_slave_1: entered allmulticast mode
[  217.159352][T13736] bridge_slave_1: entered promiscuous mode
[  217.194913][T12086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.222576][T13736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.229192][T13736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.249242][T12086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.279183][T13736] team0: Port device team_slave_0 added
[  217.287585][T13736] team0: Port device team_slave_1 added
[  217.323066][T13736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.325490][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.334751][T13736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.349025][T13736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.351468][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.362829][T13736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.385882][T12086] bridge_slave_1: left allmulticast mode
[  217.388003][T12086] bridge_slave_1: left promiscuous mode
[  217.389991][T12086] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.404467][T12086] bridge_slave_0: left allmulticast mode
[  217.406886][T12086] bridge_slave_0: left promiscuous mode
[  217.408845][T12086] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.678179][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  217.681307][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'.
[  217.692766][T13766] netlink: 'syz.0.2390': attribute type 12 has an invalid length.
[  217.696027][T13766] netlink: 'syz.0.2390': attribute type 11 has an invalid length.
[  217.704586][T12086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.708787][T12086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.714486][T12086] bond0 (unregistering): Released all slaves
[  217.771381][T13736] hsr_slave_0: entered promiscuous mode
[  217.778124][T13736] hsr_slave_1: entered promiscuous mode
[  217.782454][T13736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.789759][T13736] Cannot create hsr debugfs directory
[  217.840594][T13772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2392'.
[  217.865107][T13772] netlink: 'syz.2.2392': attribute type 2 has an invalid length.
[  217.877365][T13770] ip_vti0: Master is either lo or non-ether device
[  217.891235][T13772] : entered promiscuous mode
[  218.065497][T12086] hsr_slave_0: left promiscuous mode
[  218.068446][T12086] hsr_slave_1: left promiscuous mode
[  218.071323][T12086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.077634][T12086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.092823][T12086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.095979][T12086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.125519][T12086] veth1_macvtap: left promiscuous mode
[  218.127948][T12086] veth0_macvtap: left promiscuous mode
[  218.130570][T12086] veth1_vlan: left promiscuous mode
[  218.133177][T12086] veth0_vlan: left promiscuous mode
[  218.410223][T12086] team0 (unregistering): Port device team_slave_1 removed
[  218.437809][T12086] team0 (unregistering): Port device team_slave_0 removed
[  219.045545][T13736] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  219.054876][T13736] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  219.110019][T13801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.118580][T13801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.190301][T13801] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.195161][T13801] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.198486][T13801] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.204890][T13801] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.264346][T13736] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  219.276572][T13736] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  219.381308][T13736] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.406115][T13736] 8021q: adding VLAN 0 to HW filter on device team0
[  219.418847][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.421788][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.438491][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.441661][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.628516][T13736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.668977][T13736] veth0_vlan: entered promiscuous mode
[  219.678780][T13736] veth1_vlan: entered promiscuous mode
[  219.709257][T13736] veth0_macvtap: entered promiscuous mode
[  219.717181][T13736] veth1_macvtap: entered promiscuous mode
[  219.730910][T13736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.742964][T13736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.750769][T13736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.755773][T13736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.759092][T13736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.763038][T13736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.806850][T13799] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  219.825496][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.831760][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.875492][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.878540][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.486468][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.007189][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.019199][T13828] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2400'.
[  223.040827][T13828] vlan2: entered allmulticast mode
[  223.142382][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  223.146454][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  223.149559][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  223.152565][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  223.156666][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  223.265399][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.329745][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.408301][T13837] chnl_net:caif_netlink_parms(): no params data found
[  223.571223][ T5855] bridge_slave_1: left allmulticast mode
[  223.575092][ T5855] bridge_slave_1: left promiscuous mode
[  223.577957][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.584235][ T5855] bridge_slave_0: left allmulticast mode
[  223.586294][ T5855] bridge_slave_0: left promiscuous mode
[  223.588687][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.958251][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.963036][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.966805][ T5855] bond0 (unregistering): Released all slaves
[  223.974979][T13837] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.980125][T13837] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.984181][T13837] bridge_slave_0: entered allmulticast mode
[  223.989503][T13837] bridge_slave_0: entered promiscuous mode
[  224.006512][T13837] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.009682][T13837] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.023124][T13837] bridge_slave_1: entered allmulticast mode
[  224.034201][T13837] bridge_slave_1: entered promiscuous mode
[  224.114112][T13870] syzkaller1: entered promiscuous mode
[  224.116743][T13870] syzkaller1: entered allmulticast mode
[  224.120632][T13868] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2410'.
