last executing test programs:

53.733451455s ago: executing program 1 (id=3285):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
sendmsg$rds(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/113, 0xfffffeb4}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x150}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa8}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r9, 0x6, 0xc9, 0x1, 0x8, 0x61, @empty, @mcast1, 0x1, 0x40, 0x4, 0x9}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_getnexthop={0x34, 0x6a, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

48.269860943s ago: executing program 1 (id=3285):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
sendmsg$rds(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/113, 0xfffffeb4}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x150}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa8}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r9, 0x6, 0xc9, 0x1, 0x8, 0x61, @empty, @mcast1, 0x1, 0x40, 0x4, 0x9}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_getnexthop={0x34, 0x6a, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

42.930498208s ago: executing program 1 (id=3285):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
sendmsg$rds(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/113, 0xfffffeb4}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x150}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa8}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r9, 0x6, 0xc9, 0x1, 0x8, 0x61, @empty, @mcast1, 0x1, 0x40, 0x4, 0x9}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_getnexthop={0x34, 0x6a, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

37.41359331s ago: executing program 1 (id=3285):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
sendmsg$rds(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/113, 0xfffffeb4}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x150}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa8}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r9, 0x6, 0xc9, 0x1, 0x8, 0x61, @empty, @mcast1, 0x1, 0x40, 0x4, 0x9}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_getnexthop={0x34, 0x6a, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

32.152187163s ago: executing program 1 (id=3285):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
sendmsg$rds(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/113, 0xfffffeb4}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x150}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa8}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r9, 0x6, 0xc9, 0x1, 0x8, 0x61, @empty, @mcast1, 0x1, 0x40, 0x4, 0x9}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_getnexthop={0x34, 0x6a, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

26.41190265s ago: executing program 1 (id=3285):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
sendmsg$rds(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/113, 0xfffffeb4}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x150}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa8}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r9, 0x6, 0xc9, 0x1, 0x8, 0x61, @empty, @mcast1, 0x1, 0x40, 0x4, 0x9}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_getnexthop={0x34, 0x6a, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

20.638834273s ago: executing program 2 (id=4249):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300d0ffffff00850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)

20.541052122s ago: executing program 2 (id=4250):
unshare(0x8000400)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x100, 0x4)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000050000000c040000a001020000feeae3956275e535"], 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r8, 0x0, 0xffffffff000)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040001)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=<r10=>0xffffffffffffffff, @ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000006000000185b00000900000000000000000000001846000008000000000000000000000018210000", @ANYRES32, @ANYRESOCT=r10], &(0x7f0000000100)='GPL\x00', 0x8, 0x2, &(0x7f0000000140)=""/2, 0xe004c291166afe58, 0xb, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)

16.731652235s ago: executing program 2 (id=4250):
unshare(0x8000400)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x100, 0x4)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000050000000c040000a001020000feeae3956275e535"], 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r8, 0x0, 0xffffffff000)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040001)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=<r10=>0xffffffffffffffff, @ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000006000000185b00000900000000000000000000001846000008000000000000000000000018210000", @ANYRES32, @ANYRESOCT=r10], &(0x7f0000000100)='GPL\x00', 0x8, 0x2, &(0x7f0000000140)=""/2, 0xe004c291166afe58, 0xb, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)

12.349595937s ago: executing program 2 (id=4250):
unshare(0x8000400)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x100, 0x4)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000050000000c040000a001020000feeae3956275e535"], 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r8, 0x0, 0xffffffff000)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040001)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=<r10=>0xffffffffffffffff, @ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000006000000185b00000900000000000000000000001846000008000000000000000000000018210000", @ANYRES32, @ANYRESOCT=r10], &(0x7f0000000100)='GPL\x00', 0x8, 0x2, &(0x7f0000000140)=""/2, 0xe004c291166afe58, 0xb, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)

8.117423896s ago: executing program 2 (id=4250):
unshare(0x8000400)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x100, 0x4)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000050000000c040000a001020000feeae3956275e535"], 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r8, 0x0, 0xffffffff000)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040001)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=<r10=>0xffffffffffffffff, @ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000006000000185b00000900000000000000000000001846000008000000000000000000000018210000", @ANYRES32, @ANYRESOCT=r10], &(0x7f0000000100)='GPL\x00', 0x8, 0x2, &(0x7f0000000140)=""/2, 0xe004c291166afe58, 0xb, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)

3.354081043s ago: executing program 2 (id=4250):
unshare(0x8000400)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x100, 0x4)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000050000000c040000a001020000feeae3956275e535"], 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r8, 0x0, 0xffffffff000)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040001)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=<r10=>0xffffffffffffffff, @ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000006000000185b00000900000000000000000000001846000008000000000000000000000018210000", @ANYRES32, @ANYRESOCT=r10], &(0x7f0000000100)='GPL\x00', 0x8, 0x2, &(0x7f0000000140)=""/2, 0xe004c291166afe58, 0xb, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)

253.905244ms ago: executing program 0 (id=4372):
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)={'b', ' *:* ', 'rm\x00'}, 0x9)
write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x1, {{0x2, 0x4e24, @broadcast}}, 0x0, 0x3, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @loopback}}]}, 0x210)
listen(r1, 0xf0ca)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={<r2=>r1, 0x6, 0x3fffc00000000, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000005c0)={0x1, 0x2, 0x1000, 0xc6, &(0x7f0000000400)="6e22e6ad637d4a32fd3f268139e76a7aab8b19503e30df129b89ada49fd07e32ec1203071e966cb4e1dcb9809dd873f0fc1a40abdd7d1a4a7459c328d15603a76ea62627430c3ce1e4439e87184f503b48d69c18ad6a6f7df0b9a9ebc9c3dff9a231a38da5860bf5dccb3171ff210ba8ff271ff77e8ece9942495e7b2b3942e7585da7fe250ac0f1fe0fd6308f5a4911356490c57df5ea554d15610d66464a78c977129d7aa828920c3fdeea544e1372af30d815a0924ec1e056adab3921ecee38995d038da3", 0xa1, 0x0, &(0x7f0000000500)="60d68fe572c61dcb337079c178c710b7ba075a7c6ed3558ca741abd15fd4a5f76b0b57c7c602c79631d944a2fbce45bce27989f6a1df29400765d7cc0209ada5a2fa775481845767bebc12ba0de48f4fb026ccfd58129e78a7622b6d50d81d013d85a66c376a5ec8612f0b21fe463896959a4edbc0dceaf5e6b6fd87f1f82f28f904fbd572ba3877b04118a1cd45a48de204b8fdcd3adb88d659a6c36885815000"})
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000640))
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000680)='wg1\x00', 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x404098}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "134af778f256e23f1310409dbb6ffb2f"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_PMKID={0x14, 0x55, "234a6e8d8686f147599741cd7c87b8fa"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='cachefiles_io_error\x00', r2, 0x0, 0x7}, 0x18)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000900)={0x9, 0x8004, 0x5, 0xfffffff9, <r6=>0x0}, &(0x7f0000000940)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000980)={r6, 0x8, 0x9}, &(0x7f00000009c0)=0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a00)={'ipvlan1\x00', 0x1})
getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000a40), &(0x7f0000000a80)=0x4)
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x62}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044040}, 0x1)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), r2)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x35}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x100}, 0x4040041)
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0)

253.405051ms ago: executing program 0 (id=4373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000180))
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x36, 0x3, "85049cba8658b7cd00103bfaccadfaf141b8adfa286ef7c43bad33f62db6361900e9641a45bdc0ac3c7562a1307451aa6c0e"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x400c000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

173.860256ms ago: executing program 0 (id=4374):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x209, 0x4) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040), 0x4) (async)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x20048000)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20000990"], 0x4b) (async)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000380)=""/89, 0x59}], 0x4, &(0x7f0000001240)=""/4096, 0x1000}, 0x10000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffa}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x68}}, 0x4000090) (async)
socket$isdn(0x22, 0x2, 0x21) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x7, 0xa, 0x301, 0x70bd2d, 0xffff, {0x1, 0x0, 0x5}, [@typed={0xd, 0x85, 0x0, 0x0, @str='fq_codel\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) (async)
r8 = socket$can_raw(0x1d, 0x3, 0x1) (async)
unshare(0x22020600) (async)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async)
recvmmsg(r9, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
close(0x3)

68.478311ms ago: executing program 0 (id=4375):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async, rerun: 32)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r0, 0xfffff000) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4069, 0xfe5, 0x1, 0x0}, &(0x7f00000000c0)=0x40) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40)

66.500843ms ago: executing program 0 (id=4376):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2100000014000000050000000800000092440000", @ANYRES32=0x1, @ANYBLOB="52d400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000500"/28], 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x19, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x3b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x40, 0xa5, &(0x7f0000000180)=""/165, 0x40f00, 0x24, '\x00', r2, @sock_ops=0x3, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x0, 0xe, 0x1}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0)
bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/221, 0xdd, <r10=>0x0, &(0x7f0000000a40)=""/171, 0xab}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x12, &(0x7f0000000600)=@raw=[@ldst={0x0, 0x3, 0x6, 0x1, 0x2, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x0, 0x6, 0xf, 0x7fff, 0x8}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, &(0x7f00000006c0), 0x41000, 0x4, '\x00', r9, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x9070, 0x4}, 0x10, r10, 0xffffffffffffffff, 0x4, &(0x7f0000000c00)=[r11], &(0x7f0000000c40)=[{0x2, 0x5, 0x10, 0x5}, {0x5, 0x1, 0xe, 0x8}, {0x2, 0x3, 0x7, 0x4}, {0x0, 0x5, 0x0, 0x8}], 0x10, 0x4}, 0x94)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @jmp={0x5, 0x1, 0xb, 0x5, 0x7, 0x1, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0xd5, 0x7, &(0x7f0000000b80)=""/7, 0x1e00, 0x1e, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000000bc0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x5, 0x1, 0x80000001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xf, 0x24, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, @ldst={0x2, 0x3, 0x2, 0x5, 0x8, 0x6, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x6, 0x0, 0xf, 0x4, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2c739850, 0xb5, &(0x7f0000000a00)=""/181, 0x41100, 0x1, '\x00', 0x0, @cgroup_device, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r12, 0x0, &(0x7f0000000d00)=[r6, r0, r5, r6], 0x0, 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000780)=@req={0x28, &(0x7f0000000740)={'ip6erspan0\x00', @ifru_map={0xba, 0xf000000000, 0xfffd, 0x3, 0x1, 0x3}}})
bind$bt_hci(r0, 0x0, 0x0)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000800)={0x2b, @loopback, 0x4e24, 0x0, 'ovf\x00', 0x4, 0x0, 0x49}, 0x2c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000840), &(0x7f0000000880)=0x4)
write$tun(r0, &(0x7f0000002280)={@val={0x0, 0x88a2}, @val={0x1, 0x3, 0x33e, 0x0, 0x2, 0x9}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x1}}, {@llc={0x4, {@snap={0xccb30b44e60c5728, 0x1, "aa93", "d131ff", 0x6002, "013db0871775ffc5d58ffebbbaad5e46282a869273aabf8deba755308559e6c95f9f3738876970c9788dd913ca40798c63655e735bebf8bb62fbf272d1833d9ca467f5d7d6592e8ada2becd48c5ffc2824b1ac79023cc9b4e43b199445ce67f50db54c68c7386ae40fc2c00a29fb7f8317951112bd62ca1589ff066b7b79cf0f20112ecf64e88b67764ecfff28af0646efe9225b8cc061354a75bdd341fa2ac1829e90c60e6589b1cc1b932bc204fc8756d77774cfeace9e99624ec997899aea7816e99f35cf43b37a586e8f1207ffafbe2e4cf094b312"}}}}}}, 0x104)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x44040)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}}, 0x4040000)
r14 = socket(0x1e, 0x2, 0x8)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=ANY=[@ANYBLOB="2cff04ff", @ANYRES16=0x0, @ANYBLOB="00002cad7000ffdbdf251400000008000e001000000000000d000008000008000e00090000000800120007000000080007000800000005000c000000000005000b000000000005000b000000000008000400000200000500190000000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x88040)

