last executing test programs:

21.595229318s ago: executing program 0 (id=1792):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$inet6(0xa, 0x400000000001, 0x100)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x200, 0x2a0, 0x98, 0x130, 0x130, 0x350, 0x350, 0x130, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x48}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0xffffffff, 0x0, 'lo\x00', 'lo\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xbfffff8e, 0x70, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x80, 0x3}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x84, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@ip={@empty, @multicast2, 0xff, 0xffffff00, 'vlan1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x33, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x2002, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298)

21.593232336s ago: executing program 0 (id=1793):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000240)="5300fa6df184", 0x6, 0x90, &(0x7f00000002c0)={0x11, 0xf6, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="43bdb4c7", 0x4)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x1, @multicast1}, 0xf}}, 0x26)
sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000300))
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002bbd7000fddbdf2501000000060002000000000041001a004e230000bae56e510000000006000e000200010006001b004e24000006000300b54f529a06000006001a004e"], 0x4c}, 0x1, 0x0, 0x0, 0x4014000}, 0x4001)

21.401156295s ago: executing program 0 (id=1796):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
socket$l2tp6(0xa, 0x2, 0x73)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31703142f6965b24}, 0xc, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000)
write$cgroup_int(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x4fa3)

18.924480214s ago: executing program 2 (id=1822):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
r4 = socket(0x18, 0x4, 0x0)
recvfrom$inet(r4, 0x0, 0x0, 0x141, 0x0, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r7=>0x0})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r6, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f14143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000"], 0x10)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r10, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f0000000080)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @random="9d9e25a7bf1e", @random="412d007f2c16", @multicast, @empty, @empty, @broadcast, @link_local]})
r12 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r13=>0xffffffffffffffff})
sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x16}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r13}]}]}, 0x44}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10)

18.69505982s ago: executing program 2 (id=1823):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xea7}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="8018b67fb5", 0x5}, {&(0x7f0000000180)="0309c6d14d1b66b8393a598aa4ee5b8fde790e92326afc81ad813aca6ac19e0892160e9400bb8e98a5e387052586fcde74b98da4565deeaddc19e2a83b290faf8a23a816650fe84fa5a634f7b9753d36216eb2cb6bfc0234823d387bf9ea5a9a7219d7661b302a3e954c022427491c2bc4a2ed34b8a2d843bba9f7d5a7bea874ee9356dbf64362711ce478a2f156e5a37747b785c6f303a348fe0703e6dcc29c1e13cd572bb101771d3b2644f0045150069b6df1c2c791ec10ed58d3f2239de1c3b5f487bf0a", 0xc6}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="ac7b0d2ff9b3e134fb338a6caf55a1685c7b01ae00758601921983f9015ceefeb4821a66092ecd4a", 0x28}, {&(0x7f00000012c0)="66664b3537a8c48a57373a327ef1f57f51a706783b34411c471639b3818549c0ffc8c015fcc3b832e7d81c8033e50c5cb37e71eefba52258e34706fba534b383ee7439bf83231eb69d7193c909283a9db4535b00a1a25720c6075856d83911ab29b42f83152dd4eeaf2b38b96d4a9649d302611b5d99983ac758a759efc63e078fc08ae6dc7382bb62f8664d36a2b6740d1fcdd878c14112bad9b5265d74f685dda5f5c7968261a9985b05b47d9c32eb10e644e996035edd20aab3543cff5b8d6f041e59de32fe3a48ddc32483920e83cd9c7edd24c8d18d", 0xd8}, {&(0x7f00000013c0)="6277ae346de2bd98d1ec3774441c0d0eee604281c607c3dad5e78fa30998c6357d3d856f6dfd9a0c7c13ef265e6bd072", 0x30}, {&(0x7f0000001400)="3c9b6e5716bc91d83bb450491244e7fbf79ab2c3c21423e47473b6a138823cab6b1598771df759855db8072c70d546a4f53e9e41117744d51da73cc3efadfe1b02a96f6ac405afc5aa3b415012f71e9b614038f1f0eaeba1d9c985cfd41cc8f78a67a803cb8fd533a11a957b2a9752e6ae55daa22a9a7927ad6999261a0f8cb206930efa06a1a2aa6f9ef4908cd3d4562cf3684f87b628bb7e05912fcaff2698aa14e1c4f39726ec48e073bb4b6c22ac0b465a6772fc77bcb4553fb3779e09230dfb115896ad727249567beb830d", 0xce}, {&(0x7f0000001500)="fffae6324796ae6126b9d4533e0ef22f2e49c3d00a8c26c194dffaaa39fecbc97e9edf55d1a3ee9a28edeb8faff16cd3b2b0ee9e", 0x34}], 0x9)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)

18.594890856s ago: executing program 2 (id=1824):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000003c0)="25d7196c03045396b9eff7846a812bfe75fa3496bb8e75411f", 0x19, 0x8014, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

17.813261832s ago: executing program 0 (id=1796):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
socket$l2tp6(0xa, 0x2, 0x73)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31703142f6965b24}, 0xc, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000)
write$cgroup_int(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x4fa3)

14.651465213s ago: executing program 2 (id=1824):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000003c0)="25d7196c03045396b9eff7846a812bfe75fa3496bb8e75411f", 0x19, 0x8014, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

10.148023675s ago: executing program 0 (id=1796):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
socket$l2tp6(0xa, 0x2, 0x73)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31703142f6965b24}, 0xc, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000)
write$cgroup_int(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x4fa3)

8.485457575s ago: executing program 2 (id=1824):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000003c0)="25d7196c03045396b9eff7846a812bfe75fa3496bb8e75411f", 0x19, 0x8014, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

1.591601299s ago: executing program 1 (id=1895):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000), 0xf) (async)
bind$bt_hci(r3, &(0x7f0000000000), 0xf)
write(r3, &(0x7f0000000340)='\a\x00\x00\x00', 0x4) (async)
write(r3, &(0x7f0000000340)='\a\x00\x00\x00', 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) (async)
bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12) (async)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) (async)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x4, 0x4, 0x9, 0x20, 0x1, 0x4, '\x00', r1, r6}, 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x4, 0x4, 0x9, 0x20, 0x1, 0x4, '\x00', r1, r6}, 0x50)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r8}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x18)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000009f000000000000000100008018150000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r7}, 0xc) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r7}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xb0}}, 0x0)

1.555584213s ago: executing program 0 (id=1796):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
socket$l2tp6(0xa, 0x2, 0x73)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31703142f6965b24}, 0xc, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000)
write$cgroup_int(r2, 0x0, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x4fa3)

969.037266ms ago: executing program 1 (id=1896):
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x8c4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @TCA_RATE={0x6, 0x5, {0x17}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1d}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xff}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x83c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_INDEV={0x14, 0x8, 'virt_wifi0\x00'}, @TCA_U32_ACT={0x80c, 0x7, [@m_nat={0x1f4, 0x5, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x10, 0x2, 0x10001, 0x1}, @rand_addr=0x64010102, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x78, 0x8, 0x8, 0x80000000}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf466, 0x4bf, 0x0, 0x2, 0x9}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x5, 0x3, 0x7e}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1ff, 0x6, 0x59cb94cc, 0x1}, @rand_addr=0x64010102, @empty, 0xffffff00}}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xd0, 0x15, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0x70194}]}, {0x94, 0x6, "500ffe18e83086c92d2e0b868bfdb9a840bc150aa1b13dd1d94453560ab8749a7228fb3eef2ce6274df3a0e157228a80a46a06ff55492055834f664acb44faec8a6d0d4cb110dc1f33b16db0a66bc25a730c1913e5a14d9c4099c2446e60fce42dc6e29c5d0493fc872bb6f730044d66d16cc410fa05239514dafd9838fa40092b592b143f6f387cbf8918502d1c5a5c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x120, 0x1c, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0xef, 0x6, "b8badfe05d1520af7e18ebfb215b09928dabf44202f2d00da44fd1b29286787a86d0ace022c16c2106a67b70a26a2bc120a522d9fafeba85427c9d1e1b27f319e47d9875dbb4169d3905a374b00b252976c6f649a9b36138c6d4ecafd323fc514b7f33d872b4e82cf4f9f4f282aa17b08b40946010998c555a2bab2149c5be72ff19f5c95c6bc8d182a03516c98f82fd5b249e2928702cfcf71ab46e7ba3ca1ab4241284ed7078feb9e067e455445615be0bc4c938e06b2265a7cad795bd344dcaf56bb54fe5e412fd4562f7c01c8b487536c5ae5de2fea36a5022117170b3b8e078ff44e50245ad15c9bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x88, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf}]}, {0x44, 0x6, "ee7294b6bc3fbf2f9c7c08b34df748641cf23ca1dc4d819188a11196c6b7b7d25c5773d924f497b6f6b0bbda1f620869b46b9daf881eeef5b428d28989ee458d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x95486fe2648a77b2}}}}, @m_vlan={0xf8, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xc9, 0x6, "865c3fb5274d0ec2dd9d5e2507d308c6ad67e0966375cac98d2a8b78e9f6312260022f395462780100f6c13231f7d0a867874da3e943dec243834c3fabeae455dfd1af9d0d3fe2e04207d9aa9cf572f84a7cbaeb1055e19bd58d029163c82e6dca01167e4f20a04507165688565180c8147c3d68536624c5816844b0a45499c050ef39d9bef45bf0f5411f49cad85c29a48945ae108d5020837796717beef883fbca4cdb6bb104c8a5d6438bdc5168916538b00243fd4f52c18bcb9a7c83c36c9f584462c6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x16c, 0x1f, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x95, 0x6, 0x0, 0xc, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x6, 0x9, 0x100}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x5, 0x2, 0x3, 0x1f}, @broadcast, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x3ff, 0x8, 0x9, 0x80000000}, @private=0xa010102, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x1000000c, 0x9, 0x8ca}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x80, 0x20000000, 0x8, 0x1ff}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x771d, 0xfc1, 0x20000000, 0x246, 0x4}, @multicast2, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x2, 0x6, 0x3ff}, @private=0xa010101, @broadcast, 0xffffff00}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x138, 0x20, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x5, 0x69b, 0x10000}, 0xa8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x401, 0x5, 0x6, 0x3}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x10000000, 0x89, 0xca63}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x6, 0x0, 0x9}, 0x10}}]}, {0x98, 0x6, "ef6aa665dd5ddc395c96c9cbf627a0c58b1e99ace0800014820f81c2e2ce2556104f2161c2def9fe714994e8e1833e90f019803f2e45cf42f54cb38e531a21dd081242ee235cb44805765897e63f2c9f61f7556e1f0e3c5d26c85f75292e139c8c18c4b4126f3d3659ac6d65acbd6063cd7bd841a3780a9bd6d725116e106faa382607e3901651cf380d0bb7fc064d5f497cf169"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0xffffeee2}]}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000300)={0x1d, r4, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}, 0xfe}, 0x18)
bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r4, 0x2, {0x1, 0xf0, 0x3}}, 0x18)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@rand_addr=0x64010101, @in=@private=0xa010101, 0x4e22, 0x9, 0x4e24, 0x7, 0x2, 0x0, 0x20, 0x67, r4, r6}, {0x1, 0x7, 0x10001, 0x8, 0x8, 0x6d, 0xfffffffffffffff3, 0x80}, {0x7, 0xffffffffffff0001, 0x5, 0xffffffffffffffff}, 0x7fff, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0xda}, 0xa, @in6=@remote, 0x3504, 0x2, 0x3, 0x4, 0x80, 0x2, 0x5}}, 0xe8)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

844.428853ms ago: executing program 1 (id=1897):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}]}, 0x13c}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, &(0x7f0000000180)='v', 0x0}, 0x20)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r2)

795.446021ms ago: executing program 2 (id=1824):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000003c0)="25d7196c03045396b9eff7846a812bfe75fa3496bb8e75411f", 0x19, 0x8014, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

221.319874ms ago: executing program 1 (id=1898):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4048054, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000df2963a205f720b8826d643db0d10de3c58eb868be6b423bea6f24997120c2f8bcaa075544a74cdcbec772a807dece482881576ab62da1c522c4aef98a57e667fb472c77fb4e6b5625305b3be0eee2034a62df129c0a628566f0ce66dd9b46977ecc77185ab2698502ec1dacfeeb8261e2466764f17331dd3665ba786649c2b694b45ccd36e28e54051279de6c10dd74d31c00f5e9c3d7a09ad58f981a942013f3b606f518a8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0", 0x24, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
accept4(r2, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