[  224.204243][T13837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.240098][T13837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.393762][T13878] syzkaller1: tun_chr_ioctl cmd 1074025677
[  224.396085][T13878] syzkaller1: linktype set to 6
[  224.411460][T13837] team0: Port device team_slave_0 added
[  224.418786][T13837] team0: Port device team_slave_1 added
[  224.443558][ T5855] hsr_slave_0: left promiscuous mode
[  224.446372][ T5855] hsr_slave_1: left promiscuous mode
[  224.448431][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.450917][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.457197][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.459662][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.476514][ T5855] veth1_macvtap: left promiscuous mode
[  224.478686][ T5855] veth0_macvtap: left promiscuous mode
[  224.480842][ T5855] veth1_vlan: left promiscuous mode
[  224.483305][ T5855] veth0_vlan: left promiscuous mode
[  224.756228][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  224.779523][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  225.138381][T13837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.140764][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.167797][T13837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.193932][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'.
[  225.203475][T13837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.216174][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.225634][ T5830] Bluetooth: hci0: command tx timeout
[  225.233716][T13837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.309080][T13837] hsr_slave_0: entered promiscuous mode
[  225.314088][T13837] hsr_slave_1: entered promiscuous mode
[  225.543622][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'.
[  225.547308][T13904] erspan0: default FDB implementation only supports local addresses
[  225.600579][T13912] net_ratelimit: 9 callbacks suppressed
[  225.600595][T13912] openvswitch: netlink: Duplicate or invalid key (type 0).
[  225.610904][T13912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.797934][T13928] sctp: [Deprecated]: syz.0.2424 (pid 13928) Use of struct sctp_assoc_value in delayed_ack socket option.
[  225.797934][T13928] Use struct sctp_sack_info instead
[  225.806441][T13919] sctp: [Deprecated]: syz.0.2424 (pid 13919) Use of struct sctp_assoc_value in delayed_ack socket option.
[  225.806441][T13919] Use struct sctp_sack_info instead
[  225.823661][T13918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.919906][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'.
[  225.923648][T13934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.962682][T13934] netlink: 'syz.0.2427': attribute type 39 has an invalid length.
[  225.978014][T13932] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2426'.
[  226.198001][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'.
[  226.205924][T13950] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  226.209245][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.378545][T13837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  226.385885][T13837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  226.390677][T13837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  226.397547][T13837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  226.449862][T13837] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.462812][T13837] 8021q: adding VLAN 0 to HW filter on device team0
[  226.468553][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.471006][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.496633][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.499060][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.684154][T13837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.760659][T13837] veth0_vlan: entered promiscuous mode
[  226.778527][T13837] veth1_vlan: entered promiscuous mode
[  226.806391][T13837] veth0_macvtap: entered promiscuous mode
[  226.810130][T13837] veth1_macvtap: entered promiscuous mode
[  226.835185][T13837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.846452][T13837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.857150][T13837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.863452][T13837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.867437][T13837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.870341][T13837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.887776][T13995] Bluetooth: MGMT ver 1.23
[  226.959950][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.974237][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.989700][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.996281][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.024477][T13999] netlink: 'syz.2.2437': attribute type 10 has an invalid length.
[  227.027917][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2437'.
[  227.203728][T14006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2437'.
[  227.552202][T14031] netlink: 'syz.0.2440': attribute type 7 has an invalid length.
[  227.555599][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'.