0s ago: executing program 0 (id=4377):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2, 0xd, r2})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r4=>0x0, 0x29, 0x7, 0x3, 0x3, 0x10, @mcast2, @private1, 0x40, 0x1, 0x4, 0xffffff00}})
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fedbdd8c17850c0008000300", @ANYRES32=r10, @ANYBLOB="0a0006"], 0x30}}, 0xc000)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x36}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r13, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc)
close(0x3)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000080)={'team0\x00', <r16=>0x0})
r17 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="09082dbd7000000000000100000008000100", @ANYRES32=r16, @ANYBLOB="3c00028038000100000001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000000030003000000000004000400000000000100", @ANYRES32=r16, @ANYBLOB="000002800000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r16, @ANYBLOB="0000010067b6579d0dbc273ac1cb7e2b06bda6ca1a163e686af896", @ANYRES32=0x0, @ANYBLOB="000002800000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r16, @ANYBLOB="00000100000001007072696f72697479000000000000000000000000000000000000000000000000000003000e000000000004000010000000000600", @ANYRES32=r16, @ANYBLOB="00000100000001006c625f73746174735f726566726573685f696e74657276616c000000000000000000030003000000000004000200000000000100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b000000000004000300b3070600000009000f4002000000410007060800000000000100000001006c625f686173685f737461747300000000000000000000000000000000000000000003000b0000000000040002000000000007000000000000000100000001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000000003000300000000000400", @ANYRES32=r16, @ANYBLOB="000007000000000000000100000001006e6f746966795f70656572735f636f756e7400000000000000000000000000000000030003000000000004000800000000000100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b000000000004000c0039060000000008000f0704000000e0ff0700faffffff4c0e06001e00000008000ffa0400000000000100", @ANYRES32=0x0, @ANYBLOB="0000028000000100000001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000000003000300000000000400080000000000010000000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000000000300060000000000040000000600", @ANYRES32=0x0, @ANYBLOB="00000100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b00000000000400ff0162b70200000001040609050000000200810d100000000900202b100000000200018148d000000000010000000100616374697665706f727400000000000000000000000000000000000000000000000003000300000000000400", @ANYRES32=0x0, @ANYBLOB="0000010000000100616374697665706f727400000000000000000000000000000000000000000000000003000300000000000400", @ANYRES32=0x0, @ANYBLOB="0000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=0x0, @ANYBLOB="0000010000000100757365725f6c696e6b757000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=0x0, @ANYBLOB="00000100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b00000000000400b80a09807f0000000d00090a0900000080000402040000000400104001000000"], 0x58}}, 0x40010)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x224, r17, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8e43}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd22}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x24008801}, 0x4000005)
r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10000}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r18, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000061120100000000000000004ba48a804d5fb0f7179f079863e4a50280fe34ae8a340a97e858652cedef"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)

kernel console output (not intermixed with test programs):

