last executing test programs:

2m21.021320171s ago: executing program 2 (id=528):
r0 = socket$inet(0x2, 0x4, 0xa)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xfffffff7, 0x4)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000200))
socket$alg(0x26, 0x5, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)=0x357, 0x12)
recvfrom$inet(r0, &(0x7f0000000280)=""/53, 0x35, 0x3, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000300))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x9a, 0x53, &(0x7f0000000340)="c06d46d8677f2793fd0348109c069b638e0286c3f9abd0945e67d3be8f07c4f506221654669bc7a4f4d5f03046acd03336dc5c50ce03ee4be9a345b59d15683b3fe5593587543da8ea67e421839ce93a6f0a77a1ce1209b73158dcc07f64437862e8b82b1ccaef4545c736c4651e56dc3b42f10cd45a43410adb9e2a8d50059dc2a5bcd8be36a36381062cc9fbc3853fe025b18682249e314dda", &(0x7f0000000400)=""/83, 0x5, 0x0, 0x94, 0x6d, &(0x7f0000000480)="4e6be27ab5a3bd130bfcdb26b0a75c141877689c0427bd6d4db1e6c65a06c37614d869d6a095a66cbb745f947cdcdb8fac4606ead6eb5803c9b89fb35d2bd3de59a5dc04d173f4cfbfe26cfa34361926fefa7511e585a5c0cbcea3931c51e02e901cf485ae2884f9aab117eaae4159fd87504b7156dcf68647d4abdb19cfe4a9c88729cb369a130d6df3e04821cfcb7205e352d6", &(0x7f0000000540)="52d76fdb8896e9e15657d9a24197643d53fa1f350e293edf37a70ac29d95d1991cf9ebf048cfe694b7c4d1b41c7b0a71d14a730027a153c3fe61d344feafa9b7fb9e7a2586992ca498f4429b16d1cdd489c66e64411e72a7c37557564512c0f291a5ec644304c693faa02c9168", 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={&(0x7f0000000640)="3af9a24e6601c9245417e2fd96fac90828a85dc7888cc0934f84d52eca535350f0ae85d647a22cb18efb03c12c7cf979314fda03cdf19f09900a995a620f761e464b9f18e4b5f52d9585e80cd256edb8e2a385f1384d2173a0c0e8fbb0eff8df2a717bf1abdea6eee426b605c38c6d32283b1452d3987639877b02501812a0d081564cf3c2b85b1523a700bcf13e3bd150a977e4597c8e6683840c033f9ab866de89b9baf67c701746b6cf9ebfa0dee23522944f7e4b56a98d63946513834ec801d90e680649b8a72a9a297839d3", &(0x7f0000000740)=""/253, &(0x7f0000000840)="5c62f67d729ce28e84ba1683729e2ea9a42678a72f18b20040adf7e2752e8f26d44d7c67610daae3c2c182e914a2f5fd239381a2959dbff45d29e6223458507f89a8f2d5f9af5a24087298f49679aefa892e489851862838b0d17f1c4bb334c4b66d53b234b399350e060b3fccd2749cb177593357fbed140f06cd892a4226c5c98c1109460ced8510f9145b05948a4c4b3e109888782abf9c4695649a9fd0106e87ba369a2a2ca0dcaee471fce0", &(0x7f0000000900)="ff6c55932d5707228c076f8f64c24628f9d282131e1c12a276e3fc9d1f4d0a00ab5cbdf79f7891b2681fb1118fa0a36838d66d9f960140f49b97652909cd70684d2fff72158c609bae975c36f4b9578ad6152bac0decffd58541f2b16c84f74545444cd54c3e2326e8f7697d91d43dd3e306af4f3ada4f95114613dc601ed8f6bae2332b32c2c65fcd32543388a21d9f7657800469e2bda407e0e2c1ae7ed619b64c8bc93c4a71f6d54622ba04def019", 0x7fff, r2, 0x4}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r1, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000d80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xd, '\x00', 0x0, r1, 0x1, 0x1, 0x4}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2d, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6e7d, 0x0, 0x0, 0x0, 0x14}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @generic={0x6, 0x8, 0x8, 0x1, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llx}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000b80)='GPL\x00', 0xff, 0xe0, &(0x7f0000000bc0)=""/224, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001000)={0x1, 0xd, 0x1, 0x86}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000010c0)=[r1, r1, r1, r5, r1, r1, r2, 0xffffffffffffffff], &(0x7f0000001100)=[{0x4, 0x2, 0xc, 0x4}, {0x4, 0x2, 0x4, 0x9}, {0x0, 0x4, 0xc, 0x6}, {0x0, 0x2, 0xa, 0xa}], 0x10, 0x1}, 0x94)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001200))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001240)={'batadv0\x00', <r8=>0x0})
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000001280)={0x0, 0x2, 0xa7, 0x80})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r1, 0x0, 0x7f, 0x3f, &(0x7f00000012c0)="7c83cb8f072cb7a0d23792490e27a2207e5c090b65d0f1b72376d64a952682661d41f33ffe103e2e615630995d2855a7a7790f941ec3a4d4f6b253388e05ee2d0c68d0f0ab81a179588d51b8dfaa65d0814531e65fed44e83d3a899d95a277e1162db2ccc3b3e0c989a3cd1a51bfaca98655a0ce40ceaf31fa7207447c55d8", &(0x7f0000001340)=""/63, 0x2, 0x0, 0x97, 0x2d, &(0x7f0000001380)="eba5a2216ebad8e47449977e790016eab9ef98b63d466794c8d8041c9db127079d23005f0c50890d85775fd11813509ac894a08422c15baa7295486b8d9221dcc9673cf91cc52f9c496ffc81dd28fd85e7ad16c06d8b73a7cc0f830373f4ad2c28b3eee7e05dc3294b44ef802c2c2f0347785be2a5eaf97109c64bebc9936f03fabd4f1163a9606bb556795ae66ac8f764d3bb9aec9a76", &(0x7f0000001440)="eb5be38fd007f96a0d9660e0c6606aa612189800b122de8ca14afa4ba10b1710cf2cf40e526a2be09529376c46", 0x1, 0x0, 0x80}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)={0x1b, 0x0, 0x0, 0x84, 0x0, r5, 0x5, '\x00', r8, r9, 0x0, 0x0, 0x4}, 0x50)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r2)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
shutdown(r9, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', r8, r1, 0x2, 0x1}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001780)=@o_path={&(0x7f0000001740)='./file0\x00', 0x0, 0x38, r6}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a40)={{r1, <r11=>0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a00)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001a80)={&(0x7f00000017c0)="540b24b97175eab32979ae536e2005436d7d9594bd8272d17b3dede70004272a9035", &(0x7f0000001800)=""/119, &(0x7f0000001880)="e3fe72af6dd22e1fecd952156572787f9009", &(0x7f00000018c0)="547ab8ec173448a1a13dde7ed3af5ed753f814cb83c5bc06535d55d461eaa9e00f71b3dc60c0208149021cf94a39a8976f6c16244bf1d1c3d459265a95d7d7834e714fde5274d538678e2261c5c1748201d529795e1c3617f3b2ea540bf595155647de450e8dbcbbe9cf3a9e16d1d0039c46356c5c55a7b42e87fd83d07cea1a86662ad704229e2090787195515e4af0a91913432ea8a9fff9a8b63d74ed363124d8f27994df40f18b74e88365310f05efa63a9270f0437a6dabc5700987b4a1390b2360c8aca4aa58597addeb54a2586a6ee506c9106526502619cd79b9a54ee16c1efc7603b1e630", 0x80000001, r11, 0x4}, 0x38)

2m20.91993633s ago: executing program 2 (id=529):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001001000000010000580"], 0x68}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467659a736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff}, 0x50)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r4, 0x0, 0x4000000000000004}, 0x18)