[  227.696610][T14039] erspan0: default FDB implementation only supports local addresses
[  228.055435][T14059] __nla_validate_parse: 2 callbacks suppressed
[  228.055451][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'.
[  228.061363][T14059] erspan0: default FDB implementation only supports local addresses
[  228.180026][T14068] sock: sock_timestamping_bind_phc: sock not bind to device
[  228.193962][T14062] block nbd2: server does not support multiple connections per device.
[  228.198367][T14062] block nbd2: shutting down sockets
[  228.230046][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'.
[  228.497520][T14087] Cannot find set identified by id 0 to match
[  228.520609][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'.
[  228.529005][T14090] erspan0: default FDB implementation only supports local addresses
[  228.609288][T14097] netlink: 'syz.0.2460': attribute type 1 has an invalid length.
[  228.841400][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'.
[  228.866847][T14114] 8021q: adding VLAN 0 to HW filter on device bond28
[  228.988236][ T5838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.536491][T14129] sctp: [Deprecated]: syz.2.2468 (pid 14129) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.536491][T14129] Use struct sctp_sack_info instead
[  230.670984][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'.
[  230.789620][ T5838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.842882][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.848113][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.857845][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.868553][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.874367][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.901620][T14154] ieee802154 phy0 wpan0: encryption failed: -22
[  230.915116][ T5838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.990729][ T5838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.004155][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'.
[  231.064626][T14164] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  231.154678][ T5838] bridge_slave_1: left allmulticast mode
[  231.159012][ T5838] bridge_slave_1: left promiscuous mode
[  231.163456][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.168690][ T5838] bridge_slave_0: left allmulticast mode
[  231.170997][ T5838] bridge_slave_0: left promiscuous mode
[  231.174370][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.448825][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.454287][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.457888][ T5838] bond0 (unregistering): Released all slaves
[  231.609117][T14149] chnl_net:caif_netlink_parms(): no params data found
[  231.738196][T14149] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.740772][T14149] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.747947][T14149] bridge_slave_0: entered allmulticast mode
[  231.750682][T14149] bridge_slave_0: entered promiscuous mode
[  231.773453][T14149] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.775875][T14149] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.778321][T14149] bridge_slave_1: entered allmulticast mode
[  231.786904][T14149] bridge_slave_1: entered promiscuous mode
[  231.845793][ T5838] hsr_slave_0: left promiscuous mode
[  231.848910][ T5838] hsr_slave_1: left promiscuous mode
[  231.855578][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.858631][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.871305][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.879579][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.885754][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'.
[  231.909805][ T5838] veth1_macvtap: left promiscuous mode
[  231.916284][ T5838] veth0_macvtap: left promiscuous mode
[  231.918980][ T5838] veth1_vlan: left promiscuous mode
[  231.921458][ T5838] veth0_vlan: left promiscuous mode
[  231.956799][T14194] Cannot find del_set index 1 as target
[  232.307135][ T5838] team0 (unregistering): Port device team_slave_1 removed
[  232.344431][ T5838] team0 (unregistering): Port device team_slave_0 removed
[  232.664362][T14192] macvlan0: left promiscuous mode
[  232.667593][T14192] netlink: 'syz.0.2483': attribute type 1 has an invalid length.
[  232.670915][T14192] netlink: 'syz.0.2483': attribute type 2 has an invalid length.
[  232.677524][T14198] syzkaller1: entered promiscuous mode
[  232.679478][T14198] syzkaller1: entered allmulticast mode
[  232.693876][T14149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.715593][T14149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.824700][T14149] team0: Port device team_slave_0 added
[  232.829563][T14149] team0: Port device team_slave_1 added
[  232.880055][T14149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.884598][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.893638][ T5830] Bluetooth: hci0: command tx timeout
[  232.896213][T14149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.902402][T14149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.904775][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.914985][T14149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.979159][T14149] hsr_slave_0: entered promiscuous mode
[  232.981653][T14149] hsr_slave_1: entered promiscuous mode
[  233.554293][T14149] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  233.561257][T14149] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  233.569488][T14149] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  233.577414][T14149] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  233.675030][T14149] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.696559][T14149] 8021q: adding VLAN 0 to HW filter on device team0
[  233.714762][T14245] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  233.723359][T14245] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  233.736122][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.738631][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.746838][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.749420][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.909905][T14149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.937589][T14149] veth0_vlan: entered promiscuous mode
[  233.962806][T14149] veth1_vlan: entered promiscuous mode
[  233.967497][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  234.019634][T14149] veth0_macvtap: entered promiscuous mode
[  234.029953][T14149] veth1_macvtap: entered promiscuous mode
[  234.043743][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'.