nk: 4 bytes leftover after parsing attributes in process `syz.2.3632'.
[  290.403403][T18401] hsr_slave_0: left promiscuous mode
[  290.409863][T18401] hsr_slave_1: left promiscuous mode
[  290.442932][T18412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.456645][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.465474][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.487469][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.490931][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.542620][T18418] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3638'.
[  290.631756][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'.
[  290.645911][T18424] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  290.839126][T18430] netlink: 'syz.0.3643': attribute type 72 has an invalid length.
[  290.841966][T18431] netlink: 'syz.0.3643': attribute type 72 has an invalid length.
[  290.844558][T18431] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.3643'.
[  290.848816][T18430] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.3643'.
[  290.852388][T18430] tc_dump_action: action bad kind
[  291.040148][T18441] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  291.046111][T18443] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  291.104345][T18445] bridge2: entered allmulticast mode
[  291.160295][T18444] bridge2: left allmulticast mode
[  291.213497][T18452] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  291.216246][T18452] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  291.262092][T18454] netlink: 'syz.0.3653': attribute type 1 has an invalid length.
[  291.265114][T18454] netlink: 'syz.0.3653': attribute type 1 has an invalid length.
[  291.390537][T18471] netlink: 'syz.2.3657': attribute type 32 has an invalid length.
[  291.608663][T18492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.611745][T18492] syzkaller0: entered promiscuous mode
[  291.613598][T18492] syzkaller0: entered allmulticast mode
[  291.621738][T18492] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.670465][T18492] tipc: Resetting bearer <eth:syzkaller0>
[  291.674799][T18491] tipc: Resetting bearer <eth:syzkaller0>
[  291.686860][T18491] tipc: Disabling bearer <eth:syzkaller0>
[  291.861259][T18507] netlink: 'syz.0.3667': attribute type 32 has an invalid length.
[  292.104405][T18534] pim6reg1: entered promiscuous mode
[  292.107795][T18534] pim6reg1: entered allmulticast mode
[  292.193019][T18542] 8021q: VLANs not supported on nlmon0
[  292.235507][T18547] netlink: 'syz.2.3677': attribute type 32 has an invalid length.
[  293.152031][T18562] __nla_validate_parse: 10 callbacks suppressed
[  293.152042][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3678'.
[  293.233025][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  293.237962][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  293.239530][T18570] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3681'.
[  293.243800][T18570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  293.244959][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  293.254613][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  293.260165][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  293.403702][T18567] chnl_net:caif_netlink_parms(): no params data found
[  293.439580][T18581] netlink: 'syz.0.3685': attribute type 32 has an invalid length.
[  293.502571][T18567] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.506136][T18567] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.510272][T18567] bridge_slave_0: entered allmulticast mode
[  293.513718][T18567] bridge_slave_0: entered promiscuous mode
[  293.528548][T18567] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.530986][T18567] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.533805][T18567] bridge_slave_1: entered allmulticast mode
[  293.543790][T18567] bridge_slave_1: entered promiscuous mode
[  293.582048][T18567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.587028][T18567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.616029][T18567] team0: Port device team_slave_0 added
[  293.621861][T18567] team0: Port device team_slave_1 added
[  293.654329][T18567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.657697][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.667720][T18567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.672638][T18567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.674961][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.683232][T18567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.713215][T18567] hsr_slave_0: entered promiscuous mode
[  293.718807][T18567] hsr_slave_1: entered promiscuous mode
[  293.721078][T18567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.723729][T18567] Cannot create hsr debugfs directory
[  293.732405][T18593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3686'.
[  293.737912][T18593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3686'.
[  293.811083][T18598] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3687'.
[  293.836003][T18567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.888756][T18567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.904921][T18605] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3689'.
[  293.974431][T18567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.033243][T18567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.043378][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'.
[  294.050007][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'.
[  294.098481][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3694'.
[  294.103387][T18613] netlink: 'syz.2.3693': attribute type 4 has an invalid length.
[  294.136151][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'.
[  294.258617][T18567] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  294.264689][T18567] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  294.269499][T18567] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  294.274058][T18567] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  294.349789][T18567] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.365310][T18567] 8021q: adding VLAN 0 to HW filter on device team0
[  294.373623][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.376742][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.398297][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.401293][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.499244][T18567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  294.532000][T18567] veth0_vlan: entered promiscuous mode
[  294.543889][T18567] veth1_vlan: entered promiscuous mode
[  294.555240][T18644] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  294.572261][T18567] veth0_macvtap: entered promiscuous mode
[  294.579513][T18567] veth1_macvtap: entered promiscuous mode
[  294.597552][T18567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.605829][T18567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.621742][T18567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.625643][T18567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.634854][T18567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.639656][T18567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.724631][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.734995][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.762392][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.765792][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.229560][T18678] _Z`Ԁ@: entered promiscuous mode
[  297.859406][T18759] netlink: 'syz.0.3736': attribute type 83 has an invalid length.
[  297.939352][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.943949][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.950556][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.951678][T18767] netlink: 'syz.0.3738': attribute type 1 has an invalid length.
[  297.954722][T18768] netlink: 'syz.0.3738': attribute type 1 has an invalid length.
[  297.960880][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.965017][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.015284][T18772] netlink: 'syz.2.3740': attribute type 32 has an invalid length.
[  298.108546][T18762] chnl_net:caif_netlink_parms(): no params data found
[  298.144342][T18787] netlink: 'syz.0.3743': attribute type 10 has an invalid length.
[  298.187910][T18762] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.191053][T18762] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.194025][T18762] bridge_slave_0: entered allmulticast mode
[  298.200722][T18762] bridge_slave_0: entered promiscuous mode
[  298.211672][T18762] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.212596][T18796] xt_TPROXY: Can be used only with -p tcp or -p udp
[  298.216599][T18762] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.216921][T18796] __nla_validate_parse: 14 callbacks suppressed
[  298.216928][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3745'.
[  298.221553][T18762] bridge_slave_1: entered allmulticast mode
[  298.228036][T18762] bridge_slave_1: entered promiscuous mode
[  298.248047][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3745'.
[  298.267857][T18762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.272927][T18762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.310751][T18762] team0: Port device team_slave_0 added
[  298.315928][T18762] team0: Port device team_slave_1 added
[  298.349954][T18762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.352933][T18762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.364317][T18762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.370999][T18762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.374119][T18762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.385221][T18762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.405864][T18804] netlink: 'syz.2.3748': attribute type 1 has an invalid length.
[  298.409535][T18804] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3748'.
[  298.453380][T18762] hsr_slave_0: entered promiscuous mode
[  298.458227][T18762] hsr_slave_1: entered promiscuous mode
[  298.461186][T18762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.464373][T18762] Cannot create hsr debugfs directory
[  298.482505][T18808] netlink: 'syz.2.3750': attribute type 5 has an invalid length.
[  298.510633][T18808] ip6erspan0: entered promiscuous mode
[  298.531736][T18811] netlink: 'syz.0.3751': attribute type 32 has an invalid length.
[  298.635019][T18762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.734802][T18762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.772011][   T33] audit: type=1800 audit(1751823239.815:9): pid=18820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3752" name="memory.events" dev="tmpfs" ino=6771 res=0 errno=0
[  298.821641][T18762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.859553][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3754'.
[  298.881856][T18762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.919292][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3754'.
[  298.991993][T18841] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  299.028576][T18762] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  299.041370][T18762] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  299.051610][T18762] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  299.057417][T18762] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  299.129191][T18762] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.139498][T18762] 8021q: adding VLAN 0 to HW filter on device team0
[  299.147574][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.150232][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.150428][T18853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3759'.
[  299.161957][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.165015][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.271271][T18762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.299696][T18762] veth0_vlan: entered promiscuous mode
[  299.304847][T18762] veth1_vlan: entered promiscuous mode
[  299.321745][T18762] veth0_macvtap: entered promiscuous mode
[  299.325781][T18762] veth1_macvtap: entered promiscuous mode
[  299.335312][T18762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.342799][T18762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.349448][T18762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.352562][T18762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.355331][T18762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.358215][T18762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.408334][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.410951][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.429954][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.432617][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.728455][T18860] netlink: 'syz.0.3760': attribute type 32 has an invalid length.
[  299.937238][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'.
[  299.940527][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'.
[  300.009559][T18882] ip6tnl3: entered promiscuous mode
[  300.011261][T18882] ip6tnl3: entered allmulticast mode
[  300.013888][T18882] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  300.295741][T18896] xt_CONNSECMARK: invalid mode: 254
[  301.223169][T18934] netlink: 644 bytes leftover after parsing attributes in process `syz.2.3781'.
[  301.280697][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3780'.
[  301.366993][T18945] netlink: 'syz.0.3784': attribute type 1 has an invalid length.
[  301.372382][T18945] SET target dimension over the limit!
[  301.421628][T18948] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  301.735676][T18965] veth11: entered promiscuous mode
[  301.746351][T18965] bond12: (slave veth11): Enslaving as a backup interface with a down link
[  301.781188][T18965] veth13: entered promiscuous mode
[  301.792610][T18965] bond12: (slave veth13): Enslaving as a backup interface with a down link
[  301.837276][T18965] veth15: entered promiscuous mode
[  301.842236][T18965] bond12: (slave veth15): Enslaving as a backup interface with a down link
[  301.860604][T18965] veth17: entered promiscuous mode
[  301.868740][T18965] bond12: (slave veth17): Enslaving as a backup interface with a down link
[  301.889767][T18965] veth19: entered promiscuous mode
[  301.895385][T18965] bond12: (slave veth19): Enslaving as a backup interface with a down link
[  301.913840][T18965] veth21: entered promiscuous mode
[  301.919176][T18965] bond12: (slave veth21): Enslaving as a backup interface with a down link
[  301.936149][T18965] veth23: entered promiscuous mode
[  301.941295][T18965] bond12: (slave veth23): Enslaving as a backup interface with a down link
[  301.959402][T18965] veth25: entered promiscuous mode
[  301.964301][T18965] bond12: (slave veth25): Enslaving as a backup interface with a down link
[  301.988278][T18965] veth27: entered promiscuous mode
[  301.993233][T18965] bond12: (slave veth27): Enslaving as a backup interface with a down link
[  302.011886][T18965] veth29: entered promiscuous mode
[  302.017046][T18965] bond12: (slave veth29): Enslaving as a backup interface with a down link
[  302.034348][T18965] veth31: entered promiscuous mode
[  302.039315][T18965] bond12: (slave veth31): Enslaving as a backup interface with a down link
[  302.057315][T18965] veth33: entered promiscuous mode
[  302.062897][T18965] bond12: (slave veth33): Enslaving as a backup interface with a down link
[  302.080402][T18965] veth35: entered promiscuous mode
[  302.085298][T18965] bond12: (slave veth35): Enslaving as a backup interface with a down link
[  302.102951][T18965] veth37: entered promiscuous mode
[  302.109158][T18965] bond12: (slave veth37): Enslaving as a backup interface with a down link
[  302.131358][T18965] veth39: entered promiscuous mode
[  302.136121][T18965] bond12: (slave veth39): Enslaving as a backup interface with a down link
[  302.164566][T18965] veth41: entered promiscuous mode
[  302.173736][T18965] bond12: (slave veth41): Enslaving as a backup interface with a down link
[  302.190759][T18965] veth43: entered promiscuous mode
[  302.195507][T18965] bond12: (slave veth43): Enslaving as a backup interface with a down link
[  302.219969][T18965] veth45: entered promiscuous mode
[  302.224821][T18965] bond12: (slave veth45): Enslaving as a backup interface with a down link
[  302.239955][T18965] veth47: entered promiscuous mode
[  302.243346][T18965] bond12: (slave veth47): Enslaving as a backup interface with a down link
[  302.253768][T18965] veth49: entered promiscuous mode
[  302.257699][T18965] bond12: (slave veth49): Enslaving as a backup interface with a down link
[  302.268050][T18965] veth51: entered promiscuous mode
[  302.271313][T18965] bond12: (slave veth51): Enslaving as a backup interface with a down link
[  302.281841][T18965] veth53: entered promiscuous mode
[  302.287759][T18965] bond12: (slave veth53): Enslaving as a backup interface with a down link
[  302.298630][T18965] veth55: entered promiscuous mode
[  302.302001][T18965] bond12: (slave veth55): Enslaving as a backup interface with a down link
[  302.313158][T18965] veth57: entered promiscuous mode
[  302.318633][T18965] bond12: (slave veth57): Enslaving as a backup interface with a down link
[  302.329563][T18965] veth59: entered promiscuous mode
[  302.333745][T18965] bond12: (slave veth59): Enslaving as a backup interface with a down link
[  302.346771][T18965] veth61: entered promiscuous mode
[  302.350156][T18965] bond12: (slave veth61): Enslaving as a backup interface with a down link
[  302.362588][T18965] veth63: entered promiscuous mode
[  302.367122][T18965] bond12: (slave veth63): Enslaving as a backup interface with a down link
[  302.387943][T18965] veth65: entered promiscuous mode
[  302.392972][T18965] bond12: (slave veth65): Enslaving as a backup interface with a down link
[  302.412600][T18965] veth67: entered promiscuous mode
[  302.418878][T18965] bond12: (slave veth67): Enslaving as a backup interface with a down link
[  302.440181][T18965] veth69: entered promiscuous mode
[  302.445292][T18965] bond12: (slave veth69): Enslaving as a backup interface with a down link
[  302.469216][T18965] veth71: entered promiscuous mode
[  302.474523][T18965] bond12: (slave veth71): Enslaving as a backup interface with a down link
[  302.518995][T18965] veth73: entered promiscuous mode
[  302.525771][T18965] bond12: (slave veth73): Enslaving as a backup interface with a down link
[  302.549949][T18965] veth75: entered promiscuous mode