2m20.851722534s ago: executing program 2 (id=530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x3})
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x283e, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x2, 0x3, 0xd, 0x4}]}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x4, r2}, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x40e0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='fsi_master_acf_cmd_rel_addr\x00', r2, 0x0, 0x5}, 0x18)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000500)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg$sock(r0, &(0x7f0000001b40)=[{{&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="04637ac7b2a925468c9182ecff41e8aef2f4e7de3497324802978316e92ec7f4d13bc05b0df46e5c8c18e1c02fefc7b871b45a0e4b0e97b0db9ecfe77a63a2a1d5fc1d7a5d5c064aae81ada2705dbfd0ea405a019d06ec9745c9391f50a805feccd7d510fe5d4df1a4cb1bb9d1920178f8934c767ea9d70bbb7b00fcbb4ad13ac521564b49af3ef6e079776e9eb11170806f2507d7000f4626fff81fb825f92d8e14e4e3a9f89a7ec264ec1fec04812a1c89aa2d2e71208f1b7d8d1acdec0fca441314a14087723b813f4b6840003164ac9aeaf6374e9937de22f07f71e79d79c470551391c3f75dc2ea92e725a955091dcdff2e94710a", 0xf7}, {&(0x7f00000006c0)="746155e4c1ce21b6d9c752edc6ade603c121112e8abefc195fdfa6b9db33bc11fefe555a64a5c928950c45dadb1bdad19a4dcc7c9f7d7f631317467c387bc644c52d6ae0158808feca051d2dec1bd80b819612563bdf977c9a32542196c28d70978146d39cb117d78f23a0a75c6f64fe7f3e0d225f46de94d5f7565beb12a945f1b18fb2f01855beac36985d46b56cc0a0fa75569915b6cffd19552ddc8a35601be51a122b245fd4245205a3e342bfe063196ba3317cfaab89161943be677df0f94c229c0cacea81a1837809788e0b782630024356e66cbe0f874125433050d488b66ecc3b09", 0xe6}], 0x2, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x17}}, @timestamping={{0x14, 0x1, 0x25, 0x1fc3}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000880)="f06a5a89dfce8d76cb02b860249c04a99ac8da7038a0e686d21df0c592bf1779ee231df8b031dddc7cfe877a6c92857174a52b12725500063b35984fd752b68d4179ed6b749913f9bd2af5ae0b0409d2870582f21f3544e41d30b44d404311434cdb7a6723540f5d96c32f828fa6ffb5c3bbd2ef5f07e814686dd41630829ff0e2ebc4b7772b8b0520a0576a62ccb0cdf7452f0e22543ca81b5d18f86e11d4495b755b788b0be2028c42d9e21565b9d5c159f23a280bf9ffb3c170a1fd53d0bb87736635633399a9cadf2414044037f7202d4f15340a0c75e17bd37d1b07c20a5936801b24a9c84326677f3cbc78283cabc927beb7a980a93253c4d55685", 0xfe}, {&(0x7f0000000980)="f480057fbf6c1a7105e4d36b85140a2d618ae9a45c5ba743b71283a437b0a5e9213b16f178ec4fc6d34e54712da90db03dbd55d7d2215c4e649c013fdde79803379d89d55de7e72be48ba16da552e421b3833f665a0d744ea1ebc4d0c1ded02474cc2fd822f765f54cbb724a5aa2f1ea06b7ad2435520eb3f128d54bb73b0bfb9e97eeca31a135e1e40c51969495b7365f24407dbcf1b87001b6e0726197b6eb25324ae62dd5d2bb7198f790eaac079e7c0c1e05fca264485fdf8bfaedf4dd7669b6619f278b370cd620b7809128c711e25f79dfa8244a397cd03c6ac3ec6d907d740581f5aa06eb3814e933eb05dc", 0xef}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="8d36da453eb0f2cfcc2c09857ef0e240df6a80f676bd9fab48bea0375a3cb4cfb5688d12ae6a0a3009ed42d89905b99c6add55584a00595303651ba3399bb6cfbe570d9c371b9d68a56179184da123b550ffa92ceca4516e3c4de0a3c91150da544430187eafaa2ce692b6823210b05f8649f6", 0x73}], 0x4}}], 0x2, 0x4080)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)=r2}, 0x20) (async, rerun: 32)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001cc0)=@o_path={&(0x7f0000001c80)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002000)={'syztnl2\x00', &(0x7f0000001f80)={'gre0\x00', <r9=>0x0, 0x40, 0x8, 0x24, 0x2, {{0x12, 0x4, 0x0, 0x22, 0x48, 0x67, 0x0, 0x61, 0x2d, 0x0, @remote, @remote, {[@end, @timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x4, [{@loopback, 0x2}, {@local, 0x4}, {@rand_addr=0x64010101, 0x5}, {@remote, 0xfffffffb}]}, @timestamp_prespec={0x44, 0xc, 0x3a, 0x3, 0x1, [{@rand_addr=0x64010101, 0xffffffff}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={r2, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000020c0)=[0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002140)=[0x0], <r11=>0x0, 0x5a, &(0x7f0000002180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0x70, 0x8, 0x8, &(0x7f0000002240)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xf, 0x24, &(0x7f0000001d00)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @generic={0x0, 0xf, 0x4, 0x5, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9da}}, @ldst={0x3, 0x0, 0x3, 0x9, 0x2, 0x2, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}], &(0x7f0000001e40)='syzkaller\x00', 0xc00000, 0xe9, &(0x7f0000001e80)=""/233, 0x40f00, 0x2, '\x00', r9, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000002040)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002080)={0x2, 0x6, 0x8, 0x8}, 0x10, r11, r2, 0x8, 0x0, &(0x7f00000023c0)=[{0x0, 0x1, 0x10, 0x2}, {0x2, 0x5, 0x6, 0x3}, {0x5, 0x4, 0x10, 0xa}, {0x0, 0x4, 0xb, 0x5}, {0x0, 0x2, 0xe, 0x2}, {0x4, 0x3, 0xa, 0xb}, {0x3, 0x1, 0x6, 0xc}, {0x5, 0x2, 0xe, 0x9}], 0x10, 0x401}, 0x94) (async)
r12 = socket$inet6(0xa, 0x1, 0x4)
sendmsg(r6, &(0x7f0000002cc0)={&(0x7f0000002500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r12, 0x40, 0x4, 0x1, 0x4, {0xa, 0x4e20, 0x9, @private2, 0x715}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002580)="51b4850e30fdc426245f20a113a5a52ce826901af5b5d628ebfaa92953fda3ed358da75c0b033ac88e5fe9f57cc415943dd019f910a6ea99d3a05041ca68f31d1f0357a98a02772eb8eddd1944837df8a051a413e61056e652737cda0ec82ba7732793bcf7fd22b611079535dda0bc5c04dfa1666f93", 0x76}, {&(0x7f0000002600)="58c5a580097b31c87aa7f71f037d6fc589087e6dc1d42e55a23d251027e183cc47c55c038bedcae8c07270c0ac38ab5f1556ea82b445ae8176857d72bf456d82d1afc749c83ff30444a7370748aebcbaa87ac4b2b027266cd3e7ececbcdfcdd25582924900ab3637d8818b5923aee3bdd51c0dd8a57ab41deb3c33609ab3a55230821abb535fc0b1c0bbcb4c2443d9cb241e45d60a1acbdd45814908c031b49155add224b770e6ca45503fca14e51078acf4cf3a492aef00793f372cbee5bd76a963084694ca9f8669fbcc7fc27a2445b0c43d41cf3c", 0xd6}, {&(0x7f0000002700)="eddf1e7d50c451a612200be4bee4e43a3119f196d45c22073b2a884105081954831b8fb5aa19378329abcc1be87d61dfe4d59075d77eb4cd6e599d69563a516a4ea803cd96565ac78295c59245f509b7be1c2d3cf69d0158a899a02c2ac3b9efa720096b116c851a677f07574c79f1ee25bb09f561f9e010174f8e2e6798a9acf20b2eb26d7b7c55b099045d143789089258c34967bd8a44e67f4a2ea6cb0bfdc73f0f392d00dd7717298bb86268efa1d38f4e471fa5aa010bc0ed69d020d6eee0dd3ad73665b1154d0bbaa4df71dbeefebec37f33372364d46dfbbd4307", 0xde}, {&(0x7f0000002800)="d6a2fc8b9882a6b5d5fcc2c98259ab3f4220324bbbfb0fda472ce2d78ee9ebbd3c312abe3658cdeaeb8be7458d4e03ec1edde3a37524724726c5b111a60b745526cec7bfc056cc318e272c2e3b96c0b18e1eca7e38782178a670e2b0264d7bd8f47c7a0faa1e040f38c29087753ea814d8ab7afc4f4338e0c619438ae547aecba42c842248107e32b661cbd39dea4dab9f1d2b2222741a4f4420c4b351589254954f6a233751a5b697590a60301251a4120eac21330584d31e5bd88b69dac62ea380", 0xc2}, {&(0x7f0000002900)="044fa1ea0a37f88f8b7e6e88eb47e58c15336299ded067e3de741e464f93b5a17759c954892d5dd4647e25e726e993f10e2bda", 0x33}, {&(0x7f0000002940)="ca4c45c3dbea7ba24c068da5f61d6ea6f37bdfdb941cf951e0496e9fb48d7b7676e66e95df9fdcd3d89eec7e29969b8ba3894fa5b70a6174038a5a7613c1f6a6b323d2cf4df4de0f9735cad1456cdd3697dbec5cb4203bb4d8386c4b9b6bd7521b2fb4d6f8dd4d0388f4e2db29bf3b3b81368f484758b7f69e555be2415108fe2a05542b883256fc3f4df55658ebabd7276e2078c7bc3b00e145504ba9baf766d4ecf16d683b54c84559a69ec61c60084115303d67e40b26e9d705c0fe5301b044b19b61f9a7dfa5037cfa871999b0a0cd952198e35ce07741ce8cace9411635fa", 0xe1}, {&(0x7f0000002a40)="9f77f4fdb46aa67cb36af12b4958d20430283cb08d95b28ea85782f1c506805689549993641046bec5de5dcf195355d81c9e34", 0x33}], 0x7, &(0x7f0000002b00)=[{0xb8, 0x10b, 0x8, "1ba3552651bdc085c83f46ddde668842252ee6fc7982a0f73f17ff6bab79772f82f2e298dab5a0a881ce65d5188e11d18e10731246ba999e3f402a213df1e4ae32571cc64d5ade2120982da1d475dbf318181099bf8304bc2356a212c96b224d857883752cf62346cecd384d8c7909404a6516fa7163c03d7c1e9cbc7e33e3759f9684fac0371281dad0e626a26bada3fc8705d300be7a1f4436fe112f8f900932e35f1ad108dc"}, {0x38, 0x10b, 0x401, "dbf446b4da4d33dc3a861543ed3d0fe103bf524dbe624a0dead2e5fe2ad2bda3161f"}, {0xb0, 0x10c, 0x10, "7f935fe7de3a68260262e222d85825689800bbc669941adc20b6e939f31a837b9c4201166427eb5d307844a4fd7ee72f07eb3ab366f0231fa610adc1bddaa68875c19b9df0db694cc8445c4010f79d17a8db7689e9e07aa83db02f215d52ecbc09b3c019d46090bcade61e9d1ccd78ca2ba8fd10bbf992ae9c0fa387420bba93f5ece838ab012d53bfe1459b1910da58e7ed86ff876d3607c4"}], 0x1a0}, 0x44000) (async, rerun: 32)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$BATADV_CMD_SET_HARDIF(r13, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) (async)
listen(r3, 0x4)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003000)={&(0x7f0000002e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x2}, {0x0, 0x9}, {}]}]}, {0x0, [0x2e, 0x5f, 0x30, 0x2e, 0x61, 0x5f, 0x61, 0x5f]}}, &(0x7f0000002f00)=""/212, 0x46, 0xd4, 0x0, 0x6}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003100)={0x11, 0x5, &(0x7f0000002e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000002e40)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x6b, '\x00', r10, 0x0, r14, 0x8, &(0x7f0000003040)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000003080)={0x2, 0x5, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000030c0), 0x0, 0x10, 0x279}, 0x94) (async)
ioctl$sock_inet6_tcp_SIOCOUTQ(r12, 0x5411, &(0x7f00000031c0)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003200)={'wlan0\x00'}) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64)
r15 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$EBT_SO_GET_INIT_INFO(r15, 0x0, 0x82, &(0x7f0000003240)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x1, 0x6, 0x4, 0x7, 0x81]}, &(0x7f00000032c0)=0x78) (async, rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003580)={&(0x7f0000003300)="bd9dfab10bcdf20377be4fa6b5494c66559cfef3f007590560aaf45f68e2a23aabe4b70da6aa158f564642ef098aaf6b9db7b0603ca7b009b01d19d82cb49dbce9cd6fede11b", &(0x7f0000003380)=""/144, &(0x7f0000003440)="212cf219aef3f4e2ed97afb252b0a4fd4055beda3a82ecdd4eab7b1bf612faf27ddcc72d55fb4564443d6b5d8e61ca7b7e5e8ac0acd1f0ef21bca6ba4efbefd1747f974df3c624b108eb8ba6fe7d097f29ea62d8aa8e2be9997af8c369418fc589f4917bc9d62218fb106930a46f316798bbaf4051d8cf500498514e1de8f86337ec9570ed27ccf2421d84a7e37413dace0c1d35fcac5b", &(0x7f0000003500)="ecaaea8d7363c6522a6ffcdc44c70130de5bf9cca674cf38ca46991c0db21858f5a4c59aca9f1287936ca14a9bdb0d1e52c2a688cf7d1a1abd428986ba5d17f4a6fd5f424e816f3a3ca9ce6def86d2cbf946ded6ca03bdc294132c0438a11178e7", 0x800, r8}, 0x38) (rerun: 64)

2m20.707879394s ago: executing program 2 (id=532):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x308, 0x238, 0x238, 0x308, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x2}, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x6], 0x0, [{0x0, 0x2}, {}, {0x0, 0x3}], 0x0, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x0, 0x1}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xffffff00], [], 'batadv_slave_0\x00', 'veth1\x00', {}, {}, 0x1, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x12}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xfffffffe}, 0x94)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x5, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x4, <r8=>0x0}, 0x8)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x10, r5}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @generic={0x9, 0x0, 0x0, 0x1, 0xf34}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x906}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2a0f}, @jmp={0x5, 0x1, 0x5, 0x5, 0xa, 0x50, 0xfffffffffffffff0}, @ldst={0x3, 0x2, 0x4, 0x8, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x81}]}, &(0x7f0000000100)='syzkaller\x00', 0xffffff23, 0x9a, &(0x7f0000000400)=""/154, 0x0, 0x28, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x10, 0x34, 0x5}, 0x10, r8, 0x0, 0x1, &(0x7f0000000580)=[r2, r9, r10], &(0x7f00000006c0)=[{0x3, 0x4, 0xe, 0x7}], 0x10, 0xb}, 0x94)
r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000880)=@req3={0x4, 0x5ad9e23c, 0x4, 0x0, 0x80000001, 0xfffffffe, 0x2}, 0x1c)
close(r11)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r11, r3, 0x4, r5}, 0x10)

2m20.601572897s ago: executing program 2 (id=534):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef232480000b7b186001859dbb8a19052b43f", 0x38}, {&(0x7f0000000040)="051a00006558", 0x6}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x8, 0x10, 0x3, 0x0, 0x0, [{{r0}, 0xfffffffffffffffb}, {{r1}, 0x4}, {{}, 0x7ff8}]})
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef232480000b7b186001859dbb8a19052b43f", 0x38}, {&(0x7f0000000040)="051a00006558", 0x6}], 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x8, 0x10, 0x3, 0x0, 0x0, [{{r0}, 0xfffffffffffffffb}, {{r1}, 0x4}, {{}, 0x7ff8}]}) (async)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async)

2m20.498527097s ago: executing program 2 (id=535):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x16, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, 0x0, 0x0, 0x11}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x40) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0}) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r8, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xfe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x1, 0x8, 0x2, 0x3, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@cipso={0x86, 0x1e, 0x0, [{0x2, 0x6, "692ebf8c"}, {0x7, 0x12, "f09bc25a4d23d6c318e489c9f2ab2dea"}]}, @timestamp_prespec={0x44, 0x2c, 0x26, 0x3, 0x9, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x5}, {@multicast1, 0x8}, {@broadcast, 0xc201a78e}, {@local, 0x42}]}, @end, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x7c, 0x3, 0x6, [{@private=0xa010101, 0x3}, {@multicast2, 0x6}, {@empty, 0x5}, {@broadcast, 0xa}, {@loopback}, {@empty, 0x8}, {@private=0xa010102, 0x5}]}, @end, @noop]}}}}}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfe, {}, [@IFLA_LINK_NETNSID={0x0, 0x25, 0x1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}}]}, 0x60}}, 0x0) (async)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @null, @bpq0, 0x1, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
socket$netlink(0x10, 0x3, 0x6) (async)
r11 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r11, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x66960000)

2m5.417830457s ago: executing program 32 (id=535):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x16, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, 0x0, 0x0, 0x11}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x40) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0}) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r8, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xfe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x1, 0x8, 0x2, 0x3, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@cipso={0x86, 0x1e, 0x0, [{0x2, 0x6, "692ebf8c"}, {0x7, 0x12, "f09bc25a4d23d6c318e489c9f2ab2dea"}]}, @timestamp_prespec={0x44, 0x2c, 0x26, 0x3, 0x9, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x5}, {@multicast1, 0x8}, {@broadcast, 0xc201a78e}, {@local, 0x42}]}, @end, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x7c, 0x3, 0x6, [{@private=0xa010101, 0x3}, {@multicast2, 0x6}, {@empty, 0x5}, {@broadcast, 0xa}, {@loopback}, {@empty, 0x8}, {@private=0xa010102, 0x5}]}, @end, @noop]}}}}}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfe, {}, [@IFLA_LINK_NETNSID={0x0, 0x25, 0x1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}}]}, 0x60}}, 0x0) (async)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @null, @bpq0, 0x1, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
socket$netlink(0x10, 0x3, 0x6) (async)
r11 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r11, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x66960000)

44.056275468s ago: executing program 1 (id=542):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(r2)
recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

41.358821902s ago: executing program 0 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00')
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e060000000000000000000000000000000000000000000000000000000000000400"], &(0x7f0000001740)=0x2c) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async)
unshare(0x20000400) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000780)}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}}, 0x2) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r7, 0x20, &(0x7f00000000c0)={&(0x7f0000000400)=""/168, 0xa8, <r8=>0x0, &(0x7f00000004c0)=""/171, 0xab}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x1ffffffffffffe97, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, r8}, 0x94)

38.041835511s ago: executing program 1 (id=542):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(r2)
recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

36.783876852s ago: executing program 0 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00')
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e060000000000000000000000000000000000000000000000000000000000000400"], &(0x7f0000001740)=0x2c) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async)
unshare(0x20000400) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000780)}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}}, 0x2) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r7, 0x20, &(0x7f00000000c0)={&(0x7f0000000400)=""/168, 0xa8, <r8=>0x0, &(0x7f00000004c0)=""/171, 0xab}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x1ffffffffffffe97, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, r8}, 0x94)

28.946789607s ago: executing program 1 (id=542):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(r2)
recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