[  234.047810][T14258] erspan0: default FDB implementation only supports local addresses
[  234.079932][T14149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.094467][T14149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.104659][T14149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.107645][T14149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.111043][T14149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.123027][T14149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.123529][T14261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2495'.
[  234.208182][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.211470][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.254586][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.257773][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.432872][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2500'.
[  234.437142][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'.
[  234.632483][T14289] gretap0: Device is already in use.
[  234.686624][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'.
[  234.805944][ T5838] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  234.812200][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'.
[  234.902416][T14297] bond0: option lp_interval: invalid value (18446744073709551604)
[  234.906796][T14297] bond0: option lp_interval: allowed values 1 - 2147483647
[  234.910424][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'.
[  235.103266][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'.
[  235.107827][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'.
[  235.272369][T14319] erspan0: default FDB implementation only supports local addresses
[  235.500012][T14337] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  235.705837][T14345] syzkaller1: entered promiscuous mode
[  235.708378][T14345] syzkaller1: entered allmulticast mode
[  236.046584][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.526992][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.587697][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.644827][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.710947][T14359] 8021q: adding VLAN 0 to HW filter on device bond29
[  237.832171][ T5855] bridge_slave_1: left allmulticast mode
[  237.834654][ T5855] bridge_slave_1: left promiscuous mode
[  237.839478][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.869832][ T5855] bridge_slave_0: left allmulticast mode
[  237.874052][ T5855] bridge_slave_0: left promiscuous mode
[  237.876522][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.926769][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.931071][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.935695][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.940397][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.944879][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.299870][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.311433][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.318134][ T5855] bond0 (unregistering): Released all slaves
[  238.328858][T14376] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.608610][T14372] chnl_net:caif_netlink_parms(): no params data found
[  238.697605][ T5855] hsr_slave_0: left promiscuous mode
[  238.700436][ T5855] hsr_slave_1: left promiscuous mode
[  238.703750][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.706459][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.709349][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.712174][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.726044][ T5855] veth1_macvtap: left promiscuous mode
[  238.728152][ T5855] veth0_macvtap: left promiscuous mode
[  238.730024][ T5855] veth1_vlan: left promiscuous mode
[  238.732632][ T5855] veth0_vlan: left promiscuous mode
[  239.139352][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  239.174187][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  239.497723][T14399] vlan2: entered allmulticast mode
[  239.545034][T14372] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.547414][T14372] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.550218][T14372] bridge_slave_0: entered allmulticast mode
[  239.570755][T14372] bridge_slave_0: entered promiscuous mode
[  239.583088][T14372] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.584092][T14403] __nla_validate_parse: 7 callbacks suppressed
[  239.584106][T14403] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2530'.
[  239.586956][T14372] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.601827][T14372] bridge_slave_1: entered allmulticast mode
[  239.605566][T14372] bridge_slave_1: entered promiscuous mode
[  239.650945][T14403] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.683480][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.696773][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.751468][T14372] team0: Port device team_slave_0 added
[  239.789941][T14372] team0: Port device team_slave_1 added
[  239.803539][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2532'.
[  239.843667][T14412] 8021q: adding VLAN 0 to HW filter on device bond20
[  239.865749][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.881846][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.899927][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.907867][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.910787][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.921755][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.015552][ T5830] Bluetooth: hci0: command tx timeout
[  240.018895][T14372] hsr_slave_0: entered promiscuous mode
[  240.021319][T14372] hsr_slave_1: entered promiscuous mode
[  240.090287][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'.