[  302.554840][T18965] bond12: (slave veth75): Enslaving as a backup interface with a down link
[  302.972993][T18971] validate_nla: 1 callbacks suppressed
[  302.973011][T18971] netlink: 'syz.0.3792': attribute type 16 has an invalid length.
[  303.107044][T18977] macsec0: entered allmulticast mode
[  303.131800][T18977] veth1_macvtap: entered allmulticast mode
[  303.134339][T18977] macsec0: left allmulticast mode
[  303.139188][T18977] veth1_macvtap: left allmulticast mode
[  303.184269][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  303.190034][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  303.194680][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  303.202349][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  303.205278][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.353000][T18981] chnl_net:caif_netlink_parms(): no params data found
[  303.412148][T18986] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  303.471379][T18981] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.474486][T18981] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.480821][T18981] bridge_slave_0: entered allmulticast mode
[  303.484683][T18981] bridge_slave_0: entered promiscuous mode
[  303.493301][T18981] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.496317][T18981] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.499831][T18981] bridge_slave_1: entered allmulticast mode
[  303.502824][T18981] bridge_slave_1: entered promiscuous mode
[  303.532831][T18981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.540681][T18981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.580410][T18981] team0: Port device team_slave_0 added
[  303.584741][T18981] team0: Port device team_slave_1 added
[  303.620650][T18981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.623102][T18981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.632591][T18981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.639476][T18981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.642354][T18981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.667436][T18981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.711705][T18981] hsr_slave_0: entered promiscuous mode
[  303.714478][T18981] hsr_slave_1: entered promiscuous mode
[  303.723266][T18981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  303.726961][T18981] Cannot create hsr debugfs directory
[  303.810620][T19014] ip6tnl3: entered promiscuous mode
[  303.812365][T19014] ip6tnl3: entered allmulticast mode
[  303.860881][T18981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.894476][T19018] ip6erspan0: entered allmulticast mode
[  303.966516][T18981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.033896][T18981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.094315][T18981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.105703][T19027] tap0: tun_chr_ioctl cmd 1074025676
[  304.109517][T19027] tap0: owner set to 0
[  304.196569][T18981] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  304.201833][T18981] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  304.206859][T18981] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  304.221298][T18981] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  304.295824][T18981] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.314340][T18981] 8021q: adding VLAN 0 to HW filter on device team0
[  304.320189][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.323227][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.339810][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.343151][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.431258][T19045] netlink: 'syz.0.3814': attribute type 3 has an invalid length.
[  304.475648][T18981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.519669][T18981] veth0_vlan: entered promiscuous mode
[  304.525254][T18981] veth1_vlan: entered promiscuous mode
[  304.564110][T18981] veth0_macvtap: entered promiscuous mode
[  304.568162][T18981] veth1_macvtap: entered promiscuous mode
[  304.578045][T18981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.585229][T18981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.591947][T18981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.594727][T18981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.597850][T18981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.600642][T18981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.614887][T19053] netlink: 'syz.0.3815': attribute type 1 has an invalid length.
[  304.670266][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.673730][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.698202][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.700707][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.816179][T19062] __nla_validate_parse: 7 callbacks suppressed
[  304.816191][T19062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3818'.
[  304.850954][T19065] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3819'.
[  304.853946][T19065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3819'.
[  304.901567][T19071] netlink: 'syz.2.3820': attribute type 1 has an invalid length.
[  304.904485][T19071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3820'.
[  304.964210][T19076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3822'.
[  305.227239][T19105] sctp: [Deprecated]: syz.2.3830 (pid 19105) Use of struct sctp_assoc_value in delayed_ack socket option.
[  305.227239][T19105] Use struct sctp_sack_info instead
[  305.240021][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3830'.
[  305.314354][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3830'.
[  306.250595][T19124] netlink: 'syz.2.3835': attribute type 25 has an invalid length.
[  306.272696][T19124] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3835'.
[  306.859491][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'.
[  307.326874][ T5822] Bluetooth: hci2: command 0x0406 tx timeout
[  308.102601][T19155] syzkaller0: entered promiscuous mode
[  308.104430][T19155] syzkaller0: entered allmulticast mode
[  308.365642][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.370278][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.373141][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.376998][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.379704][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.477171][T19173] netlink: 'syz.2.3847': attribute type 17 has an invalid length.
[  308.479686][T19173] netlink: 'syz.2.3847': attribute type 27 has an invalid length.
[  308.573122][T19174] chnl_net:caif_netlink_parms(): no params data found
[  308.615862][T19190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3848'.
[  308.681253][T19174] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.688964][T19174] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.693697][T19174] bridge_slave_0: entered allmulticast mode
[  308.701070][T19174] bridge_slave_0: entered promiscuous mode
[  308.708881][T19194] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  308.712818][T19174] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.729833][T19174] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.733640][T19174] bridge_slave_1: entered allmulticast mode
[  308.737850][T19174] bridge_slave_1: entered promiscuous mode
[  308.789971][T19174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.796983][T19174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.835538][T19174] team0: Port device team_slave_0 added
[  308.843953][T19174] team0: Port device team_slave_1 added
[  308.892952][T19174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.895860][T19174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.911605][T19174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.919047][T19174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.921903][T19174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.938065][T19174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.993965][T19174] hsr_slave_0: entered promiscuous mode
[  308.998929][T19174] hsr_slave_1: entered promiscuous mode
[  309.001963][T19174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.006083][T19174] Cannot create hsr debugfs directory
[  309.026253][T19209] netlink: 'syz.0.3855': attribute type 1 has an invalid length.
[  309.048055][T19209] netlink: 'syz.0.3855': attribute type 2 has an invalid length.
[  309.052056][T19209] netlink: 'syz.0.3855': attribute type 8 has an invalid length.
[  309.072819][T19213] warn_alloc: 1 callbacks suppressed
[  309.072832][T19213] syz.2.3857: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  309.086189][T19213] CPU: 1 UID: 0 PID: 19213 Comm: syz.2.3857 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  309.086202][T19213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.086208][T19213] Call Trace:
[  309.086212][T19213]  <TASK>
[  309.086216][T19213]  dump_stack_lvl+0x189/0x250
[  309.086235][T19213]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.086246][T19213]  ? __pfx__printk+0x10/0x10
[  309.086256][T19213]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  309.086266][T19213]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  309.086275][T19213]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  309.086284][T19213]  warn_alloc+0x214/0x310
[  309.086296][T19213]  ? __pfx_warn_alloc+0x10/0x10
[  309.086307][T19213]  ? __get_vm_area_node+0x28f/0x300
[  309.086321][T19213]  ? hash_net_create+0x358/0xfe0
[  309.086332][T19213]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  309.086340][T19213]  ? do_syscall_64+0xfa/0x3b0
[  309.086358][T19213]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  309.086368][T19213]  ? rcu_is_watching+0x15/0xb0
[  309.086399][T19213]  ? hash_net_create+0x358/0xfe0
[  309.086406][T19213]  ? hash_net_create+0x358/0xfe0
[  309.086412][T19213]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  309.086420][T19213]  ? hash_net_create+0x358/0xfe0
[  309.086427][T19213]  ? hash_net_create+0x2fe/0xfe0
[  309.086436][T19213]  hash_net_create+0x358/0xfe0
[  309.086446][T19213]  ? __nla_parse+0x40/0x60
[  309.086458][T19213]  ? __pfx_hash_net_create+0x10/0x10
[  309.086465][T19213]  ip_set_create+0xa97/0x1940
[  309.086477][T19213]  ? ip_set_create+0x4a2/0x1940
[  309.086491][T19213]  ? __pfx_ip_set_create+0x10/0x10
[  309.086516][T19213]  nfnetlink_rcv_msg+0xb4d/0x1130
[  309.086528][T19213]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  309.086545][T19213]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  309.086567][T19213]  ? __lock_acquire+0xab9/0xd20
[  309.086584][T19213]  netlink_rcv_skb+0x208/0x470
[  309.086593][T19213]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  309.086604][T19213]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  309.086617][T19213]  ? bpf_lsm_capable+0x9/0x20
[  309.086624][T19213]  ? security_capable+0x7e/0x2e0
[  309.086637][T19213]  nfnetlink_rcv+0x26a/0x2520
[  309.086648][T19213]  ? unwind_get_return_address+0x4d/0x90
[  309.086659][T19213]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  309.086668][T19213]  ? arch_stack_walk+0xfc/0x150
[  309.086680][T19213]  ? stack_trace_save+0x9c/0xe0
[  309.086688][T19213]  ? stack_depot_save_flags+0x40/0x900
[  309.086699][T19213]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  309.086710][T19213]  ? kasan_save_track+0x4f/0x80
[  309.086720][T19213]  ? kasan_save_track+0x3e/0x80
[  309.086733][T19213]  ? __lock_acquire+0xab9/0xd20
[  309.086751][T19213]  ? __lock_acquire+0xab9/0xd20
[  309.086765][T19213]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.086775][T19213]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.086782][T19213]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.086792][T19213]  netlink_unicast+0x75b/0x8d0
[  309.086803][T19213]  netlink_sendmsg+0x805/0xb30
[  309.086815][T19213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.086825][T19213]  ? aa_sock_msg_perm+0x94/0x160
[  309.086834][T19213]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  309.086843][T19213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.086851][T19213]  __sock_sendmsg+0x21c/0x270
[  309.086864][T19213]  ____sys_sendmsg+0x505/0x830
[  309.086875][T19213]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.086887][T19213]  ? import_iovec+0x74/0xa0
[  309.086896][T19213]  ___sys_sendmsg+0x21f/0x2a0
[  309.086905][T19213]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.086928][T19213]  ? __fget_files+0x2a/0x420
[  309.086935][T19213]  ? __fget_files+0x3a0/0x420
[  309.086947][T19213]  __x64_sys_sendmsg+0x19b/0x260
[  309.086957][T19213]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  309.086970][T19213]  ? rcu_is_watching+0x15/0xb0
[  309.086982][T19213]  ? do_syscall_64+0xbe/0x3b0
[  309.086990][T19213]  do_syscall_64+0xfa/0x3b0
[  309.086995][T19213]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.087025][T19213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.087035][T19213]  ? exc_page_fault+0x9f/0xf0
[  309.087046][T19213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.087053][T19213] RIP: 0033:0x7f105118e929
[  309.087061][T19213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.087067][T19213] RSP: 002b:00007f1051f10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.087077][T19213] RAX: ffffffffffffffda RBX: 00007f10513b5fa0 RCX: 00007f105118e929
[  309.087082][T19213] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  309.087086][T19213] RBP: 00007f1051210b39 R08: 0000000000000000 R09: 0000000000000000
[  309.087091][T19213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.087095][T19213] R13: 0000000000000000 R14: 00007f10513b5fa0 R15: 00007fffd3379dc8
[  309.087107][T19213]  </TASK>
[  309.241918][T19213] Mem-Info:
[  309.242989][T19213] active_anon:6098 inactive_anon:0 isolated_anon:0
[  309.242989][T19213]  active_file:1366 inactive_file:38321 isolated_file:0
[  309.242989][T19213]  unevictable:1768 dirty:21 writeback:0
[  309.242989][T19213]  slab_reclaimable:10242 slab_unreclaimable:76553
[  309.242989][T19213]  mapped:18291 shmem:2452 pagetables:914
[  309.242989][T19213]  sec_pagetables:0 bounce:0
[  309.242989][T19213]  kernel_misc_reclaimable:0
[  309.242989][T19213]  free:265239 free_pcp:20399 free_cma:0
[  309.270418][T19213] Node 0 active_anon:15140kB inactive_anon:0kB active_file:3176kB inactive_file:8836kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34060kB dirty:52kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5844kB pagetables:1916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.284645][T19213] Node 1 active_anon:9184kB inactive_anon:0kB active_file:2288kB inactive_file:144448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39104kB dirty:32kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9540kB pagetables:1740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.295495][T19213] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  309.308326][T19174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.308869][T19213] lowmem_reserve[]: 0 815 815 815 815
[  309.314109][T19213] Node 0 DMA32 free:382256kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15208kB inactive_anon:0kB active_file:3176kB inactive_file:8836kB unevictable:3536kB writepending:52kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:32544kB local_pcp:19248kB free_cma:0kB
[  309.325097][T19213] lowmem_reserve[]: 0 0 0 0 0
[  309.329590][T19213] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  309.340500][T19213] lowmem_reserve[]: 0 0 854 854 854
[  309.342375][T19213] Node 1 Normal free:204200kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9184kB inactive_anon:0kB active_file:2288kB inactive_file:144448kB unevictable:3536kB writepending:32kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:49660kB local_pcp:33300kB free_cma:0kB
[  309.354289][T19213] lowmem_reserve[]: 0 0 0 0 0
[  309.355985][T19213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  309.361077][T19213] Node 0 DMA32: 1358*4kB (UME) 1181*8kB (UME) 645*16kB (UME) 483*32kB (UME) 111*64kB (UM) 37*128kB (UM) 12*256kB (ME) 18*512kB (UME) 14*1024kB (UM) 8*2048kB (UM) 70*4096kB (UM) = 382224kB
[  309.378804][T19213] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  309.385265][T19213] Node 1 Normal: 450*4kB (UM) 200*8kB (ME) 22*16kB (M) 158*32kB (UM) 70*64kB (UME) 37*128kB (ME) 11*256kB (M) 14*512kB (UM) 20*1024kB (UME) 6*2048kB (UE) 35*4096kB (UM) = 204136kB
[  309.388845][T19224] netlink: 'syz.0.3859': attribute type 32 has an invalid length.
[  309.392684][T19213] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  309.396286][T19213] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  309.400323][T19213] 42139 total pagecache pages
[  309.401914][T19213] 0 pages in swap cache
[  309.403092][T19174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.403457][T19213] Free swap  = 124996kB
[  309.408507][T19213] Total swap = 124996kB
[  309.409932][T19213] 786301 pages RAM
[  309.411201][T19213] 0 pages HighMem/MovableOnly
[  309.412714][T19213] 240368 pages reserved
[  309.414174][T19213] 0 pages cma reserved
[  309.500728][T19174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.562137][T19174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.673142][T19248] vlan2: entered promiscuous mode
[  309.674987][T19248] gretap0: entered promiscuous mode
[  309.726552][T19174] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  309.752432][T19174] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  309.761415][T19174] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  309.769109][T19174] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  309.823906][T19174] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.835224][T19174] 8021q: adding VLAN 0 to HW filter on device team0
[  309.845669][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.848110][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.869523][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.871987][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.973798][T19260] __nla_validate_parse: 7 callbacks suppressed
[  309.973811][T19260] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3868'.
[  310.024788][T19174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.070115][T19174] veth0_vlan: entered promiscuous mode
[  310.081636][T19174] veth1_vlan: entered promiscuous mode
[  310.110833][T19174] veth0_macvtap: entered promiscuous mode
[  310.119139][T19174] veth1_macvtap: entered promiscuous mode