28.729766609s ago: executing program 0 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00')
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e060000000000000000000000000000000000000000000000000000000000000400"], &(0x7f0000001740)=0x2c) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async)
unshare(0x20000400) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000780)}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}}, 0x2) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r7, 0x20, &(0x7f00000000c0)={&(0x7f0000000400)=""/168, 0xa8, <r8=>0x0, &(0x7f00000004c0)=""/171, 0xab}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x1ffffffffffffe97, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, r8}, 0x94)

22.09203401s ago: executing program 0 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00')
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e060000000000000000000000000000000000000000000000000000000000000400"], &(0x7f0000001740)=0x2c) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async)
unshare(0x20000400) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000780)}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}}, 0x2) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r7, 0x20, &(0x7f00000000c0)={&(0x7f0000000400)=""/168, 0xa8, <r8=>0x0, &(0x7f00000004c0)=""/171, 0xab}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x1ffffffffffffe97, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, r8}, 0x94)

21.412443837s ago: executing program 1 (id=542):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(r2)
recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

14.910122042s ago: executing program 0 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00')
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e060000000000000000000000000000000000000000000000000000000000000400"], &(0x7f0000001740)=0x2c) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async)
unshare(0x20000400) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000780)}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}}, 0x2) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r7, 0x20, &(0x7f00000000c0)={&(0x7f0000000400)=""/168, 0xa8, <r8=>0x0, &(0x7f00000004c0)=""/171, 0xab}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x1ffffffffffffe97, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, r8}, 0x94)

13.681500513s ago: executing program 1 (id=542):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(r2)
recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

6.859352834s ago: executing program 0 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00')
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e060000000000000000000000000000000000000000000000000000000000000400"], &(0x7f0000001740)=0x2c) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x35075c, 0x800}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async)
unshare(0x20000400) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000780)}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}}, 0x2) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r7, 0x20, &(0x7f00000000c0)={&(0x7f0000000400)=""/168, 0xa8, <r8=>0x0, &(0x7f00000004c0)=""/171, 0xab}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x1ffffffffffffe97, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, r8}, 0x94)

5.693491873s ago: executing program 1 (id=542):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(r2)
recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

1.519765945s ago: executing program 3 (id=1546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
sendfile(r3, r2, 0x0, 0x10000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000808}, 0x0)

872.267763ms ago: executing program 3 (id=1547):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000ffdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x40400d1}, 0x4000814)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r11, &(0x7f00000038c0)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff97}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000001)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r14, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="eb6657c834be871292d58122f4fbdfcaecab8efa237e816ffd9f2b8e797b3ad650e28feb9a9cc019bfdcc7d41137edb3fed6dc92344dc1e8ef8810b624cdc952a3", @ANYRES32=r15, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$packet(r6, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r15}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x38, 0x28, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xffe0, 0xffe0}, {0xe, 0x4edb77053aeef345}, {0xc, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES32=r14, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x8c0}, 0x2000c0c5)

248.363537ms ago: executing program 3 (id=1548):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) (async)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000)
syz_emit_ethernet(0x4f, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x19, 0x84, 0x1, @rand_addr=' \x01\x00', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x4d21}, 0x8) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r5, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x840) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), 0xffffffffffffffff)
r7 = socket$inet6(0xa, 0x3, 0x20)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x4, @mcast1}, 0x19) (async)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002800)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf250e00000047000e0080b802000802110000000802110000015050505050501600d6ec0680120f0000000000006400900105037f9106250301882872060303030303037107ff01000101a00000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

177.788174ms ago: executing program 3 (id=1549):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000600)='V63', 0x0}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000600)='V63', 0x0}, 0x20) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f0000000040)) (async)

107.022718ms ago: executing program 3 (id=1550):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020207025000000001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002b000701feffffff00000000037c00000c00018008000600ffffffff0c00028008000100", @ANYRES32=0x0, @ANYBLOB="5707a76dfb828596832b26d1e7b9eca2b3a07905b04db36306d7bd313794"], 0x2c}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001000000008000900000002001800018014000200776c616e31"], 0x34}}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed9, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0x3, 0x9, 0x4, 0x0, 0x0, 0x40}, 0xc)

0s ago: executing program 3 (id=1551):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200fffff1"], 0x50)
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r5})

kernel console output (not intermixed with test programs):