[  240.326749][T14439] ip_vti0: Master is either lo or non-ether device
[  240.449028][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'.
[  240.453595][T14448] erspan0: default FDB implementation only supports local addresses
[  240.576609][T14372] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  240.587792][T14372] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  240.593859][T14372] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  240.607002][T14372] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  240.715582][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'.
[  240.718655][T14372] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.738198][T14372] 8021q: adding VLAN 0 to HW filter on device team0
[  240.747478][T14455] gtp0: entered promiscuous mode
[  240.758119][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.760523][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.772424][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.774803][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.958664][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.963358][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.964971][T14372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.985009][   T13] ------------[ cut here ]------------
[  240.986944][   T13] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  240.990431][   T13] WARNING: CPU: 1 PID: 13 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  240.993579][   T13] Modules linked in:
[  240.995120][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  241.000088][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.003529][   T13] Workqueue: ipv6_addrconf addrconf_dad_work
[  241.005516][   T13] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  241.007887][   T13] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  241.014243][   T13] RSP: 0018:ffffc900001062b8 EFLAGS: 00010246
[  241.016507][   T13] RAX: 96d1a05ced457a00 RBX: 000000000000000c RCX: ffff88801c6f8000
[  241.019209][   T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  241.022118][   T13] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  241.025082][   T13] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810f29e328
[  241.027914][   T13] R13: 0000000000000000 R14: ffff88810ee00e40 R15: ffff88810ee030d8
[  241.030501][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  241.033381][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.035576][   T13] CR2: 000055984e12b298 CR3: 000000000df38000 CR4: 00000000000006f0
[  241.038090][   T13] Call Trace:
[  241.039164][   T13]  <TASK>
[  241.040117][   T13]  rate_control_send_low+0x194/0x7a0
[  241.041941][   T13]  rate_control_get_rate+0x20b/0x5d0
[  241.043611][   T13]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  241.045432][   T13]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  241.047399][   T13]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  241.049411][   T13]  invoke_tx_handlers_late+0xb6/0x1820
[  241.051250][   T13]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  241.053628][   T13]  ieee80211_tx_dequeue+0x3068/0x4340
[  241.055802][   T13]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  241.057841][   T13]  ? __local_bh_enable_ip+0x12d/0x1c0
[  241.059577][   T13]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  241.061477][   T13]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  241.063672][   T13]  ? __local_bh_enable_ip+0x12d/0x1c0
[  241.065404][   T13]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  241.067294][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  241.069149][   T13]  ieee80211_queue_skb+0x19e8/0x2180
[  241.071039][   T13]  ieee80211_tx+0x297/0x420
[  241.072809][   T13]  ? __pfx_ieee80211_tx+0x10/0x10
[  241.074663][   T13]  ? ieee80211_xmit+0x315/0x400