86.07394ms ago: executing program 1 (id=1899):
socket$inet6(0xa, 0x80803, 0x87)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000500000aa87"], 0x0)

0s ago: executing program 1 (id=1900):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(r2, 0x7fffffff, 0x15, &(0x7f00000003c0)="ba8661b82431f35a69fd1504dc23c5d8", 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r4, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c01000100000000000000000000000000000000000000000000000000000000000000000000000000002000000000000d5593f714f864687d53318d91fabe5787d9eef93b4681dc3207afe509f3821d27e12530dec720ef8992f27e6286f49519392b141ec1ceb5c27ff79a09d37fae90061d5706282e28a5788870f20310bd747873522adabb2c0ddd0052a24f081c5bc1003b1a24b4ad2ff9bb82b087409085479843cd93e111b86e406f5691b2240995d8c3e15b17d1e80382af78961b6fee00"/209, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}}, 0x0)

kernel console output (not intermixed with test programs):

0:50:50:50:50:50
[   57.699688][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.705359][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.716280][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.738184][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.741247][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.755759][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.759053][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.862065][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.864646][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.903749][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.905636][ T5906] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   57.906748][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.188479][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.197292][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.218701][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'.
[   58.305331][ T5936] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   58.387030][ T5943] netlink: 'syz.2.15': attribute type 27 has an invalid length.
[   58.425356][ T5946] ipvlan2: entered promiscuous mode
[   58.428433][ T5946] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   58.436871][ T5946] ipvlan3: entered promiscuous mode
[   58.439238][ T5946] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   58.473310][ T5953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.478795][ T5946] ipvlan4: entered promiscuous mode
[   58.480365][ T5953] Zero length message leads to an empty skb
[   58.489902][ T5946] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[   58.792507][ T5979] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.27'.
[   58.808907][ T5981] Bluetooth: MGMT ver 1.23
[   58.880831][ T5983] ip6gretap0: entered promiscuous mode
[   58.888405][ T5983] ip6gretap0: left promiscuous mode
[   59.006649][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'.
[   59.016274][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.34'.
[   59.021079][ T5995] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   59.352425][ T5221] Bluetooth: hci1: command tx timeout
[   59.354807][   T55] Bluetooth: hci0: command tx timeout
[   59.357095][   T55] Bluetooth: hci2: command tx timeout
[   59.405924][ T6021] syzkaller0: entered allmulticast mode
[   59.521129][ T6026] veth1_to_bond: entered allmulticast mode
[   59.554646][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   59.573966][ T6026] bond0: (slave bond_slave_1): Releasing backup interface
[   59.594121][ T6026] veth1_to_bond (unregistering): left allmulticast mode
[   60.359656][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.363191][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.447407][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.454782][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.507536][ T6044] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.510483][ T6044] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.513656][ T6044] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.516523][ T6044] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.919323][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'.
[   60.923082][ T6082] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   60.926494][ T6082] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   61.078794][ T6091] netlink: 'syz.0.69': attribute type 28 has an invalid length.
[   61.084954][ T6091] netlink: 'syz.0.69': attribute type 30 has an invalid length.
[   61.434398][ T5221] Bluetooth: hci1: command tx timeout
[   61.436690][ T5221] Bluetooth: hci0: command tx timeout
[   61.439057][   T55] Bluetooth: hci2: command tx timeout
[   61.479630][ T6099] netlink: 5 bytes leftover after parsing attributes in process `syz.2.73'.
[   61.721116][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'.
[   61.777725][ T6132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.82'.
[   61.822944][ T6135] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   61.826459][ T6135] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   62.184024][ T6160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.236231][ T6157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.276794][ T6160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.297679][ T6162] bridge_slave_0: left allmulticast mode
[   62.300397][ T6162] bridge_slave_0: left promiscuous mode
[   62.304346][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.314654][ T6162] bridge_slave_1: left allmulticast mode
[   62.317119][ T6162] bridge_slave_1: left promiscuous mode
[   62.320191][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.330971][ T6162] bond0: (slave bond_slave_0): Releasing backup interface
[   62.338795][ T6162] bond0: (slave bond_slave_1): Releasing backup interface
[   62.367076][ T6162] team0: Failed to send options change via netlink (err -105)
[   62.380871][ T6162] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   62.385914][ T6162] team0: Port device team_slave_0 removed
[   62.396066][ T6162] team0: Failed to send options change via netlink (err -105)
[   62.400453][ T6162] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   62.407216][ T6162] team0: Port device team_slave_1 removed
[   62.410475][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.415208][ T6162] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.420823][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.424161][ T6162] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.453005][ T6160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.525168][ T6160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.567075][ T6168] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.571732][ T6168] bond0: (slave bond1): Enslaving as an active interface with an up link
[   62.614487][ T6160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.634959][ T6160] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.659117][ T6160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.666643][ T6173] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   62.679340][ T6160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.687792][ T6173] netlink: 'syz.2.96': attribute type 11 has an invalid length.
[   62.906099][ T6181] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   62.912726][ T6181] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   63.158190][ T6203] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   63.172062][ T6203] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   63.201323][ T6205] __nla_validate_parse: 9 callbacks suppressed
[   63.201339][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   63.207862][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[   63.212708][ T6205] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   63.215969][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[   63.241017][ T6209] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   63.344075][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'.
[   63.512256][   T55] Bluetooth: hci2: command tx timeout
[   63.514673][   T55] Bluetooth: hci0: command tx timeout
[   63.517053][ T5844] Bluetooth: hci1: command tx timeout
[   63.707668][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[   63.713623][ T6227] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   63.717373][ T6227] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   64.147362][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'.
[   64.158726][ T6249] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   64.168308][ T6249] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   64.481504][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   64.487659][ T6272] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   64.492535][ T6272] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   64.548823][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'.
[   64.928767][ T6304] ieee802154 phy0 wpan0: encryption failed: -22
[   65.008887][ T6312] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   65.011612][ T6312] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   65.037803][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'.
[   65.190362][ T6326] xt_l2tp: invalid flags combination: 4
[   65.592023][   T55] Bluetooth: hci0: command tx timeout
[   66.230693][ T6378] netlink: 'syz.2.173': attribute type 4 has an invalid length.
[   66.405389][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   66.412665][ T6400] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   66.415800][ T6400] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   66.480706][ T6402] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   66.485433][ T6402] team0: Device macvtap1 is already an upper device of the team interface
[   66.515628][ T6407] tipc: Started in network mode
[   66.517798][ T6407] tipc: Node identity ee8b06719117, cluster identity 4711
[   66.521066][ T6407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.530434][ T6407] syzkaller0: entered promiscuous mode
[   66.537384][ T6407] syzkaller0: entered allmulticast mode
[   66.555825][ T6402] tipc: Resetting bearer <eth:syzkaller0>
[   66.561816][ T6401] tipc: Resetting bearer <eth:syzkaller0>
[   66.579603][ T6401] tipc: Disabling bearer <eth:syzkaller0>
[   66.666927][ T6414] bridge_slave_0: entered promiscuous mode
[   66.755384][ T6421] syz_tun: entered allmulticast mode
[   66.760622][ T6420] syz_tun: left allmulticast mode
[   66.860543][ T6427] trusted_key: syz.0.192 sent an empty control message without MSG_MORE.
[   66.951558][ T6434] warning: `syz.0.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.997933][ T6436] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   67.409094][ T6464] bond2: entered promiscuous mode
[   67.411109][ T6464] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.464021][ T6464] bond2 (unregistering): Released all slaves
[   68.070263][ T6476] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   68.080346][ T6476] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   68.220171][ T6483] __nla_validate_parse: 6 callbacks suppressed
[   68.220186][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'.
[   68.262061][ T6483] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.213'.
[   68.295880][ T6487] wg1: entered promiscuous mode
[   68.298313][ T6487] wg1: entered allmulticast mode
[   68.457964][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.219'.
[   68.907150][ T6524] xt_TPROXY: Can be used only with -p tcp or -p udp
[   70.278204][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'.
[   70.450880][ T6580] netlink: 'syz.0.250': attribute type 27 has an invalid length.
[   70.491229][ T6582] netlink: 68 bytes leftover after parsing attributes in process `syz.2.251'.
[   70.506496][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'.
[   70.509966][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'.
[   70.928923][ T6615] bridge0: entered promiscuous mode
[   70.931191][ T6615] vlan1: entered promiscuous mode
[   70.956379][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.959292][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.005605][ T6621] netlink: 'syz.2.266': attribute type 27 has an invalid length.
[   71.026471][ T6623] xt_hashlimit: max too large, truncated to 1048576
[   71.029528][ T6623] xt_hashlimit: overflow, rate too high: 0
[   71.367894][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'.
[   71.508868][ T6668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.285'.
[   71.546892][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[   71.578233][ T6670] bridge_slave_0: left allmulticast mode
[   71.580349][ T6670] bridge_slave_0: left promiscuous mode
[   71.583329][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.589212][ T6670] bridge_slave_1: left allmulticast mode
[   71.591639][ T6670] bridge_slave_1: left promiscuous mode
[   71.597237][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.608426][ T6670] bond0: (slave bond_slave_0): Releasing backup interface
[   71.614884][ T6670] bond0: (slave bond_slave_1): Releasing backup interface
[   71.620663][ T6670] team0: Port device team_slave_0 removed
[   71.626293][ T6670] team0: Port device team_slave_1 removed
[   71.630390][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.636709][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.640127][ T6670] bond0: (slave bond1): Releasing backup interface
[   71.722336][ T6681] netlink: 'syz.0.289': attribute type 1 has an invalid length.
[   71.725420][ T6681] netlink: 'syz.0.289': attribute type 10 has an invalid length.
[   71.808160][ T6688] ip6gre1: entered allmulticast mode
[   72.018037][ T6698] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   72.188870][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.542764][ T6724] block nbd0: server does not support multiple connections per device.
[   72.550461][ T6724] block nbd0: shutting down sockets
[   72.632112][ T6735] netlink: 'syz.0.310': attribute type 21 has an invalid length.
[   72.635590][ T6735] netlink: 'syz.0.310': attribute type 5 has an invalid length.
[   72.638919][ T6735] netlink: 'syz.0.310': attribute type 6 has an invalid length.
[   72.842233][ T6745] netlink: 'syz.1.316': attribute type 27 has an invalid length.
[   72.850250][ T6747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.854498][ T6747] syzkaller0: entered promiscuous mode
[   72.856793][ T6747] syzkaller0: entered allmulticast mode
[   72.934870][ T6746] tipc: Resetting bearer <eth:syzkaller0>
[   72.948181][ T6746] tipc: Disabling bearer <eth:syzkaller0>
[   73.084052][ T6761] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   74.077315][   T47] cfg80211: failed to load regulatory.db
[   74.199512][ T6788] __nla_validate_parse: 12 callbacks suppressed
[   74.199525][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'.
[   74.207741][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.211106][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.257727][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.271270][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.385587][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[   74.442816][ T6801] Set syz0 is full, maxelem 0 reached
[   74.578881][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.343'.
[   74.605808][ T6813] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   74.787686][ T6831] sctp: [Deprecated]: syz.1.351 (pid 6831) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.787686][ T6831] Use struct sctp_sack_info instead
[   74.788823][ T6829] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[   74.797647][ T6829] netlink: 228 bytes leftover after parsing attributes in process `syz.2.350'.
[   74.803739][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'.
[   74.851118][ T6836] netlink: 104 bytes leftover after parsing attributes in process `syz.2.353'.
[   74.867196][ T6836] netlink: 'syz.2.353': attribute type 1 has an invalid length.
[   74.870279][ T6836] netlink: 244 bytes leftover after parsing attributes in process `syz.2.353'.
[   75.237093][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'.
[   75.240474][ T6855] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   75.244919][ T6855] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   75.270540][ T6857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.534190][ T6872] batadv_slave_0: entered promiscuous mode
[   75.536458][ T6872] batadv_slave_0: entered allmulticast mode
[   75.910763][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[   75.932988][ T6909] netlink: 72 bytes leftover after parsing attributes in process `syz.1.376'.
[   76.558047][ T6922] netlink: 'syz.2.382': attribute type 27 has an invalid length.
[   76.579727][ T6926] netlink: 'syz.1.383': attribute type 22 has an invalid length.
[   76.589039][ T6926] Driver unsupported XDP return value 0 on prog  (id 49) dev N/A, expect packet loss!