[  310.139430][T19174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.153516][T19174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.161324][T19174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.164682][T19174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.168828][T19174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.171948][T19174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.240147][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.242985][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.270495][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.273509][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.301948][T19274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.415485][T19278] netlink: 'syz.0.3875': attribute type 32 has an invalid length.
[  310.446786][   T55] Bluetooth: hci0: command tx timeout
[  310.647600][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'.
[  310.808192][T19262] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  310.946100][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'.
[  311.970853][T19331] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3889'.
[  312.156357][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'.
[  312.170787][T19349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3894'.
[  312.174769][T19349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3894'.
[  313.540679][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'.
[  313.553126][T19363] macvtap2: entered promiscuous mode
[  313.556035][T19363] macvtap2: entered allmulticast mode
[  313.560283][T19363] erspan0: entered allmulticast mode
[  313.605024][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'.
[  313.614613][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'.
[  313.671180][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.676208][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.681231][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.691154][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.694646][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.939445][T19367] chnl_net:caif_netlink_parms(): no params data found
[  314.162986][T19367] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.166072][T19367] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.171983][T19367] bridge_slave_0: entered allmulticast mode
[  314.179174][T19367] bridge_slave_0: entered promiscuous mode
[  314.185613][T19367] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.189153][T19367] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.192533][T19367] bridge_slave_1: entered allmulticast mode
[  314.198481][T19367] bridge_slave_1: entered promiscuous mode
[  314.229762][T19367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.241077][T19367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.289032][T19367] team0: Port device team_slave_0 added
[  314.294466][T19367] team0: Port device team_slave_1 added
[  314.339404][T19367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.342281][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.356702][T19367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.362542][T19367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.365416][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.376692][T19367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.430202][T19407] netlink: 'syz.2.3908': attribute type 1 has an invalid length.
[  314.450413][T19367] hsr_slave_0: entered promiscuous mode
[  314.453763][T19367] hsr_slave_1: entered promiscuous mode
[  314.467349][T19367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.476868][T19367] Cannot create hsr debugfs directory
[  314.678287][T19367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.755627][T19367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.827622][T19367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.899198][T19367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.068982][T19367] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.075985][T19367] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  315.082341][T19367] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  315.090133][T19367] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  315.161910][T19429] __nla_validate_parse: 3 callbacks suppressed
[  315.161923][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'.
[  315.225059][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'.
[  315.228519][T19367] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.251261][T19433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3915'.
[  315.259089][T19367] 8021q: adding VLAN 0 to HW filter on device team0
[  315.267489][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.270579][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.294335][  T729] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.297005][  T729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.345212][T19367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  315.350253][T19367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  315.440335][T19446] openvswitch: netlink: Actions may not be safe on all matching packets
[  315.510382][T19367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.514542][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'.
[  315.519235][T19454] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3921'.
[  315.523576][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'.
[  315.553414][T19367] veth0_vlan: entered promiscuous mode
[  315.562341][T19367] veth1_vlan: entered promiscuous mode
[  315.594765][T19367] veth0_macvtap: entered promiscuous mode
[  315.601075][T19367] veth1_macvtap: entered promiscuous mode
[  315.619307][T19367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.635348][T19367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.642339][T19367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.645723][T19367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.652196][T19367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.655329][T19367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.727604][ T5822] Bluetooth: hci0: command tx timeout
[  315.754162][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.759842][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.791180][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.794097][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.911647][T19457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3922'.
[  316.086287][T19470] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3925'.
[  316.106608][T19469] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3925'.
[  316.239305][T19484] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3928'.
[  316.685069][T19525] netlink: 'syz.2.3936': attribute type 4 has an invalid length.
[  316.702403][T19526] netlink: 'syz.0.3935': attribute type 32 has an invalid length.
[  316.821768][T19538] team0 (unregistering): left allmulticast mode
[  316.824088][T19538] team0 (unregistering): left promiscuous mode
[  317.171434][T19562] netlink: 'syz.2.3942': attribute type 2 has an invalid length.
[  317.186792][T19554] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  318.831572][T19596] netlink: 'syz.2.3947': attribute type 32 has an invalid length.
[  319.144876][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.150633][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.157769][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.165108][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.170934][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.407751][T19616] chnl_net:caif_netlink_parms(): no params data found
[  319.505460][T19616] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.510728][T19616] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.513624][T19616] bridge_slave_0: entered allmulticast mode
[  319.517717][T19616] bridge_slave_0: entered promiscuous mode
[  319.524662][T19616] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.529496][T19616] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.531988][T19616] bridge_slave_1: entered allmulticast mode
[  319.534860][T19616] bridge_slave_1: entered promiscuous mode
[  319.567206][T19616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.580179][T19616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.583515][T19648] netlink: 'syz.0.3958': attribute type 32 has an invalid length.
[  319.615345][T19616] team0: Port device team_slave_0 added
[  319.633714][T19616] team0: Port device team_slave_1 added
[  319.698139][T19616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.706512][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.721083][T19616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.731590][T19616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.734531][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.763197][T19616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.838204][T19616] hsr_slave_0: entered promiscuous mode
[  319.845151][T19616] hsr_slave_1: entered promiscuous mode
[  319.852358][T19616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.855198][T19616] Cannot create hsr debugfs directory
[  319.925412][T19669] Bluetooth: MGMT ver 1.23
[  319.990012][T19675] netlink: 'syz.2.3965': attribute type 1 has an invalid length.
[  320.026295][T19675] 8021q: adding VLAN 0 to HW filter on device bond13
[  320.070829][T19675] veth77: entered promiscuous mode
[  320.084193][T19675] bond13: (slave veth77): Enslaving as an active interface with a down link
[  320.103033][T19675] erspan0: entered allmulticast mode
[  320.118844][T19678] netlink: 'syz.0.3967': attribute type 32 has an invalid length.
[  320.139700][T19616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.250995][T19616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.323500][T19616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.385071][T19616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.415874][T19702] __nla_validate_parse: 14 callbacks suppressed
[  320.415927][T19702] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.3973'.
[  320.514334][T19616] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  320.523368][T19616] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  320.534656][T19616] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  320.552406][T19616] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  320.581873][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3976'.
[  320.600092][T19712] netlink: 'syz.2.3976': attribute type 1 has an invalid length.
[  320.631208][T19616] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.650999][T19616] 8021q: adding VLAN 0 to HW filter on device team0
[  320.680962][T19726] netlink: 'syz.2.3978': attribute type 32 has an invalid length.
[  320.686480][  T729] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.688957][  T729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.700109][  T729] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.702853][  T729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.845973][T19721] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  320.916069][T19616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.976301][T19616] veth0_vlan: entered promiscuous mode
[  321.001924][T19616] veth1_vlan: entered promiscuous mode
[  321.079101][T19616] veth0_macvtap: entered promiscuous mode
[  321.085412][T19616] veth1_macvtap: entered promiscuous mode
[  321.102295][T19616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.112534][T19616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.120652][T19616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.124420][T19616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.128412][T19616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.132115][T19616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.195050][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.210169][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.230015][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.241729][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.246992][ T5822] Bluetooth: hci0: command tx timeout
[  321.269490][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.272448][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.548088][T19755] netlink: 'syz.0.3984': attribute type 10 has an invalid length.
[  321.556095][T19755] team0: Cannot enslave team device to itself
[  321.655226][T19759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3986'.
[  321.823570][T19768] sctp: [Deprecated]: syz.0.3990 (pid 19768) Use of int in max_burst socket option.
[  321.823570][T19768] Use struct sctp_assoc_value instead
[  321.984555][T19779] atomic_op ffff888035310998 conn xmit_atomic 0000000000000000
[  322.022728][T19784] netlink: 'syz.2.3994': attribute type 32 has an invalid length.
[  322.258801][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3998'.
[  322.283735][T19811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4000'.
[  322.465750][T19821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4002'.
[  322.468924][T19821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4002'.
[  322.471971][T19821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4002'.
[  322.526371][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4005'.
[  322.539176][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4005'.
[  322.541072][T19830] netlink: 'syz.2.4005': attribute type 18 has an invalid length.
[  322.542086][T19829] netlink: 'syz.2.4005': attribute type 18 has an invalid length.
[  322.681443][T19843] netlink: 'syz.2.4009': attribute type 1 has an invalid length.
[  322.699653][T19843] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  324.641608][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.645616][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.652565][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.656539][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.660695][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.714381][T19889] dvmrp0: entered allmulticast mode
[  324.882469][T19883] chnl_net:caif_netlink_parms(): no params data found
[  324.916090][T19903] veth1_to_bond: entered allmulticast mode
[  324.935929][T19901] veth1_to_bond: left allmulticast mode
[  324.970187][T19883] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.972764][T19883] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.975128][T19883] bridge_slave_0: entered allmulticast mode
[  324.983235][T19883] bridge_slave_0: entered promiscuous mode
[  324.990480][T19883] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.993108][T19883] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.995500][T19883] bridge_slave_1: entered allmulticast mode
[  325.003442][T19883] bridge_slave_1: entered promiscuous mode
[  325.038009][T19883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.048753][T19883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.087314][T19883] team0: Port device team_slave_0 added
[  325.092189][T19883] team0: Port device team_slave_1 added
[  325.123815][T19883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.127025][T19883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.136126][T19883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.141322][T19883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.144059][T19883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.154134][T19883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.189474][T19883] hsr_slave_0: entered promiscuous mode
[  325.191975][T19883] hsr_slave_1: entered promiscuous mode
[  325.194754][T19883] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.197641][T19883] Cannot create hsr debugfs directory
[  325.314504][T19883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.423866][T19883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.506369][T19883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.585251][T19883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.738385][T19883] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  325.748947][T19883] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  325.758441][T19883] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  325.769276][T19883] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  325.801475][T19883] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.804059][T19883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.807513][T19883] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.809809][T19883] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.865700][T19883] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.879681][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.907716][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.925809][T19883] 8021q: adding VLAN 0 to HW filter on device team0
[  325.938611][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.941020][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.984058][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.987264][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.193242][T19883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.218293][T19946] __nla_validate_parse: 5 callbacks suppressed
[  326.218303][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4029'.
[  326.232629][T19948] validate_nla: 2 callbacks suppressed
[  326.232646][T19948] netlink: 'syz.0.4027': attribute type 32 has an invalid length.
[  326.281781][T19883] veth0_vlan: entered promiscuous mode
[  326.303311][T19883] veth1_vlan: entered promiscuous mode
[  326.353814][T19883] veth0_macvtap: entered promiscuous mode
[  326.358281][T19954] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  326.384879][T19883] veth1_macvtap: entered promiscuous mode
[  326.424454][T19883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.453185][T19883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.471296][T19883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.475140][T19883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.489087][T19883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.494177][T19883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.597221][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.600118][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.637273][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'.
[  326.641162][  T729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.644436][  T729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.682280][T19970] xt_CT: No such helper "netbios-ns"
[  326.692844][ T5822] Bluetooth: hci0: command tx timeout
[  326.998911][T19984] netlink: 'syz.0.4040': attribute type 27 has an invalid length.