[  241.076474][   T13]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  241.078590][   T13]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  241.080836][   T13]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  241.083055][   T13]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  241.085073][   T13]  ieee80211_subif_start_xmit+0xe0/0x510
[  241.086886][   T13]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  241.088887][   T13]  ? dev_queue_xmit_nit+0xb68/0xcc0
[  241.090670][   T13]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  241.092490][   T13]  dev_hard_start_xmit+0x2d7/0x830
[  241.094164][   T13]  __dev_queue_xmit+0x1adf/0x3a70
[  241.095925][   T13]  ? register_lock_class+0x51/0x320
[  241.097646][   T13]  ? __dev_queue_xmit+0x27e/0x3a70
[  241.099406][   T13]  ? __pfx___dev_queue_xmit+0x10/0x10
[  241.101399][   T13]  ? read_seqbegin+0x122/0x250
[  241.103442][   T13]  ? neigh_resolve_output+0x438/0x750
[  241.105635][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.107525][   T13]  ? read_seqbegin+0x1ac/0x250
[  241.109499][   T13]  ? __pfx_read_seqbegin+0x10/0x10
[  241.111718][   T13]  ? __local_bh_enable_ip+0x12d/0x1c0
[  241.113669][   T13]  ? eth_header+0x11b/0x200
[  241.115335][   T13]  ? __asan_memcpy+0x40/0x70
[  241.117319][   T13]  ? eth_header+0x11b/0x200
[  241.119209][   T13]  ? __pfx_eth_header+0x10/0x10
[  241.121251][   T13]  ? neigh_resolve_output+0x624/0x750
[  241.123518][   T13]  ip6_finish_output2+0x11fe/0x16a0
[  241.125620][   T13]  ? ip6_finish_output2+0x701/0x16a0
[  241.127808][   T13]  ? __pfx_ip6_finish_output2+0x10/0x10
[  241.130084][   T13]  ? ip6_mtu+0x7d/0x3f0
[  241.131865][   T13]  ? ip6_mtu+0x7d/0x3f0
[  241.133720][   T13]  ip6_finish_output+0x234/0x7d0
[  241.135797][   T13]  NF_HOOK+0x9e/0x380
[  241.137513][   T13]  ? NF_HOOK+0x101/0x380
[  241.139262][   T13]  ? __pfx_NF_HOOK+0x10/0x10
[  241.141171][   T13]  ? __pfx_dst_output+0x10/0x10
[  241.143380][   T13]  ? icmp6_dst_alloc+0x3a5/0x420
[  241.145519][   T13]  ? icmp6_dst_alloc+0x3a5/0x420
[  241.147686][   T13]  mld_sendpack+0x800/0xd80
[  241.149619][   T13]  ? __asan_memcpy+0x40/0x70
[  241.151687][   T13]  ? mld_sendpack+0x1de/0xd80
[  241.153677][   T13]  ? __pfx_mld_sendpack+0x10/0x10
[  241.155817][   T13]  ? mld_send_initial_cr+0x2f7/0x4c0
[  241.158017][   T13]  ipv6_mc_dad_complete+0x88/0x4b0
[  241.160206][   T13]  addrconf_dad_completed+0x6d5/0xd60
[  241.162560][   T13]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  241.165006][   T13]  addrconf_dad_work+0xc36/0x14b0
[  241.166788][   T13]  ? __lock_acquire+0xab9/0xd20
[  241.168423][   T13]  ? __pfx_addrconf_dad_work+0x10/0x10
[  241.170145][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  241.172172][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.174259][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  241.176562][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  241.178834][   T13]  process_scheduled_works+0xae1/0x17b0
[  241.181078][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  241.183566][   T13]  worker_thread+0x8a0/0xda0
[  241.185486][   T13]  kthread+0x711/0x8a0
[  241.187127][   T13]  ? __pfx_worker_thread+0x10/0x10
[  241.189261][   T13]  ? __pfx_kthread+0x10/0x10
[  241.191214][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.193560][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.195716][   T13]  ? __pfx_kthread+0x10/0x10
[  241.197645][   T13]  ret_from_fork+0x3fc/0x770
[  241.199550][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  241.201819][   T13]  ? __switch_to_asm+0x39/0x70
[  241.203822][   T13]  ? __switch_to_asm+0x33/0x70
[  241.205811][   T13]  ? __pfx_kthread+0x10/0x10
[  241.207805][   T13]  ret_from_fork_asm+0x1a/0x30
[  241.209831][   T13]  </TASK>
[  241.211186][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  241.214143][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  241.219157][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.223262][   T13] Workqueue: ipv6_addrconf addrconf_dad_work