9186] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  151.735694][ T9186] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.747903][ T9186] 8021q: adding VLAN 0 to HW filter on device team0
[  151.854891][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.858179][ T7850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.880705][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.884073][ T7850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.927354][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'.
[  151.943327][ T9286] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  152.149413][ T9186] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.192415][ T9186] veth0_vlan: entered promiscuous mode
[  152.200122][ T9186] veth1_vlan: entered promiscuous mode
[  152.218640][ T9186] veth0_macvtap: entered promiscuous mode
[  152.222768][ T9186] veth1_macvtap: entered promiscuous mode
[  152.234884][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.242580][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.251994][ T9186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.255879][ T9186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.260030][ T9186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.265034][ T9186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.340274][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.343355][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.415744][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.419758][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.818524][ T9330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.908727][ T9331] pim6reg1: entered promiscuous mode
[  152.910956][ T9331] pim6reg1: entered allmulticast mode
[  153.011901][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'.
[  153.018357][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'.
[  153.023369][ T9340] netlink: 46 bytes leftover after parsing attributes in process `syz.0.875'.
[  153.348843][ T9367] syzkaller1: entered promiscuous mode
[  153.350663][ T9367] syzkaller1: entered allmulticast mode
[  153.354977][ T9367] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  153.401178][ T9373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'.
[  153.558669][ T9383] netlink: 'syz.0.888': attribute type 6 has an invalid length.
[  153.616265][ T9390] netlink: 312 bytes leftover after parsing attributes in process `syz.3.890'.
[  153.699611][ T9394] syzkaller0: entered allmulticast mode
[  153.797234][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'.
[  153.800504][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.894'.
[  153.919018][ T9407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.895'.
[  153.933257][ T9407] tipc: New replicast peer: 255.255.255.83
[  153.936716][ T9407] tipc: Enabled bearer <udp:>, priority 10
[  154.155985][ T8804] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.392415][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.396594][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.407090][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.411845][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.415650][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  156.074650][ T8804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.176410][ T8804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.202322][ T9426] __nla_validate_parse: 1 callbacks suppressed
[  156.202336][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.901'.
[  156.244523][ T8804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.254239][ T9426] netlink: 'syz.3.901': attribute type 1 has an invalid length.
[  156.438877][ T9421] chnl_net:caif_netlink_parms(): no params data found
[  156.449955][ T8804] bridge_slave_1: left allmulticast mode
[  156.452367][ T8804] bridge_slave_1: left promiscuous mode
[  156.457370][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.465483][ T8804] bridge_slave_0: left allmulticast mode
[  156.468807][ T8804] bridge_slave_0: left promiscuous mode
[  156.474275][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.856568][ T8804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.861989][ T8804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.866508][ T8804] bond0 (unregistering): Released all slaves
[  157.006101][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.009340][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.012556][ T9421] bridge_slave_0: entered allmulticast mode
[  157.016111][ T9421] bridge_slave_0: entered promiscuous mode
[  157.019687][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.022253][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.026804][ T9421] bridge_slave_1: entered allmulticast mode
[  157.030458][ T9421] bridge_slave_1: entered promiscuous mode
[  157.077146][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.083560][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.108242][ T9421] team0: Port device team_slave_0 added
[  157.120768][ T9421] team0: Port device team_slave_1 added
[  157.126328][ T8804] hsr_slave_0: left promiscuous mode
[  157.129005][ T8804] hsr_slave_1: left promiscuous mode
[  157.131803][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.134836][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.138702][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.141626][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.159862][ T8804] veth1_macvtap: left promiscuous mode
[  157.162897][ T8804] veth0_macvtap: left promiscuous mode
[  157.168016][ T8804] veth1_vlan: left promiscuous mode
[  157.170412][ T8804] veth0_vlan: left promiscuous mode
[  157.547117][ T5841] Bluetooth: hci3: command tx timeout
[  157.573280][ T8804] team0 (unregistering): Port device team_slave_1 removed
[  157.616127][ T8804] team0 (unregistering): Port device team_slave_0 removed
[  158.027980][ T9455] bond0: option tlb_dynamic_lb: invalid value (9)
[  158.048590][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.062059][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.084130][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.089520][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.092192][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.112168][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.153347][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'.
[  158.156552][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'.
[  158.218576][ T9421] hsr_slave_0: entered promiscuous mode
[  158.222119][ T9421] hsr_slave_1: entered promiscuous mode
[  158.244121][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.247526][ T9421] Cannot create hsr debugfs directory
[  158.265026][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'.
[  158.347272][ T9470] bridge3: port 1(veth3) entered blocking state
[  158.350763][ T9470] bridge3: port 1(veth3) entered disabled state
[  158.353215][ T9470] veth3: entered allmulticast mode
[  158.362659][ T9470] veth3: entered promiscuous mode
[  158.374614][ T9473] bridge3: port 2(veth0_to_bond) entered blocking state
[  158.379620][ T9473] bridge3: port 2(veth0_to_bond) entered disabled state
[  158.383038][ T9473] veth0_to_bond: entered allmulticast mode
[  158.391131][ T9473] veth0_to_bond: entered promiscuous mode
[  158.493283][ T9477] Cannot find del_set index 2 as target
[  158.543087][ T9481] netlink: 32 bytes leftover after parsing attributes in process `syz.3.918'.
[  158.810171][ T9421] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  158.816029][ T9421] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  158.821954][ T9421] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  158.834097][ T9421] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  158.868500][ T9498] netlink: 5 bytes leftover after parsing attributes in process `syz.3.921'.
[  158.874859][ T9498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.923753][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.943407][ T9421] 8021q: adding VLAN 0 to HW filter on device team0
[  158.954079][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.957181][ T7850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.969048][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.972287][ T7850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.169184][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.206030][ T9421] veth0_vlan: entered promiscuous mode
[  159.215310][ T9421] veth1_vlan: entered promiscuous mode
[  159.232639][ T9421] veth0_macvtap: entered promiscuous mode
[  159.238943][ T9421] veth1_macvtap: entered promiscuous mode
[  159.249039][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.256751][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.263319][ T9421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.266739][ T9421] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.270316][ T9421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.273825][ T9421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.345763][ T7846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.353273][ T7846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.371573][ T7850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.375498][ T7850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.511539][ T9511] x_tables: unsorted underflow at hook 2
[  159.611374][ T9514] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  159.623852][   T55] Bluetooth: hci3: command tx timeout
[  159.666886][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'.
[  159.679145][ T9516] IPVS: Error connecting to the multicast addr
[  159.691393][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'.
[  159.861063][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'.
[  160.019055][ T8804] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  160.027845][ T8804] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  161.119233][ T9547] xt_CONNSECMARK: invalid mode: 254
[  161.340547][ T9549] netlink: 830 bytes leftover after parsing attributes in process `syz.0.936'.
[  161.443846][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'.
[  161.446925][ T9552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'.
[  161.571537][ T9555] batman_adv: batadv0: Adding interface: dummy0
[  161.583228][ T9555] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.594242][ T9555] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  161.750505][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'.
[  161.759862][ T9563] vlan2: entered promiscuous mode
[  161.762554][ T9563] dummy0: entered promiscuous mode
[  161.884830][ T9565] xt_hashlimit: size too large, truncated to 1048576
[  162.003050][ T9565] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.941'.
[  162.154065][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'.
[  162.204412][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'.
[  162.504039][   T55] Bluetooth: hci2: command tx timeout
[  162.530743][ T9585] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  162.813798][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  162.817513][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  162.831141][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  163.249452][ T9618] netlink: 'syz.3.961': attribute type 1 has an invalid length.
[  163.252856][ T9619] netlink: 'syz.3.961': attribute type 1 has an invalid length.
[  163.381955][ T9627] team0: Port device team_slave_0 removed
[  163.624842][ T9635] pimreg3: entered allmulticast mode
[  163.630801][ T9634] pimreg3: left allmulticast mode
[  163.796480][ T9644] xt_TPROXY: Can be used only with -p tcp or -p udp
[  164.013710][ T9655] netlink: 'syz.3.973': attribute type 9 has an invalid length.
[  164.055221][ T9656] netlink: 'syz.3.973': attribute type 9 has an invalid length.
[  164.141880][ T9664] netlink: 'syz.0.975': attribute type 39 has an invalid length.
[  164.229768][ T9668] netlink: 'syz.3.978': attribute type 8 has an invalid length.
[  164.786775][ T9694] netlink: 'syz.3.987': attribute type 21 has an invalid length.
[  165.032750][ T9708] batman_adv: batadv0: Removing interface: dummy0
[  165.037657][ T9708] bond3: (slave gretap2): Releasing active interface
[  165.042905][ T9708] bond4: (slave bridge2): Releasing active interface
[  165.046554][ T9708] bridge2: left promiscuous mode
[  165.050095][ T9708] bridge2: left allmulticast mode
[  165.056952][ T9702] netlink: 'syz.0.990': attribute type 10 has an invalid length.
[  165.190410][ T9713] netlink: 'syz.0.991': attribute type 7 has an invalid length.
[  165.251792][ T9715] IPv6: sit1: Disabled Multicast RS
[  165.641773][ T9735] Cannot find add_set index 3 as target
[  165.778708][ T9740] netlink: 'syz.0.999': attribute type 4 has an invalid length.
[  165.928834][ T9751] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.367965][ T9781] __nla_validate_parse: 16 callbacks suppressed
[  167.367983][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'.
[  167.378182][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'.
[  168.570212][ T9805] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1021'.
[  168.800905][ T9823] xt_policy: output policy not valid in PREROUTING and INPUT
[  169.784755][ T9830] validate_nla: 4 callbacks suppressed
[  169.784773][ T9830] netlink: 'syz.0.1027': attribute type 10 has an invalid length.
[  170.996456][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'.
[  171.126105][ T9852] netlink: 'syz.0.1033': attribute type 6 has an invalid length.
[  171.352602][ T9862] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[  171.408147][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'.
[  171.412836][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'.
[  171.419284][ T9867] openvswitch: netlink: Missing key (keys=40, expected=80)
[  171.422426][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  171.475093][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'.
[  171.534984][ T9874] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  171.739819][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'.
[  171.744033][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'.
[  171.748159][ T9885] netlink: 'syz.0.1041': attribute type 5 has an invalid length.
[  171.895331][ T9893] netlink: 'syz.0.1043': attribute type 23 has an invalid length.
[  173.056820][ T9906] syz.0.1048: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  173.063834][ T9906] CPU: 0 UID: 0 PID: 9906 Comm: syz.0.1048 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  173.063846][ T9906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.063851][ T9906] Call Trace:
[  173.063855][ T9906]  <TASK>
[  173.063859][ T9906]  dump_stack_lvl+0x189/0x250
[  173.063875][ T9906]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.063884][ T9906]  ? __pfx__printk+0x10/0x10
[  173.063895][ T9906]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.063906][ T9906]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.063917][ T9906]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  173.063928][ T9906]  warn_alloc+0x214/0x310
[  173.063942][ T9906]  ? __pfx_warn_alloc+0x10/0x10
[  173.063957][ T9906]  ? __get_vm_area_node+0x28f/0x300
[  173.063967][ T9906]  ? xskq_create+0xbf/0x170
[  173.063981][ T9906]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  173.064003][ T9906]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  173.064016][ T9906]  ? __kasan_kmalloc+0x93/0xb0
[  173.064027][ T9906]  vmalloc_user_noprof+0xad/0xf0
[  173.064039][ T9906]  ? xskq_create+0xbf/0x170
[  173.064050][ T9906]  xskq_create+0xbf/0x170
[  173.064063][ T9906]  xsk_init_queue+0xb0/0x110
[  173.064075][ T9906]  xsk_setsockopt+0x4de/0x710
[  173.064087][ T9906]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.064101][ T9906]  ? aa_sock_opt_perm+0x74/0x110
[  173.064113][ T9906]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  173.064126][ T9906]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.064137][ T9906]  do_sock_setsockopt+0x25a/0x3e0
[  173.064148][ T9906]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  173.064160][ T9906]  ? __fget_files+0x2a/0x420
[  173.064175][ T9906]  __x64_sys_setsockopt+0x18b/0x220
[  173.064187][ T9906]  do_syscall_64+0xfa/0x3b0
[  173.064194][ T9906]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.064205][ T9906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.064212][ T9906]  ? exc_page_fault+0x9f/0xf0
[  173.064224][ T9906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.064232][ T9906] RIP: 0033:0x7fce0078e929
[  173.064241][ T9906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.064249][ T9906] RSP: 002b:00007fce01559038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  173.064258][ T9906] RAX: ffffffffffffffda RBX: 00007fce009b5fa0 RCX: 00007fce0078e929
[  173.064263][ T9906] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  173.064268][ T9906] RBP: 00007fce00810b39 R08: 0000000000000004 R09: 0000000000000000
[  173.064273][ T9906] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  173.064277][ T9906] R13: 0000000000000000 R14: 00007fce009b5fa0 R15: 00007fffb687fd48
[  173.064289][ T9906]  </TASK>
[  173.064292][ T9906] Mem-Info:
[  173.163724][ T9906] active_anon:13686 inactive_anon:0 isolated_anon:0
[  173.163724][ T9906]  active_file:10776 inactive_file:38265 isolated_file:0
[  173.163724][ T9906]  unevictable:1768 dirty:22 writeback:0
[  173.163724][ T9906]  slab_reclaimable:10590 slab_unreclaimable:76980
[  173.163724][ T9906]  mapped:23126 shmem:2595 pagetables:971
[  173.163724][ T9906]  sec_pagetables:0 bounce:0
[  173.163724][ T9906]  kernel_misc_reclaimable:0
[  173.163724][ T9906]  free:239341 free_pcp:19852 free_cma:0
[  173.179579][ T9906] Node 0 active_anon:14184kB inactive_anon:0kB active_file:4760kB inactive_file:48172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30508kB dirty:72kB writeback:0kB shmem:5504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5180kB pagetables:1696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.191061][ T9906] Node 1 active_anon:40560kB inactive_anon:0kB active_file:38344kB inactive_file:104888kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:61996kB dirty:16kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7632kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.203162][ T9906] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  173.212770][ T9906] lowmem_reserve[]: 0 812 812 812 812
[  173.214914][ T9906] Node 0 DMA32 free:323780kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14184kB inactive_anon:0kB active_file:4760kB inactive_file:48172kB unevictable:3536kB writepending:72kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:35992kB local_pcp:20032kB free_cma:0kB
[  173.225969][ T9906] lowmem_reserve[]: 0 0 0 0 0
[  173.227948][ T9906] Node 1 DMA32 free:451932kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:6684kB local_pcp:796kB free_cma:0kB
[  173.239380][ T9906] lowmem_reserve[]: 0 0 854 854 854
[  173.241316][ T9906] Node 1 Normal free:166292kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40560kB inactive_anon:0kB active_file:38344kB inactive_file:104888kB unevictable:3536kB writepending:16kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36604kB local_pcp:20892kB free_cma:0kB
[  173.253177][ T9906] lowmem_reserve[]: 0 0 0 0 0
[  173.255073][ T9906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  173.259349][ T9906] Node 0 DMA32: 559*4kB (M) 135*8kB (UME) 273*16kB (UME) 338*32kB (UME) 339*64kB (UME) 143*128kB (UME) 68*256kB (UM) 22*512kB (UM) 5*1024kB (UME) 1*2048kB (U) 56*4096kB (UM) = 323716kB
[  173.266026][ T9906] Node 1 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (UM) 4*32kB (M) 4*64kB (M) 1*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 2*2048kB (M) 109*4096kB (M) = 451932kB
[  173.271035][ T9906] Node 1 Normal: 365*4kB (UM) 336*8kB (UME) 290*16kB (UME) 460*32kB (UME) 271*64kB (UME) 224*128kB (UME) 36*256kB (UME) 25*512kB (UME) 15*1024kB (UM) 11*2048kB (UME) 9*4096kB (M) = 166292kB
[  173.278457][ T9906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.281924][ T9906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.284967][ T9906] 51636 total pagecache pages
[  173.286508][ T9906] 0 pages in swap cache
[  173.287826][ T9906] Free swap  = 124996kB
[  173.289140][ T9906] Total swap = 124996kB
[  173.290526][ T9906] 786301 pages RAM
[  173.291969][ T9906] 0 pages HighMem/MovableOnly
[  173.293437][ T9906] 241085 pages reserved
[  173.295039][ T9906] 0 pages cma reserved
[  173.378416][ T9914] __nla_validate_parse: 1 callbacks suppressed
[  173.378429][ T9914] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1050'.
[  173.487450][ T9920] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1052'.
[  173.519373][ T9922] netlink: 'syz.3.1053': attribute type 4 has an invalid length.
[  173.930208][ T9966] xt_limit: Overflow, try lower: 0/0
[  174.668985][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'.
[  174.759283][ T9986] team0 (unregistering): Port device team_slave_1 removed
[  174.868898][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'.
[  174.896998][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'.
[  175.012532][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.023129][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.027803][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.035538][ T9996] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  175.050093][ T9996] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  175.072430][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.081184][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.086515][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.090942][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.096385][ T9996] wg1 speed is unknown, defaulting to 1000
[  175.271363][T10007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1073'.
[  175.278191][T10007] lo speed is unknown, defaulting to 1000
[  175.280549][T10007] lo speed is unknown, defaulting to 1000
[  175.283299][T10007] lo speed is unknown, defaulting to 1000
[  175.292609][T10007] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  175.304729][T10007] lo speed is unknown, defaulting to 1000
[  175.316679][T10007] lo speed is unknown, defaulting to 1000
[  175.321109][T10007] lo speed is unknown, defaulting to 1000
[  175.324765][T10007] lo speed is unknown, defaulting to 1000
[  175.338332][T10007] lo speed is unknown, defaulting to 1000
[  175.377578][T10015] netlink: 'syz.0.1075': attribute type 1 has an invalid length.