[   76.614118][ T6928] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   76.790964][ T6933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.810162][ T6933] syzkaller0: entered promiscuous mode
[   76.812985][ T6933] syzkaller0: entered allmulticast mode
[   76.819482][ T6933] tipc: Resetting bearer <eth:syzkaller0>
[   76.826935][ T6931] tipc: Resetting bearer <eth:syzkaller0>
[   76.840470][ T6931] tipc: Disabling bearer <eth:syzkaller0>
[   76.891758][ T6941] netlink: 'syz.2.389': attribute type 10 has an invalid length.
[   76.925592][ T6943] xt_TPROXY: Can be used only with -p tcp or -p udp
[   76.993419][ T6943] netlink: 'syz.1.387': attribute type 10 has an invalid length.
[   76.997096][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.001178][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.024395][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.027492][ T6943] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.031123][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.033531][ T6943] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.081591][ T6943] team0: Port device bridge0 added
[   77.111420][ T6949] netlink: 'syz.2.391': attribute type 64 has an invalid length.
[   77.189478][ T6943] syz.1.387 (6943) used greatest stack depth: 19544 bytes left
[   77.243649][ T6961] bridge_slave_1: left allmulticast mode
[   77.245645][ T6961] bridge_slave_1: left promiscuous mode
[   77.247718][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.253724][ T6961] bridge_slave_0: left allmulticast mode
[   77.255858][ T6961] bridge_slave_0: left promiscuous mode
[   77.258510][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.276831][ T6961] team0: Port device bridge0 removed
[   77.716879][ T7002] pim6reg: entered allmulticast mode
[   77.721175][ T6998] pim6reg: left allmulticast mode
[   77.772180][ T7002] netlink: 'syz.0.403': attribute type 1 has an invalid length.
[   77.776092][ T7002] netlink: 'syz.0.403': attribute type 2 has an invalid length.
[   79.054081][ T7076] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   79.330649][ T7099] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   79.682358][ T7123] __nla_validate_parse: 15 callbacks suppressed
[   79.682369][ T7123] netlink: 34 bytes leftover after parsing attributes in process `syz.2.439'.
[   79.723756][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'.
[   79.890954][ T7153] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   79.988427][ T7160] bond0: option ad_select: unable to set because the bond device is up
[   80.044745][ T7172] netlink: 52 bytes leftover after parsing attributes in process `syz.0.457'.
[   80.227244][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'.
[   80.270741][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'.
[   80.456626][ T7203] netlink: 277 bytes leftover after parsing attributes in process `syz.2.469'.
[   80.465977][ T7203] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   80.568535][ T7207] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   80.752534][ T7211] tipc: Started in network mode
[   80.754931][ T7211] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   80.758374][ T7211] tipc: Enabled bearer <eth:team0>, priority 0
[   80.932066][ T7221] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   81.270222][ T7246] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   81.321110][ T7250] netlink: 'syz.1.488': attribute type 10 has an invalid length.
[   81.361526][ T7252] macsec0: entered promiscuous mode
[   81.366384][ T7252] macsec1: entered allmulticast mode
[   81.368873][ T7252] macsec0: entered allmulticast mode
[   81.371256][ T7252] veth1_macvtap: entered allmulticast mode
[   81.872532][   T10] tipc: Node number set to 11578026
[   81.922615][ T7301] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[   81.932632][ T7294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'.
[   82.111451][ T7313] batadv_slave_1: entered promiscuous mode
[   82.124950][ T7313] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.175668][ T7312] batadv_slave_1: left promiscuous mode
[   82.316046][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'.
[   82.325156][ T7321] batadv_slave_0: entered promiscuous mode
[   82.433974][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'.
[   82.437900][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'.
[   82.512146][ T7326] x_tables: duplicate underflow at hook 2
[   82.587534][ T7332] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   82.591539][ T7332] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   82.744909][ T7340] netlink: 'syz.1.518': attribute type 29 has an invalid length.
[   82.749426][ T7340] netlink: 'syz.1.518': attribute type 29 has an invalid length.
[   82.829529][   T10] IPVS: starting estimator thread 0...
[   82.924515][ T7348] IPVS: using max 48 ests per chain, 115200 per kthread
[   83.138516][ T7379] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   83.247045][ T7390] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   83.447137][ T7412] tipc: Enabled bearer <udp:syz2>, priority 10
[   83.543312][   T10] IPVS: starting estimator thread 0...
[   83.555520][ T7418] tap0: tun_chr_ioctl cmd 1074025677
[   83.565667][ T7418] tap0: linktype set to 823
[   83.643806][ T7428] IPVS: using max 50 ests per chain, 120000 per kthread
[   83.737686][ T7439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.741649][ T7439] syzkaller0: entered promiscuous mode
[   83.744991][ T7439] syzkaller0: entered allmulticast mode
[   83.755933][ T7439] tipc: Resetting bearer <eth:syzkaller0>
[   83.772707][ T7443] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   83.775838][ T7443] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   83.785515][ T7438] tipc: Resetting bearer <eth:syzkaller0>
[   83.802787][ T7438] tipc: Disabling bearer <eth:syzkaller0>
[   83.987357][ T7457] netlink: 'syz.2.559': attribute type 1 has an invalid length.
[   84.000288][ T7461] netlink: 'syz.1.561': attribute type 3 has an invalid length.
[   84.025502][ T7457] bond2: (slave gretap1): making interface the new active one
[   84.029613][ T7457] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   84.043792][ T7461] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[   84.188387][ T7472] netlink: 'syz.0.566': attribute type 2 has an invalid length.
[   84.199959][ T7472] : entered promiscuous mode
[   84.219088][ T7477] xt_l2tp: missing protocol rule (udp|l2tpip)
[   84.474087][   T55] Bluetooth: hci2: command tx timeout
[   84.572202][ T7516] netlink: 'syz.0.581': attribute type 1 has an invalid length.
[   84.757067][ T7534] netlink: 'syz.0.588': attribute type 5 has an invalid length.
[   84.795193][ T7537] __nla_validate_parse: 16 callbacks suppressed
[   84.795208][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'.
[   84.801848][ T7537] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[   84.807863][ T7537] netlink: 'syz.0.591': attribute type 3 has an invalid length.
[   84.813462][ T7539] netlink: 'syz.2.592': attribute type 2 has an invalid length.
[   84.819766][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[   84.864096][   T47] tipc: Node number set to 2140931697
[   84.878929][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'.
[   84.899281][ T7541] netlink: 112 bytes leftover after parsing attributes in process `syz.0.593'.
[   85.427644][ T7581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.607'.
[   85.431435][ T7581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.607'.
[   85.436268][ T7581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.607'.
[   85.503016][ T7584] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.841152][ T7591] bridge_slave_0: entered promiscuous mode
[   85.941647][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[   85.948876][ T7598] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   85.952887][ T7598] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   86.588028][ T7624] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.598522][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'.
[   87.000400][ T7635] SET target dimension over the limit!
[   87.179874][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'.
[   87.190386][ T7653] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.194136][ T7653] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.197005][ T7653] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.200453][ T7653] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.313090][ T5280] udevd[5280]: worker [7638] terminated by signal 33 (Unknown signal 33)
[   87.323831][ T5280] udevd[5280]: worker [7638] failed while handling '/devices/virtual/net/lapb7'
[   87.435400][ T7678] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   87.445995][ T7678] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   87.566082][ T7694] bridge1: entered promiscuous mode
[   87.568353][ T7694] bridge1: entered allmulticast mode
[   87.577609][ T7694] team0: Port device bridge1 added
[   87.590519][ T7694] syz.2.647 (7694) used greatest stack depth: 19512 bytes left
[   87.914116][ T7727] IPVS: Unknown mcast interface: dvmrp1
[   88.028824][ T7734] xt_CT: You must specify a L4 protocol and not use inversions on it
[   88.279649][ T7743] pim6reg0: tun_chr_ioctl cmd 1074025694
[   88.630249][ T7749] validate_nla: 5 callbacks suppressed
[   88.630261][ T7749] netlink: 'syz.0.665': attribute type 1 has an invalid length.
[   88.671779][ T7749] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.690789][ T7747] ipvlan5: entered allmulticast mode
[   88.693530][ T7747] bond3: entered allmulticast mode
[   88.764543][ T7747] bond3: (slave gretap1): making interface the new active one
[   88.768044][ T7747] gretap1: entered allmulticast mode
[   88.772517][ T7747] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   88.945407][ T7763] netlink: 'syz.1.669': attribute type 3 has an invalid length.
[   89.530369][ T7812] xt_hashlimit: size too large, truncated to 1048576
[   89.633077][ T7816] block nbd0: Unsupported socket: shutdown callout must be supported.
[   89.902821][ T7822] netlink: 'syz.0.688': attribute type 13 has an invalid length.
[   89.910205][ T7822] netlink: 'syz.0.688': attribute type 17 has an invalid length.
[   90.004639][ T7822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.024346][ T7822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.087008][ T7822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.157892][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.507084][ T7863] netlink: 'syz.1.703': attribute type 1 has an invalid length.
[   90.533863][ T7863] bond1: (slave gretap2): making interface the new active one
[   90.536731][ T7863] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   90.848231][ T7902] __nla_validate_parse: 9 callbacks suppressed
[   90.848243][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.713'.
[   90.862936][ T7902] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   90.866761][ T7902] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   90.870495][ T7902] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   90.875182][ T7902] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   91.031632][ T7909] netlink: 'syz.0.715': attribute type 27 has an invalid length.
[   91.100525][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[   91.111646][ T7912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   91.144401][ T7916] tipc: Started in network mode
[   91.150299][ T7916] tipc: Node identity 080211000001, cluster identity 4711
[   91.161435][ T7916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.168021][ T7917] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   91.225930][ T7922] netlink: 'syz.1.721': attribute type 15 has an invalid length.
[   91.287473][ T7927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.723'.
[   91.291777][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'.
[   91.300287][ T7930] sock: sock_set_timeout: `syz.1.724' (pid 7930) tries to set negative timeout
[   91.337477][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.375691][ T7934] netlink: 'syz.1.726': attribute type 27 has an invalid length.
[   91.523918][ T7944] netlink: 'syz.1.730': attribute type 15 has an invalid length.
[   91.610538][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'.
[   91.614739][ T7956] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   91.618690][ T7956] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   91.643622][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'.
[   91.672678][ T7952] bond0: (slave bond_slave_0): Releasing backup interface
[   91.690754][ T7952] team0: Port device team_slave_0 removed
[   91.713639][ T7952] team0: Port device team_slave_1 removed
[   91.743323][ T7952] bond1: (slave gretap2): Releasing active interface
[   91.840139][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[   92.016463][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.273586][  T973] tipc: Node number set to 134418688
[   92.307621][ T7995] IPv6: sit1: Disabled Multicast RS
[   92.313090][ T7995] sit1: entered allmulticast mode
[   92.433510][ T7998] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.606181][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'.
[   92.610871][ T8005] netlink: 'syz.1.749': attribute type 7 has an invalid length.
[   92.622169][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[   92.865854][ T8033] netlink: 224 bytes leftover after parsing attributes in process `syz.1.754'.
[   92.883677][ T8032] netlink: zone id is out of range
[   92.886168][ T8032] netlink: get zone limit has 8 unknown bytes
[   93.136422][ T8048] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   93.140043][ T8048] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   93.383000][ T8053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   93.397252][ T8053] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   94.164367][ T8088] batadv1: entered allmulticast mode
[   94.166931][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv1
[   94.298363][ T8098] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   94.304584][ T8098] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   94.337627][ T8096] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   94.345638][ T8096] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   94.583229][ T8127] xfrm1: entered promiscuous mode
[   94.584954][ T8127] xfrm1: entered allmulticast mode
[   94.619074][ T8129] vlan0: entered promiscuous mode
[   94.621628][ T8129] bridge0: entered promiscuous mode
[   95.534806][ T8145] x_tables: duplicate underflow at hook 1
[   95.613926][ T8151] validate_nla: 2 callbacks suppressed
[   95.613943][ T8151] netlink: 'syz.1.803': attribute type 27 has an invalid length.
[   95.856082][ T8165] __nla_validate_parse: 11 callbacks suppressed
[   95.856097][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'.
[   95.974207][ T8182] netlink: 256 bytes leftover after parsing attributes in process `syz.1.816'.
[   95.982601][ T8183] netlink: 256 bytes leftover after parsing attributes in process `syz.1.816'.
[   96.076367][ T8196] x_tables: duplicate underflow at hook 2
[   96.114108][ T8202] netlink: 'syz.2.823': attribute type 3 has an invalid length.
[   96.163633][ T8197] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.821'.
[   96.267011][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'.
[   96.316330][ T8229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.328086][ T8231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.832'.
[   96.333990][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'.
[   96.465783][ T8247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'.
[   96.516363][ T8248] x_tables: duplicate underflow at hook 1
[   96.555253][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[   97.358998][ T8307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   97.419146][ T8310] netlink: 'syz.0.855': attribute type 27 has an invalid length.
[   97.509146][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'.
[   97.858361][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'.
[   97.911001][ T8327] netlink: 'syz.0.861': attribute type 4 has an invalid length.
[   98.037295][ T8331] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   98.046595][ T8331] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   98.270093][ T8352] netlink: 'syz.1.871': attribute type 27 has an invalid length.
[   98.364306][ T8359] bond0: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   98.378571][ T8359] bond0: (slave ipvlan6): The slave device specified does not support setting the MAC address
[   98.390736][ T8359] bond0: (slave ipvlan6): Error -95 calling set_mac_address
[   98.563273][ T8374] netlink: 'syz.1.878': attribute type 27 has an invalid length.