[  241.225714][   T13] Call Trace:
[  241.227125][   T13]  <TASK>
[  241.228404][   T13]  dump_stack_lvl+0x99/0x250
[  241.230314][   T13]  ? __asan_memcpy+0x40/0x70
[  241.232210][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.234366][   T13]  ? __pfx__printk+0x10/0x10
[  241.236291][   T13]  panic+0x2db/0x790
[  241.237961][   T13]  ? __pfx_panic+0x10/0x10
[  241.239854][   T13]  ? ret_from_fork_asm+0x1a/0x30
[  241.241918][   T13]  __warn+0x31b/0x4b0
[  241.243597][   T13]  ? __rate_control_send_low+0x5df/0x820
[  241.245985][   T13]  ? __rate_control_send_low+0x5df/0x820
[  241.248521][   T13]  report_bug+0x2be/0x4f0
[  241.250410][   T13]  ? __rate_control_send_low+0x5df/0x820
[  241.252802][   T13]  ? __rate_control_send_low+0x5df/0x820
[  241.255131][   T13]  ? __rate_control_send_low+0x5e1/0x820
[  241.257605][   T13]  handle_bug+0x84/0x160
[  241.259548][   T13]  exc_invalid_op+0x1a/0x50
[  241.261531][   T13]  asm_exc_invalid_op+0x1a/0x20
[  241.263601][   T13] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  241.266146][   T13] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  241.274192][   T13] RSP: 0018:ffffc900001062b8 EFLAGS: 00010246
[  241.276721][   T13] RAX: 96d1a05ced457a00 RBX: 000000000000000c RCX: ffff88801c6f8000
[  241.279976][   T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  241.283310][   T13] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  241.286569][   T13] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810f29e328
[  241.289783][   T13] R13: 0000000000000000 R14: ffff88810ee00e40 R15: ffff88810ee030d8
[  241.293126][   T13]  ? __rate_control_send_low+0x5de/0x820
[  241.295486][   T13]  rate_control_send_low+0x194/0x7a0
[  241.297669][   T13]  rate_control_get_rate+0x20b/0x5d0
[  241.299845][   T13]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  241.302299][   T13]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  241.304896][   T13]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  241.307590][   T13]  invoke_tx_handlers_late+0xb6/0x1820
[  241.309865][   T13]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  241.312360][   T13]  ieee80211_tx_dequeue+0x3068/0x4340
[  241.314725][   T13]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  241.317270][   T13]  ? __local_bh_enable_ip+0x12d/0x1c0
[  241.319597][   T13]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  241.322140][   T13]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  241.324839][   T13]  ? __local_bh_enable_ip+0x12d/0x1c0
[  241.327097][   T13]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  241.329473][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  241.331649][   T13]  ieee80211_queue_skb+0x19e8/0x2180
[  241.333847][   T13]  ieee80211_tx+0x297/0x420
[  241.335721][   T13]  ? __pfx_ieee80211_tx+0x10/0x10
[  241.337865][   T13]  ? ieee80211_xmit+0x315/0x400
[  241.339830][   T13]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  241.341779][   T13]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  241.344004][   T13]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  241.346101][   T13]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  241.348156][   T13]  ieee80211_subif_start_xmit+0xe0/0x510
[  241.349970][   T13]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  241.352134][   T13]  ? dev_queue_xmit_nit+0xb68/0xcc0
[  241.354344][   T13]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  241.356369][   T13]  dev_hard_start_xmit+0x2d7/0x830
[  241.358170][   T13]  __dev_queue_xmit+0x1adf/0x3a70
[  241.359920][   T13]  ? register_lock_class+0x51/0x320
[  241.361900][   T13]  ? __dev_queue_xmit+0x27e/0x3a70
[  241.363978][   T13]  ? __pfx___dev_queue_xmit+0x10/0x10
[  241.366368][   T13]  ? read_seqbegin+0x122/0x250
[  241.368417][   T13]  ? neigh_resolve_output+0x438/0x750