[  175.383379][   T33] audit: type=1800 audit(1752636642.595:3): pid=10015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1075" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2694 res=0 errno=0
[  175.406930][   T33] audit: type=1804 audit(1752636642.615:4): pid=10015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1075" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2694 res=1 errno=0
[  175.513130][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'.
[  175.522802][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'.
[  175.666113][T10039] xt_hashlimit: size too large, truncated to 1048576
[  175.737631][T10044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1083'.
[  175.765633][T10039] xt_limit: Overflow, try lower: 262144/524288
[  175.829615][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'.
[  176.109187][T10053] wg1 speed is unknown, defaulting to 1000
[  176.113054][T10053] lo speed is unknown, defaulting to 1000
[  176.229335][T10066] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  176.361138][T10073] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  176.366684][T10073] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  176.410205][T10082] : renamed from vlan0
[  176.849186][T10114] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[  176.922015][T10122] netlink: 'syz.3.1107': attribute type 1 has an invalid length.
[  177.187201][T10147] netlink: 'syz.3.1113': attribute type 9 has an invalid length.
[  177.193781][T10147] netlink: 'syz.3.1113': attribute type 7 has an invalid length.
[  177.196407][T10147] netlink: 'syz.3.1113': attribute type 8 has an invalid length.
[  177.289696][T10156] xt_l2tp: v2 tid > 0xffff: 4294967295
[  177.331418][T10159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.439165][T10162] netlink: zone id is out of range
[  177.441225][T10162] netlink: del zone limit has 4 unknown bytes
[  178.408059][T10186] vxcan0: entered promiscuous mode
[  178.474633][T10193] __nla_validate_parse: 12 callbacks suppressed
[  178.474644][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'.
[  178.480409][T10193] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1129'.
[  178.490620][T10193] vlan0: entered allmulticast mode
[  178.493156][T10193] veth1: entered allmulticast mode
[  178.499902][T10193] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1129'.
[  178.798923][T10204] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1132'.
[  179.199869][T10216] netlink: 'syz.3.1137': attribute type 6 has an invalid length.
[  179.618386][T10245] syzkaller1: entered promiscuous mode
[  179.620730][T10245] syzkaller1: entered allmulticast mode
[  179.830352][T10266] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1152'.
[  179.836309][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'.
[  179.842494][T10266] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1152'.
[  179.892934][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'.
[  180.149026][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'.
[  180.201978][T10291] bridge5: port 1(ip6gretap1) entered blocking state
[  180.205645][T10291] bridge5: port 1(ip6gretap1) entered disabled state
[  180.208497][T10291] ip6gretap1: entered allmulticast mode
[  180.211988][T10291] ip6gretap1: entered promiscuous mode
[  180.289295][T10291] veth5: entered promiscuous mode
[  180.291995][T10291] bridge5: port 2(veth5) entered blocking state
[  180.297830][T10291] bridge5: port 2(veth5) entered disabled state
[  180.301003][T10291] veth5: entered allmulticast mode
[  180.482336][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'.
[  180.566659][T10308] netlink: 'syz.3.1165': attribute type 1 has an invalid length.
[  180.820533][T10343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.829143][T10343] syzkaller0: Caught tx_queue_len zero misconfig
[  181.057287][T10364] netlink: 'syz.0.1179': attribute type 1 has an invalid length.
[  181.077796][T10369] netlink: zone id is out of range
[  181.250193][T10381] netlink: 'syz.0.1185': attribute type 2 has an invalid length.
[  182.059072][T10399] tipc: Started in network mode
[  182.061182][T10399] tipc: Node identity 224ba5e0ba67, cluster identity 4711
[  182.066739][T10399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.075418][T10398] tipc: Disabling bearer <eth:syzkaller0>
[  182.598907][T10431] xt_hashlimit: max too large, truncated to 1048576
[  182.843944][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.846273][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.848731][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.851299][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.855674][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.858781][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.861083][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.864537][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.867201][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  182.869740][T10447] xt_HMARK: proto mask must be zero with L3 mode
[  184.170726][T10477] __nla_validate_parse: 13 callbacks suppressed
[  184.170743][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1212'.
[  184.436325][T10488] netlink: 'syz.0.1214': attribute type 2 has an invalid length.
[  184.449151][T10488] : entered promiscuous mode
[  185.075175][T10510] macvtap0: entered allmulticast mode
[  185.077144][T10510] netlink: 'syz.0.1220': attribute type 1 has an invalid length.
[  185.079790][T10510] netlink: 'syz.0.1220': attribute type 2 has an invalid length.
[  185.086631][T10510] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002
[  185.184805][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.189510][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.193136][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.197324][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.201248][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.205919][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.210751][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.217762][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.221429][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  185.906013][T10551] netlink: 'syz.0.1233': attribute type 9 has an invalid length.
[  186.828765][T10558] netlink: 'syz.0.1236': attribute type 5 has an invalid length.
[  187.135999][T10582] netlink: zone id is out of range
[  187.145596][T10582] netlink: zone id is out of range
[  187.148440][T10582] netlink: zone id is out of range
[  187.150875][T10582] netlink: zone id is out of range
[  187.153221][T10582] netlink: zone id is out of range
[  187.157078][T10582] netlink: zone id is out of range
[  187.159789][T10582] netlink: zone id is out of range
[  187.165073][T10582] netlink: zone id is out of range
[  187.169741][T10582] netlink: zone id is out of range
[  187.172954][T10582] netlink: zone id is out of range
[  187.559882][T10604] wg1 speed is unknown, defaulting to 1000
[  187.565179][T10604] lo speed is unknown, defaulting to 1000
[  187.585181][T10603] wg1 speed is unknown, defaulting to 1000
[  187.591349][T10603] lo speed is unknown, defaulting to 1000
[  188.988666][T10625] nbd: must specify a device to reconfigure
[  189.114339][T10632] x9: renamed from bridge_slave_0
[  189.227904][T10634] __nla_validate_parse: 65 callbacks suppressed
[  189.227917][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1259'.
[  189.369516][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'.
[  189.378436][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1261'.
[  189.428470][T10644] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  189.515864][T10648] netlink: 'syz.0.1264': attribute type 1 has an invalid length.
[  189.572702][T10650] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1265'.
[  189.578700][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1265'.
[  189.756370][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'.
[  190.885411][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'.
[  190.913780][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  190.916977][   T55] Bluetooth: hci0: command 0x0401 tx timeout
[  191.178027][T10680] netlink: 'syz.3.1275': attribute type 1 has an invalid length.
[  191.180826][T10680] netlink: 15638 bytes leftover after parsing attributes in process `syz.3.1275'.
[  191.496082][T10696] sctp: [Deprecated]: syz.3.1280 (pid 10696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.496082][T10696] Use struct sctp_sack_info instead
[  191.765911][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'.
[  192.637659][T10716] unknown channel width for channel at 909000KHz?
[  192.640951][T10716] unknown channel width for channel at 909000KHz?
[  193.408354][T10751] gretap0: left promiscuous mode
[  193.434891][T10751] batadv_slave_0: left promiscuous mode
[  193.440070][T10751] geneve2: left promiscuous mode
[  193.442669][T10751] tipc: Resetting bearer <eth:syzkaller0>
[  193.461891][T10751] syzkaller0: left promiscuous mode
[  193.468301][T10751] syzkaller0: left allmulticast mode
[  193.472797][T10751] bond1: left promiscuous mode
[  193.476785][T10751] bond4: left promiscuous mode
[  193.479204][T10751] bond4: left allmulticast mode
[  193.481955][T10751] macvtap0: left allmulticast mode
[  193.498318][T10751] vlan0: left allmulticast mode
[  193.503628][T10751] veth1: left allmulticast mode
[  193.702489][T10774] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1299'.
[  193.958642][   T13] dummy0: left allmulticast mode
[  193.961261][   T13] dummy0: left promiscuous mode
[  193.972640][   T13] bridge0: port 3(dummy0) entered disabled state
[  193.978925][   T13] bridge_slave_1: left allmulticast mode
[  193.981257][   T13] bridge_slave_1: left promiscuous mode
[  193.985670][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.992100][   T13] bridge_slave_0: left allmulticast mode
[  193.995726][   T13] bridge_slave_0: left promiscuous mode
[  193.998190][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.168648][   T13] erspan0 (unregistering): left promiscuous mode
[  194.222055][   T13] bond2 (unregistering): (slave gretap2): Releasing active interface
[  194.225300][   T13] bridge3 (unregistering): entered promiscuous mode
[  194.238849][   T13] bond3 (unregistering): (slave gretap3): Releasing backup interface
[  194.458350][   T13] bond2 (unregistering): (slave bridge3): Releasing active interface
[  194.462204][   T13] bridge3 (unregistering): left promiscuous mode
[  194.508527][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.512333][   T13] bond0 (unregistering): Released all slaves
[  194.597828][   T13] bond1 (unregistering): Released all slaves
[  194.682328][   T13] bond2 (unregistering): Released all slaves
[  194.774245][   T13] bond3 (unregistering): Released all slaves
[  194.785483][T10798] netlink: 'syz.3.1308': attribute type 3 has an invalid length.
[  194.788758][T10798] __nla_validate_parse: 2 callbacks suppressed
[  194.788771][T10798] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1308'.
[  194.892966][   T13] tipc: Disabling bearer <udp:syz2>
[  194.897519][   T13] tipc: Left network mode
[  195.160497][   T13] hsr_slave_0: left promiscuous mode
[  195.174928][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.179443][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.703305][   T13] team0 (unregistering): Port device team_slave_1 removed
[  195.772251][   T13] team0 (unregistering): Port device team_slave_0 removed
[  196.444949][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1317'.
[  196.449525][T10829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1317'.
[  196.470275][   T13] IPVS: stop unused estimator thread 0...
[  196.620145][T10843] netlink: 'syz.0.1321': attribute type 29 has an invalid length.
[  196.637888][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'.
[  196.722730][T10843] team0: Mode changed to "broadcast"
[  196.733927][T10843] team0: Unable to change to the same mode the team is in
[  196.922065][T10860] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1326'.
[  197.148524][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  197.390471][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  197.395305][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'.
[  197.399231][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  197.538363][T10895] wg1 speed is unknown, defaulting to 1000
[  197.542201][T10895] lo speed is unknown, defaulting to 1000
[  197.957263][T10920] batadv_slave_1: entered promiscuous mode
[  198.053416][T10919] batadv_slave_1: left promiscuous mode
[  198.159554][T10937] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.163230][T10937] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.172408][T10937] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.177060][T10937] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.181593][T10937] geneve1: entered promiscuous mode
[  198.183595][T10937] geneve1: entered allmulticast mode
[  198.250135][T10939] netlink: 'syz.0.1350': attribute type 4 has an invalid length.
[  198.337327][T10943] netlink: 'syz.0.1352': attribute type 9 has an invalid length.
[  198.470256][T10957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'.
[  199.473115][T10989] netlink: 'syz.0.1365': attribute type 10 has an invalid length.
[  199.497000][T10989] veth0_vlan: left promiscuous mode
[  199.499698][T10989] veth0_vlan: entered promiscuous mode
[  199.503053][T10989] team0: Device veth0_vlan failed to register rx_handler
[  199.681404][ T5678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.805065][ T5678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.897964][ T5678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.971183][ T5678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.053883][ T5678] bridge_slave_1: left allmulticast mode
[  200.056096][ T5678] bridge_slave_1: left promiscuous mode
[  200.058723][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.066782][ T5678] bridge_slave_0: left allmulticast mode
[  200.068703][ T5678] bridge_slave_0: left promiscuous mode
[  200.070708][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.391885][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.398550][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.405332][ T5678] bond0 (unregistering): Released all slaves
[  200.663162][ T5678] hsr_slave_0: left promiscuous mode
[  200.667645][ T5678] hsr_slave_1: left promiscuous mode
[  200.669922][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.672408][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.675437][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.677927][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.689940][ T5678] veth1_macvtap: left promiscuous mode
[  200.691826][ T5678] veth0_macvtap: left promiscuous mode
[  200.693900][ T5678] veth1_vlan: left promiscuous mode
[  200.695799][ T5678] veth0_vlan: left promiscuous mode
[  200.991452][T11012] netlink: 'syz.3.1372': attribute type 10 has an invalid length.
[  201.090984][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.104481][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.116079][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.126969][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.139568][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  201.258099][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  201.289018][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  201.643277][T11012] bridge_slave_1: left allmulticast mode
[  201.645858][T11012] bridge_slave_1: left promiscuous mode
[  201.648366][T11012] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.659512][T11012] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  201.718473][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'.
[  201.751349][T11017] wg1 speed is unknown, defaulting to 1000
[  201.757495][T11017] lo speed is unknown, defaulting to 1000
[  201.826615][T11026] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1374'.
[  201.832985][T11026] net_ratelimit: 5 callbacks suppressed
[  201.832999][T11026] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  201.841329][T11026] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  202.036326][T11017] chnl_net:caif_netlink_parms(): no params data found
[  202.139423][T11017] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.142881][T11017] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.146427][T11017] bridge_slave_0: entered allmulticast mode
[  202.150520][T11017] bridge_slave_0: entered promiscuous mode
[  202.164179][T11017] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.171801][T11017] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.178833][T11053] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1380'.
[  202.182077][T11017] bridge_slave_1: entered allmulticast mode
[  202.198415][T11017] bridge_slave_1: entered promiscuous mode
[  202.270815][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.284023][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.348789][T11017] team0: Port device team_slave_0 added
[  202.354907][T11017] team0: Port device team_slave_1 added
[  202.389706][T11017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.392875][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.406419][T11017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.412862][T11017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.416918][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.430627][T11017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.484799][T11017] hsr_slave_0: entered promiscuous mode
[  202.488168][T11017] hsr_slave_1: entered promiscuous mode
[  202.718674][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  202.723673][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  202.730220][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  202.735540][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  202.740698][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  202.831577][T11066] wg1 speed is unknown, defaulting to 1000
[  202.836417][T11066] lo speed is unknown, defaulting to 1000
[  202.855865][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'.
[  203.057152][T11066] chnl_net:caif_netlink_parms(): no params data found
[  203.125653][T11087] vxcan1: entered allmulticast mode
[  203.150116][T11087] vxcan1: left allmulticast mode
[  203.177954][T11017] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  203.242913][ T5838] Bluetooth: hci3: command tx timeout
[  203.256303][T11017] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  203.266434][T11066] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.269659][T11066] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.273205][T11066] bridge_slave_0: entered allmulticast mode
[  203.280472][T11066] bridge_slave_0: entered promiscuous mode
[  203.289036][T11017] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  203.300716][T11066] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.306911][T11066] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.310006][T11066] bridge_slave_1: entered allmulticast mode
[  203.315315][T11066] bridge_slave_1: entered promiscuous mode
[  203.320603][T11017] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  203.369423][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.385572][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.442290][T11066] team0: Port device team_slave_0 added
[  203.449118][T11066] team0: Port device team_slave_1 added
[  203.506149][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.509516][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.522361][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.538935][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.542049][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.557119][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.587823][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1392'.
[  203.612015][T11066] hsr_slave_0: entered promiscuous mode
[  203.616434][T11066] hsr_slave_1: entered promiscuous mode
[  203.618720][T11066] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.621126][T11066] Cannot create hsr debugfs directory
[  203.661064][T11109] netlink: 'syz.3.1392': attribute type 1 has an invalid length.
[  203.674428][T11017] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.715530][T11017] 8021q: adding VLAN 0 to HW filter on device team0
[  203.729568][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.731905][ T7846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.751213][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.753738][ T7846] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.803324][T11066] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.858799][T11066] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.926064][T11066] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.982105][T11066] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.004868][T11017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.069182][T11017] veth0_vlan: entered promiscuous mode
[  204.140853][T11017] veth1_vlan: entered promiscuous mode
[  204.149804][T11066] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  204.160364][T11066] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  204.176441][T11066] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  204.207668][T11017] veth0_macvtap: entered promiscuous mode
[  204.223012][T11066] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  204.237969][T11017] veth1_macvtap: entered promiscuous mode
[  204.245231][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'.
[  204.257312][T11017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.272021][T11017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.283128][T11017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.286725][T11017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.289792][T11017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.292564][T11017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.403937][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.416339][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.450565][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.454176][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.477220][T11066] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.528068][T11066] 8021q: adding VLAN 0 to HW filter on device team0
[  204.580682][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.584352][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.600583][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.603008][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.749260][T11152] block nbd3: not configured, cannot reconfigure