[  327.657553][T19988] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  327.738484][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4042'.
[  327.742388][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4042'.
[  328.175532][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4052'.
[  330.044729][T20072] openvswitch: netlink: Key type 16144 is out of range max 32
[  330.068712][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.074584][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.078982][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.083469][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.087110][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  330.283019][T20073] chnl_net:caif_netlink_parms(): no params data found
[  330.410946][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'.
[  330.414707][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4061'.
[  330.430142][T20073] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.433353][T20073] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.440315][T20073] bridge_slave_0: entered allmulticast mode
[  330.450735][T20073] bridge_slave_0: entered promiscuous mode
[  330.454652][T20073] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.458066][T20073] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.460571][T20073] bridge_slave_1: entered allmulticast mode
[  330.463669][T20095] netlink: 'syz.2.4061': attribute type 5 has an invalid length.
[  330.464846][T20073] bridge_slave_1: entered promiscuous mode
[  330.485175][T20089] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  330.504653][T20073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.512356][T20073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.558848][T20073] team0: Port device team_slave_0 added
[  330.568054][T20073] team0: Port device team_slave_1 added
[  330.625814][T20073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.636532][T20073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.648008][T20073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.654125][T20073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.657829][T20073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.669737][T20073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.700635][T20103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.720230][T20073] hsr_slave_0: entered promiscuous mode
[  330.723168][T20073] hsr_slave_1: entered promiscuous mode
[  330.725599][T20073] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.728723][T20073] Cannot create hsr debugfs directory
[  330.987620][T20073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.048290][T20073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.121874][T20073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.178417][T20127] netlink: 'syz.0.4071': attribute type 32 has an invalid length.
[  331.224704][T20073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.357815][T20073] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  331.372470][T20073] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  331.385335][T20073] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  331.392514][T20073] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  331.527613][T20073] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.550285][T20073] 8021q: adding VLAN 0 to HW filter on device team0
[  331.563905][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.567121][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.569749][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4073'.
[  331.578619][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.581850][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.754404][T20073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.763596][T20156] xt_ecn: cannot match TCP bits for non-tcp packets
[  331.789374][T20073] veth0_vlan: entered promiscuous mode
[  331.797728][T20073] veth1_vlan: entered promiscuous mode
[  331.840834][T20073] veth0_macvtap: entered promiscuous mode
[  331.844901][T20073] veth1_macvtap: entered promiscuous mode
[  331.863109][T20073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.873503][T20073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.896096][T20073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.899514][T20073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.902300][T20073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.905812][T20073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.924643][T20161] netlink: 'syz.0.4078': attribute type 32 has an invalid length.
[  332.004889][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.007783][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.044931][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.052831][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.128433][   T55] Bluetooth: hci0: command tx timeout
[  332.221839][T20177] syzkaller1: tun_chr_ioctl cmd 1074025672
[  332.224370][T20177] syzkaller1: ignored: set checksum enabled
[  332.244792][T20179] netlink: 'syz.0.4081': attribute type 2 has an invalid length.
[  332.248638][T20179] netlink: 'syz.0.4081': attribute type 2 has an invalid length.
[  332.252104][T20179] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4081'.
[  332.445524][T20192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4086'.
[  332.456307][T20192] netlink: 'syz.2.4086': attribute type 1 has an invalid length.
[  332.459372][T20192] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4086'.
[  332.733692][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'.
[  333.025663][T20231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4099'.
[  333.071721][T20237] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4101'.
[  333.203425][T20245] netlink: 'syz.0.4103': attribute type 1 has an invalid length.
[  333.283045][T20247] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4105'.
[  333.367317][T20249] nbd: socks must be embedded in a SOCK_ITEM attr
[  333.371722][T20249] block nbd1: shutting down sockets
[  333.493963][T20253] nbd: couldn't find device at index 536870912
[  333.611642][T20260] netlink: 'syz.2.4111': attribute type 32 has an invalid length.
[  335.564647][T20271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4113'.
[  335.649274][T20278] netlink: 'syz.0.4114': attribute type 1 has an invalid length.
[  335.666869][T20278] veth7: entered promiscuous mode
[  335.689561][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  335.693267][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  335.697091][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  335.708496][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  335.713316][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  335.805677][T20283] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4115'.
[  335.893032][T20279] chnl_net:caif_netlink_parms(): no params data found
[  335.966252][T20279] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.972329][T20279] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.975001][T20279] bridge_slave_0: entered allmulticast mode
[  335.979454][T20294] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001
[  335.982887][T20279] bridge_slave_0: entered promiscuous mode
[  335.988026][T20279] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.991030][T20279] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.993634][T20279] bridge_slave_1: entered allmulticast mode
[  336.001504][T20279] bridge_slave_1: entered promiscuous mode
[  336.030377][T20279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.036064][T20279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.070272][T20279] team0: Port device team_slave_0 added
[  336.074008][T20279] team0: Port device team_slave_1 added
[  336.094983][T20279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.097789][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.107069][T20279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.115059][T20279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.117989][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.130029][T20279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.180608][T20279] hsr_slave_0: entered promiscuous mode
[  336.185079][T20279] hsr_slave_1: entered promiscuous mode
[  336.189300][T20279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  336.192569][T20279] Cannot create hsr debugfs directory
[  336.293527][T20303] netlink: 'syz.0.4119': attribute type 32 has an invalid length.
[  336.371685][T20279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.441477][T20279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.498278][T20279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.558521][T20279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.643324][T20279] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  336.655456][T20279] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  336.659794][T20279] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  336.664168][T20279] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  336.685940][T20279] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.688415][T20279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.690906][T20279] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.693580][T20279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.699174][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.702562][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.750986][T20279] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.762682][T20279] 8021q: adding VLAN 0 to HW filter on device team0
[  336.771489][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.774391][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.789413][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.792504][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.902632][T20279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.935532][T20279] veth0_vlan: entered promiscuous mode
[  336.943373][T20279] veth1_vlan: entered promiscuous mode
[  336.963150][T20279] veth0_macvtap: entered promiscuous mode
[  336.968043][T20279] veth1_macvtap: entered promiscuous mode
[  336.977628][T20279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.985055][T20279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.990914][T20279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.993791][T20279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.997540][T20279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.000792][T20279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.048601][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.051364][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.070025][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.072734][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.516157][T20352] __nla_validate_parse: 1 callbacks suppressed
[  337.516167][T20352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4130'.
[  337.526130][T20353] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4127'.
[  337.531213][T20352] netlink: 'syz.2.4130': attribute type 21 has an invalid length.
[  337.533773][T20352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4130'.
[  337.568070][T20355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4131'.
[  337.571056][T20355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4131'.
[  337.655386][T20363] netlink: 'syz.2.4132': attribute type 32 has an invalid length.
[  338.750221][T20388] netlink: 'syz.2.4138': attribute type 21 has an invalid length.
[  338.753603][T20388] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4138'.
[  338.761820][T20388] netlink: 'syz.2.4138': attribute type 21 has an invalid length.
[  338.764786][T20388] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4138'.
[  338.835631][T20395] netlink: 'syz.2.4140': attribute type 32 has an invalid length.
[  340.760462][T20406] netlink: 'syz.2.4142': attribute type 3 has an invalid length.
[  340.763734][T20406] netlink: 'syz.2.4142': attribute type 1 has an invalid length.
[  340.775895][T20406] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4142'.
[  340.843373][T20406] netlink: 'syz.2.4142': attribute type 32 has an invalid length.
[  340.845921][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'.
[  340.851134][T20406] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  340.883225][T20413] netlink: 'syz.0.4143': attribute type 5 has an invalid length.
[  340.885883][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'.
[  340.944684][T20417] sctp: [Deprecated]: syz.0.4144 (pid 20417) Use of int in max_burst socket option.
[  340.944684][T20417] Use struct sctp_assoc_value instead
[  341.116063][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.127520][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.133292][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.137123][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.140261][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.280556][T20452] netlink: 'syz.0.4153': attribute type 32 has an invalid length.
[  341.363514][T20462] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  341.368738][T20462] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  341.375439][T20433] chnl_net:caif_netlink_parms(): no params data found
[  341.493298][T20433] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.495884][T20433] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.498871][T20433] bridge_slave_0: entered allmulticast mode
[  341.501610][T20433] bridge_slave_0: entered promiscuous mode
[  341.507873][T20433] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.511186][T20433] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.513596][T20433] bridge_slave_1: entered allmulticast mode
[  341.516933][T20433] bridge_slave_1: entered promiscuous mode
[  341.544449][T20433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.558688][T20433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.589747][T20433] team0: Port device team_slave_0 added
[  341.600463][T20433] team0: Port device team_slave_1 added
[  341.632059][T20433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.634357][T20433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.653582][T20433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.662170][T20433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.664535][T20433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.677627][T20433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.716337][T20433] hsr_slave_0: entered promiscuous mode
[  341.720419][T20433] hsr_slave_1: entered promiscuous mode
[  341.722639][T20433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  341.725413][T20433] Cannot create hsr debugfs directory
[  341.792111][T20499] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  341.869138][T20433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.937576][T20433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.997056][T20433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.029044][T20521] unsupported nlmsg_type 40
[  342.097517][T20433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.311337][T20433] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  342.319524][T20433] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  342.400819][T20433] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  342.412779][T20433] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  342.540326][T20433] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.548786][T20433] 8021q: adding VLAN 0 to HW filter on device team0
[  342.571553][T20433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  342.575040][T20433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.587002][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.589687][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.594149][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.596949][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.717849][T20567] __nla_validate_parse: 11 callbacks suppressed
[  342.717862][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'.
[  342.777849][T20433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.804986][T20433] veth0_vlan: entered promiscuous mode
[  342.812189][T20433] veth1_vlan: entered promiscuous mode
[  342.831283][T20433] veth0_macvtap: entered promiscuous mode
[  342.838016][T20433] veth1_macvtap: entered promiscuous mode
[  342.854083][T20433] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.874310][T20433] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.880075][T20433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.883714][T20433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.887691][T20433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.891361][T20433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.991012][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.994539][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.033582][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.037258][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.525410][T20582] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  343.960925][T20587] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4188'.
[  344.023374][T20592] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.785490][T20621] validate_nla: 5 callbacks suppressed
[  344.785504][T20621] netlink: 'syz.2.4196': attribute type 2 has an invalid length.
[  344.791676][T20621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4196'.
[  346.819840][T20634] netlink: 'syz.0.4200': attribute type 32 has an invalid length.
[  346.914544][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  346.918306][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  346.921298][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  346.924446][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  346.928829][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  347.043675][T20643] chnl_net:caif_netlink_parms(): no params data found
[  347.108759][T20643] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.111373][T20643] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.113896][T20643] bridge_slave_0: entered allmulticast mode
[  347.117198][T20643] bridge_slave_0: entered promiscuous mode
[  347.120576][T20643] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.123055][T20643] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.125532][T20643] bridge_slave_1: entered allmulticast mode
[  347.129951][T20643] bridge_slave_1: entered promiscuous mode
[  347.156874][T20643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.162245][T20643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.204127][T20643] team0: Port device team_slave_0 added