[  241.370676][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.372856][   T13]  ? read_seqbegin+0x1ac/0x250
[  241.374859][   T13]  ? __pfx_read_seqbegin+0x10/0x10
[  241.376892][   T13]  ? __local_bh_enable_ip+0x12d/0x1c0
[  241.379178][   T13]  ? eth_header+0x11b/0x200
[  241.381138][   T13]  ? __asan_memcpy+0x40/0x70
[  241.383152][   T13]  ? eth_header+0x11b/0x200
[  241.385100][   T13]  ? __pfx_eth_header+0x10/0x10
[  241.387153][   T13]  ? neigh_resolve_output+0x624/0x750
[  241.389426][   T13]  ip6_finish_output2+0x11fe/0x16a0
[  241.391634][   T13]  ? ip6_finish_output2+0x701/0x16a0
[  241.393782][   T13]  ? __pfx_ip6_finish_output2+0x10/0x10
[  241.396052][   T13]  ? ip6_mtu+0x7d/0x3f0
[  241.397800][   T13]  ? ip6_mtu+0x7d/0x3f0
[  241.399532][   T13]  ip6_finish_output+0x234/0x7d0
[  241.401605][   T13]  NF_HOOK+0x9e/0x380
[  241.403253][   T13]  ? NF_HOOK+0x101/0x380
[  241.405018][   T13]  ? __pfx_NF_HOOK+0x10/0x10
[  241.406944][   T13]  ? __pfx_dst_output+0x10/0x10
[  241.408900][   T13]  ? icmp6_dst_alloc+0x3a5/0x420
[  241.410986][   T13]  ? icmp6_dst_alloc+0x3a5/0x420
[  241.413201][   T13]  mld_sendpack+0x800/0xd80
[  241.415170][   T13]  ? __asan_memcpy+0x40/0x70
[  241.417111][   T13]  ? mld_sendpack+0x1de/0xd80
[  241.419068][   T13]  ? __pfx_mld_sendpack+0x10/0x10
[  241.421245][   T13]  ? mld_send_initial_cr+0x2f7/0x4c0
[  241.423468][   T13]  ipv6_mc_dad_complete+0x88/0x4b0
[  241.425604][   T13]  addrconf_dad_completed+0x6d5/0xd60
[  241.427854][   T13]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  241.430384][   T13]  addrconf_dad_work+0xc36/0x14b0
[  241.432438][   T13]  ? __lock_acquire+0xab9/0xd20
[  241.434529][   T13]  ? __pfx_addrconf_dad_work+0x10/0x10
[  241.436808][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  241.439049][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.441007][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  241.443097][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  241.445368][   T13]  process_scheduled_works+0xae1/0x17b0
[  241.447565][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  241.450005][   T13]  worker_thread+0x8a0/0xda0
[  241.451949][   T13]  kthread+0x711/0x8a0
[  241.453701][   T13]  ? __pfx_worker_thread+0x10/0x10
[  241.455645][   T13]  ? __pfx_kthread+0x10/0x10
[  241.457209][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.459022][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.460943][   T13]  ? __pfx_kthread+0x10/0x10
[  241.462721][   T13]  ret_from_fork+0x3fc/0x770
[  241.464275][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  241.465990][   T13]  ? __switch_to_asm+0x39/0x70
[  241.467565][   T13]  ? __switch_to_asm+0x33/0x70
[  241.469138][   T13]  ? __pfx_kthread+0x10/0x10
[  241.470766][   T13]  ret_from_fork_asm+0x1a/0x30
[  241.472771][   T13]  </TASK>
[  241.474934][   T13] Kernel Offset: disabled
[  241.476762][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:30:11  Registers:
info registers vcpu 0

CPU#0
RAX=efa4db6418aab600 RBX=ffffffff81976c78 RCX=efa4db6418aab600 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000025c0 CR3=000000003b822000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f92d9385478 00007f92d9385450 XMM03=00007f92d9385488 00007f92d9385480
XMM04=00007f92d9eed100 00007f92d9385440 XMM05=00007f92d9385458 00007f92d93854a0
XMM06=00007f92d9385498 00007f92d9385490 XMM07=00007f92d9385488 00007f92d9385480
XMM08=4054e629d82c0dbb b00852e3a300dbfb XMM09=0000000000000000 00007f92d9211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000105a50
R8 =ffff888106ed8237 R9 =1ffff11020ddb046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98cd R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055984e12b298 CR3=000000011e830000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=6565656565656565 6565656565656565
XMM02=6d6f643d666e6f63 0182883d666e6f63 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