[   98.878827][ T8401] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   98.884911][ T8401] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   98.944928][   T12] tipc: Subscription rejected, illegal request
[   99.350187][ T8428] netlink: 'syz.1.896': attribute type 11 has an invalid length.
[   99.469815][ T8435] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[   99.473946][ T8435] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[   99.697880][ T8466] IPVS: set_ctl: invalid protocol: 0 172.20.20.47:21
[   99.888828][ T8482] sctp: [Deprecated]: syz.1.907 (pid 8482) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.888828][ T8482] Use struct sctp_sack_info instead
[  100.087588][ T8487] netlink: 'syz.2.910': attribute type 27 has an invalid length.
[  100.200430][ T8496] xt_hashlimit: size too large, truncated to 1048576
[  100.225679][ T8500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.164420][ T8549] __nla_validate_parse: 18 callbacks suppressed
[  101.164429][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'.
[  101.175386][ T8552] ieee802154 phy1 wpan1: encryption failed: -22
[  101.255012][ T8561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'.
[  101.258653][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[  101.288813][ T8565] netlink: 92 bytes leftover after parsing attributes in process `syz.1.936'.
[  101.302481][ T8563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'.
[  101.471069][ T8574] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  101.475781][ T8574] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  101.518980][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.939'.
[  101.560130][ T8580] netlink: 72 bytes leftover after parsing attributes in process `syz.0.940'.
[  101.635620][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'.
[  101.639489][ T8589] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  101.646099][ T8589] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  101.840294][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'.
[  101.843715][ T8607] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  101.846834][ T8607] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  102.487139][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'.
[  102.491022][ T8630] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  102.499491][ T8630] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  102.579080][ T8636] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  102.587552][ T8634] netlink: 'syz.0.961': attribute type 11 has an invalid length.
[  102.656321][ T8639] netlink: 'syz.0.963': attribute type 27 has an invalid length.
[  102.734582][ T8647] xt_ipcomp: unknown flags F7
[  102.848230][ T8657] lo speed is unknown, defaulting to 1000
[  102.850781][ T8657] lo speed is unknown, defaulting to 1000
[  102.859725][ T8657] lo speed is unknown, defaulting to 1000
[  102.874733][ T8657] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.888145][ T8657] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.954516][ T8657] lo speed is unknown, defaulting to 1000
[  102.958524][ T8657] lo speed is unknown, defaulting to 1000
[  102.971167][ T8657] lo speed is unknown, defaulting to 1000
[  103.148666][ T8688] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  103.400017][ T8712] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  103.472592][ T8722] xt_SECMARK: invalid mode: 0
[  103.481613][ T8725] xt_SECMARK: invalid mode: 0
[  103.565667][ T8730] netlink: 'syz.1.993': attribute type 27 has an invalid length.
[  103.738962][ T8753] netlink: 'syz.0.1001': attribute type 8 has an invalid length.
[  103.795847][ T8762] netlink: 'syz.1.1004': attribute type 16 has an invalid length.
[  103.798609][ T8762] netlink: 'syz.1.1004': attribute type 17 has an invalid length.
[  103.950191][ T8762] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.954573][ T8762] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.958312][ T8762] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.964489][ T8762] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.006919][   T47] lo speed is unknown, defaulting to 1000
[  104.010440][ T8763] netlink: 'syz.2.1005': attribute type 27 has an invalid length.
[  104.014661][   T47] syz1: Port: 1 Link DOWN
[  104.997497][ T8789] netlink: 'syz.1.1012': attribute type 1 has an invalid length.
[  105.022834][ T8789] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  105.026721][ T8789] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  105.031143][ T8789] bond3: (slave vti0): making interface the new active one
[  105.034764][ T8789] bond3: (slave vti0): Enslaving as an active interface with an up link
[  105.322810][ T8812] nbd0: detected capacity change from 0 to 63
[  105.392241][ T8811] nbd1: detected capacity change from 0 to 63
[  105.406111][ T8813] block nbd1: Receive control failed (result -104)
[  105.409251][   T56] block nbd0: Receive control failed (result -32)
[  105.961640][ T8847] netlink: 'syz.2.1031': attribute type 27 has an invalid length.
[  105.986251][ T8849] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  106.003051][ T8849] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  106.075432][ T8859] openvswitch: netlink: Key type 30 is not supported
[  106.117587][ T8863] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  106.182331][ T8871] __nla_validate_parse: 16 callbacks suppressed
[  106.182344][ T8871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1040'.
[  106.221610][ T8876] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1041'.
[  106.229682][ T8876] xt_CT: You must specify a L4 protocol and not use inversions on it
[  106.230941][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  106.236941][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'.
[  106.978097][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'.
[  107.195972][ T8903] netlink: 'syz.0.1050': attribute type 1 has an invalid length.
[  107.208823][ T8903] bond4: entered promiscuous mode
[  107.210772][ T8903] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.244409][ T8903] bond4: (slave bridge5): making interface the new active one
[  107.247037][ T8903] bridge5: entered promiscuous mode
[  107.249181][ T8903] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  107.335865][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'.
[  107.338921][ T8913] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  107.343819][ T8913] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  107.674146][   T61] block nbd0: Connection timed out, retrying (0/1 alive)
[  107.677132][   T61] block nbd0: Connection timed out, retrying (0/1 alive)
[  107.679460][   T61] block nbd0: Connection timed out, retrying (0/1 alive)
[  107.682760][   T61] block nbd0: Connection timed out, retrying (0/1 alive)
[  107.685517][   T61] block nbd0: Dead connection, failed to find a fallback
[  107.687995][   T61] block nbd0: shutting down sockets
[  107.689860][   T61] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.693900][   T61] Buffer I/O error on dev nbd0, logical block 3, async page read
[  107.696383][   T61] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.699565][   T61] Buffer I/O error on dev nbd0, logical block 2, async page read
[  107.702371][   T61] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.708413][   T61] Buffer I/O error on dev nbd0, logical block 1, async page read
[  107.711182][   T61] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.714511][   T61] Buffer I/O error on dev nbd0, logical block 0, async page read
[  107.717872][ T7444] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.720808][ T7444] Buffer I/O error on dev nbd0, logical block 0, async page read
[  107.725912][ T7444] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.729030][ T7444] Buffer I/O error on dev nbd0, logical block 1, async page read
[  107.733573][ T7444] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.739127][ T7444] Buffer I/O error on dev nbd0, logical block 2, async page read
[  107.745857][ T8955] bridge0: entered allmulticast mode
[  107.747498][ T7444] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.751659][ T7444] Buffer I/O error on dev nbd0, logical block 3, async page read
[  107.752736][ T8957] pim6reg: entered allmulticast mode
[  107.755431][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.758109][ T8955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.758789][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.761124][ T8957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.763289][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.769847][   T61] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.773828][   T61] block nbd1: Dead connection, failed to find a fallback
[  107.776787][   T61] block nbd1: shutting down sockets
[  107.778903][   T61] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.782613][   T61] Buffer I/O error on dev nbd1, logical block 3, async page read
[  107.785735][   T61] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.789785][   T61] Buffer I/O error on dev nbd1, logical block 2, async page read
[  107.798354][ T7828] ldm_validate_partition_table(): Disk read failed.
[  107.801363][ T7828] Dev nbd1: unable to read RDB block 0
[  107.806057][ T8954] tipc: Disabling bearer <eth:syzkaller0>
[  107.806128][ T7828]  nbd1: unable to read partition table
[  107.815673][ T7444] ldm_validate_partition_table(): Disk read failed.
[  107.816019][ T7828] ldm_validate_partition_table(): Disk read failed.
[  107.819966][ T7444] Dev nbd0: unable to read RDB block 0
[  107.821291][ T7828] Dev nbd1: unable to read RDB block 0
[  107.826244][ T7828]  nbd1: unable to read partition table
[  107.842971][ T7444]  nbd0: unable to read partition table
[  107.855719][ T7444] ldm_validate_partition_table(): Disk read failed.
[  107.858808][ T7444] Dev nbd0: unable to read RDB block 0
[  107.861643][ T7444]  nbd0: unable to read partition table
[  107.943174][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1067'.
[  107.946150][ T8967] validate_nla: 1 callbacks suppressed
[  107.946157][ T8967] netlink: 'syz.2.1067': attribute type 7 has an invalid length.
[  107.950403][ T8967] netlink: 'syz.2.1067': attribute type 8 has an invalid length.
[  107.953107][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[  108.026722][ T8969] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  108.395317][ T8994] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  109.065741][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'.
[  109.065765][ T8999] ieee802154 phy1 wpan1: encryption failed: -22
[  109.321783][ T9022] netlink: 'syz.1.1085': attribute type 27 has an invalid length.
[  109.338845][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'.
[  109.360090][ T9019] can: request_module (can-proto-3) failed.
[  109.391704][ T9028] lo speed is unknown, defaulting to 1000
[  109.591768][ T9046] netlink: 'syz.2.1093': attribute type 27 has an invalid length.
[  109.653709][ T9044] lo speed is unknown, defaulting to 1000
[  109.946051][ T9067] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.959129][ T9067] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.972411][ T9067] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.975640][ T9067] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.978411][ T9067] geneve2: entered promiscuous mode
[  110.164433][ T9074] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  110.172022][ T9074] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  110.455833][ T9115] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  110.460419][ T9115] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  110.640108][ T9132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.643880][ T9132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.646616][ T9132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.649368][ T9132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.655623][ T9132] geneve2: entered promiscuous mode
[  110.661616][ T9136] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  110.669749][ T9136] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  110.680868][ T9132] netlink: 'syz.1.1123': attribute type 1 has an invalid length.
[  110.764141][ T9146] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  110.849137][ T9150] netlink: 'syz.1.1133': attribute type 27 has an invalid length.
[  110.893003][ T9156] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  110.896548][ T9156] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  111.030330][ T9171] x_tables: duplicate underflow at hook 1
[  111.198312][ T9185] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.202225][ T9185] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.205650][ T9185] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.208729][ T9185] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.213033][ T9185] __nla_validate_parse: 19 callbacks suppressed
[  111.213044][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'.
[  111.274423][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  111.324054][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'.
[  111.435386][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'.
[  111.460460][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'.
[  111.464791][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'.
[  111.479113][ T9210] syzkaller1: entered promiscuous mode
[  111.481692][ T9210] syzkaller1: entered allmulticast mode
[  111.528580][ T9214] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  111.545068][ T9214] 8021q: adding VLAN 0 to HW filter on device bond4
[  111.925476][ T9239] syzkaller1: entered promiscuous mode
[  111.935336][ T9239] syzkaller1: entered allmulticast mode
[  112.109069][ T9252] netlink: 'syz.0.1167': attribute type 27 has an invalid length.
[  112.137442][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'.
[  112.283385][ T9267] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1172'.
[  112.315741][ T9271] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1173'.
[  112.320733][ T9271] hsr_slave_0: left promiscuous mode
[  112.332549][ T9271] hsr_slave_1: left promiscuous mode
[  112.336379][ T9263] ieee802154 phy1 wpan1: encryption failed: -22
[  112.431751][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1175'.
[  112.507185][ T9280] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1176'.
[  112.643458][ T9298] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  112.646783][ T9298] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  113.143162][ T9317] lo speed is unknown, defaulting to 1000
[  113.148900][ T9317] lo speed is unknown, defaulting to 1000
[  113.157034][ T9317] lo speed is unknown, defaulting to 1000
[  113.255708][ T9318] sctp: [Deprecated]: syz.0.1187 (pid 9318) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.255708][ T9318] Use struct sctp_sack_info instead
[  113.308815][ T9317] infiniband syz0: set active
[  113.311149][ T5899] lo speed is unknown, defaulting to 1000
[  113.313469][ T9317] infiniband syz0: added lo
[  113.348866][ T9317] RDS/IB: syz0: added
[  113.352939][ T9317] smc: adding ib device syz0 with port count 1
[  113.355617][ T9317] smc:    ib device syz0 port 1 has pnetid 
[  113.359723][ T5899] lo speed is unknown, defaulting to 1000
[  113.363879][ T9317] lo speed is unknown, defaulting to 1000
[  113.493083][ T9322] netlink: 'syz.1.1188': attribute type 1 has an invalid length.
[  113.500490][ T9317] lo speed is unknown, defaulting to 1000
[  113.584016][ T9323] macsec1: entered promiscuous mode
[  113.586363][ T9323] macsec1: entered allmulticast mode
[  113.588725][ T9323] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  113.619752][ T9317] lo speed is unknown, defaulting to 1000
[  113.641216][ T9325] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  113.647293][ T9325] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  113.749886][ T9330] SET target dimension over the limit!
[  113.918913][ T9339] lo speed is unknown, defaulting to 1000
[  113.926286][ T9339] lo speed is unknown, defaulting to 1000
[  114.512663][ T9364] vlan2: entered promiscuous mode
[  114.514461][ T9364] vlan2: entered allmulticast mode
[  114.516165][ T9364] hsr_slave_1: entered allmulticast mode
[  114.620659][ T9367] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  114.624094][ T9367] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  115.127250][ T9392] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  115.131046][ T9392] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  115.211544][ T9404] veth0: entered promiscuous mode
[  115.218585][ T9404] veth0: left promiscuous mode
[  115.301827][ T9411] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.455788][ T9417] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  115.459419][ T9417] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  115.748314][ T9423] xt_CT: No such helper "pptp"