[  204.752148][T11152] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1401'.
[  204.756861][T11152] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1401'.
[  204.808428][T11066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.824436][ T5838] Bluetooth: hci0: command tx timeout
[  204.859287][T11066] veth0_vlan: entered promiscuous mode
[  204.870418][T11066] veth1_vlan: entered promiscuous mode
[  204.906372][T11066] veth0_macvtap: entered promiscuous mode
[  204.912880][T11066] veth1_macvtap: entered promiscuous mode
[  205.030878][T11066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.050147][T11066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.060784][T11066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.074837][T11066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.079252][T11066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.087812][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'.
[  205.092303][T11066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.095709][T11159] openvswitch: netlink: Missing key (keys=40, expected=80)
[  205.202951][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.213347][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.254299][ T7850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.257540][ T7850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.428793][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.475976][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.519727][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.561585][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.600160][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.645121][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.711384][ T5678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.760595][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.809269][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.878207][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  205.917317][T11173] netlink: 'syz.3.1407': attribute type 11 has an invalid length.
[  206.571547][ T5678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.987384][T11179] netlink: 'syz.3.1408': attribute type 21 has an invalid length.
[  206.990843][T11179] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1408'.
[  207.160108][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  207.167533][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  207.172119][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  207.178260][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  207.183317][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  207.239435][T11182] wg1 speed is unknown, defaulting to 1000
[  207.244962][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  207.249918][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  207.256327][T11182] lo speed is unknown, defaulting to 1000
[  207.259637][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  207.268286][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  207.273376][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  207.304538][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'.
[  207.309888][ T5678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.327688][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'.
[  207.331757][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'.
[  207.352126][T11187] netlink: 'syz.3.1410': attribute type 7 has an invalid length.
[  207.406946][ T5678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.437231][T11184] wg1 speed is unknown, defaulting to 1000
[  207.450633][T11184] lo speed is unknown, defaulting to 1000
[  207.451955][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1412'.
[  207.480736][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1412'.
[  207.648073][ T5678] bridge_slave_1: left allmulticast mode
[  207.650822][ T5678] bridge_slave_1: left promiscuous mode
[  207.659199][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.667527][ T5678] bridge_slave_0: left allmulticast mode
[  207.669919][ T5678] bridge_slave_0: left promiscuous mode
[  207.673797][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.722102][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'.
[  208.100000][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.107264][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.112901][ T5678] bond0 (unregistering): Released all slaves
[  208.128233][T11182] chnl_net:caif_netlink_parms(): no params data found
[  208.347655][T11182] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.352053][T11182] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.358654][T11182] bridge_slave_0: entered allmulticast mode
[  208.363349][T11182] bridge_slave_0: entered promiscuous mode
[  208.404488][T11182] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.407634][T11182] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.410798][T11182] bridge_slave_1: entered allmulticast mode
[  208.425051][T11182] bridge_slave_1: entered promiscuous mode
[  208.498889][T11182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.501993][T11184] chnl_net:caif_netlink_parms(): no params data found
[  208.525980][ T5678] hsr_slave_0: left promiscuous mode
[  208.528625][ T5678] hsr_slave_1: left promiscuous mode
[  208.534499][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.537701][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.542255][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.549433][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.567097][ T5678] veth1_macvtap: left promiscuous mode
[  208.569529][ T5678] veth0_macvtap: left promiscuous mode
[  208.572374][ T5678] veth1_vlan: left promiscuous mode
[  208.581014][ T5678] veth0_vlan: left promiscuous mode
[  208.617965][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'.
[  208.988663][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  209.014605][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  209.238572][ T5841] Bluetooth: hci0: command tx timeout
[  209.303758][ T5841] Bluetooth: hci3: command tx timeout
[  209.471509][T11182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.545080][T11182] team0: Port device team_slave_0 added
[  209.567849][T11223] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  209.612584][T11182] team0: Port device team_slave_1 added
[  209.737123][T11184] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.741370][T11184] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.747285][T11184] bridge_slave_0: entered allmulticast mode
[  209.751325][T11184] bridge_slave_0: entered promiscuous mode
[  209.757973][T11182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.761297][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.785652][T11182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.792182][T11184] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.796701][T11184] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.800061][T11184] bridge_slave_1: entered allmulticast mode
[  209.805696][T11184] bridge_slave_1: entered promiscuous mode
[  209.814611][T11182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.817610][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.831809][T11182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.892949][T11233] wg1 speed is unknown, defaulting to 1000
[  209.900097][T11184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.926725][T11233] lo speed is unknown, defaulting to 1000
[  209.938429][T11184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.962533][T11182] hsr_slave_0: entered promiscuous mode
[  209.968294][T11182] hsr_slave_1: entered promiscuous mode
[  210.035708][T11184] team0: Port device team_slave_0 added
[  210.048981][T11184] team0: Port device team_slave_1 added
[  210.120778][T11184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.123917][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.135685][T11184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.161668][T11184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.165657][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.178906][T11184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.290494][T11184] hsr_slave_0: entered promiscuous mode
[  210.295107][T11184] hsr_slave_1: entered promiscuous mode
[  210.298447][T11184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.301602][T11184] Cannot create hsr debugfs directory
[  210.331750][ T5678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.458358][ T5678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.545860][ T5678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.576464][T11238] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  210.654845][ T5678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.711812][T11240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1423'.
[  210.821142][ T5678] bridge_slave_1: left allmulticast mode
[  210.826564][ T5678] bridge_slave_1: left promiscuous mode
[  210.829244][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.840973][ T5678] bridge_slave_0: left allmulticast mode
[  210.843390][ T5678] bridge_slave_0: left promiscuous mode
[  210.847723][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.198298][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.205211][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.211029][ T5678] bond0 (unregistering): Released all slaves
[  211.313729][ T5841] Bluetooth: hci0: command tx timeout
[  211.384084][ T5841] Bluetooth: hci3: command tx timeout
[  211.399494][T11182] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  211.414291][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'.
[  211.419505][T11182] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  211.437236][T11182] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  211.499938][T11182] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  211.572046][ T5678] hsr_slave_0: left promiscuous mode
[  211.574792][ T5678] hsr_slave_1: left promiscuous mode
[  211.577397][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.579902][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.586039][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.589467][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.600799][ T5678] veth1_macvtap: left promiscuous mode
[  211.602859][ T5678] veth0_macvtap: left promiscuous mode
[  211.605226][ T5678] veth1_vlan: left promiscuous mode
[  211.607082][ T5678] veth0_vlan: left promiscuous mode
[  211.985302][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  212.020036][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  212.329428][T11254] lo speed is unknown, defaulting to 1000
[  212.358289][T11254] lo speed is unknown, defaulting to 1000
[  212.366921][T11254] lo speed is unknown, defaulting to 1000
[  212.397227][T11254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  212.420285][T11254] lo speed is unknown, defaulting to 1000
[  212.436533][T11254] lo speed is unknown, defaulting to 1000
[  212.440403][T11254] lo speed is unknown, defaulting to 1000
[  212.460656][T11254] lo speed is unknown, defaulting to 1000
[  212.471509][T11182] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.475357][T11254] lo speed is unknown, defaulting to 1000
[  212.478656][T11254] lo speed is unknown, defaulting to 1000
[  212.507142][T11182] 8021q: adding VLAN 0 to HW filter on device team0
[  212.523450][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.526672][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.537668][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.540764][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.602827][T11257] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  212.607400][T11257] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  212.610618][T11257] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  212.614060][T11257] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  212.622287][T11184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  212.627993][T11184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  212.638823][T11184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  212.644071][T11184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  212.760805][T11184] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.841364][T11184] 8021q: adding VLAN 0 to HW filter on device team0
[  212.868157][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.871084][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.893147][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.895817][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.914402][T11182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.008172][T11182] veth0_vlan: entered promiscuous mode
[  213.018039][T11182] veth1_vlan: entered promiscuous mode
[  213.041641][T11182] veth0_macvtap: entered promiscuous mode
[  213.048164][T11182] veth1_macvtap: entered promiscuous mode
[  213.059899][T11182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.070321][T11182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.077697][T11182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.080546][T11182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.085689][T11182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.088631][T11182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.127154][T11184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.171412][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.184193][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.209100][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.209946][T11184] veth0_vlan: entered promiscuous mode
[  213.212290][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.227056][T11184] veth1_vlan: entered promiscuous mode
[  213.245450][T11184] veth0_macvtap: entered promiscuous mode
[  213.251439][T11184] veth1_macvtap: entered promiscuous mode
[  213.291567][T11184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.301381][T11184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.313073][T11184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.316115][T11184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.319270][T11184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.328281][T11184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.411333][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.416316][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.439183][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.441817][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.464193][ T5841] Bluetooth: hci3: command tx timeout
[  213.847274][T11288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1432'.
[  214.007449][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1434'.
[  214.011647][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'.
[  214.766997][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.985742][T11302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1435'.
[  214.989863][T11302] netlink: 'syz.3.1435': attribute type 7 has an invalid length.
[  215.003997][T11302] netlink: 'syz.3.1435': attribute type 8 has an invalid length.
[  215.008055][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'.
[  215.058545][T11304] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  215.232408][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  215.241453][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  215.245593][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  215.250987][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  215.254963][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  215.275179][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  215.281314][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  215.288352][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  215.292798][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  215.297393][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  215.315577][T11307] wg1 speed is unknown, defaulting to 1000
[  215.328982][T11307] lo speed is unknown, defaulting to 1000
[  215.334789][T11307] lo speed is unknown, defaulting to 1000
[  215.365706][T11309] wg1 speed is unknown, defaulting to 1000
[  215.368421][T11309] lo speed is unknown, defaulting to 1000
[  215.371119][T11309] lo speed is unknown, defaulting to 1000
[  215.574505][T11307] chnl_net:caif_netlink_parms(): no params data found
[  215.660209][T11309] chnl_net:caif_netlink_parms(): no params data found
[  215.692514][T11307] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.696124][T11307] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.699237][T11307] bridge_slave_0: entered allmulticast mode
[  215.705379][T11307] bridge_slave_0: entered promiscuous mode
[  215.724784][T11307] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.727988][T11307] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.731272][T11307] bridge_slave_1: entered allmulticast mode
[  215.737004][T11307] bridge_slave_1: entered promiscuous mode
[  215.796775][T11307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.820384][T11307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.857618][T11309] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.860338][T11309] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.863400][T11309] bridge_slave_0: entered allmulticast mode
[  215.866709][T11309] bridge_slave_0: entered promiscuous mode
[  215.880260][T11309] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.882873][T11309] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.886716][T11309] bridge_slave_1: entered allmulticast mode
[  215.890705][T11309] bridge_slave_1: entered promiscuous mode
[  215.899783][T11307] team0: Port device team_slave_0 added
[  215.907747][T11307] team0: Port device team_slave_1 added
[  215.966279][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.970876][T11307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.974263][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.986452][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.994861][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.999719][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.002414][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.016446][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.062754][T11309] team0: Port device team_slave_0 added
[  216.068756][T11309] team0: Port device team_slave_1 added
[  216.112539][T11307] hsr_slave_0: entered promiscuous mode
[  216.115794][T11307] hsr_slave_1: entered promiscuous mode
[  216.118223][T11307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.120866][T11307] Cannot create hsr debugfs directory
[  216.132836][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.139515][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.151666][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.171220][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.181500][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.185537][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.194806][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.276508][T11309] hsr_slave_0: entered promiscuous mode
[  216.279195][T11309] hsr_slave_1: entered promiscuous mode
[  216.281368][T11309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.286837][T11309] Cannot create hsr debugfs directory
[  216.422134][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.446083][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1440'.
[  216.508748][T11307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.537768][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.586187][T11307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.638876][T11307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.681664][   T12] bridge_slave_1: left allmulticast mode
[  216.685943][   T12] bridge_slave_1: left promiscuous mode
[  216.688702][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.695657][   T12] bridge_slave_0: left allmulticast mode
[  216.697864][   T12] bridge_slave_0: left promiscuous mode
[  216.700144][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.767053][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1443'.
[  216.818356][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'.
[  217.005096][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.010310][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.014735][   T12] bond0 (unregistering): Released all slaves
[  217.040016][T11307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.304068][ T5838] Bluetooth: hci0: command tx timeout
[  217.334531][   T12] hsr_slave_0: left promiscuous mode
[  217.337560][   T12] hsr_slave_1: left promiscuous mode
[  217.341377][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.345182][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.348327][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.351093][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.366397][   T12] veth1_macvtap: left promiscuous mode
[  217.368838][   T12] veth0_macvtap: left promiscuous mode
[  217.371847][   T12] veth1_vlan: left promiscuous mode
[  217.374682][   T12] veth0_vlan: left promiscuous mode
[  217.384521][ T5838] Bluetooth: hci3: command tx timeout
[  217.734822][   T12] team0 (unregistering): Port device team_slave_1 removed
[  217.776061][   T12] team0 (unregistering): Port device team_slave_0 removed
[  218.199424][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'.
[  218.211162][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'.
[  218.397079][T11307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  218.430223][T11307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  218.454948][T11307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  218.465446][T11307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  218.564940][T11309] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  218.580693][T11309] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  218.600571][   T12] bridge_slave_1: left allmulticast mode
[  218.603004][   T12] bridge_slave_1: left promiscuous mode
[  218.605647][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.612073][   T12] bridge_slave_0: left allmulticast mode
[  218.614736][   T12] bridge_slave_0: left promiscuous mode
[  218.617268][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.971698][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.977491][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.982206][   T12] bond0 (unregistering): Released all slaves