[  347.209383][T20643] team0: Port device team_slave_1 added
[  347.237850][T20643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.240250][T20643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.249669][T20643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.255743][T20643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.258329][T20643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.273966][T20643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.310953][T20643] hsr_slave_0: entered promiscuous mode
[  347.313544][T20643] hsr_slave_1: entered promiscuous mode
[  347.316136][T20643] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.319132][T20643] Cannot create hsr debugfs directory
[  347.424893][T20679] netlink: 'syz.0.4205': attribute type 29 has an invalid length.
[  347.465541][T20643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.485226][T20679] netlink: 'syz.0.4205': attribute type 29 has an invalid length.
[  347.543710][T20643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.589570][T20688] netlink: 'syz.2.4210': attribute type 5 has an invalid length.
[  347.640292][T20643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.705847][T20643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.733135][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'.
[  347.814422][T20643] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  347.823635][T20643] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  347.831027][T20643] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  347.839329][T20643] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  347.873277][T20643] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.875612][T20643] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.878186][T20643] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.880743][T20643] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.973984][T20643] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.001801][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.005366][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.019546][T20643] 8021q: adding VLAN 0 to HW filter on device team0
[  348.034721][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.037972][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.094927][T20730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4220'.
[  348.113854][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.116607][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.378825][T20643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.418641][T20643] veth0_vlan: entered promiscuous mode
[  348.424858][T20643] veth1_vlan: entered promiscuous mode
[  348.444107][T20643] veth0_macvtap: entered promiscuous mode
[  348.450008][T20643] veth1_macvtap: entered promiscuous mode
[  348.464517][T20643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.492766][T20643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.510010][T20643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.518971][T20643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.525907][T20643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.529852][T20643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.561439][T20740] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4222'.
[  348.565004][T20740] bridge_slave_1: entered promiscuous mode
[  348.582839][T20740] bridge_slave_1: entered allmulticast mode
[  348.611497][ T8440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.614234][ T8440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.648220][ T8440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.651327][ T8440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.882131][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4226'.
[  349.007400][ T5822] Bluetooth: hci0: command tx timeout
[  349.052708][T20757] netlink: 'syz.2.4227': attribute type 1 has an invalid length.
[  349.295095][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4229'.
[  349.298888][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4229'.
[  349.305608][T20767] netlink: 'syz.2.4229': attribute type 11 has an invalid length.
[  349.316859][T20767] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4229'.
[  349.581251][T20779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4233'.
[  349.652586][T20781] netlink: 'syz.0.4234': attribute type 1 has an invalid length.
[  349.655339][T20781] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4234'.
[  350.258667][T20814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4245'.
[  350.269845][T20814] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  350.273429][T20814] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  350.277198][T20814] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  350.280610][T20814] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  350.837206][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.845680][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.859325][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.864936][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.869405][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  351.069171][T20827] chnl_net:caif_netlink_parms(): no params data found
[  351.124862][T20827] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.132038][T20827] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.136862][T20827] bridge_slave_0: entered allmulticast mode
[  351.140213][T20827] bridge_slave_0: entered promiscuous mode
[  351.144359][T20827] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.150761][T20827] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.154296][T20827] bridge_slave_1: entered allmulticast mode
[  351.178157][T20827] bridge_slave_1: entered promiscuous mode
[  351.216268][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.225338][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.278099][T20827] team0: Port device team_slave_0 added
[  351.283652][T20827] team0: Port device team_slave_1 added
[  351.335367][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.339077][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.351872][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.359067][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.362028][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.377047][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.419816][T20827] hsr_slave_0: entered promiscuous mode
[  351.423415][T20827] hsr_slave_1: entered promiscuous mode
[  351.427056][T20827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  351.430304][T20827] Cannot create hsr debugfs directory
[  351.545016][T20827] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  351.609416][T20827] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  351.650420][T20827] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  351.735312][T20827] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  351.896103][T20827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  351.905252][T20827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  351.915963][T20827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  351.925142][T20827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  351.977154][T20827] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.000404][T20827] 8021q: adding VLAN 0 to HW filter on device team0
[  352.010418][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.012727][ T8440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.018967][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.021512][ T8440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.132274][T20827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.158969][T20827] veth0_vlan: entered promiscuous mode
[  352.164732][T20827] veth1_vlan: entered promiscuous mode
[  352.184334][T20827] veth0_macvtap: entered promiscuous mode
[  352.192095][T20827] veth1_macvtap: entered promiscuous mode
[  352.203357][T20827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.211727][T20827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.218046][T20827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.221491][T20827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.224915][T20827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.229446][T20827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.303906][ T8440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.307209][ T8440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.338329][ T8440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.341342][ T8440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.559659][T20876] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  353.535550][T20883] bond61: entered promiscuous mode
[  353.541429][T20883] bond61: entered allmulticast mode
[  353.543939][T20883] 8021q: adding VLAN 0 to HW filter on device bond61
[  353.846542][T20898] __nla_validate_parse: 1 callbacks suppressed
[  353.846553][T20898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4263'.
[  354.037765][ T8440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.040505][ T8440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.706031][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  354.715494][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  354.720070][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  354.725414][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  354.729406][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  354.902491][T20929] chnl_net:caif_netlink_parms(): no params data found
[  354.977243][T20929] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.979685][T20929] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.982365][T20929] bridge_slave_0: entered allmulticast mode
[  354.985436][T20929] bridge_slave_0: entered promiscuous mode
[  354.990630][T20929] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.993196][T20929] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.995993][T20929] bridge_slave_1: entered allmulticast mode
[  354.999920][T20929] bridge_slave_1: entered promiscuous mode
[  355.024394][T20929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.031064][T20929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.051552][T20929] team0: Port device team_slave_0 added
[  355.063617][T20929] team0: Port device team_slave_1 added
[  355.082091][T20929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.084862][T20929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.096034][T20929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.101226][T20929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.103788][T20929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.112962][T20929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.164339][T20929] hsr_slave_0: entered promiscuous mode
[  355.167157][T20929] hsr_slave_1: entered promiscuous mode
[  355.169352][T20929] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.171900][T20929] Cannot create hsr debugfs directory
[  355.256129][T20929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.379790][T20948] netlink: 'syz.0.4274': attribute type 32 has an invalid length.
[  355.496365][T20957] netlink: 'syz.0.4275': attribute type 1 has an invalid length.
[  355.529177][T20957] 8021q: adding VLAN 0 to HW filter on device bond62
[  355.546296][T20957] bond62: (slave gretap3): making interface the new active one
[  355.550824][T20957] bond62: (slave gretap3): Enslaving as an active interface with an up link
[  355.663559][T20962] netlink: 'syz.0.4277': attribute type 1 has an invalid length.
[  355.666239][T20962] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4277'.
[  355.778632][T20929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.786109][T20970] netlink: 'syz.0.4279': attribute type 12 has an invalid length.
[  355.848966][T20929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.900738][T20929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.029213][T20929] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  356.035064][T20929] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  356.041320][T20929] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  356.048283][T20929] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  356.126234][T20929] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.142796][T20929] 8021q: adding VLAN 0 to HW filter on device team0
[  356.150604][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.153555][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.167789][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.170616][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.324013][T20929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.372016][T20929] veth0_vlan: entered promiscuous mode
[  356.391814][T20929] veth1_vlan: entered promiscuous mode
[  356.417072][T20929] veth0_macvtap: entered promiscuous mode
[  356.422793][T20929] veth1_macvtap: entered promiscuous mode
[  356.436257][T20929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  356.447122][T20929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  356.454031][T20929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.459621][T20929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.463190][T20929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.466998][T20929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.543568][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.557542][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.583533][  T729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.588521][  T729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.758381][T20985] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4281'.
[  357.090172][T21004] netlink: 'syz.0.4287': attribute type 4 has an invalid length.
[  357.109898][T21003] netlink: 'syz.0.4287': attribute type 4 has an invalid length.
[  357.179686][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'.
[  357.341777][T21015] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4289'.
[  357.345778][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'.
[  357.349932][T21012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4289'.
[  357.353748][T21012] netlink: 'syz.0.4289': attribute type 13 has an invalid length.
[  357.573376][T21019] netlink: 'syz.0.4291': attribute type 10 has an invalid length.
[  357.614223][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4292'.
[  357.763150][T21027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4293'.
[  357.769541][T21027] netlink: 'syz.0.4293': attribute type 1 has an invalid length.
[  357.788618][T21027] 8021q: adding VLAN 0 to HW filter on device bond63
[  357.801276][T21027] veth7: entered promiscuous mode
[  358.614978][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'.
[  358.663601][T21054] netlink: 'syz.0.4302': attribute type 11 has an invalid length.
[  358.666364][T21054] netlink: 'syz.0.4302': attribute type 4 has an invalid length.
[  358.792119][   T33] audit: type=1107 audit(1751823299.835:10): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^țqٿ%)Vr〃'
[  358.877313][T21062] delete_channel: no stack
[  359.016039][T21075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.019857][T21075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.023701][T21075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.029042][T21075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.033188][T21075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.209976][T21072] chnl_net:caif_netlink_parms(): no params data found
[  359.283997][T21072] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.286767][T21072] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.291853][T21072] bridge_slave_0: entered allmulticast mode
[  359.294897][T21072] bridge_slave_0: entered promiscuous mode
[  359.298822][T21072] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.301196][T21072] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.304142][T21072] bridge_slave_1: entered allmulticast mode
[  359.307558][T21072] bridge_slave_1: entered promiscuous mode
[  359.339203][T21072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.344336][T21072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.368825][T21096] __nla_validate_parse: 4 callbacks suppressed
[  359.368840][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'.
[  359.380778][T21072] team0: Port device team_slave_0 added
[  359.385262][T21072] team0: Port device team_slave_1 added
[  359.420159][T21072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.422442][T21072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.432379][T21072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.441808][T21072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.444794][T21072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.455325][T21072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.459588][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'.
[  359.506022][T21072] hsr_slave_0: entered promiscuous mode
[  359.511833][T21072] hsr_slave_1: entered promiscuous mode
[  359.514103][T21072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.520024][T21072] Cannot create hsr debugfs directory
[  359.635432][T21072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.696343][T21112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  360.073225][T21072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.137594][T21072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.149342][T21126] tipc: Enabled bearer <eth:gre0>, priority 21
[  360.169124][T21072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.288917][T21072] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  360.293691][T21072] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  360.307878][T21072] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  360.312266][T21072] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  360.368555][T21072] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.392822][T21072] 8021q: adding VLAN 0 to HW filter on device team0
[  360.401339][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.404370][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.414100][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.417261][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.610162][T21072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.653270][T21072] veth0_vlan: entered promiscuous mode
[  360.674331][T21072] veth1_vlan: entered promiscuous mode
[  360.722675][T21072] veth0_macvtap: entered promiscuous mode
[  360.738077][T21072] veth1_macvtap: entered promiscuous mode