[  116.093112][ T9434] lo speed is unknown, defaulting to 1000
[  116.096836][ T9434] lo speed is unknown, defaulting to 1000
[  116.194921][ T9441] netlink: 'syz.1.1229': attribute type 27 has an invalid length.
[  116.267997][ T9448] __nla_validate_parse: 18 callbacks suppressed
[  116.268011][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'.
[  116.274799][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  116.278469][ T9448] netlink: 'syz.0.1230': attribute type 12 has an invalid length.
[  116.281213][ T9448] netlink: 'syz.0.1230': attribute type 11 has an invalid length.
[  116.549163][ T9459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1234'.
[  116.788643][ T9468] bond2: (slave gretap1): Releasing active interface
[  116.792028][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'.
[  116.810282][ T9468] team0: Port device bridge1 removed
[  116.814020][ T9475] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  116.817315][ T9475] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  117.065224][ T9495] netlink: 'syz.2.1244': attribute type 4 has an invalid length.
[  117.068670][ T9495] netlink: 'syz.2.1244': attribute type 4 has an invalid length.
[  117.104692][ T9493] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1243'.
[  117.111627][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1243'.
[  117.328213][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  117.332881][ T9509] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  117.336652][ T9509] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  117.462781][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'.
[  117.514635][ T9521] netlink: 'syz.2.1252': attribute type 1 has an invalid length.
[  117.517940][ T9521] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1252'.
[  117.583027][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'.
[  117.586800][ T9527] ip6t_srh: unknown srh match flags  5294
[  117.603584][ T9527] netlink: 'syz.2.1254': attribute type 7 has an invalid length.
[  117.607475][ T9527] netlink: 'syz.2.1254': attribute type 8 has an invalid length.
[  117.907013][ T9549] gretap3: entered promiscuous mode
[  117.909703][ T9549] gretap3: entered allmulticast mode
[  118.131509][ T9564] No such timeout policy "syz0"
[  118.306376][ T9583] netlink: 'syz.0.1271': attribute type 27 has an invalid length.
[  118.420861][  T973] lo speed is unknown, defaulting to 1000
[  118.973755][ T9614] xt_hashlimit: size too large, truncated to 1048576
[  119.119060][ T9624] netlink: 'syz.1.1286': attribute type 30 has an invalid length.
[  119.265160][ T9628] bond5: entered promiscuous mode
[  119.268314][ T9628] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.633400][ T9647] IPVS: set_ctl: invalid protocol: 34 127.0.0.1:20000
[  119.736379][ T9653] netlink: 'syz.0.1295': attribute type 27 has an invalid length.
[  119.817585][ T9655] netlink: 'syz.2.1296': attribute type 1 has an invalid length.
[  120.254960][ T9680] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  120.260180][ T9680] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  120.512666][ T9701] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  120.522036][ T9701] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  120.584369][ T9703] netlink: 'syz.2.1318': attribute type 2 has an invalid length.
[  120.646601][ T9707] netlink: 'syz.2.1318': attribute type 7 has an invalid length.
[  120.800539][ T9721] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  120.923328][ T9733] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  120.927556][ T9733] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  120.987839][ T9736] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  120.994660][ T9736] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.145821][ T9752] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  121.162251][ T9752] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  121.197222][ T9754] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.219960][ T9757] xt_TCPMSS: Only works on TCP SYN packets
[  121.311025][ T9765] __nla_validate_parse: 23 callbacks suppressed
[  121.311039][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'.
[  121.321849][ T9765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1343'.
[  121.327786][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'.
[  121.331715][ T9765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1343'.
[  121.335334][ T9765] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1343'.
[  121.427652][ T9773] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.476818][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'.
[  121.480709][ T9775] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  121.492865][ T9775] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  121.506306][ T9779] netlink: 'syz.0.1349': attribute type 27 has an invalid length.
[  121.587460][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'.
[  121.603297][ T9782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1350'.
[  121.660923][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'.
[  121.690859][ T9791] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.838866][ T9803] netlink: 'syz.2.1359': attribute type 27 has an invalid length.
[  121.860570][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e3bf000: rx timeout, send abort
[  121.923698][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'.
[  122.021386][ T9806] bridge0 (unregistering): left allmulticast mode
[  122.292755][ T9822] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  122.332588][ T9825] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  122.341045][ T9825] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  122.361694][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e3be400: rx timeout, send abort
[  122.365694][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e3bf000: abort rx timeout. Force session deactivation
[  122.374585][ T9827] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  122.406008][ T9829] pim6reg0: tun_chr_ioctl cmd 2148553947
[  122.458363][ T9833] SET target dimension over the limit!
[  122.469371][ T9833] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001
[  122.560956][ T9841] netlink: 'syz.2.1374': attribute type 27 has an invalid length.
[  122.865337][ T9871] vlan1: entered promiscuous mode
[  122.865354][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e3be400: abort rx timeout. Force session deactivation
[  122.867162][ T9871] vlan1: entered allmulticast mode
[  122.874327][ T9871] bridge0: entered allmulticast mode
[  123.063210][ T9890] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  123.066284][ T9890] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  123.093333][ T9892] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  123.138883][ T9896] x_tables: duplicate underflow at hook 1
[  123.140799][ T9896] x_tables: duplicate underflow at hook 1
[  123.150621][ T9896] x_tables: duplicate underflow at hook 1
[  123.154582][ T9896] x_tables: duplicate underflow at hook 1
[  123.157022][ T9896] x_tables: duplicate underflow at hook 1
[  123.159059][ T9896] x_tables: duplicate underflow at hook 1
[  123.161274][ T9896] x_tables: duplicate underflow at hook 1
[  123.164659][ T9896] x_tables: duplicate underflow at hook 1
[  123.166673][ T9896] x_tables: duplicate underflow at hook 1
[  123.168896][ T9896] x_tables: duplicate underflow at hook 1
[  123.306867][ T9917] netlink: 'syz.0.1401': attribute type 9 has an invalid length.
[  123.350621][ T9917] 8021q: adding VLAN 0 to HW filter on device bond6
[  123.354601][ T9921] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  123.358476][ T9921] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  123.842581][ T9959] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  123.846553][ T9959] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  123.885297][ T9961] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  124.179794][ T9978] ipvlan0: entered promiscuous mode
[  124.184814][ T9978] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  124.187788][ T9978] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  124.325565][ T9985] validate_nla: 3 callbacks suppressed
[  124.325577][ T9985] netlink: 'syz.1.1426': attribute type 3 has an invalid length.
[  124.371604][ T9990] delete_channel: no stack
[  124.372934][   T33] audit: type=1800 audit(1752322605.185:2): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1424" name="memory.events" dev="tmpfs" ino=2811 res=0 errno=0
[  124.458043][ T9997] SET target dimension over the limit!
[  124.566004][T10007] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  124.595758][T10012] netlink: 'syz.2.1436': attribute type 1 has an invalid length.
[  124.610012][T10014] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  124.614057][T10014] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  124.826597][T10034] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  124.885315][T10041] netlink: 'syz.1.1447': attribute type 27 has an invalid length.
[  124.984316][T10048] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  124.995330][T10048] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  125.188259][T10066] netlink: 'syz.2.1453': attribute type 1 has an invalid length.
[  125.492620][T10085] netlink: 'syz.2.1458': attribute type 27 has an invalid length.
[  125.604762][T10091] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  125.608799][T10091] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  125.792582][T10099] lo speed is unknown, defaulting to 1000
[  125.796919][T10099] lo speed is unknown, defaulting to 1000
[  128.770011][T10118] __nla_validate_parse: 27 callbacks suppressed
[  128.770027][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1469'.
[  128.858670][T10123] netlink: 'syz.1.1471': attribute type 10 has an invalid length.
[  128.861456][T10123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1471'.
[  128.869222][T10123] team0: Port device geneve0 added
[  128.920939][T10127] netlink: 'syz.1.1473': attribute type 29 has an invalid length.
[  128.929400][T10127] netlink: 'syz.1.1473': attribute type 29 has an invalid length.
[  128.939392][T10127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1473'.
[  129.040186][T10136] xt_socket: unknown flags 0xfc
[  129.056399][T10136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.111201][T10139] netlink: 'syz.2.1478': attribute type 27 has an invalid length.
[  129.221852][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'.
[  129.306994][T10152] tipc: Resetting bearer <eth:team0>
[  129.477614][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'.
[  129.480619][T10162] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  129.484212][T10162] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  129.489003][T10164] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  129.834707][ T8461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.838654][ T8461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.922800][T10186] netlink: 'syz.2.1496': attribute type 1 has an invalid length.
[  129.961815][T10186] bond5: entered promiscuous mode
[  129.975014][T10186] 8021q: adding VLAN 0 to HW filter on device bond5
[  129.984874][T10193] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1497'.
[  130.031351][T10186] bond5: (slave bridge2): making interface the new active one
[  130.037525][T10186] bridge2: entered promiscuous mode
[  130.040854][T10186] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  130.143389][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'.
[  130.148214][T10201] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  130.152761][T10201] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  130.180700][T10198] lo speed is unknown, defaulting to 1000
[  130.193492][T10198] lo speed is unknown, defaulting to 1000
[  130.222223][T10207] tipc: Can't bind to reserved service type 2
[  130.239470][T10207] netlink: 'syz.1.1500': attribute type 4 has an invalid length.
[  130.253115][T10210] netlink: 'syz.2.1506': attribute type 27 has an invalid length.
[  130.354085][T10212] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  130.827945][T10233] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  131.375067][   T47] IPVS: starting estimator thread 0...
[  131.462064][T10265] IPVS: using max 54 ests per chain, 129600 per kthread
[  131.781560][T10275] IPVS: length: 32 != 24
[  132.006149][T10283] syzkaller0: create flow: hash 3486580423 index 1
[  132.006359][ T5863] syzkaller0: tun_net_xmit 76
[  132.012401][ T5863] syzkaller0: tun_net_xmit 48
[  132.017758][T10283] syzkaller0: tun_chr_ioctl cmd 1074025673
[  132.032524][  T973] syzkaller0: tun_net_xmit 76
[  132.065806][T10283] syzkaller0: delete flow: hash 3486580423 index 1
[  132.310171][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'.
[  132.396181][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.347017][T10300] netlink: 'syz.1.1537': attribute type 27 has an invalid length.
[  133.557818][T10320] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  133.649689][T10327] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1544'.
[  133.655285][T10327] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  133.659237][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1544'.
[  133.753943][T10333] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  134.409316][T10337] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  134.458753][T10339] netlink: 'syz.0.1549': attribute type 27 has an invalid length.
[  134.518167][T10341] __nla_validate_parse: 2 callbacks suppressed
[  134.518182][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1550'.
[  134.609252][T10346] sctp: [Deprecated]: syz.1.1552 (pid 10346) Use of int in max_burst socket option.
[  134.609252][T10346] Use struct sctp_assoc_value instead
[  134.616570][T10347] sctp: [Deprecated]: syz.1.1552 (pid 10347) Use of int in max_burst socket option.
[  134.616570][T10347] Use struct sctp_assoc_value instead
[  134.806864][T10365] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  134.820240][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1559'.
[  135.218395][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'.
[  135.419136][T10388] netlink: 'syz.1.1568': attribute type 27 has an invalid length.
[  135.459998][T10390] netlink: 'syz.1.1569': attribute type 1 has an invalid length.
[  135.465401][T10390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.471795][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'.
[  135.691314][T10406] netlink: 'syz.1.1576': attribute type 27 has an invalid length.
[  135.731745][T10408] netdevsim netdevsim2 : renamed from netdevsim0
[  135.821464][T10417] netlink: 'syz.1.1582': attribute type 4 has an invalid length.
[  135.840957][T10417] lo speed is unknown, defaulting to 1000
[  135.845381][T10417] lo speed is unknown, defaulting to 1000
[  135.886277][T10420] xt_hashlimit: size too large, truncated to 1048576
[  135.908221][T10421] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  135.939646][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'.
[  136.185517][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1584'.
[  136.505051][T10436] netlink: 'syz.0.1587': attribute type 27 has an invalid length.
[  136.620119][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'.
[  136.696576][T10449] bridge: RTM_NEWNEIGH with invalid ether address
[  136.731132][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'.
[  136.915119][T10462] netlink: 'syz.2.1597': attribute type 11 has an invalid length.
[  136.918761][T10462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1597'.
[  137.261688][T10483] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  137.518612][T10494] ip6gre1: entered promiscuous mode
[  137.687125][T10499] syzkaller1: entered promiscuous mode
[  137.702702][T10499] syzkaller1: entered allmulticast mode
[  137.725144][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'.
[  137.832628][T10504] delete_channel: no stack
[  137.931633][T10512] netlink: 'syz.0.1609': attribute type 10 has an invalid length.
[  137.955412][T10512] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  138.396107][T10542] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  138.965773][T10552] netlink: 'syz.1.1623': attribute type 27 has an invalid length.
[  139.055099][T10557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.494307][T10582] batadv_slave_1: entered allmulticast mode
[  139.498952][T10582] batadv_slave_1: left allmulticast mode
[  139.700031][T10587] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  140.341361][T10597] xt_ecn: cannot match TCP bits for non-tcp packets
[  140.444298][T10604] sctp: [Deprecated]: syz.2.1640 (pid 10604) Use of int in maxseg socket option.
[  140.444298][T10604] Use struct sctp_assoc_value instead