[  218.988684][T11309] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  218.997480][T11309] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  219.070135][T11307] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.128112][T11307] 8021q: adding VLAN 0 to HW filter on device team0
[  219.150312][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.152955][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.159477][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.162645][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.287136][T11309] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.333364][   T12] hsr_slave_0: left promiscuous mode
[  219.342316][   T12] hsr_slave_1: left promiscuous mode
[  219.345758][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.348352][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.352303][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.360149][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.383116][   T12] veth1_macvtap: left promiscuous mode
[  219.385726][ T5838] Bluetooth: hci0: command tx timeout
[  219.388081][   T12] veth0_macvtap: left promiscuous mode
[  219.390500][   T12] veth1_vlan: left promiscuous mode
[  219.393004][   T12] veth0_vlan: left promiscuous mode
[  219.422643][T11398] __nla_validate_parse: 2 callbacks suppressed
[  219.422658][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'.
[  219.464453][ T5838] Bluetooth: hci3: command tx timeout
[  219.860209][   T12] team0 (unregistering): Port device team_slave_1 removed
[  219.894997][   T12] team0 (unregistering): Port device team_slave_0 removed
[  220.249951][T11307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.268664][T11309] 8021q: adding VLAN 0 to HW filter on device team0
[  220.288623][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.291973][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.305651][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.308702][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.381093][T11309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.413751][T11309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.558789][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.596400][T11419] vlan2: entered promiscuous mode
[  220.598623][T11419] vlan2: entered allmulticast mode
[  220.600629][T11419] hsr_slave_1: entered allmulticast mode
[  220.626260][T11307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.645281][T11309] veth0_vlan: entered promiscuous mode
[  220.657164][T11309] veth1_vlan: entered promiscuous mode
[  220.691522][T11307] veth0_vlan: entered promiscuous mode
[  220.702319][T11307] veth1_vlan: entered promiscuous mode
[  220.707502][T11309] veth0_macvtap: entered promiscuous mode
[  220.713414][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'.
[  220.715715][T11309] veth1_macvtap: entered promiscuous mode
[  220.782729][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.792116][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.800818][T11307] veth0_macvtap: entered promiscuous mode
[  220.808282][T11309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.811809][T11309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.823403][T11309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.829186][T11309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.834951][T11307] veth1_macvtap: entered promiscuous mode
[  220.871504][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.906621][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.935442][T11307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.939207][T11307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.942960][T11307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.950807][T11307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.971198][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.978836][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.020533][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.023204][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.079991][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.083132][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.149231][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.152743][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.175266][T11431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1464'.
[  221.656999][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.431049][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.449509][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  222.455439][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  222.459923][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  222.465612][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  222.469579][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  222.503056][T11471] wg1 speed is unknown, defaulting to 1000
[  222.508389][T11471] lo speed is unknown, defaulting to 1000
[  222.510906][T11471] lo speed is unknown, defaulting to 1000
[  222.617221][T11471] chnl_net:caif_netlink_parms(): no params data found
[  222.674695][T11471] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.677530][T11471] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.680113][T11471] bridge_slave_0: entered allmulticast mode
[  222.683089][T11471] bridge_slave_0: entered promiscuous mode
[  222.687929][T11471] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.691366][T11471] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.694977][T11471] bridge_slave_1: entered allmulticast mode
[  222.698930][T11471] bridge_slave_1: entered promiscuous mode
[  222.734467][T11471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.739553][T11471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.772193][T11471] team0: Port device team_slave_0 added
[  222.778880][T11471] team0: Port device team_slave_1 added
[  222.812668][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.834087][T11471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.836879][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.845475][T11471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.850162][T11471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.852938][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.862159][T11471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.896413][T11471] hsr_slave_0: entered promiscuous mode
[  222.899759][T11471] hsr_slave_1: entered promiscuous mode
[  223.159025][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.293155][   T12] bridge_slave_1: left allmulticast mode
[  223.295783][   T12] bridge_slave_1: left promiscuous mode
[  223.298731][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.305117][   T12] bridge_slave_0: left allmulticast mode
[  223.307679][   T12] bridge_slave_0: left promiscuous mode
[  223.311130][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.660756][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.672578][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.683357][   T12] bond0 (unregistering): Released all slaves
[  223.835089][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  223.842088][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  223.859707][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  223.865935][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  223.868575][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  223.938911][T11491] wg1 speed is unknown, defaulting to 1000
[  223.943140][T11491] lo speed is unknown, defaulting to 1000
[  223.946697][T11491] lo speed is unknown, defaulting to 1000
[  224.094951][   T12] hsr_slave_0: left promiscuous mode
[  224.095027][T11499] netlink: 'syz.3.1477': attribute type 1 has an invalid length.
[  224.099885][   T12] hsr_slave_1: left promiscuous mode
[  224.102343][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.107759][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.111745][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.114717][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.127550][   T12] veth1_macvtap: left promiscuous mode
[  224.130515][   T12] veth0_macvtap: left promiscuous mode
[  224.132784][   T12] veth1_vlan: left promiscuous mode
[  224.135244][   T12] veth0_vlan: left promiscuous mode
[  224.504058][ T5841] Bluetooth: hci0: command tx timeout
[  224.540610][   T12] team0 (unregistering): Port device team_slave_1 removed
[  224.577215][   T12] team0 (unregistering): Port device team_slave_0 removed
[  225.014362][T11499] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  225.123263][T11491] chnl_net:caif_netlink_parms(): no params data found
[  225.226139][T11491] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.229315][T11491] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.232100][T11491] bridge_slave_0: entered allmulticast mode
[  225.236296][T11509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1479'.
[  225.236528][T11491] bridge_slave_0: entered promiscuous mode
[  225.242979][T11491] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.248161][T11491] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.251215][T11491] bridge_slave_1: entered allmulticast mode
[  225.255329][T11491] bridge_slave_1: entered promiscuous mode
[  225.294647][T11491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.314479][T11491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.362263][T11491] team0: Port device team_slave_0 added
[  225.369652][T11491] team0: Port device team_slave_1 added
[  225.386733][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1480'.
[  225.395898][T11491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.398746][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.408359][T11491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.421115][T11491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.425151][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.435087][T11491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.453908][T11471] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  225.482284][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.506952][T11471] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  225.526684][T11471] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  225.536860][T11471] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  225.560103][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'.
[  225.583010][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.597528][T11527] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1482'.
[  225.609236][T11491] hsr_slave_0: entered promiscuous mode
[  225.612454][T11491] hsr_slave_1: entered promiscuous mode
[  225.616510][T11491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.620440][T11491] Cannot create hsr debugfs directory
[  225.670452][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.697726][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'.
[  225.732822][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.902816][   T12] bridge_slave_1: left allmulticast mode
[  225.906491][   T12] bridge_slave_1: left promiscuous mode
[  225.908508][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.914545][   T12] bridge_slave_0: left allmulticast mode
[  225.916618][   T12] bridge_slave_0: left promiscuous mode
[  225.919869][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.945294][ T5841] Bluetooth: hci3: command tx timeout
[  226.255593][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.260580][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.265455][   T12] bond0 (unregistering): Released all slaves
[  226.275261][T11471] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.311824][T11471] 8021q: adding VLAN 0 to HW filter on device team0
[  226.328022][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.330321][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.352369][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.355298][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.581473][   T12] hsr_slave_0: left promiscuous mode
[  226.584488][ T5841] Bluetooth: hci0: command tx timeout
[  226.595315][   T12] hsr_slave_1: left promiscuous mode
[  226.597541][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.600060][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.603068][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.607891][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.620221][   T12] veth1_macvtap: left promiscuous mode
[  226.622057][   T12] veth0_macvtap: left promiscuous mode
[  226.625853][   T12] veth1_vlan: left promiscuous mode
[  226.627767][   T12] veth0_vlan: left promiscuous mode
[  226.999768][   T12] team0 (unregistering): Port device team_slave_1 removed
[  227.032410][   T12] team0 (unregistering): Port device team_slave_0 removed
[  227.458128][T11471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.570952][T11471] veth0_vlan: entered promiscuous mode
[  227.576827][T11471] veth1_vlan: entered promiscuous mode
[  227.631301][T11491] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  227.638003][T11491] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  227.663416][T11491] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  227.671697][T11491] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  227.683361][T11471] veth0_macvtap: entered promiscuous mode
[  227.697417][T11471] veth1_macvtap: entered promiscuous mode
[  227.726867][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.745254][T11471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.764672][T11471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.771923][T11471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.777175][T11471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.780693][T11471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.784521][T11471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.881754][ T7850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.887967][ T7850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.905443][T11491] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.918192][ T7850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.921029][ T7850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.931594][T11491] 8021q: adding VLAN 0 to HW filter on device team0
[  227.945633][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.948026][ T7850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.966807][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.969530][ T7850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.025805][ T5841] Bluetooth: hci3: command tx timeout
[  228.158969][T11491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.207428][T11491] veth0_vlan: entered promiscuous mode
[  228.219391][T11589] netlink: 'syz.3.1497': attribute type 1 has an invalid length.
[  228.224851][T11491] veth1_vlan: entered promiscuous mode
[  228.234619][T11589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1497'.
[  228.256339][T11491] veth0_macvtap: entered promiscuous mode
[  228.263377][T11491] veth1_macvtap: entered promiscuous mode
[  228.277006][T11491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.285115][T11491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.290471][T11491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.294336][T11491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.297369][T11491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.300499][T11491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.369190][ T7850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.371683][ T7850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.446215][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.450273][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.806275][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.575230][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.611076][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  229.619203][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  229.627854][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  229.631801][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  229.635181][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  229.672133][T11615] wg1 speed is unknown, defaulting to 1000
[  229.675880][T11615] lo speed is unknown, defaulting to 1000
[  229.678632][T11615] lo speed is unknown, defaulting to 1000
[  229.789442][T11615] chnl_net:caif_netlink_parms(): no params data found
[  229.905953][T11627] netlink: 'syz.3.1505': attribute type 1 has an invalid length.
[  229.909209][T11627] netlink: 8982 bytes leftover after parsing attributes in process `syz.3.1505'.
[  229.977097][T11615] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.981215][T11615] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.988530][T11615] bridge_slave_0: entered allmulticast mode
[  229.992867][T11615] bridge_slave_0: entered promiscuous mode
[  230.004697][T11615] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.007599][T11615] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.011145][T11615] bridge_slave_1: entered allmulticast mode
[  230.019616][T11615] bridge_slave_1: entered promiscuous mode
[  230.039355][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.076522][T11615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.085955][T11615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.096433][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  230.130381][T11615] team0: Port device team_slave_0 added
[  230.138055][T11615] team0: Port device team_slave_1 added
[  230.161953][T11615] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.168726][T11615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.182238][T11615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.224147][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.238901][T11615] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.242114][T11615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.254125][T11615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.310155][T11615] hsr_slave_0: entered promiscuous mode
[  230.313767][T11615] hsr_slave_1: entered promiscuous mode
[  230.316853][T11615] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.320284][T11615] Cannot create hsr debugfs directory
[  230.436027][ T5864] bridge_slave_1: left allmulticast mode
[  230.439053][ T5864] bridge_slave_1: left promiscuous mode
[  230.441759][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.448587][ T5864] bridge_slave_0: left allmulticast mode
[  230.450898][ T5864] bridge_slave_0: left promiscuous mode
[  230.453330][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.797511][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.802046][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.805999][ T5864] bond0 (unregistering): Released all slaves
[  231.098383][ T5864] hsr_slave_0: left promiscuous mode
[  231.101963][ T5864] hsr_slave_1: left promiscuous mode
[  231.105957][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.109073][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.112755][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.123653][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.142304][ T5864] veth1_macvtap: left promiscuous mode
[  231.145091][ T5864] veth0_macvtap: left promiscuous mode
[  231.148037][ T5864] veth1_vlan: left promiscuous mode
[  231.150686][ T5864] veth0_vlan: left promiscuous mode
[  231.702696][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  231.722109][ T5841] Bluetooth: hci0: command tx timeout
[  231.787189][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  231.900362][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  231.906187][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  231.909794][T11648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1510'.
[  231.933673][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  231.959671][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  231.964089][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  232.352284][T11649] wg1 speed is unknown, defaulting to 1000
[  232.361841][T11649] lo speed is unknown, defaulting to 1000
[  232.366354][T11649] lo speed is unknown, defaulting to 1000
[  232.506237][T11649] chnl_net:caif_netlink_parms(): no params data found
[  232.646006][T11666] syzkaller0: entered promiscuous mode
[  232.649944][T11666] syzkaller0: entered allmulticast mode
[  232.658900][T11649] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.662328][T11649] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.667016][T11649] bridge_slave_0: entered allmulticast mode
[  232.671223][T11649] bridge_slave_0: entered promiscuous mode
[  232.676908][T11649] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.680392][T11649] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.684251][T11649] bridge_slave_1: entered allmulticast mode
[  232.688419][T11649] bridge_slave_1: entered promiscuous mode
[  232.692362][T11615] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  232.701444][T11615] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  232.736918][T11615] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  232.744612][T11615] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  232.756636][T11649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.786493][T11649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.841749][T11649] team0: Port device team_slave_0 added
[  232.851391][T11649] team0: Port device team_slave_1 added
[  232.890272][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'.
[  232.904792][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1514'.
[  232.919615][ T5864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.935025][T11649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.939635][T11649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.950456][T11649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.957949][T11649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.961161][T11649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.973194][T11649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.986639][T11677] gtp0: entered promiscuous mode
[  232.989127][T11677] gtp0: entered allmulticast mode
[  233.018025][ T5864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.102575][T11649] hsr_slave_0: entered promiscuous mode
[  233.109723][T11649] hsr_slave_1: entered promiscuous mode