[  360.760275][T21072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.781911][T21072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.804325][T21072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.810679][T21072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.814206][T21072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.818682][T21072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.918471][  T729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.921297][  T729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.946034][  T729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.950599][  T729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.122344][T21142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4323'.
[  361.153626][T21142] 8021q: adding VLAN 0 to HW filter on device bond64
[  361.177924][T21142] macvlan6: entered promiscuous mode
[  361.180253][T21142] macvlan6: entered allmulticast mode
[  361.183648][T21142] bond64: (slave macvlan6): Opening slave failed
[  361.332651][T21145] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4324'.
[  362.600838][T21174] validate_nla: 1 callbacks suppressed
[  362.600855][T21174] netlink: 'syz.0.4333': attribute type 1 has an invalid length.
[  362.643830][T21174] 8021q: adding VLAN 0 to HW filter on device bond65
[  362.672682][T21174] 8021q: adding VLAN 0 to HW filter on device bond65
[  362.675832][T21174] bond65: (slave vxcan1): The slave device specified does not support setting the MAC address
[  362.683130][T21174] bond65: (slave vxcan1): Error -95 calling set_mac_address
[  362.718198][T21176] bond65: (slave bridge16): Enslaving as an active interface with a down link
[  362.947283][T21185] veth0: entered promiscuous mode
[  363.469674][T21180] veth0: left promiscuous mode
[  363.640313][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.645774][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.659048][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.665962][T21224] can: request_module (can-proto-5) failed.
[  363.669046][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.672727][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.817382][T21222] chnl_net:caif_netlink_parms(): no params data found
[  363.882258][T21222] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.884867][T21222] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.888437][T21222] bridge_slave_0: entered allmulticast mode
[  363.891888][T21222] bridge_slave_0: entered promiscuous mode
[  363.898250][T21222] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.901527][T21222] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.904636][T21222] bridge_slave_1: entered allmulticast mode
[  363.908765][T21222] bridge_slave_1: entered promiscuous mode
[  363.937963][T21222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.945117][T21222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.984856][T21222] team0: Port device team_slave_0 added
[  363.988982][T21222] team0: Port device team_slave_1 added
[  364.013397][T21222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.015781][T21222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.024878][T21222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.031347][T21222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.034285][T21222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.044234][T21222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.133235][T21222] hsr_slave_0: entered promiscuous mode
[  364.137587][T21222] hsr_slave_1: entered promiscuous mode
[  364.140733][T21222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  364.143610][T21222] Cannot create hsr debugfs directory
[  364.274567][T21222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.591332][T21238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4339'.
[  364.594300][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4339'.
[  364.775746][T21222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.813151][T21251] ip6gre2: entered promiscuous mode
[  364.823550][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4343'.
[  364.844446][T21222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.909197][T21222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.041315][T21222] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  365.058674][T21222] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  365.068727][T21222] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  365.073359][T21222] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  365.132953][T21222] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.145607][T21222] 8021q: adding VLAN 0 to HW filter on device team0
[  365.151777][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.154723][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.162576][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.165494][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.205654][T21222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.300080][T21222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.334312][T21222] veth0_vlan: entered promiscuous mode
[  365.348589][T21222] veth1_vlan: entered promiscuous mode
[  365.373919][T21222] veth0_macvtap: entered promiscuous mode
[  365.391358][T21222] veth1_macvtap: entered promiscuous mode
[  365.419956][T21222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.430714][T21222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.436345][T21222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.446494][T21222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.450222][T21222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.453776][T21222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.465209][T21271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4345'.
[  365.470421][T21271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4345'.
[  365.476127][T21271] tipc: Trying to set illegal importance in message
[  365.584070][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.589195][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.620327][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.622879][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.741580][T21275] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.4347'.
[  365.774748][T21277] netlink: 'syz.0.4348': attribute type 32 has an invalid length.
[  366.198426][T21299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4353'.
[  367.215477][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4355'.
[  367.218870][T21308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4355'.
[  367.296068][T21312] xt_socket: unknown flags 0xd0
[  367.304558][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4357'.
[  368.517511][T21075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  368.522752][T21075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  368.530588][T21075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  368.540184][T21075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  368.544445][T21075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  368.705123][T21322] chnl_net:caif_netlink_parms(): no params data found
[  368.768835][T21322] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.771325][T21322] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.773790][T21322] bridge_slave_0: entered allmulticast mode
[  368.779818][T21322] bridge_slave_0: entered promiscuous mode
[  368.783153][T21322] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.785926][T21322] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.789877][T21322] bridge_slave_1: entered allmulticast mode
[  368.793730][T21322] bridge_slave_1: entered promiscuous mode
[  368.826746][T21322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.834041][T21322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.870404][T21322] team0: Port device team_slave_0 added
[  368.874081][T21322] team0: Port device team_slave_1 added
[  368.905117][T21322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.907838][T21322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.917396][T21322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.922150][T21322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.924427][T21322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.933904][T21322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.966337][T21322] hsr_slave_0: entered promiscuous mode
[  368.969210][T21322] hsr_slave_1: entered promiscuous mode
[  368.971503][T21322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.973857][T21322] Cannot create hsr debugfs directory
[  369.075510][T21322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.165592][T21322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.242097][T21322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.314780][T21322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.463879][T21322] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  369.470828][T21322] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  369.477380][T21322] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  369.485176][T21322] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  369.531701][T21322] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.534896][T21322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.538388][T21322] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.541389][T21322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.661990][T21322] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.675758][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.682032][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.726069][T21322] 8021q: adding VLAN 0 to HW filter on device team0
[  369.735971][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.739176][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.749325][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.752454][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.895622][T21322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.935579][T21322] veth0_vlan: entered promiscuous mode
[  369.941553][T21322] veth1_vlan: entered promiscuous mode
[  369.960547][T21322] veth0_macvtap: entered promiscuous mode
[  369.965054][T21322] veth1_macvtap: entered promiscuous mode
[  369.979954][T21322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.988252][T21322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.993859][T21322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.998092][T21322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.001486][T21322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.009504][T21322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.069474][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.076752][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.102961][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.109318][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.282830][T21357] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  370.536042][T21368] lo: Caught tx_queue_len zero misconfig
[  370.892906][T21383] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  370.905034][T21383] tunl0: Caught tx_queue_len zero misconfig
[  370.923022][T21383] delete_channel: no stack
[  371.053997][T21397] __nla_validate_parse: 3 callbacks suppressed
[  371.054017][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4377'.
[  371.060791][T21397] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI
[  371.064946][T21397] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef]
[  371.068243][T21397] CPU: 1 UID: 0 PID: 21397 Comm: syz.0.4377 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  371.072635][T21397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.076003][T21397] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  371.077775][T21397] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  371.084239][T21397] RSP: 0018:ffffc90004eb70f0 EFLAGS: 00010203
[  371.086155][T21397] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  371.088671][T21397] RDX: ffffc900036e1000 RSI: 00000000000002e8 RDI: 00000000000002e9
[  371.091155][T21397] RBP: dffffc0000000000 R08: ffff88803cc5d640 R09: 0000000000000002
[  371.093746][T21397] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  371.096254][T21397] R13: ffff888039e8e000 R14: 00000000000002ec R15: ffff888039e8e000
[  371.098790][T21397] FS:  00007fbad19e56c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  371.101605][T21397] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  371.103743][T21397] CR2: 00007fbad0b74980 CR3: 0000000122d36000 CR4: 00000000000006f0
[  371.106228][T21397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  371.108744][T21397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  371.111216][T21397] Call Trace:
[  371.112374][T21397]  <TASK>
[  371.113148][T21398] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4377'.
[  371.113343][T21397]  qdisc_tree_reduce_backlog+0x29c/0x480
[  371.118385][T21397]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  371.120278][T21397]  hhf_change+0x764/0xad0
[  371.121712][T21397]  ? __pfx_hhf_change+0x10/0x10
[  371.123704][T21397]  ? __pfx_hhf_init+0x10/0x10
[  371.125509][T21397]  hhf_init+0x213/0x950
[  371.126875][T21397]  ? __pfx_hhf_init+0x10/0x10
[  371.128416][T21397]  qdisc_create+0x7ac/0xea0
[  371.129922][T21397]  tc_modify_qdisc+0x1426/0x2010
[  371.131554][T21397]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  371.133350][T21397]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  371.135088][T21397]  rtnetlink_rcv_msg+0x77c/0xb70
[  371.136722][T21397]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  371.138369][T21397]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  371.140081][T21397]  netlink_rcv_skb+0x208/0x470
[  371.141645][T21397]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  371.143852][T21397]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  371.145797][T21397]  ? netlink_deliver_tap+0x2e/0x1b0
[  371.147548][T21397]  ? netlink_deliver_tap+0x2e/0x1b0
[  371.149167][T21397]  netlink_unicast+0x75b/0x8d0
[  371.150704][T21397]  netlink_sendmsg+0x805/0xb30
[  371.152302][T21397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  371.154238][T21397]  ? aa_sock_msg_perm+0x94/0x160
[  371.155905][T21397]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  371.157582][T21397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  371.159575][T21397]  __sock_sendmsg+0x21c/0x270
[  371.161097][T21397]  ____sys_sendmsg+0x505/0x830
[  371.162713][T21397]  ? __pfx_____sys_sendmsg+0x10/0x10
[  371.164397][T21397]  ? import_iovec+0x74/0xa0
[  371.165853][T21397]  ___sys_sendmsg+0x21f/0x2a0
[  371.167359][T21397]  ? __pfx____sys_sendmsg+0x10/0x10
[  371.169045][T21397]  ? __fget_files+0x2a/0x420
[  371.170600][T21397]  ? __fget_files+0x3a0/0x420
[  371.172149][T21397]  __x64_sys_sendmsg+0x19b/0x260
[  371.173822][T21397]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  371.175534][T21397]  ? rcu_is_watching+0x15/0xb0
[  371.177091][T21397]  ? do_syscall_64+0xbe/0x3b0
[  371.178588][T21397]  do_syscall_64+0xfa/0x3b0
[  371.180036][T21397]  ? lockdep_hardirqs_on+0x9c/0x150
[  371.181737][T21397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.183802][T21397]  ? exc_page_fault+0x9f/0xf0
[  371.185625][T21397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.187925][T21397] RIP: 0033:0x7fbad0b8e929
[  371.189828][T21397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.197705][T21397] RSP: 002b:00007fbad19e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  371.201078][T21397] RAX: ffffffffffffffda RBX: 00007fbad0db5fa0 RCX: 00007fbad0b8e929
[  371.204418][T21397] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000005
[  371.207742][T21397] RBP: 00007fbad0c10b39 R08: 0000000000000000 R09: 0000000000000000
[  371.211053][T21397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.214369][T21397] R13: 0000000000000000 R14: 00007fbad0db5fa0 R15: 00007ffd526a2148
[  371.217651][T21397]  </TASK>
[  371.218947][T21397] Modules linked in:
[  371.220965][T21397] ---[ end trace 0000000000000000 ]---
[  371.223269][T21397] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  371.225624][T21397] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  371.233581][T21397] RSP: 0018:ffffc90004eb70f0 EFLAGS: 00010203
[  371.236122][T21397] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  371.239356][T21397] RDX: ffffc900036e1000 RSI: 00000000000002e8 RDI: 00000000000002e9
[  371.242606][T21397] RBP: dffffc0000000000 R08: ffff88803cc5d640 R09: 0000000000000002
[  371.245700][T21397] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  371.249099][T21397] R13: ffff888039e8e000 R14: 00000000000002ec R15: ffff888039e8e000
[  371.252411][T21397] FS:  00007fbad19e56c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  371.255935][T21397] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  371.258718][T21397] CR2: 00007fbad0b74980 CR3: 0000000122d36000 CR4: 00000000000006f0
[  371.261946][T21397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  371.265196][T21397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  371.268546][T21397] Kernel panic - not syncing: Fatal exception in interrupt
[  371.272283][T21397] Kernel Offset: disabled
[  371.274161][T21397] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:35:12  Registers:
info registers vcpu 0

CPU#0
RAX=ceb506ac702a9f00 RBX=ffffffff81974d58 RCX=ceb506ac702a9f00 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c397e62 CR3=0000000122d36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00030008000c8517 8cdddbfe0070bd29
XMM02=00007fbad0d84478 00007fbad0d84450 XMM03=00007fbad0d84488 00007fbad0d84480
XMM04=00007fbad18ed100 00007fbad0d84440 XMM05=00007fbad0d84458 00007fbad0d844a0
XMM06=00007fbad0d84498 00007fbad0d84490 XMM07=00007fbad0d84488 00007fbad0d84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbad0c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000173f RDI=0000000000001740 RBP=00000000000003f8 RSP=ffffc90004eb6890
R8 =ffff888107aa0237 R9 =1ffff11020f54046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48cb R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbad19e56c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbad0b74980 CR3=0000000122d36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffff000000000000 ff00ff000000ff00 XMM03=ff00ff00ffffffff ff00ff000000ff00
XMM04=00007fbad18ed100 00007fbad0d84440 XMM05=00007fbad0d84458 00007fbad0d844a0
XMM06=00007fbad0d84498 00007fbad0d84490 XMM07=00007fbad0d84488 00007fbad0d84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbad0c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