[  140.657361][T10628] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  140.691695][T10630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.846473][T10638] __nla_validate_parse: 3 callbacks suppressed
[  140.846510][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1654'.
[  140.904547][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'.
[  140.916919][T10638] vxcan5: entered allmulticast mode
[  141.090566][T10644] lo speed is unknown, defaulting to 1000
[  141.094555][T10644] lo speed is unknown, defaulting to 1000
[  141.304370][T10655] netlink: 'syz.0.1661': attribute type 27 has an invalid length.
[  141.366079][T10643] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1656'.
[  141.686419][T10675] xt_check_table_hooks: 23 callbacks suppressed
[  141.686430][T10675] x_tables: duplicate underflow at hook 3
[  141.912777][T10686] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  142.299526][T10701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1678'.
[  142.524826][T10709] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  143.037475][T10739] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  143.058474][T10742] lo speed is unknown, defaulting to 1000
[  143.061656][T10742] lo speed is unknown, defaulting to 1000
[  143.453663][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'.
[  143.519177][T10751] netlink: 'syz.0.1697': attribute type 27 has an invalid length.
[  143.660728][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'.
[  143.666865][T10763] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  143.676861][T10763] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  143.717454][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'.
[  143.721446][T10767] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  143.726266][T10767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.917788][T10781] netlink: 'syz.0.1709': attribute type 1 has an invalid length.
[  143.921263][T10782] netlink: 'syz.0.1709': attribute type 1 has an invalid length.
[  143.924690][T10781] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1709'.
[  143.928570][T10782] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1709'.
[  143.961459][T10784] lo speed is unknown, defaulting to 1000
[  143.964734][T10784] lo speed is unknown, defaulting to 1000
[  144.194050][T10798] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  144.214544][T10800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1713'.
[  144.590438][T10820] bridge0: entered promiscuous mode
[  145.154606][T10869] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  145.296738][T10887] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  145.377197][T10897] netlink: 'syz.1.1753': attribute type 4 has an invalid length.
[  145.391753][T10902] netlink: 'syz.0.1754': attribute type 27 has an invalid length.
[  145.566715][T10910] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  145.571070][T10910] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  146.126963][T10973] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  146.259124][T10982] netlink: 'syz.2.1782': attribute type 10 has an invalid length.
[  146.323254][T10988] __nla_validate_parse: 8 callbacks suppressed
[  146.323263][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'.
[  147.376319][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.379698][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.383101][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.386645][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.389370][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.413274][T11025] lo speed is unknown, defaulting to 1000
[  147.416240][T11025] lo speed is unknown, defaulting to 1000
[  147.640221][T11025] chnl_net:caif_netlink_parms(): no params data found
[  147.727286][T11025] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.729869][T11025] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.732515][T11025] bridge_slave_0: entered allmulticast mode
[  147.736198][T11025] bridge_slave_0: entered promiscuous mode
[  147.741455][T11035] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  147.748396][T11025] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.751704][T11025] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.755739][T11025] bridge_slave_1: entered allmulticast mode
[  147.760208][T11025] bridge_slave_1: entered promiscuous mode
[  147.806368][T11025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.820019][T11025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.840329][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1802'.
[  147.857899][T11025] team0: Port device team_slave_0 added
[  147.863682][T11025] team0: Port device team_slave_1 added
[  147.888907][T11025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.892603][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.902290][T11025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.907813][T11025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.910747][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.926377][T11025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.974895][T11025] hsr_slave_0: entered promiscuous mode
[  147.977338][T11025] hsr_slave_1: entered promiscuous mode
[  147.979633][T11025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.984185][T11025] Cannot create hsr debugfs directory
[  148.022036][T11049] netlink: 'syz.2.1805': attribute type 24 has an invalid length.
[  148.100924][T11025] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.106048][T11025] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.109274][T11025] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  148.138196][T11054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1806'.
[  148.151790][T11056] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  148.166450][T11025] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.170324][T11025] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.174225][T11025] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  148.216997][T11025] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.221533][T11025] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.224972][T11025] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  148.267067][T11025] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.270064][T11025] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.273937][T11025] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  148.403433][T11025] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.410072][T11025] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.416804][T11025] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  148.421721][T11025] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  148.481383][T11025] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.498387][T11025] 8021q: adding VLAN 0 to HW filter on device team0
[  148.507983][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.510234][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.524322][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.527793][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.671077][T11025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.700959][T11025] veth0_vlan: entered promiscuous mode
[  148.708816][T11025] veth1_vlan: entered promiscuous mode
[  148.733827][T11025] veth0_macvtap: entered promiscuous mode
[  148.738392][T11025] veth1_macvtap: entered promiscuous mode
[  148.750283][T11025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.760260][T11025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.768390][T11025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.771453][T11025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.774532][T11025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.777250][T11025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.826460][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.829011][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.848660][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.851375][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.947848][T11069] vti0: entered promiscuous mode
[  148.952823][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'.
[  148.959957][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'.
[  148.967726][T11069] vlan0: entered allmulticast mode
[  148.969446][T11069] bridge_slave_0: entered allmulticast mode
[  148.983905][T11073] netlink: 'syz.1.1810': attribute type 27 has an invalid length.
[  149.120524][T11077] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  149.220016][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'.
[  149.226292][T11097] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  149.230030][T11097] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  149.330136][T11103] smc: net device bond0 applied user defined pnetid SYZ2
[  149.336884][T11105] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  150.121720][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.127387][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.131283][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.137032][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.140651][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.186801][T11119] lo speed is unknown, defaulting to 1000
[  150.190064][T11119] lo speed is unknown, defaulting to 1000
[  150.407292][T11119] chnl_net:caif_netlink_parms(): no params data found
[  150.486469][T11119] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.489618][T11119] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.493815][T11119] bridge_slave_0: entered allmulticast mode
[  150.498133][T11119] bridge_slave_0: entered promiscuous mode
[  150.503647][T11119] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.505979][T11119] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.508270][T11119] bridge_slave_1: entered allmulticast mode
[  150.511054][T11119] bridge_slave_1: entered promiscuous mode
[  150.536459][T11119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.544844][T11119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.580695][T11119] team0: Port device team_slave_0 added
[  150.585519][T11119] team0: Port device team_slave_1 added
[  150.606862][T11119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.609304][T11119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.618448][T11119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.625579][T11119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.628794][T11119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.638442][T11119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.675272][ T5731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.724956][T11119] hsr_slave_0: entered promiscuous mode
[  150.728195][T11119] hsr_slave_1: entered promiscuous mode
[  150.731100][T11119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.734509][T11119] Cannot create hsr debugfs directory
[  150.843699][T11119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.848784][T11119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.919622][T11119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.927543][T11119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.941116][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.949385][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.954316][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.960784][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.965330][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.992766][T11119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.996351][T11119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.017995][T11141] lo speed is unknown, defaulting to 1000
[  151.021012][T11141] lo speed is unknown, defaulting to 1000
[  151.052318][T11119] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.057120][T11119] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.183092][T11145] Bluetooth: MGMT ver 1.23
[  151.199338][T11119] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  151.208383][T11119] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  151.213947][T11119] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  151.222789][T11119] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  151.294128][T11141] chnl_net:caif_netlink_parms(): no params data found
[  151.299236][T11156] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  151.411711][T11141] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.414969][T11141] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.417899][T11141] bridge_slave_0: entered allmulticast mode
[  151.421170][T11141] bridge_slave_0: entered promiscuous mode
[  151.428836][T11119] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.435023][T11141] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.437822][T11141] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.440671][T11141] bridge_slave_1: entered allmulticast mode
[  151.447440][T11141] bridge_slave_1: entered promiscuous mode
[  151.464435][T11119] 8021q: adding VLAN 0 to HW filter on device team0
[  151.499035][T11141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.514379][T11141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.541027][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.543775][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.547364][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.550041][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.572850][T11141] team0: Port device team_slave_0 added
[  151.581781][T11141] team0: Port device team_slave_1 added
[  151.611576][T11141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.615050][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.633322][T11141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.639103][T11141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.642847][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.653676][T11141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.738256][T11119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.755141][T11141] hsr_slave_0: entered promiscuous mode
[  151.758672][T11141] hsr_slave_1: entered promiscuous mode
[  151.761811][T11141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.773311][T11141] Cannot create hsr debugfs directory
[  151.958107][T11119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.986554][T11119] veth0_vlan: entered promiscuous mode
[  151.996663][T11119] veth1_vlan: entered promiscuous mode
[  152.021059][T11119] veth0_macvtap: entered promiscuous mode
[  152.027385][T11119] veth1_macvtap: entered promiscuous mode
[  152.040235][T11119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.045549][T11185] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  152.053655][T11119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.059380][T11119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.064872][T11119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.067715][T11119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.070403][T11119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.123927][ T8451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.126395][ T8451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.151267][ T8461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.154392][ T5221] Bluetooth: hci0: command tx timeout
[  152.157509][ T8461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.394841][ T5731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.425379][ T5731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.484824][ T5731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.688072][ T5731] bridge_slave_1: left allmulticast mode
[  152.692750][ T5731] bridge_slave_1: left promiscuous mode
[  152.697301][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.730293][ T5731] bridge_slave_0: left allmulticast mode
[  152.732877][ T5731] bridge_slave_0: left promiscuous mode
[  152.735709][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.042385][ T5221] Bluetooth: hci2: command tx timeout
[  153.100533][ T5731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.109211][ T5731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.117508][ T5731] bond0 (unregistering): Released all slaves
[  153.674450][T11141] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  153.700916][T11141] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  153.716193][T11141] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  153.734466][T11141] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  153.771209][T11221] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  153.811308][ T5731] hsr_slave_0: left promiscuous mode
[  153.822329][ T5731] hsr_slave_1: left promiscuous mode
[  153.837810][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.840488][ T5731] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.845662][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.848093][ T5731] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.877382][ T5731] veth1_macvtap: left promiscuous mode