[  233.144479][ T5864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.220644][ T5864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.313229][T11615] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.370310][T11615] 8021q: adding VLAN 0 to HW filter on device team0
[  233.386060][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.388935][ T4883] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.407211][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.411356][ T4883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.462885][ T5864] bridge_slave_1: left allmulticast mode
[  233.467461][ T5864] bridge_slave_1: left promiscuous mode
[  233.470149][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.476792][ T5864] bridge_slave_0: left allmulticast mode
[  233.479238][ T5864] bridge_slave_0: left promiscuous mode
[  233.482274][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.784488][ T5841] Bluetooth: hci0: command tx timeout
[  233.831143][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.837206][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.842256][ T5864] bond0 (unregistering): Released all slaves
[  234.024382][ T5841] Bluetooth: hci3: command tx timeout
[  234.113766][T11686] openvswitch: netlink: Multiple metadata blocks provided
[  234.187773][ T5864] hsr_slave_0: left promiscuous mode
[  234.190226][ T5864] hsr_slave_1: left promiscuous mode
[  234.192448][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.196389][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.199839][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.202263][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.218593][ T5864] veth1_macvtap: left promiscuous mode
[  234.220948][ T5864] veth0_macvtap: left promiscuous mode
[  234.223323][ T5864] veth1_vlan: left promiscuous mode
[  234.230956][ T5864] veth0_vlan: left promiscuous mode
[  234.698554][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  234.742199][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  235.262349][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1518'.
[  235.300340][T11615] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.426594][T11615] veth0_vlan: entered promiscuous mode
[  235.473266][T11615] veth1_vlan: entered promiscuous mode
[  235.551472][T11649] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  235.569857][T11649] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  235.582522][T11649] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  235.608224][T11649] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  235.690000][T11615] veth0_macvtap: entered promiscuous mode
[  235.712423][T11615] veth1_macvtap: entered promiscuous mode
[  235.760202][T11615] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.773283][T11615] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.788275][T11615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.791238][T11615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.801395][T11615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.804737][T11615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.823783][T11649] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.856015][T11649] 8021q: adding VLAN 0 to HW filter on device team0
[  235.873966][ T5841] Bluetooth: hci0: command tx timeout
[  235.887476][T11711] macsec1: entered promiscuous mode
[  235.890209][T11711] bridge0: entered promiscuous mode
[  235.897408][T11711] bridge0: port 2(macsec1) entered blocking state
[  235.900185][T11711] bridge0: port 2(macsec1) entered disabled state
[  235.903320][T11711] macsec1: entered allmulticast mode
[  235.907887][T11711] bridge0: entered allmulticast mode
[  235.916689][T11711] macsec1: left allmulticast mode
[  235.918822][T11711] bridge0: left allmulticast mode
[  235.922529][T11711] bridge0: left promiscuous mode
[  235.957476][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.960221][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.989281][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.992888][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.069927][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.093018][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.103926][ T5841] Bluetooth: hci3: command tx timeout
[  236.156494][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.160274][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.333156][T11731] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  236.348569][T11649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.400216][T11649] veth0_vlan: entered promiscuous mode
[  236.406616][T11649] veth1_vlan: entered promiscuous mode
[  236.431863][T11649] veth0_macvtap: entered promiscuous mode
[  236.439360][T11649] veth1_macvtap: entered promiscuous mode
[  236.449179][T11649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.458251][T11649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.464852][T11649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.467800][T11649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.470947][T11649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.474945][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1523'.
[  236.476281][T11649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.549831][ T7850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.552433][ T7850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.578183][ T7850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.580908][ T7850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.720406][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'.
[  236.806397][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.451765][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.724234][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.729801][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.738391][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.742528][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.746869][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.809468][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.908278][T11759] wg1 speed is unknown, defaulting to 1000
[  237.911549][T11759] lo speed is unknown, defaulting to 1000
[  237.916204][T11759] lo speed is unknown, defaulting to 1000
[  238.033197][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.191333][T11759] chnl_net:caif_netlink_parms(): no params data found
[  238.250997][ T5864] bridge_slave_1: left allmulticast mode
[  238.255584][ T5864] bridge_slave_1: left promiscuous mode
[  238.258454][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.263172][ T5864] bridge_slave_0: left allmulticast mode
[  238.267529][ T5864] bridge_slave_0: left promiscuous mode
[  238.270053][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.596166][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.603447][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.607556][ T5864] bond0 (unregistering): Released all slaves
[  238.708238][T11759] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.711564][T11759] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.715250][T11759] bridge_slave_0: entered allmulticast mode
[  238.719257][T11759] bridge_slave_0: entered promiscuous mode
[  238.725004][T11759] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.728247][T11759] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.731407][T11759] bridge_slave_1: entered allmulticast mode
[  238.736722][T11759] bridge_slave_1: entered promiscuous mode
[  238.802482][T11759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.809293][T11759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.832720][T11759] team0: Port device team_slave_0 added
[  238.837425][T11759] team0: Port device team_slave_1 added
[  238.856732][T11759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.859363][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.869117][T11759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.876232][T11759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.879344][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.890012][T11759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.943217][ T5864] hsr_slave_0: left promiscuous mode
[  238.947011][ T5864] hsr_slave_1: left promiscuous mode
[  238.949361][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.953203][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.957547][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.960686][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.975323][ T5864] veth1_macvtap: left promiscuous mode
[  238.977521][ T5864] veth0_macvtap: left promiscuous mode
[  238.979901][ T5864] veth1_vlan: left promiscuous mode
[  238.982526][ T5864] veth0_vlan: left promiscuous mode
[  239.459465][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  239.497890][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  239.790284][ T5841] Bluetooth: hci0: command tx timeout
[  239.926596][T11759] hsr_slave_0: entered promiscuous mode
[  239.930228][T11759] hsr_slave_1: entered promiscuous mode
[  239.933191][T11759] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  239.941109][T11759] Cannot create hsr debugfs directory
[  240.082324][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  240.088437][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  240.092784][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  240.098680][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.102546][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.198659][T11780] wg1 speed is unknown, defaulting to 1000
[  240.230244][T11787] netlink: 'syz.3.1536': attribute type 1 has an invalid length.
[  240.241514][T11780] lo speed is unknown, defaulting to 1000
[  240.259795][T11787] 8021q: adding VLAN 0 to HW filter on device bond7
[  240.262557][T11780] lo speed is unknown, defaulting to 1000
[  240.276542][T11787] vlan2: entered allmulticast mode
[  240.278424][T11787] bond7: entered allmulticast mode
[  240.644684][ T5864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.666364][T11794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1537'.
[  240.696880][T11780] chnl_net:caif_netlink_parms(): no params data found
[  240.731106][ T5864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.791254][ T5864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.867272][ T5864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.974268][T11809] netlink: 'syz.3.1541': attribute type 1 has an invalid length.
[  241.005866][T11809] bond8: entered promiscuous mode
[  241.008639][T11809] 8021q: adding VLAN 0 to HW filter on device bond8
[  241.011423][T11759] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  241.012950][T11809] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1541'.
[  241.022817][T11780] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.027143][T11780] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.029725][T11780] bridge_slave_0: entered allmulticast mode
[  241.032950][T11780] bridge_slave_0: entered promiscuous mode
[  241.037065][T11780] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.039452][T11780] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.042046][T11780] bridge_slave_1: entered allmulticast mode
[  241.045711][T11780] bridge_slave_1: entered promiscuous mode
[  241.070498][T11809] batadv1: entered promiscuous mode
[  241.072500][T11809] batadv1: entered allmulticast mode
[  241.076295][T11809] 8021q: adding VLAN 0 to HW filter on device batadv1
[  241.080106][T11809] bond8: (slave batadv1): making interface the new active one
[  241.083281][T11809] bond8: (slave batadv1): Enslaving as an active interface with an up link
[  241.086980][T11759] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  241.135035][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.142472][T11759] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  241.150359][T11759] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  241.169195][T11780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.240865][T11809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1541'.
[  241.259277][ T5864] bridge_slave_1: left allmulticast mode
[  241.261892][ T5864] bridge_slave_1: left promiscuous mode
[  241.265951][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.272845][ T5864] bridge_slave_0: left allmulticast mode
[  241.279965][ T5864] bridge_slave_0: left promiscuous mode
[  241.282523][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.292214][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1541'.
[  241.687002][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.693241][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.700705][ T5864] bond0 (unregistering): Released all slaves
[  241.718069][T11780] team0: Port device team_slave_0 added
[  241.745954][T11780] team0: Port device team_slave_1 added
[  241.802761][T11780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.807236][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'.
[  241.811690][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.829352][T11780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.874408][T11780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.877462][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.916973][T11780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.050101][T11780] hsr_slave_0: entered promiscuous mode
[  242.054670][T11780] hsr_slave_1: entered promiscuous mode
[  242.058347][T11780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.061518][T11780] Cannot create hsr debugfs directory
[  242.121909][ T5864] hsr_slave_0: left promiscuous mode
[  242.127716][ T5864] hsr_slave_1: left promiscuous mode
[  242.131144][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.134374][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.138007][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.141405][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.171176][ T5864] veth1_macvtap: left promiscuous mode
[  242.173843][ T5864] veth0_macvtap: left promiscuous mode
[  242.176235][ T5864] veth1_vlan: left promiscuous mode
[  242.178478][ T5864] veth0_vlan: left promiscuous mode
[  242.195144][ T5841] Bluetooth: hci3: command tx timeout
[  242.768904][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  242.817540][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  242.819924][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'.
[  243.510262][T11759] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.555174][T11759] 8021q: adding VLAN 0 to HW filter on device team0
[  243.559764][T11851] netlink: 'syz.3.1550': attribute type 1 has an invalid length.
[  243.562585][T11851] netlink: 'syz.3.1550': attribute type 1 has an invalid length.
[  243.569886][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.572400][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.590313][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.592843][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.595973][T11851] netlink: 'syz.3.1550': attribute type 4 has an invalid length.
[  243.598616][T11851] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1550'.
[  243.744191][ T7706] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  243.769205][ T8162] lo speed is unknown, defaulting to 1000
[  243.868576][T11759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.905832][T11759] veth0_vlan: entered promiscuous mode
[  243.948496][T11759] veth1_vlan: entered promiscuous mode
[  244.005416][T11759] veth0_macvtap: entered promiscuous mode
[  244.013284][T11780] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  244.274097][ T5841] Bluetooth: hci3: command tx timeout
[  244.358985][ T8804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.362450][ T8804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  244.461640][ T8804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.465726][ T8804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  244.578930][ T8804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.583162][ T8804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  244.633925][ T8804] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  244.639287][ T8804] bridge0: port 4(netdevsim0) entered disabled state
[  244.662173][ T8804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.669155][ T8804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  244.759255][ T8804] dummy0: left allmulticast mode
[  244.762784][ T8804] dummy0: left promiscuous mode
[  244.765415][ T8804] bridge0: port 3(dummy0) entered disabled state
[  244.770265][ T8804] bridge_slave_0: left allmulticast mode
[  244.772654][ T8804] bridge_slave_0: left promiscuous mode
[  244.775472][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.784524][ T8804] vlan3: left promiscuous mode
[  244.786751][ T8804] veth1: left promiscuous mode
[  244.789008][ T8804] bridge2: port 1(vlan3) entered disabled state
[  244.795630][ T8804] veth0_to_bond: left allmulticast mode
[  244.798199][ T8804] veth0_to_bond: left promiscuous mode
[  244.801086][ T8804] bridge3: port 2(veth0_to_bond) entered disabled state
[  244.808971][ T8804] veth3: left allmulticast mode
[  244.811011][ T8804] veth3: left promiscuous mode
[  244.813176][ T8804] bridge3: port 1(veth3) entered disabled state
[  244.822195][ T8804] veth5: left allmulticast mode
[  244.825208][ T8804] bridge5: port 2(veth5) entered disabled state
[  244.830167][ T8804] ip6gretap1: left allmulticast mode
[  244.832832][ T8804] ip6gretap1: left promiscuous mode
[  244.835773][ T8804] bridge5: port 1(ip6gretap1) entered disabled state
[  245.442566][ T8804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.447575][ T8804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.452744][ T8804] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  245.460035][ T8804] bond0 (unregistering): Released all slaves
[  245.469398][ T8804] bond1 (unregistering): Released all slaves
[  245.482402][ T8804] bond2 (unregistering): Released all slaves
[  245.496805][ T8804] bond3 (unregistering): Released all slaves
[  245.510342][ T8804] bond4 (unregistering): Released all slaves
[  245.522593][ T8804] bond5 (unregistering): Released all slaves
[  245.537056][ T8804] bond6 (unregistering): Released all slaves
[  245.640361][ T8804] bond7 (unregistering): Released all slaves
[  245.746346][ T8804] bond8 (unregistering): (slave batadv1): Releasing active interface
[  245.751157][ T8804] bond8 (unregistering): Released all slaves
[  245.853215][ T8804] tipc: Left network mode
[  247.238340][ T8804] hsr_slave_0: left promiscuous mode
[  247.240950][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.246356][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.883679][ T5897] lo speed is unknown, defaulting to 1000
[  247.885692][ T5897] syz1: Port: 1 Link DOWN
[  248.215660][ T8804] IPVS: stop unused estimator thread 0...
[  248.819166][ T8804] bridge_slave_1: left allmulticast mode
[  248.821551][ T8804] bridge_slave_1: left promiscuous mode
[  248.824086][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.829425][ T8804] bridge_slave_0: left allmulticast mode
[  248.832013][ T8804] bridge_slave_0: left promiscuous mode
[  248.834622][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.839812][ T8804] bridge_slave_1: left allmulticast mode
[  248.841786][ T8804] bridge_slave_1: left promiscuous mode
[  248.844068][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.847687][ T8804] bridge_slave_0: left allmulticast mode
[  248.849630][ T8804] bridge_slave_0: left promiscuous mode
[  248.851569][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.112550][ T8804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.117747][ T8804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.121724][ T8804] bond0 (unregistering): Released all slaves
[  249.196671][ T8804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.201225][ T8804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.205656][ T8804] bond0 (unregistering): Released all slaves
[  249.299812][ T8804] hsr_slave_0: left promiscuous mode
[  249.302053][ T8804] hsr_slave_1: left promiscuous mode
[  249.304629][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.309215][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.316454][ T8804] hsr_slave_0: left promiscuous mode
[  249.318932][ T8804] hsr_slave_1: left promiscuous mode
[  249.321797][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.325257][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.338314][ T8804] veth0_macvtap: left promiscuous mode
[  249.340363][ T8804] veth1_vlan: left promiscuous mode
[  249.342799][ T8804] veth0_vlan: left promiscuous mode
[  249.717749][ T8804] team0 (unregistering): Port device team_slave_1 removed
[  249.747018][ T8804] team0 (unregistering): Port device team_slave_0 removed
[  250.170359][ T8804] team0 (unregistering): Port device team_slave_1 removed
[  250.200200][ T8804] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
03:31:51  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1717bea RBX=ffff88803e8bb930 RCX=dffffc0000000000 RDX=0000000000000001
RSI=0000000000000004 RDI=ffff88803e8bb930 RBP=ffffffff99cf5fc0 RSP=ffffc90002b5f478
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff81a60820
R12=ffffffff8b8bdf50 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000009
RIP=ffffffff81a60820 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557cf45500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe3f6146440 CR3=000000010b04e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=7269642065676e61 68632074276e6163 XMM01=2e36312e3627206f 742079726f746365
XMM02=2d72656c6c616b7a 79732d3563722d30 XMM03=6337393934386337 34672d3935313030
XMM04=2779747269642d36 3836633739393438 XMM05=633734672d393531 30302d72656c6c61
XMM06=6b7a79732d356372 2d302e36312e3627 XMM07=206f742079726f74 6365726964206567
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007880000 RBX=1ffff1102158325a RCX=ffff88810d825640 RDX=0000000000010000
RSI=ffff88810ac18000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0da0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=ffffffff868f6e50
R12=dffffc0000000000 R13=ffff88810ac192d0 R14=ffff88810ac18000 R15=dffffc0000000000
RIP=ffffffff868f6e98 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c7f8e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f0c7ed856a3 00007f0c7ed856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0101c21000018004 0100000c08060601
XMM06=569c00080001e003 02c4100001d00323 XMM07=800401c003001000 01b00321800401a0
XMM08=0302800800019003 0380040180030280 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