[  153.879301][ T5731] veth0_macvtap: left promiscuous mode
[  153.881546][ T5731] veth1_vlan: left promiscuous mode
[  153.894209][ T5731] veth0_vlan: left promiscuous mode
[  154.199033][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.203314][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.206684][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.216142][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.227271][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.290459][ T5731] team0 (unregistering): Port device team_slave_1 removed
[  154.316373][ T5731] team0 (unregistering): Port device team_slave_0 removed
[  154.624942][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'.
[  154.628849][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'.
[  154.675727][T11234] lo speed is unknown, defaulting to 1000
[  154.679920][T11234] lo speed is unknown, defaulting to 1000
[  154.724335][T11141] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.751131][T11141] 8021q: adding VLAN 0 to HW filter on device team0
[  154.764455][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.767615][ T8461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.784365][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.787732][ T8461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.914969][ T5731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.060626][T11141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.083618][ T5731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.104840][T11234] chnl_net:caif_netlink_parms(): no params data found
[  155.112613][ T5221] Bluetooth: hci2: command tx timeout
[  155.151098][ T5731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.209349][T11234] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.212535][T11234] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.215323][T11234] bridge_slave_0: entered allmulticast mode
[  155.218276][T11234] bridge_slave_0: entered promiscuous mode
[  155.234754][ T5731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.247645][T11234] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.250596][T11234] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.254860][T11234] bridge_slave_1: entered allmulticast mode
[  155.258719][T11234] bridge_slave_1: entered promiscuous mode
[  155.288624][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.294953][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.330144][T11234] team0: Port device team_slave_0 added
[  155.341379][T11234] team0: Port device team_slave_1 added
[  155.368722][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.371202][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.379851][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.399584][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.401705][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.410377][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.438727][T11141] veth0_vlan: entered promiscuous mode
[  155.486642][T11234] hsr_slave_0: entered promiscuous mode
[  155.488967][T11234] hsr_slave_1: entered promiscuous mode
[  155.491065][T11234] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.494413][T11234] Cannot create hsr debugfs directory
[  155.516677][T11141] veth1_vlan: entered promiscuous mode
[  155.567042][ T5731] bridge_slave_1: left allmulticast mode
[  155.569202][ T5731] bridge_slave_1: left promiscuous mode
[  155.571517][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.577397][ T5731] bridge_slave_0: left allmulticast mode
[  155.579404][ T5731] bridge_slave_0: left promiscuous mode
[  155.581761][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.652703][T11259] netlink: 'syz.1.1849': attribute type 1 has an invalid length.
[  155.655181][T11259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1849'.
[  155.937093][ T5731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.943790][ T5731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.948216][ T5731] bond0 (unregistering): Released all slaves
[  155.976933][T11269] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  156.178430][T11141] veth0_macvtap: entered promiscuous mode
[  156.199498][T11141] veth1_macvtap: entered promiscuous mode
[  156.287089][T11141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.312513][ T5221] Bluetooth: hci0: command tx timeout
[  156.317025][T11141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.374849][T11141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.378605][T11141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.394496][T11141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.402270][T11141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.507121][ T5731] hsr_slave_0: left promiscuous mode
[  156.511252][ T5731] hsr_slave_1: left promiscuous mode
[  156.517140][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.520274][ T5731] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.534372][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.537444][ T5731] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.563928][ T5731] veth1_macvtap: left promiscuous mode
[  156.567398][ T5731] veth0_macvtap: left promiscuous mode
[  156.570124][ T5731] veth1_vlan: left promiscuous mode
[  156.575445][ T5731] veth0_vlan: left promiscuous mode
[  156.965345][ T5731] team0 (unregistering): Port device team_slave_1 removed
[  156.995845][ T5731] team0 (unregistering): Port device team_slave_0 removed
[  157.192209][ T5221] Bluetooth: hci2: command tx timeout
[  157.456817][ T8452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.459537][ T8452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.524124][ T8451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.526731][ T8451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.550255][T11234] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  157.584301][T11234] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  157.599188][T11234] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  157.608459][T11234] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  157.644857][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'.
[  157.797323][T11234] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.807097][T11234] 8021q: adding VLAN 0 to HW filter on device team0
[  157.817458][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.819964][ T8461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.842666][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.845121][ T8461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.878367][T11234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  157.887572][T11234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.035345][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.075773][T11234] veth0_vlan: entered promiscuous mode
[  158.086047][T11234] veth1_vlan: entered promiscuous mode
[  158.113503][T11234] veth0_macvtap: entered promiscuous mode
[  158.119327][T11234] veth1_macvtap: entered promiscuous mode
[  158.135145][T11234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.146751][T11234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.155537][T11234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.158766][T11234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.162983][T11234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.165880][T11234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.230659][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.236865][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.260319][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.263963][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.367080][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.440078][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.750851][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.757647][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.761513][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.765360][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.769306][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.817171][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.854553][T11313] lo speed is unknown, defaulting to 1000
[  158.859206][T11313] lo speed is unknown, defaulting to 1000
[  158.914960][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'.
[  158.981020][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.020335][T11321] vlan2: entered allmulticast mode
[  159.022952][T11321] bridge_slave_0: entered allmulticast mode
[  159.052918][T11320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1861'.
[  159.190616][ T5863] bridge_slave_1: left allmulticast mode
[  159.194453][ T5863] bridge_slave_1: left promiscuous mode
[  159.199966][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.206685][ T5863] bridge_slave_0: left allmulticast mode
[  159.209557][ T5863] bridge_slave_0: left promiscuous mode
[  159.212524][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.569458][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.576519][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.582304][ T5863] bond0 (unregistering): Released all slaves
[  159.786963][T11313] chnl_net:caif_netlink_parms(): no params data found
[  160.177967][T11313] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.181766][T11313] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.190353][T11313] bridge_slave_0: entered allmulticast mode
[  160.207077][T11313] bridge_slave_0: entered promiscuous mode
[  160.225049][ T5863] hsr_slave_0: left promiscuous mode
[  160.227827][ T5863] hsr_slave_1: left promiscuous mode
[  160.230361][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.242217][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.245939][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.262502][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.287515][ T5863] veth1_macvtap: left promiscuous mode
[  160.290874][ T5863] veth0_macvtap: left promiscuous mode
[  160.293731][ T5863] veth1_vlan: left promiscuous mode
[  160.296098][ T5863] veth0_vlan: left promiscuous mode
[  160.618970][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  160.624341][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  160.628854][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  160.640761][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  160.645798][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  160.799052][ T5221] Bluetooth: hci0: command tx timeout
[  160.940866][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  160.980062][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  161.389817][T11313] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.396573][T11313] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.399695][T11313] bridge_slave_1: entered allmulticast mode
[  161.404641][T11313] bridge_slave_1: entered promiscuous mode
[  161.416120][T11343] netlink: 'syz.1.1864': attribute type 27 has an invalid length.
[  161.462881][T11313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.471268][T11313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.476630][T11348] lo speed is unknown, defaulting to 1000
[  161.479751][T11348] lo speed is unknown, defaulting to 1000
[  161.518829][T11351] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.526140][T11313] team0: Port device team_slave_0 added
[  161.533177][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'.
[  161.572491][T11313] team0: Port device team_slave_1 added
[  161.634937][T11313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.637661][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.648632][T11313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.665002][T11313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.667180][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.688351][T11313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.758235][T11313] hsr_slave_0: entered promiscuous mode
[  161.761657][T11313] hsr_slave_1: entered promiscuous mode
[  161.766808][T11313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.769902][T11313] Cannot create hsr debugfs directory
[  162.055895][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.098941][T11348] chnl_net:caif_netlink_parms(): no params data found
[  162.180907][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'.
[  162.209235][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.245925][T11373] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave
[  162.250332][T11373] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1)
[  162.390438][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.470634][T11384] netlink: 'syz.1.1871': attribute type 9 has an invalid length.
[  162.476078][T11384] netlink: 'syz.1.1871': attribute type 7 has an invalid length.
[  162.479612][T11384] netlink: 'syz.1.1871': attribute type 8 has an invalid length.
[  162.487288][T11385] netlink: 'syz.1.1871': attribute type 9 has an invalid length.
[  162.491049][T11385] netlink: 'syz.1.1871': attribute type 7 has an invalid length.
[  162.495845][T11385] netlink: 'syz.1.1871': attribute type 8 has an invalid length.
[  162.541318][T11348] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.547975][T11348] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.551507][T11348] bridge_slave_0: entered allmulticast mode
[  162.560580][T11348] bridge_slave_0: entered promiscuous mode
[  162.583665][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.609345][ T8451] tipc: Resetting bearer <eth:syzkaller0>
[  162.615970][T11385] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1871'.
[  162.619529][T11384] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1871'.
[  162.630411][T11348] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.639277][T11348] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.642808][T11348] bridge_slave_1: entered allmulticast mode
[  162.647214][T11348] bridge_slave_1: entered promiscuous mode
[  162.713501][ T5221] Bluetooth: hci2: command tx timeout
[  162.779226][T11348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.788623][T11348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.854372][T11348] team0: Port device team_slave_0 added
[  162.868865][T11348] team0: Port device team_slave_1 added
[  162.872080][ T5221] Bluetooth: hci0: command tx timeout
[  162.949439][T11348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.956059][T11348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.968344][T11348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.979160][T11348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.982915][T11348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.994723][T11348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.082954][T11348] hsr_slave_0: entered promiscuous mode
[  163.086706][T11348] hsr_slave_1: entered promiscuous mode
[  163.089720][T11348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.093132][T11348] Cannot create hsr debugfs directory
[  163.097129][ T5863] bridge_slave_1: left allmulticast mode
[  163.100167][ T5863] bridge_slave_1: left promiscuous mode
[  163.104545][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.110834][ T5863] bridge_slave_0: left allmulticast mode
[  163.117804][ T5863] bridge_slave_0: left promiscuous mode
[  163.120502][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.457109][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.464896][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.470191][ T5863] bond0 (unregistering): Released all slaves
[  163.526793][T11313] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  163.533428][T11313] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  163.547861][T11313] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  163.588689][T11313] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  163.765345][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'.
[  163.928209][T11313] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.074797][T11313] 8021q: adding VLAN 0 to HW filter on device team0
[  164.081855][ T5863] hsr_slave_0: left promiscuous mode
[  164.095546][ T5863] hsr_slave_1: left promiscuous mode
[  164.098552][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.101408][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.110389][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.116892][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.137779][ T5863] veth1_macvtap: left promiscuous mode
[  164.140565][ T5863] veth0_macvtap: left promiscuous mode
[  164.144513][ T5863] veth1_vlan: left promiscuous mode
[  164.147887][ T5863] veth0_vlan: left promiscuous mode
[  164.598590][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  164.629096][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  164.792198][ T5221] Bluetooth: hci2: command tx timeout
[  164.952097][ T5221] Bluetooth: hci0: command tx timeout
[  165.012331][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.015179][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.048882][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.052175][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.304858][T11348] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  165.330053][T11348] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  165.364417][T11348] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  165.385482][T11348] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  165.521733][T11313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.586268][T11348] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.628236][T11313] veth0_vlan: entered promiscuous mode
[  165.647886][T11348] 8021q: adding VLAN 0 to HW filter on device team0
[  165.657752][T11313] veth1_vlan: entered promiscuous mode
[  165.695221][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.698605][ T8455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.714824][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.718155][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.796181][T11313] veth0_macvtap: entered promiscuous mode
[  165.816277][T11313] veth1_macvtap: entered promiscuous mode
[  165.885857][T11313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.909350][T11313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.921106][T11313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.928395][T11313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.931777][T11313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.947213][T11313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.141697][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.153944][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.191844][T11348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.227583][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.236563][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.345690][T11482] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  166.349040][T11482] team0: Device macvtap1 is already an upper device of the team interface
[  166.402645][T11348] veth0_vlan: entered promiscuous mode
[  166.424835][T11348] veth1_vlan: entered promiscuous mode
[  166.528950][T11348] veth0_macvtap: entered promiscuous mode
[  166.545414][T11348] veth1_macvtap: entered promiscuous mode
[  166.571808][T11348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.581613][T11348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.590840][T11348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.594191][T11348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.597819][T11348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.604341][T11348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.610122][T11495] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1893'.
[  166.683742][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.686355][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.718658][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.726839][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.085298][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.189336][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.433398][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.724298][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.728256][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.743448][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.748689][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.758346][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.794581][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.849124][T11517] lo speed is unknown, defaulting to 1000
[  167.853815][T11517] lo speed is unknown, defaulting to 1000
[  168.101709][T11517] chnl_net:caif_netlink_parms(): no params data found
[  168.193968][ T5863] bridge_slave_1: left allmulticast mode
[  168.196689][ T5863] bridge_slave_1: left promiscuous mode
[  168.199607][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.206950][ T5863] bridge_slave_0: left allmulticast mode
[  168.209192][ T5863] bridge_slave_0: left promiscuous mode
[  168.211635][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.492722][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.498676][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.505099][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.514811][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.521239][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.658091][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.664723][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.670316][ T5863] bond0 (unregistering): Released all slaves
[  168.700651][T11532] 
[  168.701814][T11532] ======================================================
[  168.704885][T11532] WARNING: possible circular locking dependency detected
[  168.707949][T11532] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  168.712437][T11532] ------------------------------------------------------
[  168.715912][T11532] syz.1.1900/11532 is trying to acquire lock:
[  168.718684][T11532] ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  168.722658][T11532] 
[  168.722658][T11532] but task is already holding lock:
[  168.725679][T11532] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  168.729675][T11532] 
[  168.729675][T11532] which lock already depends on the new lock.
[  168.729675][T11532] 
[  168.734631][T11532] 
[  168.734631][T11532] the existing dependency chain (in reverse order) is:
[  168.738609][T11532] 
[  168.738609][T11532] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  168.741832][T11532]        lock_acquire+0x120/0x360
[  168.743991][T11532]        _raw_spin_lock_bh+0x36/0x50
[  168.746262][T11532]        nr_rt_ioctl+0x390/0xd50
[  168.748520][T11532]        sock_do_ioctl+0xdc/0x300
[  168.750850][T11532]        sock_ioctl+0x576/0x790
[  168.753167][T11532]        __se_sys_ioctl+0xfc/0x170
[  168.755308][T11532]        do_syscall_64+0xfa/0x3b0
[  168.757481][T11532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.760093][T11532] 
[  168.760093][T11532] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  168.763364][T11532]        lock_acquire+0x120/0x360
[  168.765504][T11532]        _raw_spin_lock_bh+0x36/0x50
[  168.768760][T11532]        nr_rt_ioctl+0x193/0xd50
[  168.771051][T11532]        sock_do_ioctl+0xdc/0x300
[  168.773177][T11532]        sock_ioctl+0x576/0x790
[  168.775376][T11532]        __se_sys_ioctl+0xfc/0x170
[  168.777548][T11532]        do_syscall_64+0xfa/0x3b0
[  168.779656][T11532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.782526][T11532] 
[  168.782526][T11532] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  168.785649][T11532]        validate_chain+0xb9b/0x2140
[  168.788096][T11532]        __lock_acquire+0xab9/0xd20
[  168.790755][T11532]        lock_acquire+0x120/0x360
[  168.793353][T11532]        _raw_spin_lock_bh+0x36/0x50
[  168.795777][T11532]        nr_rt_device_down+0xa9/0x720
[  168.797980][T11532]        nr_device_event+0x137/0x150
[  168.800061][T11532]        notifier_call_chain+0x1b6/0x3e0
[  168.802284][T11532]        __dev_notify_flags+0x18d/0x2e0
[  168.804735][T11532]        netif_change_flags+0xe8/0x1a0
[  168.807013][T11532]        dev_change_flags+0x130/0x260
[  168.809381][T11532]        dev_ioctl+0x7b4/0x1150
[  168.812170][T11532]        sock_do_ioctl+0x22c/0x300
[  168.814988][T11532]        sock_ioctl+0x576/0x790
[  168.817053][T11532]        __se_sys_ioctl+0xfc/0x170
[  168.819177][T11532]        do_syscall_64+0xfa/0x3b0
[  168.821305][T11532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.824063][T11532] 
[  168.824063][T11532] other info that might help us debug this:
[  168.824063][T11532] 
[  168.828236][T11532] Chain exists of:
[  168.828236][T11532]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  168.828236][T11532] 
[  168.834536][T11532]  Possible unsafe locking scenario:
[  168.834536][T11532] 
[  168.837737][T11532]        CPU0                    CPU1
[  168.840030][T11532]        ----                    ----
[  168.842434][T11532]   lock(nr_neigh_list_lock);
[  168.844639][T11532]                                lock(&nr_node->node_lock);
[  168.848172][T11532]                                lock(nr_neigh_list_lock);
[  168.851405][T11532]   lock(nr_node_list_lock);
[  168.853330][T11532] 
[  168.853330][T11532]  *** DEADLOCK ***
[  168.853330][T11532] 
[  168.856684][T11532] 2 locks held by syz.1.1900/11532:
[  168.858886][T11532]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  168.862820][T11532]  #1: ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  168.867118][T11532] 
[  168.867118][T11532] stack backtrace:
[  168.869853][T11532] CPU: 0 UID: 0 PID: 11532 Comm: syz.1.1900 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  168.869874][T11532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.869883][T11532] Call Trace:
[  168.869891][T11532]  <TASK>
[  168.869900][T11532]  dump_stack_lvl+0x189/0x250
[  168.869922][T11532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.869937][T11532]  ? __pfx__printk+0x10/0x10
[  168.869954][T11532]  ? print_lock_name+0xde/0x100
[  168.869972][T11532]  print_circular_bug+0x2ee/0x310
[  168.869991][T11532]  check_noncircular+0x134/0x160
[  168.870008][T11532]  validate_chain+0xb9b/0x2140
[  168.870025][T11532]  ? rt6_disable_ip+0x6b3/0x720
[  168.870043][T11532]  ? __lock_acquire+0xab9/0xd20
[  168.870057][T11532]  __lock_acquire+0xab9/0xd20
[  168.870072][T11532]  ? nr_rt_device_down+0xa9/0x720
[  168.870082][T11532]  lock_acquire+0x120/0x360
[  168.870095][T11532]  ? nr_rt_device_down+0xa9/0x720
[  168.870111][T11532]  ? nr_rt_device_down+0xa9/0x720
[  168.870123][T11532]  _raw_spin_lock_bh+0x36/0x50
[  168.870141][T11532]  ? nr_rt_device_down+0xa9/0x720
[  168.870151][T11532]  nr_rt_device_down+0xa9/0x720
[  168.870163][T11532]  ? do_raw_spin_unlock+0x4d/0x240
[  168.870180][T11532]  nr_device_event+0x137/0x150
[  168.870198][T11532]  notifier_call_chain+0x1b6/0x3e0
[  168.870214][T11532]  __dev_notify_flags+0x18d/0x2e0
[  168.870230][T11532]  ? __pfx___dev_notify_flags+0x10/0x10
[  168.870245][T11532]  ? __dev_change_flags+0x4cc/0x6d0
[  168.870262][T11532]  ? __pfx___dev_change_flags+0x10/0x10
[  168.870277][T11532]  ? dev_ioctl+0x7a4/0x1150
[  168.870289][T11532]  ? full_name_hash+0x92/0xe0
[  168.870310][T11532]  netif_change_flags+0xe8/0x1a0
[  168.870326][T11532]  dev_change_flags+0x130/0x260
[  168.870343][T11532]  dev_ioctl+0x7b4/0x1150
[  168.870358][T11532]  sock_do_ioctl+0x22c/0x300
[  168.870378][T11532]  ? __pfx_sock_do_ioctl+0x10/0x10
[  168.870395][T11532]  ? __lock_acquire+0xab9/0xd20
[  168.870411][T11532]  sock_ioctl+0x576/0x790
[  168.870430][T11532]  ? __pfx_sock_ioctl+0x10/0x10
[  168.870483][T11532]  ? __fget_files+0x2a/0x420
[  168.870501][T11532]  ? __fget_files+0x3a0/0x420
[  168.870517][T11532]  ? __fget_files+0x2a/0x420
[  168.870535][T11532]  ? bpf_lsm_file_ioctl+0x9/0x20
[  168.870548][T11532]  ? __pfx_sock_ioctl+0x10/0x10
[  168.870565][T11532]  __se_sys_ioctl+0xfc/0x170
[  168.870580][T11532]  do_syscall_64+0xfa/0x3b0
[  168.870592][T11532]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.870610][T11532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.870624][T11532]  ? exc_page_fault+0x9f/0xf0
[  168.870644][T11532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.870656][T11532] RIP: 0033:0x7f142478e929
[  168.870669][T11532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.870680][T11532] RSP: 002b:00007f14256a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.870697][T11532] RAX: ffffffffffffffda RBX: 00007f14249b6080 RCX: 00007f142478e929
[  168.870706][T11532] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  168.870713][T11532] RBP: 00007f1424810b39 R08: 0000000000000000 R09: 0000000000000000
[  168.870722][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.870729][T11532] R13: 0000000000000000 R14: 00007f14249b6080 R15: 00007fff016740c8
[  168.870742][T11532]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  169.044163][T11530] lo speed is unknown, defaulting to 1000
[  169.047780][T11530] lo speed is unknown, defaulting to 1000
[  169.535204][ T5863] hsr_slave_0: left promiscuous mode
[  169.538802][ T5863] hsr_slave_1: left promiscuous mode
[  169.549367][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.554281][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.558369][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.565274][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.582671][ T5863] veth1_macvtap: left promiscuous mode
[  169.585192][ T5863] veth0_macvtap: left promiscuous mode
[  169.588042][ T5863] veth1_vlan: left promiscuous mode
[  169.590356][ T5863] veth0_vlan: left promiscuous mode
[  169.718333][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  169.735793][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  170.186974][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.227686][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.276510][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.344832][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.445255][ T5863] bridge_slave_1: left allmulticast mode
[  170.448140][ T5863] bridge_slave_1: left promiscuous mode
[  170.450715][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.456059][ T5863] bridge_slave_0: left allmulticast mode
[  170.458523][ T5863] bridge_slave_0: left promiscuous mode
[  170.461041][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.538430][ T5863] bond0 (unregistering): Released all slaves
[  170.622861][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.628016][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.632738][ T5863] bond0 (unregistering): Released all slaves
[  170.935310][ T5863] hsr_slave_0: left promiscuous mode
[  170.938205][ T5863] hsr_slave_1: left promiscuous mode
[  170.941063][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.944895][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.948511][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.951620][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.981676][ T5863] veth1_macvtap: left promiscuous mode
[  170.984100][ T5863] veth0_macvtap: left promiscuous mode
[  170.985922][ T5863] veth1_vlan: left promiscuous mode
[  170.987651][ T5863] veth0_vlan: left promiscuous mode
[  171.150366][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  171.171705][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  171.618812][ T5863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.692792][ T5863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.731014][ T5863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.792655][ T5863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.954240][ T5863] bond3 (unregistering): (slave vti0): Releasing backup interface
[  172.046690][ T5863] team0: Port device geneve0 removed
[  172.373005][ T5863] bond0 (unregistering): Released all slaves
[  172.379507][ T5863] bond1 (unregistering): Released all slaves
[  172.386698][ T5863] bond2 (unregistering): Released all slaves
[  172.393679][ T5863] bond3 (unregistering): Released all slaves
[  172.400790][ T5863] bond4 (unregistering): Released all slaves
[  173.804147][ T5863] tipc: Disabling bearer <eth:syzkaller0>
[  173.814121][ T5863] tipc: Left network mode
[  173.951089][ T5863] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode
[  174.067639][ T5863] hsr_slave_0: left promiscuous mode
[  174.737888][ T5863] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
12:17:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000028c5 RDI=00000000000028c6 RBP=00000000000003f8 RSP=ffffc90003c0f030
R8 =ffff888108a30237 R9 =1ffff11021146046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ba R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f14256a66c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1425685d58 CR3=0000000118ae8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f14254ed100 00007f1424985440 XMM05=00007f1424985458 00007f14249854a0
XMM06=00007f1424985498 00007f1424985490 XMM07=00007f1424985488 00007f1424985480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1424811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a7d77b2e0095aa00 RBX=ffffffff81976c78 RCX=a7d77b2e0095aa00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1425684fc8 CR3=0000000118ae8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1424985478 00007f1424985450 XMM03=00007f1424985488 00007f1424985480
XMM04=00007f14254ed100 00007f1424985440 XMM05=00007f1424985458 00007f14249854a0
XMM06=00007f1424985498 00007f1424985490 XMM07=00007f1424985488 00007f1424985480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f1424811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
